last executing test programs: 2.198189472s ago: executing program 3 (id=8382): r0 = socket(0x18, 0x1, 0x874) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff9bd96a4efbffffffff86180600fe800000000000000000000000008900000000000c87ad1f00000004000000aa0000400138", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000005020000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60044084) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0xc}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000a00080211009ed18d556d8b58e5"], 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x6, 0x20, 0x2, 0xf, 0x4}}, 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x40000000000000, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x3}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3504, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10013}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000340)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f00000000c0)) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x6, {0x8, 0x2}}, 0x5) socket$kcm(0xf, 0x3, 0x2) 1.739147585s ago: executing program 1 (id=8393): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@loopback, 0x4e24, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x1a0, 0x62, r1, r4}, {0xb5, 0x8, 0x7, 0x2, 0x4, 0x6, 0x9, 0x6e}, {0x4, 0x5, 0x7, 0x8001}, 0x0, 0x6e6bb1, 0x2, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x4d6, 0x33}, 0x0, @in6=@remote, 0x3500, 0x2, 0x2, 0x5, 0x9, 0xfffffffa, 0x6}}, 0xe8) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (fail_nth: 8) 1.654971203s ago: executing program 1 (id=8396): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x10, 0x10, 0x2, 0x4, {{0x35, 0x4, 0x0, 0x7, 0xd4, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x29, 0x3, 0x3, [{@multicast2, 0x9}, {@broadcast, 0x9}, {@empty, 0x8}, {@private=0xa010102, 0x1}, {@multicast1, 0xa6}]}, @timestamp_addr={0x44, 0x2c, 0x54, 0x1, 0xd, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x49}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@empty, 0x80}]}, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xbc, [@private=0xa010100]}, @cipso={0x86, 0x58, 0x1, [{0x7, 0x8, "4590373f12fe"}, {0x1, 0xf, "72f9d409f2fa5a449d8b835631"}, {0x5, 0x11, "f92a57e9162c40fc9755e6574a8490"}, {0x7, 0x7, "f4b3fcc5ff"}, {0x7, 0x2}, {0x6, 0x11, "3ba139ab53e95669e2458b3610d38a"}, {0x6, 0x10, "e04f18c24ef4e16dfdbf79c16f7f"}]}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000000000400000000000000950000000000000019cc4c6dc214d5b444e24975ed9f1b852ed66a52fc68aac24b06524cfa2c9d6d0000e8f349b9d62ae6010418c88bce8851ed3da7204aaee400ce86f4328700"/101], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', r0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xa0) 1.511511645s ago: executing program 4 (id=8400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x10) 1.451014813s ago: executing program 1 (id=8401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340), 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000040040000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.449629681s ago: executing program 3 (id=8402): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010101}]}}}]}, 0x3c}}, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r1}) 1.310209042s ago: executing program 4 (id=8406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000eab7cc71edc0821e00000000000000000000000000920000000002000000000000000000000000ffffffff4100000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000000000e6ffffff00000000000004000000feffffff00"/130]}, 0xfa) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500050000000c0016"], 0x38}}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x8003, @private0, 0x2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.183614837s ago: executing program 1 (id=8407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001600d3000000000000000000fe800000000003c74870bc62e5000000007757a0bd00aae000000100000000000000fc00000000009560330c45b69cb9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000100000004000000ffffffff000000000a00000000000000000000000000000002"], 0x104}}, 0x0) 1.183008991s ago: executing program 2 (id=8408): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) r2 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000006580), 0x0, 0x40000142, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xb, 0x9}, {0xfff5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000a0010000100000000"], 0xc4}}, 0x4c050) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1}) setsockopt(r5, 0x17, 0x200, 0x0, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x8000000000000) 1.181925594s ago: executing program 0 (id=8409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x200, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x400, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xb}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x8000) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf0, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}}, 0x8010) 1.139886847s ago: executing program 3 (id=8410): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x400, 0x0, 0xfffffffffffffffd, 0x0, 0x40000000000000}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000007000000000000000000000000000000003f9175a6eab33b96e2e0768bd71d9a6db7debb9fdfd801e8c50b273177dbc7e9d6deb9e45c39b7051cdaa9ce401a909144e583316a8e702981f22d5c8364bda36e9cae09c136395b1b62667c34b2ffc7812088bf1b1b21b73a000363bd522252413e9393bd6c454973b46f16a1831cf7ab412e7f01c39317451453", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x8, 0x0}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, 0x0, &(0x7f0000000180)=0x90) ioctl$sock_inet_SIOCDELRT(r6, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @broadcast}, {0x2, 0x1, @remote}, {0x2, 0x0, @broadcast}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x400, 0x0, 0xfffffffffffffffd, 0x0, 0x40000000000000}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000007000000000000000000000000000000003f9175a6eab33b96e2e0768bd71d9a6db7debb9fdfd801e8c50b273177dbc7e9d6deb9e45c39b7051cdaa9ce401a909144e583316a8e702981f22d5c8364bda36e9cae09c136395b1b62667c34b2ffc7812088bf1b1b21b73a000363bd522252413e9393bd6c454973b46f16a1831cf7ab412e7f01c39317451453", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x8}, 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, 0x0, &(0x7f0000000180)=0x90) (async) ioctl$sock_inet_SIOCDELRT(r6, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @broadcast}, {0x2, 0x1, @remote}, {0x2, 0x0, @broadcast}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) (async) 1.110735542s ago: executing program 4 (id=8411): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x2f}, 0x8) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtclass={0xc90, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x0, 0x1}, {0xc}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_htb={{0x8}, {0xc44, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_CTAB={0x404, 0x3, [0x1000, 0xf, 0x1, 0x10000, 0x1, 0x7ff, 0x6, 0x80000000, 0xfffffff9, 0x1e2, 0xf019, 0x6, 0x80000000, 0x1, 0x9, 0x5, 0x1ff, 0x4, 0xa26, 0x9, 0x0, 0x9, 0x10000, 0x5, 0x6, 0x3, 0x2e23, 0x71, 0x4502, 0x2, 0x1, 0x7fffffff, 0xd143, 0x7fffffff, 0x0, 0x1, 0xe, 0x80, 0x8001, 0x2, 0x3, 0x10, 0xfffffff8, 0xfffffc01, 0x680, 0x3, 0x7, 0x80, 0x869, 0x70dd, 0x1000, 0x2, 0x0, 0xff, 0xdfe, 0x0, 0x4, 0x9, 0x2, 0x80, 0x1, 0x8, 0x6, 0x58, 0x1, 0x6, 0x3, 0x3, 0xcc0, 0x4, 0x1, 0x319, 0x4, 0x9, 0x8000, 0x3, 0x101, 0x800, 0x1, 0xe37, 0x6, 0x8, 0x6, 0xc8af, 0x4, 0xcf9b, 0x0, 0xa0000000, 0x10001, 0x6, 0xe50, 0x10000, 0x7, 0x4, 0x11e, 0x0, 0x200, 0x2, 0x7fff, 0x9, 0xeef, 0x5, 0xa9, 0x101, 0x4, 0x5b, 0x6, 0x2, 0x7, 0x481c, 0x7ff, 0xfffffff7, 0x3, 0x400, 0x7ff, 0x9, 0x7, 0x5, 0x35c6, 0x3, 0x3, 0x6, 0x1, 0x9c2, 0x0, 0x2, 0x9, 0xfffffffe, 0xaf8, 0x10, 0x1, 0xc2f, 0xaf, 0x1, 0x3941, 0x5, 0x5ef9, 0xae31, 0xffffffff, 0x3, 0x400, 0x3ff, 0x4, 0x2, 0x6, 0x0, 0x1, 0x100000, 0x4, 0x5, 0x2, 0x26d6, 0xfff, 0x7fffffff, 0xfffffff7, 0x80000000, 0x3, 0x4, 0xf35, 0x0, 0x7, 0x6, 0x3, 0x4, 0xe, 0x400, 0x3ff, 0x4, 0xfffffff8, 0x0, 0xffff0001, 0x0, 0xfffffff9, 0x0, 0x5, 0x0, 0x1, 0x2, 0x7467, 0x2, 0xffffffff, 0x7, 0x9, 0x0, 0x2, 0x92e5, 0x9, 0x36e, 0xecc, 0x48, 0x1000, 0xff, 0x6, 0x81, 0x4, 0xd, 0x26bc6e78, 0x14000000, 0x5, 0x1, 0x7, 0x4, 0xff, 0xfffffff7, 0x8, 0xffffff80, 0x2, 0x3, 0xa, 0x8001, 0xffffffff, 0xed31, 0x7fffffff, 0xfb2, 0x80, 0xffffffff, 0x8d, 0x80000000, 0x0, 0x2, 0x0, 0x9, 0x400, 0x400, 0x98, 0x7, 0x75, 0x2, 0xfffffcca, 0xd3, 0x100, 0x3, 0x7, 0xfffffffb, 0xffffffff, 0x100, 0x5, 0xacd7, 0x4, 0x1d45, 0xc673, 0xd8f5, 0x7fff, 0x8001, 0x0, 0x5, 0x7, 0x8bef, 0x3, 0x800, 0xfffffff9, 0x8, 0x1, 0x8, 0x0, 0x1]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x45d0}, @TCA_HTB_CEIL64={0xc, 0x7, 0xa000000000000000}, @TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x3ff, 0x101, 0x0, 0x8, 0x3, 0x6, 0x10e, 0x2, 0x81, 0x3, 0x8, 0x8, 0x5, 0x10000, 0x8, 0x9, 0x2, 0x8, 0x0, 0x2, 0xffffffff, 0x6, 0xc, 0x6df26caf, 0x2400, 0x3400000, 0x0, 0x26, 0xb5d, 0x6, 0xffff0000, 0x9, 0x6, 0x9, 0x80, 0xa, 0xfffffffe, 0x4, 0x5, 0x1, 0x0, 0x80000000, 0xa4, 0x1, 0xe, 0xa971, 0x7, 0x0, 0x1, 0x8001, 0x532, 0xfb6, 0x1, 0x1ff, 0x2, 0x3, 0x9, 0x0, 0x0, 0x6, 0xa, 0x9, 0x7f, 0x3, 0x9, 0x4, 0x5a5, 0x0, 0x7fff, 0x80000001, 0x4, 0x656, 0x200, 0x5, 0x5, 0x7ff, 0x100, 0x0, 0x53, 0x6, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x3, 0x8, 0x5, 0x1, 0x4, 0x10, 0x5, 0xffffffff, 0x584f, 0x7, 0x0, 0x5f, 0xa, 0xfffffffd, 0x2, 0x7, 0x8, 0xd, 0x4, 0x6, 0x800, 0x100, 0x9, 0xffffffff, 0x6d, 0x3, 0x6, 0x85c, 0x4, 0x400, 0x1, 0x3, 0x9, 0x2, 0x0, 0xfffff9fa, 0x3, 0x3ff800, 0x2, 0x4, 0x7, 0x2, 0x6, 0x8, 0x2, 0x1, 0x1, 0x7, 0x2, 0x7, 0x3ff, 0x40, 0x80000000, 0x5, 0x7fff, 0x6, 0x200, 0x5, 0x8, 0x9, 0x3, 0x4, 0x8, 0x6, 0x51ac6658, 0x3, 0x6, 0x1e408122, 0x4, 0x3, 0xa309, 0x1ff, 0xf89, 0xffffff76, 0x4, 0x3ff, 0x6, 0x101, 0x8, 0x5, 0x3, 0x9, 0x8, 0x2, 0x0, 0x9, 0x7, 0x70f8, 0x4, 0xd, 0x4, 0xa0e, 0xffffffd3, 0x8000, 0x10, 0x0, 0x8000, 0x8, 0x3, 0x2, 0xff, 0x7, 0x8, 0x2, 0x1, 0xd, 0x30, 0x3, 0x4, 0x200, 0x2, 0x2, 0x7ff, 0x6, 0x2, 0x5, 0x5, 0xc3, 0x7, 0x0, 0x0, 0x10001, 0x1, 0x2, 0x800, 0xffff, 0x5, 0x956e, 0x9, 0xfffffffe, 0x9, 0x3, 0x8001, 0x2, 0x9, 0x5, 0xffffffff, 0x2, 0x6, 0x5, 0x100, 0x3, 0x0, 0xfffff000, 0x8, 0xffff, 0xa, 0x121, 0x7fffffff, 0xb7a, 0x3, 0x8, 0x9, 0x7, 0x4800000, 0x9, 0x4, 0xff, 0xa0, 0x80, 0x10, 0x1, 0x800, 0x2, 0x78, 0x7, 0xf0000000, 0x6, 0x1ff]}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_RTAB={0x404, 0x4, [0x4, 0x5, 0xf, 0xfffffff8, 0x9, 0x7fffffff, 0x7, 0x10, 0x0, 0x3, 0x1, 0x1, 0x14, 0x8001, 0x4, 0x0, 0x3, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x3, 0x841d, 0x7ff, 0x3c3a000, 0x80000000, 0x7, 0x9, 0x8, 0x4, 0xfffffffb, 0x5d20, 0x6, 0xffff, 0x1000, 0x1000, 0x9, 0x8001, 0x1000, 0x4, 0x3120, 0x8001, 0x2, 0x6, 0x1, 0x9, 0x4, 0x8000, 0xba, 0x7, 0x8, 0x10000, 0x2, 0x6, 0x2, 0x800, 0x7, 0x5, 0xff, 0x7fffffff, 0x462, 0xa, 0x3, 0x3, 0xfffffff9, 0x7, 0x7, 0xfffffff2, 0x1000, 0x200, 0xe4, 0x1, 0x8000, 0x7220, 0x9, 0xfff, 0xc, 0xe, 0x9, 0x27, 0x6, 0x7, 0x3, 0xfe93, 0x0, 0x7ff, 0x4, 0x4e, 0xfffffff9, 0x1ff, 0x40, 0x2, 0x5, 0x1, 0x7, 0x80000000, 0x6, 0x6, 0x5, 0x9d, 0x5, 0x4, 0x8, 0x6, 0xf, 0x8, 0x2, 0x7, 0x1, 0x888, 0x91e, 0x0, 0x8, 0x4, 0x8, 0x6, 0x8, 0xffffffff, 0x6, 0xf, 0xada, 0x80, 0x1, 0x2, 0xfffffff9, 0xffff, 0xff4, 0x3, 0x200, 0x0, 0x5, 0xe0c, 0xfffffffa, 0xe43, 0x8, 0x401, 0x5, 0x846, 0x9, 0x9, 0x5, 0x5, 0x9, 0x3, 0x5, 0x1, 0x80000000, 0x3, 0x6, 0x9, 0x4, 0x2, 0x1, 0x4e1, 0x2, 0xb, 0xd6f9, 0x1, 0x200, 0x8, 0xec, 0x2, 0x81, 0x5, 0x8, 0x2, 0x1, 0x8, 0x370, 0xfffffffc, 0xc6c9, 0x35dd, 0x2, 0x7, 0x6, 0xe3, 0x2, 0x8, 0x9, 0x0, 0x6, 0x1, 0x0, 0xd, 0x28000000, 0x6cb7, 0x5, 0x800, 0x8, 0x5f, 0x10, 0x9, 0xc45f, 0x6, 0x0, 0x6, 0x1c63b9d4, 0x400, 0xc, 0xc, 0x7, 0x1000000, 0x9, 0x578d, 0x3, 0x8000, 0x10, 0x4, 0xc, 0xcbca, 0x800, 0x6, 0xd, 0x2, 0x7a6de1df, 0x2, 0x2, 0x1c, 0xfffffbc7, 0x9, 0x10001, 0xb6, 0x2, 0x4, 0x8, 0x1, 0x800, 0x8, 0x3ff, 0x6, 0x6, 0x9, 0x2, 0x40, 0x716a, 0xffff7fff, 0x3465c0, 0x3, 0x1000, 0xfffffffb, 0x7, 0x2, 0x6, 0x1, 0x4, 0xffffffc3, 0x2, 0x5, 0x7, 0x177, 0x9, 0x800, 0x2, 0xe66e]}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0xc90}}, 0x24040084) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.097642796s ago: executing program 0 (id=8412): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$kcm(r2, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x4}], 0x10}, 0x20000001) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5c, 0x0, '\x00', [@pad1, @pad1]}, 0x10) 1.0117396s ago: executing program 1 (id=8413): r0 = socket(0x18, 0x1, 0x874) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff9bd96a4efbffffffff86180600fe800000000000000000000000008900000000000c87ad1f00000004000000aa0000400138", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000005020000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60044084) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0xc}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000a00080211009ed18d556d8b58e5"], 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x6, 0x20, 0x2, 0xf, 0x4}}, 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x40000000000000, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x3}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3504, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10013}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000340)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f00000000c0)) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x6, {0x8, 0x2}}, 0x5) socket$kcm(0xf, 0x3, 0x2) 963.323098ms ago: executing program 0 (id=8414): socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x4) 961.549111ms ago: executing program 3 (id=8415): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, 0x14, 0x65c28d33709e660d, 0x0, 0x0, {0x11, 0x36}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "91fabc0b03e55e3719"}]}, 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="551553013bfe24537e620ecdd8c470acb9cbf4de769bda326dd763d25ed57785d12b587929da1fe1708aed13f5e7f2570ee7e3738a1fca3cd7890c43f1449758c7334afd7dd70a1bb1213e67c2a91e09be2f9b167d606a781966434d8cb6773b57133b85edd9d06861278e725a48a47b7b54240d8e3703fca1a2a61da22edfd27f993c7cefb0119773d8b02e4bdb89b80a9e15004d85b922f96e841f417a29", 0x9f}, {&(0x7f00000001c0)="14d478201eb032915cd93c1133e3354608b6ff073f06bc4be184823ae72214c3d7ed642f9832bc426c7568c023ac1425b878dc5ba4d5364e78e831abe8704ed21ecc9d3a0abbfd72f78d53802526f530ba54b6fe289eec222b5f2808a766165c1ab3b405eadb432a08abd3ca8e9e553d", 0x70}], 0x2, &(0x7f0000000640)=[{0x58, 0xff, 0xfff, "5193a65138958be62f572fb100627d5a1d4cb87c483ca962124aede11d1ba0936a26c7f6fc83594c992299b1b79b767b7cae49ca11602a0f6d04f532cf307b4e5f7dc3c03b"}, {0x40, 0x117, 0xe6bf, "51e26e0c62e220604009cc1855a0d18bc8c1ddcb07390c6e008917a1a24660ed36c430892105b9086cd0fb0aa2bf"}, {0x1010, 0x102, 0x3, "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"}], 0x10a8}, 0x5) 930.346331ms ago: executing program 2 (id=8416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000a6ff0900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) 863.786159ms ago: executing program 4 (id=8417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x320, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x70}, 0x1, 0x0, 0x0, 0x8811}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x320, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x70}, 0x1, 0x0, 0x0, 0x8811}, 0x4000) (async) 842.116089ms ago: executing program 0 (id=8418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00118008000c00ff000000ef359cd35f4f59316c7dd32bafa3fbe880efa9029a0b3f3b8e439c26ba475dbcba08c81664c53b921f51159453e6340000000000"], 0x3c}}, 0x0) 786.319321ms ago: executing program 2 (id=8419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x40, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff343}]}]}, 0x40}}, 0x8000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000300)={'hsr0\x00', 0x4}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2540}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4066}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) r11 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r11, 0x1, 0x4d, 0x0, &(0x7f0000000140)) getsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) r12 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f00000005c0)={{r2, &(0x7f00000003c0)='\x00', 0x80, &(0x7f0000000400)={@_ha_fsid={[0x1, 0x80000000]}, {0x2, 0x0, 0x80000000, 0x609}}, 0x5, &(0x7f0000000440), &(0x7f0000000480)=0x4}, 0x1, &(0x7f0000000580)=[{0x3, 0x7, &(0x7f00000004c0)='%,-!