last executing test programs: 39.795364863s ago: executing program 1 (id=4744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000240)) (async) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000340)={'syzkaller0\x00', @random='\x00\a\x00'}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x1, 0x0, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x1, 0x4, 0x65, 0x64, 0x0, 0x3, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end]}}, {0x4e21, 0x4e23, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x41362f52b360784d}, "cc8eb0946e5e0eb90c30c40c5c76b6d6dcf991cda5867feb5aa63ba5a05f66125bc831fd5452ed61bd3774ac48998c57d940ecaa66bffc18b412c01c05"}}}}, 0x6f) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4) 39.795029288s ago: executing program 2 (id=4745): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000100)=0x1fffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r5, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) 34.630570111s ago: executing program 4 (id=4774): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x600000000000000, 0x20000040}, 0x4000000) 34.58319761s ago: executing program 4 (id=4775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000cc0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000d00)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000d40)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000e00)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000e40)=0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000e80)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000ec0)='g', 0x1, 0x0, &(0x7f0000000f00)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000f40)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0x7c}}, 0x0) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0xfffffffd, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000c40)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "a0fcc73b5ef32a884b2033728e956f3f20d16734af14637c", "85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a9"}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0x6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040000040000000814170c507d", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000200"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000740)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f00000009c0), &(0x7f0000000a00)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000a40), &(0x7f0000000a80)='%-010d \x00'}, 0x20) 34.392773959s ago: executing program 1 (id=4777): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@delnexthop={0x20, 0x69, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 34.392426483s ago: executing program 2 (id=4778): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2d}]}}}]}, 0x50}}, 0x0) sendto$packet(r0, &(0x7f0000000200)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000240)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x44) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2d}]}}}]}, 0x50}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000200)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000240)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) 34.237222092s ago: executing program 4 (id=4779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x22}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 34.170984784s ago: executing program 1 (id=4781): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x87) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000001c0)={0x6, 'syzkaller0\x00', {0x59b}, 0xfffa}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) close(0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) r8 = socket(0x2a, 0x2, 0x7ff) connect$inet6(r8, &(0x7f00000002c0)={0x2a, 0x4e24, 0x3, @mcast1, 0x2}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000340)=0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40022020, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x78, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000140)) pipe(&(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x100, 0x70bd6c, 0x25ffdc02, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 33.948935413s ago: executing program 2 (id=4782): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x1, 0x2, 0x3, 0x100000000}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x6c0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x1f}}) 33.947822101s ago: executing program 4 (id=4783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000001000)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}, {&(0x7f0000001040)="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", 0x156}], 0x2}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000940), 0x3fffffffffffce3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0xc, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000fc0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r11, 0x0, 0x66, 0x45, &(0x7f0000000000)="ba7c671ac6220a253f4409ae025ac4b0533f539f150c1501b678fa53b1a6935921ed8bb1607df397f07cdfae966df8ef13babee9ec1ac40d53681efc750ea713f493b2ef7a9356df00712a08e13c00cc1bc7f54dd2320829ecec6a374208dcc179d6bd3c153d", &(0x7f0000000080)=""/69, 0x2, 0x0, 0xb9, 0x33, &(0x7f0000000480)="94b9515c48a800951e36ef4e9edf8f703f223ce39fd3aa6fc0b5ff0a2850837cfd7266c0c926332885904961f558fcd279f47ee1a6dd848d97bb81d3998736d9a099bc1fbbe4e36c9988dca08054bdb13cf216cbf10aea6ed0ffc76e5939e6d447a231f994d6d44c630d907a63beb949e14a5b65a1d998c9b09816a71530fb3588d8fd110aee250a4dbfebf1f39a95bfdaecdcee2df38c733735a0c813f5591557881ea50e7d7b241d05168027c5b71d609277297c249a2c3a", &(0x7f0000000540)="87d787d53ce9ea5c0c296dfb325c303f877a87c14680f13a7d753db0b4860ddad03bad2944f4792dda824aa5429851c483c69f", 0x4, 0x0, 0xed}, 0x50) 33.058444586s ago: executing program 2 (id=4787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2044}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 32.87658934s ago: executing program 2 (id=4789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r9) getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r10, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x3c, r7, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x2, 0x3c}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r2, 0x84, 0x84, &(0x7f00000003c0)={r11, @in6={{0xa, 0x4e20, 0x7, @mcast1, 0xfff}}, 0x4e22}, 0x90) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004a00)={0xffffffffffffffff, 0x0, 0x29, 0x1000, &(0x7f00000000c0)="519e9b7910401337b975d22c80cffc9c3a690c340150ab1a1f243fe050858dc80f45fb3dbe06f9f57f", &(0x7f0000002940)=""/4096, 0x2, 0x0, 0x1000, 0xa1, &(0x7f0000003940)="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", &(0x7f0000004940)="8476bd8655d004245ff9637b4241df27c55fe799634fd4d6c4731bf4ce116bacd93d1f351a85523b7dd2de83c4cb1a8676c9adfa794e922c4377c661854199fff935f7f337997774c5edbe06073c1a95e2383b01d6671e0f6deec9578d1bb0bc2f70c51dd1c7203ab49e95ac80c27d30ca1e99dd585808849072267df5d96ea68e59b2beee8c7d266fdab138ba8546eb8c5cb315446c599e72f29a5703d543c666", 0x1, 0x0, 0x80000001}, 0x50) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x2, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x6, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0xc, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x13, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x6, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0xb2a, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x8, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0x101, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0x1, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x5, 0x8001}, {0x4, 0xffffffff, 0x1, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xeffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x2007fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0xdd6, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0xffffffff, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0xaf5d, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x7}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x6, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x4, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0x3, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0xc, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0xffffffff}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x800}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8001, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x0, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x14, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x7}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xf1d}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0xee33}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x2, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x0, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x9686df70646cb3da}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r12, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 32.632280749s ago: executing program 1 (id=4790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x6, &(0x7f0000000740)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000780)='GPL\x00', 0x5, 0x29e, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x186, &(0x7f0000000a00)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "302606", 0x148, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0x3e}, {[@hopopts={0x0, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x8, 0x83, "2ad4e3a94c8b25cd131a40bbdadd3517c927cc015f9c6698bb953007f368d4ae423f5b88bb2d41c1fa3541298d66833f7270941914891e1e5f94f924037235bba1bea1ce5faf33568df9a4e07b7160b50456b8152822dc839e113c26cdbd7343987bc14159e1f1fd2680664e7b9181bcbbb1d6b2a99ded34df711d68a4a24f861ac8b2"}, @pad1, @generic={0x6, 0x83, "d444ff52b9ffa5198d1734fb9f58b89cf5effb02f7a38e30071dff922ff0844a1866c98b0a9e1e1b7ae7ed039ee150d0a92a7c40891516b62974b7167e1dc8937ecb4130c4182813cfae842c2e6810bda414d0daf23e1399f6be4c9e5c7616770083f4c876e0149fa9bd1bf43d3e48a06f0857683c282f7f6d1b40a9c5c4602aafee35"}]}], @payload_direct={{{{0x28, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x3, 0xfff, 0x4, 0x2, 0x4e24, 0x4e20}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x3, 0x7, 0x2, 0x10104, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x19, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xad30}, @alu={0x4, 0x1, 0x5, 0xb, 0xa, 0xffffffffffffff85, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x0, 0x0, 0x8, 0x80, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="e9aeed8045f0001c29bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8881}, 0x4000000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000000)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 32.489301744s ago: executing program 1 (id=4792): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r2, 0x1, 0x0, 0x40000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x51}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c095}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x50, 0x1, [@m_bpf={0x4c, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x19, 0x6, "8c5e889680ea699f0286c6926deecbcf795b716b0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x64}}, 0x20040000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "d61418f3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) (async) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="0d3e0c3cf43ff5eda6934386dcef64e39f33aaa3df492372e20de1a70c8498a9dc7bf910b7", 0x25}], 0x1, &(0x7f00000004c0)=[{0x48, 0x102, 0x1, "18d0de98c52e8f19516a456c505c1d0b996835d962a284a5964008b8d425a7442005da48859c39f0afad7003ef41b7c69e60a8c0b627"}, {0x50, 0x29, 0x1, "6dfee79e015d41616db61f334269213f668b52a8959148cff7bf741cb9a8754827dc0f3ddb0a24c4c9857280e6106f603644fd0b06561440a1d1b3de3d40b96f"}, {0xa8, 0x107, 0xd8, "a9f13e87c52e205df03b332d5d3f720f831ea61df32e0436572f2db0401acd7643a864e61d59ad9f405a1b4fec277ef1d10e93e995f802e084f2cd29e77af57b8b83541911a38e89fb6805209749149f88fd06b6bb2719f21bd691f2f94479b08f11d8d9585e6b6f9dbcc545e8ab1cee720c0d3d390c12f9c6a4f428f27647ab24ebab054c5147b34c3d6dffe9a7fa3a0286e7f13806"}, {0x60, 0x1, 0x7, "5c5cdf82a4014ee6f956ab2871ca41b9a30c251c46a69a3b3f9136b9302f54ee3749dc723a9eef96723255e1840d8702819bfffd55bbd16b1497d33147755c1c40c0160e95724397b9"}, {0x68, 0x103, 0xb3, "d3db4bb24f9b1a3a3e1b5e1f8ca4ebaf61b4ebb813fe1c51ba00190ad82f1d069637b1ac4412c0ac76ad9f3a53c2325f5096de17c6f535cd141e9cfa0370712bcbf98325940579cb839fc98ffa755f29f4"}, {0x98, 0x10f, 0x2d1efcc5, "a028d6e3f29bf9c74bc865596ec3ad1d0aa267c225acf152455a4b62a0118b68b9bb1ba137747f4331820caac1489d90d38c157c344edbd994465a163ac838ddacbab08d4ff7966dbdd4cc08790fc3dc302df36d82d01f35e22ea8077c0600becbc87331f3dafdb7ad0a741d359d1ddc372795aa55bf9b424cf649a724501aba0affcd7fafc39c"}, {0x20, 0x10b, 0xaf9, "abd8dbea1c9b046061c6f1561a0e7d88"}, {0x78, 0x84, 0x2, "714e08fa64d649c43d9eff1a61ab31cc11ea97ffb548fa746cd371ee43832b1795a8583fcc43f413098021926647af9cea0f6f8d71e93b8abfba3f9404ac6964a7b629d6ffd939d4a64a7f61dc0a48690c2022727642f4ef1e96aa4f250a7135f2b5c186c61e25c8"}, {0xd0, 0x109, 0xffffff01, "f2525d316c12d08f0a05f7a8c2675a5bfb52c36c6ab074deb954313288d56c9a6e0278c35489c2e5998fe149813a44abf554172db7d17455057fc57e0349200f4314c219795cde381955e0581d373711edb920e663caf8e62a43da56e949205c4f49e88db993a16e93cf56670c52b21abc1cc38641470f6c2cf50c3c3c9da6eaee699ea2a15265f8613fe36bf2a50007d333911eced97803255a8faf18e84339f50d02f46cf2ed52ab88a406b0da2d72e79edbf87a5a7370de83286c507a"}, {0x70, 0x0, 0xff, "bd315c520746717cd05ade1caf6a0d75f8b67a9175894e75530ee565dd8169ae34196dd50d2a89411040d996c359fd398e3b89ec72320b30e674ccb45d123c3a4740f1e2edf085e7872a458aafcb927b772374bbeb7fef01cc8fef097903"}], 0x478}, 0x4044000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="080001"], 0x90}}, 0x0) 31.506411081s ago: executing program 0 (id=4800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, 0x24}, 0x80) 31.40854541s ago: executing program 0 (id=4801): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x8, 0x27, 0x5, 0xffff, 0x6, 0xa5, 0x0, 0x101]}]}, 0x4c}}, 0x20000000) 31.408239193s ago: executing program 0 (id=4802): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000040)={r0, r0, 0x8, 0x0, 0x0, 0x1, 0x61, 0x6, 0x1012, 0xc3, 0x2, 0x7, 'syz1\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000200)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000044000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000540)={0x1f}, &(0x7f0000000580)={0x0, 0x3938700}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10020) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/43, 0x2b}, {&(0x7f0000000740)=""/67, 0x43}], 0x2) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) 31.059826118s ago: executing program 0 (id=4804): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1c8, 0x98, 0x1c8, 0x130, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, 0xff000000, 'nicvf0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3, 0x50}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38, 0xf, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'nicvf0\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000280), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x1b, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="18000000000000000000000000000010852000000200030095"], &(0x7f0000001c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3426e, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0) unshare(0x22020400) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001780)={0x0, 0x0}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000017c0)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001800)={r9, r7, 0x3e, r7}, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r7, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000001900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) read(r6, &(0x7f0000000400)=""/196, 0xc4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="0001020304050607", 0x8) 30.65807594s ago: executing program 0 (id=4806): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288d05aea2bd4e61d6bc0000def1260a0000000000010000", 0x1a) 30.605621985s ago: executing program 0 (id=4808): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) unshare(0x6020400) r2 = socket(0x10, 0x80002, 0x0) connect$netlink(r2, &(0x7f0000000080)=@proc, 0xa) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x80000000, 0x4, 0x12000}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r3}) 30.038389446s ago: executing program 3 (id=4815): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x20, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340), 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000200)={'xfrm0\x00', @ifru_settings={0x7fff, 0xa238, @sync=0x0}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r2}, 0x18) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000500)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000006c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x400, 0x470bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 29.103529697s ago: executing program 3 (id=4816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x80) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x320, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcac}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa9e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3c8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x792}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "aa8d132d9bf141cfe13adf053668270ac2cd4ccdbb8b3520ba37fedae105"}}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "ff5289ab75bc61d1275d3a00c815288e6afeb87efd57c088"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "ada87224a29b070bcce63fd5cc3f95b0d045b17c"}}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "0ff86f17d3de785a2856fc2fc897b3fedbf92c99516394bbc23fa2e4d42bbfe84c4a40cb8693de66c2e201c967b599d43b621330c55c8916d3c53fef81affbfb72b4c15c24cc5ec04a07626ceeeac9f5fde814ace91c5d5d4f5417697fe1b86f5d206fc4dbfd34c52fbddd"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b1dc3eb18b75c8b712e42655c037b6f31bf118fb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffac}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb19f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000fc0)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24}, 0x40000) socket$inet6_sctp(0xa, 0x5, 0x84) 29.080634973s ago: executing program 3 (id=4817): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x73) (async) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000000c0)="010000000000060000071a80010061cc", 0x10) (async) close(r2) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xffa0}, {&(0x7f0000001140)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001180)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x801c581f, 0x30000002000005c) 28.993801949s ago: executing program 3 (id=4818): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288d05aea2bd4e61d6bc0000def1260a0000000000010000", 0x1a) 28.879141905s ago: executing program 3 (id=4819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.878669113s ago: executing program 3 (id=4820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmmsg$unix(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40000a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000018c0)={{r0, &(0x7f0000000100)='nl80211\x00', 0x80c40, &(0x7f0000000b00)={@align, {0xf, 0x8, 0xf8ee, 0x1000}}, 0xc, &(0x7f0000000b40), &(0x7f0000000b80)=0x7fff}, 0x7, &(0x7f00000017c0)=[{0x3, 0xc, &(0x7f0000000bc0)=',\x00', &(0x7f0000000c00)="30116db9291c77a2691834a70d9a64246767e01b0946b1221ac9c4242bb1158f1a39148b125af4e397a96abdb3eade23f22d0d283a73ff6ce4b6740ebc32d27f4d828e13924f65c21656dbc4883452a2882654955c334dbba4b63cfeba1d9c202196b82c8d3be5edf3b0e81507d9", 0x6e, 0x30}, {0x1, 0x6, &(0x7f0000000c80)='[\x00', &(0x7f0000000cc0)="11189890efb8658e7fc8c0dee7840e76234ddcf08b8b9c65d90aaf734af7df601153fed65dbd184eac3211a6df2f654358ee0b3590f24f1e364b20cfeeed6c2f5099e2575566510237e297d1fbf04a9a852c7c5f74e4b729a5c1b2640af5975372dc914ee0a17b9fe40b6c57c73144624edd6dadf5cae2b808da39bf648f1ff9c09b83e5206194f37a5121a66e5120697b185e232dd06d839e6e610b0a4454a550e1e6342364a79de5dbcb10fd6ac46d84a5b232d50f2f85905156dff9a6acf3ad2f7656aeb03ec00f5f4999a563a7b952abb1b5e356760729b3442cb5cf605903ed7f2c52d9db65d7817f849901ff4432", 0xf1, 0x20}, {0x2, 0x2, &(0x7f0000000dc0)='\x00', &(0x7f0000000e00)="9e4e82e51192449d1936f38ba21994935516923f61798ac910fb3d90015fa385f9636312f73ddeb10b10239e0ee2ec1d0a09be8ae7acc9bd2b5475a38290a9784a3974fead666618ef95e8785b4f5fd36ee66d23f7368dcb22fb7aabbfd7e4dcbf777679530711a7c3746d9ee81a357d5c6a8e5d554fa6dbbb583b0058694c6aed0d60fb847b15c9b65baf9c382a25dbf3c5386de8528a", 0x97}, {0x3, 0x8000, &(0x7f0000000ec0)='nl80211\x00', &(0x7f0000000f00)="fb09bd110e970dfa6937537d25c3eb12cb56725760202d648aa227e4f5f4816102801ab8f79ec50732a99997acf120cd03c3c1da4a226be058c27ebb9b6f90945f36fb808274ccb2a45804ef6b8011950b96f3f6e2dcdb3788d74d4d233f8dba962be6d8e979ca12a65b8155655f15d3b1ab85584db86f6f58de4ae4e2e9a0de5f6c2f", 0x83, 0xa}, {0x2, 0x8d, &(0x7f0000000fc0)='nl80211\x00', &(0x7f0000001000)="cc9a53a47a2ff972aa013b6eb99e8e5a", 0x10, 0x8}, {0x2, 0x0, &(0x7f0000001040)='\x00', &(0x7f0000001080)="0af1cf0cb3d5684a14db535db684f1ba54cdaf3c190cdb1982dc0988614dbaebbe7e59477482fadf5c7f31cf9ce4b7a4c8deedd20d7d3159173ba4caea5c52ed6a4f5b1d772b8226a007e832d66c8ef0a11183eb285cdb0ab2f261313042d9fc9bd5a53e8ddb595484e0eccf2e41c591a014799222ab28943d8c12fe12c63c54e32b5662818e0d282f015909d19c9fa48aa1d1645a01d608ffa1d4464b2192755a617a888f0d", 0xa6, 0x12}, {0x2, 0x4, &(0x7f0000001140)='-\x00', &(0x7f0000001740)="2453af54520d962ecc932ecd888d392642335d8fe7d7b498592fe097913b58ccb638a1122f575ee84782a517e8b919c797c12ce64c01fe3ca7901bbea3f21e073d065566ad752c890767f0370b507392ac38cc5c0c19310fc195155862b09c59231599a46a89d3468ca1", 0x6a}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000000010ea8c64d94072280000", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000001bc0)={0x0, 0x36, 0x0, 0x0, &(0x7f0000001c00), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[], 0x128}, 0x0) recvmsg$unix(r14, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="da76b65b", @ANYRES16=r7, @ANYBLOB="08002dbd7000fbdbdf254c0000000c009900b50d0000510000000c0058001f000000000000000c00580076000000000000000c0058007b00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) socket$inet6(0xa, 0x2, 0x0) accept(r1, &(0x7f0000000240)=@in, &(0x7f00000002c0)=0x80) 28.454100771s ago: executing program 2 (id=4821): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x3, 0xa, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) syz_emit_ethernet(0x83, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f00000000c0)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0xffffffff, @private0, 0x7fff}], 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="04", 0x1}], 0x1}}], 0x1, 0x4000040) bind$packet(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x4, @rand_addr=0x64010101, 0x4e21, 0x2, 'wrr\x00', 0x6, 0x0, 0x79}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4e23, 0x0, 0x80000001, 0x7, 0x8}}, 0x44) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1, 0x70bd2d}, 0x10}}, 0x0) 28.453699737s ago: executing program 4 (id=4822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24000, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 28.449817404s ago: executing program 1 (id=4823): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 20.475946125s ago: executing program 4 (id=4824): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000002b80)={0xffffffffffffffff, &(0x7f0000002a80)='bridge0\x00', 0x2000, &(0x7f0000002ac0)={@_ha_fsid={[0x7, 0x6]}, {0x4, 0x9, 0x97c, 0x2}}, 0x7a15, &(0x7f0000002b00), &(0x7f0000002b40)=0x3}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x90) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x1fd}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/4102, 0x1006}, {&(0x7f0000001680)=""/4111, 0x100f}, {&(0x7f00000026c0)=""/100, 0x64}], 0x3}, 0x19}], 0x3, 0x1006, 0x0) 0s ago: executing program 32 (id=4808): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) unshare(0x6020400) r2 = socket(0x10, 0x80002, 0x0) connect$netlink(r2, &(0x7f0000000080)=@proc, 0xa) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x80000000, 0x4, 0x12000}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r3}) kernel console output (not intermixed with test programs): . [ 366.019778][T14645] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.019870][T14645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.019881][T14645] IPv6: NLM_F_CREATE should be set when creating new route [ 366.019924][T14645] IPv6: NLM_F_CREATE should be set when creating new route [ 366.019949][T14645] IPv6: NLM_F_CREATE should be set when creating new route [ 366.410889][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2968'. [ 366.726221][T14682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2973'. [ 367.286556][T14705] xt_REDIRECT: bad MAP_IPS. [ 367.397769][T14717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2988'. [ 367.590056][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 367.818269][T14734] netlink: 'syz.0.2996': attribute type 2 has an invalid length. [ 368.281955][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3012'. [ 368.341278][T14773] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 368.445464][T14773] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.540074][T14781] bond5: (slave geneve4): making interface the new active one [ 368.551668][T14781] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 368.716576][T14794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3020'. [ 368.923810][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 368.923958][T14808] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 368.926329][T14808] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3027'. [ 368.977945][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3025'. [ 369.244269][T14823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.307716][T14827] netlink: 'syz.4.3034': attribute type 5 has an invalid length. [ 369.996031][T14867] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.265417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.323475][T14883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.349294][T14883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.385346][T14883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.405706][T14883] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 370.433924][T14891] netlink: 'syz.2.3061': attribute type 15 has an invalid length. [ 370.441135][ T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.478574][ T49] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 370.478866][ T49] bond2: (slave veth3): making interface the new active one [ 370.510782][ T49] bond2: active interface up! [ 370.539179][T14893] syzkaller1: entered promiscuous mode [ 370.539309][T14893] syzkaller1: entered allmulticast mode [ 370.668717][T14899] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 370.713102][T14896] syzkaller1: entered promiscuous mode [ 370.713129][T14896] syzkaller1: entered allmulticast mode [ 371.008941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.178093][T14927] Unsupported ieee802154 address type: 0 [ 371.178424][T14926] Unsupported ieee802154 address type: 0 [ 371.305389][T14933] __nla_validate_parse: 7 callbacks suppressed [ 371.305411][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 371.475290][T14949] macvtap0: entered allmulticast mode [ 371.475313][T14949] veth0_macvtap: entered allmulticast mode [ 371.478877][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'. [ 371.629476][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 371.754861][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 371.931484][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 372.086235][T14984] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 372.199202][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'. [ 372.514118][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3100'. [ 372.515568][ T5622] block nbd1: Receive control failed (result -107) [ 372.546937][T15009] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 372.678387][T15009] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.712964][T15012] bond4: (slave geneve3): making interface the new active one [ 372.721793][T15012] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 372.787527][T15017] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3102'. [ 373.045229][T15033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.047625][T15034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.080815][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 373.192670][T15040] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 373.194107][T15034] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 373.395771][T15051] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 373.395812][T15051] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 373.395854][T15051] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 373.457169][T15051] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 373.564583][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 374.049111][T15088] FAULT_INJECTION: forcing a failure. [ 374.049111][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 374.049148][T15088] CPU: 1 UID: 0 PID: 15088 Comm: syz.2.3131 Not tainted syzkaller #0 PREEMPT(full) [ 374.049171][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.049185][T15088] Call Trace: [ 374.049193][T15088] [ 374.049203][T15088] dump_stack_lvl+0xe8/0x150 [ 374.049239][T15088] should_fail_ex+0x410/0x560 [ 374.049273][T15088] ? __alloc_skb+0x1db/0x7a0 [ 374.049305][T15088] should_failslab+0xa8/0x100 [ 374.049337][T15088] ? __alloc_skb+0x1db/0x7a0 [ 374.049366][T15088] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 374.049390][T15088] ? __alloc_skb+0x18d/0x7a0 [ 374.049422][T15088] ? __alloc_skb+0x1db/0x7a0 [ 374.049461][T15088] __alloc_skb+0x1db/0x7a0 [ 374.049498][T15088] netlink_dump+0x1e7/0xee0 [ 374.049538][T15088] ? __pfx_netlink_dump+0x10/0x10 [ 374.049578][T15088] ? netlink_recvmsg+0x5bf/0xa50 [ 374.049602][T15088] ? kmem_cache_free+0x182/0x650 [ 374.049636][T15088] netlink_recvmsg+0x683/0xa50 [ 374.049672][T15088] ? __pfx_netlink_recvmsg+0x10/0x10 [ 374.049697][T15088] ? lock_acquire+0x115/0x350 [ 374.049724][T15088] ? aa_sock_msg_perm+0x144/0x210 [ 374.049761][T15088] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 374.049792][T15088] ? security_socket_recvmsg+0x7e/0x2c0 [ 374.049815][T15088] ? __pfx_netlink_recvmsg+0x10/0x10 [ 374.049842][T15088] sock_recvmsg+0x196/0x1e0 [ 374.049874][T15088] ____sys_recvmsg+0x1e6/0x4a0 [ 374.049908][T15088] ? __pfx_____sys_recvmsg+0x10/0x10 [ 374.049948][T15088] ? import_iovec+0x73/0xa0 [ 374.049993][T15088] ___sys_recvmsg+0x213/0x5a0 [ 374.050028][T15088] ? __pfx____sys_recvmsg+0x10/0x10 [ 374.050058][T15088] ? lock_acquire+0x115/0x350 [ 374.050100][T15088] ? __fget_files+0x3a2/0x420 [ 374.050133][T15088] do_recvmmsg+0x31a/0x7f0 [ 374.050166][T15088] ? __pfx_do_recvmmsg+0x10/0x10 [ 374.050203][T15088] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 374.050231][T15088] ? __fget_files+0x3a2/0x420 [ 374.050263][T15088] __x64_sys_recvmmsg+0x198/0x250 [ 374.050292][T15088] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 374.050330][T15088] do_syscall_64+0x166/0x520 [ 374.050353][T15088] ? trace_irq_disable+0x3b/0x140 [ 374.050377][T15088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.050399][T15088] ? clear_bhb_loop+0x70/0xc0 [ 374.050426][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.050447][T15088] RIP: 0033:0x7f318659e2d9 [ 374.050466][T15088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.050485][T15088] RSP: 002b:00007f31874b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 374.050509][T15088] RAX: ffffffffffffffda RBX: 00007f3186825fa0 RCX: 00007f318659e2d9 [ 374.050525][T15088] RDX: 0000000004000267 RSI: 0000200000000140 RDI: 0000000000000004 [ 374.050539][T15088] RBP: 00007f31874b3090 R08: 0000000000000000 R09: 0000000000000000 [ 374.050553][T15088] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 374.050567][T15088] R13: 00007f3186826038 R14: 00007f3186825fa0 R15: 00007ffdebe9d558 [ 374.050603][T15088] [ 374.597355][T15101] batman_adv: batadv0: Adding interface: dummy0 [ 374.597375][T15101] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.597492][T15101] batman_adv: batadv0: Interface activated: dummy0 [ 374.682511][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 374.723763][T15101] batadv0: mtu less than device minimum [ 374.725738][T15101] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.727221][T15101] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.728702][T15101] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.730150][T15101] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.838813][T15114] syzkaller0: left promiscuous mode [ 374.838836][T15114] syzkaller0: left allmulticast mode [ 375.334722][T15140] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 375.628888][T15150] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.781097][T15159] netlink: 'syz.3.3157': attribute type 18 has an invalid length. [ 376.132257][T15181] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 376.657953][T15211] bond6: Unable to set up delay as MII monitoring is disabled [ 376.675837][T15226] netlink: 'syz.0.3177': attribute type 11 has an invalid length. [ 376.677546][T15211] bond6 (unregistering): Released all slaves [ 376.769289][T15212] __nla_validate_parse: 17 callbacks suppressed [ 376.769312][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 376.770085][T15224] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.799975][T15231] net_ratelimit: 18 callbacks suppressed [ 376.800025][T15231] netlink: NAT attribute has 8 unknown bytes [ 376.800058][T15231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.928796][T15233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3180'. [ 376.956217][T15234] trusted_key: syz.1.3180 sent an empty control message without MSG_MORE. [ 377.233087][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 377.474522][T15263] netlink: 'syz.0.3191': attribute type 11 has an invalid length. [ 377.474545][T15263] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3191'. [ 377.543903][T15264] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.609188][T15273] xt_hashlimit: size too large, truncated to 1048576 [ 377.683334][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3198'. [ 377.690417][T15276] openvswitch: netlink: Multiple metadata blocks provided [ 377.988430][T15295] netlink: 'syz.1.3202': attribute type 2 has an invalid length. [ 377.988453][T15295] netlink: 'syz.1.3202': attribute type 1 has an invalid length. [ 378.053942][T15289] batman_adv: batadv0: Interface deactivated: dummy0 [ 378.053968][T15289] batman_adv: batadv0: Removing interface: dummy0 [ 378.306973][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 378.307617][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 378.307933][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 378.308217][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 378.308472][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 378.608341][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.775398][T15335] ip_tables: iptables: counters copy to user failed while replacing table [ 379.140743][T15358] openvswitch: netlink: Flow key attr not present in new flow. [ 379.317310][T15372] netlink: 'syz.4.3231': attribute type 1 has an invalid length. [ 379.595901][T15391] IPVS: length: 150 != 8 [ 379.857624][T15406] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 380.222726][T15430] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 380.369781][T15437] netlink: 'syz.3.3253': attribute type 8 has an invalid length. [ 380.536780][T15450] veth0: entered promiscuous mode [ 380.690053][T15449] veth0: left promiscuous mode [ 380.946951][T15475] v: renamed from veth0_vlan [ 380.956226][ T49] tipc: Resetting bearer [ 381.037028][T15481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 381.066587][T15480] ipvlan2: entered allmulticast mode [ 381.066607][T15480] bond5: entered allmulticast mode [ 381.488259][T15503] Bluetooth: hci0: unsupported parameter 5134 [ 381.488284][T15503] Bluetooth: hci0: unsupported parameter 8192 [ 381.488299][T15503] Bluetooth: hci0: unsupported parameter 5134 [ 381.488313][T15503] Bluetooth: hci0: unsupported parameter 8192 [ 382.271153][T15560] __nla_validate_parse: 24 callbacks suppressed [ 382.271176][T15560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3283'. [ 382.383884][T15563] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 382.716310][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 382.904986][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 383.082720][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.088727][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 383.109607][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 383.109957][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 383.111492][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 383.111786][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 383.147671][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 383.384409][T15615] netlink: 'syz.4.3297': attribute type 27 has an invalid length. [ 383.865126][T15627] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 384.051610][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 384.325118][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.325518][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.325854][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.326207][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.326575][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.329220][T15657] FAULT_INJECTION: forcing a failure. [ 384.329220][T15657] name failslab, interval 1, probability 0, space 0, times 0 [ 384.329250][T15657] CPU: 0 UID: 0 PID: 15657 Comm: syz.3.3308 Not tainted syzkaller #0 PREEMPT(full) [ 384.329271][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.329283][T15657] Call Trace: [ 384.329291][T15657] [ 384.329300][T15657] dump_stack_lvl+0xe8/0x150 [ 384.329335][T15657] should_fail_ex+0x410/0x560 [ 384.329372][T15657] should_failslab+0xa8/0x100 [ 384.329403][T15657] ? dst_alloc+0x105/0x170 [ 384.329519][T15657] kmem_cache_alloc_noprof+0xa1/0x600 [ 384.329544][T15657] ? __pfx_find_exception+0x10/0x10 [ 384.329642][T15657] ? dst_alloc+0x105/0x170 [ 384.329669][T15657] ? fib_lookup+0x76/0x440 [ 384.329699][T15657] dst_alloc+0x105/0x170 [ 384.329731][T15657] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 384.329774][T15657] ? ip_route_output_key_hash+0xd8/0x2a0 [ 384.329808][T15657] ip_route_output_key_hash+0x18d/0x2a0 [ 384.329844][T15657] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 384.329881][T15657] ? lock_acquire+0x115/0x350 [ 384.329917][T15657] ip_route_output_flow+0x2a/0x150 [ 384.329945][T15657] ? security_sk_classify_flow+0x6d/0x150 [ 384.329978][T15657] raw_sendmsg+0x110d/0x1a20 [ 384.330056][T15657] ? __pfx_raw_sendmsg+0x10/0x10 [ 384.330082][T15657] ? __lock_acquire+0x747/0x2de0 [ 384.330143][T15657] ? aa_sock_msg_perm+0xfc/0x210 [ 384.330174][T15657] ? sock_rps_record_flow+0x19/0x350 [ 384.330263][T15657] ? inet_sendmsg+0x298/0x320 [ 384.330291][T15657] ? apparmor_socket_sendmsg+0x98/0x360 [ 384.330324][T15657] ? __pfx_inet_sendmsg+0x10/0x10 [ 384.330353][T15657] sock_sendmsg_nosec+0x10e/0x180 [ 384.330386][T15657] ____sys_sendmsg+0x54e/0x850 [ 384.330415][T15657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.330446][T15657] ? import_iovec+0x73/0xa0 [ 384.330491][T15657] ___sys_sendmsg+0x2a5/0x360 [ 384.330513][T15657] ? __lock_acquire+0x747/0x2de0 [ 384.330541][T15657] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.330571][T15657] ? kstrtouint+0x6e/0xe0 [ 384.330622][T15657] ? __fget_files+0x2a/0x420 [ 384.330642][T15657] ? __fget_files+0x3a2/0x420 [ 384.330674][T15657] __sys_sendmmsg+0x273/0x4d0 [ 384.330704][T15657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 384.330739][T15657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.330782][T15657] ? ksys_write+0x242/0x270 [ 384.330805][T15657] ? __pfx_ksys_write+0x10/0x10 [ 384.330834][T15657] __x64_sys_sendmmsg+0xa0/0xc0 [ 384.330860][T15657] do_syscall_64+0x166/0x520 [ 384.330884][T15657] ? trace_irq_disable+0x3b/0x140 [ 384.330907][T15657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.330930][T15657] ? clear_bhb_loop+0x70/0xc0 [ 384.330958][T15657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.330979][T15657] RIP: 0033:0x7f6a9db9e2d9 [ 384.331000][T15657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.331019][T15657] RSP: 002b:00007f6a9ea78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 384.331042][T15657] RAX: ffffffffffffffda RBX: 00007f6a9de25fa0 RCX: 00007f6a9db9e2d9 [ 384.331059][T15657] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 384.331072][T15657] RBP: 00007f6a9ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 384.331086][T15657] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 384.331099][T15657] R13: 00007f6a9de26038 R14: 00007f6a9de25fa0 R15: 00007ffda942b968 [ 384.331134][T15657] [ 384.481079][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.514957][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.515967][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.538509][T15656] ip_tables: iptables: counters copy to user failed while replacing table [ 384.757507][T15654] netlink: 'syz.0.3306': attribute type 8 has an invalid length. [ 384.830064][T15658] sctp: [Deprecated]: syz.4.3307 (pid 15658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.830064][T15658] Use struct sctp_sack_info instead [ 385.017751][T15627] veth5: entered promiscuous mode [ 385.221984][T15680] netlink: 'syz.1.3313': attribute type 29 has an invalid length. [ 385.342926][T15691] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.535047][T15701] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 385.716327][T15711] netlink: 'syz.1.3324': attribute type 1 has an invalid length. [ 385.844400][T15713] bond7: (slave gretap1): making interface the new active one [ 385.855287][T15713] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 386.057557][T15733] SET target dimension over the limit! [ 386.999031][T15781] bond6 (unregistering): Released all slaves [ 387.028561][T15789] tipc: Started in network mode [ 387.028593][T15789] tipc: Node identity ac14140f, cluster identity 4711 [ 387.029811][T15789] tipc: New replicast peer: 255.255.255.255 [ 387.032059][T15789] tipc: Enabled bearer , priority 10 [ 387.064405][T15790] tipc: Enabling of bearer rejected, already enabled [ 387.545745][T15826] x_tables: unsorted underflow at hook 2 [ 387.581612][T15824] veth7: entered allmulticast mode [ 388.023236][ T5814] tipc: Node number set to 2886997007 [ 388.190348][ T31] audit: type=1800 audit(1791955211.764:6): pid=15854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3375" name="memory.events" dev="tmpfs" ino=3393 res=0 errno=0 [ 388.239642][ T31] audit: type=1804 audit(1791955211.814:7): pid=15855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3375" name="/newroot/667/memory.events" dev="tmpfs" ino=3393 res=1 errno=0 [ 388.616225][T15879] net_ratelimit: 27 callbacks suppressed [ 388.616247][T15879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.683276][T15883] __nla_validate_parse: 10 callbacks suppressed [ 388.683297][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 389.767845][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 389.771341][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 389.782625][T15937] netlink: 'syz.3.3401': attribute type 1 has an invalid length. [ 389.782915][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 389.783230][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 389.911585][T15943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3404'. [ 389.922017][T15939] bond6: (slave geneve5): making interface the new active one [ 389.930554][T15939] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 389.944644][ T1420] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 389.944687][ T1420] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 389.944721][ T1420] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 389.964949][ T144] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.145948][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 390.151134][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 390.151435][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 390.155034][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 390.249866][T15953] can: request_module (can-proto-3) failed. [ 390.609136][T15984] netlink: 'syz.3.3419': attribute type 21 has an invalid length. [ 390.973761][T16011] nbd: couldn't find device at index 15663104 [ 391.157776][T16021] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 391.658380][T16055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.715108][T16057] veth9: entered allmulticast mode [ 391.855897][T16068] FAULT_INJECTION: forcing a failure. [ 391.855897][T16068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.855930][T16068] CPU: 1 UID: 0 PID: 16068 Comm: syz.3.3449 Not tainted syzkaller #0 PREEMPT(full) [ 391.855953][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.855966][T16068] Call Trace: [ 391.855975][T16068] [ 391.855984][T16068] dump_stack_lvl+0xe8/0x150 [ 391.856023][T16068] should_fail_ex+0x410/0x560 [ 391.856060][T16068] _copy_to_iter+0x404/0x1810 [ 391.856116][T16068] ? __pfx__copy_to_iter+0x10/0x10 [ 391.856145][T16068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 391.856215][T16068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 391.856237][T16068] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 391.856266][T16068] __skb_datagram_iter+0xf8/0x980 [ 391.856288][T16068] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 391.856316][T16068] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 391.856354][T16068] skb_copy_datagram_iter+0xb5/0x240 [ 391.856379][T16068] netlink_recvmsg+0x2b9/0xa50 [ 391.856415][T16068] ? __pfx_netlink_recvmsg+0x10/0x10 [ 391.856438][T16068] ? lock_acquire+0x115/0x350 [ 391.856480][T16068] ? aa_sock_msg_perm+0x144/0x210 [ 391.856517][T16068] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 391.856545][T16068] ? security_socket_recvmsg+0x7e/0x2c0 [ 391.856565][T16068] ? __pfx_netlink_recvmsg+0x10/0x10 [ 391.856589][T16068] sock_recvmsg+0x196/0x1e0 [ 391.856621][T16068] ____sys_recvmsg+0x1e6/0x4a0 [ 391.856655][T16068] ? __pfx_____sys_recvmsg+0x10/0x10 [ 391.856694][T16068] ? import_iovec+0x73/0xa0 [ 391.856745][T16068] ___sys_recvmsg+0x213/0x5a0 [ 391.856770][T16068] ? __pfx____sys_recvmsg+0x10/0x10 [ 391.856796][T16068] ? lock_acquire+0x115/0x350 [ 391.856834][T16068] ? __fget_files+0x3a2/0x420 [ 391.856865][T16068] do_recvmmsg+0x31a/0x7f0 [ 391.856898][T16068] ? __pfx_do_recvmmsg+0x10/0x10 [ 391.856933][T16068] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 391.856960][T16068] ? __fget_files+0x3a2/0x420 [ 391.856990][T16068] __x64_sys_recvmmsg+0x198/0x250 [ 391.857017][T16068] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 391.857055][T16068] do_syscall_64+0x166/0x520 [ 391.857077][T16068] ? trace_irq_disable+0x3b/0x140 [ 391.857097][T16068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.857116][T16068] ? clear_bhb_loop+0x70/0xc0 [ 391.857153][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.857174][T16068] RIP: 0033:0x7f6a9db9e2d9 [ 391.857193][T16068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.857231][T16068] RSP: 002b:00007f6a9ea78028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 391.857255][T16068] RAX: ffffffffffffffda RBX: 00007f6a9de25fa0 RCX: 00007f6a9db9e2d9 [ 391.857271][T16068] RDX: 0000000000000007 RSI: 0000200000008d80 RDI: 0000000000000003 [ 391.857286][T16068] RBP: 00007f6a9ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 391.857297][T16068] R10: 0000000000010102 R11: 0000000000000246 R12: 0000000000000001 [ 391.857308][T16068] R13: 00007f6a9de26038 R14: 00007f6a9de25fa0 R15: 00007ffda942b968 [ 391.857341][T16068] [ 392.554065][T16079] IPv6: addrconf: prefix option has invalid lifetime [ 392.559059][T16079] netlink: 'syz.4.3454': attribute type 32 has an invalid length. [ 392.619235][T16079] bond6: option coupled_control: invalid value (97) [ 392.631560][T16079] bond6 (unregistering): Released all slaves [ 392.667097][T16080] bridge0: port 4(veth0) entered blocking state [ 392.667647][T16080] bridge0: port 4(veth0) entered disabled state [ 392.668540][T16080] veth0: entered allmulticast mode [ 392.698412][T16080] veth0: entered promiscuous mode [ 392.706579][T16080] bridge0: port 4(veth0) entered blocking state [ 392.706708][T16080] bridge0: port 4(veth0) entered forwarding state [ 392.861528][T16089] veth1_to_hsr: entered allmulticast mode [ 392.886230][T16089] bridge0: port 3(syz_tun) entered blocking state [ 392.886450][T16089] bridge0: port 3(syz_tun) entered disabled state [ 392.886609][T16089] syz_tun: entered allmulticast mode [ 392.903279][T16089] syz_tun: entered promiscuous mode [ 392.916683][T16089] bridge0: port 3(syz_tun) entered blocking state [ 392.916921][T16089] bridge0: port 3(syz_tun) entered forwarding state [ 392.925245][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 392.962111][T16100] FAULT_INJECTION: forcing a failure. [ 392.962111][T16100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.962157][T16100] CPU: 1 UID: 0 PID: 16100 Comm: syz.0.3461 Not tainted syzkaller #0 PREEMPT(full) [ 392.962181][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.962195][T16100] Call Trace: [ 392.962204][T16100] [ 392.962213][T16100] dump_stack_lvl+0xe8/0x150 [ 392.962251][T16100] should_fail_ex+0x410/0x560 [ 392.962290][T16100] _copy_to_iter+0x59c/0x1810 [ 392.962334][T16100] ? __pfx__copy_to_iter+0x10/0x10 [ 392.962366][T16100] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 392.962391][T16100] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 392.962412][T16100] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 392.962442][T16100] __skb_datagram_iter+0xf8/0x980 [ 392.962465][T16100] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 392.962498][T16100] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 392.962531][T16100] skb_copy_datagram_iter+0xb5/0x240 [ 392.962561][T16100] netlink_recvmsg+0x2b9/0xa50 [ 392.962599][T16100] ? __pfx_netlink_recvmsg+0x10/0x10 [ 392.962623][T16100] ? lock_acquire+0x115/0x350 [ 392.962649][T16100] ? aa_sock_msg_perm+0x144/0x210 [ 392.962685][T16100] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 392.962714][T16100] ? security_socket_recvmsg+0x7e/0x2c0 [ 392.962735][T16100] ? __pfx_netlink_recvmsg+0x10/0x10 [ 392.962759][T16100] sock_recvmsg+0x196/0x1e0 [ 392.962791][T16100] ____sys_recvmsg+0x1e6/0x4a0 [ 392.962825][T16100] ? __pfx_____sys_recvmsg+0x10/0x10 [ 392.962864][T16100] ? import_iovec+0x73/0xa0 [ 392.962909][T16100] ___sys_recvmsg+0x213/0x5a0 [ 392.962939][T16100] ? __pfx____sys_recvmsg+0x10/0x10 [ 392.962977][T16100] ? lock_acquire+0x115/0x350 [ 392.963019][T16100] ? __fget_files+0x3a2/0x420 [ 392.963047][T16100] do_recvmmsg+0x31a/0x7f0 [ 392.963080][T16100] ? __pfx_do_recvmmsg+0x10/0x10 [ 392.963117][T16100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 392.963155][T16100] ? __fget_files+0x3a2/0x420 [ 392.963187][T16100] __x64_sys_recvmmsg+0x198/0x250 [ 392.963215][T16100] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 392.963252][T16100] do_syscall_64+0x166/0x520 [ 392.963276][T16100] ? trace_irq_disable+0x3b/0x140 [ 392.963299][T16100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.963322][T16100] ? clear_bhb_loop+0x70/0xc0 [ 392.963348][T16100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.963370][T16100] RIP: 0033:0x7f5a33d9e2d9 [ 392.963391][T16100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.963410][T16100] RSP: 002b:00007f5a34c4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 392.963434][T16100] RAX: ffffffffffffffda RBX: 00007f5a34025fa0 RCX: 00007f5a33d9e2d9 [ 392.963451][T16100] RDX: 0000000000000007 RSI: 0000200000008d80 RDI: 0000000000000003 [ 392.963465][T16100] RBP: 00007f5a34c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 