last executing test programs: 1.573260539s ago: executing program 2 (id=1342): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080402faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 1.508841745s ago: executing program 2 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80800) (async) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80800) recvfrom$inet(r2, &(0x7f0000000100)=""/125, 0x7d, 0x100, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x20008000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2517000000500006804c00040067630600"/45], 0x64}}, 0x48c0) 1.497191646s ago: executing program 0 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6a241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e, 0x6006}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100}, @address_reply={0x12, 0x0, 0x0, 0x80}}}}}}, 0x2e) 1.29634739s ago: executing program 2 (id=1346): syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbb0300000000000000340000000000069078ac1414bbac1414aa8907faac1414bb070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff79}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58e798d6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x5c) 1.220380874s ago: executing program 4 (id=1348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd29, 0x9ed4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x20008001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd29, 0x9ed4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x20008001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1.091854797s ago: executing program 2 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r2}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000001c0)="c147d9edb80f1ce661be364c1bc1eb23ca582682517634062fe7ab50a6"}, 0x20) 1.051742112s ago: executing program 0 (id=1351): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) 1.040710574s ago: executing program 4 (id=1352): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x4}, 0x2) 972.872632ms ago: executing program 3 (id=1353): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x2, 0x42, 0x1, 0xb, 0x7, 0x8, 0x3, 0xb, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1}, &(0x7f0000000080)=0x8) 925.395127ms ago: executing program 1 (id=1354): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080003faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 902.704957ms ago: executing program 4 (id=1355): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x3e00}, "ffb00afe4e70"}}}}}}}, 0x0) 853.175487ms ago: executing program 0 (id=1356): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0xfffffffffffffffc, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0xfffffffffffffffc, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) 852.980827ms ago: executing program 3 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) 764.972922ms ago: executing program 0 (id=1358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001012010000000000000000000000000a20000000000aff020000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a310400000000000000080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00020900000000000000010900010073797a31"], 0xb8}}, 0x0) 737.696637ms ago: executing program 4 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e000000100ff03000000000000000000f4fdbf"], 0x38}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\n\x00'/12, @ANYRES32=r4, @ANYBLOB="55cc9202c68572dcca079098f6271a8802db737e871e1aaf8db60c90efe1fe856bfa3f4a8e9a4361607cc07880f0844bb5da82c587c174681cc17151e36dedcf87fc6f0e67820def9b087a9a6688216357b05562e62279d9c6d50d9e", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32=r2, @ANYBLOB="58bdcaac67814ca6e0", @ANYRES64=0x0], 0x20) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(r5) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x35, r8}) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r3, 0x2f, 0x2008, 0x4, @value=r9}, 0x20) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000089000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) setsockopt$inet6_int(r10, 0x29, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "c7ccb802f608097a746973424a8a2c8d"}) 668.651308ms ago: executing program 1 (id=1360): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x19, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 667.694355ms ago: executing program 3 (id=1361): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x200000000a) accept4$rose(r0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 589.717311ms ago: executing program 1 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xa, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, 0x4, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x68, 0xc, "330a415e1bad86515ca1e605e883fe634d54393159901c735670e5319429653af558031edbf566244d86336f4fbfa21a39393e4a9bab65a11af339356010f6b8e843affc952cab2d2afed3e646c9e61359202fec9167362e9b2c5544d5c141421fc4c47a"}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35e907c3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1784f736}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x36f5b89}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e24, @multicast1}}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 492.350434ms ago: executing program 3 (id=1363): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0x20, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 491.737485ms ago: executing program 4 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x5cb, &(0x7f0000001780)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0x5bd, 0x66, 0x0, 0x4, 0x2f, 0x0, @local, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xfa, 0x1, 0x0, 0x3, 0x7, 0x5}, 0x1, {0x800}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x9, 0x1, 0x1, 0x1, 0x6, 0x10}, 0x2, {0x5d1, 0x40, 0x1, 0x15, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}}}, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044805) 405.710248ms ago: executing program 0 (id=1365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0xf0) 379.360961ms ago: executing program 1 (id=1366): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x4}, 0x2) 328.579831ms ago: executing program 3 (id=1367): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @initdev, 0x0}, &(0x7f0000000080)=0xc) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000002c0)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast1, @in=@broadcast, 0x4e24, 0x3, 0x4e21, 0x4, 0x2, 0x80, 0x1e0, 0x67, r0, r3}, {0x5, 0x8001, 0x3, 0x100000001, 0x3, 0x3, 0x5, 0x9}, {0x7864, 0x1, 0x7, 0x7}, 0xe000000, 0x6e6bb8, 0x2, 0x0, 0x3, 0x1}, {{@in6=@remote, 0x4d4, 0x3d}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x4, 0x0, 0xfb, 0x7ff, 0x1, 0x401}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast1, @in=@broadcast, 0x4e24, 0x3, 0x4e21, 0x4, 0x2, 0x80, 0x1e0, 0x67, r0, r3}, {0x5, 0x8001, 0x3, 0x100000001, 0x3, 0x3, 0x5, 0x9}, {0x7864, 0x1, 0x7, 0x7}, 0xe000000, 0x6e6bb8, 0x2, 0x0, 0x3, 0x1}, {{@in6=@remote, 0x4d4, 0x3d}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x4, 0x0, 0xfb, 0x7ff, 0x1, 0x401}}, 0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x17, r2, 0x1, 0x40, 0x6, @local}, 0x14) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x3}, 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000480)={@loopback}, &(0x7f00000004c0)=0x14) (async) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000480)={@loopback}, &(0x7f00000004c0)=0x14) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000500)=0x1, 0x4) sendmsg$rds(r5, &(0x7f0000000d40)={&(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000740)=""/139, 0x8b}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f0000000980)=""/250, 0xfa}, {&(0x7f0000000a80)=""/68, 0x44}, {&(0x7f0000000b00)=""/126, 0x7e}], 0x9, &(0x7f0000000cc0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x100}, &(0x7f0000000c40)=0x3, &(0x7f0000000c80)=0x10000, 0x3, 0x4, 0x7fffffffffffffff, 0x1, 0x8, 0x2}}], 0x70, 0x40005}, 0x4) (async) sendmsg$rds(r5, &(0x7f0000000d40)={&(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000740)=""/139, 0x8b}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f0000000980)=""/250, 0xfa}, {&(0x7f0000000a80)=""/68, 0x44}, {&(0x7f0000000b00)=""/126, 0x7e}], 0x9, &(0x7f0000000cc0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x100}, &(0x7f0000000c40)=0x3, &(0x7f0000000c80)=0x10000, 0x3, 0x4, 0x7fffffffffffffff, 0x1, 0x8, 0x2}}], 0x70, 0x40005}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000e80)={r4, &(0x7f0000000d80)='wg2\x00', 0x200, &(0x7f0000000dc0)={@align=0x8491, {0x2, 0x0, 0x4, 0x400}}, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0x7}) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, &(0x7f0000000ec0), 0x4) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000f00)) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000f40)=0x7fffffff, &(0x7f0000000f80)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x90, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x95}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1800000}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000850}, 0x40001) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000001140)=0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001200), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001340)={'syztnl1\x00', &(0x7f0000001240)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x3, 0x6, {{0x35, 0x4, 0x0, 0x3, 0xd4, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x7, 0xfe, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x23, 0xf4, [@loopback, @broadcast, @empty, @private=0xa010100, @private=0xa010101, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x3f, [@loopback, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x21, 0x2, [{0x0, 0x8, "c1097092c917"}, {0x5, 0xa, "0afe6017a4583143"}, {0x2, 0x9, "b33d34d2a1a65a"}]}, @timestamp={0x44, 0x14, 0x95, 0x0, 0xa, [0x7, 0xfffffff9, 0x2, 0x81]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0x1c, 0x0, 0x6, [0x3, 0x2, 0x1, 0xfffffffe, 0x2, 0x645, 0x200, 0x6, 0x9445, 0x1]}, @rr={0x7, 0x1b, 0xf3, [@remote, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @rand_addr=0x64010101]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001340)={'syztnl1\x00', &(0x7f0000001240)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x3, 0x6, {{0x35, 0x4, 0x0, 0x3, 0xd4, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x7, 0xfe, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x23, 0xf4, [@loopback, @broadcast, @empty, @private=0xa010100, @private=0xa010101, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x3f, [@loopback, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x21, 0x2, [{0x0, 0x8, "c1097092c917"}, {0x5, 0xa, "0afe6017a4583143"}, {0x2, 0x9, "b33d34d2a1a65a"}]}, @timestamp={0x44, 0x14, 0x95, 0x0, 0xa, [0x7, 0xfffffff9, 0x2, 0x81]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0x1c, 0x0, 0x6, [0x3, 0x2, 0x1, 0xfffffffe, 0x2, 0x645, 0x200, 0x6, 0x9445, 0x1]}, @rr={0x7, 0x1b, 0xf3, [@remote, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @rand_addr=0x64010101]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x50, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x31}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000) connect$l2tp(r6, &(0x7f0000001480)={0x2, 0x0, @multicast1, 0x1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x8c, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x5, 0x7f, 0xfffffffb]}, @CTA_ID={0x8}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xf9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_ID={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000810}, 0x240040c0) bind$inet(r6, &(0x7f0000001640)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@fallback=r7, 0x1, 0x0, 0x2, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@fallback=r7, 0x1, 0x0, 0x2, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0], 0x0}, 0x40) openat$cgroup_ro(r7, &(0x7f0000001800)='memory.current\x00', 0x0, 0x0) (async) r11 = openat$cgroup_ro(r7, &(0x7f0000001800)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000017c0)={@fallback=r6, r6, 0x38, 0x2018, 0xffffffffffffffff, @value=r11, @void, @void, @void, r10}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r12, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xf}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r12, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xf}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010) 253.267247ms ago: executing program 4 (id=1368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r7, 0x1, 0xda, 0x6, @remote}, 0x14) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001"], 0x4e) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xdc0, 0x0, &(0x7f0000000300)="0400000071a76d2688ca006588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 252.78991ms ago: executing program 0 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000a78a02000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000230000", @ANYRES32=0x1, @ANYBLOB="0000000003000000257418000800000018260000", @ANYRES32, @ANYBLOB="0000000007000000d218500000000000181b0000", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000070000000000000002000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x11, &(0x7f0000000380)=""/17, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x4, 0x1, 0x8}, {0x2, 0x4, 0xf, 0x2}, {0x3, 0x2, 0x8, 0x5}, {0x1, 0x5, 0xf, 0xa}], 0x10, 0x7}, 0x94) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000d00)={&(0x7f0000000580)=0x2, 0x1, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000cc0)}) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000006c0)={r6, &(0x7f00000005c0)='\x00', 0x400000, &(0x7f0000000600)={@_ha_fsid={[0x2, 0x7f]}, {0x2, 0x7fff, 0x4, 0x1}}, 0x3d1b, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x81}) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) r11 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r12], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000101410d261bd7000fedbdf25b00238d27265495b8c08004f00230000002a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000) 209.591323ms ago: executing program 1 (id=1370): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080204faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 185.669875ms ago: executing program 2 (id=1371): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r4, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) (async, rerun: 32) r6 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) sendmmsg$inet(r6, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0xce23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258cb", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)="73b402ed0051a8b9590ac44243f0172f07591af6d0e8ee0687786bf97594d11d8317d81ba5c2686e4af99eb7f49fec31d98dc33502793ffe49998531babd332b2411c18e70695cd39e8f9288f72b720b09b871693b793d4150", 0x59}, {&(0x7f0000000000)="54c7b309d57684b0c51c46c51984597be8a4d39f05be8428264eefe82c8dffac08eef221ca9ab980f00008657849919cf46950345a9e24de4f36253a712bf8cb59d19394c2c9cdc330a069b2978232131b3a0742b4c7ab2a33fee55c53bb58785ac300ba2f265b88c38451c8e1e5f595902829e844e2c3a5c90d1debc7f46037dab2c3c8775de8acb6ae7209f31dacc04cea1024017532edd6ddb7b93205d1702c89381ca66ad6b23efc814322f3942602cd2a35c1", 0xb5}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x24008040) syz_emit_ethernet(0xde, &(0x7f0000000400)=ANY=[@ANYRES64=r6, @ANYBLOB="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", @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYRESHEX=r4, @ANYRES32=r6, @ANYRESDEC=r3, @ANYRES32=r2, @ANYRES8=r0], 0x0) 105.210766ms ago: executing program 3 (id=1372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x1a, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 76.737301ms ago: executing program 1 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'nicvf0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x663, 0x2}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x7, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r4 = accept(r0, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f00000000c0)) 0s ago: executing program 2 (id=1374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8000000}, 0x90) kernel console output (not intermixed with test programs): 0 [ 77.045643][ T5956] ___sys_sendmsg+0x2a5/0x360 [ 77.045671][ T5956] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.045726][ T5956] ? __fget_files+0x2a/0x420 [ 77.045742][ T5956] ? __fget_files+0x3a0/0x420 [ 77.045768][ T5956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 77.045793][ T5956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 77.045824][ T5956] ? __pfx_ksys_write+0x10/0x10 [ 77.045856][ T5956] do_syscall_64+0x14d/0xf80 [ 77.045878][ T5956] ? trace_irq_disable+0x3b/0x150 [ 77.045893][ T5956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.045912][ T5956] ? clear_bhb_loop+0x40/0x90 [ 77.045933][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.045951][ T5956] RIP: 0033:0x7f7b4699c819 [ 77.045968][ T5956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.045982][ T5956] RSP: 002b:00007f7b47820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.046000][ T5956] RAX: ffffffffffffffda RBX: 00007f7b46c15fa0 RCX: 00007f7b4699c819 [ 77.046012][ T5956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 77.046023][ T5956] RBP: 00007f7b47820090 R08: 0000000000000000 R09: 0000000000000000 [ 