\x00', &(0x7f0000000500)="3d5ab208e4b82144214d967d19cca8a1e06b13ca95720a45d3102303fd791ae044e866a885d9ce50df546f5e3fc368c9950632f310df1c492985c8b78365e80eef713b3a1087b0ae34", 0x49, 0x18}]}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000000714100025bd7000fedbdf2508004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32=r13, @ANYBLOB="0500540000000000080001000009000229e80073797a30000007afdf7f540001000080000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x4080) 706.90635ms ago: executing program 4 (id=8420): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000200000001c140000fe0300010000000005000700000000004af3e8860d179036ffc43cac64c7ff11ea8cdeab78b33db84ee81ec23492728104492b5bd26a6f8312c35794f83752cb0000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000000000000000000000000100000004000200040001"], 0x40}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000300)) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000180)={0x1f, 0x2, 0x3}, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000140), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) 705.881352ms ago: executing program 3 (id=8421): socket(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) (fail_nth: 5) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) 610.900047ms ago: executing program 0 (id=8422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) 181.710834ms ago: executing program 0 (id=8423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_vlan\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 95.197519ms ago: executing program 2 (id=8424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x1a0, 0x30, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{0x9c, 0x1, [@m_ife={0x98, 0x1b, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffff8d8e, 0x6, 0xffffffffffffffff, 0x6, 0x64e8366e}}}]}, {0x46, 0x6, "a60b0ef53a8388e6142934025ecf7486ab3df147c72f52eefa3fabc636505ffa4c4dec5af468ae452ac528743989b1fb876e7a0cc655e74091504de4a8b976072ac8"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}]}, {0xf0, 0x1, [@m_simple={0xec, 0x2, 0x0, 0x0, {{0xb}, {0xc0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa4, 0x3, '\xbb\xbb\x9b\xbb\xbb\xbbk\xf4\x92\x87#2S\x80\xc3\xf7\x8c\x1e\xba9\xaf}i\x9a\x01\x9f\x19\xe3\xbcw\x94\xb4\xef\x15\xc4\xd7b\xad N\xfe\xae\x01n\x98P\xb8\x12\x1d$\xb2\rF\xccW\x15\xf3\xcc\xb4\x15\a\xf1u\x88\xbc\xbb\xae\xfb\v A\x8aT\xdaD\x80\xddC\xedm4\xcb1\xde\x14\f\x15\xe6\x93\xb5v_\xcb\xf8\xf8a\xaa8\x8ba\xab\x94e\a\xa4\xc5\xdev#\x03e\xd1\xf2\x02\x82\xde~=\x87\x80g\x9c(\xf7\xf4\xe6\xd2\xdf\xd3%\xec\x8c\b6&\xa3\xad\x83\xae\x92\x14\xabh\xef\xdf\xd8gF\xd6\xc1-\xfbt\x13\x028\xda\xfb\\\xbc'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x2, 0x1, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 94.760759ms ago: executing program 3 (id=8425): r0 = socket(0x1, 0x1, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000001940)={'macvlan0\x00', @ifru_names='rose0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r5, 0x14, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000c04) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100d2a9633b3cb29995f1860c50ac1608d3aa2dd57f74f915dd00d2499b87b5d4d0e537a33811fb9c63c0", @ANYRES32=r0, @ANYBLOB="0c00018006000100", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc27550e770a5a8d1}, 0x20000004) 93.68296ms ago: executing program 4 (id=8426): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r1, 0x0, &(0x7f0000000040)=0x9) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000f900030f00007c27f022ae9d3c5d650000000000ecaf67387dcb39899468ff8657159fca05534ab6e92fe887545458c83ec61f76dc7f5227cf6d607c0b672ea36c9e5ecec8036f2f7a17b059b6441451742f837e7897093bd823714cdc7e2a71f6daffc1d353625ed69346f72673083dd7ff7764b95cc564ada56163e0d7807663ef7f4c9e6812ab3b594e8fb1e2f148ef0a62f1022695a49ea2a6e46c4f11a67d49b70a950d612c4be00cedae16de3e2219e5e26eb78531f58d7cb0882e29404a1bcfeee6bd51aa9ad925ee0ac098"], 0x14}}, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 40.693215ms ago: executing program 2 (id=8427): r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0xff7f, 0x48890}, 0x0) 149.403µs ago: executing program 1 (id=8428): socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x4) 0s ago: executing program 2 (id=8429): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x8902, &(0x7f0000000080)={@loopback={0x8000000000}, @loopback, @empty}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kernel console output (not intermixed with test programs): z.3.7191'. [ 558.307256][ T5828] Bluetooth: hci0: command tx timeout [ 558.585226][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7192'. [ 558.604148][T27230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7195'. [ 559.038644][T27258] veth1_macvtap: left promiscuous mode [ 559.044299][T27258] macsec0: entered promiscuous mode [ 559.281978][T27275] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.289646][T27275] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.272820][T27339] siw: device registration error -23 [ 560.408819][T27352] syzkaller1: entered promiscuous mode [ 560.437112][T27352] syzkaller1: entered allmulticast mode [ 560.500376][T27358] nbd: must specify at least one socket [ 560.592043][T27364] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 560.629688][T27365] rdma_rxe: rxe_newlink: failed to add bond0 [ 560.799268][T27376] pim6reg527: entered allmulticast mode [ 561.216183][T27407] FAULT_INJECTION: forcing a failure. [ 561.216183][T27407] name failslab, interval 1, probability 0, space 0, times 0 [ 561.234369][T27407] CPU: 1 UID: 0 PID: 27407 Comm: syz.3.7254 Not tainted syzkaller #0 PREEMPT(full) [ 561.234392][T27407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.234404][T27407] Call Trace: [ 561.234411][T27407] [ 561.234419][T27407] dump_stack_lvl+0xe8/0x150 [ 561.234444][T27407] should_fail_ex+0x412/0x560 [ 561.234471][T27407] should_failslab+0xa8/0x100 [ 561.234495][T27407] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 561.234516][T27407] ? __alloc_skb+0x186/0x7d0 [ 561.234534][T27407] ? __alloc_skb+0x1d0/0x7d0 [ 561.234549][T27407] ? __local_bh_enable_ip+0xd0/0x130 [ 561.234571][T27407] __alloc_skb+0x1d0/0x7d0 [ 561.234593][T27407] netlink_sendmsg+0x5d4/0xb40 [ 561.234620][T27407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.234641][T27407] ? aa_sock_msg_perm+0xf1/0x1b0 [ 561.234665][T27407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.234688][T27407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.234704][T27407] ____sys_sendmsg+0xa68/0xad0 [ 561.234725][T27407] ? __might_fault+0xaf/0x130 [ 561.234750][T27407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.234779][T27407] ? import_iovec+0x73/0xa0 [ 561.234799][T27407] ___sys_sendmsg+0x2a5/0x360 [ 561.234818][T27407] ? __lock_acquire+0x6b5/0x2cf0 [ 561.234840][T27407] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.234889][T27407] ? __fget_files+0x2a/0x420 [ 561.234906][T27407] ? __fget_files+0x3a0/0x420 [ 561.234932][T27407] __x64_sys_sendmsg+0x1bd/0x2a0 [ 561.234955][T27407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.234984][T27407] ? __pfx_ksys_write+0x10/0x10 [ 561.235014][T27407] do_syscall_64+0x14d/0xf80 [ 561.235035][T27407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.235052][T27407] ? trace_irq_disable+0x37/0x100 [ 561.235070][T27407] ? clear_bhb_loop+0x40/0x90 [ 561.235090][T27407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.235114][T27407] RIP: 0033:0x7fb239b9c629 [ 561.235130][T27407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.235145][T27407] RSP: 002b:00007fb23a9b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.235164][T27407] RAX: ffffffffffffffda RBX: 00007fb239e15fa0 RCX: 00007fb239b9c629 [ 561.235176][T27407] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 561.235188][T27407] RBP: 00007fb23a9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 561.235199][T27407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.235210][T27407] R13: 00007fb239e16038 R14: 00007fb239e15fa0 R15: 00007fff6523aa98 [ 561.235239][T27407] [ 561.564424][T27409] rdma_rxe: rxe_newlink: failed to add bond0 [ 561.628356][T27421] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 562.129157][T27465] rdma_rxe: rxe_newlink: failed to add bond0 [ 562.333684][T27474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.399991][T27479] netlink: 'syz.1.7280': attribute type 1 has an invalid length. [ 562.412650][T27474] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 562.426900][T27474] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 562.435813][T27474] gretap1: entered promiscuous mode [ 562.441025][T27474] gretap1: entered allmulticast mode [ 562.449647][T27483] FAULT_INJECTION: forcing a failure. [ 562.449647][T27483] name failslab, interval 1, probability 0, space 0, times 0 [ 562.462728][T27483] CPU: 1 UID: 0 PID: 27483 Comm: syz.0.7281 Not tainted syzkaller #0 PREEMPT(full) [ 562.462756][T27483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.462767][T27483] Call Trace: [ 562.462775][T27483] [ 562.462783][T27483] dump_stack_lvl+0xe8/0x150 [ 562.462809][T27483] should_fail_ex+0x412/0x560 [ 562.462837][T27483] should_failslab+0xa8/0x100 [ 562.462864][T27483] ? skb_clone+0x212/0x3a0 [ 562.462885][T27483] kmem_cache_alloc_noprof+0x87/0x650 [ 562.462914][T27483] skb_clone+0x212/0x3a0 [ 562.462938][T27483] __netlink_deliver_tap+0x404/0x850 [ 562.462968][T27483] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.462988][T27483] netlink_deliver_tap+0x19c/0x1b0 [ 562.463006][T27483] netlink_sendskb+0x68/0x140 [ 562.463031][T27483] netlink_unicast+0x3a3/0x9b0 [ 562.463063][T27483] ? __pfx_netlink_unicast+0x10/0x10 [ 562.463096][T27483] netlink_rcv_skb+0x2b6/0x4b0 [ 562.463114][T27483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 562.463137][T27483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.463152][T27483] ? genl_rcv+0x19/0x40 [ 562.463189][T27483] ? down_read+0x272/0x2e0 [ 562.463209][T27483] ? genl_rcv+0xd/0x40 [ 562.463230][T27483] genl_rcv+0x28/0x40 [ 562.463249][T27483] netlink_unicast+0x80f/0x9b0 [ 562.463280][T27483] ? __pfx_netlink_unicast+0x10/0x10 [ 562.463305][T27483] ? netlink_sendmsg+0x650/0xb40 [ 562.463321][T27483] ? skb_put+0x11b/0x210 [ 562.463343][T27483] netlink_sendmsg+0x813/0xb40 [ 562.463371][T27483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.463392][T27483] ? aa_sock_msg_perm+0xf1/0x1b0 [ 562.463416][T27483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 562.463440][T27483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.463457][T27483] ____sys_sendmsg+0xa68/0xad0 [ 562.463477][T27483] ? __might_fault+0xaf/0x130 [ 562.463502][T27483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.463529][T27483] ? import_iovec+0x73/0xa0 [ 562.463549][T27483] ___sys_sendmsg+0x2a5/0x360 [ 562.463567][T27483] ? __lock_acquire+0x6b5/0x2cf0 [ 562.463588][T27483] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.463642][T27483] ? __fget_files+0x2a/0x420 [ 562.463659][T27483] ? __fget_files+0x3a0/0x420 [ 562.463686][T27483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 562.463714][T27483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.463744][T27483] ? __pfx_ksys_write+0x10/0x10 [ 562.463784][T27483] do_syscall_64+0x14d/0xf80 [ 562.463804][T27483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.463821][T27483] ? trace_irq_disable+0x37/0x100 [ 562.463840][T27483] ? clear_bhb_loop+0x40/0x90 [ 562.463861][T27483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.463878][T27483] RIP: 0033:0x7f95e519c629 [ 562.463894][T27483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.463908][T27483] RSP: 002b:00007f95e6097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.463926][T27483] RAX: ffffffffffffffda RBX: 00007f95e5415fa0 RCX: 00007f95e519c629 [ 562.463939][T27483] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 562.463949][T27483] RBP: 00007f95e6097090 R08: 0000000000000000 R09: 0000000000000000 [ 562.463959][T27483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.463969][T27483] R13: 00007f95e5416038 R14: 00007f95e5415fa0 R15: 00007ffda4e14b78 [ 562.463997][T27483] [ 562.477536][T27479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.803475][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 562.888143][T27487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.895209][T27487] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 562.907797][T27487] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 562.939547][T27480] veth3: entered promiscuous mode [ 562.947336][T27480] bond3: (slave veth3): Enslaving as an active interface with a down link [ 562.957579][T27488] __nla_validate_parse: 22 callbacks suppressed [ 562.957595][T27488] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7277'. [ 563.057008][T27499] syzkaller0: entered promiscuous mode [ 563.062580][T27499] syzkaller0: entered allmulticast mode [ 563.217241][T27508] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7290'. [ 563.343806][T27523] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7294'. [ 563.344751][T27517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7293'. [ 563.367490][T27517] FAULT_INJECTION: forcing a failure. [ 563.367490][T27517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.380747][T27525] netlink: 'syz.2.7295': attribute type 12 has an invalid length. [ 563.384217][T27517] CPU: 1 UID: 0 PID: 27517 Comm: syz.1.7293 Not tainted syzkaller #0 PREEMPT(full) [ 563.384239][T27517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.384249][T27517] Call Trace: [ 563.384257][T27517] [ 563.384265][T27517] dump_stack_lvl+0xe8/0x150 [ 563.384292][T27517] should_fail_ex+0x412/0x560 [ 563.384320][T27517] _copy_from_user+0x2d/0xb0 [ 563.384339][T27517] kstrtouint_from_user+0xd6/0x180 [ 563.384364][T27517] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 563.384402][T27517] proc_fail_nth_write+0x8e/0x210 [ 563.384424][T27517] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.384450][T27517] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.384472][T27517] vfs_write+0x29a/0xb90 [ 563.384500][T27517] ? __pfx_vfs_write+0x10/0x10 [ 563.384522][T27517] ? __fget_files+0x2a/0x420 [ 563.384543][T27517] ? __fget_files+0x3a0/0x420 [ 563.384558][T27517] ? __fget_files+0x2a/0x420 [ 563.384583][T27517] ksys_write+0x150/0x270 [ 563.384605][T27517] ? __pfx_ksys_write+0x10/0x10 [ 563.384636][T27517] do_syscall_64+0x14d/0xf80 [ 563.384655][T27517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.384678][T27517] ? trace_irq_disable+0x37/0x100 [ 563.384696][T27517] ? clear_bhb_loop+0x40/0x90 [ 563.384717][T27517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.384734][T27517] RIP: 0033:0x7ffa4d55cece [ 563.384749][T27517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.384764][T27517] RSP: 002b:00007ffa4e453fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.384782][T27517] RAX: ffffffffffffffda RBX: 00007ffa4e4546c0 RCX: 00007ffa4d55cece [ 563.384795][T27517] RDX: 0000000000000001 RSI: 00007ffa4e4540a0 RDI: 0000000000000004 [ 563.384806][T27517] RBP: 00007ffa4e454090 R08: 0000000000000000 R09: 0000000000000000 [ 563.384817][T27517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.384826][T27517] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 563.384855][T27517] [ 563.776436][T27540] gtp0: entered promiscuous mode [ 563.790832][T27540] gtp0: entered allmulticast mode [ 563.859228][T27550] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 564.112129][T27567] openvswitch: netlink: IP tunnel dst address not specified [ 564.180119][T27567] netlink: 'syz.0.7304': attribute type 10 has an invalid length. [ 564.233085][T27567] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.240718][T27567] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.359669][T27580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7307'. [ 564.370145][T27567] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.377325][T27567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.384821][T27567] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.391939][T27567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.458493][T27567] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 564.523081][T27579] geneve2: entered promiscuous mode [ 564.607645][T27581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.683763][T21479] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 40440 - 0 [ 564.703316][T21479] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 40440 - 0 [ 564.730912][T27603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7310'. [ 564.769060][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7310'. [ 564.798470][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7310'. [ 564.810927][T21479] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 40440 - 0 [ 565.061465][T27626] netlink: 'syz.4.7319': attribute type 1 has an invalid length. [ 565.069882][T27628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.070895][T27626] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7319'. [ 565.077151][T27628] IPv6: NLM_F_CREATE should be set when creating new route [ 565.105564][T27628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7320'. [ 565.549237][T27656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.893703][T27674] FAULT_INJECTION: forcing a failure. [ 565.893703][T27674] name failslab, interval 1, probability 0, space 0, times 0 [ 565.911519][T27674] CPU: 0 UID: 0 PID: 27674 Comm: syz.1.7333 Not tainted syzkaller #0 PREEMPT(full) [ 565.911543][T27674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.911554][T27674] Call Trace: [ 565.911560][T27674] [ 565.911565][T27674] dump_stack_lvl+0xe8/0x150 [ 565.911583][T27674] should_fail_ex+0x412/0x560 [ 565.911600][T27674] should_failslab+0xa8/0x100 [ 565.911615][T27674] ? skb_clone+0x212/0x3a0 [ 565.911629][T27674] kmem_cache_alloc_noprof+0x87/0x650 [ 565.911641][T27674] ? __netlink_lookup+0xc6/0x8b0 [ 565.911655][T27674] skb_clone+0x212/0x3a0 [ 565.911670][T27674] __netlink_deliver_tap+0x404/0x850 [ 565.911685][T27674] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.911696][T27674] netlink_deliver_tap+0x19c/0x1b0 [ 565.911706][T27674] netlink_unicast+0x7e3/0x9b0 [ 565.911725][T27674] ? __pfx_netlink_unicast+0x10/0x10 [ 565.911740][T27674] ? netlink_sendmsg+0x650/0xb40 [ 565.911750][T27674] ? skb_put+0x11b/0x210 [ 565.911765][T27674] netlink_sendmsg+0x813/0xb40 [ 565.911779][T27674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.911791][T27674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 565.911806][T27674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.911821][T27674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.911831][T27674] ____sys_sendmsg+0xa68/0xad0 [ 565.911843][T27674] ? __might_fault+0xaf/0x130 [ 565.911858][T27674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.911875][T27674] ? import_iovec+0x73/0xa0 [ 565.911887][T27674] ___sys_sendmsg+0x2a5/0x360 [ 565.911899][T27674] ? __lock_acquire+0x6b5/0x2cf0 [ 565.911911][T27674] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.911941][T27674] ? __fget_files+0x2a/0x420 [ 565.911950][T27674] ? __fget_files+0x3a0/0x420 [ 565.911965][T27674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 565.911978][T27674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.911996][T27674] ? __pfx_ksys_write+0x10/0x10 [ 565.912014][T27674] do_syscall_64+0x14d/0xf80 [ 565.912027][T27674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.912036][T27674] ? trace_irq_disable+0x37/0x100 [ 565.912048][T27674] ? clear_bhb_loop+0x40/0x90 [ 565.912059][T27674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.912069][T27674] RIP: 0033:0x7ffa4d59c629 [ 565.912079][T27674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.912087][T27674] RSP: 002b:00007ffa4e454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.912098][T27674] RAX: ffffffffffffffda RBX: 00007ffa4d815fa0 RCX: 00007ffa4d59c629 [ 565.912105][T27674] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 565.912111][T27674] RBP: 00007ffa4e454090 R08: 0000000000000000 R09: 0000000000000000 [ 565.912117][T27674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.912123][T27674] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 565.912138][T27674] [ 566.207668][T27677] ipt_REJECT: TCP_RESET invalid for non-tcp [ 566.250924][T27677] syzkaller0: entered promiscuous mode [ 566.256657][T27677] syzkaller0: entered allmulticast mode [ 566.476060][T27693] netlink: 'syz.1.7340': attribute type 3 has an invalid length. [ 566.669909][T27581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.682241][T27581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40440 - 0 [ 566.716295][T27696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.723702][T27696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.752444][T27696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.774105][T27696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.779667][T27710] netlink: 'syz.2.7345': attribute type 2 has an invalid length. [ 566.859730][T27581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.884097][T27581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40440 - 0 [ 567.029894][T27581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.040453][T27581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40440 - 0 [ 567.082961][T27725] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 567.120489][T27725] bond4 (unregistering): Released all slaves [ 567.142768][T27729] macsec0: left promiscuous mode [ 567.329197][T21468] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 40440 - 0 [ 567.357292][T21468] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.408851][T21468] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 40440 - 0 [ 567.445397][T21468] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.516078][T21468] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 40440 - 0 [ 567.540241][T21468] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.557553][T27753] xt_connbytes: Forcing CT accounting to be enabled [ 567.579113][T21468] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 40440 - 0 [ 567.594001][T21468] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.796694][T27770] netlink: 'syz.1.7371': attribute type 4 has an invalid length. [ 567.814030][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.822098][ C1] lec:lec_tx_timeout: lec0 [ 567.825567][T27774] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 567.826840][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.055666][T27782] __nla_validate_parse: 3 callbacks suppressed [ 568.055684][T27782] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7375'. [ 568.074186][T27782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7375'. [ 568.373361][T27808] macsec0: entered promiscuous mode [ 568.442212][T27808] macsec0: entered allmulticast mode [ 568.465270][T27808] veth1_macvtap: entered allmulticast mode [ 568.625189][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7388'. [ 568.646612][T27822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7390'. [ 568.659159][T27822] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7390'. [ 568.717939][T27821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7388'. [ 569.162464][T27855] netlink: 'syz.3.7401': attribute type 1 has an invalid length. [ 569.214437][T27855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.230284][T27860] bond3: (slave veth0_to_bond): making interface the new active one [ 569.240024][T27860] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 569.415722][T27875] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7408'. [ 569.479018][T27882] xt_connbytes: Forcing CT accounting to be enabled [ 569.590351][T27888] netlink: 'syz.4.7413': attribute type 1 has an invalid length. [ 569.612941][T27890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.710232][T27890] syzkaller0: entered promiscuous mode [ 569.719209][T27890] syzkaller0: entered allmulticast mode [ 569.730502][T27890] openvswitch: netlink: Invalid VLAN frame [ 569.732515][T27896] netlink: 'syz.4.7417': attribute type 4 has an invalid length. [ 569.800624][T27903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7420'. [ 569.856489][T27905] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 571.810210][T27971] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 571.850156][T27971] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 572.096023][T27988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7450'. [ 572.149004][T27988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7450'. [ 572.307100][T27996] vlan2: entered allmulticast mode [ 572.312250][T27996] hsr0: entered allmulticast mode [ 572.365140][T27996] hsr_slave_0: entered allmulticast mode [ 572.370808][T27996] hsr_slave_1: entered allmulticast mode [ 572.405574][T28000] FAULT_INJECTION: forcing a failure. [ 572.405574][T28000] name failslab, interval 1, probability 0, space 0, times 0 [ 572.421976][T28000] CPU: 0 UID: 0 PID: 28000 Comm: syz.2.7454 Not tainted syzkaller #0 PREEMPT(full) [ 572.422000][T28000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.422012][T28000] Call Trace: [ 572.422020][T28000] [ 572.422028][T28000] dump_stack_lvl+0xe8/0x150 [ 572.422055][T28000] should_fail_ex+0x412/0x560 [ 572.422084][T28000] should_failslab+0xa8/0x100 [ 572.422108][T28000] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 572.422137][T28000] ? __alloc_skb+0x1d0/0x7d0 [ 572.422154][T28000] ? __local_bh_enable_ip+0xd0/0x130 [ 572.422177][T28000] __alloc_skb+0x1d0/0x7d0 [ 572.422195][T28000] ? netlink_ack_tlv_len+0x6c/0x210 [ 572.422216][T28000] netlink_ack+0x146/0xa50 [ 572.422231][T28000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.422251][T28000] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 572.422273][T28000] ? __pfx_nl80211_post_doit+0x10/0x10 [ 572.422299][T28000] ? __pfx_ref_tracker_free+0x10/0x10 [ 572.422329][T28000] netlink_rcv_skb+0x2b6/0x4b0 [ 572.422349][T28000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.422371][T28000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.422386][T28000] ? genl_rcv+0x19/0x40 [ 572.422422][T28000] ? down_read+0x272/0x2e0 [ 572.422442][T28000] ? genl_rcv+0xd/0x40 [ 572.422463][T28000] genl_rcv+0x28/0x40 [ 572.422482][T28000] netlink_unicast+0x80f/0x9b0 [ 572.422513][T28000] ? __pfx_netlink_unicast+0x10/0x10 [ 572.422538][T28000] ? netlink_sendmsg+0x650/0xb40 [ 572.422553][T28000] ? skb_put+0x11b/0x210 [ 572.422576][T28000] netlink_sendmsg+0x813/0xb40 [ 572.422603][T28000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.422624][T28000] ? aa_sock_msg_perm+0xf1/0x1b0 [ 572.422648][T28000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.422672][T28000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.422688][T28000] ____sys_sendmsg+0xa68/0xad0 [ 572.422710][T28000] ? __might_fault+0xaf/0x130 [ 572.422735][T28000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.422765][T28000] ? import_iovec+0x73/0xa0 [ 572.422786][T28000] ___sys_sendmsg+0x2a5/0x360 [ 572.422806][T28000] ? __lock_acquire+0x6b5/0x2cf0 [ 572.422829][T28000] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.422881][T28000] ? __fget_files+0x2a/0x420 [ 572.422899][T28000] ? __fget_files+0x3a0/0x420 [ 572.422926][T28000] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.422954][T28000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.422988][T28000] ? __pfx_ksys_write+0x10/0x10 [ 572.423020][T28000] do_syscall_64+0x14d/0xf80 [ 572.423041][T28000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.423057][T28000] ? trace_irq_disable+0x37/0x100 [ 572.423076][T28000] ? clear_bhb_loop+0x40/0x90 [ 572.423098][T28000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.423114][T28000] RIP: 0033:0x7f0f81d9c629 [ 572.423136][T28000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.423151][T28000] RSP: 002b:00007f0f82bda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.423170][T28000] RAX: ffffffffffffffda RBX: 00007f0f82015fa0 RCX: 00007f0f81d9c629 [ 572.423181][T28000] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 572.423191][T28000] RBP: 00007f0f82bda090 R08: 0000000000000000 R09: 0000000000000000 [ 572.423202][T28000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.423212][T28000] R13: 00007f0f82016038 R14: 00007f0f82015fa0 R15: 00007ffce7d90978 [ 572.423240][T28000] [ 572.843962][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 572.852002][ C1] lec:lec_tx_timeout: lec0 [ 573.128210][T28023] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7464'. [ 573.261371][T28032] bond2: option mode: unable to set because the bond device has slaves [ 573.291019][T28023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7464'. [ 573.849511][T28055] FAULT_INJECTION: forcing a failure. [ 573.849511][T28055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.883151][T28055] CPU: 0 UID: 0 PID: 28055 Comm: syz.3.7473 Not tainted syzkaller #0 PREEMPT(full) [ 573.883177][T28055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 573.883187][T28055] Call Trace: [ 573.883196][T28055] [ 573.883204][T28055] dump_stack_lvl+0xe8/0x150 [ 573.883231][T28055] should_fail_ex+0x412/0x560 [ 573.883259][T28055] _copy_from_user+0x2d/0xb0 [ 573.883278][T28055] wext_handle_ioctl+0xc7/0x1d0 [ 573.883302][T28055] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 573.883320][T28055] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 573.883356][T28055] sock_ioctl+0x159/0x7f0 [ 573.883379][T28055] ? __pfx_sock_ioctl+0x10/0x10 [ 573.883399][T28055] ? __fget_files+0x2a/0x420 [ 573.883414][T28055] ? __fget_files+0x3a0/0x420 [ 573.883429][T28055] ? __fget_files+0x2a/0x420 [ 573.883446][T28055] ? bpf_lsm_file_ioctl+0x9/0x20 [ 573.883462][T28055] ? __pfx_sock_ioctl+0x10/0x10 [ 573.883481][T28055] __se_sys_ioctl+0xfc/0x170 [ 573.883503][T28055] do_syscall_64+0x14d/0xf80 [ 573.883521][T28055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.883535][T28055] ? trace_irq_disable+0x37/0x100 [ 573.883552][T28055] ? clear_bhb_loop+0x40/0x90 [ 573.883571][T28055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.883586][T28055] RIP: 0033:0x7fb239b9c629 [ 573.883601][T28055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.883614][T28055] RSP: 002b:00007fb23a9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.883642][T28055] RAX: ffffffffffffffda RBX: 00007fb239e15fa0 RCX: 00007fb239b9c629 [ 573.883653][T28055] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 573.883664][T28055] RBP: 00007fb23a9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 573.883674][T28055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.883685][T28055] R13: 00007fb239e16038 R14: 00007fb239e15fa0 R15: 00007fff6523aa98 [ 573.883713][T28055] [ 574.275980][T28061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7475'. [ 574.370408][T28063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.377681][T28063] IPv6: NLM_F_CREATE should be set when creating new route [ 574.385467][T28063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7479'. [ 574.586829][T28074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7482'. [ 574.606734][T28077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7483'. [ 574.808743][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7489'. [ 574.820857][T28096] syz_tun: entered allmulticast mode [ 574.836703][T28096] dvmrp8: entered allmulticast mode [ 574.843630][T28096] dvmrp8: left allmulticast mode [ 574.940966][T28095] syz_tun: left allmulticast mode [ 575.028978][T28104] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7492'. [ 575.098794][T28108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.106110][T28108] IPv6: NLM_F_CREATE should be set when creating new route [ 575.131260][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7495'. [ 575.144275][T28114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7497'. [ 575.268369][T28122] Bluetooth: MGMT ver 1.23 [ 575.429800][T28132] FAULT_INJECTION: forcing a failure. [ 575.429800][T28132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.453370][T28132] CPU: 1 UID: 0 PID: 28132 Comm: syz.1.7501 Not tainted syzkaller #0 PREEMPT(full) [ 575.453396][T28132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.453407][T28132] Call Trace: [ 575.453415][T28132] [ 575.453423][T28132] dump_stack_lvl+0xe8/0x150 [ 575.453451][T28132] should_fail_ex+0x412/0x560 [ 575.453480][T28132] _copy_from_user+0x2d/0xb0 [ 575.453506][T28132] ___sys_sendmsg+0x1c6/0x360 [ 575.453528][T28132] ? __lock_acquire+0x6b5/0x2cf0 [ 575.453551][T28132] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.453605][T28132] ? __fget_files+0x2a/0x420 [ 575.453621][T28132] ? __fget_files+0x3a0/0x420 [ 575.453648][T28132] __x64_sys_sendmsg+0x1bd/0x2a0 [ 575.453671][T28132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.453701][T28132] ? __pfx_ksys_write+0x10/0x10 [ 575.453732][T28132] do_syscall_64+0x14d/0xf80 [ 575.453752][T28132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.453769][T28132] ? trace_irq_disable+0x37/0x100 [ 575.453788][T28132] ? clear_bhb_loop+0x40/0x90 [ 575.453808][T28132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.453825][T28132] RIP: 0033:0x7ffa4d59c629 [ 575.453842][T28132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.453856][T28132] RSP: 002b:00007ffa4e454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.453875][T28132] RAX: ffffffffffffffda RBX: 00007ffa4d815fa0 RCX: 00007ffa4d59c629 [ 575.453888][T28132] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 575.453900][T28132] RBP: 00007ffa4e454090 R08: 0000000000000000 R09: 0000000000000000 [ 575.453911][T28132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.453924][T28132] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 575.453950][T28132] [ 575.876644][T28150] bond2: option mode: unable to set because the bond device has slaves [ 575.940993][T28156] rdma_rxe: rxe_newlink: failed to add bond0 [ 575.986336][T28158] xt_socket: unknown flags 0x50 [ 576.051410][T28165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.477847][T28192] bond2: option mode: unable to set because the bond device has slaves [ 576.522855][T28195] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 576.544631][T28197] rdma_rxe: rxe_newlink: failed to add bond0 [ 576.623619][T28203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.630897][T28203] IPv6: NLM_F_CREATE should be set when creating new route [ 576.897413][T28223] netlink: 'syz.0.7533': attribute type 5 has an invalid length. [ 576.924157][T28232] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 576.944178][T28233] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 576.963173][T28223] netlink: 'syz.0.7533': attribute type 1 has an invalid length. [ 576.972903][T28236] netlink: 'syz.4.7537': attribute type 6 has an invalid length. [ 577.003466][T28223] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 577.143562][T28244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.217629][T28257] rdma_rxe: rxe_newlink: failed to add bond0 [ 577.273402][T28260] FAULT_INJECTION: forcing a failure. [ 577.273402][T28260] name failslab, interval 1, probability 0, space 0, times 0 [ 577.287293][T28260] CPU: 1 UID: 0 PID: 28260 Comm: syz.1.7545 Not tainted syzkaller #0 PREEMPT(full) [ 577.287317][T28260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.287328][T28260] Call Trace: [ 577.287335][T28260] [ 577.287343][T28260] dump_stack_lvl+0xe8/0x150 [ 577.287370][T28260] should_fail_ex+0x412/0x560 [ 577.287397][T28260] should_failslab+0xa8/0x100 [ 577.287420][T28260] ? skb_clone+0x212/0x3a0 [ 577.287441][T28260] kmem_cache_alloc_noprof+0x87/0x650 [ 577.287462][T28260] ? __netlink_lookup+0xc6/0x8b0 [ 577.287488][T28260] skb_clone+0x212/0x3a0 [ 577.287513][T28260] __netlink_deliver_tap+0x404/0x850 [ 577.287542][T28260] ? netlink_deliver_tap+0x2e/0x1b0 [ 577.287562][T28260] netlink_deliver_tap+0x19c/0x1b0 [ 577.287581][T28260] netlink_unicast+0x7e3/0x9b0 [ 577.287613][T28260] ? __pfx_netlink_unicast+0x10/0x10 [ 577.287639][T28260] ? netlink_sendmsg+0x650/0xb40 [ 577.287663][T28260] ? skb_put+0x11b/0x210 [ 577.287686][T28260] netlink_sendmsg+0x813/0xb40 [ 577.287713][T28260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.287735][T28260] ? aa_sock_msg_perm+0xf1/0x1b0 [ 577.287759][T28260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.287783][T28260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.287800][T28260] ____sys_sendmsg+0xa68/0xad0 [ 577.287821][T28260] ? __might_fault+0xaf/0x130 [ 577.287845][T28260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.287873][T28260] ? import_iovec+0x73/0xa0 [ 577.287893][T28260] ___sys_sendmsg+0x2a5/0x360 [ 577.287912][T28260] ? __lock_acquire+0x6b5/0x2cf0 [ 577.287934][T28260] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.287987][T28260] ? __fget_files+0x2a/0x420 [ 577.288003][T28260] ? __fget_files+0x3a0/0x420 [ 577.288030][T28260] __x64_sys_sendmsg+0x1bd/0x2a0 [ 577.288052][T28260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.288080][T28260] ? __pfx_ksys_write+0x10/0x10 [ 577.288110][T28260] do_syscall_64+0x14d/0xf80 [ 577.288131][T28260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.288147][T28260] ? trace_irq_disable+0x37/0x100 [ 577.288166][T28260] ? clear_bhb_loop+0x40/0x90 [ 577.288186][T28260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.288201][T28260] RIP: 0033:0x7ffa4d59c629 [ 577.288217][T28260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.288233][T28260] RSP: 002b:00007ffa4e454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.288249][T28260] RAX: ffffffffffffffda RBX: 00007ffa4d815fa0 RCX: 00007ffa4d59c629 [ 577.288261][T28260] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 577.288272][T28260] RBP: 00007ffa4e454090 R08: 0000000000000000 R09: 0000000000000000 [ 577.288282][T28260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.288297][T28260] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 577.288326][T28260] [ 577.761036][T28279] netlink: 'syz.1.7552': attribute type 1 has an invalid length. [ 577.832639][T28284] FAULT_INJECTION: forcing a failure. [ 577.832639][T28284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.861610][T28284] CPU: 1 UID: 0 PID: 28284 Comm: syz.4.7555 Not tainted syzkaller #0 PREEMPT(full) [ 577.861635][T28284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.861646][T28284] Call Trace: [ 577.861653][T28284] [ 577.861661][T28284] dump_stack_lvl+0xe8/0x150 [ 577.861693][T28284] should_fail_ex+0x412/0x560 [ 577.861721][T28284] _copy_from_iter+0x1d3/0x1670 [ 577.861752][T28284] ? rcu_is_watching+0x15/0xb0 [ 577.861772][T28284] ? __pfx__copy_from_iter+0x10/0x10 [ 577.861800][T28284] ? netlink_sendmsg+0x650/0xb40 [ 577.861816][T28284] ? skb_put+0x11b/0x210 [ 577.861838][T28284] netlink_sendmsg+0x6c0/0xb40 [ 577.861864][T28284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.861885][T28284] ? aa_sock_msg_perm+0xf1/0x1b0 [ 577.861908][T28284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.861932][T28284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.861948][T28284] ____sys_sendmsg+0xa68/0xad0 [ 577.861968][T28284] ? __might_fault+0xaf/0x130 [ 577.861994][T28284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.862021][T28284] ? import_iovec+0x73/0xa0 [ 577.862043][T28284] ___sys_sendmsg+0x2a5/0x360 [ 577.862062][T28284] ? __lock_acquire+0x6b5/0x2cf0 [ 577.862084][T28284] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.862137][T28284] ? __fget_files+0x2a/0x420 [ 577.862153][T28284] ? __fget_files+0x3a0/0x420 [ 577.862179][T28284] __x64_sys_sendmsg+0x1bd/0x2a0 [ 577.862203][T28284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.862231][T28284] ? __pfx_ksys_write+0x10/0x10 [ 577.862283][T28284] do_syscall_64+0x14d/0xf80 [ 577.862304][T28284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.862320][T28284] ? trace_irq_disable+0x37/0x100 [ 577.862339][T28284] ? clear_bhb_loop+0x40/0x90 [ 577.862359][T28284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.862376][T28284] RIP: 0033:0x7fb29199c629 [ 577.862392][T28284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.862406][T28284] RSP: 002b:00007fb28fbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.862426][T28284] RAX: ffffffffffffffda RBX: 00007fb291c15fa0 RCX: 00007fb29199c629 [ 577.862439][T28284] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 577.862450][T28284] RBP: 00007fb28fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 577.862461][T28284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.862472][T28284] R13: 00007fb291c16038 R14: 00007fb291c15fa0 R15: 00007ffca55fe5d8 [ 577.862509][T28284] [ 578.274578][T28292] 8021q: adding VLAN 0 to HW filter on device bond4 [ 578.282463][T28296] __nla_validate_parse: 11 callbacks suppressed [ 578.282479][T28296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7559'. [ 578.405358][T28292] rdma_rxe: rxe_newlink: failed to add bond0 [ 578.417383][T28303] FAULT_INJECTION: forcing a failure. [ 578.417383][T28303] name failslab, interval 1, probability 0, space 0, times 0 [ 578.474876][T28307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7562'. [ 578.480384][T28303] CPU: 0 UID: 0 PID: 28303 Comm: syz.0.7563 Not tainted syzkaller #0 PREEMPT(full) [ 578.480408][T28303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.480419][T28303] Call Trace: [ 578.480427][T28303] [ 578.480434][T28303] dump_stack_lvl+0xe8/0x150 [ 578.480461][T28303] should_fail_ex+0x412/0x560 [ 578.480489][T28303] should_failslab+0xa8/0x100 [ 578.480512][T28303] ? skb_clone+0x212/0x3a0 [ 578.480533][T28303] kmem_cache_alloc_noprof+0x87/0x650 [ 578.480553][T28303] ? __netlink_lookup+0xc6/0x8b0 [ 578.480578][T28303] skb_clone+0x212/0x3a0 [ 578.480602][T28303] __netlink_deliver_tap+0x404/0x850 [ 578.480630][T28303] ? netlink_deliver_tap+0x2e/0x1b0 [ 578.480649][T28303] netlink_deliver_tap+0x19c/0x1b0 [ 578.480668][T28303] netlink_unicast+0x7e3/0x9b0 [ 578.480698][T28303] ? __pfx_netlink_unicast+0x10/0x10 [ 578.480722][T28303] ? netlink_sendmsg+0x650/0xb40 [ 578.480738][T28303] ? skb_put+0x11b/0x210 [ 578.480760][T28303] netlink_sendmsg+0x813/0xb40 [ 578.480786][T28303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.480806][T28303] ? aa_sock_msg_perm+0xf1/0x1b0 [ 578.480829][T28303] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 578.480852][T28303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.480868][T28303] ____sys_sendmsg+0xa68/0xad0 [ 578.480888][T28303] ? __might_fault+0xaf/0x130 [ 578.480913][T28303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.480941][T28303] ? import_iovec+0x73/0xa0 [ 578.480963][T28303] ___sys_sendmsg+0x2a5/0x360 [ 578.480981][T28303] ? __lock_acquire+0x6b5/0x2cf0 [ 578.481004][T28303] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.481067][T28303] ? __fget_files+0x2a/0x420 [ 578.481084][T28303] ? __fget_files+0x3a0/0x420 [ 578.481107][T28303] __x64_sys_sendmsg+0x1bd/0x2a0 [ 578.481130][T28303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 578.481159][T28303] ? __pfx_ksys_write+0x10/0x10 [ 578.481218][T28303] do_syscall_64+0x14d/0xf80 [ 578.481238][T28303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.481254][T28303] ? trace_irq_disable+0x37/0x100 [ 578.481273][T28303] ? clear_bhb_loop+0x40/0x90 [ 578.481293][T28303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.481309][T28303] RIP: 0033:0x7f95e519c629 [ 578.481325][T28303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.481339][T28303] RSP: 002b:00007f95e6097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.481358][T28303] RAX: ffffffffffffffda RBX: 00007f95e5415fa0 RCX: 00007f95e519c629 [ 578.481370][T28303] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 578.481385][T28303] RBP: 00007f95e6097090 R08: 0000000000000000 R09: 0000000000000000 [ 578.481396][T28303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.481406][T28303] R13: 00007f95e5416038 R14: 00007f95e5415fa0 R15: 00007ffda4e14b78 [ 578.481434][T28303] [ 578.992025][T28320] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 579.103563][T28328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.207867][T28338] bond2: option mode: unable to set because the bond device has slaves [ 579.298023][T28348] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7578'. [ 579.315268][T28346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7577'. [ 579.320949][T28350] rdma_rxe: rxe_newlink: failed to add bond0 [ 579.360249][T28354] FAULT_INJECTION: forcing a failure. [ 579.360249][T28354] name failslab, interval 1, probability 0, space 0, times 0 [ 579.404241][T28354] CPU: 0 UID: 0 PID: 28354 Comm: syz.0.7580 Not tainted syzkaller #0 PREEMPT(full) [ 579.404263][T28354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 579.404274][T28354] Call Trace: [ 579.404282][T28354] [ 579.404289][T28354] dump_stack_lvl+0xe8/0x150 [ 579.404315][T28354] should_fail_ex+0x412/0x560 [ 579.404342][T28354] should_failslab+0xa8/0x100 [ 579.404375][T28354] __kmalloc_noprof+0xe8/0x760 [ 579.404395][T28354] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 579.404423][T28354] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 579.404450][T28354] genl_family_rcv_msg_doit+0xd9/0x330 [ 579.404477][T28354] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 579.404505][T28354] ? apparmor_capable+0x137/0x1a0 [ 579.404525][T28354] ? bpf_lsm_capable+0x9/0x20 [ 579.404542][T28354] ? security_capable+0x7e/0x2c0 [ 579.404570][T28354] genl_rcv_msg+0x61c/0x7a0 [ 579.404596][T28354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.404615][T28354] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 579.404636][T28354] ? __pfx_nl80211_set_interface+0x10/0x10 [ 579.404657][T28354] ? __pfx_nl80211_post_doit+0x10/0x10 [ 579.404682][T28354] ? __pfx_ref_tracker_free+0x10/0x10 [ 579.404712][T28354] netlink_rcv_skb+0x232/0x4b0 [ 579.404730][T28354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.404753][T28354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.404768][T28354] ? genl_rcv+0x19/0x40 [ 579.404804][T28354] ? down_read+0x272/0x2e0 [ 579.404823][T28354] ? genl_rcv+0xd/0x40 [ 579.404844][T28354] genl_rcv+0x28/0x40 [ 579.404862][T28354] netlink_unicast+0x80f/0x9b0 [ 579.404894][T28354] ? __pfx_netlink_unicast+0x10/0x10 [ 579.404916][T28354] ? netlink_sendmsg+0x650/0xb40 [ 579.404931][T28354] ? skb_put+0x11b/0x210 [ 579.404952][T28354] netlink_sendmsg+0x813/0xb40 [ 579.404977][T28354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.405007][T28354] ? aa_sock_msg_perm+0xf1/0x1b0 [ 579.405031][T28354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 579.405054][T28354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.405071][T28354] ____sys_sendmsg+0xa68/0xad0 [ 579.405092][T28354] ? __might_fault+0xaf/0x130 [ 579.405118][T28354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.405147][T28354] ? import_iovec+0x73/0xa0 [ 579.405169][T28354] ___sys_sendmsg+0x2a5/0x360 [ 579.405189][T28354] ? __lock_acquire+0x6b5/0x2cf0 [ 579.405212][T28354] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.405265][T28354] ? __fget_files+0x2a/0x420 [ 579.405281][T28354] ? __fget_files+0x3a0/0x420 [ 579.405308][T28354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 579.405331][T28354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.405367][T28354] ? __pfx_ksys_write+0x10/0x10 [ 579.405399][T28354] do_syscall_64+0x14d/0xf80 [ 579.405419][T28354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.405436][T28354] ? trace_irq_disable+0x37/0x100 [ 579.405455][T28354] ? clear_bhb_loop+0x40/0x90 [ 579.405476][T28354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.405493][T28354] RIP: 0033:0x7f95e519c629 [ 579.405508][T28354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.405523][T28354] RSP: 002b:00007f95e6097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.405542][T28354] RAX: ffffffffffffffda RBX: 00007f95e5415fa0 RCX: 00007f95e519c629 [ 579.405555][T28354] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 579.405566][T28354] RBP: 00007f95e6097090 R08: 0000000000000000 R09: 0000000000000000 [ 579.405577][T28354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.405588][T28354] R13: 00007f95e5416038 R14: 00007f95e5415fa0 R15: 00007ffda4e14b78 [ 579.405618][T28354] [ 579.796405][T28356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7582'. [ 579.967814][T28378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7581'. [ 580.020255][T28377] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 580.077728][T28361] lo: entered allmulticast mode [ 580.079828][T28377] netlink: 'syz.1.7587': attribute type 1 has an invalid length. [ 580.269353][T28390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7592'. [ 580.335058][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7594'. [ 580.342273][T28396] bond2: option mode: unable to set because the bond device has slaves [ 580.414414][T28401] rdma_rxe: rxe_newlink: failed to add bond0 [ 580.454904][T28405] FAULT_INJECTION: forcing a failure. [ 580.454904][T28405] name failslab, interval 1, probability 0, space 0, times 0 [ 580.468158][T28405] CPU: 0 UID: 0 PID: 28405 Comm: syz.3.7597 Not tainted syzkaller #0 PREEMPT(full) [ 580.468179][T28405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.468189][T28405] Call Trace: [ 580.468196][T28405] [ 580.468204][T28405] dump_stack_lvl+0xe8/0x150 [ 580.468231][T28405] should_fail_ex+0x412/0x560 [ 580.468268][T28405] should_failslab+0xa8/0x100 [ 580.468293][T28405] __kmalloc_cache_noprof+0x88/0x660 [ 580.468315][T28405] ? nfnetlink_rcv+0xfe1/0x27b0 [ 580.468344][T28405] nfnetlink_rcv+0xfe1/0x27b0 [ 580.468397][T28405] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 580.468435][T28405] ? ref_tracker_free+0x693/0x840 [ 580.468480][T28405] ? __netlink_deliver_tap+0x807/0x850 [ 580.468498][T28405] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.468532][T28405] netlink_unicast+0x80f/0x9b0 [ 580.468564][T28405] ? __pfx_netlink_unicast+0x10/0x10 [ 580.468587][T28405] ? netlink_sendmsg+0x650/0xb40 [ 580.468603][T28405] ? skb_put+0x11b/0x210 [ 580.468626][T28405] netlink_sendmsg+0x813/0xb40 [ 580.468653][T28405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.468675][T28405] ? aa_sock_msg_perm+0xf1/0x1b0 [ 580.468698][T28405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.468723][T28405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.468739][T28405] ____sys_sendmsg+0xa68/0xad0 [ 580.468760][T28405] ? __might_fault+0xaf/0x130 [ 580.468786][T28405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.468816][T28405] ? import_iovec+0x73/0xa0 [ 580.468837][T28405] ___sys_sendmsg+0x2a5/0x360 [ 580.468856][T28405] ? __lock_acquire+0x6b5/0x2cf0 [ 580.468879][T28405] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.468931][T28405] ? __fget_files+0x2a/0x420 [ 580.468946][T28405] ? __fget_files+0x3a0/0x420 [ 580.468971][T28405] __x64_sys_sendmsg+0x1bd/0x2a0 [ 580.468993][T28405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.469022][T28405] ? __pfx_ksys_write+0x10/0x10 [ 580.469052][T28405] do_syscall_64+0x14d/0xf80 [ 580.469072][T28405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.469088][T28405] ? trace_irq_disable+0x37/0x100 [ 580.469106][T28405] ? clear_bhb_loop+0x40/0x90 [ 580.469125][T28405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.469142][T28405] RIP: 0033:0x7fb239b9c629 [ 580.469158][T28405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.469172][T28405] RSP: 002b:00007fb23a9b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.469191][T28405] RAX: ffffffffffffffda RBX: 00007fb239e15fa0 RCX: 00007fb239b9c629 [ 580.469204][T28405] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 580.469215][T28405] RBP: 00007fb23a9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 580.469226][T28405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.469243][T28405] R13: 00007fb239e16038 R14: 00007fb239e15fa0 R15: 00007fff6523aa98 [ 580.469271][T28405] [ 580.897165][T28416] netlink: 'syz.3.7601': attribute type 17 has an invalid length. [ 580.930205][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7601'. [ 580.954065][T28416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7601'. [ 581.008071][T28422] netlink: 'syz.1.7603': attribute type 3 has an invalid length. [ 581.022025][T28424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.287100][T28441] bond2: option mode: unable to set because the bond device has slaves [ 581.352021][T28448] rdma_rxe: rxe_newlink: failed to add bond0 [ 581.788710][T28480] bond1: option mode: unable to set because the bond device is up [ 581.850915][T28485] rdma_rxe: rxe_newlink: failed to add bond0 [ 581.991182][T28491] openvswitch: netlink: Flow key attr not present in new flow. [ 582.327819][T28512] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.363362][T28520] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 582.387433][T28512] rdma_rxe: rxe_newlink: failed to add bond0 [ 582.694127][T21468] wlan1: Trigger new scan to find an IBSS to join [ 582.811930][T28556] bond3: option mode: unable to set because the bond device has slaves [ 582.878176][T28561] rdma_rxe: rxe_newlink: failed to add bond0 [ 582.954737][T28564] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 583.309781][T28592] __nla_validate_parse: 12 callbacks suppressed [ 583.309799][T28592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7667'. [ 583.401117][T28598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7670'. [ 583.696762][T28626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7679'. [ 583.713400][T28628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.723213][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7680'. [ 583.777703][T28631] netlink: 'syz.3.7681': attribute type 12 has an invalid length. [ 583.797987][T28631] netlink: 'syz.3.7681': attribute type 29 has an invalid length. [ 583.823999][T28631] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7681'. [ 583.842582][T28631] netlink: 59 bytes leftover after parsing attributes in process `syz.3.7681'. [ 583.927984][T28644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7684'. [ 584.013407][T28641] netlink: 'syz.2.7683': attribute type 21 has an invalid length. [ 584.028255][T28641] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7683'. [ 584.040416][T28641] netlink: 'syz.2.7683': attribute type 5 has an invalid length. [ 584.040474][T28650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7685'. [ 584.049541][T28641] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7683'. [ 584.120538][T28651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.128549][T28655] veth0_to_batadv: entered promiscuous mode [ 584.136611][T28655] macvtap1: entered promiscuous mode [ 584.142172][T28655] macvtap1: entered allmulticast mode [ 584.154019][T28655] veth0_to_batadv: entered allmulticast mode [ 584.314985][T28666] FAULT_INJECTION: forcing a failure. [ 584.314985][T28666] name failslab, interval 