last executing test programs: 2.815763875s ago: executing program 2 (id=3170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x501, 0x70bd27, 0x25dfdbfe, {{0x1, 0x0, 0xa6ff}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 2.697878013s ago: executing program 2 (id=3173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_deladdr={0x30, 0x15, 0x10, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0xff, r5}, [@IFA_FLAGS={0x8, 0x8, 0x30}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}]}, 0x30}}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r1, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) 2.649831963s ago: executing program 0 (id=3174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x301, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x18d, &(0x7f0000000300)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x14f, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb, 0x57, 0x0, [], "79a686380616d5f2a82e7a60df7feda36bd207cb0506e46979861def9b443d5debff0f0a3187fbddebd7aace20a04c96898edb110000000000000000ffdb01712a661cc0eb5cc829c1a1df6b58643e95ab9684bef8cdf0"}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [], "b187a1a9ee2642cedde97162355e48be8135c40292c5f6cba53197dc91066a5fde4a1140b3de94674a6f472c71d661a6b5cfed5132ec6857b2f1b3908d5e9bd3a6d59e57c0e45ad7a1597abc1da87689f24c95e2de33b97cc999b200d18c43b5e51a24d868ad6741a070ecb5f3675428c71afbbcee94c71fa17a94730a2c2117ae5b64fa4bee1c04b64289df03af758aa8ed166c3492be107b208cfa11d03635ec2feb40d9df39a8fdbeaebf7c0e07d5e4016bd8"}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.348912622s ago: executing program 0 (id=3178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001900010000007500000000000a000000000000000000004008001e00", @ANYRES64=r0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) accept(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6, r7}) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x48) recvmsg$qrtr(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/18, 0x12}], 0x5, &(0x7f0000001500)=[{0x110, 0x0, 0x0, ""/255}, {0x60, 0x0, 0x0, ""/73}, {0x70, 0x0, 0x0, ""/91}, {0xb0, 0x0, 0x0, ""/157}, {0x40, 0x0, 0x0, ""/48}, {0x48, 0x0, 0x0, ""/52}, {0xd8, 0x0, 0x0, ""/199}], 0x3f0, 0x40000020}, 0x38, 0x40000100) 2.310716291s ago: executing program 2 (id=3179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000002fc0)={&(0x7f0000002e80), 0xc, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbad4f090000007508000300", @ANYRES32, @ANYBLOB="1100070055cf742012ddfe09d8d434a277000000040028000800370002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.049004869s ago: executing program 0 (id=3184): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept4$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @remote, @netrom, @null, @remote, @remote, @remote, @null]}, &(0x7f0000000080)=0x48, 0x100800) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x4000}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x168, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="336a8dee66df"}, @NL80211_ATTR_IE={0x129, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x99, 0xa7}}, @ht={0x2d, 0x1a, {0x4000, 0x1, 0x6, 0x0, {0xc, 0x7, 0x0, 0x18, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x800, 0x3, 0x9}}, @random_vendor={0xdd, 0xf3, "dadafc3e8f917a283d6151023d436b2eb894fd18985c47783a747a4f1613225933012ab83dc99026ee78061241cbfae8ef89295c30c39c032690870cbe3e0818c655ba66d300321e821165acc44d4677b1c804dce51558526d6f0af37a20367ee00381684e75f1da23d612c43f08e72fca6de0fdfbe59393de7ac72bbf1f8906e926e906e3c9be18790775943fb7ffb075e52bddfff578820ad230a853dee1a1e23e7e506cd88150eeeccf0ac14b78f1351b97cccb0fcec5f84049a07dc5d0af1ecc06010e581a1cff50cff2e45d360f7d629eeec47c5c807b29d72147a011a84e4441fa83c94ab4e74090b9ad34e4186fa179"}, @challenge={0x10, 0x1, 0xe9}, @challenge={0x10, 0x1, 0x51}, @cf={0x4, 0x6, {0xa, 0x61, 0x7f, 0x8001}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x50, r1, 0x11175000) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="836a223d2ef39d2c247d01f4b577d7198a127076185b488283892945f7aac546af5b5420e1a01d7fb8d0071b505b9f75dcb93fed4d03d6676a4836556739e79cb47817f8a8bb1df278a2960a0b388b6422ad4ebb4891afa0a6c5c9827e5b422d1974561c7d4138d9dd776d85fbfdb442d6a76f842d83739a53335f798347e75f2cdac89e509e95af7f1eec227df09c72d51ed173df1e0bdb02960bbaa1", 0x9d}], 0x1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000081) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'xfrm0\x00', 0x8000}) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x280400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40001) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r1}, "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"}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10004850}, 0x20000000) r4 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000017c0)={'wlan0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000001800)={0x451, 0x7, 0x2, @remote, 'tunl0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x800, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000001880)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001980)={'ip6tnl0\x00', &(0x7f0000001900)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x1, 0x3, 0x51, @loopback, @empty, 0x80, 0x8000, 0x1, 0x800}}) sendmsg$nl_route_sched(r6, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x9cc0646531c5ca91}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)=@newtfilter={0x78, 0x2c, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xd}, {0xb, 0xb}, {0xffe8, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff000000}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1c00}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x85) (async) r8 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={0xffffffffffffffff, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001b00)=[0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000001b80)=[{}], 0x8, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000001dc0)={0x0, 0x8, 0x5, 0x4b32, @vifc_lcl_ifindex=r9, @broadcast}, 0x10) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001e00), 0x8) sendmsg$NFT_BATCH(r11, &(0x7f0000004f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000004f40)={&(0x7f0000001e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x26f4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x26d4, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x24d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x12a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "2ff948815e31f586aa1e291fed1e1dd4d314684f7e22ece5676dedf2914318bd0ed71b67098652720158ec8b75b5da6f8c56228930245bb9b44830f7d93a0da3aa44df66e39f4be76ac61d748e26a07228173b149c0df4a35331e7937fe35aad7342b9f1f88cf3be20ca275734b7642775a44eda24871e3ba3f548d15461b8447c44f05d9644ea6e396e445bfe317c04afd988dbcbe47c50ced86f47c7624222394668140e9355f1d55fd8711989b5ca6815ebf0d74af84966526b97809617d6eecf2d25851da33cc10c4c1cd0a2"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x75, 0x1, "05df5e39aa8aff4b361a7a078a0ce06692331ed4b3df8148bf2b94ea25d29c9e8c052509f972f4cc001a920a37f679221cf39a8126353ec07d5d8c1cea5e3c8cc0293d30f462813ed72dd69f53f0dba19faa912fe159b582b6a28624af80ecb8fb8275a8b3576e9664da82a2dccdabdffb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x94, 0x1, "996d9570480d7433faa50b924133d0f9d69a335e4a1b904672568cdf797cde8df6dd5366df977a888700d182643a425d8ffe281e3d3d7b081e5f48f2077859e0d09f02072ca5a119d0584b6b1cd8cbcc80d0736839747742e9b00c87939fe867aac0752429fbe4aad112332906989d8d6fe9ab4ec35e3757578af442233c13bbf16528912ea49939f33991c9cb5ae4d9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY_END={0x113c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x65, 0x1, "ad071d2b6e58664860346294a82f8a68cc16331506be9496e69601a52e6e5e0c73dac7bf3939352c9da5e54a4f41b16a8487ceee7a420fe8451ea94e4083723c166f1a45a735ffd600963c9bd620da96b586f29b40a92bf7e6155792c85f72bf30"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "8411ed778db743db262cfd034c0d2b617479e7861fa8c774c4218aa69e2b065f6f9f82efec8497e071103be5eb78b341181b002aa5f1e8b2a5745a3295e7fc487ef59b25036dba0064dda2a44f757015e37988c87860bbe2692b80cb13bced2ac596bd949811515ba05ef287fb4e16d0641f36455aa9a75a707ade7da0b53b51b0684ad6660fc69ff2c74e3257825c228eccfd7eaf8acb97f136bcb674"}]}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "a65ad0d644b4a62fd596dbb7054b57e7630f565f927a555f0f3552f355ed64ef8b8ad91f5025800c92147e0d4321d6068fc65eb77b0a1a35bd102d5c195a5a1c0d26be77803bdbc23b25037c80fb6f598cbaf422778bc2ba1639559c5ff7ab9d3e41e1897075cf72"}, @NFTA_DATA_VALUE={0x55, 0x1, "ed92ee54f243abe62bb55dafd43a3866b78bd9812e9fd99606d2cce864c6a0dc751861d5021fa28f464dd8689de9178e7f624c778b8904647c69bacab74f3634c825651ffc1f6155e650211323e8b4a8c1"}]}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "c3dbcdb6f982cf0253d9191ad417eb347767ba5d1eee24"}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_PREFIX={0x14, 0x2, 0x1, 0x0, '+]}{)&{:@-+].]^\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xb1}, @NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, '/dev/net/tun\x00'}]}}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xd8c}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5c4dba329d6b8a71}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1f35296ac91ac4a7}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5c0}, @NFTA_SET_ELEM_USERDATA={0x12, 0x6, 0x1, 0x0, "bb69f9d2b03574eff9489d8ecd0a"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2ed85f0400000}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x170, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x104, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2a8, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66825e4e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x282318c3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16089e22}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}]}, @NFTA_CHAIN_USERDATA={0xf8, 0xc, "050131120e745f80b1620816ea7142fa1d15e3ac818ce3bfc245fbe9d1fd6f6e7af0ed9d0a8274463bea79b853333d9c070c8b967021ac549d5903c9ee290c27eb3b4eedefdfa14c1eef621d9b3977ffe5aaead0db36a0e3db8d116260ffa1fd7f78bd983af7ef2f51d4a136b43a0d9fdf8e1e043358a9e6da530826e23560e38ff9ca39a0c3283da9a11f781ccf6cf44fe8d502f06fb31130433f4457856cd78b608358a2e65bf2508edc42226587a09dd5c94e86b176ef01dde75472184b2193619ec26d13551914516569005c1132d412e2eb594ce8707335f3e3212217b8b3030201cd9f276a39dc413e0f2119d5d0e07389"}, @NFTA_CHAIN_USERDATA={0xa, 0xc, "a5cee10d6428"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0xe7, 0xc, "3d16a5709bd113bca71c0082382d1024551d2e5562bb909b490596ba89405715b9ad58d45b41d6d7abb055accba0d8bfc8628412477e4f01cf4c64e5a600ad31772d012d0a7fe4760970b18dd95663992f5472add6d3f0ba22a270b09adcd3e4f780c2786dd6d5a9ca943b259dc126e2854e6188297e4579548703fffb4ccd2b45a3058b30e4ec054845ba9484771fd04ab9a5e88e675145e821c74819736670dd6ea22ed484cd31ab0a4db8fa3e23badf05c199a46899e3b7a38bb8b319f95828f51e8df4ef41f2e768c78e349dc8ec0923137d8d1bbc6b82b02592cfc2cc8a6aa8de"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELOBJ={0x134, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xe0, 0x8, "9f6ec3e4c1bcd6a5764847123e5ad9e98efe6a68f38ee89c18e7c79e5d164c40d34c00186cc29b78b221e53bc7b79207d8d05655e22b7284977f24adf4d83b158ab974b6a5b233a8400fa16a0096d912879bfe1c5080af1201f439ba92b2001d8c42ae0a4b4ed4e41dccfae21d1094434d8f59da5d2eee10e4d1aad5d3e2d25851f2290774b8679391f56ad1300bf5ab6355cdfb76057a348a801e2e4a2dd3fa832748bb71e6e89b06dc26c4b41e064d4101f308de0349fd0af4f14d4e7437bfca6ded13fc8851f22fbf501c2dea9406e1e45ea09118d5df2503ed40"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWSETELEM={0x3f8, 0xc, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x260, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "0ed1b9c8c1e9f0182f3199269173232b4ff9d7a32e373ef7f2d639ebe568c09c744e48397ba7393dab3095a559ede261530ee96ccf44ab1e041b9f6966aa1373b3fb6d7eb24172dec319ea6352aa86337336c7a3fc3abfc5babb3f412c577d5fa33d2276304e9a655c7e70dcd27ac7b46a3f86150e77090ff0"}]}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x15c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc75}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x54}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0xa0, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x88}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x44, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x25}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x150, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "97fbdfc20b479aa34e2120bd92e771c3798061710960495566a006fd85e00f9acdeab11901fd5247d94d9862cc29e1e948d13b441fbf071b5910965ac037790dc4bf5ad14f99f678dcd8f4be4ef4cb213c9dbbb1a36d69cbca4026401e"}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "74aee3e7b798d3e30681c59acd53bfc6"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "095d4772a5f1923795cdc287358aecc6a9d70826802441672beeede1c9b619ad7bb8766dc95c2acd3cfe80af3e9639fb082c7632522dfb64e78bd3b1a0d41c723c7be7bc06c69ee7b3f284e3f4b883ad960b336facbc98dc243c9e592d8b24930f91546d1260c469ec0f250392660ef0792430add8d4deeac8e5c2e605e64fbfa0c813e105643aa0f72904d214ee"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x30a8}}, 0x804) (async) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000004fc0)={0x2, 0x3, 0xf8, 0x1, 0x8, 0x2, 0x55, 0x20, 0x3, 0x2, 0x5, 0x7, 0x2, 0x2}, 0xe) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000005080)={{0x0, 0x0, 0x5, 0x0, 0x9, 0x3, 0x401, 0x7, 0x42c0, 0xc, 0x9585, 0x3, 0x0, 0x7, 0x4}, 0x18, [0x0, 0x0, 0x0]}) 1.865851464s ago: executing program 0 (id=3188): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2d, 0xf7, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7800, 0x6, 0x4b18b86f}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', r0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) 1.784187961s ago: executing program 0 (id=3189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) close(r2) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) 1.351652172s ago: executing program 2 (id=3198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = socket(0x10, 0x80002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8}, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11012}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x170, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x178d9e8f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8fb}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa3d6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x7, [0x2, 0x6, 0x1, 0x2, 0xe, 0x1, 0x1]}, &(0x7f0000000180)=0x12) close(0x4) sendmmsg(r0, &(0x7f0000000340), 0x222874f4405e5c0, 0x40840) 1.245535106s ago: executing program 4 (id=3200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, 0x0, &(0x7f0000000240)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x8, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x100}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x3a}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20008850) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.092685603s ago: executing program 3 (id=3204): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x890c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 1.062212467s ago: executing program 4 (id=3205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0xa, 0x1f}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x336f, 0x1, {{0x7, 0x4, 0x3, 0xb, 0x1c, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0x54, 0x0, 0x8, [0x7]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x3, 0x709, 0x70, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1, 0x80, 0xd92c, 0xfffffff7}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b0, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x2, 0x2e4, [0x0, 0x200000000740, 0x200000000770, 0x2000000007a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]}, 0x368) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 900.796591ms ago: executing program 3 (id=3206): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) poll(&(0x7f0000000200)=[{r5, 0x401}], 0x1, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xdc}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x80}]}, 0x44}}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x54, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x10, 0x6071, 0x0, 0xe7, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0xe, @multicast1}, @mss={0x2, 0x4, 0x3}, @timestamp={0x8, 0xa, 0x400040, 0x7fffffff}, @mss={0x2, 0x4, 0x7ff}, @sack={0x5, 0xe, [0x40, 0x8, 0x5]}]}}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000030000000b24c3af703aa440000000000000000203000000090000000000"], 0x0, 0x4a}, 0x28) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 865.232181ms ago: executing program 4 (id=3207): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x198, 0xffffff7a, 0xffffffff, 0x198, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_vlan\x00', {0xff}, 'wlan1\x00', {}, 0x0, 0x6}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 864.438576ms ago: executing program 0 (id=3208): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0xf}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000002fc0)={&(0x7f0000002e80), 0xc, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbad4f090000007508000300", @ANYRES32, @ANYBLOB="1100070055cf742012ddfe09d8d434a277000000040028000800370002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 733.780113ms ago: executing program 4 (id=3210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000006300000085000000760000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 729.65231ms ago: executing program 3 (id=3211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x501, 0x70bd27, 0x25dfdbfe, {{0x1, 0x0, 0xffa1}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 697.47817ms ago: executing program 1 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x80000000, 0x9, 0x3, 0x40800, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, r3, 0x5, 0x4, 0x1, 0x3}, 0x50) 626.073964ms ago: executing program 3 (id=3213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x27b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008890}, 0x8800) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f00000004c0)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x3, 