77.046034][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.046044][ T5956] R13: 00007f7b46c16038 R14: 00007f7b46c15fa0 R15: 00007ffffbde2f18 [ 77.046072][ T5956] [ 77.046256][ T5956] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8'. [ 77.333192][ T5956] netlink: ct family unspecified [ 77.372304][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.421188][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.461920][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.504619][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.532654][ T5968] Zero length message leads to an empty skb [ 77.548094][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.557171][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.580114][ T5968] netlink: 'syz.3.10': attribute type 29 has an invalid length. [ 77.591290][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 77.645032][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 77.754253][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.765076][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.844453][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.863810][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 77.890584][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.906359][ T5984] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 77.943103][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.961147][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.015874][ T5988] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 78.042202][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.074503][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.089769][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.396231][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 78.649020][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 78.681556][ T6014] netlink: 'syz.1.24': attribute type 29 has an invalid length. [ 78.690854][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 78.847284][ T51] Bluetooth: hci1: command tx timeout [ 78.847383][ T5841] Bluetooth: hci3: command tx timeout [ 78.929328][ T5841] Bluetooth: hci2: command tx timeout [ 78.929375][ T51] Bluetooth: hci4: command tx timeout [ 78.940819][ T5841] Bluetooth: hci0: command tx timeout [ 78.983203][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 79.409140][ T6053] netlink: 'syz.0.37': attribute type 58 has an invalid length. [ 79.416911][ T6053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 79.440873][ T6053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.577572][ T6053] syzkaller0: entered promiscuous mode [ 79.583089][ T6053] syzkaller0: entered allmulticast mode [ 79.607272][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 79.628545][ T6053] Cannot find add_set index 2 as target [ 80.071208][ T6086] bond1: entered promiscuous mode [ 80.076419][ T6086] bond1: entered allmulticast mode [ 80.086224][ T6086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.456610][ T6110] netlink: 'syz.4.58': attribute type 58 has an invalid length. [ 80.533518][ T6110] syzkaller0: entered promiscuous mode [ 80.548408][ T6110] syzkaller0: entered allmulticast mode [ 80.571969][ T6110] Cannot find add_set index 2 as target [ 81.028567][ T6126] FAULT_INJECTION: forcing a failure. [ 81.028567][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 81.043976][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 81.044000][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 81.044010][ T6126] Call Trace: [ 81.044017][ T6126] [ 81.044025][ T6126] dump_stack_lvl+0xe8/0x150 [ 81.044052][ T6126] should_fail_ex+0x412/0x560 [ 81.044082][ T6126] should_failslab+0xa8/0x100 [ 81.044106][ T6126] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 81.044125][ T6126] ? kmem_cache_alloc_noprof+0x307/0x650 [ 81.044142][ T6126] ? ovs_flow_alloc+0x24/0x1f0 [ 81.044160][ T6126] ? ovs_flow_alloc+0x103/0x1f0 [ 81.044179][ T6126] ovs_flow_alloc+0x103/0x1f0 [ 81.044199][ T6126] ovs_packet_cmd_execute+0x585/0xea0 [ 81.044229][ T6126] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 81.044252][ T6126] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 81.044284][ T6126] genl_family_rcv_msg_doit+0x22a/0x330 [ 81.044319][ T6126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 81.044355][ T6126] ? bpf_lsm_capable+0x9/0x20 [ 81.044377][ T6126] ? security_capable+0x7e/0x2c0 [ 81.044408][ T6126] genl_rcv_msg+0x61c/0x7a0 [ 81.044435][ T6126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.044458][ T6126] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 81.044478][ T6126] ? __lock_acquire+0x6b5/0x2cf0 [ 81.044511][ T6126] netlink_rcv_skb+0x232/0x4b0 [ 81.044532][ T6126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.044557][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.044592][ T6126] ? down_read+0x272/0x2e0 [ 81.044608][ T6126] ? genl_rcv+0xd/0x40 [ 81.044632][ T6126] genl_rcv+0x28/0x40 [ 81.044653][ T6126] netlink_unicast+0x80f/0x9b0 [ 81.044679][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 81.044698][ T6126] ? netlink_sendmsg+0x650/0xb40 [ 81.044716][ T6126] ? skb_put+0x11b/0x210 [ 81.044741][ T6126] netlink_sendmsg+0x813/0xb40 [ 81.044769][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.044791][ T6126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 81.044819][ T6126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 81.044842][ T6126] ____sys_sendmsg+0x972/0x9f0 [ 81.044874][ T6126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.044906][ T6126] ? import_iovec+0x73/0xa0 [ 81.044930][ T6126] ___sys_sendmsg+0x2a5/0x360 [ 81.044956][ T6126] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.045009][ T6126] ? __fget_files+0x2a/0x420 [ 81.045025][ T6126] ? __fget_files+0x3a0/0x420 [ 81.045051][ T6126] __x64_sys_sendmsg+0x1bd/0x2a0 [ 81.045077][ T6126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 81.045109][ T6126] ? __pfx_ksys_write+0x10/0x10 [ 81.045139][ T6126] do_syscall_64+0x14d/0xf80 [ 81.045161][ T6126] ? trace_irq_disable+0x3b/0x150 [ 81.045177][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.045195][ T6126] ? clear_bhb_loop+0x40/0x90 [ 81.045217][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.045234][ T6126] RIP: 0033:0x7f94ebf9c819 [ 81.045251][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.045264][ T6126] RSP: 002b:00007f94ecd72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.045282][ T6126] RAX: ffffffffffffffda RBX: 00007f94ec215fa0 RCX: 00007f94ebf9c819 [ 81.045295][ T6126] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 81.045312][ T6126] RBP: 00007f94ecd72090 R08: 0000000000000000 R09: 0000000000000000 [ 81.045322][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.045333][ T6126] R13: 00007f94ec216038 R14: 00007f94ec215fa0 R15: 00007ffd552aebb8 [ 81.045362][ T6126] [ 81.416464][ T6124] netlink: 'syz.3.63': attribute type 29 has an invalid length. [ 81.424739][ T6128] netlink: 'syz.1.65': attribute type 14 has an invalid length. [ 81.476909][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.492153][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.561137][ T6134] tipc: Started in network mode [ 81.566234][ T6134] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 81.718428][ T6134] tipc: Enabled bearer , priority 10 [ 81.741216][ T3575] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.810016][ T3575] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.028653][ T6150] netlink: 'syz.4.72': attribute type 58 has an invalid length. [ 82.091611][ T6154] syzkaller0: entered promiscuous mode [ 82.115026][ T6150] __nla_validate_parse: 10 callbacks suppressed [ 82.115046][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 82.131506][ T6154] syzkaller0: entered allmulticast mode [ 82.138865][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 82.185817][ T6154] Cannot find add_set index 2 as target [ 82.218455][ T6160] geneve2: entered promiscuous mode [ 82.223259][ T6162] Cannot find add_set index 2 as target [ 82.360384][ T6164] Set syz1 is full, maxelem 768 reached [ 82.374761][ T6171] ipt_REJECT: TCP_RESET invalid for non-tcp [ 82.564550][ T6181] tipc: Started in network mode [ 82.577627][ T6181] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.598192][ T6181] tipc: Enabled bearer , priority 10 [ 82.753584][ T6192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.85'. [ 82.842202][ T9] tipc: Node number set to 1 [ 83.514428][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'. [ 83.569059][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'. [ 83.605905][ T6237] FAULT_INJECTION: forcing a failure. [ 83.605905][ T6237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.656522][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 83.656546][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 83.656556][ T6237] Call Trace: [ 83.656563][ T6237] [ 83.656570][ T6237] dump_stack_lvl+0xe8/0x150 [ 83.656598][ T6237] should_fail_ex+0x412/0x560 [ 83.656628][ T6237] _copy_from_user+0x2d/0xb0 [ 83.656649][ T6237] get_user_ifreq+0x6b/0x180 [ 83.656679][ T6237] sock_ioctl+0x704/0x7f0 [ 83.656703][ T6237] ? __pfx_sock_ioctl+0x10/0x10 [ 83.656729][ T6237] ? __fget_files+0x3a0/0x420 [ 83.656745][ T6237] ? __fget_files+0x2a/0x420 [ 83.656762][ T6237] ? bpf_lsm_file_ioctl+0x9/0x20 [ 83.656785][ T6237] ? __pfx_sock_ioctl+0x10/0x10 [ 83.656809][ T6237] __se_sys_ioctl+0xfc/0x170 [ 83.656833][ T6237] do_syscall_64+0x14d/0xf80 [ 83.656855][ T6237] ? trace_irq_disable+0x3b/0x150 [ 83.656870][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.656896][ T6237] ? clear_bhb_loop+0x40/0x90 [ 83.656918][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.656935][ T6237] RIP: 0033:0x7f9462d9c819 [ 83.656952][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.656966][ T6237] RSP: 002b:00007f9463bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.656985][ T6237] RAX: ffffffffffffffda RBX: 00007f9463015fa0 RCX: 00007f9462d9c819 [ 83.656997][ T6237] RDX: 0000200000000280 RSI: 00000000000089f8 RDI: 0000000000000004 [ 83.657007][ T6237] RBP: 00007f9463bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 83.657016][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.657026][ T6237] R13: 00007f9463016038 R14: 00007f9463015fa0 R15: 00007fff48a06bd8 [ 83.657050][ T6237] [ 83.884595][ T6247] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 83.893802][ T6252] openvswitch: netlink: Key type 1023 is out of range max 32 [ 83.969685][ T796] tipc: Node number set to 1 [ 84.007382][ T6254] netlink: 'syz.2.113': attribute type 3 has an invalid length. [ 84.059579][ T6256] netlink: 64 bytes leftover after parsing attributes in process `syz.2.113'. [ 84.091907][ T6256] netlink: 64 bytes leftover after parsing attributes in process `syz.2.113'. [ 84.205478][ T6265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.116'. [ 84.338000][ T6267] netlink: 'syz.3.117': attribute type 2 has an invalid length. [ 84.424000][ T6267] 9: entered promiscuous mode [ 84.508745][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 84.684976][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 84.724259][ T6291] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.748666][ T6289] netlink: 'syz.0.125': attribute type 25 has an invalid length. [ 84.778589][ T6289] netlink: 'syz.0.125': attribute type 28 has an invalid length. [ 84.813472][ T6293] netlink: 'syz.0.125': attribute type 25 has an invalid length. [ 84.857214][ T6293] netlink: 'syz.0.125': attribute type 28 has an invalid length. [ 85.228752][ T6317] netlink: ct family unspecified [ 85.340954][ T6332] Cannot find add_set index 2 as target [ 85.394387][ T6330] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 85.405940][ T6337] FAULT_INJECTION: forcing a failure. [ 85.405940][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 85.419607][ T6337] CPU: 0 UID: 0 PID: 6337 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT(full) [ 85.419630][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 85.419638][ T6337] Call Trace: [ 85.419645][ T6337] [ 85.419651][ T6337] dump_stack_lvl+0xe8/0x150 [ 85.419675][ T6337] should_fail_ex+0x412/0x560 [ 85.419700][ T6337] should_failslab+0xa8/0x100 [ 85.419722][ T6337] __kmalloc_cache_noprof+0x88/0x660 [ 85.419738][ T6337] ? lockdep_hardirqs_on+0x7a/0x110 [ 85.419758][ T6337] ? __request_module+0x2d0/0x660 [ 85.419780][ T6337] __request_module+0x2d0/0x660 [ 85.419804][ T6337] ? __pfx___request_module+0x10/0x10 [ 85.419837][ T6337] ? security_capable+0x7e/0x2c0 [ 85.419862][ T6337] ? dev_load+0x21/0x1f0 [ 85.419879][ T6337] dev_load+0x190/0x1f0 [ 85.419897][ T6337] dev_ioctl+0x837/0x1150 [ 85.419915][ T6337] sock_ioctl+0x75f/0x7f0 [ 85.419939][ T6337] ? __pfx_sock_ioctl+0x10/0x10 [ 85.419976][ T6337] ? __fget_files+0x3a0/0x420 [ 85.419992][ T6337] ? __fget_files+0x2a/0x420 [ 85.420010][ T6337] ? bpf_lsm_file_ioctl+0x9/0x20 [ 85.420033][ T6337] ? __pfx_sock_ioctl+0x10/0x10 [ 85.420057][ T6337] __se_sys_ioctl+0xfc/0x170 [ 85.420081][ T6337] do_syscall_64+0x14d/0xf80 [ 85.420104][ T6337] ? trace_irq_disable+0x3b/0x150 [ 85.420120][ T6337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.420146][ T6337] ? clear_bhb_loop+0x40/0x90 [ 85.420167][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.420183][ T6337] RIP: 0033:0x7faf8ed9c819 [ 85.420200][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.420219][ T6337] RSP: 002b:00007faf8fcfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.420237][ T6337] RAX: ffffffffffffffda RBX: 00007faf8f015fa0 RCX: 00007faf8ed9c819 [ 85.420254][ T6337] RDX: 0000200000000280 RSI: 00000000000089f8 RDI: 0000000000000004 [ 85.420265][ T6337] RBP: 00007faf8fcfb090 R08: 0000000000000000 R09: 0000000000000000 [ 85.420275][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.420285][ T6337] R13: 00007faf8f016038 R14: 00007faf8f015fa0 R15: 00007ffcea1620e8 [ 85.420317][ T6337] [ 86.049325][ T6360] sctp: [Deprecated]: syz.3.151 (pid 6360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.049325][ T6360] Use struct sctp_sack_info instead [ 86.230074][ T6372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.263311][ T6371] netlink: ct family unspecified [ 86.369508][ T6379] netlink: 'syz.3.160': attribute type 21 has an invalid length. [ 86.430440][ T9] IPVS: starting estimator thread 0... [ 86.446233][ T6382] netlink: 'syz.4.161': attribute type 2 has an invalid length. [ 86.474508][ T6382] 9: entered promiscuous mode [ 86.517609][ T6384] IPVS: using max 38 ests per chain, 91200 per kthread [ 86.580852][ T6392] netlink: 'syz.3.165': attribute type 2 has an invalid length. [ 86.618900][ T6392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.643504][ T6400] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 86.770451][ T29] cfg80211: failed to load regulatory.db [ 86.890278][ T6410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.932355][ T6414] netlink: ct family unspecified [ 87.130505][ T6430] openvswitch: netlink: Key type 1023 is out of range max 32 [ 87.286640][ T6438] __nla_validate_parse: 10 callbacks suppressed [ 87.286661][ T6438] netlink: 220 bytes leftover after parsing attributes in process `syz.3.182'. [ 87.337199][ T6438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.182'. [ 87.573311][ T6455] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.188'. [ 87.658846][ T6455] netlink: ct family unspecified [ 87.664700][ T6455] FAULT_INJECTION: forcing a failure. [ 87.664700][ T6455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.719546][ T6462] netlink: 9 bytes leftover after parsing attributes in process `syz.3.191'. [ 87.737893][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) [ 87.737917][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.737926][ T6455] Call Trace: [ 87.737934][ T6455] [ 87.737941][ T6455] dump_stack_lvl+0xe8/0x150 [ 87.737977][ T6455] should_fail_ex+0x412/0x560 [ 87.738012][ T6455] _copy_to_user+0x31/0xb0 [ 87.738035][ T6455] simple_read_from_buffer+0xe1/0x170 [ 87.738063][ T6455] proc_fail_nth_read+0x1bb/0x230 [ 87.738091][ T6455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.738118][ T6455] ? rw_verify_area+0x2a6/0x4d0 [ 87.738137][ T6455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.738163][ T6455] vfs_read+0x20c/0xa70 [ 87.738182][ T6455] ? fdget_pos+0x246/0x320 [ 87.738201][ T6455] ? __pfx___mutex_lock+0x10/0x10 [ 87.738225][ T6455] ? __pfx_vfs_read+0x10/0x10 [ 87.738244][ T6455] ? __fget_files+0x2a/0x420 [ 87.738264][ T6455] ? __fget_files+0x3a0/0x420 [ 87.738279][ T6455] ? __fget_files+0x2a/0x420 [ 87.738303][ T6455] ksys_read+0x150/0x270 [ 87.738322][ T6455] ? __pfx_ksys_read+0x10/0x10 [ 87.738349][ T6455] do_syscall_64+0x14d/0xf80 [ 87.738371][ T6455] ? trace_irq_disable+0x3b/0x150 [ 87.738387][ T6455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.738402][ T6455] ? clear_bhb_loop+0x40/0x90 [ 87.738422][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.738437][ T6455] RIP: 0033:0x7f988295d04e [ 87.738452][ T6455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.738465][ T6455] RSP: 002b:00007f98837e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.738483][ T6455] RAX: ffffffffffffffda RBX: 00007f98837e76c0 RCX: 00007f988295d04e [ 87.738495][ T6455] RDX: 000000000000000f RSI: 00007f98837e70a0 RDI: 0000000000000006 [ 87.738505][ T6455] RBP: 00007f98837e7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.738515][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.738523][ T6455] R13: 00007f9882c16038 R14: 00007f9882c15fa0 R15: 00007ffec8b86dc8 [ 87.738551][ T6455] [ 87.769117][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 87.872665][ T6467] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.322412][ T6488] netlink: 72 bytes leftover after parsing attributes in process `syz.1.203'. [ 88.352602][ T6473] bridge_slave_0: left allmulticast mode [ 88.374152][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 88.385210][ T6473] bridge_slave_0: left promiscuous mode [ 88.405558][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.491899][ T6473] bridge_slave_1: left allmulticast mode [ 88.500633][ T6473] bridge_slave_1: left promiscuous mode [ 88.506612][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.525433][ T6473] bond0: (slave bond_slave_0): Releasing backup interface [ 88.538285][ T6473] bond0: (slave bond_slave_1): Releasing backup interface [ 88.598108][ T6473] team0: Port device team_slave_0 removed [ 88.619547][ T6473] team0: Port device team_slave_1 removed [ 88.626267][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.634355][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.644752][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.656247][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.670587][ T6473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.698297][ T6493] warning: `syz.4.