1, probability 0, space 0, times 0 [ 584.327801][T28666] CPU: 0 UID: 0 PID: 28666 Comm: syz.3.7692 Not tainted syzkaller #0 PREEMPT(full) [ 584.327823][T28666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.327834][T28666] Call Trace: [ 584.327842][T28666] [ 584.327849][T28666] dump_stack_lvl+0xe8/0x150 [ 584.327885][T28666] should_fail_ex+0x412/0x560 [ 584.327912][T28666] should_failslab+0xa8/0x100 [ 584.327934][T28666] ? skb_clone+0x212/0x3a0 [ 584.327954][T28666] kmem_cache_alloc_noprof+0x87/0x650 [ 584.327979][T28666] skb_clone+0x212/0x3a0 [ 584.328002][T28666] __netlink_deliver_tap+0x404/0x850 [ 584.328030][T28666] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.328048][T28666] netlink_deliver_tap+0x19c/0x1b0 [ 584.328065][T28666] netlink_sendskb+0x68/0x140 [ 584.328088][T28666] netlink_unicast+0x3a3/0x9b0 [ 584.328115][T28666] ? __pfx_netlink_unicast+0x10/0x10 [ 584.328145][T28666] nfnetlink_rcv+0x2517/0x27b0 [ 584.328195][T28666] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 584.328232][T28666] ? ref_tracker_free+0x693/0x840 [ 584.328280][T28666] ? __netlink_deliver_tap+0x807/0x850 [ 584.328298][T28666] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.328330][T28666] netlink_unicast+0x80f/0x9b0 [ 584.328362][T28666] ? __pfx_netlink_unicast+0x10/0x10 [ 584.328385][T28666] ? netlink_sendmsg+0x650/0xb40 [ 584.328401][T28666] ? skb_put+0x11b/0x210 [ 584.328425][T28666] netlink_sendmsg+0x813/0xb40 [ 584.328451][T28666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.328471][T28666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 584.328495][T28666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 584.328519][T28666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.328536][T28666] ____sys_sendmsg+0xa68/0xad0 [ 584.328556][T28666] ? __might_fault+0xaf/0x130 [ 584.328582][T28666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.328610][T28666] ? import_iovec+0x73/0xa0 [ 584.328633][T28666] ___sys_sendmsg+0x2a5/0x360 [ 584.328651][T28666] ? __lock_acquire+0x6b5/0x2cf0 [ 584.328674][T28666] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.328730][T28666] ? __fget_files+0x2a/0x420 [ 584.328748][T28666] ? __fget_files+0x3a0/0x420 [ 584.328778][T28666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 584.328803][T28666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.328834][T28666] ? __pfx_ksys_write+0x10/0x10 [ 584.328870][T28666] do_syscall_64+0x14d/0xf80 [ 584.328891][T28666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.328907][T28666] ? trace_irq_disable+0x37/0x100 [ 584.328926][T28666] ? clear_bhb_loop+0x40/0x90 [ 584.328946][T28666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.328962][T28666] RIP: 0033:0x7fb239b9c629 [ 584.328979][T28666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.328993][T28666] RSP: 002b:00007fb23a9b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.329011][T28666] RAX: ffffffffffffffda RBX: 00007fb239e15fa0 RCX: 00007fb239b9c629 [ 584.329024][T28666] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 584.329034][T28666] RBP: 00007fb23a9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 584.329045][T28666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.329055][T28666] R13: 00007fb239e16038 R14: 00007fb239e15fa0 R15: 00007fff6523aa98 [ 584.329084][T28666] [ 584.330740][T28668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 584.798165][T28683] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 585.034089][T28699] FAULT_INJECTION: forcing a failure. [ 585.034089][T28699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.062097][T28699] CPU: 1 UID: 0 PID: 28699 Comm: syz.0.7704 Not tainted syzkaller #0 PREEMPT(full) [ 585.062122][T28699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.062133][T28699] Call Trace: [ 585.062142][T28699] [ 585.062149][T28699] dump_stack_lvl+0xe8/0x150 [ 585.062176][T28699] should_fail_ex+0x412/0x560 [ 585.062204][T28699] _copy_from_iter+0x1d3/0x1670 [ 585.062241][T28699] ? rcu_is_watching+0x15/0xb0 [ 585.062262][T28699] ? __pfx__copy_from_iter+0x10/0x10 [ 585.062293][T28699] ? netlink_sendmsg+0x650/0xb40 [ 585.062310][T28699] ? skb_put+0x11b/0x210 [ 585.062333][T28699] netlink_sendmsg+0x6c0/0xb40 [ 585.062360][T28699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.062381][T28699] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.062405][T28699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.062428][T28699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.062444][T28699] ____sys_sendmsg+0xa68/0xad0 [ 585.062470][T28699] ? __might_fault+0xaf/0x130 [ 585.062496][T28699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.062525][T28699] ? import_iovec+0x73/0xa0 [ 585.062545][T28699] ___sys_sendmsg+0x2a5/0x360 [ 585.062564][T28699] ? __lock_acquire+0x6b5/0x2cf0 [ 585.062591][T28699] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.062645][T28699] ? __fget_files+0x2a/0x420 [ 585.062661][T28699] ? __fget_files+0x3a0/0x420 [ 585.062688][T28699] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.062711][T28699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.062742][T28699] ? __pfx_ksys_write+0x10/0x10 [ 585.062773][T28699] do_syscall_64+0x14d/0xf80 [ 585.062800][T28699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.062817][T28699] ? trace_irq_disable+0x37/0x100 [ 585.062836][T28699] ? clear_bhb_loop+0x40/0x90 [ 585.062857][T28699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.062874][T28699] RIP: 0033:0x7f95e519c629 [ 585.062890][T28699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.062905][T28699] RSP: 002b:00007f95e6097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.062925][T28699] RAX: ffffffffffffffda RBX: 00007f95e5415fa0 RCX: 00007f95e519c629 [ 585.062938][T28699] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 585.062950][T28699] RBP: 00007f95e6097090 R08: 0000000000000000 R09: 0000000000000000 [ 585.062962][T28699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.062973][T28699] R13: 00007f95e5416038 R14: 00007f95e5415fa0 R15: 00007ffda4e14b78 [ 585.063002][T28699] [ 585.067697][T28705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.482993][T28729] netlink: 'syz.3.7714': attribute type 10 has an invalid length. [ 585.517061][T28729] bridge0: port 3(team0) entered blocking state [ 585.523426][T28729] bridge0: port 3(team0) entered disabled state [ 585.536765][T28733] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 585.548587][T28729] team0: entered allmulticast mode [ 585.568476][T28729] team_slave_0: entered allmulticast mode [ 585.583166][T28729] team_slave_1: entered allmulticast mode [ 585.597793][T28729] team0: entered promiscuous mode [ 585.610638][T28729] team_slave_0: entered promiscuous mode [ 585.616763][T28729] team_slave_1: entered promiscuous mode [ 585.623636][T28729] bridge0: port 3(team0) entered blocking state [ 585.630033][T28729] bridge0: port 3(team0) entered forwarding state [ 585.734484][T21479] wlan1: Trigger new scan to find an IBSS to join [ 585.737126][T28749] FAULT_INJECTION: forcing a failure. [ 585.737126][T28749] name failslab, interval 1, probability 0, space 0, times 0 [ 585.764039][T28749] CPU: 1 UID: 0 PID: 28749 Comm: syz.4.7721 Not tainted syzkaller #0 PREEMPT(full) [ 585.764063][T28749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.764073][T28749] Call Trace: [ 585.764081][T28749] [ 585.764088][T28749] dump_stack_lvl+0xe8/0x150 [ 585.764116][T28749] should_fail_ex+0x412/0x560 [ 585.764144][T28749] should_failslab+0xa8/0x100 [ 585.764166][T28749] ? skb_clone+0x212/0x3a0 [ 585.764188][T28749] kmem_cache_alloc_noprof+0x87/0x650 [ 585.764207][T28749] ? __netlink_lookup+0xc6/0x8b0 [ 585.764233][T28749] skb_clone+0x212/0x3a0 [ 585.764256][T28749] __netlink_deliver_tap+0x404/0x850 [ 585.764286][T28749] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.764305][T28749] netlink_deliver_tap+0x19c/0x1b0 [ 585.764324][T28749] netlink_unicast+0x7e3/0x9b0 [ 585.764356][T28749] ? __pfx_netlink_unicast+0x10/0x10 [ 585.764380][T28749] ? netlink_sendmsg+0x650/0xb40 [ 585.764396][T28749] ? skb_put+0x11b/0x210 [ 585.764417][T28749] netlink_sendmsg+0x813/0xb40 [ 585.764442][T28749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.764464][T28749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.764498][T28749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.764522][T28749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.764538][T28749] ____sys_sendmsg+0xa68/0xad0 [ 585.764559][T28749] ? __might_fault+0xaf/0x130 [ 585.764585][T28749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.764614][T28749] ? import_iovec+0x73/0xa0 [ 585.764636][T28749] ___sys_sendmsg+0x2a5/0x360 [ 585.764656][T28749] ? __lock_acquire+0x6b5/0x2cf0 [ 585.764678][T28749] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.764731][T28749] ? __fget_files+0x2a/0x420 [ 585.764747][T28749] ? __fget_files+0x3a0/0x420 [ 585.764775][T28749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.764798][T28749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.764829][T28749] ? __pfx_ksys_write+0x10/0x10 [ 585.764861][T28749] do_syscall_64+0x14d/0xf80 [ 585.764881][T28749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.764898][T28749] ? trace_irq_disable+0x37/0x100 [ 585.764916][T28749] ? clear_bhb_loop+0x40/0x90 [ 585.764937][T28749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.764954][T28749] RIP: 0033:0x7fb29199c629 [ 585.764969][T28749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.764983][T28749] RSP: 002b:00007fb28fbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.765003][T28749] RAX: ffffffffffffffda RBX: 00007fb291c15fa0 RCX: 00007fb29199c629 [ 585.765016][T28749] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 585.765028][T28749] RBP: 00007fb28fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 585.765039][T28749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.765050][T28749] R13: 00007fb291c16038 R14: 00007fb291c15fa0 R15: 00007ffca55fe5d8 [ 585.765079][T28749] [ 586.067459][T28753] tipc: Enabling not permitted [ 586.073140][T28753] tipc: Enabling of bearer rejected, failed to enable media [ 586.088961][T28753] syzkaller1: entered promiscuous mode [ 586.094642][T28753] syzkaller1: entered allmulticast mode [ 586.405908][T28776] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 586.863655][T28803] FAULT_INJECTION: forcing a failure. [ 586.863655][T28803] name failslab, interval 1, probability 0, space 0, times 0 [ 586.879290][T28803] CPU: 0 UID: 0 PID: 28803 Comm: syz.1.7737 Not tainted syzkaller #0 PREEMPT(full) [ 586.879313][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.879322][T28803] Call Trace: [ 586.879330][T28803] [ 586.879337][T28803] dump_stack_lvl+0xe8/0x150 [ 586.879374][T28803] should_fail_ex+0x412/0x560 [ 586.879400][T28803] should_failslab+0xa8/0x100 [ 586.879422][T28803] ? skb_clone+0x212/0x3a0 [ 586.879442][T28803] kmem_cache_alloc_noprof+0x87/0x650 [ 586.879461][T28803] ? __netlink_lookup+0xc6/0x8b0 [ 586.879485][T28803] skb_clone+0x212/0x3a0 [ 586.879510][T28803] __netlink_deliver_tap+0x404/0x850 [ 586.879536][T28803] ? netlink_deliver_tap+0x2e/0x1b0 [ 586.879554][T28803] netlink_deliver_tap+0x19c/0x1b0 [ 586.879573][T28803] netlink_unicast+0x7e3/0x9b0 [ 586.879604][T28803] ? __pfx_netlink_unicast+0x10/0x10 [ 586.879627][T28803] ? netlink_sendmsg+0x650/0xb40 [ 586.879642][T28803] ? skb_put+0x11b/0x210 [ 586.879664][T28803] netlink_sendmsg+0x813/0xb40 [ 586.879690][T28803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.879710][T28803] ? aa_sock_msg_perm+0xf1/0x1b0 [ 586.879734][T28803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.879758][T28803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.879774][T28803] ____sys_sendmsg+0xa68/0xad0 [ 586.879795][T28803] ? __might_fault+0xaf/0x130 [ 586.879819][T28803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.879846][T28803] ? import_iovec+0x73/0xa0 [ 586.879866][T28803] ___sys_sendmsg+0x2a5/0x360 [ 586.879885][T28803] ? __lock_acquire+0x6b5/0x2cf0 [ 586.879907][T28803] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.879957][T28803] ? __fget_files+0x2a/0x420 [ 586.879973][T28803] ? __fget_files+0x3a0/0x420 [ 586.879999][T28803] __x64_sys_sendmsg+0x1bd/0x2a0 [ 586.880023][T28803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.880052][T28803] ? __pfx_ksys_write+0x10/0x10 [ 586.880083][T28803] do_syscall_64+0x14d/0xf80 [ 586.880105][T28803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.880122][T28803] ? trace_irq_disable+0x37/0x100 [ 586.880141][T28803] ? clear_bhb_loop+0x40/0x90 [ 586.880161][T28803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.880178][T28803] RIP: 0033:0x7ffa4d59c629 [ 586.880193][T28803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.880208][T28803] RSP: 002b:00007ffa4e454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.880226][T28803] RAX: ffffffffffffffda RBX: 00007ffa4d815fa0 RCX: 00007ffa4d59c629 [ 586.880254][T28803] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 586.880265][T28803] RBP: 00007ffa4e454090 R08: 0000000000000000 R09: 0000000000000000 [ 586.880279][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.880289][T28803] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 586.880318][T28803] [ 587.284778][T21479] wlan1: Creating new IBSS network, BSSID f2:a1:a3:00:28:c1 [ 587.394818][T28828] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 587.419747][T28825] xt_TCPMSS: Only works on TCP SYN packets [ 587.697303][T28853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.359555][T28875] __nla_validate_parse: 17 callbacks suppressed [ 588.359573][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7764'. [ 588.378168][T28875] hsr_slave_0: left promiscuous mode [ 588.393733][T28875] hsr_slave_1: left promiscuous mode [ 590.604793][T28844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.879695][T28898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7772'. [ 591.255205][T28932] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7781'. [ 594.135043][T28919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.295539][T28944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7788'. [ 594.314873][T28946] netlink: 'syz.4.7786': attribute type 3 has an invalid length. [ 594.362181][T28948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7789'. [ 594.522458][T28956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7794'. [ 594.608304][T28964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7796'. [ 594.655010][T28970] syzkaller0: entered promiscuous mode [ 594.674002][T28970] syzkaller0: entered allmulticast mode [ 594.753025][T28977] FAULT_INJECTION: forcing a failure. [ 594.753025][T28977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.769579][T28977] CPU: 0 UID: 0 PID: 28977 Comm: syz.0.7800 Not tainted syzkaller #0 PREEMPT(full) [ 594.769603][T28977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.769614][T28977] Call Trace: [ 594.769622][T28977] [ 594.769630][T28977] dump_stack_lvl+0xe8/0x150 [ 594.769656][T28977] should_fail_ex+0x412/0x560 [ 594.769691][T28977] _copy_from_user+0x2d/0xb0 [ 594.769710][T28977] get_timespec64+0x96/0x1b0 [ 594.769729][T28977] ? __pfx_get_timespec64+0x10/0x10 [ 594.769756][T28977] __x64_sys_recvmmsg+0x14b/0x250 [ 594.769782][T28977] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 594.769814][T28977] do_syscall_64+0x14d/0xf80 [ 594.769834][T28977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.769851][T28977] ? trace_irq_disable+0x37/0x100 [ 594.769870][T28977] ? clear_bhb_loop+0x40/0x90 [ 594.769891][T28977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.769907][T28977] RIP: 0033:0x7f95e519c629 [ 594.769924][T28977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.769937][T28977] RSP: 002b:00007f95e6097028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 594.769955][T28977] RAX: ffffffffffffffda RBX: 00007f95e5415fa0 RCX: 00007f95e519c629 [ 594.769968][T28977] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 594.769979][T28977] RBP: 00007f95e6097090 R08: 0000200000003700 R09: 0000000000000000 [ 594.769990][T28977] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 594.770001][T28977] R13: 00007f95e5416038 R14: 00007f95e5415fa0 R15: 00007ffda4e14b78 [ 594.770030][T28977] [ 595.049508][T28992] netlink: 'syz.0.7807': attribute type 5 has an invalid length. [ 595.070291][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7808'. [ 595.185062][T29002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7811'. [ 595.350931][T29010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7814'. [ 595.453297][T29020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7820'. [ 595.477055][T29023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7822'. [ 595.905213][T29055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7835'. [ 596.006400][T29062] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 596.154768][T29071] macsec0: left allmulticast mode [ 596.214298][T29073] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 596.609249][T29102] netlink: 'syz.0.7849': attribute type 5 has an invalid length. [ 596.620379][T29101] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 596.657113][T29102] netlink: 'syz.0.7849': attribute type 1 has an invalid length. [ 596.883709][T21464] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.907645][T21464] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.916583][T21464] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.931625][T21464] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.957988][T29122] netlink: 'syz.4.7857': attribute type 24 has an invalid length. [ 597.145840][T29134] netlink: 'syz.4.7861': attribute type 1 has an invalid length. [ 597.153600][T29134] netlink: 'syz.4.7861': attribute type 7 has an invalid length. [ 597.154808][T29133] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 