0xf2}]}}, {0x5e22, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x3, 0xffffdd86}}}}}}}, 0x42) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x5a, 0x601, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='j']}]}, 0x18}], 0x1}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0xd62ec72c5dc3f139) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) 544.356833ms ago: executing program 1 (id=3214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x1000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x4000000) 473.83741ms ago: executing program 4 (id=3215): socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r0], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040804) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) 436.741403ms ago: executing program 2 (id=3216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a300000000020000000080a05000000000000000000020000000900010073797a30"], 0x1ce0}}, 0x40000) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r1], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x22ebf5fc018f6bde) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 275.320066ms ago: executing program 3 (id=3217): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0xec0}, 0x0) 214.001457ms ago: executing program 1 (id=3218): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x10, 0x1411, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0xf0ffffff) 212.096672ms ago: executing program 2 (id=3219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 196.077471ms ago: executing program 4 (id=3220): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @null, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe, 0x7}, {0x3, 0x5}, {0x6, 0x2}, {0x7, 0x5}, {0x2, 0x4}, {0x1}, {0x81, 0x3}, {0x7, 0x1}, {0xea, 0x1}, {0xdc, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0xff, 0x4}, {0xff, 0x3}, {0xf, 0x3}, {0x6, 0x4}], "aa4dbcc7fa218d0e"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5}, {0x9, 0x3}, {0x2, 0x3}], "275e9451fe3bf758"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x9, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x24}, {0x10}, {0xb4}, {0xff, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0xa9, 0x1}, {0x8, 0x3}, {0x2, 0x5}, {0x94, 0x6}, {0x57}, {0xf7, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {}, {0x10, 0x4}, {0x8, 0x6}], "c0be9c9defe0a614"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8, 0x3}, {0x9, 0x5}, {0x8, 0x5}, {0x1, 0x5}, {0x8, 0x4}, {0x7}, {0x5, 0x5}, {0x7f, 0x2}, {0x75, 0x4}, {0x7, 0x2}, {0xc, 0x2}, {0x6, 0x2}, {0xfb, 0x4}, {0x6, 0x3}, {0x3, 0x7}, {0x28, 0x4}, {0x2, 0x7}, {0x41, 0x7}], "80ed653122eaecc1"}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x805}, 0x20000040) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2014000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r7, 0xa21, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 179.005404ms ago: executing program 1 (id=3221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) 73.872926ms ago: executing program 3 (id=3222): syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000240)={0x5a, 0x1, 0xb, 0x4, 0xffffffda}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba919736d"], 0x2c}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, r7, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r9, @ANYRES16=r9, @ANYBLOB="000426bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100c2a0d4f4dc9049ec1c4e000000000000e0e6193252d3ef66c13455bbf958141f3d072e188574a4ebc2cddcaa95bd1aa25939b34db07629810c", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="df01825a4800c6f2d1a9dc6544911a91709d8e5bbd23a875b7d57d8a071143e69499f4", @ANYBLOB="08000100", @ANYRES32=r10, @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0xc815}, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x4004800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000900000000008e4024d12e2abedc1d1fd0eab6d801a9c0eeb123e2782d1209616af5f1148783e55060ba40321450a949f0b21af16bda32afd1a7cc7a2fc991cd7679507e6670bd110aac279efc10399e54b5af63548a8f4bda"], 0x44}}, 0x4000000) read(r0, &(0x7f0000000140)=""/186, 0xba) write$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1, @create_logical_link={{0x438, 0x21}, {0xc8, {0x32, 0x7, 0x3, 0x401, 0x7, 0x5}, {0x3, 0x4, 0x3f41, 0x3, 0xfffffffe, 0x6}}}}, 0x25) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111080, 0x0) 73.522789ms ago: executing program 1 (id=3223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {@in, 0x6c}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=3224): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket(0x15, 0xf, 0x0) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipmr_newroute={0x40, 0x18, 0x8, 0x70bd25, 0x25dfdaff, {0x80, 0x80, 0x20, 0x5, 0xfc, 0x0, 0x0, 0x3, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x80000001}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) kernel console output (not intermixed with test programs): 007f08517b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.966428][T13409] RAX: ffffffffffffffda RBX: 00007f0850be5fa0 RCX: 00007f085098f749 [ 326.966443][T13409] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 326.966456][T13409] RBP: 00007f08517b8090 R08: 0000000000000000 R09: 0000000000000000 [ 326.966469][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.966480][T13409] R13: 00007f0850be6038 R14: 00007f0850be5fa0 R15: 00007ffcd571cef8 [ 326.966516][T13409] [ 326.971187][T13413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'. [ 327.172928][T13423] veth0: entered promiscuous mode [ 327.556356][T13420] veth0: left promiscuous mode [ 327.583926][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 327.592046][ C1] lec:lec_tx_timeout: lec0 [ 327.777022][T13454] FAULT_INJECTION: forcing a failure. [ 327.777022][T13454] name failslab, interval 1, probability 0, space 0, times 0 [ 327.793431][T13454] CPU: 0 UID: 0 PID: 13454 Comm: syz.2.2379 Not tainted syzkaller #0 PREEMPT(full) [ 327.793460][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.793472][T13454] Call Trace: [ 327.793480][T13454] [ 327.793488][T13454] dump_stack_lvl+0x189/0x250 [ 327.793519][T13454] ? __pfx____ratelimit+0x10/0x10 [ 327.793545][T13454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.793571][T13454] ? __pfx__printk+0x10/0x10 [ 327.793593][T13454] ? __pfx___might_resched+0x10/0x10 [ 327.793614][T13454] ? fs_reclaim_acquire+0x7d/0x100 [ 327.793638][T13454] should_fail_ex+0x414/0x560 [ 327.793673][T13454] should_failslab+0xa8/0x100 [ 327.793694][T13454] kmem_cache_alloc_noprof+0x74/0x6e0 [ 327.793721][T13454] ? skb_clone+0x212/0x3a0 [ 327.793749][T13454] skb_clone+0x212/0x3a0 [ 327.793768][T13454] ? nfnetlink_rcv+0x4ba/0x2590 [ 327.793797][T13454] nfnetlink_rcv+0x4ec/0x2590 [ 327.793828][T13454] ? is_bpf_text_address+0x26/0x2b0 [ 327.793858][T13454] ? unwind_get_return_address+0x4d/0x90 [ 327.793880][T13454] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 327.793907][T13454] ? arch_stack_walk+0xfc/0x150 [ 327.793942][T13454] ? stack_trace_save+0x9c/0xe0 [ 327.793967][T13454] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 327.794032][T13454] ? __lock_acquire+0xab9/0xd20 [ 327.794062][T13454] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.794100][T13454] netlink_unicast+0x82f/0x9e0 [ 327.794137][T13454] ? __pfx_netlink_unicast+0x10/0x10 [ 327.794167][T13454] ? netlink_sendmsg+0x642/0xb30 [ 327.794183][T13454] ? skb_put+0x11b/0x210 [ 327.794205][T13454] netlink_sendmsg+0x805/0xb30 [ 327.794234][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.794257][T13454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 327.794287][T13454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.794306][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.794326][T13454] __sock_sendmsg+0x21c/0x270 [ 327.794356][T13454] ____sys_sendmsg+0x505/0x830 [ 327.794393][T13454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.794423][T13454] ? import_iovec+0x74/0xa0 [ 327.794451][T13454] ___sys_sendmsg+0x21f/0x2a0 [ 327.794474][T13454] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.794533][T13454] ? __fget_files+0x2a/0x420 [ 327.794550][T13454] ? __fget_files+0x3a0/0x420 [ 327.794580][T13454] __x64_sys_sendmsg+0x19b/0x260 [ 327.794604][T13454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.794636][T13454] ? __pfx_ksys_write+0x10/0x10 [ 327.794667][T13454] ? do_syscall_64+0xbe/0xfa0 [ 327.794700][T13454] do_syscall_64+0xfa/0xfa0 [ 327.794725][T13454] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.794753][T13454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.794772][T13454] ? clear_bhb_loop+0x60/0xb0 [ 327.794795][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.794814][T13454] RIP: 0033:0x7fe74978f749 [ 327.794831][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.794848][T13454] RSP: 002b:00007fe74a5a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.794869][T13454] RAX: ffffffffffffffda RBX: 00007fe7499e5fa0 RCX: 00007fe74978f749 [ 327.794882][T13454] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 327.794894][T13454] RBP: 00007fe74a5a2090 R08: 0000000000000000 R09: 0000000000000000 [ 327.794906][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.794917][T13454] R13: 00007fe7499e6038 R14: 00007fe7499e5fa0 R15: 00007ffef438de18 [ 327.794950][T13454] [ 328.281424][T13463] __nla_validate_parse: 1 callbacks suppressed [ 328.281444][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 328.299044][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 328.316807][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 329.498801][T13448] FAULT_INJECTION: forcing a failure. [ 329.498801][T13448] name failslab, interval 1, probability 0, space 0, times 0 [ 329.512287][T13448] CPU: 0 UID: 0 PID: 13448 Comm: syz.1.2376 Not tainted syzkaller #0 PREEMPT(full) [ 329.512318][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.512331][T13448] Call Trace: [ 329.512339][T13448] [ 329.512348][T13448] dump_stack_lvl+0x189/0x250 [ 329.512382][T13448] ? __pfx____ratelimit+0x10/0x10 [ 329.512410][T13448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.512438][T13448] ? __pfx__printk+0x10/0x10 [ 329.512465][T13448] ? __pfx___might_resched+0x10/0x10 [ 329.512494][T13448] should_fail_ex+0x414/0x560 [ 329.512531][T13448] should_failslab+0xa8/0x100 [ 329.512554][T13448] kmem_cache_alloc_node_noprof+0x77/0x710 [ 329.512587][T13448] ? __alloc_skb+0x112/0x2d0 [ 329.512611][T13448] __alloc_skb+0x112/0x2d0 [ 329.512634][T13448] netlink_ack+0x146/0xa50 [ 329.512663][T13448] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.512709][T13448] netlink_rcv_skb+0x28c/0x470 [ 329.512723][T13448] ? __lock_acquire+0xab9/0xd20 [ 329.512740][T13448] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.512767][T13448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.512793][T13448] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.512815][T13448] netlink_unicast+0x82f/0x9e0 [ 329.512846][T13448] ? __pfx_netlink_unicast+0x10/0x10 [ 329.512871][T13448] ? netlink_sendmsg+0x642/0xb30 [ 329.512886][T13448] ? skb_put+0x11b/0x210 [ 329.512905][T13448] netlink_sendmsg+0x805/0xb30 [ 329.512929][T13448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.512948][T13448] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.512975][T13448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.512991][T13448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.513008][T13448] __sock_sendmsg+0x21c/0x270 [ 329.513034][T13448] ____sys_sendmsg+0x505/0x830 [ 329.513056][T13448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.513082][T13448] ? import_iovec+0x74/0xa0 [ 329.513106][T13448] ___sys_sendmsg+0x21f/0x2a0 [ 329.513180][T13448] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.513228][T13448] ? __fget_files+0x2a/0x420 [ 329.513243][T13448] ? __fget_files+0x3a0/0x420 [ 329.513267][T13448] __x64_sys_sendmsg+0x19b/0x260 [ 329.513288][T13448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.513315][T13448] ? __pfx_ksys_write+0x10/0x10 [ 329.513343][T13448] ? do_syscall_64+0xbe/0xfa0 [ 329.513372][T13448] do_syscall_64+0xfa/0xfa0 [ 329.513394][T13448] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.513423][T13448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.513440][T13448] ? clear_bhb_loop+0x60/0xb0 [ 329.513460][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.513476][T13448] RIP: 0033:0x7fe85858f749 [ 329.513492][T13448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.513506][T13448] RSP: 002b:00007fe8594e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.513524][T13448] RAX: ffffffffffffffda RBX: 00007fe8587e5fa0 RCX: 00007fe85858f749 [ 329.513536][T13448] RDX: 0000000000000000 RSI: 0000200000002180 RDI: 0000000000000003 [ 329.513547][T13448] RBP: 00007fe8594e5090 R08: 0000000000000000 R09: 0000000000000000 [ 329.513557][T13448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.513566][T13448] R13: 00007fe8587e6038 R14: 00007fe8587e5fa0 R15: 00007ffe382ad5b8 [ 329.513594][T13448] [ 329.521913][T13468] tipc: Enabling of bearer rejected, failed to enable media [ 329.778323][T13476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2383'. [ 329.956712][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 329.970164][T13476] bond9 (unregistering): Released all slaves [ 329.976612][T13480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2385'. [ 329.997733][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2383'. [ 330.048986][T13480] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 330.075147][T13480] IPVS: sh: FWM 3 0x00000003 - no destination available [ 330.195742][T13491] FAULT_INJECTION: forcing a failure. [ 330.195742][T13491] name failslab, interval 1, probability 0, space 0, times 0 [ 330.253181][T13491] CPU: 0 UID: 0 PID: 13491 Comm: syz.0.2388 Not tainted syzkaller #0 PREEMPT(full) [ 330.253214][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.253227][T13491] Call Trace: [ 330.253235][T13491] [ 330.253244][T13491] dump_stack_lvl+0x189/0x250 [ 330.253278][T13491] ? __pfx____ratelimit+0x10/0x10 [ 330.253306][T13491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.253345][T13491] ? __pfx__printk+0x10/0x10 [ 330.253373][T13491] ? __lock_acquire+0xab9/0xd20 [ 330.253402][T13491] should_fail_ex+0x414/0x560 [ 330.253440][T13491] should_failslab+0xa8/0x100 [ 330.253465][T13491] kmem_cache_alloc_noprof+0x74/0x6e0 [ 330.253495][T13491] ? skb_clone+0x212/0x3a0 [ 330.253525][T13491] skb_clone+0x212/0x3a0 [ 330.253553][T13491] __netlink_deliver_tap+0x404/0x850 [ 330.253588][T13491] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.253611][T13491] netlink_deliver_tap+0x19c/0x1b0 [ 330.253633][T13491] netlink_unicast+0x7fa/0x9e0 [ 330.253674][T13491] ? __pfx_netlink_unicast+0x10/0x10 [ 330.253706][T13491] ? netlink_sendmsg+0x642/0xb30 [ 330.253724][T13491] ? skb_put+0x11b/0x210 [ 330.253749][T13491] netlink_sendmsg+0x805/0xb30 [ 330.253781][T13491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.253806][T13491] ? aa_sock_msg_perm+0xf1/0x1d0 [ 330.253840][T13491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.253861][T13491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.253883][T13491] __sock_sendmsg+0x21c/0x270 [ 330.253915][T13491] ____sys_sendmsg+0x505/0x830 [ 330.253944][T13491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.253977][T13491] ? import_iovec+0x74/0xa0 [ 330.254008][T13491] ___sys_sendmsg+0x21f/0x2a0 [ 330.254033][T13491] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.254223][T13491] ? __fget_files+0x2a/0x420 [ 330.254245][T13491] ? __fget_files+0x3a0/0x420 [ 330.254276][T13491] __x64_sys_sendmsg+0x19b/0x260 [ 330.254303][T13491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.254345][T13491] ? __pfx_ksys_write+0x10/0x10 [ 330.254381][T13491] ? do_syscall_64+0xbe/0xfa0 [ 330.254415][T13491] do_syscall_64+0xfa/0xfa0 [ 330.254442][T13491] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.254472][T13491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.254493][T13491] ? clear_bhb_loop+0x60/0xb0 [ 330.254518][T13491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.254538][T13491] RIP: 0033:0x7f085098f749 [ 330.254558][T13491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.254575][T13491] RSP: 002b:00007f08517b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.254598][T13491] RAX: ffffffffffffffda RBX: 00007f0850be5fa0 RCX: 00007f085098f749 [ 330.254613][T13491] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 330.254625][T13491] RBP: 00007f08517b8090 R08: 0000000000000000 R09: 0000000000000000 [ 330.254638][T13491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.254650][T13491] R13: 00007f0850be6038 R14: 00007f0850be5fa0 R15: 00007ffcd571cef8 [ 330.254686][T13491] [ 330.671393][T13500] syz.4.2391: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 330.736755][T13500] CPU: 0 UID: 0 PID: 13500 Comm: syz.4.2391 Not tainted syzkaller #0 PREEMPT(full) [ 330.736785][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.736799][T13500] Call Trace: [ 330.736807][T13500] [ 330.736817][T13500] dump_stack_lvl+0x189/0x250 [ 330.736856][T13500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.736887][T13500] ? __pfx__printk+0x10/0x10 [ 330.736909][T13500] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 330.736939][T13500] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 330.736972][T13500] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 330.737004][T13500] warn_alloc+0x214/0x310 [ 330.737036][T13500] ? stack_depot_save_flags+0x40/0x860 [ 330.737074][T13500] ? __pfx_warn_alloc+0x10/0x10 [ 330.737109][T13500] ? kasan_save_track+0x3e/0x80 [ 330.737137][T13500] ? __kasan_kmalloc+0x93/0xb0 [ 330.737169][T13500] ? xsk_setsockopt+0x4dc/0x8d0 [ 330.737191][T13500] ? do_sock_setsockopt+0x17c/0x1b0 [ 330.737211][T13500] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 330.737229][T13500] ? do_syscall_64+0xfa/0xfa0 [ 330.737257][T13500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.737287][T13500] __vmalloc_node_range_noprof+0x125/0x12d0 [ 330.737359][T13500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 330.737396][T13500] ? __kasan_kmalloc+0x93/0xb0 [ 330.737435][T13500] vmalloc_user_noprof+0xad/0xf0 [ 330.737466][T13500] ? xskq_create+0xbf/0x170 [ 330.737495][T13500] xskq_create+0xbf/0x170 [ 