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.715297][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 88.726439][ T6499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.745548][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 88.756009][ T6500] netlink: 2 bytes leftover after parsing attributes in process `syz.0.207'. [ 88.778591][ T6498] IPVS: length: 239 != 24 [ 88.881667][ T6512] syzkaller0: entered promiscuous mode [ 88.887831][ T6512] syzkaller0: entered allmulticast mode [ 89.376544][ T6538] validate_nla: 2 callbacks suppressed [ 89.376562][ T6538] netlink: 'syz.0.221': attribute type 30 has an invalid length. [ 89.873602][ T6568] netlink: 'syz.4.232': attribute type 1 has an invalid length. [ 89.950875][ T6562] syzkaller1: entered promiscuous mode [ 89.956430][ T6562] syzkaller1: entered allmulticast mode [ 90.009907][ T6568] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 90.074562][ T6577] vlan2: entered promiscuous mode [ 90.130881][ T6577] erspan0: entered promiscuous mode [ 90.360348][ T6602] erspan0: entered promiscuous mode [ 90.420597][ T6601] netlink: ct family unspecified [ 90.562659][ T6613] netlink: 'syz.3.244': attribute type 21 has an invalid length. [ 90.723274][ T6621] openvswitch: netlink: Key type 1023 is out of range max 32 [ 90.845617][ T6625] netlink: 'syz.3.249': attribute type 13 has an invalid length. [ 90.863247][ T6625] veth0_macvtap: left promiscuous mode [ 90.869255][ T6625] macvtap0: entered allmulticast mode [ 90.882783][ T6625] macvtap0: refused to change device tx_queue_len [ 91.023015][ T6636] syzkaller1: entered promiscuous mode [ 91.029041][ T6636] syzkaller1: entered allmulticast mode [ 91.290466][ T6656] openvswitch: netlink: Key type 1023 is out of range max 32 [ 91.645121][ T6674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.844064][ T6684] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 91.850740][ T6684] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.096237][ T6694] netlink: 'syz.1.273': attribute type 5 has an invalid length. [ 92.173150][ T6694] netlink: 'syz.1.273': attribute type 5 has an invalid length. [ 92.311987][ T6703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.569897][ T6723] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 92.674603][ T6729] openvswitch: netlink: Key type 1023 is out of range max 32 [ 92.891981][ T6744] __nla_validate_parse: 16 callbacks suppressed [ 92.892002][ T6744] netlink: 9 bytes leftover after parsing attributes in process `syz.0.291'. [ 93.241601][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 93.277255][ T6758] lo: entered promiscuous mode [ 93.289219][ T6758] tunl0: entered promiscuous mode [ 93.294704][ T6762] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 93.320749][ T6758] gre0: entered promiscuous mode [ 93.368212][ T6768] openvswitch: netlink: Key type 1023 is out of range max 32 [ 93.413903][ T6758] gretap0: entered promiscuous mode [ 93.434635][ T6758] erspan0: entered promiscuous mode [ 93.451756][ T6758] ip_vti0: entered promiscuous mode [ 93.607282][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 93.634360][ T6784] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 93.644687][ T6784] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 93.920285][ T6801] tc_dump_action: action bad kind [ 94.210897][ T6819] netlink: 'syz.2.319': attribute type 83 has an invalid length. [ 94.290859][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.321'. [ 94.326769][ T6825] ip6gretap0: entered promiscuous mode [ 94.348252][ T6825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.321'. [ 94.424241][ T6830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.804679][ T6852] netlink: 64 bytes leftover after parsing attributes in process `syz.4.329'. [ 94.821950][ T6855] netlink: 64 bytes leftover after parsing attributes in process `syz.4.329'. [ 94.947997][ T6862] FAULT_INJECTION: forcing a failure. [ 94.947997][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 94.990385][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.1.334 Not tainted syzkaller #0 PREEMPT(full) [ 94.990410][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 94.990420][ T6862] Call Trace: [ 94.990427][ T6862] [ 94.990434][ T6862] dump_stack_lvl+0xe8/0x150 [ 94.990464][ T6862] should_fail_ex+0x412/0x560 [ 94.990495][ T6862] should_failslab+0xa8/0x100 [ 94.990519][ T6862] __kmalloc_noprof+0xe8/0x760 [ 94.990540][ T6862] ? tomoyo_encode+0x28b/0x550 [ 94.990564][ T6862] tomoyo_encode+0x28b/0x550 [ 94.990587][ T6862] tomoyo_realpath_from_path+0x58d/0x5d0 [ 94.990616][ T6862] ? tomoyo_path_number_perm+0x219/0x630 [ 94.990640][ T6862] tomoyo_path_number_perm+0x246/0x630 [ 94.990667][ T6862] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.990693][ T6862] ? __lock_acquire+0x6b5/0x2cf0 [ 94.990726][ T6862] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 94.990771][ T6862] ? __fget_files+0x2a/0x420 [ 94.990790][ T6862] ? __fget_files+0x2a/0x420 [ 94.990805][ T6862] ? __fget_files+0x3a0/0x420 [ 94.990820][ T6862] ? __fget_files+0x2a/0x420 [ 94.990840][ T6862] security_file_ioctl+0xc3/0x2a0 [ 94.990864][ T6862] __se_sys_ioctl+0x47/0x170 [ 94.990888][ T6862] do_syscall_64+0x14d/0xf80 [ 94.990911][ T6862] ? trace_irq_disable+0x3b/0x150 [ 94.990926][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.990944][ T6862] ? clear_bhb_loop+0x40/0x90 [ 94.990967][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.990984][ T6862] RIP: 0033:0x7f9462d9c819 [ 94.991001][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.991015][ T6862] RSP: 002b:00007f9463bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.991034][ T6862] RAX: ffffffffffffffda RBX: 00007f9463015fa0 RCX: 00007f9462d9c819 [ 94.991046][ T6862] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 94.991057][ T6862] RBP: 00007f9463bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 94.991067][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.991077][ T6862] R13: 00007f9463016038 R14: 00007f9463015fa0 R15: 00007fff48a06bd8 [ 94.991106][ T6862] [ 94.991124][ T6862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.124745][ T6868] openvswitch: netlink: Key type 1023 is out of range max 32 [ 95.277843][ T6869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.366531][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 95.452405][ T6885] netlink: 9 bytes leftover after parsing attributes in process `syz.2.343'. [ 95.552738][ T6888] Bluetooth: MGMT ver 1.23 [ 95.955036][ T6913] openvswitch: netlink: Key type 1023 is out of range max 32 [ 96.092965][ T6920] netlink: 'syz.1.354': attribute type 21 has an invalid length. [ 96.103694][ T6920] netlink: 176 bytes leftover after parsing attributes in process `syz.1.354'. [ 96.249769][ T6928] tipc: Enabling of bearer rejected, already enabled [ 96.473801][ T6941] FAULT_INJECTION: forcing a failure. [ 96.473801][ T6941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.507728][ T6941] CPU: 1 UID: 0 PID: 6941 Comm: syz.1.362 Not tainted syzkaller #0 PREEMPT(full) [ 96.507758][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.507768][ T6941] Call Trace: [ 96.507776][ T6941] [ 96.507783][ T6941] dump_stack_lvl+0xe8/0x150 [ 96.507814][ T6941] should_fail_ex+0x412/0x560 [ 96.507845][ T6941] _copy_from_user+0x2d/0xb0 [ 96.507868][ T6941] ___sys_sendmsg+0x1c6/0x360 [ 96.507896][ T6941] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.507949][ T6941] ? __fget_files+0x2a/0x420 [ 96.507965][ T6941] ? __fget_files+0x3a0/0x420 [ 96.507989][ T6941] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.508015][ T6941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.508046][ T6941] ? __pfx_ksys_write+0x10/0x10 [ 96.508076][ T6941] do_syscall_64+0x14d/0xf80 [ 96.508100][ T6941] ? trace_irq_disable+0x3b/0x150 [ 96.508116][ T6941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.508133][ T6941] ? clear_bhb_loop+0x40/0x90 [ 96.508152][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.508167][ T6941] RIP: 0033:0x7f9462d9c819 [ 96.508184][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.508206][ T6941] RSP: 002b:00007f9463bf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.508225][ T6941] RAX: ffffffffffffffda RBX: 00007f9463015fa0 RCX: 00007f9462d9c819 [ 96.508237][ T6941] RDX: 0000000000000010 RSI: 0000200000000d80 RDI: 0000000000000003 [ 96.508248][ T6941] RBP: 00007f9463bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 96.508259][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.508269][ T6941] R13: 00007f9463016038 R14: 00007f9463015fa0 R15: 00007fff48a06bd8 [ 96.508297][ T6941] [ 97.191954][ T6973] tipc: Failed to remove unknown binding: 66,0,0/1:2002430324/2002430325 [ 97.216577][ T6973] tipc: Failed to remove unknown binding: 66,0,0/1:2002430324/2002430325 [ 97.304684][ T6973] bond1: option mode: invalid value (133) [ 97.317100][ T6973] bond1 (unregistering): Released all slaves [ 97.349389][ T6985] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 97.364772][ T6982] syzkaller0: entered promiscuous mode [ 97.386285][ T6982] syzkaller0: entered allmulticast mode [ 97.400650][ T6990] openvswitch: netlink: Key type 1023 is out of range max 32 [ 97.411163][ T6985] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 97.926496][ T7020] __nla_validate_parse: 2 callbacks suppressed [ 97.926518][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 97.997815][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 98.168010][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 98.191464][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 98.315444][ T7048] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.394'. [ 98.325123][ T7048] netlink: ct family unspecified [ 98.335419][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 98.491883][ T7049] team0: Port device team_slave_0 removed [ 98.521676][ T7054] netlink: 'syz.3.396': attribute type 4 has an invalid length. [ 98.548272][ T3575] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.579923][ T3575] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.599339][ T3575] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.608348][ T3575] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.675102][ T7066] FAULT_INJECTION: forcing a failure. [ 98.675102][ T7066] name failslab, interval 1, probability 0, space 0, times 0 [ 98.688039][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.4.401 Not tainted syzkaller #0 PREEMPT(full) [ 98.688063][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.688072][ T7066] Call Trace: [ 98.688080][ T7066] [ 98.688087][ T7066] dump_stack_lvl+0xe8/0x150 [ 98.688116][ T7066] should_fail_ex+0x412/0x560 [ 98.688146][ T7066] should_failslab+0xa8/0x100 [ 98.688168][ T7066] ? sctp_get_port_local+0x6f2/0x1730 [ 98.688192][ T7066] kmem_cache_alloc_noprof+0x87/0x650 [ 98.688218][ T7066] sctp_get_port_local+0x6f2/0x1730 [ 98.688252][ T7066] ? __pfx_sctp_get_port_local+0x10/0x10 [ 98.688278][ T7066] ? sctp_bind_addr_match+0x28b/0x2b0 [ 98.688305][ T7066] sctp_do_bind+0x4f1/0x9d0 [ 98.688337][ T7066] sctp_connect_new_asoc+0x270/0x6b0 [ 98.688362][ T7066] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 98.688388][ T7066] ? __local_bh_enable_ip+0xd0/0x130 [ 98.688408][ T7066] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 98.688429][ T7066] ? security_sctp_bind_connect+0x7e/0x2c0 [ 98.688452][ T7066] sctp_sendmsg+0x1528/0x2c10 [ 98.688489][ T7066] ? __pfx_sctp_sendmsg+0x10/0x10 [ 98.688514][ T7066] ? aa_sk_perm+0x6d5/0x900 [ 98.688545][ T7066] ? __pfx_aa_sk_perm+0x10/0x10 [ 98.688572][ T7066] ? sock_rps_record_flow+0x19/0x400 [ 98.688599][ T7066] ? inet_sendmsg+0x2f4/0x370 [ 98.688626][ T7066] ____sys_sendmsg+0x80a/0x9f0 [ 98.688658][ T7066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.688689][ T7066] ? import_iovec+0x73/0xa0 [ 98.688714][ T7066] ___sys_sendmsg+0x2a5/0x360 [ 98.688741][ T7066] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.688798][ T7066] ? __fget_files+0x2a/0x420 [ 98.688814][ T7066] ? __fget_files+0x3a0/0x420 [ 98.688848][ T7066] __x64_sys_sendmsg+0x1bd/0x2a0 [ 98.688873][ T7066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.688904][ T7066] ? __pfx_ksys_write+0x10/0x10 [ 98.688936][ T7066] do_syscall_64+0x14d/0xf80 [ 98.688959][ T7066] ? trace_irq_disable+0x3b/0x150 [ 98.688974][ T7066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.688990][ T7066] ? clear_bhb_loop+0x40/0x90 [ 98.689012][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.689029][ T7066] RIP: 0033:0x7faf8ed9c819 [ 98.689046][ T7066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.689060][ T7066] RSP: 002b:00007faf8fcfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.689078][ T7066] RAX: ffffffffffffffda RBX: 00007faf8f015fa0 RCX: 00007faf8ed9c819 [ 98.689091][ T7066] RDX: 0000000000000010 RSI: 0000200000000d80 RDI: 0000000000000003 [ 98.689101][ T7066] RBP: 00007faf8fcfb090 R08: 0000000000000000 R09: 0000000000000000 [ 98.689111][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.689121][ T7066] R13: 00007faf8f016038 R14: 00007faf8f015fa0 R15: 00007ffcea1620e8 [ 98.689150][ T7066] [ 98.715384][ T7069] tipc: Enabling of bearer rejected, already enabled [ 99.689181][ T7112] FAULT_INJECTION: forcing a failure. [ 99.689181][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.703011][ T7112] CPU: 1 UID: 0 PID: 7112 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT(full) [ 99.703036][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 99.703046][ T7112] Call Trace: [ 99.703053][ T7112] [ 99.703060][ T7112] dump_stack_lvl+0xe8/0x150 [ 99.703096][ T7112] should_fail_ex+0x412/0x560 [ 99.703127][ T7112] _copy_from_user+0x2d/0xb0 [ 99.703150][ T7112] kstrtouint_from_user+0xd6/0x180 [ 99.703171][ T7112] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 99.703205][ T7112] proc_fail_nth_write+0x8e/0x210 [ 99.703231][ T7112] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.703261][ T7112] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.703288][ T7112] vfs_write+0x29a/0xb90 [ 99.703317][ T7112] ? __pfx_vfs_write+0x10/0x10 [ 99.703338][ T7112] ? __fget_files+0x2a/0x420 [ 99.703360][ T7112] ? __fget_files+0x3a0/0x420 [ 99.703375][ T7112] ? __fget_files+0x2a/0x420 [ 99.703400][ T7112] ksys_write+0x150/0x270 [ 99.703422][ T7112] ? __pfx_ksys_write+0x10/0x10 [ 99.703441][ T7112] ? __pfx_sock_ioctl+0x10/0x10 [ 99.703476][ T7112] do_syscall_64+0x14d/0xf80 [ 99.703498][ T7112] ? trace_irq_disable+0x3b/0x150 [ 99.703515][ T7112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.703533][ T7112] ? clear_bhb_loop+0x40/0x90 [ 99.703554][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.703572][ T7112] RIP: 0033:0x7faf8ed5d04e [ 99.703589][ T7112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.703603][ T7112] RSP: 002b:00007faf8fcfafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.703622][ T7112] RAX: ffffffffffffffda RBX: 00007faf8fcfb6c0 RCX: 00007faf8ed5d04e [ 99.703635][ T7112] RDX: 0000000000000001 RSI: 00007faf8fcfb0a0 RDI: 0000000000000004 [ 99.703645][ T7112] RBP: 00007faf8fcfb090 R08: 0000000000000000 R09: 0000000000000000 [ 99.703656][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.703666][ T7112] R13: 00007faf8f016038 R14: 00007faf8f015fa0 R15: 00007ffcea1620e8 [ 99.703696][ T7112] [ 99.937910][ T7115] openvswitch: netlink: Flow actions attr not present in new flow. [ 100.036138][ T7118] syzkaller1: entered promiscuous mode [ 100.041891][ T7118] syzkaller1: entered allmulticast mode [ 100.111741][ T7118] Bluetooth: MGMT ver 1.23 [ 100.131358][ T7124] openvswitch: netlink: Key type 1023 is out of range max 32 [ 100.175557][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 100.303632][ T7135] netlink: 56 bytes leftover after parsing attributes in process `syz.3.430'. [ 100.587158][ T7149] IPVS: Error connecting to the multicast addr [ 100.631824][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.436'. [ 100.635955][ T7156] openvswitch: netlink: Key type 1023 is out of range max 32 [ 100.651127][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 100.771341][ T7160] FAULT_INJECTION: forcing a failure. [ 100.771341][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 100.807029][ T7160] CPU: 1 UID: 0 PID: 7160 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(full) [ 100.807053][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.807062][ T7160] Call Trace: [ 100.807069][ T7160] [ 100.807076][ T7160] dump_stack_lvl+0xe8/0x150 [ 100.807105][ T7160] should_fail_ex+0x412/0x560 [ 100.807135][ T7160] should_failslab+0xa8/0x100 [ 100.807157][ T7160] ? skb_clone+0x212/0x3a0 [ 100.807179][ T7160] kmem_cache_alloc_noprof+0x87/0x650 [ 100.807196][ T7160] ? __netlink_lookup+0xc6/0x8b0 [ 100.807222][ T7160] skb_clone+0x212/0x3a0 [ 100.807247][ T7160] __netlink_deliver_tap+0x404/0x850 [ 100.807274][ T7160] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.807293][ T7160] netlink_deliver_tap+0x19c/0x1b0 [ 100.807312][ T7160] netlink_unicast+0x7e3/0x9b0 [ 100.807336][ T7160] ? __pfx_netlink_unicast+0x10/0x10 [ 100.807354][ T7160] ? netlink_sendmsg+0x650/0xb40 [ 100.807370][ T7160] ? skb_put+0x11b/0x210 [ 100.807393][ T7160] netlink_sendmsg+0x813/0xb40 [ 100.807418][ T7160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.807438][ T7160] ? aa_sock_msg_perm+0xf1/0x1b0 [ 100.807464][ T7160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.807485][ T7160] ____sys_sendmsg+0x972/0x9f0 [ 100.807513][ T7160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.807542][ T7160] ? import_iovec+0x73/0xa0 [ 100.807567][ T7160] ___sys_sendmsg+0x2a5/0x360 [ 100.807595][ T7160] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.807650][ T7160] ? __fget_files+0x2a/0x420 [ 100.807666][ T7160] ? __fget_files+0x3a0/0x420 [ 100.807691][ T7160] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.807716][ T7160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.807747][ T7160] ? __pfx_ksys_write+0x10/0x10 [ 100.807778][ T7160] do_syscall_64+0x14d/0xf80 [ 100.807801][ T7160] ? trace_irq_disable+0x3b/0x150 [ 100.807826][ T7160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.807848][ T7160] ? clear_bhb_loop+0x40/0x90 [ 100.807870][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.807887][ T7160] RIP: 0033:0x7f7b4699c819 [ 100.807904][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.807918][ T7160] RSP: 002b:00007f7b47820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.807937][ T7160] RAX: ffffffffffffffda RBX: 00007f7b46c15fa0 RCX: 00007f7b4699c819 [ 100.807954][ T7160] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 100.807975][ T7160] RBP: 00007f7b47820090 R08: 0000000000000000 R09: 0000000000000000 [ 100.807986][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.807995][ T7160] R13: 00007f7b46c16038 R14: 00007f7b46c15fa0 R15: 00007ffffbde2f18 [ 100.808024][ T7160] [ 101.019291][ T7163] netlink: ct family unspecified [ 101.427930][ T7172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.469074][ T7174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.525327][ T7172] ip6tnl1: entered promiscuous mode [ 101.530956][ T7182] openvswitch: netlink: Key type 1023 is out of range max 32 [ 101.876957][ T7196] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 102.737865][ T7234] FAULT_INJECTION: forcing a failure. [ 102.737865][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 102.782556][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(full) [ 102.782589][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.782599][ T7234] Call Trace: [ 102.782606][ T7234] [ 102.782614][ T7234] dump_stack_lvl+0xe8/0x150 [ 102.782644][ T7234] should_fail_ex+0x412/0x560 [ 102.782676][ T7234] should_failslab+0xa8/0x100 [ 102.782698][ T7234] ? dst_alloc+0x105/0x170 [ 102.782721][ T7234] kmem_cache_alloc_noprof+0x87/0x650 [ 102.782742][ T7234] ? __pfx_find_exception+0x10/0x10 [ 102.782762][ T7234] ? fib_lookup+0x76/0x440 [ 102.782783][ T7234] dst_alloc+0x105/0x170 [ 102.782808][ T7234] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 102.782829][ T7234] ? ip_route_output_key_hash_rcu+0x1281/0x25d0 [ 102.782855][ T7234] ? ip_route_output_key_hash+0xd8/0x2a0 [ 102.782876][ T7234] ip_route_output_key_hash+0x18d/0x2a0 [ 102.782896][ T7234] ? stack_depot_save_flags+0x3f3/0x810 [ 102.782922][ T7234] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 102.782946][ T7234] ? crng_fast_key_erasure+0x196/0x270 [ 102.782972][ T7234] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 102.782999][ T7234] ip_route_output_flow+0x2a/0x150 [ 102.783023][ T7234] sctp_v4_get_dst+0x3f8/0x12b0 [ 102.783043][ T7234] ? crng_make_state+0x2c5/0x600 [ 102.783065][ T7234] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.783087][ T7234] ? crng_make_state+0x36a/0x600 [ 102.783112][ T7234] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 102.783128][ T7234] ? _get_random_bytes+0x1e7/0x260 [ 102.783165][ T7234] ? dst_release+0x72/0x1b0 [ 102.783187][ T7234] sctp_transport_route+0x118/0x2f0 [ 102.783209][ T7234] sctp_assoc_add_peer+0x650/0x13b0 [ 102.783240][ T7234] sctp_connect_new_asoc+0x329/0x6b0 [ 102.783263][ T7234] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 102.783285][ T7234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 102.783307][ T7234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 102.783326][ T7234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 102.783347][ T7234] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 102.783365][ T7234] ? security_sctp_bind_connect+0x7e/0x2c0 [ 102.783391][ T7234] sctp_sendmsg+0x1528/0x2c10 [ 102.783425][ T7234] ? __pfx_sctp_sendmsg+0x10/0x10 [ 102.783450][ T7234] ? aa_sk_perm+0x6d5/0x900 [ 102.783480][ T7234] ? __pfx_aa_sk_perm+0x10/0x10 [ 102.783505][ T7234] ? sock_rps_record_flow+0x19/0x400 [ 102.783530][ T7234] ? inet_sendmsg+0x2f4/0x370 [ 102.783550][ T7234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.783610][ T7234] ____sys_sendmsg+0x80a/0x9f0 [ 102.783641][ T7234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.783671][ T7234] ? import_iovec+0x73/0xa0 [ 102.783694][ T7234] ___sys_sendmsg+0x2a5/0x360 [ 102.783723][ T7234] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.783775][ T7234] ? __fget_files+0x2a/0x420 [ 102.783790][ T7234] ? __fget_files+0x3a0/0x420 [ 102.783814][ T7234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 102.783836][ T7234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.783868][ T7234] ? __pfx_ksys_write+0x10/0x10 [ 102.783899][ T7234] do_syscall_64+0x14d/0xf80 [ 102.783922][ T7234] ? trace_irq_disable+0x3b/0x150 [ 102.783937][ T7234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.783955][ T7234] ? clear_bhb_loop+0x40/0x90 [ 102.783975][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.783992][ T7234] RIP: 0033:0x7f7b4699c819 [ 102.784009][ T7234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.784022][ T7234] RSP: 002b:00007f7b47820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.784039][ T7234] RAX: ffffffffffffffda RBX: 00007f7b46c15fa0 RCX: 00007f7b4699c819 [ 102.784051][ T7234] RDX: 0000000000000010 RSI: 0000200000000d80 RDI: 0000000000000003 [ 102.784061][ T7234] RBP: 00007f7b47820090 R08: 0000000000000000 R09: 0000000000000000 [ 102.784070][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.784080][ T7234] R13: 00007f7b46c16038 R14: 00007f7b46c15fa0 R15: 00007ffffbde2f18 [ 102.784109][ T7234] [ 103.320159][ T7237] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 103.689442][ T7251] openvswitch: netlink: Key type 1023 is out of range max 32 [ 103.801461][ T7259] netlink: 'syz.2.479': attribute type 75 has an invalid length. [ 103.873105][ T7263] __nla_validate_parse: 3 callbacks suppressed [ 103.873122][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 103.944403][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.482'. [ 104.318506][ T7287] vcan1: entered promiscuous mode [ 104.334147][ T7287] vcan1: entered allmulticast mode [ 104.388680][ T7292] openvswitch: netlink: Key type 1023 is out of range max 32 [ 104.651188][ T7304] netlink: 'syz.2.495': attribute type 3 has an invalid length. [ 104.704277][ T7304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.495'. [ 105.050186][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.073492][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.080776][ T7327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.127376][ T7327] netlink: 'syz.1.502': attribute type 51 has an invalid length. [ 105.322022][ T7337] netlink: 'syz.2.507': attribute type 11 has an invalid length. [ 105.357539][ T7337] netlink: 228 bytes leftover after parsing attributes in process `syz.2.507'. [ 105.367237][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 105.417310][ T7340] netlink: 14 bytes leftover after parsing attributes in process `syz.3.508'. [ 105.504132][ T7340] bond0 (unregistering): Released all slaves [ 105.576965][ T7347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.507'. [ 105.712250][ T7354] FAULT_INJECTION: forcing a failure. [ 105.712250][ T7354] name failslab, interval 1, probability 0, space 0, times 0 [ 105.769577][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.0.512 Not tainted syzkaller #0 PREEMPT(full) [ 105.769603][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.769614][ T7354] Call Trace: [ 105.769620][ T7354] [ 105.769627][ T7354] dump_stack_lvl+0xe8/0x150 [ 105.769657][ T7354] should_fail_ex+0x412/0x560 [ 105.769687][ T7354] should_failslab+0xa8/0x100 [ 105.769712][ T7354] __kmalloc_cache_noprof+0x88/0x660 [ 105.769733][ T7354] ? sctp_stream_init_ext+0x57/0x180 [ 105.769756][ T7354] sctp_stream_init_ext+0x57/0x180 [ 105.769777][ T7354] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 105.769799][ T7354] ? __asan_memcpy+0x40/0x70 [ 105.769822][ T7354] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 105.769853][ T7354] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 105.769874][ T7354] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 105.769897][ T7354] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 105.769921][ T7354] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 105.769944][ T7354] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 105.769965][ T7354] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 105.769989][ T7354] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 105.770010][ T7354] ? security_sctp_bind_connect+0x7e/0x2c0 [ 105.770035][ T7354] sctp_sendmsg+0x1b3d/0x2c10 [ 105.770072][ T7354] ? __pfx_sctp_sendmsg+0x10/0x10 [ 105.770098][ T7354] ? aa_sk_perm+0x6d5/0x900 [ 105.770130][ T7354] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.770158][ T7354] ? sock_rps_record_flow+0x19/0x400 [ 105.770183][ T7354] ? inet_sendmsg+0x2f4/0x370 [ 105.770204][ T7354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.770226][ T7354] ____sys_sendmsg+0x80a/0x9f0 [ 105.770256][ T7354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.770286][ T7354] ? import_iovec+0x73/0xa0 [ 105.770309][ T7354] ___sys_sendmsg+0x2a5/0x360 [ 105.770335][ T7354] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.770396][ T7354] ? __fget_files+0x2a/0x420 [ 105.770411][ T7354] ? __fget_files+0x3a0/0x420 [ 105.770435][ T7354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 105.770461][ T7354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.770492][ T7354] ? __pfx_ksys_write+0x10/0x10 [ 105.770523][ T7354] do_syscall_64+0x14d/0xf80 [ 105.770545][ T7354] ? trace_irq_disable+0x3b/0x150 [ 105.770561][ T7354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.770579][ T7354] ? clear_bhb_loop+0x40/0x90 [ 105.770601][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.770617][ T7354] RIP: 0033:0x7f94ebf9c819 [ 105.770633][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.770647][ T7354] RSP: 002b:00007f94ecd72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.770665][ T7354] RAX: ffffffffffffffda RBX: 00007f94ec215fa0 RCX: 00007f94ebf9c819 [ 105.770677][ T7354] RDX: 0000000000000010 RSI: 0000200000000d80 RDI: 0000000000000003 [ 105.770688][ T7354] RBP: 00007f94ecd72090 R08: 0000000000000000 R09: 0000000000000000 [ 105.770698][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.770708][ T7354] R13: 00007f94ec216038 R14: 00007f94ec215fa0 R15: 00007ffd552aebb8 [ 105.770736][ T7354] [ 105.791962][ T7358] netlink: 9 bytes leftover after parsing attributes in process `syz.2.514'. [ 105.877664][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 106.185747][ T7366] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 106.220750][ T7370] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 106.624675][ T7391] tipc: Started in network mode [ 106.632800][ T7391] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 106.661107][ T7391] tipc: Enabled bearer , priority 10 [ 106.754087][ T7396] syzkaller0: entered promiscuous mode [ 106.765298][ T7396] syzkaller0: entered allmulticast mode [ 106.833584][ T7397] syzkaller0: entered promiscuous mode [ 106.840047][ T7397] syzkaller0: entered allmulticast mode [ 106.856249][ T7401] netlink: 'syz.3.530': attribute type 21 has an invalid length. [ 106.874404][ T7401] netlink: 156 bytes leftover after parsing attributes in process `syz.3.530'. [ 107.241104][ T7413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.238329][ T797] tipc: Node number set to 1 [ 108.455145][ T7431] bond2: entered promiscuous mode [ 108.728039][ T7447] FAULT_INJECTION: forcing a failure. [ 108.728039][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 108.751328][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.2.546 Not tainted syzkaller #0 PREEMPT(full) [ 108.751352][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.751363][ T7447] Call Trace: [ 108.751369][ T7447] [ 108.751377][ T7447] dump_stack_lvl+0xe8/0x150 [ 108.751405][ T7447] should_fail_ex+0x412/0x560 [ 108.751436][ T7447] should_failslab+0xa8/0x100 [ 108.751461][ T7447] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 108.751483][ T7447] ? __alloc_skb+0x1d0/0x7d0 [ 108.751503][ T7447] ? __local_bh_enable_ip+0xd0/0x130 [ 108.751529][ T7447] __alloc_skb+0x1d0/0x7d0 [ 108.751554][ T7447] rtmsg_ifinfo_build_skb+0x84/0x260 [ 108.751588][ T7447] rtmsg_ifinfo+0x8c/0x1a0 [ 108.751612][ T7447] netif_state_change+0x297/0x3a0 [ 108.751630][ T7447] ? __kasan_slab_free+0x5c/0x80 [ 108.751649][ T7447] ? kfree+0x1c1/0x630 [ 108.751663][ T7447] ? call_usermodehelper_exec+0x2ea/0x4b0 [ 108.751686][ T7447] ? __pfx_netif_state_change+0x10/0x10 [ 108.751703][ T7447] ? netlink_unicast+0x80f/0x9b0 [ 108.751725][ T7447] ? netif_change_flags+0xe8/0x1a0 [ 108.751752][ T7447] do_setlink+0xbf6/0x4590 [ 108.751788][ T7447] ? __pfx_do_setlink+0x10/0x10 [ 108.751811][ T7447] ? __lock_acquire+0x6b5/0x2cf0 [ 108.751844][ T7447] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.751864][ T7447] ? __asan_memset+0x22/0x50 [ 108.751881][ T7447] ? br_switchdev_set_port_flag+0x1d8/0x3b0 [ 108.751905][ T7447] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 108.751928][ T7447] ? __lock_acquire+0x6b5/0x2cf0 [ 108.751954][ T7447] ? __mutex_lock+0x319/0x1300 [ 108.751978][ T7447] ? __pfx___nla_validate_parse+0x10/0x10 [ 108.751999][ T7447] ? br_port_flags_change+0x19f/0x1f0 [ 108.752021][ T7447] ? br_setport+0x1294/0x1680 [ 108.752052][ T7447] ? br_port_slave_changelink+0x139/0x150 [ 108.752079][ T7447] ? __local_bh_enable_ip+0xd0/0x130 [ 108.752101][ T7447] ? lockdep_hardirqs_on+0x7a/0x110 [ 108.752123][ T7447] ? __local_bh_enable_ip+0xd0/0x130 [ 108.752144][ T7447] ? br_port_slave_changelink+0x139/0x150 [ 108.752177][ T7447] rtnl_newlink+0x15ad/0x1bb0 [ 108.752202][ T7447] ? rtnl_newlink+0x821/0x1bb0 [ 108.752226][ T7447] ? __pfx_rtnl_newlink+0x10/0x10 [ 108.752243][ T7447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.752295][ T7447] ? kasan_quarantine_put+0xbb/0x1f0 [ 108.752313][ T7447] ? lockdep_hardirqs_on+0x7a/0x110 [ 108.752343][ T7447] ? kmem_cache_free+0x187/0x630 [ 108.752363][ T7447] ? nlmon_xmit+0xb0/0x100 [ 108.752396][ T7447] ? __lock_acquire+0x6b5/0x2cf0 [ 108.752422][ T7447] ? __local_bh_enable_ip+0xd0/0x130 [ 108.752443][ T7447] ? lockdep_hardirqs_on+0x7a/0x110 [ 108.752464][ T7447] ? __dev_queue_xmit+0x277/0x3890 [ 108.752486][ T7447] ? __local_bh_enable_ip+0xd0/0x130 [ 108.752506][ T7447] ? __dev_queue_xmit+0x277/0x3890 [ 108.752553][ T7447] ? __pfx_rtnl_newlink+0x10/0x10 [ 108.752572][ T7447] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 108.752596][ T7447] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 108.752616][ T7447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.752634][ T7447] ? ref_tracker_free+0x693/0x840 [ 108.752651][ T7447] ? __copy_skb_header+0xa3/0x4a0 [ 108.752676][ T7447] ? __pfx_ref_tracker_free+0x10/0x10 [ 108.752693][ T7447] ? __skb_clone+0x63/0x7a0 [ 108.752724][ T7447] netlink_rcv_skb+0x232/0x4b0 [ 108.752746][ T7447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.752768][ T7447] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.752799][ T7447] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.752826][ T7447] netlink_unicast+0x80f/0x9b0 [ 108.752853][ T7447] ? __pfx_netlink_unicast+0x10/0x10 [ 108.752872][ T7447] ? netlink_sendmsg+0x650/0xb40 [ 108.752890][ T7447] ? skb_put+0x11b/0x210 [ 108.752915][ T7447] netlink_sendmsg+0x813/0xb40 [ 108.752944][ T7447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.752968][ T7447] ? aa_sock_msg_perm+0xf1/0x1b0 [ 108.752996][ T7447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.753020][ T7447] ____sys_sendmsg+0x972/0x9f0 [ 108.753052][ T7447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.753083][ T7447] ? import_iovec+0x73/0xa0 [ 108.753107][ T7447] ___sys_sendmsg+0x2a5/0x360 [ 108.753135][ T7447] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.753198][ T7447] ? __fget_files+0x2a/0x420 [ 108.753213][ T7447] ? __fget_files+0x3a0/0x420 [ 108.753237][ T7447] __x64_sys_sendmsg+0x1bd/0x2a0 [ 108.753263][ T7447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.753295][ T7447] ? __pfx_ksys_write+0x10/0x10 [ 108.753325][ T7447] do_syscall_64+0x14d/0xf80 [ 108.753348][ T7447] ? trace_irq_disable+0x3b/0x150 [ 108.753363][ T7447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.753380][ T7447] ? clear_bhb_loop+0x40/0x90 [ 108.753402][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.753419][ T7447] RIP: 0033:0x7f988299c819 [ 108.753435][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.753449][ T7447] RSP: 002b:00007f98837e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.753468][ T7447] RAX: ffffffffffffffda RBX: 00007f9882c15fa0 RCX: 00007f988299c819 [ 108.753480][ T7447] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 108.753491][ T7447] RBP: 00007f98837e7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.753502][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.753512][ T7447] R13: 00007f9882c16038 R14: 00007f9882c15fa0 R15: 00007ffec8b86dc8 [ 108.753541][ T7447] [ 108.812775][ T7457] tipc: Started in network mode [ 109.299441][ T7457] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 109.308618][ T7457] tipc: Enabling of bearer rejected, failed to enable media [ 109.321070][ T7464] __nla_validate_parse: 4 callbacks suppressed [ 109.321085][ T7464] netlink: 260 bytes leftover after parsing attributes in process `syz.2.550'. [ 109.528099][ T7473] syzkaller0: entered promiscuous mode [ 109.541016][ T7473] syzkaller0: entered allmulticast mode [ 109.636986][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'. [ 109.637603][ T7467] infiniband syz0: set down [ 109.653645][ T7467] infiniband syz0: added veth0_vlan [ 109.755077][ T7467] RDS/IB: syz0: added [ 109.765029][ T7467] smc: adding ib device syz0 with port count 1 [ 109.772080][ T7467] smc: ib device syz0 port 1 has no pnetid [ 109.790531][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'. [ 109.955697][ T7493] netlink: 'syz.4.557': attribute type 2 has an invalid length. [ 110.051742][ T7498] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 110.308670][ T7510] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 110.440630][ T7510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.463419][ T7519] netlink: 766 bytes leftover after parsing attributes in process `syz.2.565'. [ 110.487073][ T7520] netlink: 766 bytes leftover after parsing attributes in process `syz.2.565'. [ 110.789923][ T7534] veth0: entered promiscuous mode [ 110.840242][ T7533] veth0: left promiscuous mode [ 111.171669][ T7551] Cannot find add_set index 2 as target [ 111.249306][ T7547] tap0: tun_chr_ioctl cmd 1074025676 [ 111.255684][ T7547] tap0: owner set to 0 [ 111.601558][ T7570] netlink: 72 bytes leftover after parsing attributes in process `syz.4.584'. [ 111.616797][ T7570] netlink: 72 bytes leftover after parsing attributes in process `syz.4.584'. [ 111.646656][ T7572] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 111.661937][ T7573] netlink: 'syz.4.584': attribute type 21 has an invalid length. [ 111.687871][ T7570] netlink: 'syz.4.584': attribute type 21 has an invalid length. [ 111.898540][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 111.914585][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 111.973296][ T7585] syzkaller1: entered promiscuous mode [ 111.981955][ T7585] syzkaller1: entered allmulticast mode [ 112.059956][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 112.368262][ T7600] geneve2: entered promiscuous mode [ 112.555774][ T1046] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.569724][ T1046] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.585907][ T1046] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.597448][ T1046] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.650617][ T7615] FAULT_INJECTION: forcing a failure. [ 112.650617][ T7615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.684568][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.4.600 Not tainted syzkaller #0 PREEMPT(full) [ 112.684594][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 112.684604][ T7615] Call Trace: [ 112.684611][ T7615] [ 112.684619][ T7615] dump_stack_lvl+0xe8/0x150 [ 112.684648][ T7615] should_fail_ex+0x412/0x560 [ 112.684679][ T7615] _copy_from_user+0x2d/0xb0 [ 112.684701][ T7615] ___sys_sendmsg+0x1c6/0x360 [ 112.684730][ T7615] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.684784][ T7615] ? __fget_files+0x2a/0x420 [ 112.684801][ T7615] ? __fget_files+0x3a0/0x420 [ 112.684826][ T7615] __x64_sys_sendmsg+0x1bd/0x2a0 [ 112.684851][ T7615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.684900][ T7615] ? __pfx_ksys_write+0x10/0x10 [ 112.684931][ T7615] do_syscall_64+0x14d/0xf80 [ 112.684954][ T7615] ? trace_irq_disable+0x3b/0x150 [ 112.684969][ T7615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.684987][ T7615] ? clear_bhb_loop+0x40/0x90 [ 112.685008][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.685026][ T7615] RIP: 0033:0x7faf8ed9c819 [ 112.685043][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.685057][ T7615] RSP: 002b:00007faf8fcfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.685076][ T7615] RAX: ffffffffffffffda RBX: 00007faf8f015fa0 RCX: 00007faf8ed9c819 [ 112.685087][ T7615] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 112.685098][ T7615] RBP: 00007faf8fcfb090 R08: 0000000000000000 R09: 0000000000000000 [ 112.685108][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.685118][ T7615] R13: 00007faf8f016038 R14: 00007faf8f015fa0 R15: 00007ffcea1620e8 [ 112.685153][ T7615] [ 112.950803][ T7615] netlink: 'syz.4.600': attribute type 2 has an invalid length. [ 113.082494][ T7633] Cannot find add_set index 2 as target [ 113.105030][ T7624] syzkaller1: entered promiscuous mode [ 113.130515][ T7624] syzkaller1: entered allmulticast mode [ 113.359892][ T7645] netlink: 'syz.2.611': attribute type 30 has an invalid length. [ 113.451172][ T7653] macvtap1: entered promiscuous mode [ 113.466592][ T7653] macvtap1: entered allmulticast mode [ 113.480193][ T7653] veth1_vlan: entered allmulticast mode [ 113.533310][ T7653] macvtap2: entered promiscuous mode [ 113.547129][ T7653] macvtap2: entered allmulticast mode [ 113.550940][ T7659] netlink: 'syz.0.612': attribute type 5 has an invalid length. [ 113.637315][ T7665] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 113.691731][ T7665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.171254][ T7682] syz.4.623 (7682) used greatest stack depth: 17000 bytes left [ 114.285726][ T7702] netlink: 'syz.2.630': attribute type 2 has an invalid length. [ 114.310349][ T7702] 9: entered promiscuous mode [ 114.413161][ T7709] tipc: Enabling of bearer rejected, already enabled [ 114.413885][ T7707] netlink: 'syz.1.632': attribute type 58 has an invalid length. [ 114.440337][ T7707] __nla_validate_parse: 8 callbacks suppressed [ 114.440356][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.632'. [ 114.501059][ T7707] syzkaller0: entered promiscuous mode [ 114.506571][ T7707] syzkaller0: entered allmulticast mode [ 114.544267][ T7711] policy can only be matched on NF_INET_PRE_ROUTING [ 114.544290][ T7711] unable to load match [ 114.562507][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 114.582043][ T7707] Cannot find add_set index 2 as target [ 114.620296][ T7715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.736984][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 115.115511][ T7738] tipc: Started in network mode [ 115.126783][ T7738] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 115.135737][ T7738] tipc: Enabling of bearer rejected, failed to enable media [ 115.145849][ T7753] FAULT_INJECTION: forcing a failure. [ 115.145849][ T7753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.187015][ T7746] netlink: 'syz.0.648': attribute type 2 has an invalid length. [ 115.202454][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.1.649 Not tainted syzkaller #0 PREEMPT(full) [ 115.202479][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.202489][ T7753] Call Trace: [ 115.202496][ T7753] [ 115.202503][ T7753] dump_stack_lvl+0xe8/0x150 [ 115.202531][ T7753] should_fail_ex+0x412/0x560 [ 115.202561][ T7753] _copy_from_iter+0x1d3/0x1670 [ 115.202584][ T7753] ? rcu_is_watching+0x15/0xb0 [ 115.202612][ T7753] ? __pfx__copy_from_iter+0x10/0x10 [ 115.202636][ T7753] ? netlink_sendmsg+0x650/0xb40 [ 115.202655][ T7753] ? skb_put+0x11b/0x210 [ 115.202678][ T7753] netlink_sendmsg+0x6c0/0xb40 [ 115.202703][ T7753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.202725][ T7753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 115.202752][ T7753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.202787][ T7753] ____sys_sendmsg+0x972/0x9f0 [ 115.202825][ T7753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.202856][ T7753] ? import_iovec+0x73/0xa0 [ 115.202879][ T7753] ___sys_sendmsg+0x2a5/0x360 [ 115.202907][ T7753] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.202958][ T7753] ? __fget_files+0x2a/0x420 [ 115.202974][ T7753] ? __fget_files+0x3a0/0x420 [ 115.202998][ T7753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 115.203023][ T7753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.203052][ T7753] ? __pfx_ksys_write+0x10/0x10 [ 115.203080][ T7753] do_syscall_64+0x14d/0xf80 [ 115.203103][ T7753] ? trace_irq_disable+0x3b/0x150 [ 115.203118][ T7753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.203135][ T7753] ? clear_bhb_loop+0x40/0x90 [ 115.203154][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.203171][ T7753] RIP: 0033:0x7f9462d9c819 [ 115.203187][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.203200][ T7753] RSP: 002b:00007f9463bcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.203218][ T7753] RAX: ffffffffffffffda RBX: 00007f9463016090 RCX: 00007f9462d9c819 [ 115.203229][ T7753] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 115.203238][ T7753] RBP: 00007f9463bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 115.203248][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.203257][ T7753] R13: 00007f9463016128 R14: 00007f9463016090 R15: 00007fff48a06bd8 [ 115.203284][ T7753] [ 115.440955][ T7753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.455582][ T7746] 9: entered promiscuous mode [ 115.506628][ T7746] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 115.823544][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 115.961635][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 115.972134][ T7782] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 115.983596][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.635245][ T7806] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 116.719138][ T7809] veth1_to_bond: entered allmulticast mode [ 116.731759][ T7809] veth1_to_bond: left allmulticast mode [ 116.739454][ T7811] netlink: 'syz.4.669': attribute type 5 has an invalid length. [ 116.769028][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 117.227598][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 117.403169][ T7849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.469030][ T796] IPVS: starting estimator thread 0... [ 117.525759][ T7857] Dead loop on virtual device ip6_vti0, fix it urgently! [ 117.568884][ T7855] IPVS: using max 35 ests per chain, 84000 per kthread [ 117.645369][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 117.648745][ T7865] FAULT_INJECTION: forcing a failure. [ 117.648745][ T7865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.669449][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.1.691 Not tainted syzkaller #0 PREEMPT(full) [ 117.669472][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.669483][ T7865] Call Trace: [ 117.669490][ T7865] [ 117.669497][ T7865] dump_stack_lvl+0xe8/0x150 [ 117.669537][ T7865] should_fail_ex+0x412/0x560 [ 117.669566][ T7865] _copy_to_user+0x31/0xb0 [ 117.669586][ T7865] simple_read_from_buffer+0xe1/0x170 [ 117.669614][ T7865] proc_fail_nth_read+0x1bb/0x230 [ 117.669640][ T7865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.669668][ T7865] ? rw_verify_area+0x2a6/0x4d0 [ 117.669686][ T7865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.669712][ T7865] vfs_read+0x20c/0xa70 [ 117.669730][ T7865] ? fdget_pos+0x246/0x320 [ 117.669751][ T7865] ? __pfx___mutex_lock+0x10/0x10 [ 117.669774][ T7865] ? __pfx_vfs_read+0x10/0x10 [ 117.669796][ T7865] ? __fget_files+0x2a/0x420 [ 117.669823][ T7865] ? __fget_files+0x3a0/0x420 [ 117.669836][ T7865] ? __fget_files+0x2a/0x420 [ 117.669857][ T7865] ksys_read+0x150/0x270 [ 117.669878][ T7865] ? __pfx_ksys_read+0x10/0x10 [ 117.669908][ T7865] do_syscall_64+0x14d/0xf80 [ 117.669930][ T7865] ? trace_irq_disable+0x3b/0x150 [ 117.669945][ T7865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.669961][ T7865] ? clear_bhb_loop+0x40/0x90 [ 117.669981][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.669996][ T7865] RIP: 0033:0x7f9462d5d04e [ 117.670018][ T7865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.670031][ T7865] RSP: 002b:00007f9463beffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.670056][ T7865] RAX: ffffffffffffffda RBX: 00007f9463bf06c0 RCX: 00007f9462d5d04e [ 117.670068][ T7865] RDX: 000000000000000f RSI: 00007f9463bf00a0 RDI: 0000000000000003 [ 117.670078][ T7865] RBP: 00007f9463bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 117.670088][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.670096][ T7865] R13: 00007f9463016038 R14: 00007f9463015fa0 R15: 00007fff48a06bd8 [ 117.670123][ T7865] [ 118.035637][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 118.061739][ T7875] IPVS: length: 63 != 24 [ 118.595164][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.607512][ T7900] netlink: 88 bytes leftover after parsing attributes in process `syz.1.704'. [ 118.617109][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.636122][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.656953][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.217838][ T7937] openvswitch: netlink: Key type 1023 is out of range max 32 [ 119.229280][ T7939] netlink: 'syz.2.718': attribute type 7 has an invalid length. [ 119.327818][ T51] Bluetooth: hci4: command tx timeout [ 119.723249][ T7966] netlink: 'syz.0.731': attribute type 29 has an invalid length. [ 119.747110][ T7966] netlink: 'syz.0.731': attribute type 6 has an invalid length. [ 119.756424][ T7966] netlink: 'syz.0.731': attribute type 29 has an invalid length. [ 119.789178][ T7966] netlink: 'syz.0.731': attribute type 32 has an invalid length. [ 119.789279][ T7964] __nla_validate_parse: 2 callbacks suppressed [ 119.789293][ T7964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.729'. [ 119.797684][ T7966] netlink: 500 bytes leftover after parsing attributes in process `syz.0.731'. [ 119.847569][ T7964] netlink: 'syz.4.729': attribute type 2 has an invalid length. [ 120.282203][ T8000] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 120.347263][ T1330] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.366653][ T1330] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.421739][ T1330] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.447108][ T1330] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.686421][ T8021] netlink: 'syz.1.755': attribute type 2 has an invalid length. [ 120.698954][ T8019] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 120.729916][ T8021] 9: entered promiscuous mode [ 120.849960][ T8037] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 120.900740][ T8037] netlink: 228 bytes leftover after parsing attributes in process `syz.2.759'. [ 120.987294][ T8042] FAULT_INJECTION: forcing a failure. [ 120.987294][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.057078][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.0.761 Not tainted syzkaller #0 PREEMPT(full) [ 121.057103][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.057113][ T8042] Call Trace: [ 121.057121][ T8042] [ 121.057128][ T8042] dump_stack_lvl+0xe8/0x150 [ 121.057157][ T8042] should_fail_ex+0x412/0x560 [ 121.057187][ T8042] _copy_from_user+0x2d/0xb0 [ 121.057209][ T8042] ___sys_sendmsg+0x1c6/0x360 [ 121.057236][ T8042] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.057264][ T8042] ? kstrtouint+0x6e/0xe0 [ 121.057311][ T8042] ? __fget_files+0x2a/0x420 [ 121.057326][ T8042] ? __fget_files+0x3a0/0x420 [ 121.057350][ T8042] __sys_sendmmsg+0x27c/0x4e0 [ 121.057377][ T8042] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.057396][ T8042] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 121.057441][ T8042] ? ksys_write+0x242/0x270 [ 121.057461][ T8042] ? __pfx_ksys_write+0x10/0x10 [ 121.057483][ T8042] __x64_sys_sendmmsg+0xa0/0xc0 [ 121.057506][ T8042] do_syscall_64+0x14d/0xf80 [ 121.057526][ T8042] ? trace_irq_disable+0x3b/0x150 [ 121.057541][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.057557][ T8042] ? clear_bhb_loop+0x40/0x90 [ 121.057576][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.057599][ T8042] RIP: 0033:0x7f94ebf9c819 [ 121.057615][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.057627][ T8042] RSP: 002b:00007f94ecd72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.057645][ T8042] RAX: ffffffffffffffda RBX: 00007f94ec215fa0 RCX: 00007f94ebf9c819 [ 121.057658][ T8042] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000004 [ 121.057668][ T8042] RBP: 00007f94ecd72090 R08: 0000000000000000 R09: 0000000000000000 [ 121.057678][ T8042] R10: 0000000020040800 R11: 0000000000000246 R12: 0000000000000001 [ 121.057687][ T8042] R13: 00007f94ec216038 R14: 00007f94ec215fa0 R15: 00007ffd552aebb8 [ 121.057712][ T8042] [ 121.298011][ T8053] x_tables: unsorted entry at hook 3 [ 121.303543][ T8053] x_tables: unsorted entry at hook 3 [ 121.335858][ T8060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.512786][ T8072] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 121.649688][ T8078] netlink: 'syz.1.774': attribute type 2 has an invalid length. [ 121.742875][ T8087] FAULT_INJECTION: forcing a failure. [ 121.742875][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.821680][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.2.777 Not tainted syzkaller #0 PREEMPT(full) [ 121.821706][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.821717][ T8087] Call Trace: [ 121.821724][ T8087] [ 121.821732][ T8087] dump_stack_lvl+0xe8/0x150 [ 121.821762][ T8087] should_fail_ex+0x412/0x560 [ 121.821794][ T8087] _copy_to_user+0x31/0xb0 [ 121.821819][ T8087] simple_read_from_buffer+0xe1/0x170 [ 121.821849][ T8087] proc_fail_nth_read+0x1bb/0x230 [ 121.821877][ T8087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.821906][ T8087] ? rw_verify_area+0x2a6/0x4d0 [ 121.821925][ T8087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.821952][ T8087] vfs_read+0x20c/0xa70 [ 121.821969][ T8087] ? fdget_pos+0x246/0x320 [ 121.821991][ T8087] ? __pfx___mutex_lock+0x10/0x10 [ 121.822017][ T8087] ? __pfx_vfs_read+0x10/0x10 [ 121.822038][ T8087] ? __fget_files+0x2a/0x420 [ 121.822058][ T8087] ? __fget_files+0x3a0/0x420 [ 121.822074][ T8087] ? __fget_files+0x2a/0x420 [ 121.822099][ T8087] ksys_read+0x150/0x270 [ 121.822120][ T8087] ? __pfx_ksys_read+0x10/0x10 [ 121.822152][ T8087] do_syscall_64+0x14d/0xf80 [ 121.822174][ T8087] ? trace_irq_disable+0x3b/0x150 [ 121.822190][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.822208][ T8087] ? clear_bhb_loop+0x40/0x90 [ 121.822229][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.822247][ T8087] RIP: 0033:0x7f988295d04e [ 121.822264][ T8087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.822278][ T8087] RSP: 002b:00007f98837e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.822297][ T8087] RAX: ffffffffffffffda RBX: 00007f98837e76c0 RCX: 00007f988295d04e [ 121.822317][ T8087] RDX: 000000000000000f RSI: 00007f98837e70a0 RDI: 0000000000000003 [ 121.822327][ T8087] RBP: 00007f98837e7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.822337][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.822347][ T8087] R13: 00007f9882c16038 R14: 00007f9882c15fa0 R15: 00007ffec8b86dc8 [ 121.822377][ T8087] [ 122.313665][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 122.324552][ T8107] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 122.335768][ T8107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.356836][ T8107] xfrm1: entered allmulticast mode [ 122.404176][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'. [ 122.476934][ T8114] syzkaller0: entered promiscuous mode [ 122.492762][ T8114] syzkaller0: entered allmulticast mode [ 122.735778][ T8133] netlink: 'syz.2.795': attribute type 1 has an invalid length. [ 122.785222][ T8133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.806428][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 122.882200][ T8133] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.895163][ T8133] bond3: (slave bond4): Enslaving as an active interface with a down link [ 123.006934][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 123.209660][ T8167] xt_hashlimit: size too large, truncated to 1048576 [ 123.229003][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.806'. [ 123.238583][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.299783][ T8171] Cannot find add_set index 2 as target [ 123.313961][ T8168] bridge_slave_0 (unregistering): left allmulticast mode [ 123.346078][ T8168] bridge_slave_0 (unregistering): left promiscuous mode [ 123.372434][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.401842][ T8169] bond0: ARP target 8.4.0.0 is already present [ 123.408731][ T8169] bond0: option arp_ip_target: invalid value (1032) [ 123.608895][ T8177] geneve2: entered promiscuous mode [ 123.702762][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.810'. [ 123.724886][ T8183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.810'. [ 123.748799][ T8186] openvswitch: netlink: Key type 1023 is out of range max 32 [ 123.940414][ T8197] Cannot find add_set index 2 as target [ 124.083808][ T8203] netlink: 'syz.4.822': attribute type 2 has an invalid length. [ 124.479440][ T8235] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.939362][ T8250] syzkaller0: entered promiscuous mode [ 124.945019][ T8250] syzkaller0: entered allmulticast mode [ 125.140751][ T8272] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 125.685468][ T8294] openvswitch: netlink: Missing valid actions attribute. [ 125.693601][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.378905][ T8272] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 126.525580][ T8296] bond1: Unable to set up delay as MII monitoring is disabled [ 126.554455][ T8296] bond1 (unregistering): Released all slaves [ 126.841370][ T8323] __nla_validate_parse: 2 callbacks suppressed [ 126.841390][ T8323] netlink: 9 bytes leftover after parsing attributes in process `syz.4.859'. [ 126.927269][ T8326] SET target dimension over the limit! [ 127.185270][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 127.235438][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 127.250320][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 127.551638][ T8366] netlink: 9 bytes leftover after parsing attributes in process `syz.1.875'. [ 127.677327][ T8372] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 127.733058][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 127.815796][ T8381] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 127.882367][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 127.887761][ T8381] netlink: 'syz.3.883': attribute type 2 has an invalid length. [ 127.936402][ T8381] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 127.944443][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 128.010628][ T8388] bond1: entered promiscuous mode [ 128.040035][ T8388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.120432][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 128.248562][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 128.259370][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 128.302268][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 128.850005][ T8449] netlink: 9 bytes leftover after parsing attributes in process `syz.0.909'. [ 128.889161][ T8449] 0: renamed from hsr_slave_1 (while UP) [ 128.907446][ T8412] infiniband syz2: set active [ 128.919694][ T8412] infiniband syz2: added vxcan1 [ 128.926413][ T8449] 0: entered allmulticast mode [ 128.953746][ T8449] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 128.978000][ T5886] vxcan1 speed is unknown, defaulting to 1000 [ 129.001299][ T8412] RDS/IB: syz2: added [ 129.005458][ T8412] smc: adding ib device syz2 with port count 1 [ 129.012914][ T8412] smc: ib device syz2 port 1 has no pnetid [ 129.017582][ T8457] tipc: Enabling of bearer rejected, failed to enable media [ 129.047450][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 129.064981][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 129.642229][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 129.717670][ T8491] bridge_slave_0: left allmulticast mode [ 129.757248][ T8491] bridge_slave_0: left promiscuous mode [ 129.763072][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.888739][ T8491] bridge_slave_1: left allmulticast mode [ 129.904639][ T8491] bridge_slave_1: left promiscuous mode [ 129.921493][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.941482][ T8491] bond0: (slave bond_slave_0): Releasing backup interface [ 129.965707][ T8491] bond0: (slave bond_slave_1): Releasing backup interface [ 130.008348][ T8491] team0: Port device team_slave_0 removed [ 130.025504][ T8491] team0: Port device team_slave_1 removed [ 130.040986][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.057582][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.068925][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.078557][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.090155][ T8491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.108772][ T8483] team0: Mode changed to "activebackup" [ 130.154536][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 130.399027][ T8519] ipt_REJECT: ECHOREPLY no longer supported. [ 130.480069][ T5977] syz_tun: tun_net_xmit 110 [ 130.617048][ T5941] syz_tun: tun_net_xmit 110 [ 130.622337][ T8536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.823915][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 131.441903][ T8587] syzkaller1: entered promiscuous mode [ 131.454161][ T8587] syzkaller1: entered allmulticast mode [ 131.468316][ T8587] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 131.483881][ T8412] vxcan1 speed is unknown, defaulting to 1000 [ 131.564452][ T8587] bond1: Invalid ad_actor_system MAC address. [ 131.580756][ T8587] bond1: option ad_actor_system: invalid value (1) [ 131.590846][ T8587] bond1 (unregistering): Released all slaves [ 132.164419][ T8619] netlink: 'syz.3.969': attribute type 2 has an invalid length. [ 132.849852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856161][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.126577][ T8568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.603542][ T8644] __nla_validate_parse: 4 callbacks suppressed [ 134.603561][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.979'. [ 134.606542][ T8643] openvswitch: netlink: Message has 8 unknown bytes. [ 134.631193][ T8647] netlink: 'syz.4.981': attribute type 21 has an invalid length. [ 134.647452][ T8647] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 134.791627][ T8658] netlink: 'syz.4.985': attribute type 83 has an invalid length. [ 134.807763][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'. [ 134.949197][ T8669] netlink: 'syz.3.987': attribute type 21 has an invalid length. [ 134.980934][ T8669] netlink: 152 bytes leftover after parsing attributes in process `syz.3.987'. [ 135.144643][ T8681] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 135.287364][ T8689] syz_tun: tun_net_xmit 73152 [ 135.322805][ T8693] openvswitch: netlink: Flow actions attr not present in new flow. [ 135.390462][ T8695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1001'. [ 135.494504][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'. [ 135.511478][ T8703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1005'. [ 135.547044][ T8709] netlink: 'syz.3.1006': attribute type 2 has an invalid length. [ 135.601744][ T8711] tipc: Enabling of bearer rejected, failed to enable media [ 135.677081][ T8716] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 135.700442][ T8718] openvswitch: netlink: Key type 1023 is out of range max 32 [ 135.820918][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 135.832402][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 135.841567][ T8727] netlink: 'syz.2.1014': attribute type 14 has an invalid length. [ 135.850647][ T8727] netlink: 'syz.2.1014': attribute type 13 has an invalid length. [ 136.014696][ T8746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1019'. [ 136.032527][ T8748] netlink: 'syz.0.1020': attribute type 12 has an invalid length. [ 136.080360][ T8754] FAULT_INJECTION: forcing a failure. [ 136.080360][ T8754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.133189][ T8754] CPU: 1 UID: 0 PID: 8754 Comm: syz.2.1021 Not tainted syzkaller #0 PREEMPT(full) [ 136.133214][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.133224][ T8754] Call Trace: [ 136.133231][ T8754] [ 136.133239][ T8754] dump_stack_lvl+0xe8/0x150 [ 136.133268][ T8754] should_fail_ex+0x412/0x560 [ 136.133300][ T8754] _copy_from_user+0x2d/0xb0 [ 136.133323][ T8754] kstrtouint_from_user+0xd6/0x180 [ 136.133343][ T8754] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 136.133376][ T8754] proc_fail_nth_write+0x8e/0x210 [ 136.133401][ T8754] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.133431][ T8754] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.133457][ T8754] vfs_write+0x29a/0xb90 [ 136.133486][ T8754] ? __pfx_vfs_write+0x10/0x10 [ 136.133507][ T8754] ? __fget_files+0x2a/0x420 [ 136.133527][ T8754] ? __fget_files+0x3a0/0x420 [ 136.133542][ T8754] ? __fget_files+0x2a/0x420 [ 136.133566][ T8754] ksys_write+0x150/0x270 [ 136.133588][ T8754] ? __pfx_ksys_write+0x10/0x10 [ 136.133626][ T8754] do_syscall_64+0x14d/0xf80 [ 136.133650][ T8754] ? trace_irq_disable+0x3b/0x150 [ 136.133665][ T8754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.133683][ T8754] ? clear_bhb_loop+0x40/0x90 [ 136.133705][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.133722][ T8754] RIP: 0033:0x7f988295d04e [ 136.133739][ T8754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 136.133751][ T8754] RSP: 002b:00007f98837e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.133770][ T8754] RAX: ffffffffffffffda RBX: 00007f98837e76c0 RCX: 00007f988295d04e [ 136.133782][ T8754] RDX: 0000000000000001 RSI: 00007f98837e70a0 RDI: 0000000000000004 [ 136.133793][ T8754] RBP: 00007f98837e7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.133803][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.133813][ T8754] R13: 00007f9882c16038 R14: 00007f9882c15fa0 R15: 00007ffec8b86dc8 [ 136.133842][ T8754] [ 136.405653][ T8763] Cannot find add_set index 2 as target [ 136.528762][ T8769] openvswitch: netlink: Key type 1023 is out of range max 32 [ 136.822021][ T8781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1033'. [ 136.985016][ T8790] Cannot find add_set index 2 as target [ 137.342363][ T8812] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 137.358398][ T8811] netlink: 'syz.4.1045': attribute type 10 has an invalid length. [ 137.879651][ T8825] Cannot find add_set index 2 as target [ 138.794488][ T8726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.117554][ T5941] syz_tun: tun_net_xmit 110 [ 139.162041][ T8853] Cannot find add_set index 2 as target [ 139.202341][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 139.209207][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880296d9c00: rx timeout, send abort [ 139.218694][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880296d9c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.321503][ T8855] team0: Port device batadv1 added [ 139.348502][ T8859] tipc: Enabling of bearer rejected, already enabled [ 139.408384][ T8867] syzkaller0: entered promiscuous mode [ 139.425628][ T8867] syzkaller0: entered allmulticast mode [ 139.677301][ T5941] syz_tun: tun_net_xmit 110 [ 139.731340][ T8880] __nla_validate_parse: 5 callbacks suppressed [ 139.731362][ T8880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1071'. [ 139.916529][ T8892] Cannot find add_set index 2 as target [ 139.969015][ T8900] tipc: Enabled bearer , priority 10 [ 140.093353][ T8904] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 140.103977][ T8904] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1080'. [ 140.139292][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 140.150744][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 140.153716][ T8912] syz_tun: tun_net_xmit 42 [ 140.433922][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 140.445681][ T8924] netlink: 'syz.0.1090': attribute type 11 has an invalid length. [ 140.453848][ T8924] netlink: 'syz.0.1090': attribute type 11 has an invalid length. [ 140.463061][ T8924] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1090'. [ 140.576096][ T8926] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 140.837132][ T8950] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1100'. [ 140.839325][ T8944] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 141.047202][ T8961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1102'. [ 141.070190][ T8965] netlink: 'syz.2.1103': attribute type 21 has an invalid length. [ 141.089337][ T24] tipc: Node number set to 1 [ 141.107241][ T8965] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1103'. [ 141.169982][ C0] syz_tun: tun_net_xmit 42 [ 141.284355][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 141.530321][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.700340][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.734381][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.762447][ T8984] 0: left allmulticast mode [ 141.847333][ T8984] ip6tnl1: left promiscuous mode [ 141.852699][ T8984] veth1_vlan: left allmulticast mode [ 141.860031][ T8984] macvtap1: left promiscuous mode [ 141.865352][ T8984] macvtap1: left allmulticast mode [ 141.936775][ T1046] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.969841][ T1046] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.986331][ T9016] FAULT_INJECTION: forcing a failure. [ 141.986331][ T9016] name failslab, interval 1, probability 0, space 0, times 0 [ 142.004771][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.014014][ T9016] CPU: 0 UID: 0 PID: 9016 Comm: syz.3.1117 Not tainted syzkaller #0 PREEMPT(full) [ 142.014039][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.014049][ T9016] Call Trace: [ 142.014056][ T9016] [ 142.014064][ T9016] dump_stack_lvl+0xe8/0x150 [ 142.014094][ T9016] should_fail_ex+0x412/0x560 [ 142.014125][ T9016] should_failslab+0xa8/0x100 [ 142.014150][ T9016] __kmalloc_noprof+0xe8/0x760 [ 142.014171][ T9016] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 142.014202][ T9016] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 142.014232][ T9016] genl_family_rcv_msg_doit+0xd9/0x330 [ 142.014270][ T9016] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 142.014301][ T9016] ? apparmor_capable+0x126/0x170 [ 142.014324][ T9016] ? bpf_lsm_capable+0x9/0x20 [ 142.014346][ T9016] ? security_capable+0x7e/0x2c0 [ 142.014374][ T9016] genl_rcv_msg+0x61c/0x7a0 [ 142.014400][ T9016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.014419][ T9016] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 142.014441][ T9016] ? __pfx_nl80211_set_interface+0x10/0x10 [ 142.014456][ T9016] ? __pfx_nl80211_post_doit+0x10/0x10 [ 142.014479][ T9016] ? __lock_acquire+0x6b5/0x2cf0 [ 142.014508][ T9016] netlink_rcv_skb+0x232/0x4b0 [ 142.014528][ T9016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.014550][ T9016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.014585][ T9016] ? down_read+0x272/0x2e0 [ 142.014599][ T9016] ? genl_rcv+0xd/0x40 [ 142.014621][ T9016] genl_rcv+0x28/0x40 [ 142.014641][ T9016] netlink_unicast+0x80f/0x9b0 [ 142.014667][ T9016] ? __pfx_netlink_unicast+0x10/0x10 [ 142.014686][ T9016] ? netlink_sendmsg+0x650/0xb40 [ 142.014704][ T9016] ? skb_put+0x11b/0x210 [ 142.014726][ T9016] netlink_sendmsg+0x813/0xb40 [ 142.014754][ T9016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.014777][ T9016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.014804][ T9016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.014826][ T9016] ____sys_sendmsg+0x972/0x9f0 [ 142.014859][ T9016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.014891][ T9016] ? import_iovec+0x73/0xa0 [ 142.014916][ T9016] ___sys_sendmsg+0x2a5/0x360 [ 142.014943][ T9016] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.014994][ T9016] ? __fget_files+0x2a/0x420 [ 142.015015][ T9016] ? __fget_files+0x3a0/0x420 [ 142.015042][ T9016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 142.015068][ T9016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.015099][ T9016] ? __pfx_ksys_write+0x10/0x10 [ 142.015129][ T9016] do_syscall_64+0x14d/0xf80 [ 142.015151][ T9016] ? trace_irq_disable+0x3b/0x150 [ 142.015166][ T9016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.015184][ T9016] ? clear_bhb_loop+0x40/0x90 [ 142.015205][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.015222][ T9016] RIP: 0033:0x7f7b4699c819 [ 142.015245][ T9016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.015260][ T9016] RSP: 002b:00007f7b47820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.015279][ T9016] RAX: ffffffffffffffda RBX: 00007f7b46c15fa0 RCX: 00007f7b4699c819 [ 142.015291][ T9016] RDX: 0000000000048000 RSI: 0000200000000100 RDI: 0000000000000003 [ 142.015303][ T9016] RBP: 00007f7b47820090 R08: 0000000000000000 R09: 0000000000000000 [ 142.015314][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.015324][ T9016] R13: 00007f7b46c16038 R14: 00007f7b46c15fa0 R15: 00007ffffbde2f18 [ 142.015352][ T9016] [ 142.348694][ C0] syz_tun: tun_net_xmit 42 [ 142.355500][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.409125][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.419053][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.428055][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.436977][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.538120][ T9022] netlink: 'syz.1.1119': attribute type 21 has an invalid length. [ 143.113930][ T9056] Cannot find add_set index 2 as target [ 143.415726][ T9076] FAULT_INJECTION: forcing a failure. [ 143.415726][ T9076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.481087][ T9076] CPU: 0 UID: 0 PID: 9076 Comm: syz.0.1136 Not tainted syzkaller #0 PREEMPT(full) [ 143.481115][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.481126][ T9076] Call Trace: [ 143.481133][ T9076] [ 143.481140][ T9076] dump_stack_lvl+0xe8/0x150 [ 143.481170][ T9076] should_fail_ex+0x412/0x560 [ 143.481211][ T9076] _copy_from_iter+0x1d3/0x1670 [ 143.481234][ T9076] ? rcu_is_watching+0x15/0xb0 [ 143.481267][ T9076] ? __pfx__copy_from_iter+0x10/0x10 [ 143.481294][ T9076] ? netlink_sendmsg+0x650/0xb40 [ 143.481313][ T9076] ? skb_put+0x11b/0x210 [ 143.481338][ T9076] netlink_sendmsg+0x6c0/0xb40 [ 143.481366][ T9076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.481389][ T9076] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.481417][ T9076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.481440][ T9076] ____sys_sendmsg+0x972/0x9f0 [ 143.481471][ T9076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.481502][ T9076] ? import_iovec+0x73/0xa0 [ 143.481527][ T9076] ___sys_sendmsg+0x2a5/0x360 [ 143.481555][ T9076] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.481607][ T9076] ? __fget_files+0x2a/0x420 [ 143.481623][ T9076] ? __fget_files+0x3a0/0x420 [ 143.481647][ T9076] __x64_sys_sendmsg+0x1bd/0x2a0 [ 143.481672][ T9076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.481703][ T9076] ? __pfx_ksys_write+0x10/0x10 [ 143.481733][ T9076] do_syscall_64+0x14d/0xf80 [ 143.481756][ T9076] ? trace_irq_disable+0x3b/0x150 [ 143.481771][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.481788][ T9076] ? clear_bhb_loop+0x40/0x90 [ 143.481809][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.481826][ T9076] RIP: 0033:0x7f94ebf9c819 [ 143.481843][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.481858][ T9076] RSP: 002b:00007f94ecd72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.481876][ T9076] RAX: ffffffffffffffda RBX: 00007f94ec215fa0 RCX: 00007f94ebf9c819 [ 143.481889][ T9076] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 143.481899][ T9076] RBP: 00007f94ecd72090 R08: 0000000000000000 R09: 0000000000000000 [ 143.481909][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.481919][ T9076] R13: 00007f94ec216038 R14: 00007f94ec215fa0 R15: 00007ffd552aebb8 [ 143.481947][ T9076] [ 143.518103][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.051188][ T9106] netlink: 'syz.1.1144': attribute type 21 has an invalid length. [ 145.133996][ T9167] __nla_validate_parse: 9 callbacks suppressed [ 145.134017][ T9167] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1160'. [ 145.317460][ T9175] FAULT_INJECTION: forcing a failure. [ 145.317460][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 145.335199][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.4.1165 Not tainted syzkaller #0 PREEMPT(full) [ 145.335225][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.335235][ T9175] Call Trace: [ 145.335242][ T9175] [ 145.335250][ T9175] dump_stack_lvl+0xe8/0x150 [ 145.335279][ T9175] should_fail_ex+0x412/0x560 [ 145.335309][ T9175] should_failslab+0xa8/0x100 [ 145.335333][ T9175] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 145.335353][ T9175] ? __alloc_skb+0x186/0x7d0 [ 145.335372][ T9175] ? __alloc_skb+0x1d0/0x7d0 [ 145.335390][ T9175] ? __local_bh_enable_ip+0xd0/0x130 [ 145.335415][ T9175] __alloc_skb+0x1d0/0x7d0 [ 145.335435][ T9175] ? netlink_ack_tlv_len+0x6c/0x210 [ 145.335457][ T9175] netlink_ack+0x146/0xa50 [ 145.335474][ T9175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.335493][ T9175] ? ref_tracker_free+0x693/0x840 [ 145.335508][ T9175] ? __copy_skb_header+0xa3/0x4a0 [ 145.335533][ T9175] ? __pfx_ref_tracker_free+0x10/0x10 [ 145.335550][ T9175] ? __skb_clone+0x63/0x7a0 [ 145.335579][ T9175] netlink_rcv_skb+0x2b6/0x4b0 [ 145.335598][ T9175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.335617][ T9175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.335646][ T9175] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.335672][ T9175] netlink_unicast+0x80f/0x9b0 [ 145.335698][ T9175] ? __pfx_netlink_unicast+0x10/0x10 [ 145.335717][ T9175] ? netlink_sendmsg+0x650/0xb40 [ 145.335735][ T9175] ? skb_put+0x11b/0x210 [ 145.335758][ T9175] netlink_sendmsg+0x813/0xb40 [ 145.335784][ T9175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.335805][ T9175] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.335832][ T9175] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.335853][ T9175] ____sys_sendmsg+0x972/0x9f0 [ 145.335882][ T9175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.335910][ T9175] ? import_iovec+0x73/0xa0 [ 145.335930][ T9175] ___sys_sendmsg+0x2a5/0x360 [ 145.335954][ T9175] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.336000][ T9175] ? __fget_files+0x2a/0x420 [ 145.336013][ T9175] ? __fget_files+0x3a0/0x420 [ 145.336045][ T9175] __x64_sys_sendmsg+0x1bd/0x2a0 [ 145.336069][ T9175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.336097][ T9175] ? __pfx_ksys_write+0x10/0x10 [ 145.336126][ T9175] do_syscall_64+0x14d/0xf80 [ 145.336148][ T9175] ? trace_irq_disable+0x3b/0x150 [ 145.336162][ T9175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.336179][ T9175] ? clear_bhb_loop+0x40/0x90 [ 145.336200][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.336216][ T9175] RIP: 0033:0x7faf8ed9c819 [ 145.336234][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.336248][ T9175] RSP: 002b:00007faf8fcfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.336266][ T9175] RAX: ffffffffffffffda RBX: 00007faf8f015fa0 RCX: 00007faf8ed9c819 [ 145.336278][ T9175] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 145.336288][ T9175] RBP: 00007faf8fcfb090 R08: 0000000000000000 R09: 0000000000000000 [ 145.336299][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.336310][ T9175] R13: 00007faf8f016038 R14: 00007faf8f015fa0 R15: 00007ffcea1620e8 [ 145.336334][ T9175] [ 145.411830][ T9182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.772800][ T9193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.818292][ T9199] FAULT_INJECTION: forcing a failure. [ 145.818292][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 145.841044][ T9200] sit0: entered promiscuous mode [ 145.846828][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 145.862398][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.3.1170 Not tainted syzkaller #0 PREEMPT(full) [ 145.862422][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.862432][ T9199] Call Trace: [ 145.862439][ T9199] [ 145.862446][ T9199] dump_stack_lvl+0xe8/0x150 [ 145.862475][ T9199] should_fail_ex+0x412/0x560 [ 145.862504][ T9199] should_failslab+0xa8/0x100 [ 145.862527][ T9199] ? skb_clone+0x212/0x3a0 [ 145.862550][ T9199] kmem_cache_alloc_noprof+0x87/0x650 [ 145.862580][ T9199] skb_clone+0x212/0x3a0 [ 145.862607][ T9199] __netlink_deliver_tap+0x404/0x850 [ 145.862640][ T9199] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.862660][ T9199] netlink_deliver_tap+0x19c/0x1b0 [ 145.862681][ T9199] netlink_sendskb+0x68/0x140 [ 145.862700][ T9199] netlink_unicast+0x3a3/0x9b0 [ 145.862742][ T9199] ? __pfx_netlink_unicast+0x10/0x10 [ 145.862781][ T9199] netlink_rcv_skb+0x2b6/0x4b0 [ 145.862801][ T9199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.862827][ T9199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.862865][ T9199] ? down_read+0x272/0x2e0 [ 145.862880][ T9199] ? genl_rcv+0xd/0x40 [ 145.862909][ T9199] genl_rcv+0x28/0x40 [ 145.862931][ T9199] netlink_unicast+0x80f/0x9b0 [ 145.862957][ T9199] ? __pfx_netlink_unicast+0x10/0x10 [ 145.862977][ T9199] ? netlink_sendmsg+0x650/0xb40 [ 145.862995][ T9199] ? skb_put+0x11b/0x210 [ 145.863017][ T9199] netlink_sendmsg+0x813/0xb40 [ 145.863043][ T9199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.863066][ T9199] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.863093][ T9199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.863117][ T9199] ____sys_sendmsg+0x972/0x9f0 [ 145.863150][ T9199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.863182][ T9199] ? import_iovec+0x73/0xa0 [ 145.863207][ T9199] ___sys_sendmsg+0x2a5/0x360 [ 145.863236][ T9199] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.863296][ T9199] ? __fget_files+0x2a/0x420 [ 145.863311][ T9199] ? __fget_files+0x3a0/0x420 [ 145.863338][ T9199] __x64_sys_sendmsg+0x1bd/0x2a0 [ 145.863364][ T9199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.863397][ T9199] ? __pfx_ksys_write+0x10/0x10 [ 145.863430][ T9199] do_syscall_64+0x14d/0xf80 [ 145.863453][ T9199] ? trace_irq_disable+0x3b/0x150 [ 145.863469][ T9199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.863487][ T9199] ? clear_bhb_loop+0x40/0x90 [ 145.863509][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.863526][ T9199] RIP: 0033:0x7f7b4699c819 [ 145.863545][ T9199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.863560][ T9199] RSP: 002b:00007f7b477ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.863579][ T9199] RAX: ffffffffffffffda RBX: 00007f7b46c16090 RCX: 00007f7b4699c819 [ 145.863592][ T9199] RDX: 0000000000048000 RSI: 0000200000000100 RDI: 0000000000000003 [ 145.863603][ T9199] RBP: 00007f7b477ff090 R08: 0000000000000000 R09: 0000000000000000 [ 145.863614][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.863624][ T9199] R13: 00007f7b46c16128 R14: 00007f7b46c16090 R15: 00007ffffbde2f18 [ 145.863650][ T9199] [ 146.464311][ T9214] bridge_slave_0: left allmulticast mode [ 146.472250][ T9214] bridge_slave_0: left promiscuous mode [ 146.478703][ T5941] syz_tun: tun_net_xmit 110 [ 146.484163][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.498839][ T9214] bridge_slave_1: left allmulticast mode [ 146.505867][ T9214] bridge_slave_1: left promiscuous mode [ 146.512097][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.524243][ T9214] bond0: (slave bond_slave_0): Releasing backup interface [ 146.538254][ T9214] bond0: (slave bond_slave_1): Releasing backup interface [ 146.562430][ T9214] team0: Port device team_slave_0 removed [ 146.582608][ T9214] team0: Port device team_slave_1 removed [ 146.590625][ T9214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.600004][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.614174][ T9214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.623221][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.640584][ T9214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.417196][ T5941] syz_tun: tun_net_xmit 110 [ 147.965020][ T9158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.158445][ T9239] netlink: 'syz.1.1190': attribute type 4 has an invalid length. [ 148.183063][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 148.217266][ T30] audit: type=1804 audit(1775811900.576:2): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1189" name="/newroot/229/cgroup.controllers" dev="tmpfs" ino=1173 res=1 errno=0 [ 148.322329][ T30] audit: type=1800 audit(1775811900.576:3): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1189" name="cgroup.controllers" dev="tmpfs" ino=1173 res=0 errno=0 [ 148.593181][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 148.617340][ T9266] sctp: [Deprecated]: syz.1.1198 (pid 9266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.617340][ T9266] Use struct sctp_sack_info instead [ 148.732410][ T9277] bond7: entered promiscuous mode [ 148.740792][ T9277] bond7: entered allmulticast mode [ 148.747829][ T9271] FAULT_INJECTION: forcing a failure. [ 148.747829][ T9271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.762134][ T9272] FAULT_INJECTION: forcing a failure. [ 148.762134][ T9272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.822238][ T9272] CPU: 0 UID: 0 PID: 9272 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) [ 148.822265][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.822276][ T9272] Call Trace: [ 148.822283][ T9272] [ 148.822291][ T9272] dump_stack_lvl+0xe8/0x150 [ 148.822321][ T9272] should_fail_ex+0x412/0x560 [ 148.822352][ T9272] _copy_from_user+0x2d/0xb0 [ 148.822375][ T9272] kstrtouint_from_user+0xd6/0x180 [ 148.822396][ T9272] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 148.822431][ T9272] proc_fail_nth_write+0x8e/0x210 [ 148.822457][ T9272] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.822488][ T9272] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.822514][ T9272] vfs_write+0x29a/0xb90 [ 148.822564][ T9272] ? __pfx_vfs_write+0x10/0x10 [ 148.822584][ T9272] ? __fget_files+0x2a/0x420 [ 148.822604][ T9272] ? __fget_files+0x3a0/0x420 [ 148.822619][ T9272] ? __fget_files+0x2a/0x420 [ 148.822643][ T9272] ksys_write+0x150/0x270 [ 148.822665][ T9272] ? __pfx_ksys_write+0x10/0x10 [ 148.822696][ T9272] do_syscall_64+0x14d/0xf80 [ 148.822720][ T9272] ? trace_irq_disable+0x3b/0x150 [ 148.822736][ T9272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.822754][ T9272] ? clear_bhb_loop+0x40/0x90 [ 148.822777][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.822794][ T9272] RIP: 0033:0x7f94ebf5d04e [ 148.822812][ T9272] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.822827][ T9272] RSP: 002b:00007f94ecd71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.822845][ T9272] RAX: ffffffffffffffda RBX: 00007f94ecd726c0 RCX: 00007f94ebf5d04e [ 148.822858][ T9272] RDX: 0000000000000001 RSI: 00007f94ecd720a0 RDI: 0000000000000004 [ 148.822869][ T9272] RBP: 00007f94ecd72090 R08: 0000000000000000 R09: 0000000000000000 [ 148.822880][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.822891][ T9272] R13: 00007f94ec216038 R14: 00007f94ec215fa0 R15: 00007ffd552aebb8 [ 148.822921][ T9272] [ 148.846220][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.4.1200 Not tainted syzkaller #0 PREEMPT(full) [ 148.846245][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.846256][ T9271] Call Trace: [ 148.846263][ T9271] [ 148.846271][ T9271] dump_stack_lvl+0xe8/0x150 [ 148.846299][ T9271] should_fail_ex+0x412/0x560 [ 148.846330][ T9271] _copy_from_user+0x2d/0xb0 [ 148.846353][ T9271] kstrtouint_from_user+0xd6/0x180 [ 148.846374][ T9271] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 148.846407][ T9271] proc_fail_nth_write+0x8e/0x210 [ 148.846432][ T9271] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.846461][ T9271] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.846485][ T9271] vfs_write+0x29a/0xb90 [ 148.846512][ T9271] ? __pfx_vfs_write+0x10/0x10 [ 148.846533][ T9271] ? __fget_files+0x2a/0x420 [ 148.846553][ T9271] ? __fget_files+0x3a0/0x420 [ 148.846568][ T9271] ? __fget_files+0x2a/0x420 [ 148.846591][ T9271] ksys_write+0x150/0x270 [ 148.846612][ T9271] ? __pfx_ksys_write+0x10/0x10 [ 148.846645][ T9271] do_syscall_64+0x14d/0xf80 [ 148.846668][ T9271] ? trace_irq_disable+0x3b/0x150 [ 148.846684][ T9271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.846702][ T9271] ? clear_bhb_loop+0x40/0x90 [ 148.846722][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.846740][ T9271] RIP: 0033:0x7faf8ed5d04e [ 148.846756][ T9271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.846770][ T9271] RSP: 002b:00007faf8fcfafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.846795][ T9271] RAX: ffffffffffffffda RBX: 00007faf8fcfb6c0 RCX: 00007faf8ed5d04e [ 148.846808][ T9271] RDX: 0000000000000001 RSI: 00007faf8fcfb0a0 RDI: 0000000000000005 [ 148.846818][ T9271] RBP: 00007faf8fcfb090 R08: 0000000000000000 R09: 0000000000000000 [ 148.846829][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.846839][ T9271] R13: 00007faf8f016038 R14: 00007faf8f015fa0 R15: 00007ffcea1620e8 [ 148.846868][ T9271] [ 149.306404][ T9291] netlink: 'syz.2.1205': attribute type 4 has an invalid length. [ 149.314626][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 149.418095][ T9299] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 149.454619][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 149.575653][ T9307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.620097][ T9310] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.630928][ T9310] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1213'. [ 149.644522][ T9311] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.665229][ T9315] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1214'. [ 149.764450][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1215'. [ 149.793754][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1215'. [ 150.158703][ T9293] vxcan1 speed is unknown, defaulting to 1000 [ 150.412645][ T9351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.458860][ T9350] __nla_validate_parse: 2 callbacks suppressed [ 150.458878][ T9350] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1227'. [ 150.495882][ T9350] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1227'. [ 150.528468][ T9350] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1227'. [ 150.539756][ T29] vxcan1 speed is unknown, defaulting to 1000 [ 150.735583][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 150.881835][ T9375] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1234'. [ 151.197675][ T9391] netlink: 'syz.4.1241': attribute type 2 has an invalid length. [ 151.462157][ T9414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.705700][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 152.059100][ T9442] Cannot find add_set index 2 as target [ 152.092050][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 152.433710][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1263'. [ 152.482357][ T9463] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1266'. [ 152.566521][ T9472] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1269'. [ 152.775970][ T9480] Cannot find del_set index 49151 as target [ 152.871606][ T9486] netlink: 'syz.2.1274': attribute type 4 has an invalid length. [ 153.412222][ T9505] IPv6: sit2: Disabled Multicast RS [ 153.597315][ T9519] netlink: 'syz.4.1289': attribute type 13 has an invalid length. [ 153.598944][ T9521] SET target dimension over the limit! [ 153.639854][ T9519] gretap0: refused to change device tx_queue_len [ 153.640799][ T9516] netlink: 'syz.0.1287': attribute type 2 has an invalid length. [ 153.646600][ T9519] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 154.067240][ T9549] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 154.104899][ T9554] Cannot find add_set index 2 as target [ 154.468433][ T9576] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 154.530450][ T9583] syz_tun: tun_net_xmit 42 [ 154.628461][ T9586] FAULT_INJECTION: forcing a failure. [ 154.628461][ T9586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.680434][ T9586] CPU: 0 UID: 0 PID: 9586 Comm: syz.2.1317 Not tainted syzkaller #0 PREEMPT(full) [ 154.680460][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.680470][ T9586] Call Trace: [ 154.680477][ T9586] [ 154.680485][ T9586] dump_stack_lvl+0xe8/0x150 [ 154.680514][ T9586] should_fail_ex+0x412/0x560 [ 154.680545][ T9586] _copy_from_user+0x2d/0xb0 [ 154.680568][ T9586] ____sys_sendmsg+0x308/0x9f0 [ 154.680599][ T9586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.680630][ T9586] ? import_iovec+0x73/0xa0 [ 154.680653][ T9586] ___sys_sendmsg+0x2a5/0x360 [ 154.680681][ T9586] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.680736][ T9586] ? __fget_files+0x2a/0x420 [ 154.680752][ T9586] ? __fget_files+0x3a0/0x420 [ 154.680778][ T9586] __x64_sys_sendmsg+0x1bd/0x2a0 [ 154.680803][ T9586] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.680835][ T9586] ? __pfx_ksys_write+0x10/0x10 [ 154.680866][ T9586] do_syscall_64+0x14d/0xf80 [ 154.680889][ T9586] ? trace_irq_disable+0x3b/0x150 [ 154.680905][ T9586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.680923][ T9586] ? clear_bhb_loop+0x40/0x90 [ 154.680944][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.680961][ T9586] RIP: 0033:0x7f988299c819 [ 154.680978][ T9586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.680993][ T9586] RSP: 002b:00007f98837e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.681013][ T9586] RAX: ffffffffffffffda RBX: 00007f9882c15fa0 RCX: 00007f988299c819 [ 154.681025][ T9586] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 154.681036][ T9586] RBP: 00007f98837e7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.681047][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.681058][ T9586] R13: 00007f9882c16038 R14: 00007f9882c15fa0 R15: 00007ffec8b86dc8 [ 154.681086][ T9586] [ 155.295165][ T9619] netem: unknown loss type 0 [ 155.300181][ T9619] netem: change failed [ 155.400295][ T9626] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 155.424907][ T9626] netlink: 'syz.0.1332': attribute type 4 has an invalid length. [ 155.566790][ C1] syz_tun: tun_net_xmit 42 [ 155.735424][ T9645] __nla_validate_parse: 5 callbacks suppressed [ 155.735441][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 155.764107][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.809771][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.877526][ T9650] ip6gretap0: entered promiscuous mode [ 155.899763][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 156.090777][ T9673] netlink: 'syz.4.1348': attribute type 7 has an invalid length. [ 156.137159][ T9673] netlink: 'syz.4.1348': attribute type 7 has an invalid length. [ 156.145191][ T9665] tipc: Enabling of bearer rejected, already enabled [ 156.606879][ C1] syz_tun: tun_net_xmit 42 [ 156.684630][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1358'. [ 156.695072][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 156.835697][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1363'. [ 157.084009][ T9739] tipc: Can't bind to reserved service type 1 [ 157.219850][ T9750] trusted_key: syz.0.1369 sent an empty control message without MSG_MORE. [ 157.252917][ T9750] ================================================================== [ 157.261092][ T9750] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 157.268852][ T9750] Read of size 8 at addr ffff88802fdcb7e0 by task syz.0.1369/9750 [ 157.276670][ T9750] [ 157.278996][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.0.1369 Not tainted syzkaller #0 PREEMPT(full) [ 157.279016][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.279026][ T9750] Call Trace: [ 157.279032][ T9750] [ 157.279040][ T9750] dump_stack_lvl+0xe8/0x150 [ 157.279066][ T9750] print_report+0xba/0x230 [ 157.279091][ T9750] ? af_alg_pull_tsgl+0x1c6/0x740 [ 157.279114][ T9750] kasan_report+0x117/0x150 [ 157.279135][ T9750] ? af_alg_pull_tsgl+0x1c6/0x740 [ 157.279161][ T9750] af_alg_pull_tsgl+0x1c6/0x740 [ 157.279189][ T9750] skcipher_recvmsg+0x5df/0x1140 [ 157.279213][ T9750] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 157.279229][ T9750] ? aa_sock_msg_perm+0xf1/0x1b0 [ 157.279252][ T9750] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 157.279270][ T9750] ? security_socket_recvmsg+0x7e/0x2c0 [ 157.279288][ T9750] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 157.279306][ T9750] sock_recvmsg+0x172/0x1b0 [ 157.279323][ T9750] __sys_recvfrom+0x240/0x3c0 [ 157.279344][ T9750] ? __pfx___sys_recvfrom+0x10/0x10 [ 157.279373][ T9750] ? exc_page_fault+0x6a/0xc0 [ 157.279395][ T9750] ? do_user_addr_fault+0xc6f/0x1340 [ 157.279418][ T9750] __x64_sys_recvfrom+0xde/0x100 [ 157.279437][ T9750] do_syscall_64+0x14d/0xf80 [ 157.279457][ T9750] ? trace_irq_disable+0x3b/0x150 [ 157.279471][ T9750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.279486][ T9750] ? clear_bhb_loop+0x40/0x90 [ 157.279503][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.279518][ T9750] RIP: 0033:0x7f94ebf5d04e [ 157.279532][ T9750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.279546][ T9750] RSP: 002b:00007f94ea1f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 157.279564][ T9750] RAX: ffffffffffffffda RBX: 00007f94ea1f66c0 RCX: 00007f94ebf5d04e [ 157.279576][ T9750] RDX: 0000000000001000 RSI: 00007f94ea1f5000 RDI: 000000000000000a [ 157.279586][ T9750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.279596][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 157.279604][ T9750] R13: 00007f94ea1f4f58 R14: 00007f94ea1f5000 R15: 0000000000000000 [ 157.279621][ T9750] [ 157.279627][ T9750] [ 157.497637][ T9750] Allocated by task 9750: [ 157.501956][ T9750] kasan_save_track+0x3e/0x80 [ 157.506727][ T9750] __kasan_kmalloc+0x93/0xb0 [ 157.511317][ T9750] __kmalloc_noprof+0x35c/0x760 [ 157.516163][ T9750] sock_kmalloc+0xd6/0x160 [ 157.520572][ T9750] skcipher_recvmsg+0x54d/0x1140 [ 157.525508][ T9750] sock_recvmsg+0x172/0x1b0 [ 157.529995][ T9750] __sys_recvfrom+0x240/0x3c0 [ 157.534707][ T9750] __x64_sys_recvfrom+0xde/0x100 [ 157.539635][ T9750] do_syscall_64+0x14d/0xf80 [ 157.544215][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.550099][ T9750] [ 157.552504][ T9750] The buggy address belongs to the object at ffff88802fdcb7c0 [ 157.552504][ T9750] which belongs to the cache kmalloc-32 of size 32 [ 157.566411][ T9750] The buggy address is located 0 bytes to the right of [ 157.566411][ T9750] allocated 32-byte region [ffff88802fdcb7c0, ffff88802fdcb7e0) [ 157.580825][ T9750] [ 157.583165][ T9750] The buggy address belongs to the physical page: [ 157.589664][ T9750] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fdcb [ 157.598433][ T9750] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 157.605556][ T9750] page_type: f5(slab) [ 157.609540][ T9750] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 157.618117][ T9750] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 157.626777][ T9750] page dumped because: kasan: bad access detected [ 157.633200][ T9750] page_owner tracks the page as allocated [ 157.638909][ T9750] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2753, tgid 2753 (kworker/u8:0), ts 15965624772, free_ts 15965153611 [ 157.658524][ T9750] post_alloc_hook+0x231/0x280 [ 157.663284][ T9750] get_page_from_freelist+0x24dc/0x2580 [ 157.668833][ T9750] __alloc_frozen_pages_noprof+0x18d/0x380 [ 157.674660][ T9750] allocate_slab+0x77/0x660 [ 157.679167][ T9750] refill_objects+0x331/0x3c0 [ 157.683857][ T9750] __pcs_replace_empty_main+0x2e6/0x730 [ 157.689463][ T9750] __kmalloc_cache_noprof+0x392/0x660 [ 157.694853][ T9750] kmem_cache_free+0x15b/0x630 [ 157.699609][ T9750] release_task+0xfeb/0x16f0 [ 157.704189][ T9750] do_exit+0x1674/0x23c0 [ 157.708420][ T9750] call_usermodehelper_exec_async+0x357/0x360 [ 157.714483][ T9750] ret_from_fork+0x51e/0xb90 [ 157.719088][ T9750] ret_from_fork_asm+0x1a/0x30 [ 157.723863][ T9750] page last free pid 12 tgid 12 stack trace: [ 157.729830][ T9750] __free_frozen_pages+0xc2b/0xdb0 [ 157.734982][ T9750] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 157.740514][ T9750] alloc_vmap_area+0xd73/0x14b0 [ 157.745363][ T9750] __get_vm_area_node+0x1f8/0x300 [ 157.750379][ T9750] __vmalloc_node_range_noprof+0x372/0x1730 [ 157.756264][ T9750] __vmalloc_node_noprof+0xc2/0x100 [ 157.761447][ T9750] dup_task_struct+0x275/0x9a0 [ 157.766209][ T9750] copy_process+0x508/0x3cd0 [ 157.770791][ T9750] kernel_clone+0x248/0x8e0 [ 157.775290][ T9750] user_mode_thread+0x110/0x180 [ 157.780139][ T9750] call_usermodehelper_exec_work+0x5c/0x230 [ 157.786129][ T9750] process_scheduled_works+0xb6e/0x18c0 [ 157.791674][ T9750] worker_thread+0xa53/0xfc0 [ 157.796253][ T9750] kthread+0x388/0x470 [ 157.800311][ T9750] ret_from_fork+0x51e/0xb90 [ 157.804892][ T9750] ret_from_fork_asm+0x1a/0x30 [ 157.809651][ T9750] [ 157.811961][ T9750] Memory state around the buggy address: [ 157.817573][ T9750] ffff88802fdcb680: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 157.825620][ T9750] ffff88802fdcb700: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 157.833680][ T9750] >ffff88802fdcb780: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 157.841721][ T9750] ^ [ 157.848898][ T9750] ffff88802fdcb800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 157.857031][ T9750] ffff88802fdcb880: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 157.865095][ T9750] ================================================================== [ 157.911180][ T9750] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.918437][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.0.1369 Not tainted syzkaller #0 PREEMPT(full) [ 157.927717][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.937774][ T9750] Call Trace: [ 157.941063][ T9750] [ 157.943987][ T9750] vpanic+0x56c/0xa60 [ 157.947967][ T9750] ? __pfx_vpanic+0x10/0x10 [ 157.952462][ T9750] ? __pfx___schedule+0x10/0x10 [ 157.957339][ T9750] panic+0xc5/0xd0 [ 157.961058][ T9750] ? __pfx_panic+0x10/0x10 [ 157.965466][ T9750] ? preempt_schedule_common+0x82/0xd0 [ 157.970923][ T9750] ? af_alg_pull_tsgl+0x1c6/0x740 [ 157.975956][ T9750] check_panic_on_warn+0x89/0xb0 [ 157.980887][ T9750] ? af_alg_pull_tsgl+0x1c6/0x740 [ 157.986005][ T9750] end_report+0x73/0x180 [ 157.990244][ T9750] ? af_alg_pull_tsgl+0x1c6/0x740 [ 157.995263][ T9750] kasan_report+0x128/0x150 [ 157.999765][ T9750] ? af_alg_pull_tsgl+0x1c6/0x740 [ 158.004787][ T9750] af_alg_pull_tsgl+0x1c6/0x740 [ 158.009649][ T9750] skcipher_recvmsg+0x5df/0x1140 [ 158.014600][ T9750] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 158.019976][ T9750] ? aa_sock_msg_perm+0xf1/0x1b0 [ 158.024932][ T9750] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 158.030223][ T9750] ? security_socket_recvmsg+0x7e/0x2c0 [ 158.035802][ T9750] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 158.041166][ T9750] sock_recvmsg+0x172/0x1b0 [ 158.045663][ T9750] __sys_recvfrom+0x240/0x3c0 [ 158.050349][ T9750] ? __pfx___sys_recvfrom+0x10/0x10 [ 158.055567][ T9750] ? exc_page_fault+0x6a/0xc0 [ 158.060254][ T9750] ? do_user_addr_fault+0xc6f/0x1340 [ 158.065555][ T9750] __x64_sys_recvfrom+0xde/0x100 [ 158.070499][ T9750] do_syscall_64+0x14d/0xf80 [ 158.075097][ T9750] ? trace_irq_disable+0x3b/0x150 [ 158.080109][ T9750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.086215][ T9750] ? clear_bhb_loop+0x40/0x90 [ 158.090976][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.096862][ T9750] RIP: 0033:0x7f94ebf5d04e [ 158.101284][ T9750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.120878][ T9750] RSP: 002b:00007f94ea1f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 158.129301][ T9750] RAX: ffffffffffffffda RBX: 00007f94ea1f66c0 RCX: 00007f94ebf5d04e [ 158.137259][ T9750] RDX: 0000000000001000 RSI: 00007f94ea1f5000 RDI: 000000000000000a [ 158.145218][ T9750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.153172][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 158.161127][ T9750] R13: 00007f94ea1f4f58 R14: 00007f94ea1f5000 R15: 0000000000000000 [ 158.169097][ T9750] [ 158.172458][ T9750] Kernel Offset: disabled [ 158.176796][ T9750] Rebooting in 86400 seconds..