597.172808][T29134] netlink: 'syz.4.7861': attribute type 8 has an invalid length. [ 597.202478][T29137] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 597.367907][T29149] openvswitch: netlink: IPv4 tunnel dst address is zero [ 597.436465][T29153] vlan3: entered allmulticast mode [ 597.441612][T29153] erspan0: entered allmulticast mode [ 597.447379][T29153] bridge0: port 4(vlan3) entered blocking state [ 597.453724][T29153] bridge0: port 4(vlan3) entered disabled state [ 597.475414][T29153] vlan3: entered promiscuous mode [ 597.480459][T29153] erspan0: entered promiscuous mode [ 598.115677][T29205] geneve2: entered promiscuous mode [ 598.225799][T29213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.235184][T29209] syzkaller1: entered promiscuous mode [ 598.240715][T29209] syzkaller1: entered allmulticast mode [ 598.981358][T29265] FAULT_INJECTION: forcing a failure. [ 598.981358][T29265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.994900][T29265] CPU: 0 UID: 0 PID: 29265 Comm: syz.4.7915 Not tainted syzkaller #0 PREEMPT(full) [ 598.994921][T29265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.994931][T29265] Call Trace: [ 598.994939][T29265] [ 598.994946][T29265] dump_stack_lvl+0xe8/0x150 [ 598.994973][T29265] should_fail_ex+0x412/0x560 [ 598.995000][T29265] _copy_from_iter+0x1d3/0x1670 [ 598.995032][T29265] ? rcu_is_watching+0x15/0xb0 [ 598.995053][T29265] ? __pfx__copy_from_iter+0x10/0x10 [ 598.995084][T29265] ? netlink_sendmsg+0x650/0xb40 [ 598.995100][T29265] ? skb_put+0x11b/0x210 [ 598.995122][T29265] netlink_sendmsg+0x6c0/0xb40 [ 598.995148][T29265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.995169][T29265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.995193][T29265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.995217][T29265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.995234][T29265] ____sys_sendmsg+0xa68/0xad0 [ 598.995256][T29265] ? __might_fault+0xaf/0x130 [ 598.995281][T29265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.995310][T29265] ? import_iovec+0x73/0xa0 [ 598.995332][T29265] ___sys_sendmsg+0x2a5/0x360 [ 598.995351][T29265] ? __lock_acquire+0x6b5/0x2cf0 [ 598.995374][T29265] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.995428][T29265] ? __fget_files+0x2a/0x420 [ 598.995450][T29265] ? __fget_files+0x3a0/0x420 [ 598.995477][T29265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.995500][T29265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.995530][T29265] ? __pfx_ksys_write+0x10/0x10 [ 598.995560][T29265] do_syscall_64+0x14d/0xf80 [ 598.995581][T29265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.995597][T29265] ? trace_irq_disable+0x37/0x100 [ 598.995616][T29265] ? clear_bhb_loop+0x40/0x90 [ 598.995637][T29265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.995654][T29265] RIP: 0033:0x7fb29199c629 [ 598.995670][T29265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.995686][T29265] RSP: 002b:00007fb28fbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.995705][T29265] RAX: ffffffffffffffda RBX: 00007fb291c15fa0 RCX: 00007fb29199c629 [ 598.995719][T29265] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 598.995731][T29265] RBP: 00007fb28fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 598.995743][T29265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.995754][T29265] R13: 00007fb291c16038 R14: 00007fb291c15fa0 R15: 00007ffca55fe5d8 [ 598.995783][T29265] [ 599.036656][T29270] bond4: option mode: unable to set because the bond device is up [ 599.382359][T29272] rdma_rxe: rxe_newlink: failed to add bond0 [ 599.458628][T29291] siw: device registration error -23 [ 599.472055][T29289] bridge0: port 3(ipvlan2) entered blocking state [ 599.479053][T29289] bridge0: port 3(ipvlan2) entered disabled state [ 599.485746][T29289] ipvlan2: entered allmulticast mode [ 599.502600][T29289] bridge0: entered allmulticast mode [ 599.530524][T29289] ipvlan2: left allmulticast mode [ 599.539364][T29289] bridge0: left allmulticast mode [ 599.592302][T29300] openvswitch: netlink: EtherType 50a is less than min 600 [ 599.592314][T29298] __nla_validate_parse: 20 callbacks suppressed [ 599.592327][T29298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7929'. [ 599.852628][T29321] netlink: 'syz.4.7936': attribute type 21 has an invalid length. [ 599.868448][T29318] bond4: option mode: unable to set because the bond device is up [ 599.952055][T29329] rdma_rxe: rxe_newlink: failed to add bond0 [ 600.156511][T29338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7941'. [ 600.203794][T29342] netlink: 'syz.4.7943': attribute type 2 has an invalid length. [ 600.268494][T29346] netlink: 'syz.1.7944': attribute type 11 has an invalid length. [ 600.278049][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7944'. [ 600.300700][T21464] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.300717][T29346] netlink: 'syz.1.7944': attribute type 11 has an invalid length. [ 600.300733][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7944'. [ 600.309591][T21464] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.337572][T21464] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.349523][T29351] FAULT_INJECTION: forcing a failure. [ 600.349523][T29351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.362947][T21462] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.372962][T29353] openvswitch: netlink: Unknown key attributes 2 [ 600.381809][T29351] CPU: 0 UID: 0 PID: 29351 Comm: syz.4.7946 Not tainted syzkaller #0 PREEMPT(full) [ 600.381831][T29351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.381842][T29351] Call Trace: [ 600.381849][T29351] [ 600.381857][T29351] dump_stack_lvl+0xe8/0x150 [ 600.381883][T29351] should_fail_ex+0x412/0x560 [ 600.381911][T29351] _copy_to_iter+0x404/0x17d0 [ 600.381937][T29351] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.381970][T29351] ? __pfx__copy_to_iter+0x10/0x10 [ 600.381993][T29351] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 600.382013][T29351] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.382033][T29351] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 600.382051][T29351] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 600.382079][T29351] __skb_datagram_iter+0xf8/0x980 [ 600.382101][T29351] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 600.382130][T29351] skb_copy_datagram_iter+0xb5/0x210 [ 600.382154][T29351] netlink_recvmsg+0x2c3/0xa50 [ 600.382180][T29351] ? __pfx_netlink_recvmsg+0x10/0x10 [ 600.382203][T29351] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.382227][T29351] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 600.382248][T29351] ? security_socket_recvmsg+0x7e/0x2c0 [ 600.382264][T29351] ? __pfx_netlink_recvmsg+0x10/0x10 [ 600.382280][T29351] sock_recvmsg+0x22c/0x270 [ 600.382305][T29351] ____sys_recvmsg+0x1e6/0x4a0 [ 600.382330][T29351] ? __pfx_____sys_recvmsg+0x10/0x10 [ 600.382365][T29351] ? import_iovec+0x73/0xa0 [ 600.382384][T29351] ___sys_recvmsg+0x215/0x590 [ 600.382408][T29351] ? __pfx____sys_recvmsg+0x10/0x10 [ 600.382432][T29351] ? __fget_files+0x2a/0x420 [ 600.382461][T29351] ? __fget_files+0x3a0/0x420 [ 600.382488][T29351] do_recvmmsg+0x334/0x800 [ 600.382515][T29351] ? __pfx_do_recvmmsg+0x10/0x10 [ 600.382545][T29351] ? _copy_from_user+0x94/0xb0 [ 600.382575][T29351] __x64_sys_recvmmsg+0x1b7/0x250 [ 600.382595][T29351] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 600.382619][T29351] do_syscall_64+0x14d/0xf80 [ 600.382635][T29351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.382648][T29351] ? trace_irq_disable+0x37/0x100 [ 600.382663][T29351] ? clear_bhb_loop+0x40/0x90 [ 600.382678][T29351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.382691][T29351] RIP: 0033:0x7fb29199c629 [ 600.382703][T29351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.382715][T29351] RSP: 002b:00007fb28fbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 600.382730][T29351] RAX: ffffffffffffffda RBX: 00007fb291c15fa0 RCX: 00007fb29199c629 [ 600.382740][T29351] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 600.382749][T29351] RBP: 00007fb28fbee090 R08: 0000200000003700 R09: 0000000000000000 [ 600.382758][T29351] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 600.382766][T29351] R13: 00007fb291c16038 R14: 00007fb291c15fa0 R15: 00007ffca55fe5d8 [ 600.382787][T29351] [ 600.396850][T29353] tipc: Enabling of bearer rejected, failed to enable media [ 600.480561][T29354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7947'. [ 600.678656][T29356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.812633][T29368] bond1: option mode: unable to set because the bond device is up [ 600.840217][T29368] bond_slave_0: entered promiscuous mode [ 600.845960][T29368] bond_slave_1: entered promiscuous mode [ 600.868754][T29368] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 600.882355][T29368] bond1: (slave macvlan3): making interface the new active one [ 600.893146][T29368] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 600.957637][T29368] rdma_rxe: rxe_newlink: failed to add bond0 [ 601.036902][T29381] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 601.050305][T29384] syzkaller1: entered promiscuous mode [ 601.056755][T29384] syzkaller1: entered allmulticast mode [ 601.152661][T29388] netlink: 'syz.4.7961': attribute type 1 has an invalid length. [ 601.276139][T29386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7960'. [ 601.297889][T29398] xt_hashlimit: overflow, rate too high: 0 [ 601.322207][T29401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7965'. [ 601.325467][T29403] xt_hashlimit: overflow, rate too high: 0 [ 601.609380][T29418] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 601.824167][T29430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7975'. [ 602.075421][T29446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7984'. [ 602.079685][T29447] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 602.396438][T29463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7989'. [ 602.470906][T29469] netlink: 'syz.3.7989': attribute type 8 has an invalid length. [ 602.618748][T29483] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 603.230550][T29523] syzkaller1: entered promiscuous mode [ 603.246832][T29523] syzkaller1: entered allmulticast mode [ 603.271308][T29526] netlink: 'syz.0.8015': attribute type 1 has an invalid length. [ 603.290573][T29530] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 603.335007][T29532] FAULT_INJECTION: forcing a failure. [ 603.335007][T29532] name failslab, interval 1, probability 0, space 0, times 0 [ 603.353567][T29523] netlink: 'syz.2.8013': attribute type 10 has an invalid length. [ 603.361508][T29532] CPU: 0 UID: 0 PID: 29532 Comm: syz.1.8018 Not tainted syzkaller #0 PREEMPT(full) [ 603.361531][T29532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.361541][T29532] Call Trace: [ 603.361549][T29532] [ 603.361556][T29532] dump_stack_lvl+0xe8/0x150 [ 603.361583][T29532] should_fail_ex+0x412/0x560 [ 603.361610][T29532] should_failslab+0xa8/0x100 [ 603.361635][T29532] __kmalloc_noprof+0xe8/0x760 [ 603.361654][T29532] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 603.361674][T29532] ? rcu_is_watching+0x15/0xb0 [ 603.361698][T29532] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 603.361724][T29532] genl_family_rcv_msg_doit+0xd9/0x330 [ 603.361746][T29532] ? __asan_memcpy+0x40/0x70 [ 603.361766][T29532] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 603.361803][T29532] ? apparmor_capable+0x137/0x1a0 [ 603.361823][T29532] ? bpf_lsm_capable+0x9/0x20 [ 603.361840][T29532] ? security_capable+0x7e/0x2c0 [ 603.361868][T29532] genl_rcv_msg+0x61c/0x7a0 [ 603.361894][T29532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.361914][T29532] ? __pfx_nfc_genl_disable_se+0x10/0x10 [ 603.361950][T29532] netlink_rcv_skb+0x232/0x4b0 [ 603.361968][T29532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.361991][T29532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.362005][T29532] ? genl_rcv+0x19/0x40 [ 603.362041][T29532] ? down_read+0x272/0x2e0 [ 603.362060][T29532] ? genl_rcv+0xd/0x40 [ 603.362082][T29532] genl_rcv+0x28/0x40 [ 603.362100][T29532] netlink_unicast+0x80f/0x9b0 [ 603.362131][T29532] ? __pfx_netlink_unicast+0x10/0x10 [ 603.362156][T29532] ? netlink_sendmsg+0x650/0xb40 [ 603.362171][T29532] ? skb_put+0x11b/0x210 [ 603.362194][T29532] netlink_sendmsg+0x813/0xb40 [ 603.362221][T29532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.362243][T29532] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.362265][T29532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.362288][T29532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.362302][T29532] ____sys_sendmsg+0xa68/0xad0 [ 603.362323][T29532] ? __might_fault+0xaf/0x130 [ 603.362348][T29532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.362378][T29532] ? import_iovec+0x73/0xa0 [ 603.362399][T29532] ___sys_sendmsg+0x2a5/0x360 [ 603.362417][T29532] ? __lock_acquire+0x6b5/0x2cf0 [ 603.362439][T29532] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.362492][T29532] ? __fget_files+0x2a/0x420 [ 603.362508][T29532] ? __fget_files+0x3a0/0x420 [ 603.362534][T29532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 603.362557][T29532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.362586][T29532] ? __pfx_ksys_write+0x10/0x10 [ 603.362616][T29532] do_syscall_64+0x14d/0xf80 [ 603.362636][T29532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.362651][T29532] ? trace_irq_disable+0x37/0x100 [ 603.362669][T29532] ? clear_bhb_loop+0x40/0x90 [ 603.362689][T29532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.362706][T29532] RIP: 0033:0x7ffa4d59c629 [ 603.362721][T29532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.362735][T29532] RSP: 002b:00007ffa4e454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.362753][T29532] RAX: ffffffffffffffda RBX: 00007ffa4d815fa0 RCX: 00007ffa4d59c629 [ 603.362765][T29532] RDX: 0000000020000010 RSI: 0000200000001180 RDI: 0000000000000004 [ 603.362783][T29532] RBP: 00007ffa4e454090 R08: 0000000000000000 R09: 0000000000000000 [ 603.362794][T29532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.362805][T29532] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 603.362834][T29532] [ 603.751057][T29523] veth0_macvtap: left promiscuous mode [ 603.993073][T29568] netlink: 'syz.1.8032': attribute type 2 has an invalid length. [ 604.019190][T29568] 9: entered promiscuous mode [ 604.164281][T29578] netlink: 'syz.3.8037': attribute type 11 has an invalid length. [ 604.306058][T29587] netlink: 'syz.3.8043': attribute type 1 has an invalid length. [ 604.339117][T29593] FAULT_INJECTION: forcing a failure. [ 604.339117][T29593] name failslab, interval 1, probability 0, space 0, times 0 [ 604.386802][T29593] CPU: 0 UID: 0 PID: 29593 Comm: syz.2.8045 Not tainted syzkaller #0 PREEMPT(full) [ 604.386827][T29593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.386838][T29593] Call Trace: [ 604.386845][T29593] [ 604.386853][T29593] dump_stack_lvl+0xe8/0x150 [ 604.386881][T29593] should_fail_ex+0x412/0x560 [ 604.386917][T29593] should_failslab+0xa8/0x100 [ 604.386943][T29593] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 604.386966][T29593] ? __alloc_skb+0x1d0/0x7d0 [ 604.386984][T29593] ? __local_bh_enable_ip+0xd0/0x130 [ 604.387007][T29593] __alloc_skb+0x1d0/0x7d0 [ 604.387030][T29593] netlink_dump+0x1ef/0xe80 [ 604.387058][T29593] ? __pfx_netlink_dump+0x10/0x10 [ 604.387099][T29593] __netlink_dump_start+0x5cb/0x7e0 [ 604.387121][T29593] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 604.387144][T29593] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 604.387170][T29593] nf_tables_getsetelem+0x33f/0x1150 [ 604.387203][T29593] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 604.387224][T29593] ? do_trace_netlink_extack+0x7e/0x1b0 [ 604.387247][T29593] ? __nla_validate_parse+0x258e/0x2dc0 [ 604.387282][T29593] ? __pfx___nla_validate_parse+0x10/0x10 [ 604.387301][T29593] ? unwind_next_frame+0xa5/0x23c0 [ 604.387325][T29593] ? is_bpf_text_address+0x26/0x2b0 [ 604.387344][T29593] ? lock_acquire+0x106/0x330 [ 604.387369][T29593] ? nfnl_pernet+0x23/0x240 [ 604.387390][T29593] ? __pfx_nf_tables_dump_set_start+0x10/0x10 [ 604.387407][T29593] ? __pfx_nf_tables_dump_set+0x10/0x10 [ 604.387422][T29593] ? __pfx_nf_tables_dump_set_done+0x10/0x10 [ 604.387445][T29593] ? __nla_parse+0x40/0x60 [ 604.387461][T29593] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 604.387483][T29593] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 604.387505][T29593] ? unwind_get_return_address+0x4d/0x90 [ 604.387526][T29593] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 604.387563][T29593] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 604.387628][T29593] netlink_rcv_skb+0x232/0x4b0 [ 604.387646][T29593] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 604.387669][T29593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.387696][T29593] ? bpf_lsm_capable+0x9/0x20 [ 604.387712][T29593] ? security_capable+0x7e/0x2c0 [ 604.387746][T29593] nfnetlink_rcv+0x2c0/0x27b0 [ 604.387776][T29593] ? __local_bh_enable_ip+0xd0/0x130 [ 604.387794][T29593] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.387813][T29593] ? __dev_queue_xmit+0x274/0x3850 [ 604.387833][T29593] ? __local_bh_enable_ip+0xd0/0x130 [ 604.387850][T29593] ? __dev_queue_xmit+0x274/0x3850 [ 604.387869][T29593] ? __dev_queue_xmit+0x1e6c/0x3850 [ 604.387888][T29593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.387924][T29593] ? __dev_queue_xmit+0x274/0x3850 [ 604.387946][T29593] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 604.387975][T29593] ? __pfx___dev_queue_xmit+0x10/0x10 [ 604.388003][T29593] ? ref_tracker_free+0x693/0x840 [ 604.388025][T29593] ? __copy_skb_header+0xa3/0x4a0 [ 604.388046][T29593] ? __pfx_ref_tracker_free+0x10/0x10 [ 604.388083][T29593] ? skb_clone+0x246/0x3a0 [ 604.388106][T29593] ? __netlink_deliver_tap+0x807/0x850 [ 604.388124][T29593] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.388147][T29593] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.388171][T29593] netlink_unicast+0x80f/0x9b0 [ 604.388202][T29593] ? __pfx_netlink_unicast+0x10/0x10 [ 604.388227][T29593] ? netlink_sendmsg+0x650/0xb40 [ 604.388242][T29593] ? skb_put+0x11b/0x210 [ 604.388264][T29593] netlink_sendmsg+0x813/0xb40 [ 604.388289][T29593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.388310][T29593] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.388333][T29593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.388356][T29593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.388372][T29593] ____sys_sendmsg+0xa68/0xad0 [ 604.388393][T29593] ? __might_fault+0xaf/0x130 [ 604.388419][T29593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.388449][T29593] ? import_iovec+0x73/0xa0 [ 604.388470][T29593] ___sys_sendmsg+0x2a5/0x360 [ 604.388490][T29593] ? __lock_acquire+0x6b5/0x2cf0 [ 604.388512][T29593] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.388566][T29593] ? __fget_files+0x2a/0x420 [ 604.388582][T29593] ? __fget_files+0x3a0/0x420 [ 604.388609][T29593] __x64_sys_sendmsg+0x1bd/0x2a0 [ 604.388638][T29593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.388666][T29593] ? __pfx_ksys_write+0x10/0x10 [ 604.388698][T29593] do_syscall_64+0x14d/0xf80 [ 604.388718][T29593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.388735][T29593] ? trace_irq_disable+0x37/0x100 [ 604.388752][T29593] ? clear_bhb_loop+0x40/0x90 [ 604.388772][T29593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.388788][T29593] RIP: 0033:0x7f0f81d9c629 [ 604.388805][T29593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.388819][T29593] RSP: 002b:00007f0f82bda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.388838][T29593] RAX: ffffffffffffffda RBX: 00007f0f82015fa0 RCX: 00007f0f81d9c629 [ 604.388850][T29593] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 604.388861][T29593] RBP: 00007f0f82bda090 R08: 0000000000000000 R09: 0000000000000000 [ 604.388872][T29593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.388883][T29593] R13: 00007f0f82016038 R14: 00007f0f82015fa0 R15: 00007ffce7d90978 [ 604.388919][T29593] [ 604.985174][T29605] __nla_validate_parse: 17 callbacks suppressed [ 604.985192][T29605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8051'. [ 605.013859][T29609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8050'. [ 605.035354][T29608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8049'. [ 605.060836][T29605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8051'. [ 605.158278][T29619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8053'. [ 605.230518][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8056'. [ 605.542094][T29648] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 605.563712][T29650] tipc: Started in network mode [ 605.569393][T29650] tipc: Node identity -8, cluster identity 4711 [ 605.639608][T29654] validate_nla: 3 callbacks suppressed [ 605.639625][T29654] netlink: 'syz.4.8065': attribute type 21 has an invalid length. [ 605.661862][T29654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8065'. [ 605.749699][T29661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8068'. [ 605.776525][T29662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8069'. [ 605.803595][T29661] netlink: 'syz.4.8068': attribute type 1 has an invalid length. [ 605.833413][T29661] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8068'. [ 605.970374][T29672] ipt_ECN: cannot use operation on non-tcp rule [ 605.982577][T29668] siw: device registration error -23 [ 606.375168][T29697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.415557][T29698] netlink: zone id is out of range [ 606.441665][T29698] netlink: zone id is out of range [ 606.450020][T29698] netlink: zone id is out of range [ 606.462176][T29698] netlink: zone id is out of range [ 606.484286][T29698] netlink: zone id is out of range [ 606.489491][T29698] netlink: zone id is out of range [ 606.514420][T29698] netlink: zone id is out of range [ 606.544384][T29698] netlink: zone id is out of range [ 606.673211][T29717] syzkaller0: entered promiscuous mode [ 606.688981][T29717] syzkaller0: entered allmulticast mode [ 607.038026][T29744] netlink: 'syz.4.8106': attribute type 1 has an invalid length. [ 607.092742][T29748] netlink: 'syz.2.8108': attribute type 9 has an invalid length. [ 607.310385][T29766] gtp0: entered promiscuous mode [ 607.331900][T29766] gtp0: entered allmulticast mode [ 607.424159][T29770] FAULT_INJECTION: forcing a failure. [ 607.424159][T29770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.475972][T29770] CPU: 1 UID: 0 PID: 29770 Comm: syz.1.8119 Not tainted syzkaller #0 PREEMPT(full) [ 607.476002][T29770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.476012][T29770] Call Trace: [ 607.476019][T29770] [ 607.476027][T29770] dump_stack_lvl+0xe8/0x150 [ 607.476053][T29770] should_fail_ex+0x412/0x560 [ 607.476078][T29770] _copy_to_iter+0x589/0x17d0 [ 607.476111][T29770] ? __pfx__copy_to_iter+0x10/0x10 [ 607.476133][T29770] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 607.476153][T29770] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.476173][T29770] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 607.476193][T29770] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 607.476219][T29770] __skb_datagram_iter+0xf8/0x980 [ 607.476241][T29770] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 607.476270][T29770] skb_copy_datagram_iter+0xb5/0x210 [ 607.476294][T29770] netlink_recvmsg+0x2c3/0xa50 [ 607.476322][T29770] ? __pfx_netlink_recvmsg+0x10/0x10 [ 607.476345][T29770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 607.476369][T29770] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 607.476389][T29770] ? security_socket_recvmsg+0x7e/0x2c0 [ 607.476407][T29770] ? __pfx_netlink_recvmsg+0x10/0x10 [ 607.476424][T29770] sock_recvmsg+0x22c/0x270 [ 607.476446][T29770] ____sys_recvmsg+0x1e6/0x4a0 [ 607.476474][T29770] ? __pfx_____sys_recvmsg+0x10/0x10 [ 607.476509][T29770] ? import_iovec+0x73/0xa0 [ 607.476529][T29770] ___sys_recvmsg+0x215/0x590 [ 607.476555][T29770] ? __pfx____sys_recvmsg+0x10/0x10 [ 607.476580][T29770] ? __fget_files+0x2a/0x420 [ 607.476612][T29770] ? __fget_files+0x3a0/0x420 [ 607.476637][T29770] do_recvmmsg+0x334/0x800 [ 607.476666][T29770] ? __pfx_do_recvmmsg+0x10/0x10 [ 607.476698][T29770] ? _copy_from_user+0x94/0xb0 [ 607.476735][T29770] __x64_sys_recvmmsg+0x1b7/0x250 [ 607.476757][T29770] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 607.476786][T29770] do_syscall_64+0x14d/0xf80 [ 607.476805][T29770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.476820][T29770] ? trace_irq_disable+0x37/0x100 [ 607.476839][T29770] ? clear_bhb_loop+0x40/0x90 [ 607.476858][T29770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.476875][T29770] RIP: 0033:0x7ffa4d59c629 [ 607.476890][T29770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.476904][T29770] RSP: 002b:00007ffa4e454028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 607.476924][T29770] RAX: ffffffffffffffda RBX: 00007ffa4d815fa0 RCX: 00007ffa4d59c629 [ 607.476937][T29770] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 607.476949][T29770] RBP: 00007ffa4e454090 R08: 0000200000003700 R09: 0000000000000000 [ 607.476960][T29770] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 607.476970][T29770] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 607.476997][T29770] [ 607.881860][T29782] syzkaller1: entered promiscuous mode [ 607.890822][T29782] syzkaller1: entered allmulticast mode [ 607.918510][T29781] netlink: 'syz.4.8123': attribute type 1 has an invalid length. [ 607.958030][T29781] syzkaller0: entered promiscuous mode [ 607.963559][T29781] syzkaller0: entered allmulticast mode [ 608.044724][T29782] syzkaller1: left promiscuous mode [ 608.049962][T29782] syzkaller1: left allmulticast mode [ 608.057451][T29793] FAULT_INJECTION: forcing a failure. [ 608.057451][T29793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.079508][T29793] CPU: 1 UID: 0 PID: 29793 Comm: syz.1.8129 Not tainted syzkaller #0 PREEMPT(full) [ 608.079530][T29793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.079541][T29793] Call Trace: [ 608.079548][T29793] [ 608.079557][T29793] dump_stack_lvl+0xe8/0x150 [ 608.079591][T29793] should_fail_ex+0x412/0x560 [ 608.079618][T29793] _copy_from_user+0x2d/0xb0 [ 608.079636][T29793] get_timespec64+0x96/0x1b0 [ 608.079653][T29793] ? __pfx_get_timespec64+0x10/0x10 [ 608.079680][T29793] __x64_sys_recvmmsg+0x14b/0x250 [ 608.079705][T29793] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 608.079735][T29793] do_syscall_64+0x14d/0xf80 [ 608.079756][T29793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.079771][T29793] ? trace_irq_disable+0x37/0x100 [ 608.079789][T29793] ? clear_bhb_loop+0x40/0x90 [ 608.079807][T29793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.079823][T29793] RIP: 0033:0x7ffa4d59c629 [ 608.079838][T29793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.079852][T29793] RSP: 002b:00007ffa4e454028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 608.079870][T29793] RAX: ffffffffffffffda RBX: 00007ffa4d815fa0 RCX: 00007ffa4d59c629 [ 608.079882][T29793] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 608.079894][T29793] RBP: 00007ffa4e454090 R08: 0000200000003700 R09: 0000000000000000 [ 608.079905][T29793] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 608.079916][T29793] R13: 00007ffa4d816038 R14: 00007ffa4d815fa0 R15: 00007ffd5cffe5a8 [ 608.079942][T29793] [ 608.469252][T29815] netlink: 'syz.3.8138': attribute type 1 has an invalid length. [ 608.482232][T29815] netlink: 'syz.3.8138': attribute type 2 has an invalid length. [ 608.490951][T29815] netlink: 'syz.3.8138': attribute type 1 has an invalid length. [ 608.653115][T29822] bridge0: entered promiscuous mode [ 608.680206][T29822] macsec1: entered promiscuous mode [ 608.707157][T29822] macsec1: entered allmulticast mode [ 608.723607][T29822] bridge0: entered allmulticast mode [ 608.741475][T29822] bridge0: port 3(macsec1) entered blocking state [ 608.750131][T29822] bridge0: port 3(macsec1) entered disabled state [ 608.782257][T29822] bridge0: left allmulticast mode [ 608.788553][T29822] bridge0: left promiscuous mode [ 609.386930][T29883] FAULT_INJECTION: forcing a failure. [ 609.386930][T29883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.401338][T29883] CPU: 1 UID: 0 PID: 29883 Comm: syz.2.8163 Not tainted syzkaller #0 PREEMPT(full) [ 609.401362][T29883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.401373][T29883] Call Trace: [ 609.401380][T29883] [ 609.401388][T29883] dump_stack_lvl+0xe8/0x150 [ 609.401416][T29883] should_fail_ex+0x412/0x560 [ 609.401444][T29883] _copy_to_user+0x31/0xb0 [ 609.401472][T29883] move_addr_to_user+0x118/0x1e0 [ 609.401494][T29883] ____sys_recvmsg+0x245/0x4a0 [ 609.401512][T29883] ? __pfx_____sys_recvmsg+0x10/0x10 [ 609.401532][T29883] ? import_iovec+0x73/0xa0 [ 609.401544][T29883] ___sys_recvmsg+0x215/0x590 [ 609.401560][T29883] ? __pfx____sys_recvmsg+0x10/0x10 [ 609.401575][T29883] ? __fget_files+0x2a/0x420 [ 609.401593][T29883] ? __fget_files+0x3a0/0x420 [ 609.401607][T29883] do_recvmmsg+0x334/0x800 [ 609.401624][T29883] ? __pfx_do_recvmmsg+0x10/0x10 [ 609.401643][T29883] ? _copy_from_user+0x94/0xb0 [ 609.401661][T29883] __x64_sys_recvmmsg+0x1b7/0x250 [ 609.401675][T29883] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 609.401694][T29883] do_syscall_64+0x14d/0xf80 [ 609.401707][T29883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.401716][T29883] ? trace_irq_disable+0x37/0x100 [ 609.401727][T29883] ? clear_bhb_loop+0x40/0x90 [ 609.401739][T29883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.401749][T29883] RIP: 0033:0x7f0f81d9c629 [ 609.401759][T29883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.401767][T29883] RSP: 002b:00007f0f82bda028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 609.401779][T29883] RAX: ffffffffffffffda RBX: 00007f0f82015fa0 RCX: 00007f0f81d9c629 [ 609.401786][T29883] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 609.401793][T29883] RBP: 00007f0f82bda090 R08: 0000200000003700 R09: 0000000000000000 [ 609.401799][T29883] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 609.401805][T29883] R13: 00007f0f82016038 R14: 00007f0f82015fa0 R15: 00007ffce7d90978 [ 609.401821][T29883] [ 612.056153][ C1] net_ratelimit: 9 callbacks suppressed [ 612.056166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 612.300066][T29875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.445927][T29917] veth1_macvtap: left allmulticast mode [ 612.464681][T29917] veth1_macvtap: left promiscuous mode [ 612.589808][T29935] __nla_validate_parse: 26 callbacks suppressed [ 612.589828][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8175'. [ 612.590351][T29934] ip6t_srh: unknown srh match flags 4000 [ 612.780918][T29949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.873161][T29957] xt_SECMARK: invalid mode: 9 [ 613.236691][T29991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8198'. [ 615.830500][T29952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.055260][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 616.089707][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8214'. [ 616.120538][T30044] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8213'. [ 616.307520][T30057] netlink: 'syz.3.8219': attribute type 1 has an invalid length. [ 616.340525][T30063] siw: device registration error -23 [ 616.416759][T30072] Cannot find add_set index 0 as target [ 616.449432][T30076] xt_hashlimit: size too large, truncated to 1048576 [ 619.301942][T30061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.471448][T30105] xt_bpf: check failed: parse error [ 619.700329][T30129] siw: device registration error -23 [ 619.737555][T21468] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.916752][T30149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.006341][T30155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8252'. [ 622.650948][T30123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.895903][T30182] netlink: 'syz.0.8261': attribute type 1 has an invalid length. [ 623.056825][T30182] bond4: (slave ip6gretap1): making interface the new active one [ 623.112430][T30182] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 623.211392][T30209] netlink: 'syz.2.8270': attribute type 3 has an invalid length. [ 623.376388][T30225] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.8272'. [ 623.385710][T30225] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 624.220646][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 626.156363][T30204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.294093][ T5139] Bluetooth: hci4: command 0x0406 tx timeout [ 626.454587][T30249] netlink: 'syz.2.8277': attribute type 2 has an invalid length. [ 627.152833][T30235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.313198][T30236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.518667][T30311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8292'. [ 629.734545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 629.742560][ C1] lec:lec_tx_timeout: lec0 [ 629.882753][T30345] IPVS: length: 239 != 24 [ 629.951810][T30351] netlink: 'syz.4.8307': attribute type 2 has an invalid length. [ 630.073761][T30351] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.8307'. [ 630.083764][T30360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8310'. [ 630.113078][T30358] bond5 (unregistering): Released all slaves [ 630.119471][T30360] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 630.217962][T10336] lec:lec_start_xmit: lec0:No lecd attached [ 632.663251][T30326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 632.825083][T30372] raw_sendmsg: syz.4.8313 forgot to set AF_INET. Fix it! [ 632.959299][T30387] x9: renamed from bridge_slave_0 (while UP) [ 632.996686][T30392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8321'. [ 632.996854][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8321'. [ 633.031674][T30393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8321'. [ 633.082134][T30393] veth3: entered allmulticast mode [ 633.421118][T30422] FAULT_INJECTION: forcing a failure. [ 633.421118][T30422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.456886][T30422] CPU: 1 UID: 0 PID: 30422 Comm: syz.4.8327 Not tainted syzkaller #0 PREEMPT(full) [ 633.456911][T30422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.456922][T30422] Call Trace: [ 633.456930][T30422] [ 633.456939][T30422] dump_stack_lvl+0xe8/0x150 [ 633.456967][T30422] should_fail_ex+0x412/0x560 [ 633.456996][T30422] _copy_from_user+0x2d/0xb0 [ 633.457016][T30422] ___sys_sendmsg+0x1c6/0x360 [ 633.457039][T30422] ? __lock_acquire+0x6b5/0x2cf0 [ 633.457062][T30422] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.457115][T30422] ? __fget_files+0x2a/0x420 [ 633.457141][T30422] ? __fget_files+0x3a0/0x420 [ 633.457168][T30422] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.457193][T30422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.457222][T30422] ? __pfx_ksys_write+0x10/0x10 [ 633.457252][T30422] do_syscall_64+0x14d/0xf80 [ 633.457274][T30422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.457291][T30422] ? trace_irq_disable+0x37/0x100 [ 633.457311][T30422] ? clear_bhb_loop+0x40/0x90 [ 633.457332][T30422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.457350][T30422] RIP: 0033:0x7fb29199c629 [ 633.457367][T30422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.457381][T30422] RSP: 002b:00007fb28fbcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.457401][T30422] RAX: ffffffffffffffda RBX: 