330.737526][T13500] xsk_init_queue+0xb0/0x110 [ 330.737557][T13500] xsk_setsockopt+0x4dc/0x8d0 [ 330.737586][T13500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 330.737615][T13500] ? __pfx_aa_sk_perm+0x10/0x10 [ 330.737647][T13500] ? aa_sock_opt_perm+0xff/0x1b0 [ 330.737682][T13500] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 330.737703][T13500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 330.737731][T13500] do_sock_setsockopt+0x17c/0x1b0 [ 330.737758][T13500] __x64_sys_setsockopt+0x13f/0x1b0 [ 330.737787][T13500] do_syscall_64+0xfa/0xfa0 [ 330.737815][T13500] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.737845][T13500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.737866][T13500] ? clear_bhb_loop+0x60/0xb0 [ 330.737892][T13500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.737913][T13500] RIP: 0033:0x7fb430d8f749 [ 330.737933][T13500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.737952][T13500] RSP: 002b:00007fb431cf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 330.737974][T13500] RAX: ffffffffffffffda RBX: 00007fb430fe5fa0 RCX: 00007fb430d8f749 [ 330.737989][T13500] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 330.738002][T13500] RBP: 00007fb430e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 330.738015][T13500] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.738028][T13500] R13: 00007fb430fe6038 R14: 00007fb430fe5fa0 R15: 00007ffe5a9a3b68 [ 330.738065][T13500] [ 330.738087][T13500] Mem-Info: [ 331.077158][T13500] active_anon:8900 inactive_anon:0 isolated_anon:0 [ 331.077158][T13500] active_file:3406 inactive_file:40002 isolated_file:0 [ 331.077158][T13500] unevictable:768 dirty:192 writeback:0 [ 331.077158][T13500] slab_reclaimable:10980 slab_unreclaimable:155489 [ 331.077158][T13500] mapped:31310 shmem:3290 pagetables:1226 [ 331.077158][T13500] sec_pagetables:0 bounce:0 [ 331.077158][T13500] kernel_misc_reclaimable:0 [ 331.077158][T13500] free:1268494 free_pcp:12866 free_cma:0 [ 331.123864][T13500] Node 0 active_anon:35596kB inactive_anon:0kB active_file:13624kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125236kB dirty:772kB writeback:0kB shmem:11648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13692kB pagetables:4636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.220946][T13500] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.258377][T13500] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.293752][T13500] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 331.300163][T13500] Node 0 DMA32 free:1156948kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34796kB inactive_anon:0kB active_file:13624kB inactive_file:159808kB unevictable:1536kB writepending:772kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:39620kB local_pcp:17880kB free_cma:0kB [ 331.352525][T13518] syzkaller0: entered promiscuous mode [ 331.358233][T13518] syzkaller0: entered allmulticast mode [ 331.362788][T13500] lowmem_reserve[]: 0 0 0 0 0 [ 331.368766][T13500] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.369610][T13518] tipc: Enabled bearer , priority 0 [ 331.411993][T13500] lowmem_reserve[]: 0 0 0 0 0 [ 331.417604][T13500] Node 1 Normal free:3903268kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12064kB local_pcp:6368kB free_cma:0kB [ 331.462863][T13517] tipc: Resetting bearer [ 331.482723][T13500] lowmem_reserve[]: 0 0 0 0 0 [ 331.499427][T13500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.516415][T13517] tipc: Disabling bearer [ 331.575355][T13500] Node 0 DMA32: 577*4kB (UM) 366*8kB (UME) 281*16kB (UM) 203*32kB (UME) 119*64kB (UME) 17*128kB (UME) 7*256kB (UME) 9*512kB (UME) 14*1024kB (UME) 4*2048kB (UM) 271*4096kB (UM) = 1164964kB [ 331.580171][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 331.672057][T13500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 331.700471][T13536] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 331.703084][T13500] Node 1 Normal: 219*4kB (UME) 61*8kB (UME) 49*16kB (UME) 162*32kB (UME) 40*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3903268kB [ 331.711033][T13539] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2400'. [ 331.754969][T13530] bond5 (unregistering): Released all slaves [ 331.758140][T13536] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 331.791454][T13500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.802155][T13500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.811851][T13500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.832776][T13500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.833398][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2399'. [ 331.850249][T13500] 44775 total pagecache pages [ 331.860593][T13500] 0 pages in swap cache [ 331.870709][T13500] Free swap = 124996kB [ 331.878045][T13500] Total swap = 124996kB [ 331.884775][T13544] FAULT_INJECTION: forcing a failure. [ 331.884775][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 331.885153][T13500] 2097051 pages RAM [ 331.914980][T13500] 0 pages HighMem/MovableOnly [ 331.919854][T13500] 424120 pages reserved [ 331.928437][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.3.2404 Not tainted syzkaller #0 PREEMPT(full) [ 331.928467][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.928481][T13544] Call Trace: [ 331.928489][T13544] [ 331.928498][T13544] dump_stack_lvl+0x189/0x250 [ 331.928532][T13544] ? __pfx____ratelimit+0x10/0x10 [ 331.928561][T13544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.928589][T13544] ? __pfx__printk+0x10/0x10 [ 331.928618][T13544] ? __pfx___might_resched+0x10/0x10 [ 331.928647][T13544] should_fail_ex+0x414/0x560 [ 331.928685][T13544] should_failslab+0xa8/0x100 [ 331.928708][T13544] __kmalloc_noprof+0xcb/0x7f0 [ 331.928738][T13544] ? nf_tables_newrule+0x150b/0x28a0 [ 331.928764][T13544] ? nla_strcmp+0x106/0x140 [ 331.928790][T13544] nf_tables_newrule+0x150b/0x28a0 [ 331.928835][T13544] ? __pfx_nf_tables_newrule+0x10/0x10 [ 331.928862][T13544] ? nfnl_pernet+0x23/0x240 [ 331.928902][T13544] ? __nla_parse+0x40/0x60 [ 331.928941][T13544] nfnetlink_rcv+0x11d9/0x2590 [ 331.929012][T13544] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 331.929100][T13544] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.929141][T13544] netlink_unicast+0x82f/0x9e0 [ 331.929188][T13544] ? __pfx_netlink_unicast+0x10/0x10 [ 331.929221][T13544] ? netlink_sendmsg+0x642/0xb30 [ 331.929239][T13544] ? skb_put+0x11b/0x210 [ 331.929263][T13544] netlink_sendmsg+0x805/0xb30 [ 331.929295][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.929320][T13544] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.929353][T13544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.929375][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.929397][T13544] __sock_sendmsg+0x21c/0x270 [ 331.929429][T13544] ____sys_sendmsg+0x505/0x830 [ 331.929459][T13544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.929492][T13544] ? import_iovec+0x74/0xa0 [ 331.929522][T13544] ___sys_sendmsg+0x21f/0x2a0 [ 331.929548][T13544] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.929611][T13544] ? __fget_files+0x2a/0x420 [ 331.929630][T13544] ? __fget_files+0x3a0/0x420 [ 331.929662][T13544] __x64_sys_sendmsg+0x19b/0x260 [ 331.929688][T13544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.929721][T13544] ? __pfx_ksys_write+0x10/0x10 [ 331.929755][T13544] ? do_syscall_64+0xbe/0xfa0 [ 331.929790][T13544] do_syscall_64+0xfa/0xfa0 [ 331.929816][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.929845][T13544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.929866][T13544] ? clear_bhb_loop+0x60/0xb0 [ 331.929892][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.929911][T13544] RIP: 0033:0x7f33a258f749 [ 331.929939][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.929957][T13544] RSP: 002b:00007f33a34f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.929978][T13544] RAX: ffffffffffffffda RBX: 00007f33a27e5fa0 RCX: 00007f33a258f749 [ 331.929993][T13544] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 331.930005][T13544] RBP: 00007f33a34f4090 R08: 0000000000000000 R09: 0000000000000000 [ 331.930018][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.930029][T13544] R13: 00007f33a27e6038 R14: 00007f33a27e5fa0 R15: 00007ffe2a631d18 [ 331.930065][T13544] [ 331.930307][T13500] 0 pages cma reserved [ 332.237567][T13552] syzkaller0: entered promiscuous mode [ 332.272102][T13552] syzkaller0: entered allmulticast mode [ 332.317467][T13554] FAULT_INJECTION: forcing a failure. [ 332.317467][T13554] name failslab, interval 1, probability 0, space 0, times 0 [ 332.330490][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.4.2408 Not tainted syzkaller #0 PREEMPT(full) [ 332.330520][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.330533][T13554] Call Trace: [ 332.330541][T13554] [ 332.330549][T13554] dump_stack_lvl+0x189/0x250 [ 332.330590][T13554] ? __pfx____ratelimit+0x10/0x10 [ 332.330618][T13554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.330646][T13554] ? __pfx__printk+0x10/0x10 [ 332.330674][T13554] ? __pfx___might_resched+0x10/0x10 [ 332.330703][T13554] should_fail_ex+0x414/0x560 [ 332.330739][T13554] should_failslab+0xa8/0x100 [ 332.330762][T13554] kmem_cache_alloc_node_noprof+0x77/0x710 [ 332.330792][T13554] ? __alloc_skb+0x112/0x2d0 [ 332.330818][T13554] __alloc_skb+0x112/0x2d0 [ 332.330842][T13554] netlink_ack+0x146/0xa50 [ 332.330876][T13554] ? rcu_is_watching+0x15/0xb0 [ 332.330899][T13554] ? trace_contention_end+0x39/0x120 [ 332.330937][T13554] netlink_rcv_skb+0x28c/0x470 [ 332.330958][T13554] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 332.330986][T13554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.331023][T13554] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.331043][T13554] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.331066][T13554] xfrm_netlink_rcv+0x79/0x90 [ 332.331091][T13554] netlink_unicast+0x82f/0x9e0 [ 332.331139][T13554] ? __pfx_netlink_unicast+0x10/0x10 [ 332.331171][T13554] ? netlink_sendmsg+0x642/0xb30 [ 332.331204][T13554] ? skb_put+0x11b/0x210 [ 332.331229][T13554] netlink_sendmsg+0x805/0xb30 [ 332.331260][T13554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.331285][T13554] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.331318][T13554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.331339][T13554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.331361][T13554] __sock_sendmsg+0x21c/0x270 [ 332.331392][T13554] ____sys_sendmsg+0x505/0x830 [ 332.331426][T13554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.331460][T13554] ? import_iovec+0x74/0xa0 [ 332.331491][T13554] ___sys_sendmsg+0x21f/0x2a0 [ 332.331516][T13554] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.331582][T13554] ? __fget_files+0x2a/0x420 [ 332.331600][T13554] ? __fget_files+0x3a0/0x420 [ 332.331632][T13554] __x64_sys_sendmsg+0x19b/0x260 [ 332.331674][T13554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.331708][T13554] ? __pfx_ksys_write+0x10/0x10 [ 332.331742][T13554] ? do_syscall_64+0xbe/0xfa0 [ 332.331777][T13554] do_syscall_64+0xfa/0xfa0 [ 332.331804][T13554] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.331833][T13554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.331854][T13554] ? clear_bhb_loop+0x60/0xb0 [ 332.331880][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.331987][T13554] RIP: 0033:0x7fb430d8f749 [ 332.332009][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.332027][T13554] RSP: 002b:00007fb431cf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.332050][T13554] RAX: ffffffffffffffda RBX: 00007fb430fe5fa0 RCX: 00007fb430d8f749 [ 332.332097][T13554] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 332.332109][T13554] RBP: 00007fb431cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 332.332122][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.332133][T13554] R13: 00007fb430fe6038 R14: 00007fb430fe5fa0 R15: 00007ffe5a9a3b68 [ 332.332169][T13554] [ 332.768500][T13552] tipc: Enabled bearer , priority 0 [ 332.784931][T13551] tipc: Resetting bearer [ 332.858704][T13551] tipc: Disabling bearer [ 332.872374][T13565] FAULT_INJECTION: forcing a failure. [ 332.872374][T13565] name failslab, interval 1, probability 0, space 0, times 0 [ 332.890210][T13565] CPU: 0 UID: 0 PID: 13565 Comm: syz.4.2413 Not tainted syzkaller #0 PREEMPT(full) [ 332.890238][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.890251][T13565] Call Trace: [ 332.890259][T13565] [ 332.890268][T13565] dump_stack_lvl+0x189/0x250 [ 332.890301][T13565] ? __pfx____ratelimit+0x10/0x10 [ 332.890330][T13565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.890357][T13565] ? __pfx__printk+0x10/0x10 [ 332.890386][T13565] ? __pfx___might_resched+0x10/0x10 [ 332.890408][T13565] ? fs_reclaim_acquire+0x7d/0x100 [ 332.890433][T13565] should_fail_ex+0x414/0x560 [ 332.890471][T13565] should_failslab+0xa8/0x100 [ 332.890495][T13565] kmem_cache_alloc_noprof+0x74/0x6e0 [ 332.890525][T13565] ? security_inode_alloc+0x39/0x330 [ 332.890564][T13565] security_inode_alloc+0x39/0x330 [ 332.890598][T13565] inode_init_always_gfp+0x9ed/0xdc0 [ 332.890638][T13565] ? __pfx_sock_alloc_inode+0x10/0x10 [ 332.890665][T13565] alloc_inode+0x82/0x1b0 [ 332.890698][T13565] __sock_create+0x12d/0x9f0 [ 332.890725][T13565] ? __lock_acquire+0xab9/0xd20 [ 332.890743][T13565] ? look_up_lock_class+0x74/0x170 [ 332.890792][T13565] mptcp_subflow_create_socket+0xf0/0x7d0 [ 332.890816][T13565] ? __lock_acquire+0xab9/0xd20 [ 332.890840][T13565] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 332.890874][T13565] __mptcp_nmpc_sk+0x148/0x760 [ 332.890897][T13565] ? __local_bh_enable_ip+0x12d/0x1c0 [ 332.890920][T13565] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 332.890954][T13565] mptcp_getsockopt+0x10f3/0x1be0 [ 332.890977][T13565] ? 0xffffffff81000000 [ 332.891004][T13565] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 332.891025][T13565] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 332.891053][T13565] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 332.891101][T13565] ? __lock_acquire+0xab9/0xd20 [ 332.891135][T13565] ? __lock_acquire+0xab9/0xd20 [ 332.891184][T13565] ? __lock_acquire+0xab9/0xd20 [ 332.891221][T13565] ? __lock_acquire+0xab9/0xd20 [ 332.891254][T13565] ? __might_fault+0xb0/0x130 [ 332.891285][T13565] ? _parse_integer_limit+0x1ae/0x1f0 [ 332.891305][T13565] ? aa_label_sk_perm+0x4cd/0x630 [ 332.891344][T13565] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 332.891406][T13565] ? __lock_acquire+0xab9/0xd20 [ 332.891439][T13565] ? __might_fault+0xb0/0x130 [ 332.891487][T13565] ? sock_common_getsockopt+0x2d/0xb0 [ 332.891515][T13565] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 332.891548][T13565] do_sock_getsockopt+0x372/0x450 [ 332.891569][T13565] ? 0xffffffff81000000 [ 332.891607][T13565] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 332.891628][T13565] ? do_syscall_64+0xa0/0xfa0 [ 332.891657][T13565] ? __fget_files+0x2a/0x420 [ 332.891675][T13565] ? __fget_files+0x3a0/0x420 [ 332.891694][T13565] ? __fget_files+0x2a/0x420 [ 332.891722][T13565] __x64_sys_getsockopt+0x1a5/0x250 [ 332.891743][T13565] ? do_syscall_64+0xa0/0xfa0 [ 332.891776][T13565] ? 0xffffffff81000000 [ 332.891793][T13565] ? do_syscall_64+0xa0/0xfa0 [ 332.891826][T13565] do_syscall_64+0xfa/0xfa0 [ 332.891854][T13565] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.891883][T13565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.891904][T13565] ? clear_bhb_loop+0x60/0xb0 [ 332.891930][T13565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.891949][T13565] RIP: 0033:0x7fb430d8f749 [ 332.891967][T13565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.891985][T13565] RSP: 002b:00007fb431cf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 332.892006][T13565] RAX: ffffffffffffffda RBX: 00007fb430fe5fa0 RCX: 00007fb430d8f749 [ 332.892021][T13565] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 332.892032][T13565] RBP: 00007fb431cf1090 R08: 0000200000000340 R09: 0000000000000000 [ 332.892045][T13565] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.892058][T13565] R13: 00007fb430fe6038 R14: 00007fb430fe5fa0 R15: 00007ffe5a9a3b68 [ 332.892079][T13565] ? 