392.963478][T16100] R10: 0000000000010102 R11: 0000000000000246 R12: 0000000000000001 [ 392.963492][T16100] R13: 00007f5a34026038 R14: 00007f5a34025fa0 R15: 00007fff7aa45b38 [ 392.963527][T16100] [ 393.292135][T16101] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 393.372434][T16104] netlink: 'syz.4.3463': attribute type 83 has an invalid length. [ 393.983413][T16131] ip_tables: iptables: counters copy to user failed while replacing table [ 394.189772][T16139] openvswitch: netlink: Message has 8 unknown bytes. [ 394.375465][T16138] syzkaller0: entered promiscuous mode [ 394.375500][T16138] syzkaller0: entered allmulticast mode [ 395.081013][T16177] __nla_validate_parse: 141 callbacks suppressed [ 395.081037][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 395.193511][T16183] x_tables: unsorted underflow at hook 2 [ 395.230428][T16184] FAULT_INJECTION: forcing a failure. [ 395.230428][T16184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.230465][T16184] CPU: 1 UID: 0 PID: 16184 Comm: syz.1.3488 Not tainted syzkaller #0 PREEMPT(full) [ 395.230488][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.230501][T16184] Call Trace: [ 395.230509][T16184] [ 395.230519][T16184] dump_stack_lvl+0xe8/0x150 [ 395.230556][T16184] should_fail_ex+0x410/0x560 [ 395.230591][T16184] _copy_to_iter+0x59c/0x1810 [ 395.230652][T16184] ? __pfx__copy_to_iter+0x10/0x10 [ 395.230683][T16184] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.230708][T16184] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 395.230729][T16184] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 395.230758][T16184] __skb_datagram_iter+0xf8/0x980 [ 395.230780][T16184] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 395.230812][T16184] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 395.230845][T16184] skb_copy_datagram_iter+0xb5/0x240 [ 395.230875][T16184] netlink_recvmsg+0x2b9/0xa50 [ 395.230913][T16184] ? __pfx_netlink_recvmsg+0x10/0x10 [ 395.230937][T16184] ? lock_acquire+0x115/0x350 [ 395.230964][T16184] ? aa_sock_msg_perm+0x144/0x210 [ 395.231001][T16184] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 395.231031][T16184] ? security_socket_recvmsg+0x7e/0x2c0 [ 395.231061][T16184] ? __pfx_netlink_recvmsg+0x10/0x10 [ 395.231087][T16184] sock_recvmsg+0x196/0x1e0 [ 395.231120][T16184] ____sys_recvmsg+0x1e6/0x4a0 [ 395.231153][T16184] ? __pfx_____sys_recvmsg+0x10/0x10 [ 395.231193][T16184] ? import_iovec+0x73/0xa0 [ 395.231229][T16184] ___sys_recvmsg+0x213/0x5a0 [ 395.231259][T16184] ? __pfx____sys_recvmsg+0x10/0x10 [ 395.231288][T16184] ? lock_acquire+0x115/0x350 [ 395.231328][T16184] ? __fget_files+0x3a2/0x420 [ 395.231359][T16184] do_recvmmsg+0x31a/0x7f0 [ 395.231399][T16184] ? __pfx_do_recvmmsg+0x10/0x10 [ 395.231436][T16184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 395.231464][T16184] ? __fget_files+0x3a2/0x420 [ 395.231496][T16184] __x64_sys_recvmmsg+0x198/0x250 [ 395.231523][T16184] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 395.231560][T16184] do_syscall_64+0x166/0x520 [ 395.231584][T16184] ? trace_irq_disable+0x3b/0x140 [ 395.231608][T16184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.231631][T16184] ? clear_bhb_loop+0x70/0xc0 [ 395.231659][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.231692][T16184] RIP: 0033:0x7f114ff9e2d9 [ 395.231711][T16184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.231729][T16184] RSP: 002b:00007f1150f1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 395.231751][T16184] RAX: ffffffffffffffda RBX: 00007f1150225fa0 RCX: 00007f114ff9e2d9 [ 395.231766][T16184] RDX: 0000000000000007 RSI: 0000200000008d80 RDI: 0000000000000003 [ 395.231779][T16184] RBP: 00007f1150f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 395.231792][T16184] R10: 0000000000010102 R11: 0000000000000246 R12: 0000000000000001 [ 395.231804][T16184] R13: 00007f1150226038 R14: 00007f1150225fa0 R15: 00007ffc55462e08 [ 395.231838][T16184] [ 395.664807][T16194] netlink: 'syz.3.3492': attribute type 1 has an invalid length. [ 395.664831][T16194] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3492'. [ 396.099870][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3500'. [ 396.099903][T16216] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 396.126200][T16216] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3500'. [ 396.178545][T16222] netlink: 'syz.1.3502': attribute type 3 has an invalid length. [ 396.181089][T16225] x_tables: unsorted underflow at hook 2 [ 396.583711][T16251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3513'. [ 396.666500][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'. [ 396.666700][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'. [ 396.776759][T16256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3514'. [ 396.796034][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3514'. [ 397.288786][T16285] x_tables: unsorted underflow at hook 2 [ 397.353093][T16290] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 397.353134][T16290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.451327][T16288] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3521'. [ 397.893030][T16305] xfrm0: Caught tx_queue_len zero misconfig [ 398.088257][T16319] x_tables: unsorted underflow at hook 2 [ 398.131645][T16321] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 398.634986][T16347] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 398.881112][T16355] netlink: 'syz.1.3544': attribute type 21 has an invalid length. [ 398.992821][T16363] x_tables: unsorted underflow at hook 2 [ 399.082616][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.185366][T16369] netlink: Conntrack attr has 8 unknown bytes [ 399.185404][T16369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.250306][T16371] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 399.674321][T16386] Bluetooth: hci0: unsupported parameter 5161 [ 399.674345][T16386] Bluetooth: hci0: unsupported parameter 8192 [ 399.674358][T16386] Bluetooth: hci0: unsupported parameter 5161 [ 399.674370][T16386] Bluetooth: hci0: unsupported parameter 8192 [ 399.702869][T16386] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 399.704596][T16386] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 399.950346][T16394] x_tables: unsorted underflow at hook 2 [ 400.757327][T16437] netlink: 'syz.3.3565': attribute type 10 has an invalid length. [ 401.227181][T16457] __nla_validate_parse: 7 callbacks suppressed [ 401.227200][T16457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3572'. [ 401.231252][T16456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3575'. [ 401.275565][T16462] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.276183][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'. [ 401.276495][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'. [ 401.342547][T16456] xt_CT: No such helper "snmp_trap" [ 401.409065][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'. [ 403.600426][T16502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3586'. [ 403.680317][T16511] x_tables: duplicate underflow at hook 2 [ 403.745523][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 403.912231][T16523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3596'. [ 403.923007][T16523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3596'. [ 404.449408][T16560] netlink: 'syz.4.3610': attribute type 8 has an invalid length. [ 404.560051][T16566] FAULT_INJECTION: forcing a failure. [ 404.560051][T16566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.560084][T16566] CPU: 0 UID: 0 PID: 16566 Comm: syz.3.3611 Not tainted syzkaller #0 PREEMPT(full) [ 404.560107][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.560117][T16566] Call Trace: [ 404.560123][T16566] [ 404.560130][T16566] dump_stack_lvl+0xe8/0x150 [ 404.560158][T16566] should_fail_ex+0x410/0x560 [ 404.560185][T16566] _copy_from_user+0x2d/0xb0 [ 404.560210][T16566] ___sys_recvmsg+0x173/0x5a0 [ 404.560233][T16566] ? __pfx____sys_recvmsg+0x10/0x10 [ 404.560254][T16566] ? lock_acquire+0x115/0x350 [ 404.560284][T16566] ? __fget_files+0x3a2/0x420 [ 404.560306][T16566] do_recvmmsg+0x31a/0x7f0 [ 404.560334][T16566] ? __pfx_do_recvmmsg+0x10/0x10 [ 404.560360][T16566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.560381][T16566] ? __fget_files+0x3a2/0x420 [ 404.560403][T16566] __x64_sys_recvmmsg+0x198/0x250 [ 404.560423][T16566] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 404.560450][T16566] do_syscall_64+0x166/0x520 [ 404.560468][T16566] ? trace_irq_disable+0x3b/0x140 [ 404.560486][T16566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.560501][T16566] ? clear_bhb_loop+0x70/0xc0 [ 404.560520][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.560535][T16566] RIP: 0033:0x7f6a9db9e2d9 [ 404.560550][T16566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.560563][T16566] RSP: 002b:00007f6a9ea78028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 404.560581][T16566] RAX: ffffffffffffffda RBX: 00007f6a9de25fa0 RCX: 00007f6a9db9e2d9 [ 404.560592][T16566] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 404.560602][T16566] RBP: 00007f6a9ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 404.560612][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.560621][T16566] R13: 00007f6a9de26038 R14: 00007f6a9de25fa0 R15: 00007ffda942b968 [ 404.560646][T16566] [ 404.584214][T16566] netlink: 'syz.3.3611': attribute type 8 has an invalid length. [ 404.601855][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 406.240926][T16638] __nla_validate_parse: 7 callbacks suppressed [ 406.240948][T16638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3634'. [ 406.240972][T16638] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 406.559255][T16648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3636'. [ 407.567056][T16684] veth1_to_hsr: entered allmulticast mode [ 407.675594][T16674] syzkaller1: entered promiscuous mode [ 407.675618][T16674] syzkaller1: entered allmulticast mode [ 408.175615][T16711] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 408.283340][T16718] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 408.313096][T16717] netlink: 'syz.4.3658': attribute type 8 has an invalid length. [ 408.368695][T16720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3657'. [ 408.480908][T16725] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 408.568646][T16725] bond2: entered promiscuous mode [ 408.584772][T16725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.587457][T16726] tipc: Enabling of bearer rejected, already enabled [ 408.644360][T16732] netlink: 'syz.3.3661': attribute type 8 has an invalid length. [ 408.687655][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3665'. [ 408.800917][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'. [ 408.930722][ T31] audit: type=1804 audit(1791955232.504:8): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3670" name="/newroot/748/cgroup.controllers" dev="tmpfs" ino=3804 res=1 errno=0 [ 408.930966][ T31] audit: type=1800 audit(1791955232.504:9): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3670" name="cgroup.controllers" dev="tmpfs" ino=3804 res=0 errno=0 [ 409.046838][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3672'. [ 409.157338][T16768] sch_fq: defrate 0 ignored. [ 409.769586][T16795] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.770674][T16796] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.948030][T16800] veth1_macvtap: left promiscuous mode [ 410.167289][T16819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3693'. [ 410.506189][T16835] FAULT_INJECTION: forcing a failure. [ 410.506189][T16835] name failslab, interval 1, probability 0, space 0, times 0 [ 410.506225][T16835] CPU: 1 UID: 0 PID: 16835 Comm: syz.3.3700 Not tainted syzkaller #0 PREEMPT(full) [ 410.506250][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.506264][T16835] Call Trace: [ 410.506273][T16835] [ 410.506283][T16835] dump_stack_lvl+0xe8/0x150 [ 410.506322][T16835] should_fail_ex+0x410/0x560 [ 410.506360][T16835] should_failslab+0xa8/0x100 [ 410.506400][T16835] ? skb_clone+0x212/0x3a0 [ 410.506426][T16835] kmem_cache_alloc_noprof+0xa1/0x600 [ 410.506453][T16835] ? skb_clone+0x212/0x3a0 [ 410.506483][T16835] skb_clone+0x212/0x3a0 [ 410.506510][T16835] __netlink_deliver_tap+0x413/0x860 [ 410.506551][T16835] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.506579][T16835] netlink_deliver_tap+0x19c/0x1b0 [ 410.506608][T16835] netlink_dump+0x95b/0xee0 [ 410.506648][T16835] ? __pfx_netlink_dump+0x10/0x10 [ 410.506687][T16835] ? netlink_recvmsg+0x5bf/0xa50 [ 410.506713][T16835] ? kmem_cache_free+0x182/0x650 [ 410.506747][T16835] netlink_recvmsg+0x683/0xa50 [ 410.506785][T16835] ? __pfx_netlink_recvmsg+0x10/0x10 [ 410.506811][T16835] ? lock_acquire+0x115/0x350 [ 410.506845][T16835] ? aa_sock_msg_perm+0x144/0x210 [ 410.506882][T16835] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 410.506914][T16835] ? security_socket_recvmsg+0x7e/0x2c0 [ 410.506939][T16835] ? __pfx_netlink_recvmsg+0x10/0x10 [ 410.506968][T16835] sock_recvmsg+0x196/0x1e0 [ 410.507002][T16835] ____sys_recvmsg+0x1e6/0x4a0 [ 410.507036][T16835] ? __pfx_____sys_recvmsg+0x10/0x10 [ 410.507079][T16835] ? import_iovec+0x73/0xa0 [ 410.507116][T16835] ___sys_recvmsg+0x213/0x5a0 [ 410.507147][T16835] ? __pfx____sys_recvmsg+0x10/0x10 [ 410.507178][T16835] ? lock_acquire+0x115/0x350 [ 410.507219][T16835] ? __fget_files+0x3a2/0x420 [ 410.507253][T16835] do_recvmmsg+0x31a/0x7f0 [ 410.507287][T16835] ? __pfx_do_recvmmsg+0x10/0x10 [ 410.507338][T16835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 410.507392][T16835] ? __fget_files+0x3a2/0x420 [ 410.507426][T16835] __x64_sys_recvmmsg+0x198/0x250 [ 410.507455][T16835] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 410.507491][T16835] do_syscall_64+0x166/0x520 [ 410.507515][T16835] ? trace_irq_disable+0x3b/0x140 [ 410.507539][T16835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.507562][T16835] ? clear_bhb_loop+0x70/0xc0 [ 410.507589][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.507611][T16835] RIP: 0033:0x7f6a9db9e2d9 [ 410.507632][T16835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.507651][T16835] RSP: 002b:00007f6a9ea78028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 410.507675][T16835] RAX: ffffffffffffffda RBX: 00007f6a9de25fa0 RCX: 00007f6a9db9e2d9 [ 410.507691][T16835] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 410.507705][T16835] RBP: 00007f6a9ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 410.507719][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.507732][T16835] R13: 00007f6a9de26038 R14: 00007f6a9de25fa0 R15: 00007ffda942b968 [ 410.507787][T16835] [ 410.553590][T16835] netlink: 'syz.3.3700': attribute type 8 has an invalid length. [ 410.764878][T16839] netlink: 'syz.2.3699': attribute type 8 has an invalid length. [ 410.933064][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933064][T16844] Use struct sctp_assoc_value instead [ 410.933101][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933101][T16844] Use struct sctp_assoc_value instead [ 410.933126][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933126][T16844] Use struct sctp_assoc_value instead [ 410.933149][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933149][T16844] Use struct sctp_assoc_value instead [ 410.933173][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933173][T16844] Use struct sctp_assoc_value instead [ 410.933197][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933197][T16844] Use struct sctp_assoc_value instead [ 410.933230][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933230][T16844] Use struct sctp_assoc_value instead [ 410.933253][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933253][T16844] Use struct sctp_assoc_value instead [ 410.933274][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933274][T16844] Use struct sctp_assoc_value instead [ 410.933296][T16844] sctp: [Deprecated]: syz.4.3701 (pid 16844) Use of int in max_burst socket option. [ 410.933296][T16844] Use struct sctp_assoc_value instead [ 411.247456][T16851] tipc: New replicast peer: 255.255.255.255 [ 411.248587][T16851] tipc: Enabled bearer , priority 10 [ 411.486054][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3709'. [ 411.692082][T16878] netlink: 'syz.0.3715': attribute type 8 has an invalid length. [ 411.960174][T16898] netlink: 'syz.2.3721': attribute type 30 has an invalid length. [ 411.972708][T16849] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 412.097261][T16906] xt_TCPMSS: Only works on TCP SYN packets [ 412.338874][T16920] netlink: 'syz.0.3729': attribute type 1 has an invalid length. [ 412.398388][T16920] bond3: entered promiscuous mode [ 412.398827][T16920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.716530][T16939] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3734'. [ 412.828653][T16951] netlink: 'syz.0.3738': attribute type 2 has an invalid length. [ 412.828677][T16951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3738'. [ 412.859447][T16951] : entered promiscuous mode [ 412.871069][T16939] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3734'. [ 412.950629][T16953] ovs-s: entered promiscuous mode [ 413.062413][T16960] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 413.062453][T16960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.069841][T16960] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 