last executing test programs: 2.300668194s ago: executing program 1 (id=6931): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00001c00000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x800) 2.208551183s ago: executing program 1 (id=6933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x24, 0x101, 0x70bd22, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.091901142s ago: executing program 4 (id=6935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r3, 0x0, r7, 0x0, 0x47, 0x0) sendmsg$can_raw(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1d, r2}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)=@canfd={{0x4, 0x1, 0x1}, 0x3d, 0x1, 0x0, 0x0, "5f885520c668977d43b8bd2b5f39b902b0c20db4b66adb2e85dc4f514782eb811768d5b969cf6bab67db5f7998bb972819eca27236e391986b7b05e455c78bb0"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x240088c0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r8, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) recvmsg(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x90) 2.0586405s ago: executing program 1 (id=6938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffed6, &(0x7f0000000200)={&(0x7f0000000140)=@deltclass={0x6c, 0x29, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xfff3, 0x2}, {0x0, 0x5}}, [@TCA_RATE={0x0, 0x5, {0x6, 0x8}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x81}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_USC={0x0, 0x3, {0xf8, 0x0, 0xb}}]}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r4, 0x29, 0x5e, 0x5, 0x81, 0x12, @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7, 0x10, 0x6, 0x21}}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(0x4) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x94, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7e10}, {0x8, 0x13, 0x5}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.784156863s ago: executing program 2 (id=6941): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000240)=0x4ab8a40e, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$rxrpc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000083ea17917afe36ccca1bfb6be92a67727bbb0495838cfbd9f528fa503b3bbe21ba0b5e2ac0f932425b5b4860d3e65478afbc7c12957294d0fb8232114b88a40e49b2080000000000000012d437c1295f1895adbbb6f12aaa6f82a0fb514ca3975e57d3c9e1d4ca712fcdf9fdf69b7895132b1d09aef2df47eaa544cb", @ANYRES16=r0, @ANYBLOB="010000000000fddbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.687189139s ago: executing program 2 (id=6943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd70000000000804"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 1.49410644s ago: executing program 2 (id=6945): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @multicast1, @broadcast}, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000200)=0x4, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) close(r2) close(r1) (async) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r8}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r8, 0x5}, &(0x7f0000000280)=0xc) (async) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r10, &(0x7f0000000080)="5b20bc9cc46a", 0x6) (async) socket(0x10, 0x80002, 0x0) 1.252203397s ago: executing program 2 (id=6948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000030000f11c0000001800018014000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.220796772s ago: executing program 0 (id=6950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x3c, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x88, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x473}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 1.104256008s ago: executing program 1 (id=6952): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async) ioctl(r1, 0x8b22, &(0x7f0000000040)) 1.104134083s ago: executing program 2 (id=6953): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x4, 0x4) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x11, 0xffffffffffffffff, 0x100000000) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.101522675s ago: executing program 4 (id=6954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f", 0x11) r2 = socket(0xa, 0x3, 0x4) socket(0x15, 0x800, 0x9) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0xfffffffe, 0x5) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x79b, 0x4) syz_emit_ethernet(0x1ee, &(0x7f0000000440)={@empty, @link_local, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x80}, {0x1, 0x0, 0x1}], @ipv6=@tcp={0x9, 0x6, "509074", 0x1ac, 0x6, 0x1, @private0, @empty, {[@routing={0x0, 0x2, 0x2, 0xe, 0x0, [@remote]}, @hopopts={0x1d, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x8, [0x7f, 0xa952]}}]}, @routing={0x0, 0xc, 0x0, 0x9, 0x0, [@private1, @private2, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1]}, @routing={0x0, 0x2, 0x0, 0x4, 0x0, [@remote]}, @srh={0xbb, 0xa, 0x4, 0x5, 0x7, 0x10, 0x5, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x87, 0x4, 0x2, 0x1d, 0x0, [@loopback, @mcast2]}, @fragment={0x32, 0x0, 0x40, 0x0, 0x0, 0x1f, 0x64}], {{0x4e22, 0x4e24, r3, r4, 0x0, 0x0, 0x11, 0x79f609d11e5c5cd9, 0x8, 0x0, 0x7, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x4}, @eol, @fastopen={0x22, 0x7, "e54da45780"}, @md5sig={0x13, 0x12, "3a7f8e7146e2738dab5982d012ab4aa3"}, @fastopen={0x22, 0xb, "8d61387f28dfbc2550"}]}}, {"53f08abb90db04d9950478b537872f48f3b934ed64e451dd31f510eb0ca8ae74"}}}}}}}}, &(0x7f00000001c0)={0x1, 0x4, [0x657, 0x375, 0x225, 0x409]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x20044084}, 0x8854) 1.064676552s ago: executing program 0 (id=6956): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd70000000000904"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 967.877185ms ago: executing program 2 (id=6957): setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r0 = socket(0xf, 0x6, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20050000}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/155, 0x9b}], 0x2}, 0x40002020) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xff, 0xff, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000040)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r7, 0x1ad72f7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f00000000c0)="c204299ffcd8a532c9831e9f9dbdf6b4125f56e9e8b4ab56d1a8c884f835bfdd437b7214c164ca072ca4db68854c55b9f59cafe7c9a0048dfa109cda264f553f7ac04217bff3f3bfdd3724da6c759f75354de70f0363a2b211d2cb09794c60c185574592c7cef2903ab73c486f352b460cd8f8f6a931f59337", &(0x7f00000003c0)=""/210, &(0x7f0000000140)="76b3180d238a06fe", &(0x7f0000000e40)="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", 0x79, r9, 0x4}, 0x38) r10 = accept4(r7, 0x0, 0x0, 0x80000) recvmsg$kcm(r10, &(0x7f0000000780)={&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f00000005c0)=""/246, 0xf6}, {&(0x7f00000006c0)=""/80, 0x50}], 0x3, &(0x7f0000001e40)=""/4096, 0x1000}, 0x40012023) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="90000000051400032cbd70050000002508000100010000000800030000000000080001000000000008000300040000400800010001000000080003000400afb80800010000000000080003000200000008000100080001000100000008000300010000000800010000000000080003000000000008000100000000000800030000000000"], 0x90}, 0x1, 0x0, 0x0, 0x24040000}, 0x8004) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000802000000011fe060000000005000900150c0000", @ANYRES32=0x0, @ANYBLOB="08000700e0d49c919181f6cd00000200001500001bdee64a096f6dac"], 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) 882.445046ms ago: executing program 4 (id=6959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) 764.155005ms ago: executing program 1 (id=6960): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000020000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt(r1, 0x84, 0x80, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x3ff, 0x9, &(0x7f00000009c0)="9193773856b6c65fd536a1cc4b8b1b4a0a692019e306a5b5f82bc85966db24d12deb1bd61c8e2d57de7dcad59b75dd8a465c7dab15a26b4fd50998b0070adecab360a95ab3a17fdecf56204683d216ad033efe5e8ad0a9ec4d33ad7a6a9a51b5cf65be631fbe58254c0859f2f12928c408944c200802473d85432a786197a50359164cbbe142f51f51acb6d09089553ae2247b66c4e097fa80c3fbfe449bdc5226f6f220d42f9b11200cdbf689acfe2d074a9f40ed4bf7e11d7f8d216cff9b20bef6e1b508c8c7249f5e41feeb1fade3e2cfec9c7e1733945b3d719accc75c416fc660724f64ec29d4a9fdf3910f9c2e90b857e306ed9bc3", 0xf8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}], 0x2}, 0x40000001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61106200000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d786046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000ff44b0a4577fa8e6084e9c47687f2330203a0a3edca9d4ffc012df1006a70ed9b841cfdedac17240dfe4171bcf94e05bc14f0063ce9e3f18e133ff27db7fc3fa53cc587cc58ece5f86f7a6520eeea8b3e88509"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) sendto$packet(r5, 0x0, 0x0, 0x20044080, &(0x7f0000000200)={0x11, 0x2, 0x0, 0x1, 0xfe, 0x6, @random="5483ccb17b06"}, 0x14) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048851}, 0x4000890) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000840)) 763.991437ms ago: executing program 3 (id=6961): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48) 763.795854ms ago: executing program 0 (id=6962): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000a00)={&(0x7f0000000040)=@phonet={0x23, 0x10, 0x8, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x20000}, 0x4800) 697.821761ms ago: executing program 4 (id=6963): r0 = getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200040006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESOCT=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in6=@loopback, 0x4c21, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x37f, 0xfffffffffffffffd, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r12, r3, 0x4, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000800)={r14, "6208ebacff4626c7f32e183f0d613566"}) sendmsg$NFT_MSG_GETCHAIN(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000040a01040000000000000000000000027a3000"/32], 0x20}, 0x1, 0x0, 0x0, 0x8890}, 0x4040814) r15 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 681.086113ms ago: executing program 0 (id=6964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000240)={'wlan1\x00', @multicast}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002a0009000000000001000000000c000900000000007b3eebe8a49f07dd4860dce63e26a7ad96bca1db3a0b69019aa8e1357b7a0a46d348f43d921ace9c57fd462ebe84f1ee40e0ffc4e3099912aaeddb", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 616.309557ms ago: executing program 3 (id=6965): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) 567.245132ms ago: executing program 3 (id=6966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x3c, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x8c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x473}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 457.840053ms ago: executing program 0 (id=6967): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', r4, 0x80, 0x10, 0x0, 0x2, {{0x36, 0x4, 0x2, 0x21, 0xd8, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x2, [{@broadcast, 0x6}, {@multicast1, 0x10001}]}, @lsrr={0x83, 0x2b, 0xdf, [@broadcast, @multicast1, @loopback, @multicast2, @multicast1, @loopback, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010101]}, @generic={0x94, 0x2}, @rr={0x7, 0x27, 0xd7, [@multicast1, @broadcast, @multicast2, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @private=0xa010102]}, @cipso={0x86, 0x57, 0x3, [{0x2, 0xa, "f85afb99f0496a8e"}, {0x1, 0x7, "3859ab6943"}, {0x5, 0x7, "62d464c6d2"}, {0x2, 0x11, "80d615239c38bd4bfbeaf74887757f"}, {0x1, 0x9, "88706ae6ce6420"}, {0x1, 0x3, "17"}, {0x6, 0x2}, {0x3, 0xe, "1ef78fd107be7fd3ce39cbfc"}, {0x5, 0xc, "9da2f2592e3ca593bec7"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x1, 0xfd, 0x2, 0x0, 0x1, 0x900}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x24000000) 418.670289ms ago: executing program 3 (id=6968): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x8, 0x4, 0xda5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13b}], 0x2}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 327.599477ms ago: executing program 3 (id=6969): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)=@newpolicy={0x278, 0x13, 0x1, 0x70bd2a, 0x25dfdbff, {{@in6=@mcast2, @in=@private=0xa010101, 0x4e21, 0x2, 0x4e22, 0x7f, 0xa, 0x20, 0x80, 0x32, r0, 0xffffffffffffffff}, {0x4, 0x3, 0x0, 0x6, 0x7, 0x401, 0x1, 0x1}, {0x5, 0x783, 0xb73, 0x3}, 0xfff, 0x6e6bc0, 0x0, 0x1, 0x2, 0x1}, [@policy_type={0xa}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x2, 0xf}}, @etimer_thresh={0x8, 0xc, 0x9}, @lifetime_val={0x24, 0x9, {0x2, 0xffffffffffffffff, 0x2fa3, 0x8}}, @tfcpad={0x8, 0x16, 0x5}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xa, 0xb9, 0x2}}, @srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @algo_auth_trunc={0x107, 0x14, {{'hmac(sha1)\x00'}, 0x5d8, 0x2b4daa1149a019c0, "96530fb5254c584f87fdfbbddc2728d1ec9a0d081f814bda6582678960133e3d2e833b2d8ed944753aac73fe416ef7b71ccb18e66d1e8d07240cb9b27a23660531cfe9bfc3deb39f371f7e9acb8c80821f549a785dad475b732de0de60b640d871211f5f1f3726354fb0034453e73f913ad3a6c43e61bc7d72e5b1d8ec427f97a2733947ee63dd3878a42a2067928573943faa34ecb7382a297badc418269bc8b08fe1aeebcc4ca26610f17d5c224a16c4d1bbaba8cf81ad36ea38"}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x80000001}, [@generic={0x4, 0x1, 0x4, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x1, 0x6, 0x7, 0x5, 0x7}]}, &(0x7f0000000440)='syzkaller\x00', 0xf1, 0x1000, &(0x7f0000000480)=""/4096, 0x40f00, 0x2, '\x00', r0, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0x0, 0x2, 0x3110}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)=[0x1, 0xffffffffffffffff], &(0x7f0000001540)=[{0x4, 0x3, 0x4, 0x9}, {0x5, 0x3, 0xd}, {0x4, 0x1, 0x0, 0x1}, {0x4, 0x2, 0x3, 0x2}, {0x0, 0x2, 0x10, 0xc}, {0x0, 0x1, 0x10, 0x2}, {0x5, 0x4, 0x1}, {0x1, 0x4, 0x8, 0xd}], 0x10, 0x2687}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000001680)=r1}, 0x20) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg(r3, &(0x7f0000001a00)={&(0x7f0000001700)=@llc={0x1a, 0x18, 0x9, 0x10, 0x10, 0xf6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001780)="804a0b386f1d69c3c81794142094ffb4465ddc6cd244ad7acad68c833b855128198dd92649922e468fdb63dd1d95978a7fb7e2db625113e51304b9e8cfe423f557be31d2a05358f4bf269ee2", 0x4c}, {&(0x7f0000001800)="e7e0123283baf76c4dbc15516c810449f1053349dd83ab838e99bf5d9c22d35138870f304981c5b2485f1b35a5be84a0f8e6857fc142bc66b934a7bb9dc5033e6d04", 0x42}], 0x2, &(0x7f00000018c0)=[{0x58, 0x10f, 0x5, "9b9883a85151bfa18cea84ca92d97ab624a76b4d66dd8a4780e917061f0d9a63769e170a6346440dcc85f22891fa4c81fdef340abfd0aa61a89ae96ca8d61985fe"}, {0xb8, 0x113, 0x8, "ea374d713e219a83b75794e8f34db68dcf446db553c067b543814f3de0f12ac13fe206ac5adfe55617dee0c399c3258b70c2113f3d6748cc4434c4a440f2d7a404654cf9ac81d37455c7972aae85406bb8b036c29cd44c3b712bb5df9c4e4a68eeebfd054ec969f8ff8b5fd71ca195b6f80e2a0761628f66054b83e95796c0b9344a70d6e7674f4462679e1af65ff2695ef5021f1c64294758e0ba149edaab236839d22d"}], 0x110}, 0x20008081) (async) r4 = socket(0x23, 0x2, 0x6) (async) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffd) getsockopt(r3, 0x8, 0x8, &(0x7f0000001a40)=""/22, &(0x7f0000001a80)=0x16) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001b00), r4) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x50, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x50}}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x50, r7, 0x3c288e98f9306bb6, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc, 0x5b}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x501c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x44) r9 = accept4$unix(r4, &(0x7f0000001e00), &(0x7f0000001e80)=0x6e, 0x80800) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r9, 0x942e, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001ec0)) getsockopt$inet6_buf(r4, 0x29, 0xcc, &(0x7f0000001f00)=""/141, &(0x7f0000001fc0)=0x8d) (async) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000002000)={0x2, 0x4e21, @loopback}, 0x10) (async) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x5c, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40104}, 0x4000000) recvfrom$ax25(r4, &(0x7f0000002180)=""/4096, 0x1000, 0x40, &(0x7f0000003180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000003200)={"00626c4c1370a9918884cdf9b35b1c68", 0x0, 0x0, {0x747, 0x200}, {0x7, 0x10000}, 0x5, [0xfa7a0000000000, 0x0, 0x1, 0xce8, 0x5, 0x8000000000000001, 0x8, 0x10000, 0x2ac, 0x2, 0x3, 0x8, 0x7, 0x80000000, 0x0, 0xef]}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000003300)=r11) (async) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), r2) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x58, r12, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x1) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), r5) sendmsg$TIPC_NL_BEARER_SET(r13, &(0x7f0000004640)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004600)={&(0x7f0000003540)={0x10b8, r14, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x759}]}, @TIPC_NLA_NODE={0x107c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "0c842c1139d6d576f85a0ef718efa861469e759240398f"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff801}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c1970686aee9c90ef9f0f172722c60465b812ef85b940c6698aa"}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}]}, 0x10b8}, 0x1, 0x0, 0x0, 0x81}, 0x1) 240.193787ms ago: executing program 4 (id=6970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x4000) socket(0x2d, 0x3, 0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket(0x400000000010, 0x3, 0x0) 176.195265ms ago: executing program 