0xffffffff81000000 [ 332.892107][T13565] [ 332.892143][T13565] socket: no more sockets [ 332.898203][T13568] ip6t_srh: unknown srh invflags 4000 [ 333.355145][T13570] bond3 (unregistering): Released all slaves [ 333.677617][T13602] FAULT_INJECTION: forcing a failure. [ 333.677617][T13602] name failslab, interval 1, probability 0, space 0, times 0 [ 333.695274][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.2.2421 Not tainted syzkaller #0 PREEMPT(full) [ 333.695304][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.695317][T13602] Call Trace: [ 333.695325][T13602] [ 333.695333][T13602] dump_stack_lvl+0x189/0x250 [ 333.695367][T13602] ? __pfx____ratelimit+0x10/0x10 [ 333.695395][T13602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.695422][T13602] ? __pfx__printk+0x10/0x10 [ 333.695445][T13602] ? __pfx___might_resched+0x10/0x10 [ 333.695467][T13602] ? fs_reclaim_acquire+0x7d/0x100 [ 333.695492][T13602] should_fail_ex+0x414/0x560 [ 333.695531][T13602] should_failslab+0xa8/0x100 [ 333.695554][T13602] __kmalloc_cache_noprof+0x6f/0x6f0 [ 333.695583][T13602] ? nfnetlink_rcv+0xf97/0x2590 [ 333.695611][T13602] ? __nla_parse+0x40/0x60 [ 333.695638][T13602] nfnetlink_rcv+0xf97/0x2590 [ 333.695703][T13602] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.695890][T13602] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.695934][T13602] netlink_unicast+0x82f/0x9e0 [ 333.695973][T13602] ? __pfx_netlink_unicast+0x10/0x10 [ 333.696024][T13602] ? netlink_sendmsg+0x642/0xb30 [ 333.696042][T13602] ? skb_put+0x11b/0x210 [ 333.696066][T13602] netlink_sendmsg+0x805/0xb30 [ 333.696096][T13602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.696120][T13602] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.696153][T13602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.696175][T13602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.696196][T13602] __sock_sendmsg+0x21c/0x270 [ 333.696229][T13602] ____sys_sendmsg+0x505/0x830 [ 333.696259][T13602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.696294][T13602] ? import_iovec+0x74/0xa0 [ 333.696326][T13602] ___sys_sendmsg+0x21f/0x2a0 [ 333.696351][T13602] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.696416][T13602] ? __fget_files+0x2a/0x420 [ 333.696434][T13602] ? __fget_files+0x3a0/0x420 [ 333.696466][T13602] __x64_sys_sendmsg+0x19b/0x260 [ 333.696491][T13602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.696524][T13602] ? __pfx_ksys_write+0x10/0x10 [ 333.696557][T13602] ? do_syscall_64+0xbe/0xfa0 [ 333.696589][T13602] do_syscall_64+0xfa/0xfa0 [ 333.696616][T13602] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.696644][T13602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.696664][T13602] ? clear_bhb_loop+0x60/0xb0 [ 333.696689][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.696709][T13602] RIP: 0033:0x7fe74978f749 [ 333.696728][T13602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.696746][T13602] RSP: 002b:00007fe74a5a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.696767][T13602] RAX: ffffffffffffffda RBX: 00007fe7499e5fa0 RCX: 00007fe74978f749 [ 333.696782][T13602] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 333.696794][T13602] RBP: 00007fe74a5a2090 R08: 0000000000000000 R09: 0000000000000000 [ 333.696807][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.696818][T13602] R13: 00007fe7499e6038 R14: 00007fe7499e5fa0 R15: 00007ffef438de18 [ 333.696852][T13602] [ 334.258373][T13620] syzkaller0: entered promiscuous mode [ 334.263957][T13620] syzkaller0: entered allmulticast mode [ 334.314089][T13623] FAULT_INJECTION: forcing a failure. [ 334.314089][T13623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.328972][T13623] CPU: 0 UID: 0 PID: 13623 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) [ 334.329002][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.329016][T13623] Call Trace: [ 334.329024][T13623] [ 334.329033][T13623] dump_stack_lvl+0x189/0x250 [ 334.329067][T13623] ? __pfx____ratelimit+0x10/0x10 [ 334.329095][T13623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.329124][T13623] ? __pfx__printk+0x10/0x10 [ 334.329145][T13623] ? __might_fault+0xb0/0x130 [ 334.329189][T13623] should_fail_ex+0x414/0x560 [ 334.329226][T13623] _copy_from_user+0x2d/0xb0 [ 334.329254][T13623] do_tcp_getsockopt+0x1dd/0x2680 [ 334.329282][T13623] ? 0xffffffff81000000 [ 334.329305][T13623] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 334.329338][T13623] ? call_rcu+0x6ff/0x9c0 [ 334.329362][T13623] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.329404][T13623] ? fsnotify_grab_connector+0x42/0x240 [ 334.329433][T13623] ? __pfx_call_rcu+0x10/0x10 [ 334.329457][T13623] ? fsnotify_destroy_marks+0x81/0x330 [ 334.329484][T13623] ? locks_free_lock_context+0x42/0x70 [ 334.329511][T13623] ? __destroy_inode+0x487/0x670 [ 334.329539][T13623] ? _raw_spin_unlock_irq+0x2e/0x50 [ 334.329565][T13623] ? __pfx_sock_free_inode+0x10/0x10 [ 334.329596][T13623] ? evict+0x847/0x9c0 [ 334.329631][T13623] ? __pfx_evict+0x10/0x10 [ 334.329653][T13623] ? do_raw_spin_unlock+0x122/0x240 [ 334.329694][T13623] ? _raw_spin_unlock+0x28/0x50 [ 334.329719][T13623] ? iput+0x946/0xc50 [ 334.329748][T13623] ? __mptcp_nmpc_sk+0x5da/0x760 [ 334.329771][T13623] ? 0xffffffff81000000 [ 334.329790][T13623] tcp_getsockopt+0x83/0x130 [ 334.329822][T13623] mptcp_getsockopt+0xeac/0x1be0 [ 334.329845][T13623] ? 0xffffffff81000000 [ 334.329870][T13623] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 334.329890][T13623] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 334.329919][T13623] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 334.329968][T13623] ? __lock_acquire+0xab9/0xd20 [ 334.330002][T13623] ? __lock_acquire+0xab9/0xd20 [ 334.330051][T13623] ? __lock_acquire+0xab9/0xd20 [ 334.330087][T13623] ? __lock_acquire+0xab9/0xd20 [ 334.330119][T13623] ? __might_fault+0xb0/0x130 [ 334.330149][T13623] ? _parse_integer_limit+0x1ae/0x1f0 [ 334.330168][T13623] ? aa_label_sk_perm+0x4cd/0x630 [ 334.330208][T13623] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 334.330270][T13623] ? __lock_acquire+0xab9/0xd20 [ 334.330302][T13623] ? __might_fault+0xb0/0x130 [ 334.330350][T13623] ? sock_common_getsockopt+0x2d/0xb0 [ 334.330378][T13623] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 334.330410][T13623] do_sock_getsockopt+0x372/0x450 [ 334.330432][T13623] ? 0xffffffff81000000 [ 334.330449][T13623] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 334.330470][T13623] ? do_syscall_64+0xa0/0xfa0 [ 334.330498][T13623] ? __fget_files+0x2a/0x420 [ 334.330517][T13623] ? __fget_files+0x3a0/0x420 [ 334.330535][T13623] ? __fget_files+0x2a/0x420 [ 334.330563][T13623] __x64_sys_getsockopt+0x1a5/0x250 [ 334.330584][T13623] ? do_syscall_64+0xa0/0xfa0 [ 334.330612][T13623] ? 0xffffffff81000000 [ 334.330628][T13623] ? do_syscall_64+0xa0/0xfa0 [ 334.330662][T13623] do_syscall_64+0xfa/0xfa0 [ 334.330694][T13623] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.330723][T13623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.330744][T13623] ? clear_bhb_loop+0x60/0xb0 [ 334.330769][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.330789][T13623] RIP: 0033:0x7fe85858f749 [ 334.330806][T13623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.330824][T13623] RSP: 002b:00007fe8594e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 334.330846][T13623] RAX: ffffffffffffffda RBX: 00007fe8587e5fa0 RCX: 00007fe85858f749 [ 334.330861][T13623] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 334.330873][T13623] RBP: 00007fe8594e5090 R08: 0000200000000340 R09: 0000000000000000 [ 334.330886][T13623] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.330900][T13623] R13: 00007fe8587e6038 R14: 00007fe8587e5fa0 R15: 00007ffe382ad5b8 [ 334.330920][T13623] ? 0xffffffff81000000 [ 334.330950][T13623] [ 334.807108][T13620] tipc: Enabled bearer , priority 0 [ 334.902564][T13619] tipc: Resetting bearer [ 335.004117][T13619] tipc: Disabling bearer [ 335.313316][T13663] __nla_validate_parse: 3 callbacks suppressed [ 335.313336][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'. [ 335.487527][T13672] FAULT_INJECTION: forcing a failure. [ 335.487527][T13672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.523759][T13672] CPU: 1 UID: 0 PID: 13672 Comm: syz.2.2451 Not tainted syzkaller #0 PREEMPT(full) [ 335.523790][T13672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.523802][T13672] Call Trace: [ 335.523810][T13672] [ 335.523820][T13672] dump_stack_lvl+0x189/0x250 [ 335.523854][T13672] ? __pfx____ratelimit+0x10/0x10 [ 335.523883][T13672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.523912][T13672] ? __pfx__printk+0x10/0x10 [ 335.523948][T13672] should_fail_ex+0x414/0x560 [ 335.523987][T13672] _copy_to_user+0x31/0xb0 [ 335.524016][T13672] do_tcp_getsockopt+0x1678/0x2680 [ 335.524045][T13672] ? 0xffffffff81000000 [ 335.524067][T13672] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 335.524100][T13672] ? call_rcu+0x6ff/0x9c0 [ 335.524125][T13672] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.524165][T13672] ? fsnotify_grab_connector+0x42/0x240 [ 335.524193][T13672] ? __pfx_call_rcu+0x10/0x10 [ 335.524216][T13672] ? fsnotify_destroy_marks+0x81/0x330 [ 335.524242][T13672] ? locks_free_lock_context+0x42/0x70 [ 335.524268][T13672] ? __destroy_inode+0x487/0x670 [ 335.524297][T13672] ? _raw_spin_unlock_irq+0x2e/0x50 [ 335.524322][T13672] ? __pfx_sock_free_inode+0x10/0x10 [ 335.524352][T13672] ? evict+0x847/0x9c0 [ 335.524388][T13672] ? __pfx_evict+0x10/0x10 [ 335.524410][T13672] ? do_raw_spin_unlock+0x122/0x240 [ 335.524442][T13672] ? _raw_spin_unlock+0x28/0x50 [ 335.524467][T13672] ? iput+0x946/0xc50 [ 335.524496][T13672] ? __mptcp_nmpc_sk+0x5da/0x760 [ 335.524519][T13672] ? 0xffffffff81000000 [ 335.524538][T13672] tcp_getsockopt+0x83/0x130 [ 335.524579][T13672] mptcp_getsockopt+0xeac/0x1be0 [ 335.524602][T13672] ? 0xffffffff81000000 [ 335.524628][T13672] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 335.524648][T13672] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 335.524677][T13672] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 335.524724][T13672] ? __lock_acquire+0xab9/0xd20 [ 335.524758][T13672] ? __lock_acquire+0xab9/0xd20 [ 335.524807][T13672] ? __lock_acquire+0xab9/0xd20 [ 335.524844][T13672] ? __lock_acquire+0xab9/0xd20 [ 335.524875][T13672] ? __might_fault+0xb0/0x130 [ 335.524907][T13672] ? _parse_integer_limit+0x1ae/0x1f0 [ 335.524926][T13672] ? aa_label_sk_perm+0x4cd/0x630 [ 335.524965][T13672] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 335.525027][T13672] ? __lock_acquire+0xab9/0xd20 [ 335.525060][T13672] ? __might_fault+0xb0/0x130 [ 335.525107][T13672] ? sock_common_getsockopt+0x2d/0xb0 [ 335.525135][T13672] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 335.525166][T13672] do_sock_getsockopt+0x372/0x450 [ 335.525187][T13672] ? 0xffffffff81000000 [ 335.525205][T13672] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 335.525227][T13672] ? do_syscall_64+0xa0/0xfa0 [ 335.525255][T13672] ? __fget_files+0x2a/0x420 [ 335.525273][T13672] ? __fget_files+0x3a0/0x420 [ 335.525292][T13672] ? __fget_files+0x2a/0x420 [ 335.525319][T13672] __x64_sys_getsockopt+0x1a5/0x250 [ 335.525340][T13672] ? do_syscall_64+0xa0/0xfa0 [ 335.525366][T13672] ? 0xffffffff81000000 [ 335.525382][T13672] ? do_syscall_64+0xa0/0xfa0 [ 335.525415][T13672] do_syscall_64+0xfa/0xfa0 [ 335.525442][T13672] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.525470][T13672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.525491][T13672] ? clear_bhb_loop+0x60/0xb0 [ 335.525516][T13672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.525535][T13672] RIP: 0033:0x7fe74978f749 [ 335.525560][T13672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.525578][T13672] RSP: 002b:00007fe74a5a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 335.525600][T13672] RAX: ffffffffffffffda RBX: 00007fe7499e5fa0 RCX: 00007fe74978f749 [ 335.525614][T13672] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 335.525626][T13672] RBP: 00007fe74a5a2090 R08: 0000200000000340 R09: 0000000000000000 [ 335.525638][T13672] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.525650][T13672] R13: 00007fe7499e6038 R14: 00007fe7499e5fa0 R15: 00007ffef438de18 [ 335.525671][T13672] ? 0xffffffff81000000 [ 335.525699][T13672] [ 336.054712][T13689] tipc: Enabling of bearer rejected, failed to enable media [ 336.389314][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2461'. [ 336.398999][T13705] netlink: 'syz.2.2461': attribute type 7 has an invalid length. [ 336.407582][T13705] netlink: 'syz.2.2461': attribute type 8 has an invalid length. [ 336.427361][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'. [ 336.460539][T13707] FAULT_INJECTION: forcing a failure. [ 336.460539][T13707] name failslab, interval 1, probability 0, space 0, times 0 [ 336.482835][T13707] CPU: 0 UID: 0 PID: 13707 Comm: syz.0.2463 Not tainted syzkaller #0 PREEMPT(full) [ 336.482865][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.482878][T13707] Call Trace: [ 336.482886][T13707] [ 336.482894][T13707] dump_stack_lvl+0x189/0x250 [ 336.482926][T13707] ? __pfx____ratelimit+0x10/0x10 [ 336.482955][T13707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.483002][T13707] ? __pfx__printk+0x10/0x10 [ 336.483030][T13707] ? __pfx___might_resched+0x10/0x10 [ 336.483058][T13707] should_fail_ex+0x414/0x560 [ 336.483094][T13707] should_failslab+0xa8/0x100 [ 336.483117][T13707] kmem_cache_alloc_node_noprof+0x77/0x710 [ 336.483148][T13707] ? __alloc_skb+0x112/0x2d0 [ 336.483165][T13707] ? __pfx_nf_tables_abort+0x10/0x10 [ 336.483195][T13707] __alloc_skb+0x112/0x2d0 [ 336.483218][T13707] netlink_ack+0x146/0xa50 [ 336.483258][T13707] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 336.483298][T13707] nfnetlink_rcv+0x2309/0x2590 [ 336.483365][T13707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 336.483412][T13707] ? ref_tracker_free+0x63a/0x7d0 [ 336.483464][T13707] ? __netlink_deliver_tap+0x807/0x850 [ 336.483484][T13707] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.483524][T13707] netlink_unicast+0x82f/0x9e0 [ 336.483563][T13707] ? __pfx_netlink_unicast+0x10/0x10 [ 336.483617][T13707] ? netlink_sendmsg+0x642/0xb30 [ 336.483636][T13707] ? skb_put+0x11b/0x210 [ 336.483660][T13707] netlink_sendmsg+0x805/0xb30 [ 336.483690][T13707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.483714][T13707] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.483748][T13707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.483768][T13707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.483789][T13707] __sock_sendmsg+0x21c/0x270 [ 336.483824][T13707] ____sys_sendmsg+0x505/0x830 [ 336.483854][T13707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.483887][T13707] ? import_iovec+0x74/0xa0 [ 336.483917][T13707] ___sys_sendmsg+0x21f/0x2a0 [ 336.483943][T13707] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.484006][T13707] ? __fget_files+0x2a/0x420 [ 336.484025][T13707] ? __fget_files+0x3a0/0x420 [ 336.484056][T13707] __x64_sys_sendmsg+0x19b/0x260 [ 336.484082][T13707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.484116][T13707] ? __pfx_ksys_write+0x10/0x10 [ 336.484150][T13707] ? do_syscall_64+0xbe/0xfa0 [ 336.484183][T13707] do_syscall_64+0xfa/0xfa0 [ 336.484210][T13707] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.484238][T13707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.484259][T13707] ? clear_bhb_loop+0x60/0xb0 [ 336.484284][T13707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.484304][T13707] RIP: 0033:0x7f085098f749 [ 336.484322][T13707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.484340][T13707] RSP: 002b:00007f08517b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.484363][T13707] RAX: ffffffffffffffda RBX: 00007f0850be5fa0 RCX: 00007f085098f749 [ 336.484378][T13707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 336.484391][T13707] RBP: 00007f08517b8090 R08: 0000000000000000 R09: 0000000000000000 [ 336.484403][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.484415][T13707] R13: 00007f0850be6038 R14: 00007f0850be5fa0 R15: 00007ffcd571cef8 [ 336.484450][T13707] [ 337.364400][T13735] syzkaller0: entered promiscuous mode [ 337.377699][T13735] syzkaller0: entered allmulticast mode [ 337.417176][T13737] Cannot find add_set index 2 as target [ 337.437898][T13735] tipc: Enabled bearer , priority 0 [ 337.458466][T13734] tipc: Resetting bearer [ 337.515959][T13734] tipc: Disabling bearer [ 337.684088][T13747] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 337.728859][T13747] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 337.760355][T13746] tipc: Enabled bearer , priority 0 [ 337.769278][T13746] syzkaller0: entered promiscuous mode [ 337.775048][T13746] syzkaller0: entered allmulticast mode [ 337.813306][T13746] tipc: Resetting bearer [ 337.881462][T13745] tipc: Resetting bearer [ 337.889848][T13753] openvswitch: netlink: Message has 8 unknown bytes. [ 337.918827][T13753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.928670][T13745] tipc: Disabling bearer [ 337.965123][T13753] tipc: Enabling of bearer rejected, failed to enable media [ 338.211895][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 338.583007][T13787] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2490'. [ 339.122955][T13813] netlink: 'syz.2.2500': attribute type 16 has an invalid length. [ 339.152798][T13813] netlink: 'syz.2.2500': attribute type 17 has an invalid length. [ 339.237098][T13813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.267025][T13813] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.298771][T13813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.329560][T13825] netlink: 'syz.0.2503': attribute type 29 has an invalid length. [ 339.339270][T13820] netlink: 'syz.0.2503': attribute type 29 has an invalid length. [ 339.373575][T13820] netlink: 'syz.0.2503': attribute type 29 has an invalid length. [ 339.403589][T13820] netlink: 'syz.0.2503': attribute type 29 has an invalid length. [ 339.432897][T13820] pimreg3: entered allmulticast mode [ 339.497402][T13830] netlink: 'syz.1.2507': attribute type 27 has an invalid length. [ 339.548987][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 339.607600][T13840] FAULT_INJECTION: forcing a failure. [ 339.607600][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 339.652867][T13840] CPU: 0 UID: 0 PID: 13840 Comm: syz.0.2510 Not tainted syzkaller #0 PREEMPT(full) [ 339.652896][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.652908][T13840] Call Trace: [ 339.652916][T13840] [ 339.652925][T13840] dump_stack_lvl+0x189/0x250 [ 339.652958][T13840] ? __pfx____ratelimit+0x10/0x10 [ 339.652985][T13840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.653016][T13840] ? __pfx__printk+0x10/0x10 [ 339.653039][T13840] ? __pfx___might_resched+0x10/0x10 [ 339.653062][T13840] ? fs_reclaim_acquire+0x7d/0x100 [ 339.653087][T13840] should_fail_ex+0x414/0x560 [ 339.653133][T13840] should_failslab+0xa8/0x100 [ 339.653157][T13840] __kmalloc_cache_noprof+0x6f/0x6f0 [ 339.653187][T13840] ? nf_tables_newchain+0x1b68/0x2750 [ 339.653210][T13840] ? nf_tables_newchain+0x1ce8/0x2750 [ 339.653242][T13840] nf_tables_newchain+0x1ce8/0x2750 [ 339.653285][T13840] ? __pfx_nf_tables_newchain+0x10/0x10 [ 339.653358][T13840] ? nfnl_pernet+0x23/0x240 [ 339.653398][T13840] ? __nla_parse+0x40/0x60 [ 339.653425][T13840] nfnetlink_rcv+0x11d9/0x2590 [ 339.653496][T13840] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 339.653544][T13840] ? ref_tracker_free+0x63a/0x7d0 [ 339.653598][T13840] ? __netlink_deliver_tap+0x807/0x850 [ 339.653618][T13840] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.653658][T13840] netlink_unicast+0x82f/0x9e0 [ 339.653699][T13840] ? __pfx_netlink_unicast+0x10/0x10 [ 339.653731][T13840] ? netlink_sendmsg+0x642/0xb30 [ 339.653749][T13840] ? skb_put+0x11b/0x210 [ 339.653774][T13840] netlink_sendmsg+0x805/0xb30 [ 339.653806][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.653831][T13840] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.653865][T13840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.653885][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.653907][T13840] __sock_sendmsg+0x21c/0x270 [ 339.653938][T13840] ____sys_sendmsg+0x505/0x830 [ 339.653967][T13840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.654001][T13840] ? import_iovec+0x74/0xa0 [ 339.654032][T13840] ___sys_sendmsg+0x21f/0x2a0 [ 339.654057][T13840] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.654129][T13840] ? __fget_files+0x2a/0x420 [ 339.654148][T13840] ? __fget_files+0x3a0/0x420 [ 339.654180][T13840] __x64_sys_sendmsg+0x19b/0x260 [ 339.654206][T13840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.654241][T13840] ? __pfx_ksys_write+0x10/0x10 [ 339.654275][T13840] ? do_syscall_64+0xbe/0xfa0 [ 339.654309][T13840] do_syscall_64+0xfa/0xfa0 [ 339.654336][T13840] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.654365][T13840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.654385][T13840] ? clear_bhb_loop+0x60/0xb0 [ 339.654411][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.654431][T13840] RIP: 0033:0x7f085098f749 [ 339.654449][T13840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.654468][T13840] RSP: 002b:00007f08517b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.654490][T13840] RAX: ffffffffffffffda RBX: 00007f0850be5fa0 RCX: 00007f085098f749 [ 339.654504][T13840] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 339.654516][T13840] RBP: 00007f08517b8090 R08: 0000000000000000 R09: 0000000000000000 [ 339.654528][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.654540][T13840] R13: 00007f0850be6038 R14: 00007f0850be5fa0 R15: 00007ffcd571cef8 [ 339.654576][T13840] [ 340.295149][T13859] syzkaller0: entered promiscuous mode [ 340.300708][T13859] syzkaller0: entered allmulticast mode [ 340.641660][T13880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2522'. [ 340.890464][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059460400: rx timeout, send abort [ 341.390606][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059463400: rx timeout, send abort [ 341.399684][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059460400: abort rx timeout. Force session deactivation [ 341.834201][T13867] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 341.835384][T13873] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 341.887210][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b072400: rx timeout, send abort [ 341.905122][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b072400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 341.920687][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059463400: abort rx timeout. Force session deactivation [ 342.022305][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2528'. [ 342.047746][T13899] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2531'. [ 342.062442][T13900] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 342.154025][T13893] syzkaller0: entered promiscuous mode [ 342.159817][T13893] syzkaller0: entered allmulticast mode [ 343.807230][T13917] tipc: Enabled bearer , priority 0 [ 343.820122][T13923] tipc: Disabling bearer [ 344.058749][T13944] syzkaller0: entered promiscuous mode [ 344.065919][T13944] syzkaller0: entered allmulticast mode [ 344.073009][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 344.100048][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2543'. [ 345.446515][T13950] gretap0: entered promiscuous mode [ 345.453246][T13950] gretap0: left promiscuous mode [ 345.630183][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2550'. [ 345.677604][T13974] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2552'. [ 347.251792][T13981] erspan0: entered promiscuous mode [ 347.257221][T13981] erspan0: entered allmulticast mode [ 347.517443][T13999] syzkaller0: entered promiscuous mode [ 347.523147][T13999] syzkaller0: entered allmulticast mode [ 347.523776][ T5839] IPVS: starting estimator thread 0... [ 347.652735][T14011] IPVS: using max 30 ests per chain, 72000 per kthread [ 349.421055][T14047] tipc: Enabled bearer , priority 0 [ 349.437803][T14047] syzkaller0: entered promiscuous mode [ 349.456458][T14047] syzkaller0: entered allmulticast mode [ 349.484234][T14051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.509051][T14047] tipc: Resetting bearer [ 349.612979][T14046] tipc: Resetting bearer [ 349.666398][T14046] tipc: Disabling bearer [ 351.456380][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2594'. [ 351.516449][T14106] syzkaller0: entered promiscuous mode [ 351.522069][T14106] syzkaller0: entered allmulticast mode [ 351.610165][T14110] openvswitch: netlink: Flow key attr not present in new flow. [ 351.734949][T14114] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2599'. [ 352.055448][T14133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2607'. [ 352.078522][T14133] IPVS: Unknown mcast interface: vcan0 [ 352.249998][T14145] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 352.306086][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 352.386991][T14157] FAULT_INJECTION: forcing a failure. [ 352.386991][T14157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.401824][T14157] CPU: 0 UID: 0 PID: 14157 Comm: syz.0.2614 Not tainted syzkaller #0 PREEMPT(full) [ 352.401853][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.401867][T14157] Call Trace: [ 352.401875][T14157] [ 352.401884][T14157] dump_stack_lvl+0x189/0x250 [ 352.401918][T14157] ? __pfx____ratelimit+0x10/0x10 [ 352.401947][T14157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.401976][T14157] ? __pfx__printk+0x10/0x10 [ 352.402020][T14157] should_fail_ex+0x414/0x560 [ 352.402058][T14157] _copy_to_user+0x31/0xb0 [ 352.402088][T14157] simple_read_from_buffer+0xe1/0x170 [ 352.402125][T14157] proc_fail_nth_read+0x1b3/0x220 [ 352.402156][T14157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.402187][T14157] ? rw_verify_area+0x2a6/0x4d0 [ 352.402214][T14157] ? __lock_acquire+0xab9/0xd20 [ 352.402233][T14157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.402261][T14157] vfs_read+0x200/0xa30 [ 352.402289][T14157] ? fdget_pos+0x247/0x320 [ 352.402314][T14157] ? __pfx___mutex_lock+0x10/0x10 [ 352.402345][T14157] ? __pfx_vfs_read+0x10/0x10 [ 352.402375][T14157] ? __fget_files+0x2a/0x420 [ 352.402400][T14157] ? __fget_files+0x3a0/0x420 [ 352.402418][T14157] ? __fget_files+0x2a/0x420 [ 352.402448][T14157] ksys_read+0x145/0x250 [ 352.402479][T14157] ? __pfx_ksys_read+0x10/0x10 [ 352.402511][T14157] ? do_syscall_64+0xbe/0xfa0 [ 352.402545][T14157] do_syscall_64+0xfa/0xfa0 [ 352.402576][T14157] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.402604][T14157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.402624][T14157] ? clear_bhb_loop+0x60/0xb0 [ 352.402649][T14157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.402669][T14157] RIP: 0033:0x7f085098e15c [ 352.402687][T14157] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 352.402705][T14157] RSP: 002b:00007f08517b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.402727][T14157] RAX: ffffffffffffffda RBX: 00007f0850be5fa0 RCX: 00007f085098e15c [ 352.402741][T14157] RDX: 000000000000000f RSI: 00007f08517b80a0 RDI: 0000000000000005 [ 352.402753][T14157] RBP: 00007f08517b8090 R08: 0000000000000000 R09: 0000000000000000 [ 352.402765][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.402777][T14157] R13: 00007f0850be6038 R14: 00007f0850be5fa0 R15: 00007ffcd571cef8 [ 352.402813][T14157] [ 352.776926][T14164] netlink: 'syz.1.2617': attribute type 10 has an invalid length. [ 352.956275][T14173] FAULT_INJECTION: forcing a failure. [ 352.956275][T14173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.974706][T14173] CPU: 0 UID: 0 PID: 14173 Comm: syz.4.2620 Not tainted syzkaller #0 PREEMPT(full) [ 352.974737][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.974751][T14173] Call Trace: [ 352.974758][T14173] [ 352.974768][T14173] dump_stack_lvl+0x189/0x250 [ 352.974801][T14173] ? __pfx____ratelimit+0x10/0x10 [ 352.974830][T14173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.974859][T14173] ? __pfx__printk+0x10/0x10 [ 352.974880][T14173] ? __might_fault+0xb0/0x130 [ 352.974924][T14173] should_fail_ex+0x414/0x560 [ 352.974961][T14173] _copy_from_iter+0x1de/0x1790 [ 352.974993][T14173] ? rcu_is_watching+0x15/0xb0 [ 352.975022][T14173] ? kmalloc_reserve+0xbd/0x290 [ 352.975042][T14173] ? __pfx__copy_from_iter+0x10/0x10 [ 352.975068][T14173] ? __build_skb_around+0x262/0x3f0 [ 352.975103][T14173] ? netlink_sendmsg+0x642/0xb30 [ 352.975123][T14173] ? skb_put+0x11b/0x210 [ 352.975147][T14173] netlink_sendmsg+0x6b2/0xb30 [ 352.975178][T14173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.975203][T14173] ? aa_sock_msg_perm+0xf1/0x1d0 [ 352.975237][T14173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.975258][T14173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.975280][T14173] __sock_sendmsg+0x21c/0x270 [ 352.975311][T14173] ____sys_sendmsg+0x505/0x830 [ 352.975340][T14173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.975373][T14173] ? import_iovec+0x74/0xa0 [ 352.975404][T14173] ___sys_sendmsg+0x21f/0x2a0 [ 352.975430][T14173] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.975492][T14173] ? __fget_files+0x2a/0x420 [ 352.975512][T14173] ? __fget_files+0x3a0/0x420 [ 352.975543][T14173] __x64_sys_sendmsg+0x19b/0x260 [ 352.975569][T14173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.975602][T14173] ? __pfx_ksys_write+0x10/0x10 [ 352.975637][T14173] ? do_syscall_64+0xbe/0xfa0 [ 352.975675][T14173] do_syscall_64+0xfa/0xfa0 [ 352.975710][T14173] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.975740][T14173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.975761][T14173] ? clear_bhb_loop+0x60/0xb0 [ 352.975785][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.975810][T14173] RIP: 0033:0x7fb430d8f749 [ 352.975829][T14173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.975847][T14173] RSP: 002b:00007fb431cf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.975869][T14173] RAX: ffffffffffffffda RBX: 00007fb430fe5fa0 RCX: 00007fb430d8f749 [ 352.975884][T14173] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 352.975897][T14173] RBP: 00007fb431cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 352.975909][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.975922][T14173] R13: 00007fb430fe6038 R14: 00007fb430fe5fa0 R15: 00007ffe5a9a3b68 [ 352.975956][T14173] [ 353.631305][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2626'. [ 353.702332][T14194] bond4: (slave bridge9): Enslaving as an active interface with an up link [ 353.766737][T14202] macvlan2: entered promiscuous mode [ 353.772419][T14202] macvlan2: entered allmulticast mode [ 353.780672][T14202] bond4: entered promiscuous mode [ 353.785884][T14202] bridge9: entered promiscuous mode [ 353.792024][T14202] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 353.801956][T14202] bond4: left promiscuous mode [ 353.810181][T14202] bridge9: left promiscuous mode [ 353.870276][T14210] syzkaller0: entered promiscuous mode [ 353.876854][T14210] syzkaller0: entered allmulticast mode [ 353.886388][T14197] syzkaller0: entered promiscuous mode [ 353.892118][T14197] syzkaller0: entered allmulticast mode [ 354.079695][T14218] tipc: Invalid UDP bearer configuration [ 354.079756][T14218] tipc: Enabling of bearer rejected, failed to enable media [ 354.199046][T14228] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2634'. [ 354.301029][T14233] netlink: 'syz.1.2639': attribute type 1 has an invalid length. [ 354.301048][T14234] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2638'. [ 354.424360][T14241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2639'. [ 354.451126][T14228] bond0 (unregistering): Released all slaves [ 354.493023][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2643'. [ 354.512468][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2643'. [ 354.623654][T14241] bond5: (slave geneve4): making interface the new active one [ 354.651688][T14241] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 354.656916][T14253] netlink: 'syz.2.2645': attribute type 7 has an invalid length. [ 354.668559][T14253] netlink: 'syz.2.2645': attribute type 8 has an invalid length. [ 354.676309][ T7546] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 354.676381][ T7546] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 354.676420][ T7546] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 354.731622][T14251] syzkaller0: entered promiscuous mode [ 354.747395][T14251] syzkaller0: entered allmulticast mode [ 354.981971][T14268] netlink: 'syz.3.2653': attribute type 7 has an invalid length. [ 354.990549][T14268] netlink: 'syz.3.2653': attribute type 7 has an invalid length. [ 355.006610][T14273] bridge0: port 1(vlan4) entered blocking state [ 355.013316][T14273] bridge0: port 1(vlan4) entered disabled state [ 355.019799][T14273] vlan4: entered allmulticast mode [ 355.029628][T14273] bridge0: entered allmulticast mode [ 355.037544][T14273] vlan4: left allmulticast mode [ 355.042438][T14273] bridge0: left allmulticast mode [ 355.052524][T14268] netlink: 'syz.3.2653': attribute type 7 has an invalid length. [ 355.060806][T14268] netlink: 'syz.3.2653': attribute type 7 has an invalid length. [ 355.068989][T14268] netlink: 'syz.3.2653': attribute type 7 has an invalid length. [ 355.154225][T14279] FAULT_INJECTION: forcing a failure. [ 355.154225][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 355.167167][T14279] CPU: 0 UID: 0 PID: 14279 Comm: syz.4.2654 Not tainted syzkaller #0 PREEMPT(full) [ 355.167197][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.167210][T14279] Call Trace: [ 355.167219][T14279] [ 355.167228][T14279] dump_stack_lvl+0x189/0x250 [ 355.167263][T14279] ? __pfx____ratelimit+0x10/0x10 [ 355.167291][T14279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.167320][T14279] ? __pfx__printk+0x10/0x10 [ 355.167348][T14279] ? __pfx___might_resched+0x10/0x10 [ 355.167371][T14279] ? fs_reclaim_acquire+0x7d/0x100 [ 355.167397][T14279] should_fail_ex+0x414/0x560 [ 355.167436][T14279] should_failslab+0xa8/0x100 [ 355.167459][T14279] __kmalloc_noprof+0xcb/0x7f0 [ 355.167496][T14279] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 355.167524][T14279] ? __local_bh_enable_ip+0x12d/0x1c0 [ 355.167552][T14279] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 355.167589][T14279] genl_family_rcv_msg_doit+0xb8/0x300 [ 355.167625][T14279] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.167661][T14279] ? apparmor_capable+0x137/0x1b0 [ 355.167686][T14279] ? bpf_lsm_capable+0x9/0x20 [ 355.167710][T14279] ? security_capable+0x7e/0x2e0 [ 355.167746][T14279] genl_rcv_msg+0x60e/0x790 [ 355.167780][T14279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.167804][T14279] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 355.167826][T14279] ? __pfx_nl80211_set_multicast_to_unicast+0x10/0x10 [ 355.167850][T14279] ? __pfx_nl80211_post_doit+0x10/0x10 [ 355.167875][T14279] ? __asan_memcpy+0x40/0x70 [ 355.167901][T14279] ? __pfx_ref_tracker_free+0x10/0x10 [ 355.167930][T14279] netlink_rcv_skb+0x208/0x470 [ 355.167948][T14279] ? __lock_acquire+0xab9/0xd20 [ 355.167969][T14279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.167997][T14279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.168039][T14279] ? down_read+0x1ad/0x2e0 [ 355.168061][T14279] genl_rcv+0x28/0x40 [ 355.168083][T14279] netlink_unicast+0x82f/0x9e0 [ 355.168124][T14279] ? __pfx_netlink_unicast+0x10/0x10 [ 355.168161][T14279] ? netlink_sendmsg+0x642/0xb30 [ 355.168179][T14279] ? skb_put+0x11b/0x210 [ 355.168204][T14279] netlink_sendmsg+0x805/0xb30 [ 355.168235][T14279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.168261][T14279] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.168294][T14279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.168313][T14279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.168335][T14279] __sock_sendmsg+0x21c/0x270 [ 355.168367][T14279] ____sys_sendmsg+0x505/0x830 [ 355.168397][T14279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.168430][T14279] ? import_iovec+0x74/0xa0 [ 355.168468][T14279] ___sys_sendmsg+0x21f/0x2a0 [ 355.168495][T14279] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.168559][T14279] ? __fget_files+0x2a/0x420 [ 355.168578][T14279] ? __fget_files+0x3a0/0x420 [ 355.168610][T14279] __x64_sys_sendmsg+0x19b/0x260 [ 355.168636][T14279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.168671][T14279] ? __pfx_ksys_write+0x10/0x10 [ 355.168705][T14279] ? do_syscall_64+0xbe/0xfa0 [ 355.168739][T14279] do_syscall_64+0xfa/0xfa0 [ 355.168766][T14279] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.168795][T14279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.168816][T14279] ? clear_bhb_loop+0x60/0xb0 [ 355.168842][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.168861][T14279] RIP: 0033:0x7fb430d8f749 [ 355.168881][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.168898][T14279] RSP: 002b:00007fb431cf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.168920][T14279] RAX: ffffffffffffffda RBX: 00007fb430fe5fa0 RCX: 00007fb430d8f749 [ 355.168935][T14279] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 355.168947][T14279] RBP: 00007fb431cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 355.168960][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.168973][T14279] R13: 00007fb430fe6038 R14: 00007fb430fe5fa0 R15: 00007ffe5a9a3b68 [ 355.169009][T14279] [ 355.778165][T14290] ip6gretap0: entered promiscuous mode [ 355.784935][T14290] syz_tun: entered promiscuous mode [ 355.791052][T14290] gretap0: entered promiscuous mode [ 355.797240][T14290] debugfs: 'hsr1' already exists in 'hsr' [ 355.803485][T14290] Cannot create hsr debugfs directory [ 355.809062][T14290] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 355.819391][T14290] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 355.829592][T14290] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 355.887483][T14295] syzkaller0: entered promiscuous mode [ 355.895062][T14295] syzkaller0: entered allmulticast mode [ 355.983015][T14299] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.012901][T14298] syzkaller0: entered promiscuous mode [ 356.018527][T14298] syzkaller0: entered allmulticast mode [ 356.277190][T14306] FAULT_INJECTION: forcing a failure. [ 356.277190][T14306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.293799][T14306] CPU: 