00007fb291c16090 RCX: 00007fb29199c629 [ 633.457413][T30422] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 633.457425][T30422] RBP: 00007fb28fbcd090 R08: 0000000000000000 R09: 0000000000000000 [ 633.457438][T30422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.457450][T30422] R13: 00007fb291c16128 R14: 00007fb291c16090 R15: 00007ffca55fe5d8 [ 633.457480][T30422] [ 634.365401][T30451] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.399192][T30451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8332'. [ 634.409816][T30451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8332'. [ 634.505603][T30457] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8334'. [ 635.254115][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 635.254244][T30383] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 635.271445][T30383] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 635.734082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 635.742144][ C1] lec:lec_tx_timeout: lec0 [ 635.901021][T30383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.907182][T30383] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 636.539387][T30383] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 636.545371][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 636.551751][T30383] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 636.574793][T30383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 636.580706][T30383] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 636.639118][T30420] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 637.054815][T30518] openvswitch: netlink: IP tunnel dst address not specified [ 637.107340][T30524] netlink: 'syz.2.8352': attribute type 1 has an invalid length. [ 637.153816][T30536] netlink: 'syz.4.8354': attribute type 2 has an invalid length. [ 637.169375][T30531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8355'. [ 637.253657][T30524] gretap2: entered promiscuous mode [ 637.290245][T30524] bond6: (slave gretap2): making interface the new active one [ 637.298940][T30524] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 637.327886][T30525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.428972][T30552] netlink: 'syz.0.8356': attribute type 1 has an invalid length. [ 637.600387][T30565] FAULT_INJECTION: forcing a failure. [ 637.600387][T30565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.626395][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8366'. [ 637.636177][T30565] CPU: 1 UID: 0 PID: 30565 Comm: syz.3.8365 Not tainted syzkaller #0 PREEMPT(full) [ 637.636200][T30565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.636212][T30565] Call Trace: [ 637.636219][T30565] [ 637.636227][T30565] dump_stack_lvl+0xe8/0x150 [ 637.636255][T30565] should_fail_ex+0x412/0x560 [ 637.636283][T30565] _copy_to_iter+0x589/0x17d0 [ 637.636320][T30565] ? __pfx__copy_to_iter+0x10/0x10 [ 637.636344][T30565] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 637.636365][T30565] ? lockdep_hardirqs_on+0x7a/0x110 [ 637.636385][T30565] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 637.636404][T30565] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 637.636448][T30565] __skb_datagram_iter+0xf8/0x980 [ 637.636472][T30565] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 637.636502][T30565] skb_copy_datagram_iter+0xb5/0x210 [ 637.636528][T30565] netlink_recvmsg+0x2c3/0xa50 [ 637.636556][T30565] ? __pfx_netlink_recvmsg+0x10/0x10 [ 637.636578][T30565] ? aa_sock_msg_perm+0xf1/0x1b0 [ 637.636602][T30565] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 637.636624][T30565] ? security_socket_recvmsg+0x7e/0x2c0 [ 637.636643][T30565] ? __pfx_netlink_recvmsg+0x10/0x10 [ 637.636660][T30565] sock_recvmsg+0x22c/0x270 [ 637.636681][T30565] ____sys_recvmsg+0x1e6/0x4a0 [ 637.636711][T30565] ? __pfx_____sys_recvmsg+0x10/0x10 [ 637.636746][T30565] ? import_iovec+0x73/0xa0 [ 637.636768][T30565] ___sys_recvmsg+0x215/0x590 [ 637.636794][T30565] ? __pfx____sys_recvmsg+0x10/0x10 [ 637.636820][T30565] ? __fget_files+0x2a/0x420 [ 637.636853][T30565] ? __fget_files+0x3a0/0x420 [ 637.636880][T30565] do_recvmmsg+0x334/0x800 [ 637.636909][T30565] ? __pfx_do_recvmmsg+0x10/0x10 [ 637.636942][T30565] ? _copy_from_user+0x94/0xb0 [ 637.636975][T30565] __x64_sys_recvmmsg+0x1b7/0x250 [ 637.636999][T30565] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 637.637032][T30565] do_syscall_64+0x14d/0xf80 [ 637.637052][T30565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.637069][T30565] ? trace_irq_disable+0x37/0x100 [ 637.637088][T30565] ? clear_bhb_loop+0x40/0x90 [ 637.637108][T30565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.637125][T30565] RIP: 0033:0x7fb239b9c629 [ 637.637142][T30565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.637156][T30565] RSP: 002b:00007fb23a9b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 637.637175][T30565] RAX: ffffffffffffffda RBX: 00007fb239e15fa0 RCX: 00007fb239b9c629 [ 637.637189][T30565] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 637.637201][T30565] RBP: 00007fb23a9b9090 R08: 0000200000003700 R09: 0000000000000000 [ 637.637213][T30565] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 637.637224][T30565] R13: 00007fb239e16038 R14: 00007fb239e15fa0 R15: 00007fff6523aa98 [ 637.637253][T30565] [ 638.142064][T30585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8370'. [ 638.159053][T30585] ip6gretap0: entered promiscuous mode [ 638.220913][T30596] bond0: (slave rose0): Error: Device can not be enslaved while up [ 638.395876][T30602] FAULT_INJECTION: forcing a failure. [ 638.395876][T30602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.456833][T30602] CPU: 0 UID: 0 PID: 30602 Comm: syz.4.8374 Not tainted syzkaller #0 PREEMPT(full) [ 638.456858][T30602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.456870][T30602] Call Trace: [ 638.456877][T30602] [ 638.456886][T30602] dump_stack_lvl+0xe8/0x150 [ 638.456913][T30602] should_fail_ex+0x412/0x560 [ 638.456941][T30602] _copy_from_iter+0x1d3/0x1670 [ 638.456973][T30602] ? rcu_is_watching+0x15/0xb0 [ 638.456994][T30602] ? __pfx__copy_from_iter+0x10/0x10 [ 638.457024][T30602] ? netlink_sendmsg+0x650/0xb40 [ 638.457042][T30602] ? skb_put+0x11b/0x210 [ 638.457064][T30602] netlink_sendmsg+0x6c0/0xb40 [ 638.457091][T30602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.457112][T30602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 638.457135][T30602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.457157][T30602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.457174][T30602] ____sys_sendmsg+0xa68/0xad0 [ 638.457195][T30602] ? __might_fault+0xaf/0x130 [ 638.457220][T30602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.457252][T30602] ? import_iovec+0x73/0xa0 [ 638.457272][T30602] ___sys_sendmsg+0x2a5/0x360 [ 638.457291][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 638.457312][T30602] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.457374][T30602] ? __fget_files+0x2a/0x420 [ 638.457391][T30602] ? __fget_files+0x3a0/0x420 [ 638.457416][T30602] __x64_sys_sendmsg+0x1bd/0x2a0 [ 638.457436][T30602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.457464][T30602] ? __pfx_ksys_write+0x10/0x10 [ 638.457493][T30602] do_syscall_64+0x14d/0xf80 [ 638.457511][T30602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.457527][T30602] ? trace_irq_disable+0x37/0x100 [ 638.457544][T30602] ? clear_bhb_loop+0x40/0x90 [ 638.457564][T30602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.457580][T30602] RIP: 0033:0x7fb29199c629 [ 638.457595][T30602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.457610][T30602] RSP: 002b:00007fb28fbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.457629][T30602] RAX: ffffffffffffffda RBX: 00007fb291c15fa0 RCX: 00007fb29199c629 [ 638.457641][T30602] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 638.457652][T30602] RBP: 00007fb28fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 638.457662][T30602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.457673][T30602] R13: 00007fb291c16038 R14: 00007fb291c15fa0 R15: 00007ffca55fe5d8 [ 638.457698][T30602] [ 638.807685][T30625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.878007][T30627] netlink: 'syz.3.8382': attribute type 2 has an invalid length. [ 638.910912][T30626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.983625][T30640] bond4: option mode: unable to set because the bond device is up [ 639.049984][T30640] bond4: (slave veth3): Enslaving as an active interface with a down link [ 639.069879][T30645] siw: device registration error -23 [ 639.106201][T30644] bond4: (slave veth5): Enslaving as an active interface with a down link [ 639.167334][T30648] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8389'. [ 639.186084][T30654] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8389'. [ 639.297489][T30663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8395'. [ 639.329275][T30664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.379879][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8398'. [ 639.441835][T30675] x_tables: unsorted entry at hook 3 [ 639.560121][T30682] netlink: 'syz.3.8402': attribute type 1 has an invalid length. [ 639.567470][T30683] bond2: option mode: unable to set because the bond device has slaves [ 639.569429][T30682] netlink: 'syz.3.8402': attribute type 2 has an invalid length. [ 639.700306][T30691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8406'. [ 639.727094][T30686] bond5 (unregistering): Released all slaves [ 639.803448][T30694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.817232][T30696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8407'. [ 639.895982][T30700] netlink: 'syz.3.8410': attribute type 2 has an invalid length. [ 639.935509][T30700] netlink: 'syz.3.8410': attribute type 2 has an invalid length. [ 640.049948][T30712] netlink: 'syz.1.8413': attribute type 2 has an invalid length. [ 640.072285][T30720] netlink: 'syz.3.8415': attribute type 10 has an invalid length. [ 640.076549][T30722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8416'. [ 640.126154][T30711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.142672][T30720] veth0_vlan: left promiscuous mode [ 640.155771][T30720] veth0_vlan: entered promiscuous mode [ 640.166253][T30720] team0: Device veth0_vlan failed to register rx_handler [ 640.346542][T30739] FAULT_INJECTION: forcing a failure. [ 640.346542][T30739] name failslab, interval 1, probability 0, space 0, times 0 [ 640.369932][T30739] CPU: 1 UID: 0 PID: 30739 Comm: syz.3.8421 Not tainted syzkaller #0 PREEMPT(full) [ 640.369957][T30739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.369968][T30739] Call Trace: [ 640.369976][T30739] [ 640.369984][T30739] dump_stack_lvl+0xe8/0x150 [ 640.370011][T30739] should_fail_ex+0x412/0x560 [ 640.370040][T30739] should_failslab+0xa8/0x100 [ 640.370066][T30739] __kmalloc_noprof+0xe8/0x760 [ 640.370088][T30739] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 640.370111][T30739] ? rcu_is_watching+0x15/0xb0 [ 640.370134][T30739] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 640.370173][T30739] genl_family_rcv_msg_doit+0xd9/0x330 [ 640.370192][T30739] ? __asan_memcpy+0x40/0x70 [ 640.370209][T30739] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 640.370231][T30739] ? apparmor_capable+0x137/0x1a0 [ 640.370246][T30739] ? bpf_lsm_capable+0x9/0x20 [ 640.370259][T30739] ? security_capable+0x7e/0x2c0 [ 640.370281][T30739] genl_rcv_msg+0x61c/0x7a0 [ 640.370302][T30739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.370317][T30739] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 640.370346][T30739] netlink_rcv_skb+0x232/0x4b0 [ 640.370360][T30739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.370377][T30739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 640.370388][T30739] ? genl_rcv+0x19/0x40 [ 640.370416][T30739] ? down_read+0x272/0x2e0 [ 640.370431][T30739] ? genl_rcv+0xd/0x40 [ 640.370448][T30739] genl_rcv+0x28/0x40 [ 640.370462][T30739] netlink_unicast+0x80f/0x9b0 [ 640.370486][T30739] ? __pfx_netlink_unicast+0x10/0x10 [ 640.370505][T30739] ? netlink_sendmsg+0x650/0xb40 [ 640.370517][T30739] ? skb_put+0x11b/0x210 [ 640.370534][T30739] netlink_sendmsg+0x813/0xb40 [ 640.370554][T30739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.370569][T30739] ? aa_sock_msg_perm+0xf1/0x1b0 [ 640.370587][T30739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.370606][T30739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.370618][T30739] ____sys_sendmsg+0xa68/0xad0 [ 640.370634][T30739] ? __might_fault+0xaf/0x130 [ 640.370654][T30739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.370676][T30739] ? import_iovec+0x73/0xa0 [ 640.370692][T30739] ___sys_sendmsg+0x2a5/0x360 [ 640.370707][T30739] ? __lock_acquire+0x6b5/0x2cf0 [ 640.370724][T30739] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.370765][T30739] ? __fget_files+0x2a/0x420 [ 640.370777][T30739] ? __fget_files+0x3a0/0x420 [ 640.370798][T30739] __x64_sys_sendmsg+0x1bd/0x2a0 [ 640.370815][T30739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.370838][T30739] ? __pfx_ksys_write+0x10/0x10 [ 640.370862][T30739] do_syscall_64+0x14d/0xf80 [ 640.370878][T30739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.370890][T30739] ? trace_irq_disable+0x37/0x100 [ 640.370905][T30739] ? clear_bhb_loop+0x40/0x90 [ 640.370921][T30739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.370933][T30739] RIP: 0033:0x7fb239b9c629 [ 640.370946][T30739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.370957][T30739] RSP: 002b:00007fb23a9b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.370972][T30739] RAX: ffffffffffffffda RBX: 00007fb239e15fa0 RCX: 00007fb239b9c629 [ 640.370982][T30739] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 640.370991][T30739] RBP: 00007fb23a9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 640.370999][T30739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.371008][T30739] R13: 00007fb239e16038 R14: 00007fb239e15fa0 R15: 00007fff6523aa98 [ 640.371030][T30739] [ 640.797675][ T10] IPVS: starting estimator thread 0... [ 640.924319][T30752] IPVS: using max 28 ests per chain, 67200 per kthread [ 640.972906][T21462] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 640.984814][T21462] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 640.993223][T21462] CPU: 0 UID: 0 PID: 21462 Comm: kworker/u8:49 Not tainted syzkaller #0 PREEMPT(full) [ 641.002837][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.012873][T21462] Workqueue: krdsd rds_tcp_accept_worker [ 641.018502][T21462] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 641.024295][T21462] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 641.043891][T21462] RSP: 0018:ffffc9000ba1f960 EFLAGS: 00010202 [ 641.049945][T21462] RAX: 1ffff11009214acb RBX: 0000000000000012 RCX: 0000000000000000 [ 641.057900][T21462] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 641.065852][T21462] RBP: ffffc9000ba1fad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 641.073807][T21462] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff88804f0ab690 [ 641.081760][T21462] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92001743f34 [ 641.089713][T21462] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 641.098620][T21462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.105182][T21462] CR2: 00007ffa4d7e7c38 CR3: 0000000051e98000 CR4: 00000000003526f0 [ 641.113144][T21462] Call Trace: [ 641.116418][T21462] [ 641.119338][T21462] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 641.124874][T21462] ? do_raw_spin_lock+0x12b/0x2f0 [ 641.129890][T21462] ? lock_acquire+0x106/0x330 [ 641.134551][T21462] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 641.140260][T21462] ? process_scheduled_works+0xa0f/0x17a0 [ 641.145969][T21462] ? process_scheduled_works+0xa0f/0x17a0 [ 641.151677][T21462] rds_tcp_accept_worker+0x1d/0x70 [ 641.156776][T21462] ? process_scheduled_works+0xa0f/0x17a0 [ 641.162479][T21462] process_scheduled_works+0xaec/0x17a0 [ 641.168012][T21462] ? __pfx_process_scheduled_works+0x10/0x10 [ 641.173984][T21462] ? assign_work+0x3d5/0x5e0 [ 641.178568][T21462] worker_thread+0xa50/0xfc0 [ 641.183154][T21462] kthread+0x388/0x470 [ 641.187209][T21462] ? __pfx_worker_thread+0x10/0x10 [ 641.192301][T21462] ? __pfx_kthread+0x10/0x10 [ 641.196874][T21462] ret_from_fork+0x51e/0xb90 [ 641.201449][T21462] ? __pfx_ret_from_fork+0x10/0x10 [ 641.206542][T21462] ? __switch_to+0xc7d/0x1400 [ 641.211200][T21462] ? __pfx_kthread+0x10/0x10 [ 641.215774][T21462] ret_from_fork_asm+0x1a/0x30 [ 641.220527][T21462] [ 641.223533][T21462] Modules linked in: [ 641.228190][T21462] ---[ end trace 0000000000000000 ]--- [ 641.254940][T21462] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 641.261530][T21462] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 641.293554][T21462] RSP: 0018:ffffc9000ba1f960 EFLAGS: 00010202 [ 641.299837][T21462] RAX: 1ffff11009214acb RBX: 0000000000000012 RCX: 0000000000000000 [ 641.308323][T21462] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 641.316475][T21462] RBP: ffffc9000ba1fad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 641.327179][T21462] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff88804f0ab690 [ 641.335131][T30768] erspan0: entered promiscuous mode [ 641.336731][T21462] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92001743f34 [ 641.345633][T30768] gretap0: entered promiscuous mode [ 641.349001][T21462] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 641.362874][T21462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.369663][T21462] CR2: 00007fb239de6158 CR3: 000000007544a000 CR4: 00000000003526f0 [ 641.377835][T21462] Kernel panic - not syncing: Fatal exception [ 641.384246][T21462] Kernel Offset: disabled [ 641.388553][T21462] Rebooting in 86400 seconds..