0 (id=6971): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r4 = socket(0x11, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) unshare(0x48000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r7, @ANYRES16=r3, @ANYRESOCT=r2], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r10, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x448d1) pwrite64(r9, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100)=""/252, &(0x7f0000000200)=0xfc) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 84.484353ms ago: executing program 4 (id=6972): r0 = socket(0x22, 0x4, 0xa3c) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe17f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040000) (async) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000140)=0x1581003) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x313}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff3b98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000003c0)={'bond_slave_1\x00', @broadcast}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0xe010) (async) r5 = socket(0x1a, 0xa, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000005c0)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x1404, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000840)={{{@in=@local, @in=@multicast2, 0x4e22, 0xc0, 0x4e20, 0x7a2c, 0x2, 0x80, 0x80, 0x2c, 0x0, r8}, {0x9, 0x4915, 0x0, 0x2, 0xff, 0x4, 0x7f9, 0x4}, {0x2, 0x9, 0x1, 0x401}, 0x7fff, 0x6e6bb5, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x6c}, 0xa, @in6=@mcast2, 0x3507, 0x4, 0x3, 0x5, 0xc, 0xd, 0x1}}, 0xe8) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) ioctl$int_out(r3, 0x2a30, &(0x7f00000009c0)) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000a00)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x41, r7}) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000a40)) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r10, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xbf}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040000}, 0x4804) 202.234µs ago: executing program 1 (id=6973): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000005000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x800) 0s ago: executing program 3 (id=6974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b, 0x8000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) kernel console output (not intermixed with test programs): [T22069] ? __asan_memcpy+0x40/0x70 [ 469.494974][T22069] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.495032][T22069] ? skb_clone+0x246/0x3a0 [ 469.495064][T22069] ? __netlink_deliver_tap+0x807/0x850 [ 469.495087][T22069] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.495131][T22069] netlink_unicast+0x82c/0x9e0 [ 469.495175][T22069] ? __pfx_netlink_unicast+0x10/0x10 [ 469.495212][T22069] ? netlink_sendmsg+0x642/0xb30 [ 469.495234][T22069] ? skb_put+0x11b/0x210 [ 469.495263][T22069] netlink_sendmsg+0x805/0xb30 [ 469.495298][T22069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.495326][T22069] ? aa_sock_msg_perm+0xf1/0x1d0 [ 469.495360][T22069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.495394][T22069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.495419][T22069] __sock_sendmsg+0x219/0x270 [ 469.495455][T22069] __sys_sendto+0x3bd/0x520 [ 469.495483][T22069] ? __pfx___sys_sendto+0x10/0x10 [ 469.495519][T22069] ? count_memcg_event_mm+0x21/0x260 [ 469.495558][T22069] ? exc_page_fault+0x76/0xf0 [ 469.495596][T22069] ? do_user_addr_fault+0xc85/0x1380 [ 469.495625][T22069] __x64_sys_sendto+0xde/0x100 [ 469.495654][T22069] do_syscall_64+0xfa/0x3b0 [ 469.495675][T22069] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.495709][T22069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.495732][T22069] ? clear_bhb_loop+0x60/0xb0 [ 469.495759][T22069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.495781][T22069] RIP: 0033:0x7f8c1eb90d5c [ 469.495802][T22069] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 469.495822][T22069] RSP: 002b:00007f8c1f9c6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 469.495846][T22069] RAX: ffffffffffffffda RBX: 00007f8c1f9c6fc0 RCX: 00007f8c1eb90d5c [ 469.495863][T22069] RDX: 0000000000000020 RSI: 00007f8c1f9c7010 RDI: 0000000000000003 [ 469.495877][T22069] RBP: 0000000000000000 R08: 00007f8c1f9c6f14 R09: 000000000000000c [ 469.495892][T22069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 469.495905][T22069] R13: 00007f8c1f9c6f68 R14: 00007f8c1f9c7010 R15: 0000000000000000 [ 469.495940][T22069] [ 469.935295][T22085] tipc: Enabled bearer , priority 0 [ 469.943737][T22085] syzkaller0: entered promiscuous mode [ 469.949282][T22085] syzkaller0: entered allmulticast mode [ 469.950808][T22091] netlink: 'syz.1.5362': attribute type 2 has an invalid length. [ 469.970484][T22085] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 470.009956][T22085] tipc: Resetting bearer [ 470.020304][T22084] tipc: Resetting bearer [ 470.079657][T22084] tipc: Disabling bearer [ 470.240826][T22104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5367'. [ 470.346280][T22111] netlink: 'syz.2.5370': attribute type 10 has an invalid length. [ 470.524847][T22120] netlink: 'syz.3.5374': attribute type 83 has an invalid length. [ 470.619999][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5377'. [ 471.901880][T22205] pim6reg1: entered promiscuous mode [ 471.912688][T22205] pim6reg1: entered allmulticast mode [ 472.006864][T22214] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 472.150912][T22222] netlink: 'syz.4.5413': attribute type 4 has an invalid length. [ 472.193052][T22224] netlink: 'syz.1.5414': attribute type 1 has an invalid length. [ 472.330293][T22232] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 472.344613][T22232] bond9 (unregistering): Released all slaves [ 472.555936][T22241] batadv_slave_0: left promiscuous mode [ 472.585815][T22253] __nla_validate_parse: 13 callbacks suppressed [ 472.585837][T22253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5420'. [ 472.626799][T22255] syz.4.5421: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 472.629594][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5422'. [ 472.651841][T22255] CPU: 0 UID: 0 PID: 22255 Comm: syz.4.5421 Not tainted syzkaller #0 PREEMPT(full) [ 472.651875][T22255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.651889][T22255] Call Trace: [ 472.651899][T22255] [ 472.651909][T22255] dump_stack_lvl+0x189/0x250 [ 472.651946][T22255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.651974][T22255] ? __pfx__printk+0x10/0x10 [ 472.652010][T22255] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 472.652041][T22255] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 472.652073][T22255] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 472.652107][T22255] warn_alloc+0x214/0x310 [ 472.652140][T22255] ? stack_depot_save_flags+0x40/0x860 [ 472.652176][T22255] ? __pfx_warn_alloc+0x10/0x10 [ 472.652216][T22255] ? kasan_save_track+0x4f/0x80 [ 472.652243][T22255] ? xskq_create+0x56/0x170 [ 472.652276][T22255] ? xsk_init_queue+0xb0/0x110 [ 472.652307][T22255] ? xsk_setsockopt+0x4dc/0x8d0 [ 472.652339][T22255] ? do_sock_setsockopt+0x17c/0x1b0 [ 472.652365][T22255] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 472.652390][T22255] ? do_syscall_64+0xfa/0x3b0 [ 472.652413][T22255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.652447][T22255] __vmalloc_node_range_noprof+0x125/0x12f0 [ 472.652507][T22255] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 472.652544][T22255] ? __kasan_kmalloc+0x93/0xb0 [ 472.652575][T22255] vmalloc_user_noprof+0xad/0xf0 [ 472.652607][T22255] ? xskq_create+0xbf/0x170 [ 472.652653][T22255] xskq_create+0xbf/0x170 [ 472.652690][T22255] xsk_init_queue+0xb0/0x110 [ 472.652729][T22255] xsk_setsockopt+0x4dc/0x8d0 [ 472.652766][T22255] ? __pfx_xsk_setsockopt+0x10/0x10 [ 472.652799][T22255] ? __pfx_aa_sk_perm+0x10/0x10 [ 472.652835][T22255] ? aa_sock_opt_perm+0xff/0x1b0 [ 472.652872][T22255] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 472.652909][T22255] ? __pfx_xsk_setsockopt+0x10/0x10 [ 472.652945][T22255] do_sock_setsockopt+0x17c/0x1b0 [ 472.652978][T22255] __x64_sys_setsockopt+0x13f/0x1b0 [ 472.653012][T22255] do_syscall_64+0xfa/0x3b0 [ 472.653034][T22255] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.653071][T22255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.653094][T22255] ? clear_bhb_loop+0x60/0xb0 [ 472.653123][T22255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.653146][T22255] RIP: 0033:0x7f8c1eb8eec9 [ 472.653166][T22255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.653185][T22255] RSP: 002b:00007f8c1f9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.653210][T22255] RAX: ffffffffffffffda RBX: 00007f8c1ede6090 RCX: 00007f8c1eb8eec9 [ 472.653226][T22255] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 472.653240][T22255] RBP: 00007f8c1ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 472.653256][T22255] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.653272][T22255] R13: 00007f8c1ede6128 R14: 00007f8c1ede6090 R15: 00007ffc8751ee48 [ 472.653309][T22255] [ 472.653351][T22255] Mem-Info: [ 472.674980][T22241] team1: left promiscuous mode [ 472.688183][T22255] active_anon:4899 inactive_anon:0 isolated_anon:0 [ 472.688183][T22255] active_file:3472 inactive_file:40055 isolated_file:0 [ 472.688183][T22255] unevictable:768 dirty:161 writeback:0 [ 472.688183][T22255] slab_reclaimable:13876 slab_unreclaimable:139485 [ 472.688183][T22255] mapped:29536 shmem:1360 pagetables:1364 [ 472.688183][T22255] sec_pagetables:0 bounce:0 [ 472.688183][T22255] kernel_misc_reclaimable:0 [ 472.688183][T22255] free:1286028 free_pcp:12880 free_cma:0 [ 473.011898][T22241] geneve2: left promiscuous mode [ 473.032185][T22255] Node 0 active_anon:19996kB inactive_anon:0kB active_file:13888kB inactive_file:160020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138644kB dirty:644kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13716kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 473.065089][T22241] ipvlan2: left promiscuous mode [ 473.080235][T22241] ipvlan3: left promiscuous mode [ 473.089918][T22255] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 473.122293][T22241] bond6: left promiscuous mode [ 473.131214][T22255] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.172902][T22241] veth3: left promiscuous mode [ 473.178632][T22255] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 473.184686][T22255] Node 0 DMA32 free:1230596kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19732kB inactive_anon:0kB active_file:13888kB inactive_file:159700kB unevictable:1536kB writepending:620kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:41456kB local_pcp:20364kB free_cma:0kB [ 473.217516][T22255] lowmem_reserve[]: 0 0 0 0 0 [ 473.222378][T22255] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.251577][T22255] lowmem_reserve[]: 0 0 0 0 0 [ 473.256462][T22255] Node 1 Normal free:3898164kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9792kB local_pcp:5408kB free_cma:0kB [ 473.288143][T22255] lowmem_reserve[]: 0 0 0 0 0 [ 473.293590][T22255] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 473.306653][T22255] Node 0 DMA32: 3006*4kB (UM) 1968*8kB (UM) 991*16kB (UM) 809*32kB (UME) 671*64kB (UM) 494*128kB (UME) 453*256kB (UM) 244*512kB (UME) 129*1024kB (UME) 9*2048kB (UM) 162*4096kB (UM) = 1230664kB [ 473.334051][T22255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 473.345871][T22255] Node 1 Normal: 193*4kB (UME) 50*8kB (UME) 46*16kB (UME) 200*32kB (UME) 59*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3898164kB [ 473.350085][ T6020] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.364232][T22255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.364260][T22255] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.364280][T22255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.364299][T22255] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.364319][T22255] 44885 total pagecache pages [ 473.364329][T22255] 0 pages in swap cache [ 473.364340][T22255] Free swap = 124996kB [ 473.364350][T22255] Total swap = 124996kB [ 473.364363][T22255] 2097051 pages RAM [ 473.364373][T22255] 0 pages HighMem/MovableOnly [ 473.364384][T22255] 423781 pages reserved [ 473.364393][T22255] 0 pages cma reserved [ 473.452782][ T6020] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 473.461330][T22272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5424'. [ 473.587856][ T6020] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.609253][ T6020] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 473.629287][T22283] dummy0: left allmulticast mode [ 473.635118][T22283] dummy0: left promiscuous mode [ 473.644862][T22283] bridge0: port 3(dummy0) entered disabled state [ 473.690456][T22283] bridge_slave_0: left allmulticast mode [ 473.709400][T22283] bridge_slave_0: left promiscuous mode [ 473.716891][T22283] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.762789][T22283] bond0: (slave bridge_slave_1): Releasing backup interface [ 473.776198][T22283] bond0: (slave bond_slave_0): Releasing backup interface [ 473.793629][T22283] bond0: (slave bond_slave_1): Releasing backup interface [ 473.808562][T22283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.816808][T22283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.826700][T22283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.835317][T22283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.850751][T22283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 473.870226][ T6020] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.883548][ T6020] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 473.892687][ T6020] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.901192][ T6020] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 474.003800][T22304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.179034][T22312] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 474.186344][T22312] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 474.213753][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5439'. [ 474.286414][T22324] netlink: 'syz.4.5441': attribute type 4 has an invalid length. [ 474.309629][T22324] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5441'. [ 474.823626][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5455'. [ 474.835895][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5455'. [ 474.846243][T22358] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5455'. [ 474.855462][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5455'. [ 474.864858][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5455'. [ 474.911153][T22364] "syz.3.5457" (22364) uses obsolete ecb(arc4) skcipher [ 475.382157][T22391] pimreg: left allmulticast mode [ 475.383608][T22394] netlink: 'syz.0.5468': attribute type 1 has an invalid length. [ 475.490622][T22394] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.544340][T22399] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.571940][T22399] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 475.605862][T22399] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 475.864683][T22421] tipc: Enabled bearer , priority 0 [ 475.893521][T22428] sctp: [Deprecated]: syz.0.5478 (pid 22428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.893521][T22428] Use struct sctp_sack_info instead [ 475.910591][T22421] syzkaller0: entered promiscuous mode [ 475.919248][T22421] syzkaller0: entered allmulticast mode [ 475.948848][T22421] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 476.118974][T22420] tipc: Resetting bearer [ 476.262090][T22420] tipc: Disabling bearer [ 476.449299][T22466] netlink: 'syz.0.5487': attribute type 1 has an invalid length. [ 476.518636][T22466] 8021q: adding VLAN 0 to HW filter on device bond10 [ 476.748929][T22488] netlink: 'syz.4.5495': attribute type 8 has an invalid length. [ 476.761012][T22488] netlink: 'syz.4.5495': attribute type 1 has an invalid length. [ 476.914220][T22495] tipc: Enabled bearer , priority 0 [ 476.931916][T22495] syzkaller0: entered promiscuous mode [ 476.937454][T22495] syzkaller0: entered allmulticast mode [ 476.978602][T22495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 477.138330][T22493] tipc: Resetting bearer [ 477.247248][T22493] tipc: Disabling bearer [ 477.297993][T22521] netlink: 'syz.2.5504': attribute type 4 has an invalid length. [ 478.028259][T22564] __nla_validate_parse: 20 callbacks suppressed [ 478.028284][T22564] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5514'. [ 478.082867][T22564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5514'. [ 478.206167][T22570] tipc: Enabling of bearer rejected, already enabled [ 478.222919][T22570] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 478.304950][T22582] netlink: 'syz.1.5520': attribute type 4 has an invalid length. [ 478.319690][T22582] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5520'. [ 478.333844][T22584] netlink: 'syz.3.5521': attribute type 4 has an invalid length. [ 478.372754][T22584] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5521'. [ 478.410608][T22584] wlan1: mtu less than device minimum [ 478.498128][T22593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5524'. [ 479.470363][T22653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5543'. [ 479.776161][T22668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5546'. [ 480.096941][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5554'. [ 480.098426][T22691] FAULT_INJECTION: forcing a failure. [ 480.098426][T22691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.150285][T22691] CPU: 