0 UID: 0 PID: 14306 Comm: syz.2.2667 Not tainted syzkaller #0 PREEMPT(full) [ 356.293830][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.293843][T14306] Call Trace: [ 356.293851][T14306] [ 356.293860][T14306] dump_stack_lvl+0x189/0x250 [ 356.293894][T14306] ? __pfx____ratelimit+0x10/0x10 [ 356.293922][T14306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.293951][T14306] ? __pfx__printk+0x10/0x10 [ 356.293988][T14306] should_fail_ex+0x414/0x560 [ 356.294027][T14306] _copy_to_user+0x31/0xb0 [ 356.294056][T14306] simple_read_from_buffer+0xe1/0x170 [ 356.294094][T14306] proc_fail_nth_read+0x1b3/0x220 [ 356.294125][T14306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.294156][T14306] ? rw_verify_area+0x2a6/0x4d0 [ 356.294184][T14306] ? __lock_acquire+0xab9/0xd20 [ 356.294203][T14306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.294231][T14306] vfs_read+0x200/0xa30 [ 356.294265][T14306] ? fdget_pos+0x247/0x320 [ 356.294290][T14306] ? __pfx___mutex_lock+0x10/0x10 [ 356.294321][T14306] ? __pfx_vfs_read+0x10/0x10 [ 356.294352][T14306] ? __fget_files+0x2a/0x420 [ 356.294377][T14306] ? __fget_files+0x3a0/0x420 [ 356.294394][T14306] ? __fget_files+0x2a/0x420 [ 356.294424][T14306] ksys_read+0x145/0x250 [ 356.294456][T14306] ? __pfx_ksys_read+0x10/0x10 [ 356.294489][T14306] ? do_syscall_64+0xbe/0xfa0 [ 356.294522][T14306] do_syscall_64+0xfa/0xfa0 [ 356.294550][T14306] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.294579][T14306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.294599][T14306] ? clear_bhb_loop+0x60/0xb0 [ 356.294625][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.294645][T14306] RIP: 0033:0x7fe74978e15c [ 356.294663][T14306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 356.294679][T14306] RSP: 002b:00007fe74a5a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.294701][T14306] RAX: ffffffffffffffda RBX: 00007fe7499e5fa0 RCX: 00007fe74978e15c [ 356.294716][T14306] RDX: 000000000000000f RSI: 00007fe74a5a20a0 RDI: 0000000000000005 [ 356.294728][T14306] RBP: 00007fe74a5a2090 R08: 0000000000000000 R09: 0000000000000000 [ 356.294741][T14306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.294752][T14306] R13: 00007fe7499e6038 R14: 00007fe7499e5fa0 R15: 00007ffef438de18 [ 356.294788][T14306] [ 356.766756][T14329] syzkaller0: entered promiscuous mode [ 356.783393][T14329] syzkaller0: entered allmulticast mode [ 356.793536][T14329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 356.845042][T14336] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 356.897247][T14335] syzkaller0: entered promiscuous mode [ 356.903573][T14335] syzkaller0: entered allmulticast mode [ 356.915552][T14334] __nla_validate_parse: 8 callbacks suppressed [ 356.915657][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2679'. [ 357.026972][T14338] syzkaller0: entered promiscuous mode [ 357.047515][T14338] syzkaller0: entered allmulticast mode [ 357.168716][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'. [ 357.292351][T14350] validate_nla: 30 callbacks suppressed [ 357.292409][T14350] netlink: 'syz.1.2684': attribute type 3 has an invalid length. [ 357.589647][T14367] syzkaller0: entered promiscuous mode [ 357.603285][T14367] syzkaller0: entered allmulticast mode [ 357.675350][T14372] syzkaller0: entered promiscuous mode [ 357.682257][T14372] syzkaller0: entered allmulticast mode [ 357.701736][T14372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 357.731988][T14372] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 357.764833][T14375] syzkaller0: entered promiscuous mode [ 357.770384][T14375] syzkaller0: entered allmulticast mode [ 358.047368][T14390] syzkaller1: entered promiscuous mode [ 358.062917][T14390] syzkaller1: entered allmulticast mode [ 358.180769][T14400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.258422][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.342106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.359692][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.484061][ T6269] lec:lec_start_xmit: lec0:No lecd attached [ 360.048783][T14419] syzkaller0: entered promiscuous mode [ 360.054695][T14419] syzkaller0: entered allmulticast mode [ 360.172254][T14433] syzkaller0: entered promiscuous mode [ 360.179058][T14433] syzkaller0: entered allmulticast mode [ 360.220564][T14463] can: request_module (can-proto-4) failed. [ 360.233680][T14449] syzkaller0: entered promiscuous mode [ 360.246058][T14449] syzkaller0: entered allmulticast mode [ 362.242251][T14485] syz.0.2720: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 362.292702][T14485] CPU: 1 UID: 0 PID: 14485 Comm: syz.0.2720 Not tainted syzkaller #0 PREEMPT(full) [ 362.292743][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.292756][T14485] Call Trace: [ 362.292765][T14485] [ 362.292774][T14485] dump_stack_lvl+0x189/0x250 [ 362.292813][T14485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.292842][T14485] ? __pfx__printk+0x10/0x10 [ 362.292866][T14485] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 362.292897][T14485] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 362.292928][T14485] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 362.292962][T14485] warn_alloc+0x214/0x310 [ 362.293002][T14485] ? __pfx_warn_alloc+0x10/0x10 [ 362.293043][T14485] ? __get_vm_area_node+0x28f/0x300 [ 362.293072][T14485] ? fq_pie_init+0x435/0x840 [ 362.293104][T14485] __vmalloc_node_range_noprof+0x690/0x12d0 [ 362.293138][T14485] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 362.293189][T14485] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 362.293220][T14485] ? fq_pie_init+0x435/0x840 [ 362.293252][T14485] ? rcu_is_watching+0x15/0xb0 [ 362.293278][T14485] ? fq_pie_init+0x435/0x840 [ 362.293306][T14485] __kvmalloc_node_noprof+0x674/0x910 [ 362.293339][T14485] ? fq_pie_init+0x435/0x840 [ 362.293369][T14485] ? tcf_block_get+0x67/0xa0 [ 362.293399][T14485] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 362.293438][T14485] fq_pie_init+0x435/0x840 [ 362.293469][T14485] ? __pfx_fq_pie_init+0x10/0x10 [ 362.293498][T14485] qdisc_create+0x7ac/0xea0 [ 362.293536][T14485] tc_modify_qdisc+0x1547/0x2020 [ 362.293580][T14485] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 362.293653][T14485] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 362.293679][T14485] rtnetlink_rcv_msg+0x77c/0xb70 [ 362.293717][T14485] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 362.293748][T14485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.293778][T14485] ? ref_tracker_free+0x63a/0x7d0 [ 362.293799][T14485] ? __asan_memcpy+0x40/0x70 [ 362.293826][T14485] ? __pfx_ref_tracker_free+0x10/0x10 [ 362.293859][T14485] netlink_rcv_skb+0x208/0x470 [ 362.293882][T14485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.293916][T14485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.293947][T14485] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.293976][T14485] netlink_unicast+0x82f/0x9e0 [ 362.294018][T14485] ? __pfx_netlink_unicast+0x10/0x10 [ 362.294048][T14485] ? netlink_sendmsg+0x642/0xb30 [ 362.294065][T14485] ? skb_put+0x11b/0x210 [ 362.294089][T14485] netlink_sendmsg+0x805/0xb30 [ 362.294121][T14485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.294146][T14485] ? aa_sock_msg_perm+0xf1/0x1d0 [ 362.294177][T14485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.294197][T14485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.294219][T14485] __sock_sendmsg+0x21c/0x270 [ 362.294250][T14485] ____sys_sendmsg+0x505/0x830 [ 362.294278][T14485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.294321][T14485] ? import_iovec+0x74/0xa0 [ 362.294353][T14485] ___sys_sendmsg+0x21f/0x2a0 [ 362.294378][T14485] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.294438][T14485] ? __fget_files+0x2a/0x420 [ 362.294457][T14485] ? __fget_files+0x3a0/0x420 [ 362.294489][T14485] __x64_sys_sendmsg+0x19b/0x260 [ 362.294515][T14485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.294555][T14485] ? do_syscall_64+0xbe/0xfa0 [ 362.294589][T14485] do_syscall_64+0xfa/0xfa0 [ 362.294617][T14485] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.294654][T14485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.294676][T14485] ? clear_bhb_loop+0x60/0xb0 [ 362.294702][T14485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.294722][T14485] RIP: 0033:0x7f085098f749 [ 362.294743][T14485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.294760][T14485] RSP: 002b:00007f0851797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.294783][T14485] RAX: ffffffffffffffda RBX: 00007f0850be6090 RCX: 00007f085098f749 [ 362.294798][T14485] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000003 [ 362.294812][T14485] RBP: 00007f0850a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.294825][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.294838][T14485] R13: 00007f0850be6128 R14: 00007f0850be6090 R15: 00007ffcd571cef8 [ 362.294874][T14485] [ 362.294884][T14485] Mem-Info: [ 362.749544][T14485] active_anon:6881 inactive_anon:0 isolated_anon:0 [ 362.749544][T14485] active_file:3406 inactive_file:40018 isolated_file:0 [ 362.749544][T14485] unevictable:768 dirty:204 writeback:0 [ 362.749544][T14485] slab_reclaimable:11354 slab_unreclaimable:155742 [ 362.749544][T14485] mapped:29291 shmem:1360 pagetables:1134 [ 362.749544][T14485] sec_pagetables:0 bounce:0 [ 362.749544][T14485] kernel_misc_reclaimable:0 [ 362.749544][T14485] free:1200951 free_pcp:14529 free_cma:0 [ 362.832689][T14485] Node 0 active_anon:27624kB inactive_anon:0kB active_file:13624kB inactive_file:159872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117164kB dirty:816kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13660kB pagetables:4360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.873147][T14485] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.904361][T14485] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.944103][T14485] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 362.950085][T14485] Node 0 DMA32 free:876172kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27824kB inactive_anon:0kB active_file:13624kB inactive_file:159872kB unevictable:1536kB writepending:816kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:42376kB local_pcp:23928kB free_cma:0kB [ 362.984718][T14485] lowmem_reserve[]: 0 0 0 0 0 [ 362.990279][T14485] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.058543][T14485] lowmem_reserve[]: 0 0 0 0 0 [ 363.090490][T14485] Node 1 Normal free:3903780kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11584kB local_pcp:5728kB free_cma:0kB [ 363.198090][T14485] lowmem_reserve[]: 0 0 0 0 0 [ 363.211175][T14485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 363.225798][T14485] Node 0 DMA32: 1*4kB (E) 13*8kB (UM) 308*16kB (ME) 150*32kB (UM) 25*64kB (UME) 6*128kB (UME) 2*256kB (ME) 2*512kB (ME) 10*1024kB (UME) 2*2048kB (M) 204*4096kB (M) = 863660kB [ 363.247310][T14485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.264706][T14485] Node 1 Normal: 219*4kB (UME) 61*8kB (UME) 49*16kB (UME) 172*32kB (UME) 43*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3903780kB [ 363.292710][T14485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.333033][T14485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.397308][T14485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.424752][T14485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.485250][T14485] 44783 total pagecache pages [ 363.504448][T14485] 0 pages in swap cache [ 363.520506][T14485] Free swap = 124996kB [ 363.551919][T14485] Total swap = 124996kB [ 363.563724][T14485] 2097051 pages RAM [ 363.567857][T14485] 0 pages HighMem/MovableOnly [ 363.576604][T14485] 424120 pages reserved [ 363.580894][T14485] 0 pages cma reserved [ 363.652394][T14505] syzkaller0: entered promiscuous mode [ 363.658196][T14505] syzkaller0: entered allmulticast mode [ 363.681272][T14518] syzkaller0: entered promiscuous mode [ 363.687259][T14518] syzkaller0: entered allmulticast mode [ 364.043600][T14551] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000 [ 364.050976][T14547] syzkaller0: entered promiscuous mode [ 364.069133][T14547] syzkaller0: entered allmulticast mode [ 364.133577][T14547] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 364.226470][T14554] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 364.263590][T14562] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 364.271846][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 364.308452][T14561] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 364.325536][T14561] bond9 (unregistering): Released all slaves [ 364.460755][T14562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.483813][T14565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2736'. [ 364.528958][T14566] gretap1: entered promiscuous mode [ 364.539207][T14566] bond3: (slave gretap1): making interface the new active one [ 364.547960][T14566] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 364.858478][T14580] syzkaller0: entered promiscuous mode [ 364.865446][T14583] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2743'. [ 364.875124][T14580] syzkaller0: entered allmulticast mode [ 365.022629][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 365.031024][ C1] lec:lec_tx_timeout: lec0 [ 365.203250][T14596] syzkaller0: entered promiscuous mode [ 365.215535][T14596] syzkaller0: entered allmulticast mode [ 365.226677][T14596] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 365.265455][T14596] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 365.538885][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 365.952745][T14626] syzkaller0: entered promiscuous mode [ 365.963930][T14626] syzkaller0: entered allmulticast mode [ 366.119729][T14630] syzkaller0: entered promiscuous mode [ 366.135648][T14630] syzkaller0: entered allmulticast mode [ 366.197337][T14634] vlan3: entered promiscuous mode [ 366.202440][T14634] bridge0: entered promiscuous mode [ 366.266815][T14631] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 366.305817][T14630] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 366.407024][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2768'. [ 366.435070][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2768'. [ 366.474048][T14650] FAULT_INJECTION: forcing a failure. [ 366.474048][T14650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.518812][T14650] CPU: 0 UID: 0 PID: 14650 Comm: syz.4.2770 Not tainted syzkaller #0 PREEMPT(full) [ 366.518843][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.518861][T14650] Call Trace: [ 366.518869][T14650] [ 366.518878][T14650] dump_stack_lvl+0x189/0x250 [ 366.518911][T14650] ? __pfx____ratelimit+0x10/0x10 [ 366.518939][T14650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.518967][T14650] ? __pfx__printk+0x10/0x10 [ 366.518989][T14650] ? __might_fault+0xb0/0x130 [ 366.519031][T14650] should_fail_ex+0x414/0x560 [ 366.519067][T14650] _copy_from_user+0x2d/0xb0 [ 366.519095][T14650] ___sys_sendmsg+0x158/0x2a0 [ 366.519120][T14650] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.519182][T14650] ? __fget_files+0x2a/0x420 [ 366.519202][T14650] ? __fget_files+0x3a0/0x420 [ 366.519232][T14650] __x64_sys_sendmsg+0x19b/0x260 [ 366.519258][T14650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.519293][T14650] ? rcu_is_watching+0x15/0xb0 [ 366.519327][T14650] do_syscall_64+0xfa/0xfa0 [ 366.519355][T14650] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.519384][T14650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.519405][T14650] ? clear_bhb_loop+0x60/0xb0 [ 366.519430][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.519456][T14650] RIP: 0033:0x7fb430d8f749 [ 366.519474][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.519492][T14650] RSP: 002b:00007fb431cf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.519521][T14650] RAX: ffffffffffffffda RBX: 00007fb430fe5fa0 RCX: 00007fb430d8f749 [ 366.519536][T14650] RDX: 0000000000004098 RSI: 0000200000000200 RDI: 0000000000000003 [ 366.519549][T14650] RBP: 00007fb431cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 366.519561][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.519573][T14650] R13: 00007fb430fe6038 R14: 00007fb430fe5fa0 R15: 00007ffe5a9a3b68 [ 366.519608][T14650] [ 366.825553][T14656] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2772'. [ 366.847692][T14656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.872289][T14660] syzkaller0: entered promiscuous mode [ 366.878435][T14660] syzkaller0: entered allmulticast mode [ 366.980915][T14668] ip6tnl0: Caught tx_queue_len zero misconfig [ 367.150638][T14678] syzkaller1: entered promiscuous mode [ 367.172781][T14678] syzkaller1: entered allmulticast mode [ 367.192407][T14680] team0: Caught tx_queue_len zero misconfig [ 367.314544][T14690] x_tables: duplicate underflow at hook 1 [ 367.355285][T14692] FAULT_INJECTION: forcing a failure. [ 367.355285][T14692] name failslab, interval 1, probability 0, space 0, times 0 [ 367.369892][T14692] CPU: 0 UID: 0 PID: 14692 Comm: syz.0.2785 Not tainted syzkaller #0 PREEMPT(full) [ 367.369921][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.369934][T14692] Call Trace: [ 367.369942][T14692] [ 367.369951][T14692] dump_stack_lvl+0x189/0x250 [ 367.369985][T14692] ? __pfx____ratelimit+0x10/0x10 [ 367.370012][T14692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.370041][T14692] ? __pfx__printk+0x10/0x10 [ 367.370069][T14692] ? __pfx___might_resched+0x10/0x10 [ 367.370091][T14692] ? fs_reclaim_acquire+0x7d/0x100 [ 367.370117][T14692] should_fail_ex+0x414/0x560 [ 367.370154][T14692] should_failslab+0xa8/0x100 [ 367.370281][T14692] kmem_cache_alloc_node_noprof+0x77/0x710 [ 367.370317][T14692] ? __alloc_skb+0x112/0x2d0 [ 367.370336][T14692] ? netlink_autobind+0xdb/0x300 [ 367.370362][T14692] __alloc_skb+0x112/0x2d0 [ 367.370384][T14692] netlink_sendmsg+0x5c6/0xb30 [ 367.370415][T14692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.370440][T14692] ? aa_sock_msg_perm+0xf1/0x1d0 [ 367.370473][T14692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.370494][T14692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.370523][T14692] __sock_sendmsg+0x21c/0x270 [ 367.370555][T14692] ____sys_sendmsg+0x505/0x830 [ 367.370584][T14692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.370617][T14692] ? import_iovec+0x74/0xa0 [ 367.370647][T14692] ___sys_sendmsg+0x21f/0x2a0 [ 367.370678][T14692] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.370742][T14692] ? __fget_files+0x2a/0x420 [ 367.370761][T14692] ? __fget_files+0x3a0/0x420 [ 367.370798][T14692] __x64_sys_sendmsg+0x19b/0x260 [ 367.370825][T14692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.370859][T14692] ? __pfx_ksys_write+0x10/0x10 [ 367.370894][T14692] ? do_syscall_64+0xbe/0xfa0 [ 367.370929][T14692] do_syscall_64+0xfa/0xfa0 [ 367.370956][T14692] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.370986][T14692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.371007][T14692] ? clear_bhb_loop+0x60/0xb0 [ 367.371032][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.371053][T14692] RIP: 0033:0x7f085098f749 [ 367.371072][T14692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.371091][T14692] RSP: 002b:00007f08517b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.371121][T14692] RAX: ffffffffffffffda RBX: 00007f0850be5fa0 RCX: 00007f085098f749 [ 367.371150][T14692] RDX: 0000000000004098 RSI: 0000200000000200 RDI: 0000000000000003 [ 367.371163][T14692] RBP: 00007f08517b8090 R08: 0000000000000000 R09: 0000000000000000 [ 367.371179][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.371191][T14692] R13: 00007f0850be6038 R14: 00007f0850be5fa0 R15: 00007ffcd571cef8 [ 367.371227][T14692] [ 367.693828][T14694] netlink: 'syz.1.2786': attribute type 4 has an invalid length. [ 367.738592][T14698] netlink: 'syz.0.2788': attribute type 8 has an invalid length. [ 367.750733][T14696] syzkaller0: entered promiscuous mode [ 367.757086][T14696] syzkaller0: entered allmulticast mode [ 368.000573][T14709] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2792'. [ 368.210252][T14721] xt_hashlimit: overflow, rate too high: 0 [ 368.213249][T14727] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2798'. [ 368.387284][T14734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2799'. [ 368.575722][T14741] vlan2: left allmulticast mode [ 368.580660][T14741] hsr_slave_1: left allmulticast mode [ 368.599547][T14741] geneve2: left allmulticast mode [ 368.724501][ T7546] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 368.751367][ T7546] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.811457][ T7546] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 370.413489][ T7546] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 370.422515][ T7546] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.432176][ T7546] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 370.441484][ T7546] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 370.451111][ T7546] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.461847][ T7546] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 370.482879][T14790] tipc: Enabling of bearer rejected, failed to enable media [ 370.654146][T14801] __nla_validate_parse: 3 callbacks suppressed [ 370.654176][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 370.700285][T14801] openvswitch: netlink: Missing key (keys=40, expected=80) [ 370.758243][T14801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2817'. [ 371.123277][T14830] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 371.310247][T14848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2833'. [ 371.360331][T14848] nbd: illegal input index -8454144 [ 371.602105][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 371.821045][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'. [ 372.000059][T14884] tipc: Enabled bearer , priority 0 [ 372.033577][T14884] syzkaller0: entered promiscuous mode [ 372.039111][T14884] syzkaller0: entered allmulticast mode [ 372.097556][T14884] tipc: Resetting bearer [ 372.106570][T14881] tipc: Resetting bearer [ 372.126906][T14881] tipc: Disabling bearer [ 372.140098][T14886] syzkaller0: entered promiscuous mode [ 372.146474][T14886] syzkaller0: entered allmulticast mode [ 372.162883][T14894] syzkaller0: entered promiscuous mode [ 372.168415][T14894] syzkaller0: entered allmulticast mode [ 372.179016][T14886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 372.241706][T14886] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 372.534902][T14903] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 372.695370][T14903] veth11: left promiscuous mode [ 372.732386][T14903] gretap2: left promiscuous mode [ 372.754064][ T7546] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.799564][ T7546] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.856644][ T7546] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.894041][ T7546] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.912112][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 373.198896][T14935] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2859'. [ 373.331861][T14942] syzkaller0: entered promiscuous mode [ 373.338688][T14942] syzkaller0: entered allmulticast mode [ 373.635517][T14955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.643190][T14955] IPv6: NLM_F_CREATE should be set when creating new route [ 373.778063][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 373.840201][T14970] sctp: [Deprecated]: syz.2.2871 (pid 14970) Use of int in maxseg socket option. [ 373.840201][T14970] Use struct sctp_assoc_value instead [ 373.856462][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2870'. [ 373.862451][T14970] x_tables: duplicate underflow at hook 2 [ 374.019054][T14976] syzkaller0: entered promiscuous mode [ 374.040264][T14976] syzkaller0: entered allmulticast mode [ 374.560315][T15011] vlan0: entered promiscuous mode [ 374.569218][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 374.579121][T15011] vlan0: entered allmulticast mode [ 374.584600][T15011] veth0_vlan: entered allmulticast mode [ 374.616222][ T153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.631897][ T153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.660690][ T153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.682887][ T153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.887202][T15021] syzkaller0: entered promiscuous mode [ 374.892928][T15021] syzkaller0: entered allmulticast mode [ 375.081410][T15026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.119564][T15026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.149937][T15026] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 375.179007][T15026] bond0 (unregistering): Released all slaves [ 375.250987][T15033] ip6gretap0: entered promiscuous mode [ 375.265825][T15033] syz_tun: entered promiscuous mode [ 375.272167][T15033] debugfs: 'hsr0' already exists in 'hsr' [ 375.278763][T15033] Cannot create hsr debugfs directory [ 375.287590][T15033] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 375.298418][T15033] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 375.776718][T15066] __nla_validate_parse: 7 callbacks suppressed [ 375.776737][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 375.794262][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 376.673744][T15036] syzkaller0: entered promiscuous mode [ 376.679338][T15036] syzkaller0: entered allmulticast mode [ 376.879921][T15073] tipc: Enabled bearer , priority 0 [ 376.913617][T15073] syzkaller0: entered promiscuous mode [ 376.919151][T15073] syzkaller0: entered allmulticast mode [ 376.977793][T15078] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 377.076250][T15081] tipc: Resetting bearer [ 377.129151][T15081] tipc: Disabling bearer [ 377.163529][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2908'. [ 377.173341][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2908'. [ 377.267832][T15092] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2909'. [ 377.416524][T15098] Bluetooth: MGMT ver 1.23 [ 377.502968][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2914'. [ 377.512866][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2914'. [ 377.666734][T15102] syzkaller0: entered promiscuous mode [ 377.680133][T15102] syzkaller0: entered allmulticast mode [ 377.723452][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2918'. [ 377.781468][T15119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2920'. [ 377.791185][T15119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2920'. [ 379.206719][T15114] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 379.843309][T15177] syzkaller0: entered promiscuous mode [ 379.857327][T15177] syzkaller0: entered allmulticast mode [ 380.228791][T15203] netlink: 'syz.3.2949': attribute type 4 has an invalid length. [ 381.956037][T15241] __nla_validate_parse: 11 callbacks suppressed [ 381.956056][T15241] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2957'. [ 382.033398][T15247] netlink: 'syz.0.2960': attribute type 4 has an invalid length. [ 382.049928][T15247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2960'. [ 382.210805][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 382.242691][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'. [ 382.284564][T15255] syzkaller0: entered promiscuous mode [ 382.291201][T15255] syzkaller0: entered allmulticast mode [ 382.347262][T15266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2966'. [ 382.399071][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 383.916124][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.925077][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 383.931641][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 384.108622][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 384.130467][T15293] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 384.160412][T15298] syzkaller0: entered promiscuous mode [ 384.170648][T15298] syzkaller0: entered allmulticast mode [ 384.233769][T15293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.301873][T15313] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 384.319413][T15301] bond0: (slave veth7): Enslaving as an active interface with a down link [ 384.322788][T15314] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2984'. [ 384.337465][T15305] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 384.354303][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 384.364533][T15298] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 384.509233][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 384.530556][T15293] netlink: 'syz.3.2977': attribute type 8 has an invalid length. [ 384.624689][T15293] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 384.635131][T15330] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 [ 384.878537][T15340] syzkaller0: entered promiscuous mode [ 384.887919][T15340] syzkaller0: entered allmulticast mode [ 384.909612][T15349] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 3, id = 0 [ 384.996504][T15348] sctp: [Deprecated]: syz.4.2994 (pid 15348) Use of int in maxseg socket option. [ 384.996504][T15348] Use struct sctp_assoc_value instead [ 385.067974][T15348] netlink: 'syz.4.2994': attribute type 1 has an invalid length. [ 386.404987][T15365] syzkaller0: entered promiscuous mode [ 386.411088][T15365] syzkaller0: entered allmulticast mode [ 386.426415][T15365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.459075][T15365] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 386.523292][T15373] FAULT_INJECTION: forcing a failure. [ 386.523292][T15373] name failslab, interval 1, probability 0, space 0, times 0 [ 386.536968][T15375] veth0: entered promiscuous mode [ 386.548193][T15367] veth0: left promiscuous mode [ 386.555675][T15373] CPU: 1 UID: 0 PID: 15373 Comm: syz.1.3003 Not tainted syzkaller #0 PREEMPT(full) [ 386.555700][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.555710][T15373] Call Trace: [ 386.555717][T15373] [ 386.555724][T15373] dump_stack_lvl+0x189/0x250 [ 386.555752][T15373] ? __pfx____ratelimit+0x10/0x10 [ 386.555775][T15373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.555797][T15373] ? __pfx__printk+0x10/0x10 [ 386.555820][T15373] ? __pfx___might_resched+0x10/0x10 [ 386.555843][T15373] should_fail_ex+0x414/0x560 [ 386.555874][T15373] should_failslab+0xa8/0x100 [ 386.555895][T15373] kmem_cache_alloc_node_noprof+0x77/0x710 [ 386.555920][T15373] ? __alloc_skb+0x112/0x2d0 [ 386.555943][T15373] __alloc_skb+0x112/0x2d0 [ 386.555963][T15373] netlink_ack+0x146/0xa50 [ 386.555989][T15373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.556012][T15373] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 386.556030][T15373] ? __pfx_nl80211_post_doit+0x10/0x10 [ 386.556061][T15373] netlink_rcv_skb+0x28c/0x470 [ 386.556075][T15373] ? __lock_acquire+0xab9/0xd20 [ 386.556092][T15373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.556114][T15373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.556149][T15373] ? down_read+0x1ad/0x2e0 [ 386.556167][T15373] genl_rcv+0x28/0x40 [ 386.556185][T15373] netlink_unicast+0x82f/0x9e0 [ 386.556218][T15373] ? __pfx_netlink_unicast+0x10/0x10 [ 386.556245][T15373] ? netlink_sendmsg+0x642/0xb30 [ 386.556259][T15373] ? skb_put+0x11b/0x210 [ 386.556279][T15373] netlink_sendmsg+0x805/0xb30 [ 386.556305][T15373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.556325][T15373] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.556353][T15373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.556370][T15373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.556399][T15373] __sock_sendmsg+0x21c/0x270 [ 386.556428][T15373] ____sys_sendmsg+0x505/0x830 [ 386.556453][T15373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.556483][T15373] ? import_iovec+0x74/0xa0 [ 386.556507][T15373] ___sys_sendmsg+0x21f/0x2a0 [ 386.556527][T15373] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.556579][T15373] ? __fget_files+0x2a/0x420 [ 386.556595][T15373] ? __fget_files+0x3a0/0x420 [ 386.556620][T15373] __x64_sys_sendmsg+0x19b/0x260 [ 386.556644][T15373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.556675][T15373] ? __pfx_ksys_write+0x10/0x10 [ 386.556705][T15373] ? do_syscall_64+0xbe/0xfa0 [ 386.556736][T15373] do_syscall_64+0xfa/0xfa0 [ 386.556762][T15373] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.556791][T15373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.556811][T15373] ? clear_bhb_loop+0x60/0xb0 [ 386.556836][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.556857][T15373] RIP: 0033:0x7fe85858f749 [ 386.556875][T15373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.556893][T15373] RSP: 002b:00007fe8594e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.556915][T15373] RAX: ffffffffffffffda RBX: 00007fe8587e5fa0 RCX: 00007fe85858f749 [ 386.556930][T15373] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000003 [ 386.556943][T15373] RBP: 00007fe8594e5090 R08: 0000000000000000 R09: 0000000000000000 [ 386.556955][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.556967][T15373] R13: 00007fe8587e6038 R14: 00007fe8587e5fa0 R15: 00007ffe382ad5b8 [ 386.557003][T15373] [ 387.118930][T15389] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 387.127012][T15389] __nla_validate_parse: 5 callbacks suppressed [ 387.127031][T15389] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3007'. [ 387.127309][T15392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3008'. [ 387.154085][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 387.207471][T15394] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 387.342509][T15400] syzkaller0: entered promiscuous mode [ 387.351269][T15400] syzkaller0: entered allmulticast mode [ 388.146755][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 388.910945][T15417] tipc: Enabling of bearer rejected, failed to enable media [ 389.023751][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 389.031811][ C1] lec:lec_tx_timeout: lec0 [ 389.091175][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3021'. [ 389.114602][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 389.151989][T15444] : entered promiscuous mode [ 389.201360][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 389.246085][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3026'. [ 389.352512][T15460] xt_hashlimit: overflow, rate too high: 0 [ 389.416297][T15467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3027'. [ 389.445616][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'. [ 389.667878][T15473] syzkaller0: entered promiscuous mode [ 389.674240][T15473] syzkaller0: entered allmulticast mode [ 391.154070][T15482] tipc: Enabled bearer , priority 0 [ 391.172247][T15493] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 391.181042][T15500] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 391.193112][T15502] tipc: Resetting bearer [ 391.253660][T15476] tipc: Disabling bearer [ 391.261309][T15510] FAULT_INJECTION: forcing a failure. [ 391.261309][T15510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.289518][T15510] CPU: 0 UID: 0 PID: 15510 Comm: syz.2.3043 Not tainted syzkaller #0 PREEMPT(full) [ 391.289547][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.289561][T15510] Call Trace: [ 391.289569][T15510] [ 391.289578][T15510] dump_stack_lvl+0x189/0x250 [ 391.289613][T15510] ? __pfx____ratelimit+0x10/0x10 [ 391.289649][T15510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.289678][T15510] ? __pfx__printk+0x10/0x10 [ 391.289700][T15510] ? __might_fault+0xb0/0x130 [ 391.289742][T15510] should_fail_ex+0x414/0x560 [ 391.289781][T15510] _copy_from_iter+0x1de/0x1790 [ 391.289811][T15510] ? rcu_is_watching+0x15/0xb0 [ 391.289840][T15510] ? kmalloc_reserve+0xbd/0x290 [ 391.289860][T15510] ? __pfx__copy_from_iter+0x10/0x10 [ 391.289886][T15510] ? __build_skb_around+0x262/0x3f0 [ 391.289923][T15510] ? netlink_sendmsg+0x642/0xb30 [ 391.289942][T15510] ? skb_put+0x11b/0x210 [ 391.289965][T15510] netlink_sendmsg+0x6b2/0xb30 [ 391.289997][T15510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.290021][T15510] ? aa_sock_msg_perm+0xf1/0x1d0 [ 391.290054][T15510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.290073][T15510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.290093][T15510] __sock_sendmsg+0x21c/0x270 [ 391.290124][T15510] ____sys_sendmsg+0x505/0x830 [ 391.290151][T15510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.290181][T15510] ? import_iovec+0x74/0xa0 [ 391.290211][T15510] ___sys_sendmsg+0x21f/0x2a0 [ 391.290236][T15510] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.290300][T15510] ? __fget_files+0x2a/0x420 [ 391.290321][T15510] ? __fget_files+0x3a0/0x420 [ 391.290352][T15510] __x64_sys_sendmsg+0x19b/0x260 [ 391.290379][T15510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.290412][T15510] ? __pfx_ksys_write+0x10/0x10 [ 391.290446][T15510] ? do_syscall_64+0xbe/0xfa0 [ 391.290479][T15510] do_syscall_64+0xfa/0xfa0 [ 391.290507][T15510] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.290535][T15510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.290556][T15510] ? clear_bhb_loop+0x60/0xb0 [ 391.290581][T15510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.290601][T15510] RIP: 0033:0x7fe74978f749 [ 391.290621][T15510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.290646][T15510] RSP: 002b:00007fe74a5a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.290668][T15510] RAX: ffffffffffffffda RBX: 00007fe7499e5fa0 RCX: 00007fe74978f749 [ 391.290682][T15510] RDX: 0000000004000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 391.290695][T15510] RBP: 00007fe74a5a2090 R08: 0000000000000000 R09: 0000000000000000 [ 391.290706][T15510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.290717][T15510] R13: 00007fe7499e6038 R14: 00007fe7499e5fa0 R15: 00007ffef438de18 [ 391.290752][T15510] [ 391.786854][T15525] bridge13: entered promiscuous mode [ 391.792250][T15525] bridge13: entered allmulticast mode [ 392.049648][T15540] syzkaller0: entered promiscuous mode [ 392.055475][T15540] syzkaller0: entered allmulticast mode [ 392.076771][T15542] netlink: 'syz.2.3055': attribute type 13 has an invalid length. [ 392.088531][T15542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.096515][T15542] eql: remember to turn off Van-Jacobson compression on your slave devices [ 392.106294][T15542] eql: refused to change device tx_queue_len [ 392.112984][T15542] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 393.464190][T15549] tipc: Enabled bearer , priority 0 [ 393.471545][T15551] syzkaller0: entered promiscuous mode [ 393.477985][T15551] syzkaller0: entered allmulticast mode [ 393.486053][T15553] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 393.505770][T15555] tipc: Resetting bearer [ 393.562957][T15548] tipc: Resetting bearer [ 393.606013][T15548] tipc: Disabling bearer [ 393.692405][T15568] tipc: Enabled bearer , priority 0 [ 393.734605][T15568] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 393.756165][T15568] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 393.798868][T15568] tipc: Resetting bearer [ 393.840576][T15567] tipc: Disabling bearer [ 394.012272][T15593] __nla_validate_parse: 2 callbacks suppressed [ 394.012293][T15593] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3068'. [ 394.050020][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 394.105378][T15596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.226929][T15603] syzkaller0: entered promiscuous mode [ 394.232465][T15603] syzkaller0: entered allmulticast mode [ 394.336223][T15609] tipc: Enabled bearer , priority 0 [ 394.348233][T15607] syzkaller0: entered promiscuous mode [ 394.365902][T15607] syzkaller0: entered allmulticast mode [ 394.384025][T15609] syzkaller0: entered promiscuous mode [ 394.389668][T15609] syzkaller0: entered allmulticast mode [ 394.417652][T15609] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 394.464933][T15609] tipc: Resetting bearer [ 394.481684][T15608] tipc: Resetting bearer [ 394.521460][T15608] tipc: Disabling bearer [ 394.684571][T15624] tipc: Enabled bearer , priority 0 [ 394.696996][T15630] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 394.702432][T15624] syzkaller0: entered promiscuous mode [ 394.712044][T15624] syzkaller0: entered allmulticast mode [ 394.769826][T15624] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 394.816468][T15630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3082'. [ 394.838060][T15630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.854842][T15637] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 394.921663][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3085'. [ 394.938310][T15622] tipc: Resetting bearer [ 394.953242][T15645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3085'. [ 394.995578][T15622] tipc: Disabling bearer [ 395.045406][T15630] vlan3: entered promiscuous mode [ 395.050592][T15630] bond0: entered promiscuous mode [ 395.054403][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 395.228192][T15656] netlink: 'syz.2.3089': attribute type 29 has an invalid length. [ 395.280207][T15656] netlink: 'syz.2.3089': attribute type 29 has an invalid length. [ 395.301387][T15657] syzkaller0: entered promiscuous mode [ 395.312963][T15657] syzkaller0: entered allmulticast mode [ 395.347423][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3091'. [ 395.357195][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3091'. [ 395.407700][T15661] ip6gretap0: entered promiscuous mode [ 395.415883][T15661] syz_tun: entered promiscuous mode [ 395.424353][T15661] debugfs: 'hsr1' already exists in 'hsr' [ 395.430251][T15661] Cannot create hsr debugfs directory [ 395.505053][T15664] tipc: Enabled bearer , priority 0 [ 395.530975][T15664] syzkaller0: entered promiscuous mode [ 395.555128][T15664] syzkaller0: entered allmulticast mode [ 395.580955][T15664] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 395.596212][T15671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3093'. [ 395.627124][T15664] tipc: Resetting bearer [ 395.650185][T15663] tipc: Resetting bearer [ 395.678138][T15663] tipc: Disabling bearer [ 395.687943][T15673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3095'. [ 395.714812][T15671] netlink: 'syz.0.3093': attribute type 29 has an invalid length. [ 395.741235][T15681] tipc: Enabled bearer , priority 0 [ 395.784226][T15681] syzkaller0: entered promiscuous mode [ 395.799068][T15681] syzkaller0: entered allmulticast mode [ 395.848747][T15685] netlink: 'syz.2.3099': attribute type 1 has an invalid length. [ 395.863270][T15681] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 395.898788][T15686] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 395.910002][T15685] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.938055][T15685] vlan3: entered promiscuous mode [ 395.946302][T15685] bond5: entered promiscuous mode [ 395.994633][T15679] tipc: Resetting bearer [ 396.030819][T15679] tipc: Disabling bearer [ 396.349654][T15709] syzkaller0: entered promiscuous mode [ 396.363545][T15709] syzkaller0: entered allmulticast mode [ 396.878763][T15742] xt_time: unknown flags 0xf4 [ 397.272429][T15774] bridge10: entered promiscuous mode [ 397.287212][T15774] bridge10: entered allmulticast mode [ 397.314606][T15777] syzkaller0: entered promiscuous mode [ 397.324741][T15777] syzkaller0: entered allmulticast mode [ 397.558661][T15789] tipc: Enabled bearer , priority 0 [ 397.595545][T15787] tipc: Disabling bearer [ 397.734642][T15797] netlink: 'syz.1.3134': attribute type 4 has an invalid length. [ 397.746179][T15797] netlink: 'syz.1.3134': attribute type 4 has an invalid length. [ 397.769989][T15798] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 (while UP) [ 397.902063][T15802] tipc: Enabled bearer , priority 0 [ 397.934578][T15802] syzkaller0: entered promiscuous mode [ 397.940357][T15802] syzkaller0: entered allmulticast mode [ 397.976092][T15802] tipc: Resetting bearer [ 397.999907][T15801] tipc: Resetting bearer [ 398.036311][T15801] tipc: Disabling bearer [ 398.488987][T15838] netlink: 'syz.1.3149': attribute type 10 has an invalid length. [ 398.559038][T15843] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 398.895129][T15863] veth0_to_bond: entered allmulticast mode [ 399.072247][T15872] __nla_validate_parse: 45 callbacks suppressed [ 399.072340][T15872] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.3162'. [ 399.131289][T15872] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.3162'. [ 399.267231][T15884] netlink: 'syz.2.3167': attribute type 32 has an invalid length. [ 399.283268][T15885] netlink: 'syz.2.3167': attribute type 32 has an invalid length. [ 399.651189][T15903] syz.0.3174 (15903) used obsolete PPPIOCDETACH ioctl [ 399.687995][T15903] erspan0: entered allmulticast mode [ 399.976584][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 400.036156][T15916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3178'. [ 400.068778][T15922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3179'. [ 400.114874][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 400.269176][T15938] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3187'. [ 400.292334][T15938] syzkaller1: entered promiscuous mode [ 400.299275][T15938] syzkaller1: entered allmulticast mode [ 400.364073][T15944] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3187'. [ 400.380048][T15944] netlink: 'syz.3.3187': attribute type 10 has an invalid length. [ 400.406645][T15944] team0: Port device dummy0 added [ 400.515666][T15949] tipc: Enabled bearer , priority 0 [ 400.523746][T15949] syzkaller0: entered promiscuous mode [ 400.529279][T15949] syzkaller0: entered allmulticast mode [ 400.549766][T15949] tipc: Resetting bearer [ 400.562260][T15950] tipc: Enabled bearer , priority 10 [ 400.569989][T15948] tipc: Resetting bearer [ 400.587051][T15948] tipc: Disabling bearer [ 400.821082][T15962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3196'. [ 400.900199][T15966] netlink: 'syz.2.3198': attribute type 1 has an invalid length. [ 400.924684][T15966] netlink: 'syz.2.3198': attribute type 2 has an invalid length. [ 401.118064][T15977] veth13: entered allmulticast mode [ 401.130910][T15979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.172326][T15981] tipc: Enabled bearer , priority 0 [ 401.184932][T15981] syzkaller0: entered promiscuous mode [ 401.190637][T15981] syzkaller0: entered allmulticast mode [ 401.214139][T15983] vlan1: entered promiscuous mode [ 401.219318][T15983] bridge0: entered promiscuous mode [ 401.238686][T15981] tipc: Resetting bearer [ 401.247257][T15980] tipc: Resetting bearer [ 401.273450][T15980] tipc: Disabling bearer [ 401.392239][T15988] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3206'. [ 401.477315][T15992] netlink: 'syz.4.3210': attribute type 1 has an invalid length. [ 401.557090][T15992] bond9: (slave ip6gretap1): making interface the new active one [ 401.566296][T15992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 401.576064][T15992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 401.585248][T15992] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 401.907460][T16016] tunl0: entered promiscuous mode [ 401.915828][T16016] netlink: 'syz.2.3216': attribute type 3 has an invalid length. [ 402.118216][T16024] tipc: Enabled bearer , priority 0 [ 402.130515][T16024] syzkaller0: entered promiscuous mode [ 402.139785][T16024] syzkaller0: entered allmulticast mode [ 402.209522][T16028] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 402.235670][T16028] bond4 (unregistering): Released all slaves [ 402.262391][T16040] [ 402.264774][T16040] ====================================================== [ 402.271814][T16040] WARNING: possible circular locking dependency detected [ 402.278872][T16040] syzkaller #0 Not tainted [ 402.283309][T16040] ------------------------------------------------------ [ 402.290481][T16040] syz.4.3220/16040 is trying to acquire lock: [ 402.296942][T16040] ffffffff8f4264d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 402.306381][T16040] [ 402.306381][T16040] but task is already holding lock: [ 402.313765][T16040] ffff88807c59df70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 402.323131][T16040] [ 402.323131][T16040] which lock already depends on the new lock. [ 402.323131][T16040] [ 402.333625][T16040] [ 402.333625][T16040] the existing dependency chain (in reverse order) is: [ 402.342651][T16040] [ 402.342651][T16040] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 402.350745][T16040] lock_acquire+0x120/0x360 [ 402.355780][T16040] _raw_spin_lock_bh+0x36/0x50 [ 402.361165][T16040] nr_rt_device_down+0x12a/0x720 [ 402.366722][T16040] nr_device_event+0x137/0x150 [ 402.372123][T16040] notifier_call_chain+0x1b6/0x3e0 [ 402.377778][T16040] __dev_notify_flags+0x18d/0x2e0 [ 402.383326][T16040] netif_change_flags+0xe8/0x1a0 [ 402.388795][T16040] dev_change_flags+0x130/0x260 [ 402.394258][T16040] dev_ioctl+0x7b4/0x1150 [ 402.399127][T16040] sock_do_ioctl+0x22c/0x300 [ 402.411055][T16040] sock_ioctl+0x576/0x790 [ 402.415949][T16040] __se_sys_ioctl+0xfc/0x170 [ 402.421176][T16040] do_syscall_64+0xfa/0xfa0 [ 402.426228][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.432651][T16040] [ 402.432651][T16040] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 402.440747][T16040] lock_acquire+0x120/0x360 [ 402.445777][T16040] _raw_spin_lock_bh+0x36/0x50 [ 402.451080][T16040] nr_rt_device_down+0xa9/0x720 [ 402.456566][T16040] nr_device_event+0x137/0x150 [ 402.461855][T16040] notifier_call_chain+0x1b6/0x3e0 [ 402.467611][T16040] __dev_notify_flags+0x18d/0x2e0 [ 402.473171][T16040] netif_change_flags+0xe8/0x1a0 [ 402.478641][T16040] dev_change_flags+0x130/0x260 [ 402.484019][T16040] dev_ioctl+0x7b4/0x1150 [ 402.488966][T16040] sock_do_ioctl+0x22c/0x300 [ 402.494224][T16040] sock_ioctl+0x576/0x790 [ 402.499103][T16040] __se_sys_ioctl+0xfc/0x170 [ 402.504243][T16040] do_syscall_64+0xfa/0xfa0 [ 402.509373][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.515810][T16040] [ 402.515810][T16040] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 402.523753][T16040] validate_chain+0xb9b/0x2140 [ 402.529069][T16040] __lock_acquire+0xab9/0xd20 [ 402.534477][T16040] lock_acquire+0x120/0x360 [ 402.539622][T16040] _raw_spin_lock_bh+0x36/0x50 [ 402.545024][T16040] nr_remove_neigh+0x25/0xe0 [ 402.550162][T16040] nr_add_node+0x1d9f/0x2570 [ 402.555375][T16040] nr_rt_ioctl+0xc12/0xd50 [ 402.560352][T16040] sock_do_ioctl+0xdc/0x300 [ 402.565404][T16040] sock_ioctl+0x576/0x790 [ 402.570281][T16040] __se_sys_ioctl+0xfc/0x170 [ 402.575524][T16040] do_syscall_64+0xfa/0xfa0 [ 402.580590][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.587111][T16040] [ 402.587111][T16040] other info that might help us debug this: [ 402.587111][T16040] [ 402.597507][T16040] Chain exists of: [ 402.597507][T16040] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 402.597507][T16040] [ 402.611372][T16040] Possible unsafe locking scenario: [ 402.611372][T16040] [ 402.618903][T16040] CPU0 CPU1 [ 402.624290][T16040] ---- ---- [ 402.629672][T16040] lock(&nr_node->node_lock); [ 402.634710][T16040] lock(nr_node_list_lock); [ 402.641823][T16040] lock(&nr_node->node_lock); [ 402.649115][T16040] lock(nr_neigh_list_lock); [ 402.653884][T16040] [ 402.653884][T16040] *** DEADLOCK *** [ 402.653884][T16040] [ 402.662028][T16040] 1 lock held by syz.4.3220/16040: [ 402.667137][T16040] #0: ffff88807c59df70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 402.676913][T16040] [ 402.676913][T16040] stack backtrace: [ 402.682807][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.4.3220 Not tainted syzkaller #0 PREEMPT(full) [ 402.682829][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.682841][T16040] Call Trace: [ 402.682848][T16040] [ 402.682856][T16040] dump_stack_lvl+0x189/0x250 [ 402.682884][T16040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.682907][T16040] ? __pfx__printk+0x10/0x10 [ 402.682922][T16040] ? stack_trace_save+0x9c/0xe0 [ 402.682951][T16040] print_circular_bug+0x2ee/0x310 [ 402.682974][T16040] check_noncircular+0x134/0x160 [ 402.682998][T16040] validate_chain+0xb9b/0x2140 [ 402.683027][T16040] __lock_acquire+0xab9/0xd20 [ 402.683046][T16040] ? nr_remove_neigh+0x25/0xe0 [ 402.683066][T16040] lock_acquire+0x120/0x360 [ 402.683080][T16040] ? nr_remove_neigh+0x25/0xe0 [ 402.683104][T16040] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.683127][T16040] ? nr_remove_neigh+0x25/0xe0 [ 402.683148][T16040] _raw_spin_lock_bh+0x36/0x50 [ 402.683169][T16040] ? nr_remove_neigh+0x25/0xe0 [ 402.683189][T16040] nr_remove_neigh+0x25/0xe0 [ 402.683211][T16040] nr_add_node+0x1d9f/0x2570 [ 402.683232][T16040] ? dev_get_by_name+0x21/0x200 [ 402.683252][T16040] ? dev_get_by_name+0x21/0x200 [ 402.683271][T16040] ? dev_get_by_name+0x21/0x200 [ 402.683289][T16040] ? nr_call_to_digi+0x136/0x1b0 [ 402.683309][T16040] nr_rt_ioctl+0xc12/0xd50 [ 402.683334][T16040] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 402.683352][T16040] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.683379][T16040] ? apparmor_capable+0x137/0x1b0 [ 402.683401][T16040] ? capable+0x89/0xe0 [ 402.683419][T16040] ? nr_ioctl+0x1b1/0x3b0 [ 402.683436][T16040] sock_do_ioctl+0xdc/0x300 [ 402.683459][T16040] ? __pfx_sock_do_ioctl+0x10/0x10 [ 402.683487][T16040] sock_ioctl+0x576/0x790 [ 402.683508][T16040] ? __pfx_sock_ioctl+0x10/0x10 [ 402.683529][T16040] ? __fget_files+0x3a0/0x420 [ 402.683544][T16040] ? __fget_files+0x2a/0x420 [ 402.683560][T16040] ? bpf_lsm_file_ioctl+0x9/0x20 [ 402.683579][T16040] ? __pfx_sock_ioctl+0x10/0x10 [ 402.683598][T16040] __se_sys_ioctl+0xfc/0x170 [ 402.683621][T16040] do_syscall_64+0xfa/0xfa0 [ 402.683644][T16040] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.683666][T16040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.683688][T16040] ? clear_bhb_loop+0x60/0xb0 [ 402.683706][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.683723][T16040] RIP: 0033:0x7fb430d8f749 [ 402.683739][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.683753][T16040] RSP: 002b:00007fb431caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.683771][T16040] RAX: ffffffffffffffda RBX: 00007fb430fe6180 RCX: 00007fb430d8f749 [ 402.683783][T16040] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 402.683794][T16040] RBP: 00007fb430e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 402.683804][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.683815][T16040] R13: 00007fb430fe6218 R14: 00007fb430fe6180 R15: 00007ffe5a9a3b68 [ 402.683835][T16040] [ 402.989067][T16024] tipc: Resetting bearer [ 403.525849][T16022] tipc: Resetting bearer [ 403.567635][T16022] tipc: Disabling bearer