413.069881][T16960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.375454][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 413.376270][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 413.376619][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 413.376908][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 413.378535][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 413.379154][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 413.922834][T17015] netlink: 'syz.0.3761': attribute type 3 has an invalid length. [ 414.171153][T17026] netlink: 'syz.3.3768': attribute type 1 has an invalid length. [ 414.376253][T17034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.376648][T17035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.558626][T17043] bond7: option downdelay: invalid value (18446744073709551615) [ 414.558653][T17043] bond7: option downdelay: allowed values 0 - 2147483647 [ 414.561108][T17043] bond7 (unregistering): Released all slaves [ 414.933403][T17061] syzkaller0: entered promiscuous mode [ 414.933429][T17061] syzkaller0: entered allmulticast mode [ 415.046652][T17058] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.302457][T17083] netlink: 'syz.4.3790': attribute type 1 has an invalid length. [ 415.452076][T17090] set match dimension is over the limit! [ 415.505492][T17089] syzkaller0: entered promiscuous mode [ 415.505519][T17089] syzkaller0: entered allmulticast mode [ 415.507034][T17091] xfrm0: Caught tx_queue_len zero misconfig [ 415.675584][ T5622] Bluetooth: hci3: link tx timeout [ 415.675604][ T5622] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 415.676352][T17106] ip_tables: iptables: counters copy to user failed while replacing table [ 417.410817][T17120] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 417.410847][T17120] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 417.622255][T17132] xt_TCPMSS: Only works on TCP SYN packets [ 417.640966][T17131] __nla_validate_parse: 6 callbacks suppressed [ 417.640989][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 417.731075][ T5618] Bluetooth: hci3: command 0x0405 tx timeout [ 417.870183][T17144] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 417.910408][T17144] xt_recent: Unsupported userspace flags (000000b1) [ 418.016312][T17150] FAULT_INJECTION: forcing a failure. [ 418.016312][T17150] name failslab, interval 1, probability 0, space 0, times 0 [ 418.016348][T17150] CPU: 0 UID: 0 PID: 17150 Comm: syz.1.3810 Not tainted syzkaller #0 PREEMPT(full) [ 418.016373][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.016387][T17150] Call Trace: [ 418.016395][T17150] [ 418.016405][T17150] dump_stack_lvl+0xe8/0x150 [ 418.016445][T17150] should_fail_ex+0x410/0x560 [ 418.016483][T17150] should_failslab+0xa8/0x100 [ 418.016515][T17150] ? skb_clone+0x212/0x3a0 [ 418.016541][T17150] kmem_cache_alloc_noprof+0xa1/0x600 [ 418.016568][T17150] ? skb_clone+0x212/0x3a0 [ 418.016599][T17150] skb_clone+0x212/0x3a0 [ 418.016626][T17150] __netlink_deliver_tap+0x413/0x860 [ 418.016667][T17150] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.016695][T17150] netlink_deliver_tap+0x19c/0x1b0 [ 418.016723][T17150] netlink_dump+0x95b/0xee0 [ 418.016762][T17150] ? __pfx_netlink_dump+0x10/0x10 [ 418.016800][T17150] ? netlink_recvmsg+0x5bf/0xa50 [ 418.016826][T17150] ? kmem_cache_free+0x182/0x650 [ 418.016860][T17150] netlink_recvmsg+0x683/0xa50 [ 418.016897][T17150] ? __pfx_netlink_recvmsg+0x10/0x10 [ 418.016929][T17150] ? __lock_acquire+0x747/0x2de0 [ 418.016965][T17150] ? __pfx_netlink_recvmsg+0x10/0x10 [ 418.016993][T17150] sock_recvmsg_nosec+0x130/0x170 [ 418.017026][T17150] ____sys_recvmsg+0x3e3/0x4a0 [ 418.017059][T17150] ? __pfx_____sys_recvmsg+0x10/0x10 [ 418.017100][T17150] ? import_iovec+0x73/0xa0 [ 418.017163][T17150] ___sys_recvmsg+0x213/0x5a0 [ 418.017195][T17150] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.017226][T17150] ? lock_acquire+0x115/0x350 [ 418.017284][T17150] do_recvmmsg+0x31a/0x7f0 [ 418.017318][T17150] ? __pfx_do_recvmmsg+0x10/0x10 [ 418.017357][T17150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.017387][T17150] ? __fget_files+0x3a2/0x420 [ 418.017423][T17150] __x64_sys_recvmmsg+0x198/0x250 [ 418.017452][T17150] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 418.017491][T17150] do_syscall_64+0x166/0x520 [ 418.017515][T17150] ? trace_irq_disable+0x3b/0x140 [ 418.017541][T17150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.017565][T17150] ? clear_bhb_loop+0x70/0xc0 [ 418.017593][T17150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.017615][T17150] RIP: 0033:0x7f114ff9e2d9 [ 418.017636][T17150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.017655][T17150] RSP: 002b:00007f1150f1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.017680][T17150] RAX: ffffffffffffffda RBX: 00007f1150225fa0 RCX: 00007f114ff9e2d9 [ 418.017697][T17150] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 418.017712][T17150] RBP: 00007f1150f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.017726][T17150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.017740][T17150] R13: 00007f1150226038 R14: 00007f1150225fa0 R15: 00007ffc55462e08 [ 418.017777][T17150] [ 418.019405][T17150] netlink: 'syz.1.3810': attribute type 8 has an invalid length. [ 418.533352][T17164] netlink: 'syz.1.3818': attribute type 8 has an invalid length. [ 418.684501][T17174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.710574][T17174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.752116][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'. [ 418.930067][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 418.951401][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 419.064864][T17194] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.084788][T17192] netlink: 'syz.3.3826': attribute type 1 has an invalid length. [ 419.143197][T17192] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 419.146554][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3826'. [ 419.153684][T17192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.367355][T17209] netlink: 'syz.1.3829': attribute type 8 has an invalid length. [ 419.451293][T17211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.537491][T17220] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 419.604866][T17220] bond8: option mode: invalid value (11) [ 419.634556][T17220] bond8 (unregistering): Released all slaves [ 419.645251][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3836'. [ 419.665364][T17225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.710003][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3835'. [ 419.794821][ T5976] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 419.796847][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'. [ 419.797855][T17233] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 420.429246][T17273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3855'. [ 420.808605][T17294] openvswitch: netlink: IP tunnel dst address not specified [ 420.808641][T17294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.017235][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 421.039027][T17306] hsr_slave_0: left promiscuous mode [ 421.049155][T17306] hsr_slave_1: left promiscuous mode [ 421.411718][T17328] netlink: 'syz.4.3881': attribute type 4 has an invalid length. [ 421.445331][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.445784][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.446274][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.461048][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.515782][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.699403][T17342] netlink: 'syz.1.3882': attribute type 8 has an invalid length. [ 422.475100][T17378] ip6tnl0: entered promiscuous mode [ 422.477349][T17377] ip6tnl0: left promiscuous mode [ 422.666936][T17389] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 422.801990][ T31] audit: type=1800 audit(1791955246.374:10): pid=17401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3905" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=4010 res=0 errno=0 [ 422.847459][T17397] __nla_validate_parse: 6 callbacks suppressed [ 422.847479][T17397] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3903'. [ 423.584363][T17411] netlink: 'syz.3.3908': attribute type 10 has an invalid length. [ 423.620054][T17411] bond7: (slave veth0_to_bond): Releasing active interface [ 423.640830][T17411] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 423.871089][T17444] vlan0: left promiscuous mode [ 423.912146][T17444] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 423.917177][T17444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.938401][T17444] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 423.955644][T17444] erspan2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 423.962526][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 423.978614][T17444] ieee802154 phy0 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 423.988094][T17444] geneve2: left promiscuous mode [ 423.992120][T17444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.046165][T17444] 8021q: adding VLAN 0 to HW filter on device bond6 [ 424.049462][T17444] veth5: left promiscuous mode [ 424.071044][T17444] 8021q: adding VLAN 0 to HW filter on device bond7 [ 424.118254][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 424.134488][ T8472] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 424.134735][ T8472] bond2: (slave veth3): making interface the new active one [ 424.180252][ T8472] bond2: active interface up! [ 424.245343][T17469] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3929'. [ 424.247436][T17454] net_ratelimit: 61 callbacks suppressed [ 424.247453][T17454] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.436359][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 424.471852][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3933'. [ 424.736486][T17502] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.945660][T17513] netlink: 'syz.4.3945': attribute type 5 has an invalid length. [ 424.976995][T17527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3947'. [ 424.980341][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3948'. [ 425.319732][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3951'. [ 425.503302][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3954'. [ 425.527521][T17556] pim6reg: entered allmulticast mode [ 425.655098][T17565] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3959'. [ 425.655126][T17565] openvswitch: netlink: Message has 512 unknown bytes. [ 425.939826][T17571] netlink: 'syz.3.3962': attribute type 8 has an invalid length. [ 426.256261][T17587] netlink: 'syz.0.3967': attribute type 4 has an invalid length. [ 426.409099][T17593] netlink: 'syz.3.3963': attribute type 15 has an invalid length. [ 426.430357][T17602] gretap3: entered promiscuous mode [ 426.430381][T17602] gretap3: entered allmulticast mode [ 426.509929][T17593] netlink: 'syz.3.3963': attribute type 15 has an invalid length. [ 426.582745][ T8472] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 426.583912][ T144] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 426.583980][ T144] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 426.584017][ T144] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 426.718170][T17615] netlink: 'syz.0.3973': attribute type 8 has an invalid length. [ 426.999565][T17627] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 427.456579][T17642] xt_hashlimit: size too large, truncated to 1048576 [ 427.884806][T17669] ksmbd: Unknown IPC event: 1, ignore. [ 427.997868][T17673] __nla_validate_parse: 7 callbacks suppressed [ 427.997888][T17673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3993'. [ 428.025004][T17670] veth0_macvtap: Caught tx_queue_len zero misconfig [ 428.030762][T17675] ksmbd: Unknown IPC event: 1, ignore. [ 428.046816][T17670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3993'. [ 428.374281][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3999'. [ 428.683673][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 428.802651][T17708] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4005'. [ 429.321368][T17727] 8021q: VLANs not supported on gre0 [ 429.494296][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4016'. [ 429.494902][T17734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4016'. [ 429.495142][T17734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4016'. [ 429.497421][T17734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4016'. [ 429.497586][T17734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4016'. [ 429.803562][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 429.826008][T17743] x_tables: unsorted underflow at hook 2 [ 430.239862][T17752] netlink: 'syz.1.4023': attribute type 8 has an invalid length. [ 430.475882][T17757] netlink: 'syz.1.4025': attribute type 8 has an invalid length. [ 430.858673][T17771] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.629547][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629547][T17800] Use struct sctp_sack_info instead [ 431.629600][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629600][T17800] Use struct sctp_sack_info instead [ 431.629641][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629641][T17800] Use struct sctp_sack_info instead [ 431.629682][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629682][T17800] Use struct sctp_sack_info instead [ 431.629722][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629722][T17800] Use struct sctp_sack_info instead [ 431.629761][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629761][T17800] Use struct sctp_sack_info instead [ 431.629799][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629799][T17800] Use struct sctp_sack_info instead [ 431.629839][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629839][T17800] Use struct sctp_sack_info instead [ 431.629881][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629881][T17800] Use struct sctp_sack_info instead [ 431.629923][T17800] sctp: [Deprecated]: syz.2.4038 (pid 17800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.629923][T17800] Use struct sctp_sack_info instead [ 432.362632][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 432.597105][T17838] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 432.659015][T17838] 8021q: adding VLAN 0 to HW filter on device bond8 [ 432.726340][T17838] bond8: (slave veth0_to_bond): making interface the new active one [ 432.748386][T17838] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 432.794625][T17847] bond8: entered promiscuous mode [ 432.794649][T17847] veth0_to_bond: entered promiscuous mode [ 432.800659][T17847] bond8: entered allmulticast mode [ 432.800678][T17847] veth0_to_bond: entered allmulticast mode [ 432.880261][T17846] IPVS: Error connecting to the multicast addr [ 433.286841][T17867] __nla_validate_parse: 67 callbacks suppressed [ 433.286863][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4054'. [ 433.603034][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4058'. [ 433.603057][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4058'. [ 433.938384][T17888] bond0: Caught tx_queue_len zero misconfig [ 434.026185][T17857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4052'. [ 434.097657][T17892] netlink: 'syz.1.4063': attribute type 8 has an invalid length. [ 434.352254][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4064'. [ 434.972546][T17929] netlink: 'syz.0.4075': attribute type 8 has an invalid length. [ 435.237637][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 435.262527][T17944] ip_tables: iptables: counters copy to user failed while replacing table [ 435.800932][T17964] syzkaller1: entered promiscuous mode [ 435.800982][T17964] syzkaller1: entered allmulticast mode [ 435.998602][T17975] FAULT_INJECTION: forcing a failure. [ 435.998602][T17975] name failslab, interval 1, probability 0, space 0, times 0 [ 435.998637][T17975] CPU: 1 UID: 0 PID: 17975 Comm: syz.3.4089 Not tainted syzkaller #0 PREEMPT(full) [ 435.998662][T17975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.998693][T17975] Call Trace: [ 435.998702][T17975] [ 435.998711][T17975] dump_stack_lvl+0xe8/0x150 [ 435.998750][T17975] should_fail_ex+0x410/0x560 [ 435.998788][T17975] should_failslab+0xa8/0x100 [ 435.998820][T17975] ? skb_clone+0x212/0x3a0 [ 435.998844][T17975] kmem_cache_alloc_noprof+0xa1/0x600 [ 435.998871][T17975] ? skb_clone+0x212/0x3a0 [ 435.998902][T17975] skb_clone+0x212/0x3a0 [ 435.998935][T17975] __netlink_deliver_tap+0x413/0x860 [ 435.998973][T17975] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.999021][T17975] netlink_deliver_tap+0x19c/0x1b0 [ 435.999050][T17975] netlink_dump+0x95b/0xee0 [ 435.999090][T17975] ? __pfx_netlink_dump+0x10/0x10 [ 435.999135][T17975] ? netlink_recvmsg+0x5bf/0xa50 [ 435.999162][T17975] ? kmem_cache_free+0x182/0x650 [ 435.999197][T17975] netlink_recvmsg+0x683/0xa50 [ 435.999236][T17975] ? __pfx_netlink_recvmsg+0x10/0x10 [ 435.999270][T17975] ? __lock_acquire+0x747/0x2de0 [ 435.999300][T17975] ? __pfx_netlink_recvmsg+0x10/0x10 [ 435.999324][T17975] sock_recvmsg_nosec+0x130/0x170 [ 435.999350][T17975] ____sys_recvmsg+0x3e3/0x4a0 [ 435.999377][T17975] ? __pfx_____sys_recvmsg+0x10/0x10 [ 435.999417][T17975] ? import_iovec+0x73/0xa0 [ 435.999448][T17975] ___sys_recvmsg+0x213/0x5a0 [ 435.999472][T17975] ? __pfx____sys_recvmsg+0x10/0x10 [ 435.999495][T17975] ? lock_acquire+0x115/0x350 [ 435.999539][T17975] do_recvmmsg+0x31a/0x7f0 [ 435.999566][T17975] ? __pfx_do_recvmmsg+0x10/0x10 [ 435.999595][T17975] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.999618][T17975] ? __fget_files+0x3a2/0x420 [ 435.999643][T17975] __x64_sys_recvmmsg+0x198/0x250 [ 435.999665][T17975] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 435.999701][T17975] do_syscall_64+0x166/0x520 [ 435.999725][T17975] ? trace_irq_disable+0x3b/0x140 [ 435.999750][T17975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.999774][T17975] ? clear_bhb_loop+0x70/0xc0 [ 435.999802][T17975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.999825][T17975] RIP: 0033:0x7f6a9db9e2d9 [ 435.999847][T17975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.999865][T17975] RSP: 002b:00007f6a9ea78028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 435.999890][T17975] RAX: ffffffffffffffda RBX: 00007f6a9de25fa0 RCX: 00007f6a9db9e2d9 [ 435.999907][T17975] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 435.999922][T17975] RBP: 00007f6a9ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 435.999936][T17975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.999950][T17975] R13: 00007f6a9de26038 R14: 00007f6a9de25fa0 R15: 00007ffda942b968 [ 435.999986][T17975] [ 436.141037][T17975] netlink: 'syz.3.4089': attribute type 8 has an invalid length. [ 436.379098][T17979] netlink: 'syz.2.4090': attribute type 1 has an invalid length. [ 436.379123][T17979] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4090'. [ 436.379381][T17979] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 436.424316][T17981] netlink: 'syz.2.4090': attribute type 1 has an invalid length. [ 436.424340][T17981] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4090'. [ 436.428351][T17979] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 436.553817][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 436.597622][T17986] netlink: 'syz.0.4092': attribute type 2 has an invalid length. [ 436.611350][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 436.611433][T17986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.611444][T17986] IPv6: NLM_F_CREATE should be set when creating new route [ 436.611470][T17986] IPv6: NLM_F_CREATE should be set when creating new route [ 436.637897][T17991] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 436.755149][T17992] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 436.759930][T17992] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 436.759987][T17992] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 436.853155][T17999] netlink: 'syz.1.4096': attribute type 1 has an invalid length. [ 436.878248][T17992] bond9: entered promiscuous mode [ 436.881190][T18004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.890431][T17992] bond9: entered allmulticast mode [ 436.891775][T17992] 8021q: adding VLAN 0 to HW filter on device bond9 [ 436.925936][T17996] batman_adv: batadv0: Adding interface: syz_tun [ 436.925956][T17996] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.925989][T17996] batman_adv: batadv0: Interface activated: syz_tun [ 437.029282][T18007] bond9: (slave geneve6): making interface the new active one [ 437.031797][T18007] bond9: (slave geneve6): Enslaving as an active interface with an up link [ 437.072142][T18009] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.093768][ T1346] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 437.093872][ T1346] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 437.096292][ T1346] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 437.096340][ T1346] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 437.612758][T18023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.015436][T18041] netlink: 'syz.3.4111': attribute type 4 has an invalid length. [ 438.154487][T18051] netlink: 'syz.0.4112': attribute type 22 has an invalid length. [ 438.263685][T18051] netlink: 'syz.0.4112': attribute type 22 has an invalid length. [ 439.439625][T18108] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 439.830700][T18119] ip_tables: iptables: counters copy to user failed while replacing table [ 439.851506][T18119] netlink: 'syz.3.4130': attribute type 4 has an invalid length. [ 440.021521][T18130] __nla_validate_parse: 7 callbacks suppressed [ 440.021543][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4132'. [ 440.022138][T18133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4133'. [ 440.072220][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4132'. [ 440.089413][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4133'. [ 440.412166][T18145] Cannot find set identified by id 0 to match [ 440.421140][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'. [ 440.718929][T18161] xt_HMARK: spi-set and port-set can't be combined [ 440.721296][T18162] xt_HMARK: spi-set and port-set can't be combined [ 440.924983][T18170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4145'. [ 441.356519][T18198] bridge0: port 1(veth0) entered blocking state [ 441.356637][T18198] bridge0: port 1(veth0) entered disabled state [ 441.356823][T18198] veth0: entered allmulticast mode [ 441.388549][T18198] veth0: entered promiscuous mode [ 441.456379][T18198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.823705][T18220] syzkaller0: entered promiscuous mode [ 441.823729][T18220] syzkaller0: entered allmulticast mode [ 442.171776][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4164'. [ 442.171823][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4164'. [ 442.218085][T18232] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4164'. [ 442.288151][T18240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4167'. [ 442.308773][T18236] netlink: 'syz.4.4165': attribute type 2 has an invalid length. [ 442.389979][T18239] netlink: 'syz.3.4169': attribute type 1 has an invalid length. [ 442.390003][T18239] netlink: 'syz.3.4169': attribute type 2 has an invalid length. [ 442.464936][T18244] smc: net device lo applied user defined pnetid SYZ0 [ 442.465189][T18244] smc: smcd device lo applied user defined pnetid SYZ0 [ 442.754788][T18260] bond_slave_0: entered promiscuous mode [ 442.754812][T18260] bond_slave_0: entered allmulticast mode [ 442.841498][T18262] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 442.841570][T18262] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 443.037788][T18276] batadv_slave_0: Caught tx_queue_len zero misconfig [ 443.123978][T18282] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 443.179280][T18287] FAULT_INJECTION: forcing a failure. [ 443.179280][T18287] name failslab, interval 1, probability 0, space 0, times 0 [ 443.179317][T18287] CPU: 1 UID: 0 PID: 18287 Comm: syz.3.4184 Not tainted syzkaller #0 PREEMPT(full) [ 443.179343][T18287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.179357][T18287] Call Trace: [ 443.179365][T18287] [ 443.179375][T18287] dump_stack_lvl+0xe8/0x150 [ 443.179413][T18287] should_fail_ex+0x410/0x560 [ 443.179451][T18287] should_failslab+0xa8/0x100 [ 443.179483][T18287] ? skb_clone+0x212/0x3a0 [ 443.179507][T18287] kmem_cache_alloc_noprof+0xa1/0x600 [ 443.179535][T18287] ? skb_clone+0x212/0x3a0 [ 443.179566][T18287] skb_clone+0x212/0x3a0 [ 443.179594][T18287] __netlink_deliver_tap+0x413/0x860 [ 443.179635][T18287] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.179665][T18287] netlink_deliver_tap+0x19c/0x1b0 [ 443.179693][T18287] netlink_dump+0x95b/0xee0 [ 443.179741][T18287] ? __pfx_netlink_dump+0x10/0x10 [ 443.179780][T18287] ? netlink_recvmsg+0x5bf/0xa50 [ 443.179806][T18287] ? kmem_cache_free+0x182/0x650 [ 443.179841][T18287] netlink_recvmsg+0x683/0xa50 [ 443.179880][T18287] ? __pfx_netlink_recvmsg+0x10/0x10 [ 443.179912][T18287] ? __lock_acquire+0x747/0x2de0 [ 443.179975][T18287] ? __pfx_netlink_recvmsg+0x10/0x10 [ 443.180005][T18287] sock_recvmsg_nosec+0x130/0x170 [ 443.180040][T18287] ____sys_recvmsg+0x3e3/0x4a0 [ 443.180074][T18287] ? __pfx_____sys_recvmsg+0x10/0x10 [ 443.180117][T18287] ? import_iovec+0x73/0xa0 [ 443.180155][T18287] ___sys_recvmsg+0x213/0x5a0 [ 443.180186][T18287] ? __pfx____sys_recvmsg+0x10/0x10 [ 443.180217][T18287] ? lock_acquire+0x115/0x350 [ 443.180275][T18287] do_recvmmsg+0x31a/0x7f0 [ 443.180309][T18287] ? __pfx_do_recvmmsg+0x10/0x10 [ 443.180348][T18287] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 443.180376][T18287] ? __fget_files+0x3a2/0x420 [ 443.180409][T18287] __x64_sys_recvmmsg+0x198/0x250 [ 443.180438][T18287] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 443.180477][T18287] do_syscall_64+0x166/0x520 [ 443.180501][T18287] ? trace_irq_disable+0x3b/0x140 [ 443.180525][T18287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.180549][T18287] ? clear_bhb_loop+0x70/0xc0 [ 443.180576][T18287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.180599][T18287] RIP: 0033:0x7f6a9db9e2d9 [ 443.180620][T18287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.180639][T18287] RSP: 002b:00007f6a9ea78028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 443.180664][T18287] RAX: ffffffffffffffda RBX: 00007f6a9de25fa0 RCX: 00007f6a9db9e2d9 [ 443.180681][T18287] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 443.180702][T18287] RBP: 00007f6a9ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 443.180717][T18287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.180731][T18287] R13: 00007f6a9de26038 R14: 00007f6a9de25fa0 R15: 00007ffda942b968 [ 443.180767][T18287] [ 443.181404][T18287] netlink: 'syz.3.4184': attribute type 8 has an invalid length. [ 444.261864][T18330] syzkaller0: entered promiscuous mode [ 444.261890][T18330] syzkaller0: entered allmulticast mode [ 444.397590][T18337] netlink: 'syz.4.4198': attribute type 8 has an invalid length. [ 444.798407][T18359] sock: sock_timestamping_bind_phc: sock not bind to device [ 445.530205][T18412] ip_tables: iptables: counters copy to user failed while replacing table [ 445.556885][T18414] __nla_validate_parse: 13 callbacks suppressed [ 445.556916][T18414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4223'. [ 445.863235][T18441] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4232'. [ 445.935183][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 446.120825][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 446.120850][T18452] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4236'. [ 446.299393][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4241'. [ 446.518812][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4243'. [ 446.534783][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4245'. [ 446.574813][T18474] veth0: entered promiscuous mode [ 446.635100][T18471] veth0: left promiscuous mode [ 446.675955][T18483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4248'. [ 446.806574][T18486] sctp: [Deprecated]: syz.0.4249 (pid 18486) Use of int in max_burst socket option deprecated. [ 446.806574][T18486] Use struct sctp_assoc_value instead [ 447.004569][T18504] pim6reg1: entered allmulticast mode [ 447.069805][T18500] syzkaller0: entered promiscuous mode [ 447.069829][T18500] syzkaller0: entered allmulticast mode [ 447.586794][T18527] netlink: 'syz.1.4262': attribute type 22 has an invalid length. [ 447.586818][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4262'. [ 447.665093][T18527] netlink: 'syz.1.4262': attribute type 22 has an invalid length. [ 448.362544][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 449.701931][T18655] netlink: 'syz.1.4302': attribute type 1 has an invalid length. [ 449.919589][T18671] netlink: 'syz.4.4309': attribute type 10 has an invalid length. [ 449.967291][T18671] team0: Device wg2 is of different type [ 450.083558][T18671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.171879][T18681] netlink: 'syz.2.4310': attribute type 20 has an invalid length. [ 450.171897][T18681] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.652756][T18708] __nla_validate_parse: 15 callbacks suppressed [ 450.652778][T18708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4319'. [ 450.652793][T18708] tipc: Invalid UDP bearer configuration [ 450.652839][T18708] tipc: Enabling of bearer rejected, failed to enable media [ 450.653488][T18708] netlink: 'syz.2.4319': attribute type 11 has an invalid length. [ 450.981293][T18723] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 451.364144][T18745] xt_IDLETIMER: timeout value is zero [ 451.394021][T18745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4331'. [ 451.395141][T18745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4331'. [ 451.510581][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.510605][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.527481][T18753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.528547][T18752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.633622][T18758] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4338'. [ 451.644315][T18758] syzkaller1: entered promiscuous mode [ 451.644338][T18758] syzkaller1: entered allmulticast mode [ 451.647886][T18758] syzkaller1: left promiscuous mode [ 451.647905][T18758] syzkaller1: left allmulticast mode [ 452.231878][T18782] ip_tables: iptables: counters copy to user failed while replacing table [ 452.532149][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4354'. [ 452.532174][T18799] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.554533][T18800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4355'. [ 452.702241][T18806] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.4359'. [ 452.702382][T18806] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.4359'. [ 452.808355][T18809] block nbd0: reconnected socket [ 452.832161][ T5622] block nbd0: Receive control failed (result -32) [ 452.846706][T18814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.046160][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4363'. [ 453.057618][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4363'. [ 453.111784][T18830] netlink: 'syz.3.4364': attribute type 75 has an invalid length. [ 453.375042][T18849] netlink: 'syz.2.4371': attribute type 1 has an invalid length. [ 453.676853][T18858] netlink: 'syz.1.4375': attribute type 10 has an invalid length. [ 453.677955][T18858] syzkaller0: left promiscuous mode [ 453.677973][T18858] syzkaller0: left allmulticast mode [ 453.930360][T18873] tc action pedit offset 0 out of bounds [ 454.351278][T18898] block nbd2: Unsupported socket: should be TCP or UNIX. [ 454.371414][T18898] block nbd2: Unsupported socket: should be TCP or UNIX. [ 454.566290][T18912] netlink: 'syz.3.4394': attribute type 3 has an invalid length. [ 455.525648][T18964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 455.725167][T18975] netlink: NAT attribute has 8 unknown bytes [ 455.725194][T18975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.929855][T18980] __nla_validate_parse: 13 callbacks suppressed [ 455.929877][T18980] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4413'. [ 456.423576][T19008] IPv6: addrconf: prefix option has invalid lifetime [ 456.423595][T19008] IPv6: addrconf: prefix option has invalid lifetime [ 456.457773][T19008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4422'. [ 456.611766][T19016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4423'. [ 457.192454][T19037] syzkaller0: entered promiscuous mode [ 457.192478][T19037] syzkaller0: entered allmulticast mode [ 457.226378][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4428'. [ 457.595354][T19066] xt_hashlimit: size too large, truncated to 1048576 [ 457.633759][T19065] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4436'. [ 457.870608][T19085] syzkaller0: entered promiscuous mode [ 457.870632][T19085] syzkaller0: entered allmulticast mode [ 458.072536][T19097] xt_limit: Overflow, try lower: 536871034/127 [ 458.097908][T19104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4445'. [ 458.635484][T19120] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4450'. [ 458.799105][T19126] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 459.083258][T19140] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 459.086600][T19140] netlink: 'syz.2.4459': attribute type 3 has an invalid length. [ 459.086635][T19140] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4459'. [ 459.305807][T19149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4463'. [ 459.306348][ T5622] Bluetooth: hci1: connection err: -111 [ 459.487805][T19160] netlink: Invalid conntrack timeout [ 459.487827][T19160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.618053][T19169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4472'. [ 460.045065][T19197] tbf_change: 55 callbacks suppressed [ 460.045086][T19197] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 460.152810][T19202] bond8: option all_slaves_active: invalid value (179) [ 460.158716][T19202] bond8 (unregistering): Released all slaves [ 460.199230][T19206] xt_ecn: cannot match TCP bits for non-tcp packets [ 460.199673][T19208] netlink: 'syz.3.4482': attribute type 10 has an invalid length. [ 460.249102][T19208] veth1_macvtap: left promiscuous mode [ 460.249131][T19208] macsec0: left promiscuous mode [ 460.270065][T19208] veth1_macvtap: entered promiscuous mode [ 460.287714][T19208] .