1 UID: 0 PID: 22691 Comm: syz.1.5553 Not tainted syzkaller #0 PREEMPT(full) [ 480.150318][T22691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 480.150333][T22691] Call Trace: [ 480.150342][T22691] [ 480.150360][T22691] dump_stack_lvl+0x189/0x250 [ 480.150393][T22691] ? __pfx____ratelimit+0x10/0x10 [ 480.150429][T22691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.150458][T22691] ? __pfx__printk+0x10/0x10 [ 480.150492][T22691] ? __might_fault+0xb0/0x130 [ 480.150533][T22691] should_fail_ex+0x414/0x560 [ 480.150571][T22691] _copy_from_iter+0x1de/0x1790 [ 480.150603][T22691] ? rcu_is_watching+0x15/0xb0 [ 480.150630][T22691] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 480.150661][T22691] ? __pfx__copy_from_iter+0x10/0x10 [ 480.150686][T22691] ? __build_skb_around+0x257/0x3e0 [ 480.150714][T22691] ? netlink_sendmsg+0x642/0xb30 [ 480.150737][T22691] ? skb_put+0x11b/0x210 [ 480.150765][T22691] netlink_sendmsg+0x6b2/0xb30 [ 480.150801][T22691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.150829][T22691] ? aa_sock_msg_perm+0xf1/0x1d0 [ 480.150863][T22691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.150897][T22691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.150923][T22691] __sock_sendmsg+0x219/0x270 [ 480.150960][T22691] ____sys_sendmsg+0x505/0x830 [ 480.150994][T22691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.151032][T22691] ? import_iovec+0x74/0xa0 [ 480.151062][T22691] ___sys_sendmsg+0x21f/0x2a0 [ 480.151092][T22691] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.151161][T22691] ? __fget_files+0x2a/0x420 [ 480.151190][T22691] ? __fget_files+0x3a0/0x420 [ 480.151231][T22691] __x64_sys_sendmsg+0x19b/0x260 [ 480.151266][T22691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.151302][T22691] ? __pfx_ksys_write+0x10/0x10 [ 480.151326][T22691] ? rcu_is_watching+0x15/0xb0 [ 480.151363][T22691] ? do_syscall_64+0xbe/0x3b0 [ 480.151389][T22691] do_syscall_64+0xfa/0x3b0 [ 480.151410][T22691] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.151444][T22691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.151467][T22691] ? clear_bhb_loop+0x60/0xb0 [ 480.151495][T22691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.151518][T22691] RIP: 0033:0x7f4a60d8eec9 [ 480.151539][T22691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.151559][T22691] RSP: 002b:00007f4a61bfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.151583][T22691] RAX: ffffffffffffffda RBX: 00007f4a60fe5fa0 RCX: 00007f4a60d8eec9 [ 480.151601][T22691] RDX: 0000000060044804 RSI: 0000200000000140 RDI: 0000000000000003 [ 480.151616][T22691] RBP: 00007f4a61bfb090 R08: 0000000000000000 R09: 0000000000000000 [ 480.151630][T22691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.151644][T22691] R13: 00007f4a60fe6038 R14: 00007f4a60fe5fa0 R15: 00007ffda272ed78 [ 480.151680][T22691] [ 480.604572][T22706] tipc: Enabling of bearer rejected, already enabled [ 480.681977][T22706] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 480.748111][T22713] netlink: 'syz.0.5562': attribute type 4 has an invalid length. [ 480.757612][T22713] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5562'. [ 480.778270][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5560'. [ 480.806168][T22715] netlink: 'syz.3.5560': attribute type 18 has an invalid length. [ 480.828967][T22715] netlink: 'syz.3.5560': attribute type 18 has an invalid length. [ 480.911707][T22723] tipc: Can't bind to reserved service type 1 [ 480.962654][T22729] netlink: 'syz.3.5566': attribute type 4 has an invalid length. [ 480.970568][T22729] wlan1: mtu less than device minimum [ 481.157885][T22742] FAULT_INJECTION: forcing a failure. [ 481.157885][T22742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.184993][T22742] CPU: 1 UID: 0 PID: 22742 Comm: syz.2.5570 Not tainted syzkaller #0 PREEMPT(full) [ 481.185033][T22742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.185049][T22742] Call Trace: [ 481.185058][T22742] [ 481.185069][T22742] dump_stack_lvl+0x189/0x250 [ 481.185102][T22742] ? __pfx____ratelimit+0x10/0x10 [ 481.185138][T22742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.185167][T22742] ? __pfx__printk+0x10/0x10 [ 481.185199][T22742] ? __might_fault+0xb0/0x130 [ 481.185240][T22742] should_fail_ex+0x414/0x560 [ 481.185278][T22742] _copy_from_iter+0x1de/0x1790 [ 481.185310][T22742] ? rcu_is_watching+0x15/0xb0 [ 481.185338][T22742] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 481.185368][T22742] ? __pfx__copy_from_iter+0x10/0x10 [ 481.185393][T22742] ? __build_skb_around+0x257/0x3e0 [ 481.185421][T22742] ? netlink_sendmsg+0x642/0xb30 [ 481.185444][T22742] ? skb_put+0x11b/0x210 [ 481.185472][T22742] netlink_sendmsg+0x6b2/0xb30 [ 481.185506][T22742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.185535][T22742] ? aa_sock_msg_perm+0xf1/0x1d0 [ 481.185569][T22742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.185604][T22742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.185630][T22742] __sock_sendmsg+0x219/0x270 [ 481.185667][T22742] ____sys_sendmsg+0x505/0x830 [ 481.185701][T22742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.185739][T22742] ? import_iovec+0x74/0xa0 [ 481.185769][T22742] ___sys_sendmsg+0x21f/0x2a0 [ 481.185800][T22742] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.185873][T22742] ? __fget_files+0x2a/0x420 [ 481.185902][T22742] ? __fget_files+0x3a0/0x420 [ 481.185965][T22742] __x64_sys_sendmsg+0x19b/0x260 [ 481.185995][T22742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.186043][T22742] ? __pfx_ksys_write+0x10/0x10 [ 481.186068][T22742] ? rcu_is_watching+0x15/0xb0 [ 481.186099][T22742] ? do_syscall_64+0xbe/0x3b0 [ 481.186127][T22742] do_syscall_64+0xfa/0x3b0 [ 481.186149][T22742] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.186184][T22742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.186207][T22742] ? clear_bhb_loop+0x60/0xb0 [ 481.186236][T22742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.186257][T22742] RIP: 0033:0x7fbf8918eec9 [ 481.186279][T22742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.186300][T22742] RSP: 002b:00007fbf8a0ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.186324][T22742] RAX: ffffffffffffffda RBX: 00007fbf893e5fa0 RCX: 00007fbf8918eec9 [ 481.186342][T22742] RDX: 0000000008000812 RSI: 0000200000000080 RDI: 0000000000000004 [ 481.186358][T22742] RBP: 00007fbf8a0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 481.186373][T22742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.186387][T22742] R13: 00007fbf893e6038 R14: 00007fbf893e5fa0 R15: 00007ffdbff329e8 [ 481.186423][T22742] [ 481.910281][T22771] netlink: 'syz.2.5577': attribute type 4 has an invalid length. [ 482.066229][T22778] FAULT_INJECTION: forcing a failure. [ 482.066229][T22778] name failslab, interval 1, probability 0, space 0, times 0 [ 482.111220][T22778] CPU: 1 UID: 0 PID: 22778 Comm: syz.1.5579 Not tainted syzkaller #0 PREEMPT(full) [ 482.111256][T22778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.111271][T22778] Call Trace: [ 482.111281][T22778] [ 482.111291][T22778] dump_stack_lvl+0x189/0x250 [ 482.111324][T22778] ? __pfx____ratelimit+0x10/0x10 [ 482.111361][T22778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.111389][T22778] ? __pfx__printk+0x10/0x10 [ 482.111429][T22778] ? __pfx___might_resched+0x10/0x10 [ 482.111453][T22778] ? fs_reclaim_acquire+0x7d/0x100 [ 482.111490][T22778] should_fail_ex+0x414/0x560 [ 482.111527][T22778] should_failslab+0xa8/0x100 [ 482.111559][T22778] __kmalloc_cache_noprof+0x70/0x3d0 [ 482.111586][T22778] ? rtnl_newlink+0xfb/0x1c80 [ 482.111614][T22778] rtnl_newlink+0xfb/0x1c80 [ 482.111641][T22778] ? __lock_acquire+0xab9/0xd20 [ 482.111669][T22778] ? __pfx_rtnl_newlink+0x10/0x10 [ 482.111704][T22778] ? is_bpf_text_address+0x26/0x2b0 [ 482.111736][T22778] ? __lock_acquire+0xab9/0xd20 [ 482.111771][T22778] ? __lock_acquire+0xab9/0xd20 [ 482.111815][T22778] ? is_bpf_text_address+0x26/0x2b0 [ 482.111843][T22778] ? is_bpf_text_address+0x292/0x2b0 [ 482.111865][T22778] ? is_bpf_text_address+0x26/0x2b0 [ 482.111896][T22778] ? __lock_acquire+0xab9/0xd20 [ 482.111944][T22778] ? __pfx_rtnl_newlink+0x10/0x10 [ 482.111983][T22778] rtnetlink_rcv_msg+0x7cc/0xb70 [ 482.112005][T22778] ? __lock_acquire+0xab9/0xd20 [ 482.112027][T22778] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 482.112049][T22778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.112090][T22778] netlink_rcv_skb+0x205/0x470 [ 482.112112][T22778] ? __lock_acquire+0xab9/0xd20 [ 482.112139][T22778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.112165][T22778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.112200][T22778] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.112234][T22778] netlink_unicast+0x82c/0x9e0 [ 482.112277][T22778] ? __pfx_netlink_unicast+0x10/0x10 [ 482.112314][T22778] ? netlink_sendmsg+0x642/0xb30 [ 482.112336][T22778] ? skb_put+0x11b/0x210 [ 482.112365][T22778] netlink_sendmsg+0x805/0xb30 [ 482.112399][T22778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.112427][T22778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 482.112461][T22778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.112495][T22778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.112529][T22778] __sock_sendmsg+0x219/0x270 [ 482.112573][T22778] ____sys_sendmsg+0x505/0x830 [ 482.112607][T22778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.112645][T22778] ? import_iovec+0x74/0xa0 [ 482.112676][T22778] ___sys_sendmsg+0x21f/0x2a0 [ 482.112705][T22778] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.112770][T22778] ? __fget_files+0x2a/0x420 [ 482.112801][T22778] ? __fget_files+0x3a0/0x420 [ 482.112843][T22778] __x64_sys_sendmsg+0x19b/0x260 [ 482.112874][T22778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.112912][T22778] ? __pfx_ksys_write+0x10/0x10 [ 482.112937][T22778] ? rcu_is_watching+0x15/0xb0 [ 482.112967][T22778] ? do_syscall_64+0xbe/0x3b0 [ 482.112994][T22778] do_syscall_64+0xfa/0x3b0 [ 482.113015][T22778] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.113049][T22778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.113072][T22778] ? clear_bhb_loop+0x60/0xb0 [ 482.113099][T22778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.113122][T22778] RIP: 0033:0x7f4a60d8eec9 [ 482.113149][T22778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.113170][T22778] RSP: 002b:00007f4a61bfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.113195][T22778] RAX: ffffffffffffffda RBX: 00007f4a60fe5fa0 RCX: 00007f4a60d8eec9 [ 482.113213][T22778] RDX: 0000000060044804 RSI: 0000200000000140 RDI: 0000000000000003 [ 482.113229][T22778] RBP: 00007f4a61bfb090 R08: 0000000000000000 R09: 0000000000000000 [ 482.113244][T22778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.113258][T22778] R13: 00007f4a60fe6038 R14: 00007f4a60fe5fa0 R15: 00007ffda272ed78 [ 482.113294][T22778] [ 482.703144][T22799] FAULT_INJECTION: forcing a failure. [ 482.703144][T22799] name failslab, interval 1, probability 0, space 0, times 0 [ 482.723957][T22799] CPU: 0 UID: 0 PID: 22799 Comm: syz.2.5584 Not tainted syzkaller #0 PREEMPT(full) [ 482.723990][T22799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.724004][T22799] Call Trace: [ 482.724013][T22799] [ 482.724023][T22799] dump_stack_lvl+0x189/0x250 [ 482.724056][T22799] ? __pfx____ratelimit+0x10/0x10 [ 482.724099][T22799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.724125][T22799] ? __pfx__printk+0x10/0x10 [ 482.724160][T22799] ? __pfx___might_resched+0x10/0x10 [ 482.724183][T22799] ? fs_reclaim_acquire+0x7d/0x100 [ 482.724218][T22799] should_fail_ex+0x414/0x560 [ 482.724254][T22799] should_failslab+0xa8/0x100 [ 482.724284][T22799] __kmalloc_noprof+0xcb/0x4f0 [ 482.724310][T22799] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 482.724347][T22799] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 482.724385][T22799] genl_family_rcv_msg_doit+0xb8/0x300 [ 482.724423][T22799] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.724462][T22799] ? apparmor_capable+0x137/0x1b0 [ 482.724488][T22799] ? bpf_lsm_capable+0x9/0x20 [ 482.724512][T22799] ? security_capable+0x7e/0x2e0 [ 482.724549][T22799] genl_rcv_msg+0x60e/0x790 [ 482.724584][T22799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.724612][T22799] ? __pfx_ieee802154_llsec_add_key+0x10/0x10 [ 482.724666][T22799] netlink_rcv_skb+0x205/0x470 [ 482.724686][T22799] ? __lock_acquire+0xab9/0xd20 [ 482.724708][T22799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.724737][T22799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.724782][T22799] ? down_read+0x1ad/0x2e0 [ 482.724809][T22799] genl_rcv+0x28/0x40 [ 482.724835][T22799] netlink_unicast+0x82c/0x9e0 [ 482.724878][T22799] ? __pfx_netlink_unicast+0x10/0x10 [ 482.724912][T22799] ? netlink_sendmsg+0x642/0xb30 [ 482.724932][T22799] ? skb_put+0x11b/0x210 [ 482.724960][T22799] netlink_sendmsg+0x805/0xb30 [ 482.724993][T22799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.725020][T22799] ? aa_sock_msg_perm+0xf1/0x1d0 [ 482.725051][T22799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.725091][T22799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.725115][T22799] __sock_sendmsg+0x219/0x270 [ 482.725151][T22799] ____sys_sendmsg+0x505/0x830 [ 482.725184][T22799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.725223][T22799] ? import_iovec+0x74/0xa0 [ 482.725253][T22799] ___sys_sendmsg+0x21f/0x2a0 [ 482.725283][T22799] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.725353][T22799] ? __fget_files+0x2a/0x420 [ 482.725382][T22799] ? __fget_files+0x3a0/0x420 [ 482.725425][T22799] __x64_sys_sendmsg+0x19b/0x260 [ 482.725456][T22799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.725495][T22799] ? __pfx_ksys_write+0x10/0x10 [ 482.725518][T22799] ? rcu_is_watching+0x15/0xb0 [ 482.725551][T22799] ? do_syscall_64+0xbe/0x3b0 [ 482.725578][T22799] do_syscall_64+0xfa/0x3b0 [ 482.725600][T22799] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.725635][T22799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.725658][T22799] ? clear_bhb_loop+0x60/0xb0 [ 482.725686][T22799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.725708][T22799] RIP: 0033:0x7fbf8918eec9 [ 482.725729][T22799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.725749][T22799] RSP: 002b:00007fbf8a0ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.725773][T22799] RAX: ffffffffffffffda RBX: 00007fbf893e5fa0 RCX: 00007fbf8918eec9 [ 482.725790][T22799] RDX: 0000000008000812 RSI: 0000200000000080 RDI: 0000000000000004 [ 482.725829][T22799] RBP: 00007fbf8a0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 482.725844][T22799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.725858][T22799] R13: 00007fbf893e6038 R14: 00007fbf893e5fa0 R15: 00007ffdbff329e8 [ 482.725894][T22799] [ 483.156849][T22804] netlink: 'syz.0.5585': attribute type 58 has an invalid length. [ 483.165669][T22804] __nla_validate_parse: 6 callbacks suppressed [ 483.165690][T22804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5585'. [ 483.212982][T22807] FAULT_INJECTION: forcing a failure. [ 483.212982][T22807] name failslab, interval 1, probability 0, space 0, times 0 [ 483.238140][T22807] CPU: 0 UID: 0 PID: 22807 Comm: syz.4.5587 Not tainted syzkaller #0 PREEMPT(full) [ 483.238173][T22807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.238188][T22807] Call Trace: [ 483.238198][T22807] [ 483.238209][T22807] dump_stack_lvl+0x189/0x250 [ 483.238243][T22807] ? __pfx____ratelimit+0x10/0x10 [ 483.238279][T22807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.238308][T22807] ? __pfx__printk+0x10/0x10 [ 483.238346][T22807] ? __pfx___might_resched+0x10/0x10 [ 483.238371][T22807] ? fs_reclaim_acquire+0x7d/0x100 [ 483.238408][T22807] should_fail_ex+0x414/0x560 [ 483.238446][T22807] should_failslab+0xa8/0x100 [ 483.238478][T22807] __kmalloc_noprof+0xcb/0x4f0 [ 483.238504][T22807] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 483.238544][T22807] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 483.238585][T22807] genl_family_rcv_msg_doit+0xb8/0x300 [ 483.238624][T22807] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 483.238665][T22807] ? apparmor_capable+0x137/0x1b0 [ 483.238692][T22807] ? bpf_lsm_capable+0x9/0x20 [ 483.238717][T22807] ? security_capable+0x7e/0x2e0 [ 483.238755][T22807] genl_rcv_msg+0x60e/0x790 [ 483.238793][T22807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.238822][T22807] ? __pfx_netlbl_calipso_remove+0x10/0x10 [ 483.238863][T22807] netlink_rcv_skb+0x205/0x470 [ 483.238884][T22807] ? __lock_acquire+0xab9/0xd20 [ 483.238906][T22807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.238938][T22807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.238984][T22807] ? down_read+0x1ad/0x2e0 [ 483.239012][T22807] genl_rcv+0x28/0x40 [ 483.239047][T22807] netlink_unicast+0x82c/0x9e0 [ 483.239093][T22807] ? __pfx_netlink_unicast+0x10/0x10 [ 483.239130][T22807] ? netlink_sendmsg+0x642/0xb30 [ 483.239156][T22807] ? skb_put+0x11b/0x210 [ 483.239185][T22807] netlink_sendmsg+0x805/0xb30 [ 483.239220][T22807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.239249][T22807] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.239283][T22807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.239317][T22807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.239343][T22807] __sock_sendmsg+0x219/0x270 [ 483.239380][T22807] ____sys_sendmsg+0x505/0x830 [ 483.239415][T22807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.239453][T22807] ? import_iovec+0x74/0xa0 [ 483.239485][T22807] ___sys_sendmsg+0x21f/0x2a0 [ 483.239515][T22807] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.239586][T22807] ? __fget_files+0x2a/0x420 [ 483.239616][T22807] ? __fget_files+0x3a0/0x420 [ 483.239659][T22807] __x64_sys_sendmsg+0x19b/0x260 [ 483.239690][T22807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.239730][T22807] ? __pfx_ksys_write+0x10/0x10 [ 483.239754][T22807] ? rcu_is_watching+0x15/0xb0 [ 483.239786][T22807] ? do_syscall_64+0xbe/0x3b0 [ 483.239814][T22807] do_syscall_64+0xfa/0x3b0 [ 483.239836][T22807] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.239871][T22807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.239894][T22807] ? clear_bhb_loop+0x60/0xb0 [ 483.239922][T22807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.239944][T22807] RIP: 0033:0x7f8c1eb8eec9 [ 483.239964][T22807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.239984][T22807] RSP: 002b:00007f8c1f9c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.240008][T22807] RAX: ffffffffffffffda RBX: 00007f8c1ede5fa0 RCX: 00007f8c1eb8eec9 [ 483.240025][T22807] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000004 [ 483.240047][T22807] RBP: 00007f8c1f9c8090 R08: 0000000000000000 R09: 0000000000000000 [ 483.240061][T22807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.240076][T22807] R13: 00007f8c1ede6038 R14: 00007f8c1ede5fa0 R15: 00007ffc8751ee48 [ 483.240112][T22807] [ 483.697983][T22809] netlink: 'syz.2.5588': attribute type 4 has an invalid length. [ 483.745509][T22809] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5588'. [ 484.982991][T22889] tipc: Enabled bearer , priority 0 [ 485.144587][T22889] syzkaller0: entered promiscuous mode [ 485.164782][T22889] syzkaller0: entered allmulticast mode [ 485.183584][T22895] tipc: Resetting bearer [ 485.305673][T22910] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5621'. [ 485.476890][T22883] tipc: Resetting bearer [ 487.013818][T22883] tipc: Disabling bearer [ 487.023848][T22918] tipc: Enabled bearer , priority 0 [ 487.031073][T22930] syzkaller0: entered promiscuous mode [ 487.037012][T22930] syzkaller0: entered allmulticast mode [ 487.052567][T22938] syzkaller0: mtu greater than device maximum [ 487.062330][T22917] tipc: Resetting bearer [ 487.123057][T22917] tipc: Disabling bearer [ 487.163156][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5629'. [ 487.211984][T22954] netlink: 'syz.1.5631': attribute type 4 has an invalid length. [ 487.227729][T22954] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5631'. [ 487.304637][T22956] FAULT_INJECTION: forcing a failure. [ 487.304637][T22956] name failslab, interval 1, probability 0, space 0, times 0 [ 487.337771][T22956] CPU: 1 UID: 0 PID: 22956 Comm: syz.0.5632 Not tainted syzkaller #0 PREEMPT(full) [ 487.337805][T22956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.337820][T22956] Call Trace: [ 487.337829][T22956] [ 487.337840][T22956] dump_stack_lvl+0x189/0x250 [ 487.337873][T22956] ? __pfx____ratelimit+0x10/0x10 [ 487.337909][T22956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.337938][T22956] ? __pfx__printk+0x10/0x10 [ 487.337974][T22956] ? __lock_acquire+0xab9/0xd20 [ 487.338007][T22956] should_fail_ex+0x414/0x560 [ 487.338044][T22956] should_failslab+0xa8/0x100 [ 487.338076][T22956] kmem_cache_alloc_noprof+0x73/0x3c0 [ 487.338103][T22956] ? skb_clone+0x212/0x3a0 [ 487.338137][T22956] skb_clone+0x212/0x3a0 [ 487.338170][T22956] __netlink_deliver_tap+0x404/0x850 [ 487.338209][T22956] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.338234][T22956] netlink_deliver_tap+0x19c/0x1b0 [ 487.338260][T22956] netlink_unicast+0x7fa/0x9e0 [ 487.338305][T22956] ? __pfx_netlink_unicast+0x10/0x10 [ 487.338341][T22956] ? netlink_sendmsg+0x642/0xb30 [ 487.338363][T22956] ? skb_put+0x11b/0x210 [ 487.338392][T22956] netlink_sendmsg+0x805/0xb30 [ 487.338427][T22956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.338455][T22956] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.338490][T22956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.338524][T22956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.338550][T22956] __sock_sendmsg+0x219/0x270 [ 487.338587][T22956] sock_write_iter+0x279/0x360 [ 487.338621][T22956] ? __pfx_sock_write_iter+0x10/0x10 [ 487.338679][T22956] do_iter_readv_writev+0x623/0x8c0 [ 487.338723][T22956] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 487.338750][T22956] ? common_file_perm+0x1b5/0x230 [ 487.338786][T22956] ? bpf_lsm_file_permission+0x9/0x20 [ 487.338808][T22956] ? security_file_permission+0x75/0x290 [ 487.338836][T22956] ? rw_verify_area+0x255/0x4d0 [ 487.338866][T22956] vfs_writev+0x31a/0x960 [ 487.338904][T22956] ? __lock_acquire+0xab9/0xd20 [ 487.338928][T22956] ? __pfx_vfs_writev+0x10/0x10 [ 487.338978][T22956] ? __fget_files+0x2a/0x420 [ 487.339013][T22956] ? __fget_files+0x3a0/0x420 [ 487.339042][T22956] ? __fget_files+0x2a/0x420 [ 487.339083][T22956] do_writev+0x14d/0x2d0 [ 487.339119][T22956] ? __pfx_do_writev+0x10/0x10 [ 487.339148][T22956] ? rcu_is_watching+0x15/0xb0 [ 487.339180][T22956] ? do_syscall_64+0xbe/0x3b0 [ 487.339208][T22956] do_syscall_64+0xfa/0x3b0 [ 487.339229][T22956] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.339264][T22956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.339286][T22956] ? clear_bhb_loop+0x60/0xb0 [ 487.339315][T22956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.339337][T22956] RIP: 0033:0x7fb4fd38eec9 [ 487.339358][T22956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.339378][T22956] RSP: 002b:00007fb4fe266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 487.339402][T22956] RAX: ffffffffffffffda RBX: 00007fb4fd5e5fa0 RCX: 00007fb4fd38eec9 [ 487.339419][T22956] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 487.339434][T22956] RBP: 00007fb4fe266090 R08: 0000000000000000 R09: 0000000000000000 [ 487.339449][T22956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.339463][T22956] R13: 00007fb4fd5e6038 R14: 00007fb4fd5e5fa0 R15: 00007ffc15c4ee68 [ 487.339499][T22956] [ 488.039498][T22985] netlink: 'syz.2.5645': attribute type 4 has an invalid length. [ 488.048236][T22985] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5645'. [ 488.214416][T22995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5647'. [ 488.607221][T23020] netlink: 'syz.0.5657': attribute type 21 has an invalid length. [ 488.616784][T23022] netlink: 'syz.4.5658': attribute type 4 has an invalid length. [ 488.625412][T23022] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5658'. [ 488.702982][T23024] netlink: 'syz.1.5659': attribute type 12 has an invalid length. [ 488.823620][T23024] bond4: option primary_reselect: invalid value (255) [ 488.879240][T23024] bond4 (unregistering): Released all slaves [ 489.017540][T23044] tipc: Enabled bearer , priority 0 [ 489.064082][T23044] syzkaller0: entered promiscuous mode [ 489.069629][T23044] syzkaller0: entered allmulticast mode [ 489.134196][T23044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 489.184767][T23044] tipc: Resetting bearer [ 489.384754][T23043] tipc: Resetting bearer [ 489.424382][T23043] tipc: Disabling bearer [ 489.428580][T23071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5673'. [ 489.635560][T23080] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 489.644846][T23080] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 490.025389][T23107] tipc: Enabled bearer , priority 0 [ 490.043192][T23107] syzkaller0: entered promiscuous mode [ 490.064074][T23107] syzkaller0: entered allmulticast mode [ 490.083124][T23107] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 490.108444][T23107] tipc: Resetting bearer [ 490.149036][T23104] tipc: Resetting bearer [ 490.215438][T23104] tipc: Disabling bearer [ 490.266377][T23120] netlink: 'syz.3.5693': attribute type 9 has an invalid length. [ 490.301123][T23120] netlink: 'syz.3.5693': attribute type 1 has an invalid length. [ 490.301648][T23121] netlink: 'syz.3.5693': attribute type 1 has an invalid length. [ 490.373878][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5697'. [ 490.455192][T23125] tipc: Enabling of bearer rejected, already enabled [ 490.749930][T23144] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 490.881232][T23151] tipc: Enabled bearer , priority 0 [ 490.889170][T23151] syzkaller0: entered promiscuous mode [ 490.920125][T23151] syzkaller0: entered allmulticast mode [ 490.957187][T23151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5707'. [ 490.969977][T23151] tipc: Resetting bearer [ 490.987103][T23150] tipc: Resetting bearer [ 491.041832][T23150] tipc: Disabling bearer [ 491.060671][T23157] tipc: Enabled bearer , priority 0 [ 491.192502][T23162] syzkaller0: entered promiscuous mode [ 491.211539][T23162] syzkaller0: entered allmulticast mode [ 491.248389][T23157] tipc: Resetting bearer [ 491.303797][T23179] FAULT_INJECTION: forcing a failure. [ 491.303797][T23179] name failslab, interval 1, probability 0, space 0, times 0 [ 491.337386][T23179] CPU: 0 UID: 0 PID: 23179 Comm: syz.0.5717 Not tainted syzkaller #0 PREEMPT(full) [ 491.337416][T23179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.337431][T23179] Call Trace: [ 491.337440][T23179] [ 491.337449][T23179] dump_stack_lvl+0x189/0x250 [ 491.337479][T23179] ? __pfx____ratelimit+0x10/0x10 [ 491.337515][T23179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.337542][T23179] ? __pfx__printk+0x10/0x10 [ 491.337580][T23179] ? __pfx___might_resched+0x10/0x10 [ 491.337601][T23179] ? fs_reclaim_acquire+0x7d/0x100 [ 491.337634][T23179] should_fail_ex+0x414/0x560 [ 491.337668][T23179] should_failslab+0xa8/0x100 [ 491.337698][T23179] __kmalloc_noprof+0xcb/0x4f0 [ 491.337724][T23179] ? kfree+0x4d/0x440 [ 491.337744][T23179] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 491.337782][T23179] tomoyo_realpath_from_path+0xe3/0x5d0 [ 491.337814][T23179] ? tomoyo_domain+0xd9/0x130 [ 491.337851][T23179] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 491.337875][T23179] tomoyo_path_number_perm+0x1e8/0x5a0 [ 491.337906][T23179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.337954][T23179] ? __lock_acquire+0xab9/0xd20 [ 491.337996][T23179] ? __fget_files+0x2a/0x420 [ 491.338026][T23179] ? __fget_files+0x2a/0x420 [ 491.338052][T23179] ? __fget_files+0x3a0/0x420 [ 491.338077][T23179] ? __fget_files+0x2a/0x420 [ 491.338110][T23179] security_file_ioctl+0xcb/0x2d0 [ 491.338140][T23179] __se_sys_ioctl+0x47/0x170 [ 491.338175][T23179] do_syscall_64+0xfa/0x3b0 [ 491.338197][T23179] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.338228][T23179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.338248][T23179] ? clear_bhb_loop+0x60/0xb0 [ 491.338273][T23179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.338292][T23179] RIP: 0033:0x7fb4fd38eec9 [ 491.338312][T23179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.338332][T23179] RSP: 002b:00007fb4fe266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.338356][T23179] RAX: ffffffffffffffda RBX: 00007fb4fd5e5fa0 RCX: 00007fb4fd38eec9 [ 491.338372][T23179] RDX: 0000200000000980 RSI: 00000000000089e0 RDI: 0000000000000003 [ 491.338386][T23179] RBP: 00007fb4fe266090 R08: 0000000000000000 R09: 0000000000000000 [ 491.338399][T23179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.338411][T23179] R13: 00007fb4fd5e6038 R14: 00007fb4fd5e5fa0 R15: 00007ffc15c4ee68 [ 491.338444][T23179] [ 491.338455][T23179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.568257][T23186] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5719'. [ 491.607320][T23156] tipc: Resetting bearer [ 491.646502][T23190] netlink: 'syz.0.5721': attribute type 16 has an invalid length. [ 491.654799][T23190] netlink: 'syz.0.5721': attribute type 17 has an invalid length. [ 492.879815][T23156] tipc: Disabling bearer [ 492.892596][T23185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5720'. [ 492.915436][T23190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.027465][T23197] netlink: 'syz.2.5723': attribute type 4 has an invalid length. [ 493.050166][T23197] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5723'. [ 493.103762][T23205] tipc: Enabling of bearer rejected, already enabled [ 493.161051][T23205] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 493.168834][T23205] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 493.607059][T23241] netlink: 'syz.0.5736': attribute type 21 has an invalid length. [ 493.625850][T23241] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5736'. [ 493.636738][T23241] netlink: 'syz.0.5736': attribute type 5 has an invalid length. [ 493.645206][T23241] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5736'. [ 493.663032][T23246] netlink: 'syz.3.5738': attribute type 1 has an invalid length. [ 493.750479][T23251] netlink: 'syz.4.5739': attribute type 1 has an invalid length. [ 493.758387][T23251] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5739'. [ 493.768458][T23251] netlink: 'syz.4.5739': attribute type 1 has an invalid length. [ 494.081902][T23266] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5745'. [ 494.566606][T23296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5755'. [ 494.627540][T23304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5757'. [ 494.858836][T23309] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5759'. [ 494.873150][T23309] netlink: 'syz.0.5759': attribute type 2 has an invalid length. [ 494.983508][T23317] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5763'. [ 495.175926][T23330] netlink: 'syz.0.5768': attribute type 4 has an invalid length. [ 495.185492][T23330] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5768'. [ 495.200373][T23333] netlink: 'syz.4.5769': attribute type 4 has an invalid length. [ 495.209837][T23333] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5769'. [ 495.219365][T23333] wlan1: mtu less than device minimum [ 495.481057][T23347] C: entered promiscuous mode [ 495.493782][T23347] tunl0: entered promiscuous mode [ 495.503169][T23347] gre0: entered promiscuous mode [ 495.518836][T23347] tipc: Resetting bearer [ 495.535708][T23347] erspan0: entered promiscuous mode [ 495.558129][T23347] ip_vti0: entered promiscuous mode [ 495.577463][T23347] ip6_vti0: entered promiscuous mode [ 495.614394][T23347] sit0: entered promiscuous mode [ 495.676461][T23347] ip6tnl0: entered promiscuous mode [ 495.703999][T23347] ip6gre0: entered promiscuous mode [ 495.724334][T23347] ip6gretap0: entered promiscuous mode [ 495.736879][T23347] bridge0: entered promiscuous mode [ 495.744544][T23347] bond0: entered promiscuous mode [ 495.753885][T23362] netlink: 'syz.4.5778': attribute type 2 has an invalid length. [ 495.761843][T23347] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 495.769331][T23362] nbd: must specify at least one socket [ 495.776858][T23347] dummy0: entered promiscuous mode [ 495.787306][T23347] nlmon0: entered promiscuous mode [ 495.795282][T23347] caif0: entered promiscuous mode [ 495.801153][T23347] batadv0: entered promiscuous mode [ 495.812650][T23347] veth0: entered promiscuous mode [ 495.825574][T23347] veth1: entered promiscuous mode [ 495.837175][T23347] wg0: entered promiscuous mode [ 495.846812][T23347] wg1: entered promiscuous mode [ 495.859340][T23347] wg2: left allmulticast mode [ 495.867215][T23347] veth0_to_bridge: entered promiscuous mode [ 495.880646][T23347] bridge_slave_0: entered promiscuous mode [ 495.899001][T23347] veth1_to_bridge: entered promiscuous mode [ 495.909508][T23347] bridge_slave_1: entered promiscuous mode [ 495.916790][T23347] veth0_to_bond: entered promiscuous mode [ 495.926931][T23347] bond_slave_0: entered promiscuous mode [ 495.937445][T23347] veth1_to_bond: entered promiscuous mode [ 495.944249][T23370] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_tx_wq": -EINTR [ 495.948730][T23347] bond_slave_1: entered promiscuous mode [ 495.970141][T23347] veth0_to_team: entered promiscuous mode [ 495.979607][T23347] team_slave_0: entered promiscuous mode [ 495.986684][T23347] veth1_to_team: entered promiscuous mode [ 495.998615][T23347] team_slave_1: entered promiscuous mode [ 496.007532][T23347] veth0_to_batadv: entered promiscuous mode [ 496.018708][T23347] batadv_slave_0: entered promiscuous mode [ 496.031083][T23347] veth1_to_batadv: entered promiscuous mode [ 496.042969][T23347] batadv_slave_1: entered promiscuous mode [ 496.055255][T23347] xfrm0: entered promiscuous mode [ 496.065111][T23347] veth0_to_hsr: entered promiscuous mode [ 496.079905][T23347] hsr0: entered promiscuous mode [ 496.090271][T23347] veth1_virt_wifi: entered promiscuous mode [ 496.106363][T23347] veth0_virt_wifi: entered promiscuous mode [ 496.112978][T23347] veth0_virt_wifi: left allmulticast mode [ 496.118918][T23347] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 496.133563][T23347] macvtap0: entered promiscuous mode [ 496.143561][T23347] macsec0: entered promiscuous mode [ 496.152327][T23347] geneve0: entered promiscuous mode [ 496.158606][T23347] geneve1: entered promiscuous mode [ 496.168663][T23347] vlan2: left allmulticast mode [ 496.173797][T23347] bond1: left allmulticast mode [ 496.179963][T23347] ip6gre1: entered promiscuous mode [ 496.187359][T23347] ieee802154 phy1 wpan1: entered promiscuous mode [ 496.197391][T23347] bond2: entered promiscuous mode [ 496.203409][T23347] gretap1: entered promiscuous mode [ 496.213765][T23347] bridge1: entered promiscuous mode [ 496.220821][T23347] erspan1: entered promiscuous mode [ 496.226777][T23347] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 496.234261][T23347] bridge2: entered promiscuous mode [ 496.239605][T23347] bridge3: entered promiscuous mode [ 496.246023][T23347] gre1: entered promiscuous mode [ 496.278287][T23347] bond3: entered promiscuous mode [ 496.283756][T23347] gretap2: entered promiscuous mode [ 496.290614][T23347] syztnl2: entered promiscuous mode [ 496.296057][T23347] bridge4: entered promiscuous mode [ 496.302024][T23347] netdevsim netdevsim0 eth0: entered promiscuous mode [ 496.308932][T23347] netdevsim netdevsim0 eth1: entered promiscuous mode [ 496.315961][T23347] netdevsim netdevsim0 eth2: entered promiscuous mode [ 496.323369][T23347] netdevsim netdevsim0 eth3: entered promiscuous mode [ 496.331080][T23347] ip6erspan0: entered promiscuous mode [ 496.338950][T23347] mac80211_hwsim hwsim5 pim6reg0: entered promiscuous mode [ 496.347154][T23347] vcan1: entered promiscuous mode [ 496.353271][T23347] ip6tnl1: entered promiscuous mode [ 496.360498][T23347] mac80211_hwsim hwsim14 t: entered promiscuous mode [ 496.369923][T23347] gre2: entered promiscuous mode [ 496.377407][T23347] bond5: entered promiscuous mode [ 496.383977][T23347] bond6: entered promiscuous mode [ 496.389299][T23347] macvtap0.2: entered promiscuous mode [ 496.395391][T23347] mac80211_hwsim hwsim27 wlan2: entered promiscuous mode [ 496.402620][T23347] ip6tnl2: entered promiscuous mode [ 496.407950][T23347] ip6gretap1: entered promiscuous mode [ 496.414285][T23347] veth2: entered promiscuous mode [ 496.419454][T23347] veth3: entered promiscuous mode [ 496.425160][T23347] mac80211_hwsim hwsim31 wlan3: entered promiscuous mode [ 496.433117][T23347] dvmrp0: entered promiscuous mode [ 496.440837][T23347] vxlan0: entered promiscuous mode [ 496.448555][T23347] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 496.456118][T23347] mac80211_hwsim hwsim51 wlan4: entered promiscuous mode [ 496.463485][T23347] bridge5: entered promiscuous mode [ 496.468850][T23347] syztnl1: entered promiscuous mode [ 496.474414][T23347] veth4: entered promiscuous mode [ 496.480060][T23347] veth5: left allmulticast mode [ 496.486339][T23347] gre3: entered promiscuous mode [ 496.492550][T23347] macsec1: entered promiscuous mode [ 496.498868][T23347] macvlan3: entered promiscuous mode [ 496.516476][T23347] bridge6: entered promiscuous mode [ 496.524262][T23347] mac80211_hwsim hwsim70 wlan5: entered promiscuous mode [ 496.532077][T23347] veth6: entered promiscuous mode [ 496.537242][T23347] veth7: entered promiscuous mode [ 496.544301][T23347] bridge7: entered promiscuous mode [ 496.549823][T23347] mac80211_hwsim hwsim75 wlan6: entered promiscuous mode [ 496.557916][T23347] gre4: entered promiscuous mode [ 496.564108][T23347] syztnl0: entered promiscuous mode [ 496.570157][T23347] bond8: entered promiscuous mode [ 496.576730][T23347] bond9: entered promiscuous mode [ 496.582712][T23347] bond10: entered promiscuous mode [ 496.589345][T23347] sit1: entered promiscuous mode [ 496.615383][T23347] erspan2: entered promiscuous mode [ 496.636238][ T3498] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.658093][ T3498] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.680376][ T3498] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.719342][ T3498] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.741336][ T3498] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.770151][ T3498] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.787474][ T3498] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.814950][ T3498] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.972358][T23421] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 497.122488][T23427] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 497.625498][T23461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 497.913406][T23477] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 497.929790][T23477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.042547][T23477] veth0_virt_wifi: entered allmulticast mode [ 498.193204][T23501] validate_nla: 2 callbacks suppressed [ 498.193226][T23501] netlink: 'syz.3.5820': attribute type 5 has an invalid length. [ 498.217274][T23502] netlink: 'syz.3.5820': attribute type 3 has an invalid length. [ 498.269637][T23506] tipc: Enabling of bearer rejected, already enabled [ 498.296472][T23506] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 498.452476][T23515] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 498.480374][T23515] bond4 (unregistering): Released all slaves [ 498.754166][T23534] tipc: Enabled bearer , priority 0 [ 498.767814][T23534] syzkaller0: entered promiscuous mode [ 498.783803][T23534] syzkaller0: entered allmulticast mode [ 498.804296][T23534] nft_compat: unsupported protocol 1 [ 498.814894][T23534] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 498.883567][T23546] __nla_validate_parse: 9 callbacks suppressed [ 498.883588][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5836'. [ 498.918171][T23542] netlink: 'syz.3.5834': attribute type 13 has an invalid length. [ 498.928307][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5834'. [ 498.935355][T23545] tipc: Resetting bearer [ 498.973083][T23532] tipc: Resetting bearer [ 499.006222][T23532] tipc: Disabling bearer [ 499.142070][T23542] netlink: 'syz.3.5834': attribute type 13 has an invalid length. [ 499.152624][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5834'. [ 499.242058][T23555] tipc: Enabling of bearer rejected, already enabled [ 499.272523][T23555] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 499.468274][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5843'. [ 499.480616][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5843'. [ 499.603938][T23578] tipc: Enabling of bearer rejected, already enabled [ 499.626202][T23578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5847'. [ 499.739258][T23583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5849'. [ 499.752403][T23590] netlink: 'syz.2.5850': attribute type 4 has an invalid length. [ 499.771792][T23590] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5850'. [ 499.833913][T23594] tipc: Enabling of bearer rejected, failed to enable media [ 500.032115][T23607] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5858'. [ 500.044575][T23606] tipc: Enabling of bearer rejected, already enabled [ 500.323158][T23624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.335969][T23621] bridge0: port 3(batadv0) entered blocking state [ 500.344259][T23621] bridge0: port 3(batadv0) entered disabled state [ 500.351027][T23621] batadv0: entered allmulticast mode [ 500.359671][T23621] batadv0: entered promiscuous mode [ 500.385248][T23627] netlink: 'syz.4.5866': attribute type 4 has an invalid length. [ 500.393806][T23627] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5866'. [ 500.405155][T23627] wlan1: mtu less than device minimum [ 500.670783][T23637] veth13: entered allmulticast mode [ 500.728211][T23642] tipc: Enabled bearer , priority 0 [ 500.766146][T23642] syzkaller0: entered promiscuous mode [ 500.772268][T23642] syzkaller0: entered allmulticast mode [ 500.789342][T23642] tipc: Resetting bearer [ 500.821460][ T36] batman_adv: batadv0: IGMP Querier appeared [ 500.827896][ T36] batman_adv: batadv0: MLD Querier appeared [ 500.852533][T23641] tipc: Resetting bearer [ 502.276953][T23641] tipc: Disabling bearer [ 502.502989][T23672] bond9: entered promiscuous mode [ 502.508217][T23672] bond9: entered allmulticast mode [ 502.518784][T23672] 8021q: adding VLAN 0 to HW filter on device bond9 [ 502.584185][T23679] tipc: Enabled bearer , priority 0 [ 502.612322][T23679] syzkaller0: entered promiscuous mode [ 502.626917][T23679] syzkaller0: entered allmulticast mode [ 502.664021][T23679] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 502.943678][T23702] tipc: Enabled bearer , priority 0 [ 503.038561][T23702] syzkaller0: entered promiscuous mode [ 503.046084][T23702] syzkaller0: entered allmulticast mode [ 503.075998][T23708] tipc: Resetting bearer [ 503.150957][T23701] tipc: Resetting bearer [ 503.329333][T23722] netlink: 'syz.2.5895': attribute type 11 has an invalid length. [ 504.519279][T23701] tipc: Disabling bearer [ 504.537662][T23671] tipc: Resetting bearer [ 504.560144][T23671] tipc: Disabling bearer [ 504.720586][T23734] FAULT_INJECTION: forcing a failure. [ 504.720586][T23734] name failslab, interval 1, probability 0, space 0, times 0 [ 504.740457][T23734] CPU: 1 UID: 0 PID: 23734 Comm: syz.4.5900 Not tainted syzkaller #0 PREEMPT(full) [ 504.740491][T23734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.740506][T23734] Call Trace: [ 504.740517][T23734] [ 504.740527][T23734] dump_stack_lvl+0x189/0x250 [ 504.740560][T23734] ? __pfx____ratelimit+0x10/0x10 [ 504.740597][T23734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.740626][T23734] ? __pfx__printk+0x10/0x10 [ 504.740661][T23734] ? __pfx___might_resched+0x10/0x10 [ 504.740686][T23734] ? fs_reclaim_acquire+0x7d/0x100 [ 504.740724][T23734] should_fail_ex+0x414/0x560 [ 504.740763][T23734] should_failslab+0xa8/0x100 [ 504.740795][T23734] __kmalloc_cache_noprof+0x70/0x3d0 [ 504.740823][T23734] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 504.740860][T23734] alloc_netdev_mqs+0xbf1/0x11b0 [ 504.740900][T23734] rtnl_create_link+0x31f/0xd10 [ 504.740948][T23734] rtnl_newlink_create+0x25c/0xb00 [ 504.740981][T23734] ? __lock_acquire+0xab9/0xd20 [ 504.741009][T23734] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 504.741040][T23734] ? __pfx___mutex_lock+0x10/0x10 [ 504.741075][T23734] ? ns_capable+0x8a/0xf0 [ 504.741104][T23734] rtnl_newlink+0x16e4/0x1c80 [ 504.741130][T23734] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 504.741173][T23734] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.741229][T23734] ? kasan_quarantine_put+0xdd/0x220 [ 504.741257][T23734] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.741303][T23734] ? nlmon_xmit+0xb0/0x100 [ 504.741333][T23734] ? kmem_cache_free+0x18f/0x400 [ 504.741367][T23734] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.741390][T23734] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.741425][T23734] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.741449][T23734] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.741477][T23734] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.741505][T23734] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.741531][T23734] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.741561][T23734] ? __dev_queue_xmit+0x1d79/0x3b50 [ 504.741597][T23734] ? __lock_acquire+0xab9/0xd20 [ 504.741647][T23734] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.741669][T23734] rtnetlink_rcv_msg+0x7cc/0xb70 [ 504.741695][T23734] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 504.741716][T23734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.741736][T23734] ? ref_tracker_free+0x63a/0x7d0 [ 504.741770][T23734] ? __asan_memcpy+0x40/0x70 [ 504.741792][T23734] ? __pfx_ref_tracker_free+0x10/0x10 [ 504.741837][T23734] netlink_rcv_skb+0x205/0x470 [ 504.741863][T23734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.741888][T23734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.741925][T23734] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.741959][T23734] netlink_unicast+0x82c/0x9e0 [ 504.742005][T23734] ? __pfx_netlink_unicast+0x10/0x10 [ 504.742041][T23734] ? netlink_sendmsg+0x642/0xb30 [ 504.742063][T23734] ? skb_put+0x11b/0x210 [ 504.742091][T23734] netlink_sendmsg+0x805/0xb30 [ 504.742127][T23734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.742155][T23734] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.742188][T23734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.742221][T23734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.742247][T23734] __sock_sendmsg+0x219/0x270 [ 504.742283][T23734] ____sys_sendmsg+0x505/0x830 [ 504.742326][T23734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.742363][T23734] ? import_iovec+0x74/0xa0 [ 504.742394][T23734] ___sys_sendmsg+0x21f/0x2a0 [ 504.742424][T23734] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.742494][T23734] ? __fget_files+0x2a/0x420 [ 504.742522][T23734] ? __fget_files+0x3a0/0x420 [ 504.742564][T23734] __x64_sys_sendmsg+0x19b/0x260 [ 504.742593][T23734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.742631][T23734] ? __pfx_ksys_write+0x10/0x10 [ 504.742663][T23734] ? do_syscall_64+0xbe/0x3b0 [ 504.742690][T23734] do_syscall_64+0xfa/0x3b0 [ 504.742712][T23734] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.742745][T23734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.742765][T23734] ? clear_bhb_loop+0x60/0xb0 [ 504.742792][T23734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.742814][T23734] RIP: 0033:0x7f8c1eb8eec9 [ 504.742833][T23734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.742854][T23734] RSP: 002b:00007f8c1f9c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.742879][T23734] RAX: ffffffffffffffda RBX: 00007f8c1ede5fa0 RCX: 00007f8c1eb8eec9 [ 504.742896][T23734] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 504.742909][T23734] RBP: 00007f8c1f9c8090 R08: 0000000000000000 R09: 0000000000000000 [ 504.742924][T23734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.742937][T23734] R13: 00007f8c1ede6038 R14: 00007f8c1ede5fa0 R15: 00007ffc8751ee48 [ 504.742975][T23734] [ 505.250667][T23735] vcan0: entered allmulticast mode [ 505.277262][T23742] __nla_validate_parse: 3 callbacks suppressed [ 505.277285][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5903'. [ 505.390045][T23746] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5907'. [ 505.433022][T23746] gretap0: entered promiscuous mode [ 505.481116][T23751] netlink: 'syz.3.5905': attribute type 1 has an invalid length. [ 505.494506][T23746] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5907'. [ 505.532876][T23746] 0ªî{X¹¦: renamed from gretap0 [ 505.565925][T23746] 0ªî{X¹¦: left promiscuous mode [ 505.586152][T23751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5905'. [ 505.603283][T23746] 0ªî{X¹¦: entered allmulticast mode [ 505.618098][T23746] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 505.695239][T23751] 8021q: adding VLAN 0 to HW filter on device bond11 [ 505.761132][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5912'. [ 505.979099][T23784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5918'. [ 505.992101][T23767] hsr_slave_1 (unregistering): left promiscuous mode [ 506.182091][T23789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5919'. [ 506.296979][T23794] tipc: Enabling of bearer rejected, already enabled [ 506.382221][T23789] 8021q: adding VLAN 0 to HW filter on device bond12 [ 506.413974][T23789] netlink: 'syz.3.5919': attribute type 2 has an invalid length. [ 506.861092][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5932'. [ 506.950307][T23833] tipc: Enabled bearer , priority 0 [ 506.958819][T23833] syzkaller0: entered promiscuous mode [ 506.965746][T23833] syzkaller0: entered allmulticast mode [ 506.984043][T23830] tipc: Enabled bearer , priority 0 [ 506.992386][T23830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.993739][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'. [ 507.005453][T23833] tipc: Resetting bearer [ 507.050744][T23830] syzkaller0: entered allmulticast mode [ 507.074122][T23830] netlink: zone id is out of range [ 507.079979][T23830] netlink: del zone limit has 8 unknown bytes [ 507.089486][T23832] tipc: Resetting bearer [ 507.136996][T23832] tipc: Disabling bearer [ 507.164721][T23841] tipc: Resetting bearer [ 507.269731][T23829] tipc: Disabling bearer [ 507.424713][T23851] bond10: Unable to set up delay as MII monitoring is disabled [ 507.439445][T23851] bond10 (unregistering): Released all slaves [ 507.687365][T23866] netlink: 'syz.4.5947': attribute type 1 has an invalid length. [ 507.826146][T23879] team0: No ports can be present during mode change [ 507.954804][T23890] FAULT_INJECTION: forcing a failure. [ 507.954804][T23890] name failslab, interval 1, probability 0, space 0, times 0 [ 507.974169][T23890] CPU: 0 UID: 0 PID: 23890 Comm: syz.4.5958 Not tainted syzkaller #0 PREEMPT(full) [ 507.974199][T23890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.974213][T23890] Call Trace: [ 507.974222][T23890] [ 507.974233][T23890] dump_stack_lvl+0x189/0x250 [ 507.974266][T23890] ? __pfx____ratelimit+0x10/0x10 [ 507.974301][T23890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.974328][T23890] ? __pfx__printk+0x10/0x10 [ 507.974362][T23890] ? __lock_acquire+0xab9/0xd20 [ 507.974393][T23890] should_fail_ex+0x414/0x560 [ 507.974429][T23890] should_failslab+0xa8/0x100 [ 507.974459][T23890] kmem_cache_alloc_noprof+0x73/0x3c0 [ 507.974484][T23890] ? skb_clone+0x212/0x3a0 [ 507.974527][T23890] skb_clone+0x212/0x3a0 [ 507.974558][T23890] __netlink_deliver_tap+0x404/0x850 [ 507.974596][T23890] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.974619][T23890] netlink_deliver_tap+0x19c/0x1b0 [ 507.974644][T23890] netlink_dump+0x92b/0xe90 [ 507.974677][T23890] ? __pfx_netlink_dump+0x10/0x10 [ 507.974718][T23890] ? kmem_cache_free+0x18f/0x400 [ 507.974751][T23890] netlink_recvmsg+0x676/0xa30 [ 507.974785][T23890] ? __pfx_netlink_recvmsg+0x10/0x10 [ 507.974813][T23890] ? __lock_acquire+0xab9/0xd20 [ 507.974831][T23890] ? aa_sock_msg_perm+0xf1/0x1d0 [ 507.974865][T23890] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 507.974897][T23890] ? security_socket_recvmsg+0x7e/0x2e0 [ 507.974918][T23890] ? __pfx_netlink_recvmsg+0x10/0x10 [ 507.974942][T23890] sock_recvmsg+0x229/0x270 [ 507.974980][T23890] ____sys_recvmsg+0x1c9/0x460 [ 507.975018][T23890] ? __pfx_____sys_recvmsg+0x10/0x10 [ 507.975089][T23890] ? import_iovec+0x74/0xa0 [ 507.975118][T23890] ___sys_recvmsg+0x1b5/0x510 [ 507.975152][T23890] ? __pfx____sys_recvmsg+0x10/0x10 [ 507.975209][T23890] ? __fget_files+0x3a0/0x420 [ 507.975252][T23890] do_recvmmsg+0x307/0x770 [ 507.975286][T23890] ? __pfx_do_recvmmsg+0x10/0x10 [ 507.975326][T23890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 507.975360][T23890] __x64_sys_recvmmsg+0x190/0x240 [ 507.975385][T23890] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 507.975406][T23890] ? rcu_is_watching+0x15/0xb0 [ 507.975430][T23890] ? do_syscall_64+0xbe/0x3b0 [ 507.975451][T23890] do_syscall_64+0xfa/0x3b0 [ 507.975469][T23890] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.975495][T23890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.975512][T23890] ? clear_bhb_loop+0x60/0xb0 [ 507.975534][T23890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.975551][T23890] RIP: 0033:0x7f8c1eb8eec9 [ 507.975568][T23890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.975585][T23890] RSP: 002b:00007f8c1f9c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 507.975603][T23890] RAX: ffffffffffffffda RBX: 00007f8c1ede5fa0 RCX: 00007f8c1eb8eec9 [ 507.975617][T23890] RDX: 04000000000002ac RSI: 0000200000000040 RDI: 0000000000000003 [ 507.975629][T23890] RBP: 00007f8c1f9c8090 R08: 0000000000000000 R09: 0000000000000000 [ 507.975640][T23890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.975650][T23890] R13: 00007f8c1ede6038 R14: 00007f8c1ede5fa0 R15: 00007ffc8751ee48 [ 507.975677][T23890] [ 508.460456][T23901] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.524350][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5964'. [ 509.002277][T23943] tipc: Enabling of bearer rejected, failed to enable media [ 509.044237][T23943] xfrm1: entered promiscuous mode [ 509.049342][T23943] xfrm1: entered allmulticast mode [ 509.316990][T23964] tipc: Enabled bearer , priority 0 [ 509.325524][T23964] syzkaller0: entered promiscuous mode [ 509.331147][T23964] syzkaller0: entered allmulticast mode [ 509.340054][ T6020] syzkaller0: tun_net_xmit 70 [ 509.515133][T23974] tipc: Resetting bearer [ 509.521142][T23974] syzkaller0: tun_net_xmit 90 [ 509.526271][T23974] syzkaller0: tun_net_xmit 90 [ 509.538489][T23961] tipc: Resetting bearer [ 509.614440][T23961] tipc: Disabling bearer [ 509.667374][T23979] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 40 [ 509.892953][T23993] netlink: 'syz.3.5992': attribute type 1 has an invalid length. [ 509.973884][T23993] 8021q: adding VLAN 0 to HW filter on device bond13 [ 510.136225][T24006] netlink: 'syz.2.5995': attribute type 1 has an invalid length. [ 510.712351][T24043] tipc: Enabling of bearer rejected, already enabled [ 510.905204][T24058] __nla_validate_parse: 7 callbacks suppressed [ 510.905228][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6013'. [ 511.110358][T24067] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6015'. [ 511.120472][T24067] `: renamed from bond0 [ 511.395902][T24086] netlink: zone id is out of range [ 511.413409][T24086] netlink: zone id is out of range [ 511.424292][T24086] netlink: zone id is out of range [ 511.429546][T24086] netlink: zone id is out of range [ 511.436794][T24086] netlink: zone id is out of range [ 511.442237][T24086] netlink: zone id is out of range [ 511.447542][T24086] netlink: zone id is out of range [ 511.454619][T24086] netlink: zone id is out of range [ 511.459907][T24086] netlink: zone id is out of range [ 511.465362][T24086] netlink: zone id is out of range [ 511.634079][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6025'. [ 511.750320][T24100] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6027'. [ 511.888056][T24107] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 512.225593][T24126] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6039'. [ 512.237645][T24126] `: renamed from bond0 (while UP) [ 512.719094][T24159] batadv_slave_0: entered allmulticast mode [ 512.802754][T24159] IPVS: set_ctl: invalid protocol: 51 172.30.0.5:20004 [ 512.873044][T24167] netlink: 'syz.1.6054': attribute type 4 has an invalid length. [ 512.914667][T24167] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6054'. [ 513.446332][T24211] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 513.655902][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'. [ 513.690518][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6073'. [ 513.873185][T24239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6078'. [ 513.882899][T24239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6078'. [ 514.309063][T24237] lo speed is unknown, defaulting to 1000 [ 514.516025][T24274] netlink: 'syz.4.6088': attribute type 4 has an invalid length. [ 515.009518][T24299] netlink: 'syz.1.6098': attribute type 4 has an invalid length. [ 515.358315][T24315] netlink: 'syz.0.6102': attribute type 142 has an invalid length. [ 515.498421][T24319] netlink: 'syz.1.6104': attribute type 1 has an invalid length. [ 515.975840][T24346] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 516.040772][T24359] netlink: 'syz.0.6116': attribute type 4 has an invalid length. [ 516.121733][T24359] __nla_validate_parse: 14 callbacks suppressed [ 516.121755][T24359] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6116'. [ 516.705453][T24392] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6124'. [ 516.827811][T24397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6126'. [ 516.843887][T24397] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6126'. [ 516.853707][T24397] net_ratelimit: 9 callbacks suppressed [ 516.853726][T24397] openvswitch: netlink: Unexpected mask (mask=80000, allowed=10048) [ 517.593973][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6139'. [ 517.609447][T24428] netlink: 'syz.3.6138': attribute type 10 has an invalid length. [ 517.642796][T24428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6138'. [ 517.677449][T24428] batadv0: entered promiscuous mode [ 517.693020][T24433] netlink: 'syz.4.6140': attribute type 4 has an invalid length. [ 517.699655][T24428] batadv0: entered allmulticast mode [ 517.721366][T24433] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6140'. [ 517.724872][T24428] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 517.775038][T24436] netlink: 'syz.1.6141': attribute type 1 has an invalid length. [ 517.829071][T24436] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6141'. [ 517.883773][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6141'. [ 518.223067][T24373] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6119'. [ 518.406355][T24466] netlink: 'syz.2.6152': attribute type 4 has an invalid length. [ 518.593687][T24477] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 518.606035][T24477] xt_l2tp: invalid flags combination: 0 [ 518.671115][T24479] tipc: Enabling of bearer rejected, failed to enable media [ 518.816116][T24485] erspan0: entered promiscuous mode [ 520.827313][T24608] netlink: 'syz.3.6197': attribute type 1 has an invalid length. [ 520.867893][T24608] bond0: entered promiscuous mode [ 520.873711][T24608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.966416][T24614] netlink: 'syz.4.6199': attribute type 12 has an invalid length. [ 521.241687][T24606] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 521.296515][T24608] 8021q: adding VLAN 0 to HW filter on device bond14 [ 521.307058][T24608] bond0: (slave bond14): making interface the new active one [ 521.315274][T24608] bond14: entered promiscuous mode [ 521.322620][T24608] bond0: (slave bond14): Enslaving as an active interface with an up link [ 521.652746][T24641] netlink: 'syz.3.6208': attribute type 29 has an invalid length. [ 522.310269][T24684] __nla_validate_parse: 9 callbacks suppressed [ 522.310293][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6219'. [ 522.400608][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6222'. [ 522.550359][T24699] netlink: 'syz.4.6226': attribute type 4 has an invalid length. [ 522.599435][T24699] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6226'. [ 522.628223][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6223'. [ 522.654375][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6227'. [ 522.694530][T24707] bridge0: port 1(batadv1) entered blocking state [ 522.701349][T24707] bridge0: port 1(batadv1) entered disabled state [ 522.707991][T24707] batadv1: entered allmulticast mode [ 522.725352][T24707] batadv1: entered promiscuous mode [ 522.925725][T24716] syzkaller0: entered promiscuous mode [ 522.942386][T24716] syzkaller0: entered allmulticast mode [ 522.969177][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6231'. [ 523.191506][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 523.200768][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 523.248008][T24740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6239'. [ 523.569897][T24762] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6245'. [ 523.589771][T24763] sctp: [Deprecated]: syz.4.6246 (pid 24763) Use of int in maxseg socket option. [ 523.589771][T24763] Use struct sctp_assoc_value instead [ 523.601427][T24762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6245'. [ 523.634150][T24762] Unsupported ieee802154 address type: 0 [ 523.875726][T24781] tipc: Enabling of bearer rejected, failed to enable media [ 523.970488][T24786] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6253'. [ 524.228390][T24801] netlink: 'syz.0.6261': attribute type 1 has an invalid length. [ 524.358973][T24811] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.383073][T24811] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 524.407390][T24811] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 524.496461][T24811] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.519349][T24811] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 524.541364][T24824] netlink: 'syz.4.6266': attribute type 4 has an invalid length. [ 524.557172][T24811] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 524.650314][T24811] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.660470][T24811] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 524.677171][T24811] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 524.786031][T24811] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.807239][T24811] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 524.827915][T24811] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 525.004346][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.018427][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.037647][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.078066][T24851] `: entered promiscuous mode [ 525.084376][T24851] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 525.118702][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.127374][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.136644][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.165486][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.178642][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.189405][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.211100][T24857] netlink: 'syz.0.6277': attribute type 10 has an invalid length. [ 525.222372][T24857] geneve0: left promiscuous mode [ 525.227552][T24857] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 525.228307][T24859] netlink: 'syz.1.6278': attribute type 6 has an invalid length. [ 525.244043][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.261761][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.270221][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.287257][T24859] netlink: 'syz.1.6278': attribute type 1 has an invalid length. [ 525.325979][T24863] netlink: 'syz.2.6280': attribute type 1 has an invalid length. [ 525.336672][T24863] netlink: 'syz.2.6280': attribute type 1 has an invalid length. [ 525.345754][T24863] netlink: 'syz.2.6280': attribute type 1 has an invalid length. [ 525.350696][T24861] netlink: 'syz.3.6279': attribute type 4 has an invalid length. [ 525.363349][T24863] netlink: 'syz.2.6280': attribute type 1 has an invalid length. [ 525.686091][T24885] tipc: Enabling of bearer rejected, failed to enable media [ 525.947435][T24890] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.985093][T24890] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.115995][T24890] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.141346][T24890] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.258266][T24890] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.277519][T24890] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.297293][T24919] sctp: [Deprecated]: syz.1.6299 (pid 24919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.297293][T24919] Use struct sctp_sack_info instead [ 526.694232][T24890] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.711425][T24890] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.931183][ T3498] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.948298][ T3498] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.006139][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.021368][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.096084][T21781] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.106450][T21781] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.165748][ T3498] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.197387][ T3498] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.381891][T24982] __nla_validate_parse: 78 callbacks suppressed [ 527.381913][T24982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6317'. [ 527.539691][T24993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6323'. [ 527.591923][T24995] syzkaller1: entered promiscuous mode [ 527.601165][T24995] syzkaller1: entered allmulticast mode [ 527.669432][T25001] x_tables: ip_tables: udp match: only valid for protocol 17 [ 527.682334][T25001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6326'. [ 527.786525][T25005] xt_HMARK: spi-set and port-set can't be combined [ 528.164882][T25035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6336'. [ 528.172991][T25024] 0ªî{X¹¦: left allmulticast mode [ 528.174744][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6336'. [ 528.430645][T25024] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 528.446741][T25025] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 528.495920][T21781] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 528.504541][T21781] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 528.521682][ T5970] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 528.595212][T25047] x_tables: ip_tables: udp match: only valid for protocol 17 [ 528.611846][T25047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6338'. [ 528.783251][T25057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.794924][T25062] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 528.805864][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6342'. [ 528.896259][T25067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6345'. [ 528.924261][T25063] bond0 (unregistering): Released all slaves [ 528.984389][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 529.211872][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 529.262748][ T5837] block nbd1: Receive control failed (result -32) [ 529.355262][T25094] x_tables: ip_tables: udp match: only valid for protocol 17 [ 529.365755][T25094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6352'. [ 529.678121][T25103] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6356'. [ 529.972168][T25115] validate_nla: 66 callbacks suppressed [ 529.972193][T25115] netlink: 'syz.3.6361': attribute type 3 has an invalid length. [ 530.025585][T25120] x_tables: ip_tables: udp match: only valid for protocol 17 [ 530.128847][T25124] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 530.271782][T25135] netlink: 'syz.3.6368': attribute type 21 has an invalid length. [ 530.509096][T25145] geneve1: mtu greater than device maximum [ 531.761612][T25208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.226015][T25251] tipc: Enabling of bearer rejected, already enabled [ 532.582239][T25281] netlink: zone id is out of range [ 532.630681][T25284] __nla_validate_parse: 13 callbacks suppressed [ 532.630700][T25284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6413'. [ 532.645135][T25281] netlink: set zone limit has 8 unknown bytes [ 532.657342][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6413'. [ 532.891506][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 533.158078][T25323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6424'. [ 533.186553][T25323] netlink: 'syz.2.6424': attribute type 8 has an invalid length. [ 533.339657][T25332] º: renamed from veth1_vlan (while UP) [ 533.358909][T25335] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6430'. [ 533.825907][T25361] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6438'. [ 534.069439][T25382] syzkaller1: entered promiscuous mode [ 534.080841][T25382] syzkaller1: entered allmulticast mode [ 534.372357][T25397] netlink: 'syz.0.6447': attribute type 4 has an invalid length. [ 534.385878][T25397] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6447'. [ 534.683171][T25417] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 534.694198][T25417] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 535.050829][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6462'. [ 535.234726][T25440] netlink: 'syz.2.6464': attribute type 11 has an invalid length. [ 535.261406][T25440] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6464'. [ 535.289049][T25438] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 535.299215][T25438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.444408][T25445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6466'. [ 535.517821][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6470'. [ 