`: (slave macsec0): Enslaving as an active interface with an up link [ 460.569008][T19217] team0: Port device team_slave_0 removed [ 460.605842][T19229] netlink: 'syz.4.4487': attribute type 12 has an invalid length. [ 460.637629][T19230] smc: removing net device team0 with user defined pnetid SYZ2 [ 460.732234][T19229] netlink: 'syz.4.4487': attribute type 12 has an invalid length. [ 460.733198][ T8470] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.733255][ T8470] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.733291][ T8470] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.733327][ T8470] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.844271][ T8471] wlan1: Trigger new scan to find an IBSS to join [ 461.614133][T19270] __nla_validate_parse: 9 callbacks suppressed [ 461.614154][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4505'. [ 461.614182][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4505'. [ 461.973825][T19291] netlink: 'syz.2.4508': attribute type 35 has an invalid length. [ 462.315124][T19307] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 462.355029][T19307] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4515'. [ 462.852103][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4525'. [ 463.088445][T19347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4527'. [ 463.491540][T19351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.591542][T19364] FAULT_INJECTION: forcing a failure. [ 463.591542][T19364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.591583][T19364] CPU: 0 UID: 0 PID: 19364 Comm: syz.3.4533 Not tainted syzkaller #0 PREEMPT(full) [ 463.591606][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.591619][T19364] Call Trace: [ 463.591627][T19364] [ 463.591636][T19364] dump_stack_lvl+0xe8/0x150 [ 463.591671][T19364] should_fail_ex+0x410/0x560 [ 463.591705][T19364] _copy_from_iter+0x1d3/0x1660 [ 463.591734][T19364] ? __alloc_skb+0x27a/0x7a0 [ 463.591769][T19364] ? __alloc_skb+0x27a/0x7a0 [ 463.591802][T19364] ? __alloc_skb+0x27a/0x7a0 [ 463.591832][T19364] ? __pfx__copy_from_iter+0x10/0x10 [ 463.591858][T19364] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 463.591880][T19364] ? __alloc_skb+0x27a/0x7a0 [ 463.591908][T19364] ? __alloc_skb+0x27a/0x7a0 [ 463.591944][T19364] ? netlink_sendmsg+0x650/0xb40 [ 463.591969][T19364] ? skb_put+0x112/0x210 [ 463.591990][T19364] netlink_sendmsg+0x6c0/0xb40 [ 463.592024][T19364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.592057][T19364] ? apparmor_socket_sendmsg+0x18b/0x360 [ 463.592088][T19364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.592112][T19364] sock_sendmsg_nosec+0x13a/0x180 [ 463.592142][T19364] ____sys_sendmsg+0x54e/0x850 [ 463.592169][T19364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.592200][T19364] ? import_iovec+0x73/0xa0 [ 463.592233][T19364] ___sys_sendmsg+0x2a5/0x360 [ 463.592253][T19364] ? __lock_acquire+0x747/0x2de0 [ 463.592280][T19364] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.592336][T19364] ? __fget_files+0x2a/0x420 [ 463.592355][T19364] ? __fget_files+0x3a2/0x420 [ 463.592385][T19364] __x64_sys_sendmsg+0x1b1/0x290 [ 463.592408][T19364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.592461][T19364] do_syscall_64+0x166/0x520 [ 463.592482][T19364] ? trace_irq_disable+0x3b/0x140 [ 463.592503][T19364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.592523][T19364] ? clear_bhb_loop+0x70/0xc0 [ 463.592547][T19364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.592566][T19364] RIP: 0033:0x7f6a9db9e2d9 [ 463.592591][T19364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.592607][T19364] RSP: 002b:00007f6a9ea57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.592629][T19364] RAX: ffffffffffffffda RBX: 00007f6a9de26090 RCX: 00007f6a9db9e2d9 [ 463.592643][T19364] RDX: 0000000024000890 RSI: 0000200000000700 RDI: 0000000000000004 [ 463.592656][T19364] RBP: 00007f6a9ea57090 R08: 0000000000000000 R09: 0000000000000000 [ 463.592667][T19364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.592679][T19364] R13: 00007f6a9de26128 R14: 00007f6a9de26090 R15: 00007ffda942b968 [ 463.592710][T19364] [ 463.884945][ T8473] wlan1: Trigger new scan to find an IBSS to join [ 464.909020][T19404] FAULT_INJECTION: forcing a failure. [ 464.909020][T19404] name failslab, interval 1, probability 0, space 0, times 0 [ 464.909053][T19404] CPU: 0 UID: 0 PID: 19404 Comm: syz.4.4548 Not tainted syzkaller #0 PREEMPT(full) [ 464.909077][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.909089][T19404] Call Trace: [ 464.909097][T19404] [ 464.909106][T19404] dump_stack_lvl+0xe8/0x150 [ 464.909142][T19404] should_fail_ex+0x410/0x560 [ 464.909176][T19404] should_failslab+0xa8/0x100 [ 464.909205][T19404] ? skb_clone+0x212/0x3a0 [ 464.909228][T19404] kmem_cache_alloc_noprof+0xa1/0x600 [ 464.909254][T19404] ? skb_clone+0x212/0x3a0 [ 464.909283][T19404] skb_clone+0x212/0x3a0 [ 464.909309][T19404] __netlink_deliver_tap+0x413/0x860 [ 464.909357][T19404] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.909382][T19404] netlink_deliver_tap+0x19c/0x1b0 [ 464.909407][T19404] netlink_unicast+0x8c1/0xa80 [ 464.909445][T19404] netlink_sendmsg+0x813/0xb40 [ 464.909485][T19404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.909517][T19404] ? apparmor_socket_sendmsg+0x18b/0x360 [ 464.909546][T19404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.909569][T19404] sock_sendmsg_nosec+0x13a/0x180 [ 464.909597][T19404] ____sys_sendmsg+0x54e/0x850 [ 464.909623][T19404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.909652][T19404] ? import_iovec+0x73/0xa0 [ 464.909685][T19404] ___sys_sendmsg+0x2a5/0x360 [ 464.909704][T19404] ? __lock_acquire+0x747/0x2de0 [ 464.909730][T19404] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.909785][T19404] ? __fget_files+0x2a/0x420 [ 464.909803][T19404] ? __fget_files+0x3a2/0x420 [ 464.909830][T19404] __x64_sys_sendmsg+0x1b1/0x290 [ 464.909854][T19404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.909897][T19404] do_syscall_64+0x166/0x520 [ 464.909918][T19404] ? trace_irq_disable+0x3b/0x140 [ 464.909942][T19404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.909962][T19404] ? clear_bhb_loop+0x70/0xc0 [ 464.909986][T19404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.910005][T19404] RIP: 0033:0x7fe92af9e2d9 [ 464.910040][T19404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.910057][T19404] RSP: 002b:00007fe92bf16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.910080][T19404] RAX: ffffffffffffffda RBX: 00007fe92b225fa0 RCX: 00007fe92af9e2d9 [ 464.910095][T19404] RDX: 0000000024000890 RSI: 0000200000000700 RDI: 0000000000000004 [ 464.910108][T19404] RBP: 00007fe92bf16090 R08: 0000000000000000 R09: 0000000000000000 [ 464.910121][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.910134][T19404] R13: 00007fe92b226038 R14: 00007fe92b225fa0 R15: 00007ffe0a71a6f8 [ 464.910167][T19404] [ 466.071896][ T1420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.071920][ T1420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.105776][T19447] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4565'. [ 466.123976][T19449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.145599][T19447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.186929][T19447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.205449][T19447] bond0 (unregistering): Released all slaves [ 466.211422][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4567'. [ 466.270324][T19455] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 466.477319][T19471] netlink: 'syz.4.4570': attribute type 2 has an invalid length. [ 466.477343][T19471] netlink: 'syz.4.4570': attribute type 8 has an invalid length. [ 466.477357][T19471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4570'. [ 466.907712][T19497] wlan1: Trigger new scan to find an IBSS to join [ 467.823649][T19494] wlan1: Creating new IBSS network, BSSID 00:00:8d:00:00:00 [ 467.865616][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'. [ 467.969705][T19553] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 468.002244][T19559] IPVS: length: 218 != 8 [ 468.041067][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4593'. [ 468.041240][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4593'. [ 468.173990][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4596'. [ 468.318342][T19573] netlink: 'syz.0.4598': attribute type 8 has an invalid length. [ 468.335271][T19574] FAULT_INJECTION: forcing a failure. [ 468.335271][T19574] name failslab, interval 1, probability 0, space 0, times 0 [ 468.335305][T19574] CPU: 1 UID: 0 PID: 19574 Comm: syz.1.4597 Not tainted syzkaller #0 PREEMPT(full) [ 468.335330][T19574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.335344][T19574] Call Trace: [ 468.335354][T19574] [ 468.335363][T19574] dump_stack_lvl+0xe8/0x150 [ 468.335402][T19574] should_fail_ex+0x410/0x560 [ 468.335438][T19574] ? __alloc_skb+0x1db/0x7a0 [ 468.335472][T19574] should_failslab+0xa8/0x100 [ 468.335506][T19574] ? __alloc_skb+0x1db/0x7a0 [ 468.335537][T19574] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 468.335562][T19574] ? __alloc_skb+0x18d/0x7a0 [ 468.335605][T19574] ? __alloc_skb+0x1db/0x7a0 [ 468.335646][T19574] __alloc_skb+0x1db/0x7a0 [ 468.335685][T19574] netlink_dump+0x1e7/0xee0 [ 468.335728][T19574] ? __pfx_netlink_dump+0x10/0x10 [ 468.335769][T19574] ? genl_start+0x497/0x6d0 [ 468.335812][T19574] __netlink_dump_start+0x589/0x7b0 [ 468.335847][T19574] genl_family_rcv_msg_dumpit+0x213/0x310 [ 468.335887][T19574] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 468.335931][T19574] ? __pfx_genl_start+0x10/0x10 [ 468.335978][T19574] ? __pfx_genl_dumpit+0x10/0x10 [ 468.336008][T19574] ? __pfx_genl_done+0x10/0x10 [ 468.336046][T19574] ? bpf_lsm_capable+0x9/0x20 [ 468.336070][T19574] ? security_capable+0x7e/0x2c0 [ 468.336247][T19574] genl_rcv_msg+0x5e1/0x7a0 [ 468.336289][T19574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.336321][T19574] ? __pfx_batadv_orig_dump+0x10/0x10 [ 468.336386][T19574] netlink_rcv_skb+0x226/0x4a0 [ 468.336414][T19574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.336451][T19574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.336496][T19574] ? down_read+0x2be/0x330 [ 468.336529][T19574] genl_rcv+0x28/0x40 [ 468.336560][T19574] netlink_unicast+0x8ef/0xa80 [ 468.336612][T19574] netlink_sendmsg+0x813/0xb40 [ 468.336652][T19574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.336689][T19574] ? apparmor_socket_sendmsg+0x18b/0x360 [ 468.336723][T19574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.336750][T19574] sock_sendmsg_nosec+0x13a/0x180 [ 468.336783][T19574] ____sys_sendmsg+0x54e/0x850 [ 468.336815][T19574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.336849][T19574] ? import_iovec+0x73/0xa0 [ 468.336888][T19574] ___sys_sendmsg+0x2a5/0x360 [ 468.336910][T19574] ? __lock_acquire+0x747/0x2de0 [ 468.336941][T19574] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.337007][T19574] ? __fget_files+0x2a/0x420 [ 468.337029][T19574] ? __fget_files+0x3a2/0x420 [ 468.337063][T19574] __x64_sys_sendmsg+0x1b1/0x290 [ 468.337091][T19574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.337141][T19574] do_syscall_64+0x166/0x520 [ 468.337165][T19574] ? trace_irq_disable+0x3b/0x140 [ 468.337190][T19574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.337214][T19574] ? clear_bhb_loop+0x70/0xc0 [ 468.337242][T19574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.337266][T19574] RIP: 0033:0x7f114ff9e2d9 [ 468.337287][T19574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.337306][T19574] RSP: 002b:00007f1150f1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.337330][T19574] RAX: ffffffffffffffda RBX: 00007f1150225fa0 RCX: 00007f114ff9e2d9 [ 468.337348][T19574] RDX: 0000000024000890 RSI: 0000200000000700 RDI: 0000000000000004 [ 468.337363][T19574] RBP: 00007f1150f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 468.337377][T19574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.337391][T19574] R13: 00007f1150226038 R14: 00007f1150225fa0 R15: 00007ffc55462e08 [ 468.337429][T19574] [ 468.700919][T19580] Bluetooth: MGMT ver 1.23 [ 468.768632][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4600'. [ 468.928921][T19580] .`: (slave macsec0): Releasing backup interface [ 469.090869][T19598] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4606'. [ 469.181334][T19600] tipc: Enabling of bearer rejected, already enabled [ 469.347278][T19608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4608'. [ 469.446172][T19616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 469.547433][T19621] bridge0: port 4(veth1_to_bridge) entered blocking state [ 469.550541][T19621] bridge0: port 4(veth1_to_bridge) entered disabled state [ 469.550682][T19621] veth1_to_bridge: entered allmulticast mode [ 469.555517][T19621] veth1_to_bridge: entered promiscuous mode [ 469.555904][T19621] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.565536][T19621] bridge0: port 4(veth1_to_bridge) entered blocking state [ 469.565784][T19621] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 469.671049][T19623] tipc: Enabled bearer , priority 10 [ 469.765601][T19632] xt_IDLETIMER: label is empty or not nul-terminated [ 470.199395][T19655] ip6tnl0: Caught tx_queue_len zero misconfig [ 470.199436][T19655] sch_fq: defrate 0 ignored. [ 470.218076][T19659] netlink: 'syz.3.4624': attribute type 4 has an invalid length. [ 470.220551][T19659] netlink: 'syz.3.4624': attribute type 10 has an invalid length. [ 470.237668][T19661] netlink: 'syz.3.4624': attribute type 4 has an invalid length. [ 470.245090][T19657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 470.268304][T19663] netlink: 'syz.3.4624': attribute type 10 has an invalid length. [ 470.417459][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4626'. [ 470.605041][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.605349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.110985][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4637'. [ 471.228607][T19695] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 471.333239][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.333546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.395724][T19709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4639'. [ 471.642873][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.643171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.119709][T19749] netlink: 'syz.0.4653': attribute type 29 has an invalid length. [ 472.446471][T19774] FAULT_INJECTION: forcing a failure. [ 472.446471][T19774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.446505][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz.1.4658 Not tainted syzkaller #0 PREEMPT(full) [ 472.446528][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.446540][T19774] Call Trace: [ 472.446549][T19774] [ 472.446558][T19774] dump_stack_lvl+0xe8/0x150 [ 472.446593][T19774] should_fail_ex+0x410/0x560 [ 472.446628][T19774] _copy_from_user+0x2d/0xb0 [ 472.446660][T19774] alg_setkey+0xb8/0x190 [ 472.446777][T19774] alg_setsockopt+0x3da/0x4a0 [ 472.446801][T19774] ? __pfx_alg_setsockopt+0x10/0x10 [ 472.446826][T19774] do_sock_setsockopt+0x17c/0x1b0 [ 472.446853][T19774] __x64_sys_setsockopt+0x13d/0x1b0 [ 472.446879][T19774] do_syscall_64+0x166/0x520 [ 472.446902][T19774] ? trace_irq_disable+0x3b/0x140 [ 472.446925][T19774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.446950][T19774] ? clear_bhb_loop+0x70/0xc0 [ 472.446975][T19774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.446996][T19774] RIP: 0033:0x7f114ff9e2d9 [ 472.447016][T19774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.447034][T19774] RSP: 002b:00007f1150f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.447056][T19774] RAX: ffffffffffffffda RBX: 00007f1150225fa0 RCX: 00007f114ff9e2d9 [ 472.447071][T19774] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 472.447084][T19774] RBP: 00007f1150f1f090 R08: 0000000000000008 R09: 0000000000000000 [ 472.447098][T19774] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 472.447111][T19774] R13: 00007f1150226038 R14: 00007f1150225fa0 R15: 00007ffc55462e08 [ 472.447145][T19774] [ 472.683480][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.683720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.943736][T19785] __nla_validate_parse: 2 callbacks suppressed [ 472.943758][T19785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4664'. [ 473.118203][T19800] netlink: 'syz.4.4665': attribute type 3 has an invalid length. [ 473.578830][T19817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4671'. [ 473.678502][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4672'. [ 473.700972][T19819] netlink: 'syz.1.4672': attribute type 1 has an invalid length. [ 473.711432][T19819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4672'. [ 473.723870][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.388989][T19837] netlink: 'syz.2.4680': attribute type 1 has an invalid length. [ 474.534516][T19849] netlink: 'syz.4.4683': attribute type 16 has an invalid length. [ 474.534542][T19849] netlink: 'syz.4.4683': attribute type 17 has an invalid length. [ 474.537116][T19849] tunl0: left promiscuous mode [ 474.668573][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4685'. [ 474.729768][T19849] vlan0: left promiscuous mode [ 474.786984][T19849] macvtap0: left allmulticast mode [ 474.787008][T19849] veth0_macvtap: left allmulticast mode [ 474.791084][T19849] veth1_macvtap: entered promiscuous mode [ 474.837820][T19849] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 