535.880954][T25473] syzkaller1: entered promiscuous mode [ 535.904868][T25473] syzkaller1: entered allmulticast mode [ 536.206899][T25500] netlink: 'syz.4.6483': attribute type 83 has an invalid length. [ 536.436425][T25513] netlink: 'syz.3.6489': attribute type 3 has an invalid length. [ 536.598286][T25524] netlink: 'syz.2.6494': attribute type 2 has an invalid length. [ 536.627432][T25524] netlink: 'syz.2.6494': attribute type 2 has an invalid length. [ 536.639924][T25526] netlink: 'syz.1.6493': attribute type 1 has an invalid length. [ 536.709406][T25537] netlink: 'syz.1.6497': attribute type 4 has an invalid length. [ 536.827978][T25530] netlink: 'syz.3.6495': attribute type 4 has an invalid length. [ 536.890772][T25548] tipc: Enabling of bearer rejected, failed to enable media [ 537.099238][T25560] netlink: 'syz.4.6505': attribute type 3 has an invalid length. [ 537.117191][T25559] netlink: 'syz.1.6503': attribute type 27 has an invalid length. [ 537.154944][T19379] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 537.245412][T25567] IPVS: set_ctl: invalid protocol: 0 172.20.20.37:20004 [ 537.668804][T25590] pim6reg: entered allmulticast mode [ 537.697116][T25595] netlink: 'syz.4.6513': attribute type 21 has an invalid length. [ 537.705918][T25595] __nla_validate_parse: 8 callbacks suppressed [ 537.705937][T25595] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6513'. [ 537.819001][T25601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6516'. [ 537.845010][T25602] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6515'. [ 537.875306][T25604] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6517'. [ 537.964112][T25609] tipc: Enabling of bearer rejected, already enabled [ 537.977743][T25609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6518'. [ 538.023153][T19379] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.076684][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'. [ 538.138876][T25621] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6522'. [ 538.217742][T25626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6524'. [ 538.541031][T25648] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6532'. [ 538.616551][T25652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6533'. [ 539.548135][T25677] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 540.164890][T25707] tipc: Enabled bearer , priority 0 [ 540.265337][T25707] syzkaller0: entered promiscuous mode [ 540.294356][T25707] syzkaller0: entered allmulticast mode [ 540.373156][T25710] tipc: Resetting bearer [ 540.629697][T25731] FAULT_INJECTION: forcing a failure. [ 540.629697][T25731] name failslab, interval 1, probability 0, space 0, times 0 [ 540.710278][T25731] CPU: 1 UID: 0 PID: 25731 Comm: syz.4.6559 Not tainted syzkaller #0 PREEMPT(full) [ 540.710310][T25731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 540.710324][T25731] Call Trace: [ 540.710333][T25731] [ 540.710343][T25731] dump_stack_lvl+0x189/0x250 [ 540.710376][T25731] ? __pfx____ratelimit+0x10/0x10 [ 540.710413][T25731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.710440][T25731] ? __pfx__printk+0x10/0x10 [ 540.710477][T25731] ? __lock_acquire+0xab9/0xd20 [ 540.710510][T25731] should_fail_ex+0x414/0x560 [ 540.710548][T25731] should_failslab+0xa8/0x100 [ 540.710580][T25731] kmem_cache_alloc_noprof+0x73/0x3c0 [ 540.710606][T25731] ? skb_clone+0x212/0x3a0 [ 540.710640][T25731] skb_clone+0x212/0x3a0 [ 540.710671][T25731] __netlink_deliver_tap+0x404/0x850 [ 540.710711][T25731] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.710737][T25731] netlink_deliver_tap+0x19c/0x1b0 [ 540.710763][T25731] netlink_unicast+0x7fa/0x9e0 [ 540.710808][T25731] ? __pfx_netlink_unicast+0x10/0x10 [ 540.710846][T25731] ? netlink_sendmsg+0x642/0xb30 [ 540.710868][T25731] ? skb_put+0x11b/0x210 [ 540.710896][T25731] netlink_sendmsg+0x805/0xb30 [ 540.710932][T25731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.710960][T25731] ? aa_sock_msg_perm+0xf1/0x1d0 [ 540.710995][T25731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.711037][T25731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.711061][T25731] __sock_sendmsg+0x219/0x270 [ 540.711098][T25731] ____sys_sendmsg+0x505/0x830 [ 540.711131][T25731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.711170][T25731] ? import_iovec+0x74/0xa0 [ 540.711200][T25731] ___sys_sendmsg+0x21f/0x2a0 [ 540.711235][T25731] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.711302][T25731] ? __fget_files+0x2a/0x420 [ 540.711332][T25731] ? __fget_files+0x3a0/0x420 [ 540.711374][T25731] __x64_sys_sendmsg+0x19b/0x260 [ 540.711404][T25731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.711444][T25731] ? __pfx_ksys_write+0x10/0x10 [ 540.711468][T25731] ? rcu_is_watching+0x15/0xb0 [ 540.711500][T25731] ? do_syscall_64+0xbe/0x3b0 [ 540.711527][T25731] do_syscall_64+0xfa/0x3b0 [ 540.711549][T25731] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.711583][T25731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.711606][T25731] ? clear_bhb_loop+0x60/0xb0 [ 540.711634][T25731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.711657][T25731] RIP: 0033:0x7f8c1eb8eec9 [ 540.711677][T25731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.711697][T25731] RSP: 002b:00007f8c1f9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.711721][T25731] RAX: ffffffffffffffda RBX: 00007f8c1ede6090 RCX: 00007f8c1eb8eec9 [ 540.711738][T25731] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 540.711753][T25731] RBP: 00007f8c1f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 540.711768][T25731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.711782][T25731] R13: 00007f8c1ede6128 R14: 00007f8c1ede6090 R15: 00007ffc8751ee48 [ 540.711820][T25731] [ 541.372232][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 542.434454][T25710] tipc: Disabling bearer [ 542.804883][T25777] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 542.815478][T25781] __nla_validate_parse: 15 callbacks suppressed [ 542.815498][T25781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6573'. [ 542.843507][T25779] validate_nla: 5 callbacks suppressed [ 542.843525][T25779] netlink: 'syz.1.6573': attribute type 3 has an invalid length. [ 543.121047][T25795] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6577'. [ 543.637388][T25801] netlink: 'syz.3.6578': attribute type 4 has an invalid length. [ 543.645425][T25801] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6578'. [ 543.959844][T25813] lo: entered allmulticast mode [ 543.971939][T25812] lo: left allmulticast mode [ 544.013077][T25816] syzkaller1: entered promiscuous mode [ 544.028720][T25816] syzkaller1: entered allmulticast mode [ 544.288235][T25831] tipc: Enabled bearer , priority 0 [ 544.307989][T25831] syzkaller0: MTU too low for tipc bearer [ 544.314780][T25831] tipc: Disabling bearer [ 544.676880][T25848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 544.864190][T25851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6598'. [ 544.912542][T25857] syzkaller1: entered promiscuous mode [ 544.919111][T25857] syzkaller1: entered allmulticast mode [ 545.222985][T25869] netlink: 51 bytes leftover after parsing attributes in process `syz.4.6607'. [ 545.243492][T25870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 545.292266][T25870] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 545.485265][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6611'. [ 545.710621][T25887] syzkaller1: entered promiscuous mode [ 545.739944][T25887] syzkaller1: entered allmulticast mode [ 545.812744][T25891] openvswitch: netlink: Key type 48 is out of range max 32 [ 545.848933][T25894] batman_adv: batadv0: Removing interface: team0 [ 545.871895][T25894] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 545.945821][T25897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6618'. [ 546.243212][T25915] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6625'. [ 546.442603][T25918] vlan3: entered promiscuous mode [ 546.456470][T25918] bridge11: entered promiscuous mode [ 546.477169][T25918] vlan3: entered allmulticast mode [ 546.497116][T25918] bridge11: entered allmulticast mode [ 546.801413][T25940] netlink: 'syz.1.6634': attribute type 4 has an invalid length. [ 547.224793][T25957] IPVS: persistence engine module ip_vs_pe_À not found [ 547.831983][T25976] __nla_validate_parse: 11 callbacks suppressed [ 547.832006][T25976] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6646'. [ 547.852014][T25976] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6646'. [ 547.882476][T25976] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6646'. [ 547.923649][T25986] netlink: 'syz.4.6648': attribute type 4 has an invalid length. [ 547.946585][T25986] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6648'. [ 548.195678][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6653'. [ 548.212787][T25994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6652'. [ 548.276991][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6653'. [ 548.569844][T26012] bond10: option resend_igmp: invalid value (32767) [ 548.589556][T26012] bond10: option resend_igmp: allowed values 0 - 255 [ 548.615060][T26012] bond10 (unregistering): Released all slaves [ 548.872704][T26027] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6662'. [ 548.885031][T26026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6663'. [ 548.898337][T26025] netlink: 'syz.3.6661': attribute type 1 has an invalid length. [ 548.906209][T26025] netlink: 'syz.3.6661': attribute type 4 has an invalid length. [ 548.921705][T26025] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6661'. [ 549.797588][T26070] mac80211_hwsim hwsim4 ÿ: renamed from wlan1 [ 549.959842][T26072] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.006846][T26072] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.296632][T26072] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.316311][T26072] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.388414][T26072] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.407195][T26072] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.489717][T26072] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.501904][T26072] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.605577][T26092] syzkaller0: entered promiscuous mode [ 550.612861][T26092] syzkaller0: entered allmulticast mode [ 552.735351][T21781] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.751411][T21781] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.759796][T21781] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.811603][T21781] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.846902][T21781] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.861836][T21781] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.961415][T21781] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.972530][T21781] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.998400][T26122] tipc: Enabled bearer , priority 0 [ 553.110014][T26122] syzkaller0: entered promiscuous mode [ 553.125205][T26122] syzkaller0: entered allmulticast mode [ 553.137170][T26125] tipc: Resetting bearer [ 553.230339][T26138] netlink: 'syz.4.6699': attribute type 23 has an invalid length. [ 553.441845][T26121] tipc: Resetting bearer [ 553.486305][T26143] netlink: 'syz.3.6700': attribute type 4 has an invalid length. [ 553.522382][T26143] __nla_validate_parse: 4 callbacks suppressed [ 553.522404][T26143] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6700'. [ 555.171010][T26121] tipc: Disabling bearer [ 555.515364][T26182] netlink: 'syz.1.6712': attribute type 5 has an invalid length. [ 555.609093][T26189] netlink: 'syz.4.6715': attribute type 10 has an invalid length. [ 555.786220][T26200] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6719'. [ 555.833983][T26203] netlink: 'syz.1.6720': attribute type 33 has an invalid length. [ 555.840992][T26200] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6719'. [ 555.894090][T26206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.926868][T26206] bond0: (slave rose0): Enslaving as an active interface with an up link [ 556.133815][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6725'. [ 556.174734][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6725'. [ 556.310318][T26219] vlan3: entered promiscuous mode [ 556.337635][T26219] bridge8: entered promiscuous mode [ 556.362096][T26219] vlan3: entered allmulticast mode [ 556.372248][T26219] bridge8: entered allmulticast mode [ 556.804288][T26257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6736'. [ 556.832696][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6735'. [ 556.848085][T26257] netlink: 'syz.4.6736': attribute type 7 has an invalid length. [ 556.863973][T26259] bridge_slave_0: left promiscuous mode [ 556.877083][T26257] netlink: 'syz.4.6736': attribute type 8 has an invalid length. [ 556.882202][T26260] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6737'. [ 556.890213][T26259] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.915334][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6736'. [ 557.099831][T26257] erspan0: entered promiscuous mode [ 557.106548][T26273] netlink: 'syz.0.6739': attribute type 1 has an invalid length. [ 557.142917][T26257] erspan0: left promiscuous mode [ 557.168331][T26270] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.191470][T26270] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 557.204135][T26270] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 557.238970][T26271] macvtap1: entered promiscuous mode [ 557.245783][T26271] macvtap1: entered allmulticast mode [ 557.300942][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6739'. [ 557.349954][T26270] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.360026][T26270] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 557.373672][T26270] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 557.389860][T26286] netlink: 'syz.4.6741': attribute type 3 has an invalid length. [ 557.428979][T26273] veth9: entered promiscuous mode [ 557.483720][T26270] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.509462][T26270] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 557.531325][T26270] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 557.589796][T26292] 8021q: VLANs not supported on gre0 [ 557.684102][T26270] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.719044][T26270] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 557.739888][T26270] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 558.012055][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 558.074360][T26319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.120234][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.129154][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 558.153866][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 558.195356][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.217336][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 558.241919][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 558.330717][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.366773][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 558.397872][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 558.425838][T26335] netlink: 'syz.1.6752': attribute type 24 has an invalid length. [ 558.472781][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.511361][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 558.519731][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 558.702054][T26351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.753373][T26352] __nla_validate_parse: 5 callbacks suppressed [ 558.753395][T26352] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6755'. [ 558.884024][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6762'. [ 558.915859][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6762'. [ 558.922909][T26363] syzkaller1: entered promiscuous mode [ 558.952908][T26363] syzkaller1: entered allmulticast mode [ 559.267466][T26379] 8021q: adding VLAN 0 to HW filter on device bond12 [ 559.288596][T26380] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 559.291048][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6768'. [ 559.387636][T26392] netlink: 'syz.4.6769': attribute type 4 has an invalid length. [ 559.437772][T26392] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6769'. [ 559.606044][T26402] tipc: Enabling of bearer rejected, already enabled [ 559.617473][T26402] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 559.747875][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6774'. [ 559.768639][T26409] batadv0: entered allmulticast mode [ 560.066816][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6778'. [ 560.077321][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6778'. [ 560.176064][T26433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6780'. [ 560.185876][T26425] vlan3: entered promiscuous mode [ 560.190973][T26425] bridge0: entered promiscuous mode [ 560.196836][T26432] netlink: 'syz.3.6781': attribute type 4 has an invalid length. [ 560.206167][T26425] vlan3: entered allmulticast mode [ 560.207409][T26432] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6781'. [ 560.212205][T26425] bridge0: entered allmulticast mode [ 560.405575][T26449] sock: sock_timestamping_bind_phc: sock not bind to device [ 560.936157][T26478] netlink: 'syz.3.6795': attribute type 4 has an invalid length. [ 560.990488][T26476] vlan0: entered promiscuous mode [ 561.013307][T26476] bridge9: entered promiscuous mode [ 561.020184][T26476] vlan0: entered allmulticast mode [ 561.025796][T26476] bridge9: entered allmulticast mode [ 561.869781][T26533] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 561.878747][T26533] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 562.027288][T26539] netlink: 'syz.4.6817': attribute type 1 has an invalid length. [ 562.069696][T26539] netlink: 'syz.4.6817': attribute type 1 has an invalid length. [ 562.168024][T26546] netlink: 'syz.0.6821': attribute type 11 has an invalid length. [ 562.333209][T26561] netlink: 'syz.3.6825': attribute type 5 has an invalid length. [ 562.443602][T26572] netlink: 'syz.4.6828': attribute type 4 has an invalid length. [ 562.488895][T26572] wlan1: mtu less than device minimum [ 562.971754][T26601] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 563.007159][T26611] netlink: 'syz.3.6843': attribute type 4 has an invalid length. [ 563.033945][T26611] ÿ: mtu less than device minimum [ 563.087400][T26620] FAULT_INJECTION: forcing a failure. [ 563.087400][T26620] name failslab, interval 1, probability 0, space 0, times 0 [ 563.100468][T26620] CPU: 0 UID: 0 PID: 26620 Comm: syz.0.6846 Not tainted syzkaller #0 PREEMPT(full) [ 563.100498][T26620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 563.100513][T26620] Call Trace: [ 563.100522][T26620] [ 563.100531][T26620] dump_stack_lvl+0x189/0x250 [ 563.100564][T26620] ? __pfx____ratelimit+0x10/0x10 [ 563.100599][T26620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.100627][T26620] ? __pfx__printk+0x10/0x10 [ 563.100662][T26620] ? __pfx___might_resched+0x10/0x10 [ 563.100687][T26620] ? fs_reclaim_acquire+0x7d/0x100 [ 563.100725][T26620] should_fail_ex+0x414/0x560 [ 563.100763][T26620] should_failslab+0xa8/0x100 [ 563.100794][T26620] __kmalloc_noprof+0xcb/0x4f0 [ 563.100820][T26620] ? sock_kmalloc+0xd6/0x160 [ 563.100852][T26620] sock_kmalloc+0xd6/0x160 [ 563.100884][T26620] ____sys_sendmsg+0x1b5/0x830 [ 563.100917][T26620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.100954][T26620] ? import_iovec+0x74/0xa0 [ 563.100984][T26620] ___sys_sendmsg+0x21f/0x2a0 [ 563.101014][T26620] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.101083][T26620] ? __fget_files+0x2a/0x420 [ 563.101113][T26620] ? __fget_files+0x3a0/0x420 [ 563.101155][T26620] __x64_sys_sendmsg+0x19b/0x260 [ 563.101186][T26620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.101228][T26620] ? __pfx_ksys_write+0x10/0x10 [ 563.101251][T26620] ? rcu_is_watching+0x15/0xb0 [ 563.101282][T26620] ? do_syscall_64+0xbe/0x3b0 [ 563.101308][T26620] do_syscall_64+0xfa/0x3b0 [ 563.101329][T26620] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.101363][T26620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.101385][T26620] ? clear_bhb_loop+0x60/0xb0 [ 563.101412][T26620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.101432][T26620] RIP: 0033:0x7fb4fd38eec9 [ 563.101451][T26620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.101478][T26620] RSP: 002b:00007fb4fe266038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.101502][T26620] RAX: ffffffffffffffda RBX: 00007fb4fd5e5fa0 RCX: 00007fb4fd38eec9 [ 563.101518][T26620] RDX: 0000000000004800 RSI: 0000200000000a00 RDI: 0000000000000003 [ 563.101533][T26620] RBP: 00007fb4fe266090 R08: 0000000000000000 R09: 0000000000000000 [ 563.101547][T26620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.101559][T26620] R13: 00007fb4fd5e6038 R14: 00007fb4fd5e5fa0 R15: 00007ffc15c4ee68 [ 563.101596][T26620] [ 563.651567][T26633] syzkaller1: entered promiscuous mode [ 563.671676][T26633] syzkaller1: entered allmulticast mode [ 563.948645][T26650] __nla_validate_parse: 13 callbacks suppressed [ 563.948667][T26650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6856'. [ 564.105529][T26660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6856'. [ 564.224927][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6861'. [ 564.517185][T26677] tipc: Enabling of bearer rejected, already enabled [ 564.526544][T26677] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 564.534474][T26677] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 564.606477][T26680] netlink: 'syz.1.6867': attribute type 4 has an invalid length. [ 564.630086][T26680] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6867'. [ 564.697065][T26680] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 565.059441][T26716] netlink: 'syz.0.6877': attribute type 4 has an invalid length. [ 565.089886][T26716] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6877'. [ 565.244055][T26724] tipc: Enabled bearer , priority 0 [ 565.360237][T26734] netlink: 'syz.4.6885': attribute type 3 has an invalid length. [ 565.383434][T26734] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6885'. [ 565.410708][T26724] syzkaller0: entered promiscuous mode [ 565.416973][T26724] syzkaller0: entered allmulticast mode [ 565.450061][T26732] tipc: Resetting bearer [ 565.468262][T26741] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 565.645743][T26747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6889'. [ 565.718437][T26722] tipc: Resetting bearer [ 565.912035][T26762] netlink: 'syz.2.6891': attribute type 1 has an invalid length. [ 565.927958][T26762] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6891'. [ 566.739879][T26773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6897'. [ 566.795931][T26774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6897'. [ 567.376084][T26722] tipc: Disabling bearer [ 567.626714][T26789] openvswitch: netlink: Flow key attr not present in new flow. [ 567.652470][T26787] netlink: 'syz.4.6902': attribute type 6 has an invalid length. [ 568.036454][T26810] netlink: 'syz.3.6910': attribute type 1 has an invalid length. [ 568.068688][T26808] vlan4: entered promiscuous mode [ 568.112761][T26808] vlan4: entered allmulticast mode [ 568.117945][T26808] hsr_slave_1: entered allmulticast mode [ 568.145389][T26820] netlink: 'syz.0.6914': attribute type 11 has an invalid length. [ 568.380621][T26832] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 568.483737][T26837] netlink: 'syz.3.6920': attribute type 83 has an invalid length. [ 568.545478][T26845] dvmrp0: left allmulticast mode [ 568.974215][T26879] __nla_validate_parse: 7 callbacks suppressed [ 568.974236][T26879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6934'. [ 569.183048][T26895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6939'. [ 569.218980][T26895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6939'. [ 569.408518][T26907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6942'. [ 569.433934][T26907] openvswitch: netlink: Missing key (keys=40, expected=80) [ 569.446774][T26910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6943'. [ 569.510095][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6942'. [ 570.052676][T26936] bridge0: port 1(bridge_slave_1) entered blocking state [ 570.071679][T26936] bridge0: port 1(bridge_slave_1) entered disabled state [ 570.086531][T26936] bridge_slave_1: entered allmulticast mode [ 570.099253][T26942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6956'. [ 570.109300][T26936] bridge_slave_1: entered promiscuous mode [ 570.322243][T26952] netlink: 'syz.1.6960': attribute type 4 has an invalid length. [ 570.343290][T26952] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6960'. [ 570.476943][T26964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6964'. [ 570.517784][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6963'. [ 570.900371][T26993] tipc: Enabling of bearer rejected, already enabled Connection to 10.128.0.128 closed by remote host. [ 571.572916][ T5840] syz_tun (unregistering): left allmulticast mode [ 572.153627][T26995] lo speed is unknown, defaulting to 1000 [ 573.102608][ T13] bond0 (unregistering): (slave bridge7): Releasing active interface [ 573.358888][ T13] ` (unregistering): left promiscuous mode [ 573.364968][ T13] !€ÿ: left promiscuous mode [ 573.369902][ T13] bond_slave_1: left promiscuous mode [ 573.379355][ T13] ` (unregistering): (slave 1!€ÿ): Releasing backup interface [ 573.390049][ T13] !€ÿ: left allmulticast mode [ 573.397882][ T13] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.407532][ T13] bond_slave_1: left allmulticast mode [ 573.413864][ T13] ` (unregistering): Released all slaves [ 573.601718][ T13] bond1 (unregistering): Released all slaves [ 573.827772][ T13] bond2 (unregistering): (slave veth1): Releasing active interface [ 573.837106][ T13] bond2 (unregistering): Released all slaves [ 573.868019][ T13] bond0 (unregistering): Released all slaves [ 574.093057][ T13] bond3 (unregistering): Released all slaves [ 574.363625][ T13] : left promiscuous mode [ 574.491698][ T13] tipc: Left network mode [ 575.608922][ T13] batadv0: left promiscuous mode [ 575.618871][ T13] hsr_slave_0: left promiscuous mode [ 575.625591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.633871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.617921][ T13] IPVS: stop unused estimator thread 0... [ 576.743847][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.753869][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 576.763882][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 576.821559][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.831668][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 576.841836][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 576.916258][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.926180][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 576.936420][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 576.978431][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.988270][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 576.998384][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 577.108519][ T13] batadv0: left allmulticast mode [ 577.113798][ T13] batadv0: left promiscuous mode [ 577.120087][ T13] bridge0: port 3(batadv0) entered disabled state [ 577.129145][ T13] bridge_slave_1: left allmulticast mode [ 577.135005][ T13] bridge_slave_1: left promiscuous mode [ 577.140810][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.149835][ T13] : left allmulticast mode [ 577.155164][ T13] : left promiscuous mode [ 577.159776][ T13] bridge0: port 1() entered disabled state [ 577.496229][ T13] bond7 (unregistering): (slave gretap1): Releasing active interface [ 577.599986][ T13] bond0 (unregistering): (slave geneve2): Releasing active interface [ 577.624316][ T13] ` (unregistering): (slave geneve1): Releasing backup interface [ 577.662851][ T13] ------------[ cut here ]------------ [ 577.668564][ T13] ida_free called for id=966 which is not allocated. [ 577.676613][ T13] WARNING: CPU: 1 PID: 13 at lib/idr.c:592 ida_free+0x280/0x310 [ 577.684473][ T13] Modules linked in: [ 577.688608][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 577.698308][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.708480][ T13] Workqueue: netns cleanup_net [ 577.713314][ T13] RIP: 0010:ida_free+0x280/0x310 [ 577.718295][ T13] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 577.737995][ T13] RSP: 0018:ffffc900001273a0 EFLAGS: 00010246 [ 577.744140][ T13] RAX: cc54cf78d4b90500 RBX: 0000000000000a06 RCX: ffff88801caa8000 [ 577.752221][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 577.760219][ T13] RBP: ffffc90000127498 R08: 0000000000000003 R09: 0000000000000004 [ 577.768357][ T13] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92000024e78 [ 577.776465][ T13] R13: dffffc0000000000 R14: ffff88801dee4000 R15: 00000000000003c6 [ 577.784749][ T13] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 577.793811][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.800418][ T13] CR2: 00007fbf89f17d60 CR3: 000000000db36000 CR4: 00000000003526f0 [ 577.809931][ T13] Call Trace: [ 577.813390][ T13] [ 577.816337][ T13] ? __pfx_ida_free+0x10/0x10 [ 577.821031][ T13] pde_put+0x7e/0x1b0 [ 577.825088][ T13] remove_proc_subtree+0x3e8/0x530 [ 577.830220][ T13] snmp6_unregister_dev+0xae/0xf0 [ 577.835325][ T13] addrconf_ifdown+0x240/0x1880 [ 577.840194][ T13] ? tls_dev_event+0x717/0xec0 [ 577.844997][ T13] ? __pfx_addrconf_ifdown+0x10/0x10 [ 577.850318][ T13] addrconf_notify+0x1bc/0x1010 [ 577.855453][ T13] notifier_call_chain+0x1b6/0x3e0 [ 577.860617][ T13] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 577.867258][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 577.874111][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 577.880502][ T13] ? net_generic+0x1e/0x240 [ 577.885097][ T13] ? net_generic+0x1e/0x240 [ 577.889649][ T13] ops_undo_list+0x3dc/0x990 [ 577.894349][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 577.899531][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 577.904803][ T13] cleanup_net+0x4d8/0x820 [ 577.909235][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 577.914230][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.919465][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 577.925271][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 577.931112][ T13] process_scheduled_works+0xade/0x17b0 [ 577.936857][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 577.943068][ T13] worker_thread+0x8a0/0xda0 [ 577.947762][ T13] kthread+0x711/0x8a0 [ 577.951913][ T13] ? __pfx_worker_thread+0x10/0x10 [ 577.957036][ T13] ? __pfx_kthread+0x10/0x10 [ 577.961700][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.966950][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.972215][ T13] ? __pfx_kthread+0x10/0x10 [ 577.976816][ T13] ret_from_fork+0x436/0x7d0 [ 577.981517][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 577.986676][ T13] ? __switch_to_asm+0x39/0x70 [ 577.991521][ T13] ? __switch_to_asm+0x33/0x70 [ 577.996320][ T13] ? __pfx_kthread+0x10/0x10 [ 578.000938][ T13] ret_from_fork_asm+0x1a/0x30 [ 578.005817][ T13] [ 578.008849][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 578.016159][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 578.025484][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 578.035555][ T13] Workqueue: netns cleanup_net [ 578.040352][ T13] Call Trace: [ 578.043643][ T13] [ 578.046593][ T13] dump_stack_lvl+0x99/0x250 [ 578.051210][ T13] ? __asan_memcpy+0x40/0x70 [ 578.055841][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.061105][ T13] ? __pfx__printk+0x10/0x10 [ 578.065752][ T13] vpanic+0x281/0x750 [ 578.069762][ T13] ? __pfx__printk+0x10/0x10 [ 578.074420][ T13] ? __pfx_vpanic+0x10/0x10 [ 578.078966][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 578.084212][ T13] panic+0xb9/0xc0 [ 578.087964][ T13] ? __pfx_panic+0x10/0x10 [ 578.092410][ T13] __warn+0x31b/0x4b0 [ 578.096410][ T13] ? ida_free+0x280/0x310 [ 578.101015][ T13] ? ida_free+0x280/0x310 [ 578.105353][ T13] report_bug+0x2be/0x4f0 [ 578.109692][ T13] ? ida_free+0x280/0x310 [ 578.114046][ T13] ? ida_free+0x280/0x310 [ 578.118401][ T13] ? ida_free+0x282/0x310 [ 578.122739][ T13] handle_bug+0x84/0x160 [ 578.126994][ T13] exc_invalid_op+0x1a/0x50 [ 578.131509][ T13] asm_exc_invalid_op+0x1a/0x20 [ 578.136377][ T13] RIP: 0010:ida_free+0x280/0x310 [ 578.141331][ T13] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 578.160952][ T13] RSP: 0018:ffffc900001273a0 EFLAGS: 00010246 [ 578.167035][ T13] RAX: cc54cf78d4b90500 RBX: 0000000000000a06 RCX: ffff88801caa8000 [ 578.175014][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 578.182994][ T13] RBP: ffffc90000127498 R08: 0000000000000003 R09: 0000000000000004 [ 578.190973][ T13] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92000024e78 [ 578.198959][ T13] R13: dffffc0000000000 R14: ffff88801dee4000 R15: 00000000000003c6 [ 578.206971][ T13] ? __pfx_ida_free+0x10/0x10 [ 578.211689][ T13] pde_put+0x7e/0x1b0 [ 578.215699][ T13] remove_proc_subtree+0x3e8/0x530 [ 578.220833][ T13] snmp6_unregister_dev+0xae/0xf0 [ 578.225869][ T13] addrconf_ifdown+0x240/0x1880 [ 578.230747][ T13] ? tls_dev_event+0x717/0xec0 [ 578.235538][ T13] ? __pfx_addrconf_ifdown+0x10/0x10 [ 578.240874][ T13] addrconf_notify+0x1bc/0x1010 [ 578.245739][ T13] notifier_call_chain+0x1b6/0x3e0 [ 578.250867][ T13] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 578.257332][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 578.264132][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 578.270401][ T13] ? net_generic+0x1e/0x240 [ 578.274929][ T13] ? net_generic+0x1e/0x240 [ 578.279473][ T13] ops_undo_list+0x3dc/0x990 [ 578.284094][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 578.289224][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 578.294446][ T13] cleanup_net+0x4d8/0x820 [ 578.298875][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 578.303826][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.309046][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 578.314776][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 578.320523][ T13] process_scheduled_works+0xade/0x17b0 [ 578.326131][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.332237][ T13] worker_thread+0x8a0/0xda0 [ 578.337043][ T13] kthread+0x711/0x8a0 [ 578.341146][ T13] ? __pfx_worker_thread+0x10/0x10 [ 578.346270][ T13] ? __pfx_kthread+0x10/0x10 [ 578.350878][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.356096][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.361313][ T13] ? __pfx_kthread+0x10/0x10 [ 578.365936][ T13] ret_from_fork+0x436/0x7d0 [ 578.370540][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 578.375666][ T13] ? __switch_to_asm+0x39/0x70 [ 578.380443][ T13] ? __switch_to_asm+0x33/0x70 [ 578.385225][ T13] ? __pfx_kthread+0x10/0x10 [ 578.389828][ T13] ret_from_fork_asm+0x1a/0x30 [ 578.394625][ T13] [ 578.397943][ T13] Kernel Offset: disabled [ 578.402282][ T13] Rebooting in 86400 seconds..