475.167680][T19874] bond10: option arp_all_targets: invalid value (18446744073709551613) [ 475.170928][T19874] bond10 (unregistering): Released all slaves [ 475.300290][T19886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4694'. [ 475.461286][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4700'. [ 475.477709][T19890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4700'. [ 475.637664][ T5729] net_ratelimit: 20 callbacks suppressed [ 475.637685][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.643766][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.785875][T19906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.819544][T19901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4701'. [ 475.819896][T19906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.836327][T19906] netlink: 'syz.0.4702': attribute type 2 has an invalid length. [ 475.840195][ T31] audit: type=1804 audit(1791955299.414:11): pid=19901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4701" name="/newroot/916/cgroup.controllers" dev="tmpfs" ino=4661 res=1 errno=0 [ 475.840802][ T31] audit: type=1800 audit(1791955299.414:12): pid=19901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4701" name="cgroup.controllers" dev="tmpfs" ino=4661 res=0 errno=0 [ 475.903497][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.294376][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.683963][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.710770][T19956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4721'. [ 476.746632][T19956] veth10: entered promiscuous mode [ 476.746655][T19956] veth10: entered allmulticast mode [ 477.333556][T19994] set match dimension is over the limit! [ 477.769475][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.268234][T20016] __nla_validate_parse: 2 callbacks suppressed [ 478.268256][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4740'. [ 478.268276][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4740'. [ 478.392558][T20018] netlink: 'syz.4.4741': attribute type 3 has an invalid length. [ 478.735869][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 478.736517][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4743'. [ 478.843407][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.951773][T20040] --map-set only usable from mangle table [ 478.970999][T20035] lo: Caught tx_queue_len zero misconfig [ 479.154654][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.323989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.506918][T20048] syzkaller0: left promiscuous mode [ 479.506939][T20048] syzkaller0: left allmulticast mode [ 479.564246][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.748985][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 480.703059][T19507] net_ratelimit: 8 callbacks suppressed [ 480.703083][T19507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.981595][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.488994][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.530076][T20088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4758'. [ 481.530097][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4758'. [ 481.530117][T20088] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4758'. [ 481.643395][T20089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4758'. [ 481.643418][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4758'. [ 481.643439][T20089] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4758'. [ 481.805832][T19510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.045948][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.443761][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.544572][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.700644][T20106] syzkaller0: left promiscuous mode [ 482.700667][T20106] syzkaller0: left allmulticast mode [ 482.727470][T20106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.727785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.904681][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.906163][T20111] batman_adv: batadv0: Interface deactivated: syz_tun [ 482.906187][T20111] batman_adv: batadv0: Removing interface: syz_tun [ 482.963022][T20111] bridge0: port 1(syz_tun) entered blocking state [ 482.963310][T20111] bridge0: port 1(syz_tun) entered disabled state [ 482.963485][T20111] syz_tun: entered allmulticast mode [ 482.997753][T20111] syz_tun: entered promiscuous mode [ 482.998422][T20111] bridge0: port 1(syz_tun) entered blocking state [ 483.611980][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4771'. [ 483.738522][T20138] tunl0: entered promiscuous mode [ 483.754497][T20138] netlink: 'syz.4.4772': attribute type 3 has an invalid length. [ 483.754518][T20138] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4772'. [ 483.759936][T20138] tipc: Started in network mode [ 483.759966][T20138] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 483.760179][T20138] tipc: Enabled bearer , priority 0 [ 484.821224][T20169] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4783'. [ 485.036512][T20175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4785'. [ 485.211134][T20169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.268551][T20169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.347442][T20169] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 485.497912][T20169] bond0 (unregistering): Released all slaves [ 485.555151][ T5801] tipc: Node number set to 43690 [ 485.755204][ T5801] net_ratelimit: 12 callbacks suppressed [ 485.755225][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.960225][T20186] tc action pedit offset 0 out of bounds [ 486.064470][T20190] netlink: 'syz.0.4791': attribute type 8 has an invalid length. [ 486.064518][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4791'. [ 486.064547][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4791'. [ 486.098924][T20189] x_tables: duplicate entry at hook 2 [ 486.203368][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.203761][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.259578][T20193] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 486.269553][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4792'. [ 486.269586][T20194] netlink: 'syz.1.4792': attribute type 8 has an invalid length. [ 486.269599][T20194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4792'. [ 486.584347][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.739879][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.839708][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.965775][T20215] netlink: 'syz.0.4799': attribute type 1 has an invalid length. [ 486.970282][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4799'. [ 486.998512][T20214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4799'. [ 487.022886][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.055517][T20215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.243195][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.290115][T20225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 487.304981][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.884081][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.185075][ T5801] net_ratelimit: 11 callbacks suppressed [ 491.185097][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.260803][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 494.726260][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.041871][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.177946][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.618388][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.482868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.883483][ T1346] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 512.041815][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.204989][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.266574][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.959655][ T1420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.160554][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.566620][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 547.586220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.898119][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.998589][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.049116][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.068079][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.663232][T19511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.981724][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.044152][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.110991][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.171373][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.258532][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.894450][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.362746][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.057216][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.123890][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.351161][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.555657][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.559922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.737556][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.811945][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.175586][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.341155][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.023421][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.650863][ T1560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.717014][ T1560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.785707][ T1560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.673744][T19507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.725708][T19457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.866753][T19457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.891452][T19507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.656753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.074461][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.273430][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.516488][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.727361][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.797408][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.889827][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.513788][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.114310][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.030336][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 611.080695][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.107389][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.206227][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.674800][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.532000][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.963226][T19507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.496418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.847099][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.578975][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.870253][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.289055][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.437534][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.672042][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.649784][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.712833][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.775202][T19459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.199740][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.084119][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.035726][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.109447][ T1420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.040045][ T1560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.180431][T19506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.108815][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.694675][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 685.255840][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.037153][ T1560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.189773][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.061134][T19503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.231428][T19503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.352521][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.262183][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 705.277270][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P989/1:b..l [ 705.285126][ C0] rcu: (detected by 0, t=10504 jiffies, g=81189, q=459237 ncpus=2) [ 705.293145][ C0] task:kworker/0:2 state:R running task stack:23456 pid:989 tgid:989 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 705.306778][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 705.314186][ C0] Call Trace: [ 705.317495][ C0] [ 705.320460][ C0] __schedule+0x17db/0x58f0 [ 705.325030][ C0] ? __pfx___schedule+0x10/0x10 [ 705.329927][ C0] preempt_schedule_irq+0x4b/0x90 [ 705.334987][ C0] irqentry_exit+0x14f/0x920 [ 705.339613][ C0] ? trace_irq_disable+0x3b/0x140 [ 705.344692][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 705.350704][ C0] RIP: 0010:__rcu_read_unlock+0x32/0xe0 [ 705.356311][ C0] Code: 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d 29 c0 e8 12 48 8d 9f c4 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 c8 04 00 00 4c 89 f0 48 c1 e8 03 [ 705.375981][ C0] RSP: 0018:ffffc900050d70f0 EFLAGS: 00000a03 [ 705.382053][ C0] RAX: 0000000000000000 RBX: ffff888028f94344 RCX: 0000000000000046 [ 705.390070][ C0] RDX: ffffc900050d7201 RSI: ffffffff8e6f1758 RDI: ffff888028f93e80 [ 705.398042][ C0] RBP: 1ffffffff24d6801 R08: ffffc900050d7870 R09: 0000000000000000 [ 705.406007][ C0] R10: ffffc900050d7218 R11: fffff52000a1ae45 R12: 1ffff110051f2868 [ 705.413981][ C0] R13: ffffffff817811df R14: ffffc900050d71c8 R15: dffffc0000000000 [ 705.421971][ C0] ? unwind_next_frame+0x8f/0x2550 [ 705.427122][ C0] ? unwind_next_frame+0x8f/0x2550 [ 705.432241][ C0] unwind_next_frame+0x1baf/0x2550 [ 705.437348][ C0] ? wg_packet_send_handshake_response+0x137/0x2d0 [ 705.443846][ C0] ? unwind_next_frame+0x8f/0x2550 [ 705.448967][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 705.455205][ C0] arch_stack_walk+0x11b/0x150 [ 705.459989][ C0] ? wg_packet_handshake_receive_worker+0x6a9/0x10c0 [ 705.466693][ C0] stack_trace_save+0xa9/0x100 [ 705.471462][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 705.476832][ C0] ? __lock_acquire+0x747/0x2de0 [ 705.481777][ C0] save_stack+0x122/0x230 [ 705.486138][ C0] ? __pfx_save_stack+0x10/0x10 [ 705.491000][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 705.496306][ C0] ? __slab_free+0x274/0x2c0 [ 705.500893][ C0] ? qlist_free_all+0x99/0x100 [ 705.505662][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 705.511312][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 705.516366][ C0] ? __kmalloc_cache_noprof+0x29f/0x600 [ 705.521953][ C0] ? wg_noise_handshake_begin_session+0xd4/0xbf0 [ 705.528279][ C0] ? wg_packet_send_handshake_response+0x137/0x2d0 [ 705.534801][ C0] ? page_ext_put+0x97/0xc0 [ 705.539304][ C0] __reset_page_owner+0x71/0x1f0 [ 705.544237][ C0] __free_frozen_pages+0xc93/0xd90 [ 705.549364][ C0] __slab_free+0x274/0x2c0 [ 705.553777][ C0] ? lock_acquire+0x115/0x350 [ 705.558454][ C0] ? qlist_free_all+0x8e/0x100 [ 705.563233][ C0] qlist_free_all+0x99/0x100 [ 705.567836][ C0] kasan_quarantine_reduce+0x148/0x160 [ 705.573298][ C0] __kasan_slab_alloc+0x22/0x80 [ 705.578178][ C0] __kmalloc_cache_noprof+0x29f/0x600 [ 705.583560][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 705.589125][ C0] ? wg_noise_handshake_begin_session+0xd4/0xbf0 [ 705.595457][ C0] ? wg_noise_handshake_begin_session+0xd4/0xbf0 [ 705.601800][ C0] wg_noise_handshake_begin_session+0xd4/0xbf0 [ 705.608006][ C0] wg_packet_send_handshake_response+0x137/0x2d0 [ 705.614352][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 705.621210][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xd7/0x130 [ 705.627897][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 705.633226][ C0] wg_packet_handshake_receive_worker+0x6a9/0x10c0 [ 705.639832][ C0] ? look_up_lock_class+0x57/0x110 [ 705.644959][ C0] ? wg_packet_handshake_receive_worker+0x72f/0x10c0 [ 705.651643][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 705.658591][ C0] ? update_protect_slice+0x128/0x210 [ 705.663990][ C0] ? lock_acquire+0x115/0x350 [ 705.668669][ C0] ? rcu_is_watching+0x16/0xb0 [ 705.673439][ C0] ? process_scheduled_works+0x97a/0x1630 [ 705.679171][ C0] process_scheduled_works+0xc3d/0x1630 [ 705.684754][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.690752][ C0] ? assign_work+0x3cf/0x5d0 [ 705.695349][ C0] worker_thread+0xa47/0xfb0 [ 705.699948][ C0] ? __kthread_parkme+0x71/0x1f0 [ 705.704894][ C0] kthread+0x38b/0x480 [ 705.708974][ C0] ? __pfx_worker_thread+0x10/0x10 [ 705.714077][ C0] ? __pfx_kthread+0x10/0x10 [ 705.718664][ C0] ret_from_fork+0x514/0xb70 [ 705.723278][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 705.728391][ C0] ? __switch_to+0xc89/0x1420 [ 705.733085][ C0] ? __pfx_kthread+0x10/0x10 [ 705.737676][ C0] ret_from_fork_asm+0x1a/0x30 [ 705.742448][ C0] [ 713.043703][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog