last executing test programs: 2.514132442s ago: executing program 2 (id=17138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) unshare(0x20400) r0 = socket(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30c) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9000000011"], 0x90}, 0x1, 0x0, 0x0, 0x4000080}, 0x12) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 2.238958829s ago: executing program 4 (id=17142): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44021040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 2.079227692s ago: executing program 4 (id=17144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESHEX=r2], 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x130f}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x20000880) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x8905, &(0x7f0000000100)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000500)={r6, 0x800}, 0x8) socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) write$tun(r3, &(0x7f0000000200)=ANY=[], 0xe6) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRESDEC=r4, @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000020000100000000000000000002008000000000000000000008000200ac1e0001aa83309ab3ac71c869a66797493cc5f9c64ea871249ea46e44033644b89ffddb4e"], 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000) r10 = socket(0x10, 0x80000, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0xc4000) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) 1.7492403s ago: executing program 4 (id=17150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @rand_addr=0x64010100, 0x0, 0xffffffdc, 'fo\x00', 0x2d, 0x4, 0x79}, 0x2c) 1.597293121s ago: executing program 2 (id=17152): syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000010000006600000000000000730135000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0759083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e27401aa306a7ab7069790da79b7ab45184caffff00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181d2f18d772fb5c58a936620ba1f5fbb48703ab220f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8efe7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c33edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a40948498faa261213bc20845526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef9691863c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2ebe448cbe850efd24bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed5de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d03652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b9c6c36a33eb3adc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a71dc202c851d99851bc7a62ea705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea51692c90320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28743f77b8724487a9b37ca66d20aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe2bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a4307f0e4360651dc7f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c8b781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b978e0a5f69671f52401892dba8a63c8f7eb280880dbdcee5d8e8aae9de9d28cbe0de2f4642c4fe69db3b7432b2eb7ca282fbfe030ad6c33a73feef1cd517cedc2c0059e5636ae0fb3969ce7f64c6f4cffcc40ac1331f6b50d4f95c490edd75e8cdba278a602c8a200000000000000000000000091b39eb79b22cc68dde3760f3bd7377b35f4d41a46959070cddc4a9c340455f97ff0ea8c6adbff47a39269b2e90dffa1ec22d41f9da01ec44847a88334e106ff455f9ca2a0b2900591ceac1f0e823eaa7ed5b359eed1a39a6f75e7556ab52ac0c2c46b28f3791edf8f25cc2e6cab30841d3fac1e16443be84d4e9a903df3901f89e13cee8589df43652fbe05a789881dcae97ffdc52363bc61c334480afac09e04f9e5ce0bcd12c997545053b64bb2ba920a1071d2ca692c72965bdc0022f7f147943001a55ed8c7b3181fbfabd2069ac7bd4f9b459463edb8a05d1fde9a0000000000f4304ef01fb54b38377b030f2a0fb38bf286249b0cd112d9d8a3b3d97834e3a1a43008cb3abe4ecf4edb6b46ae11ce456dd5af00b5bfa294de78bd1b52856d6831286f32af84a659e67ae7cf2f4a669770944f50ae3d7a5718adb492cef3221fbd8af33c0d5dd034a5f066c15cf9"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2004}, 0x10}, 0x34) 1.573471202s ago: executing program 3 (id=17154): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x7, 0x7a, &(0x7f0000000180)="5281f9a67066dab01e7d126868862175addc41071b708bcf8cee37f511cc8d115a66c802c027b123303e682f693b53fea038a60d365370eef5572bfb04183a4c7c39c5f4c9ab2796bdc60c3d1545f41129524089062a9b184ec1d51d21a1836cfc4d96d2d994ef51bc9a7af164e7a27a4594cec33863f47251e7", 0x1}]}) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r7) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r8, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, r8, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x15}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x408c0}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x5a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4850) 1.41318919s ago: executing program 2 (id=17155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) (async) write$nci(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r1], 0x14) (async, rerun: 32) ioctl$int_out(r2, 0x5463, &(0x7f00000006c0)) (rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0x9c4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x4, 0x0, @multicast2, @multicast2}}}}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000700)=@req={0xb, 0x7fff, 0x7, 0xfe8}, 0x10) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$can_j1939(r6, &(0x7f0000000280)={0x1d, r5, 0x2, {0x0, 0xf0}, 0x2}, 0x18) (async) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}, [0x3, 0x5, 0x9, 0x4, 0x7fffffff, 0x10, 0x5e77, 0xb, 0x2, 0x9, 0x3, 0x4, 0x6, 0x1ff, 0x4]}, &(0x7f0000000340)=0x100) (async, rerun: 32) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@deltclass={0x60, 0x29, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xd}, {0xfff3, 0x2}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x10}}, @tclass_kind_options=@c_prio={0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20084080}, 0x240040d1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r9, 0x4) 1.412935317s ago: executing program 4 (id=17156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c01000017000d090000000000000000ffffffff0000000000000000000000000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000100000000000000000000000000000000ab13d2f71914301781e09daf29995101eecd4869ea3cb34a14", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044001000e000000200"/195], 0x16c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001", 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000000a00000009", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800800140000000000050016001c00000004001200"], 0x48}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x41071, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fe0f0000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018006000000", @ANYRES32=r8, @ANYBLOB="0c0005002801000000000000"], 0x48}}, 0x20000000) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r12, &(0x7f00000015c0)={0x0, 0xffffffffffffffa4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r13, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r13, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r12) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r12) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r11, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xa8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x404c004) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r14, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) 1.244505908s ago: executing program 3 (id=17159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032001e000000000000000000000010003300000000000000000000000000fc02000000000000000000000000000003000500000000000200000dac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffff6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000100), 0x0, 0x40000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) 1.142408368s ago: executing program 0 (id=17160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x114, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b020000000000280012800b0014000700fe8000000000000000000000000000aa6468347915634b6a198fdf445d62b662f790e6bf86c7bf8a0fad31ac4227d229011c758cab6b314a080f20a7d56eb2f19635c91b026d6f06f75cf850dcaa9be0f65e679100d634ac3e00b916f544efb16d4b0b9e2e94875bc7bbf633e0a925eccc772d9f0dfecc580b29b82780fb0d0e2cd53c7744e402d9cd843256f6183fdbc30f973fd14410e1dc4f3ece9801b6c90eb68ef6cf5f30b0aabc8dc8c82e40fa1a2c201c0bf1bfa9f24e172a5a719740e6af9312d94ccf97fe888ce739a836137ec06cae42abb6ce893930"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b020000000000280012800b0014000700fe8000000000000000000000000000aa6468347915634b6a198fdf445d62b662f790e6bf86c7bf8a0fad31ac4227d229011c758cab6b314a080f20a7d56eb2f19635c91b026d6f06f75cf850dcaa9be0f65e679100d634ac3e00b916f544efb16d4b0b9e2e94875bc7bbf633e0a925eccc772d9f0dfecc580b29b82780fb0d0e2cd53c7744e402d9cd843256f6183fdbc30f973fd14410e1dc4f3ece9801b6c90eb68ef6cf5f30b0aabc8dc8c82e40fa1a2c201c0bf1bfa9f24e172a5a719740e6af9312d94ccf97fe888ce739a836137ec06cae42abb6ce893930"], 0x48}}, 0x0) 1.041964917s ago: executing program 1 (id=17161): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x42, &(0x7f0000000040), 0x3b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e870", 0x2}], 0x1}], 0x1, 0x40800) 905.327445ms ago: executing program 3 (id=17162): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a329, 0x10400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) (fail_nth: 1) 904.790403ms ago: executing program 2 (id=17163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x4, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0xff, @remote, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="29a3010000040100140035006d6163767461703000000000000000000500270000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@newqdisc={0x13c, 0x24, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0xd, 0xc}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x40, '\x00', 0x3, 0xb, 0x5, 0x5000}}}}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0x3, 0x2, 0x1, 0x6, 0x8}}, {0x14, 0x2, [0x4, 0xffc0, 0xff7f, 0x8, 0xffff, 0x94, 0x8, 0x2]}}, {{0x1c, 0x1, {0x0, 0x2, 0xf1c, 0x1, 0x1, 0x8001, 0x0, 0x4}}, {0xc, 0x2, [0x3, 0x4, 0x4, 0x9]}}, {{0x1c, 0x1, {0x81, 0x9, 0xfc00, 0x4, 0x1, 0x2, 0xffffffff, 0x4}}, {0xc, 0x2, [0x1, 0x635e, 0xcfb4, 0x6]}}, {{0x1c, 0x1, {0xb, 0x6, 0x1, 0xfffffff7, 0x3, 0xa, 0x1, 0xa}}, {0x18, 0x2, [0x1, 0xfff7, 0xfffe, 0x6, 0xfffd, 0xe9a, 0x3, 0x1, 0x4, 0xfffe]}}, {{0x1c, 0x1, {0x5, 0x3, 0x6, 0x2, 0x1, 0x6, 0x4, 0xa}}, {0x18, 0x2, [0x4, 0x4, 0x0, 0x7, 0x5, 0x7, 0x2, 0x8, 0x7, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044811) 904.49856ms ago: executing program 0 (id=17164): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040810}, 0x4) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 833.600455ms ago: executing program 1 (id=17165): socket$inet(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000410007012cbd7000fadbdf25037c00000400c2801c00018018001f8014000d0000000000fffffffffffffffd000000013fa675e208b799f790f1d4f899070f3051cb930aa826f6205c2e77230ad4a0fc393f5532cd1ab98a131adcb3e1aa1cb6ed072a2f393d9150e2ebfbaa03c976eda44c89d248f028049ca4da7a8d9c783e36142a81ad56b8c3f1ed772e70b5bc828096d4fb9d581045f9c86cc254f65bc4daec80c00e470d50145d9e41"], 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 578.334002ms ago: executing program 0 (id=17166): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0xa, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000001030108000000000000000000000000000000000000000000000000348d710bba73111596e903148aa0010b"], 0x20}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0xa, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000001030108000000000000000000000000000000000000000000000000348d710bba73111596e903148aa0010b"], 0x20}}, 0x0) (async) 529.237528ms ago: executing program 1 (id=17167): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4b, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) 482.945981ms ago: executing program 3 (id=17168): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 466.64852ms ago: executing program 0 (id=17169): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000080)=0x13, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, 0x0, &(0x7f0000000080)=0xc00) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 457.032287ms ago: executing program 4 (id=17170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a01015c000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 405.217883ms ago: executing program 2 (id=17171): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="610506be03020603097a03074ffd0745c9524de2028101046c8a3a07a3bbbf4f21af29b437fd4e87440fd9aa3fbe33eab40ec543a5d4b53cc80800e21690ea09bd70bc7057d6eeababa0370596a64cf06a2ef1067f8225b9191412d466d4213cbcfee893bd9ce7e3498eb539e6c20b0897daa9aeca439b91f56346e763c94b86286128edb2"], 0x85) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1800, r3}, 0x38) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x12, 0x4, &(0x7f0000001040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000000080)) pipe(&(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 287.846954ms ago: executing program 0 (id=17172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000300)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x21, @empty}}, 0xfffffc7a, 0x1, 0x72597d2a, 0x7, 0x0, 0x6, 0x7}, &(0x7f00000002c0)=0x9b) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000dc0000010000000008000500ac1414ff"], 0x24}}, 0x0) 249.093223ms ago: executing program 3 (id=17173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000180), 0x4) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFALIAS={0x14, 0x14, 'nicvf0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000180), 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFALIAS={0x14, 0x14, 'nicvf0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) 181.326963ms ago: executing program 1 (id=17174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @empty, 0x9}, 0xffffff35) sendmmsg$inet6(r1, &(0x7f000000c540)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='=', 0x1}], 0x1}}], 0x1, 0x800) 181.117581ms ago: executing program 4 (id=17175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 144.753817ms ago: executing program 0 (id=17176): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, 'blkio.bfq.empty_time\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000008010100000000000000000000000020000300840000000900010073797a30000000000600024000000000140004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x30) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 106.936787ms ago: executing program 2 (id=17177): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x100}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40810) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xd, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x767a8ea32c3eaf9b, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x52, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 41.310665ms ago: executing program 1 (id=17178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000400000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 40.081971ms ago: executing program 3 (id=17179): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x0, 0x80, 0x1, 0x1000, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x2c, 0x6f, 0x0, 0x9, [0x1, 0x4e, 0x8, 0x0, 0x1, 0xb5, 0xcd, 0x5, 0x2, 0x0]}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x401, 0x8, 0x6, 0x1, r0, 0x7fffffff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018}, 0x18) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000180)="b9e9042230685f3d572f0b7a79da12c9e8da1434d44b3796bdfe7ce700804241f268cfa7ffeb7b44777fd5bd7c9463c2791af893aef6d42ba0c3862bf111fdf85efbcb50f8c711ed19a8620d1945948f06ec07d934ff58bd12692c17e4e9a8bc32b50ba7cb171c", &(0x7f0000000300)=@tcp6=r4}, 0x20) 0s ago: executing program 1 (id=17180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100019"], 0x38}, 0x1, 0x0, 0x300, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): 221320][T15319] ? trace_irq_disable+0x3b/0x140 [ 1306.221348][T15319] ? clear_bhb_loop+0x40/0x90 [ 1306.221376][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.221399][T15319] RIP: 0033:0x7f4c1819de99 [ 1306.221420][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.221438][T15319] RSP: 002b:00007f4c19101028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.221461][T15319] RAX: ffffffffffffffda RBX: 00007f4c18425fa0 RCX: 00007f4c1819de99 [ 1306.221478][T15319] RDX: 0000000020000804 RSI: 0000200000000000 RDI: 0000000000000003 [ 1306.221493][T15319] RBP: 00007f4c19101090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.221508][T15319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.221522][T15319] R13: 00007f4c18426038 R14: 00007f4c18425fa0 R15: 00007ffeef83c188 [ 1306.221559][T15319] [ 1306.624011][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15546'. [ 1306.670658][T15323] IPVS: Unknown mcast interface: lo [ 1306.681094][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15546'. [ 1306.682516][T15330] netlink: 'syz.1.15549': attribute type 2 has an invalid length. [ 1306.691433][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15546'. [ 1306.699160][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15549'. [ 1306.721676][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15546'. [ 1306.732074][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15546'. [ 1309.195863][T15354] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1309.315551][T15356] FAULT_INJECTION: forcing a failure. [ 1309.315551][T15356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.338832][T15356] CPU: 1 UID: 0 PID: 15356 Comm: syz.2.15556 Not tainted syzkaller #0 PREEMPT(full) [ 1309.338862][T15356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1309.338876][T15356] Call Trace: [ 1309.338885][T15356] [ 1309.338895][T15356] dump_stack_lvl+0xe8/0x150 [ 1309.338932][T15356] should_fail_ex+0x40c/0x560 [ 1309.338962][T15356] _copy_from_iter+0x4ff/0x1660 [ 1309.339017][T15356] ? __pfx__copy_from_iter+0x10/0x10 [ 1309.339051][T15356] ? aa_label_sk_perm+0x532/0x6e0 [ 1309.339098][T15356] ping_v4_sendmsg+0x289/0x1870 [ 1309.339241][T15356] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1309.339311][T15356] ? inet_sendmsg+0x10d/0x320 [ 1309.339343][T15356] ? lockdep_hardirqs_on+0x7a/0x110 [ 1309.339376][T15356] ? inet_sendmsg+0x10d/0x320 [ 1309.339406][T15356] ? inet_sendmsg+0x298/0x320 [ 1309.339438][T15356] ? __pfx_inet_sendmsg+0x10/0x10 [ 1309.339467][T15356] sock_sendmsg_nosec+0x10e/0x180 [ 1309.339498][T15356] ____sys_sendmsg+0x54e/0x850 [ 1309.339526][T15356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1309.339558][T15356] ? import_iovec+0x73/0xa0 [ 1309.339593][T15356] ___sys_sendmsg+0x2a5/0x360 [ 1309.339613][T15356] ? __lock_acquire+0x683/0x2cf0 [ 1309.339648][T15356] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.339708][T15356] ? __fget_files+0x2a/0x420 [ 1309.339736][T15356] ? __fget_files+0x3a2/0x420 [ 1309.339775][T15356] __x64_sys_sendmsg+0x1b1/0x290 [ 1309.339800][T15356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1309.339841][T15356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.339865][T15356] do_syscall_64+0x174/0x580 [ 1309.339885][T15356] ? trace_irq_disable+0x3b/0x140 [ 1309.339913][T15356] ? clear_bhb_loop+0x40/0x90 [ 1309.339939][T15356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.339961][T15356] RIP: 0033:0x7f032a99de99 [ 1309.339981][T15356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.339999][T15356] RSP: 002b:00007f032b885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.340022][T15356] RAX: ffffffffffffffda RBX: 00007f032ac25fa0 RCX: 00007f032a99de99 [ 1309.340038][T15356] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1309.340051][T15356] RBP: 00007f032b885090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.340065][T15356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.340077][T15356] R13: 00007f032ac26038 R14: 00007f032ac25fa0 R15: 00007ffc72adda28 [ 1309.340116][T15356] [ 1309.672647][T15364] gretap0: left allmulticast mode [ 1309.678398][T15364] gretap0: left promiscuous mode [ 1309.683675][T15364] bridge0: port 3(gretap0) entered disabled state [ 1309.785312][T15364] bond21: (slave veth0_to_bond): Releasing active interface [ 1309.829615][T15364] bond21: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1309.905940][T15364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1310.600835][T15414] netlink: 'syz.0.15575': attribute type 6 has an invalid length. [ 1310.911904][T15435] __nla_validate_parse: 6 callbacks suppressed [ 1310.911924][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15582'. [ 1310.992612][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15582'. [ 1311.093994][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15584'. [ 1311.132016][T15442] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15584'. [ 1311.156124][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15584'. [ 1311.325608][T15461] netlink: 'syz.0.15589': attribute type 6 has an invalid length. [ 1311.345036][T15454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15586'. [ 1311.452047][T15446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15586'. [ 1311.538280][T15473] FAULT_INJECTION: forcing a failure. [ 1311.538280][T15473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1311.562159][T15473] CPU: 1 UID: 0 PID: 15473 Comm: syz.0.15592 Not tainted syzkaller #0 PREEMPT(full) [ 1311.562190][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1311.562204][T15473] Call Trace: [ 1311.562214][T15473] [ 1311.562224][T15473] dump_stack_lvl+0xe8/0x150 [ 1311.562262][T15473] should_fail_ex+0x40c/0x560 [ 1311.562299][T15473] _copy_to_user+0x31/0xb0 [ 1311.562336][T15473] simple_read_from_buffer+0xe1/0x170 [ 1311.562372][T15473] proc_fail_nth_read+0x1bb/0x230 [ 1311.562407][T15473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1311.562440][T15473] ? rw_verify_area+0x24a/0x4c0 [ 1311.562482][T15473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1311.562512][T15473] vfs_read+0x213/0xa80 [ 1311.562550][T15473] ? __pfx___mutex_lock+0x10/0x10 [ 1311.562574][T15473] ? __pfx_vfs_read+0x10/0x10 [ 1311.562609][T15473] ? __fget_files+0x2a/0x420 [ 1311.562644][T15473] ? __fget_files+0x3a2/0x420 [ 1311.562671][T15473] ? __fget_files+0x2a/0x420 [ 1311.562707][T15473] ksys_read+0x150/0x270 [ 1311.562742][T15473] ? __pfx_ksys_read+0x10/0x10 [ 1311.562785][T15473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.562810][T15473] do_syscall_64+0x174/0x580 [ 1311.562829][T15473] ? trace_irq_disable+0x3b/0x140 [ 1311.562858][T15473] ? clear_bhb_loop+0x40/0x90 [ 1311.562886][T15473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.562907][T15473] RIP: 0033:0x7f4c1815e6ce [ 1311.562928][T15473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1311.562946][T15473] RSP: 002b:00007f4c19100fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1311.562970][T15473] RAX: ffffffffffffffda RBX: 00007f4c191016c0 RCX: 00007f4c1815e6ce [ 1311.562987][T15473] RDX: 000000000000000f RSI: 00007f4c191010a0 RDI: 0000000000000004 [ 1311.563002][T15473] RBP: 00007f4c19101090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.563016][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.563030][T15473] R13: 00007f4c18426038 R14: 00007f4c18425fa0 R15: 00007ffeef83c188 [ 1311.563066][T15473] [ 1311.876231][T15477] netlink: 220 bytes leftover after parsing attributes in process `syz.2.15595'. [ 1311.901983][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15596'. [ 1311.931949][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15596'. [ 1314.729547][T15539] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1314.865081][T15483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1315.095221][T15548] team0: left promiscuous mode [ 1315.132941][T15553] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1315.201549][T15557] netlink: 'syz.4.15614': attribute type 11 has an invalid length. [ 1315.245704][T15562] netlink: 'syz.0.15615': attribute type 6 has an invalid length. [ 1315.515487][T18674] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1318.391312][T15566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1318.406127][T15593] __nla_validate_parse: 9 callbacks suppressed [ 1318.406149][T15593] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.15622'. [ 1318.456165][T15593] netlink: 'syz.1.15622': attribute type 1 has an invalid length. [ 1318.820361][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15635'. [ 1318.841849][T15635] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1318.857498][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15636'. [ 1319.093175][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15640'. [ 1319.146378][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1319.192202][T15648] ipvlan0: left promiscuous mode [ 1319.202599][T18674] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.232197][T18674] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.246309][T15654] xt_recent: Unsupported userspace flags (000000b1) [ 1319.253453][T18674] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.253503][T18674] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.337564][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15641'. [ 1319.444740][T15665] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1319.452989][T15665] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1320.514884][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15652'. [ 1320.525792][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15652'. [ 1322.020402][T15643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1322.195121][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15654'. [ 1322.242069][T15695] bond23: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1322.259096][T15695] bond23 (unregistering): Released all slaves [ 1322.272909][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15658'. [ 1322.302883][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15658'. [ 1322.977007][T15747] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 1323.004384][T15747] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 1323.561567][T15766] __nla_validate_parse: 5 callbacks suppressed [ 1323.561591][T15766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15676'. [ 1323.744272][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15677'. [ 1323.781869][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15677'. [ 1324.011492][T15771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15678'. [ 1324.072958][T15771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.648393][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.698093][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.733396][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.896587][T15778] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15679'. [ 1324.902948][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15681'. [ 1324.938801][T15778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15679'. [ 1325.093249][T15793] netlink: 'syz.4.15684': attribute type 4 has an invalid length. [ 1325.113621][T15793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15684'. [ 1325.305513][T15804] sctp: [Deprecated]: syz.2.15686 (pid 15804) Use of int in maxseg socket option. [ 1325.305513][T15804] Use struct sctp_assoc_value instead [ 1325.335335][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15687'. [ 1325.356110][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15687'. [ 1325.385254][T15804] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6 [ 1325.402929][T15804] gretap6: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1325.414626][T15804] gretap6: entered promiscuous mode [ 1325.421001][T15804] gretap6: entered allmulticast mode [ 1325.435017][T15811] IPVS: Unknown mcast interface: lo [ 1325.817509][T15821] tipc: MTU too low for tipc bearer [ 1325.919802][T15835] openvswitch: netlink: IP tunnel dst address not specified [ 1325.966690][T15835] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 1326.068957][T15842] netlink: 'syz.2.15702': attribute type 11 has an invalid length. [ 1326.102078][T15842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1326.109395][T15842] IPv6: NLM_F_CREATE should be set when creating new route [ 1326.397476][T15862] bond22: left promiscuous mode [ 1326.456831][T15871] gretap6: left promiscuous mode [ 1326.506845][T15871] gretap6: left allmulticast mode [ 1326.718714][T15889] openvswitch: netlink: Key type 31 is not supported [ 1326.936104][T15900] netlink: 'syz.2.15718': attribute type 2 has an invalid length. [ 1326.958750][T15904] netlink: 'syz.3.15720': attribute type 2 has an invalid length. [ 1326.996804][T15900] netlink: 'syz.2.15718': attribute type 2 has an invalid length. [ 1327.052853][T15910] tipc: Enabling of bearer rejected, failed to enable media [ 1327.072045][T15912] tunl0: entered promiscuous mode [ 1327.098528][T15912] netlink: 'syz.0.15723': attribute type 3 has an invalid length. [ 1327.284930][T15924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.330767][T15928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.546379][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1327.580864][T15947] bond27: (slave vti0): The slave device specified does not support setting the MAC address [ 1327.592859][T15947] bond27: (slave vti0): Error -95 calling set_mac_address [ 1327.711777][T15952] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1327.803102][T15955] bond23: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1327.831345][T15955] bond23 (unregistering): Released all slaves [ 1328.138470][T15973] openvswitch: netlink: Key type 31 is not supported [ 1329.458211][T15983] ip6tnl0: Caught tx_queue_len zero misconfig [ 1329.542012][T15985] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1329.600484][T15987] __nla_validate_parse: 23 callbacks suppressed [ 1329.600504][T15987] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15747'. [ 1329.619752][T15987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15747'. [ 1330.459964][T15936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1330.473291][T15954] netlink: 'syz.1.15736': attribute type 1 has an invalid length. [ 1330.516839][T15954] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15736'. [ 1330.776777][T16007] bond21: (slave veth0_to_bond): Releasing active interface [ 1330.802795][T16007] team0: Port device xfrm0 removed [ 1330.816764][T16007] batman_adv: batadv0: Removing interface: gretap2 [ 1330.839404][T16007] vlan1: left allmulticast mode [ 1330.854591][T16007] geneve0: left allmulticast mode [ 1330.876521][T16007] bridge0: port 1(vlan1) entered disabled state [ 1330.907294][T16007] bond3: (slave gretap4): Releasing active interface [ 1330.943104][T16007] bond4: (slave bridge3): Releasing active interface [ 1330.961870][T16007] bond8: (slave bridge6): Releasing backup interface [ 1330.982292][T16007] bond13: (slave geneve3): Releasing active interface [ 1330.995691][T16007] bond0: (slave bond19): Releasing active interface [ 1331.171020][T16029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15756'. [ 1331.182718][T16029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15756'. [ 1331.369234][T18676] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1334.271501][T16034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1334.449736][T16073] IPVS: Unknown mcast interface: lo [ 1334.773506][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15780'. [ 1334.890095][T16109] netlink: 27 bytes leftover after parsing attributes in process `syz.1.15783'. [ 1334.890095][T16113] netlink: 27 bytes leftover after parsing attributes in process `syz.1.15783'. [ 1334.961940][T16104] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 1334.982858][T16104] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 1335.010250][T16106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15782'. [ 1335.056645][T16104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15782'. [ 1335.261492][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15788'. [ 1335.284483][T16132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1335.308784][T16136] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 1335.493267][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15795'. [ 1335.518550][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15792'. [ 1335.718740][T16157] IPVS: Unknown mcast interface: lo [ 1335.874748][T16170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1335.991333][T16179] openvswitch: netlink: Message has 8 unknown bytes. [ 1336.008101][T16179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.018974][T16179] openvswitch: netlink: Message has 8 unknown bytes. [ 1336.051940][T16179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.076527][T16179] openvswitch: netlink: Message has 8 unknown bytes. [ 1336.091708][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15810'. [ 1336.101816][T16179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.112347][T16179] openvswitch: netlink: Message has 8 unknown bytes. [ 1336.120578][T16179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.165452][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15811'. [ 1336.276280][T16193] netlink: 'syz.1.15814': attribute type 1 has an invalid length. [ 1336.298717][T16193] netlink: 'syz.1.15814': attribute type 1 has an invalid length. [ 1336.317537][T16193] netlink: 'syz.1.15814': attribute type 1 has an invalid length. [ 1336.343526][T16197] IPVS: Unknown mcast interface: lo [ 1336.538833][T16207] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1336.978449][T16238] netlink: 'syz.2.15830': attribute type 14 has an invalid length. [ 1336.997388][T16238] netlink: 'syz.2.15830': attribute type 13 has an invalid length. [ 1337.016410][T16238] netlink: 'syz.2.15830': attribute type 12 has an invalid length. [ 1337.033486][T16238] netlink: 'syz.2.15830': attribute type 4 has an invalid length. [ 1337.439324][T16265] netlink: 'syz.4.15836': attribute type 21 has an invalid length. [ 1338.238058][T16307] netlink: 'syz.1.15851': attribute type 3 has an invalid length. [ 1338.962917][T16348] netlink: 'syz.1.15865': attribute type 2 has an invalid length. [ 1340.015267][T16418] __nla_validate_parse: 20 callbacks suppressed [ 1340.015288][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.032256][T16419] xt_cgroup: path and classid specified [ 1340.049464][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.068820][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.095083][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.116119][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.144486][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.183139][T16425] IPVS: Error joining to the multicast group [ 1340.192721][T16428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15892'. [ 1340.214822][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.255113][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1340.265268][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.272755][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.278913][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.285024][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.291169][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.297265][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.303388][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.309514][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.315627][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.321753][T16424] tc action pedit 'at' offset 5 out of bounds [ 1340.327893][T16424] net_ratelimit: 64 callbacks suppressed [ 1340.327909][T16424] 0: reclassify loop, rule prio 0, protocol 800 [ 1340.398206][T16436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.495294][T16439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15896'. [ 1341.144772][T16481] openvswitch: netlink: Flow key attr not present in new flow. [ 1341.494608][T16505] validate_nla: 4 callbacks suppressed [ 1341.494629][T16505] netlink: 'syz.3.15919': attribute type 2 has an invalid length. [ 1342.015060][T16542] netlink: 'syz.1.15931': attribute type 2 has an invalid length. [ 1342.028152][T16545] siw: device registration error -23 [ 1342.058970][T16545] ±ÿ: renamed from lo [ 1342.249029][T16553] veth1_to_bond: entered allmulticast mode [ 1342.334816][T16554] veth1_to_bond: left allmulticast mode [ 1342.573589][T16585] siw: device registration error -23 [ 1342.600596][T16583] IPVS: Unknown mcast interface: lo [ 1342.615913][T16585] ±ÿ: renamed from lo [ 1342.691783][T16590] netlink: 'syz.1.15947': attribute type 1 has an invalid length. [ 1342.702596][T16587] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1342.714035][T16591] netlink: 'syz.1.15947': attribute type 1 has an invalid length. [ 1342.736346][T16587] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1342.745022][T16587] gretap4: entered promiscuous mode [ 1342.751341][T16587] gretap4: entered allmulticast mode [ 1342.760362][T16591] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 1342.923826][T16606] netlink: 'syz.4.15953': attribute type 8 has an invalid length. [ 1343.021027][T16611] openvswitch: netlink: Key type 31 is not supported [ 1343.072283][T16612] sock: sock_set_timeout: `syz.3.15954' (pid 16612) tries to set negative timeout [ 1343.129527][T16615] netlink: 'syz.0.15956': attribute type 83 has an invalid length. [ 1343.170331][T16615] netlink: 'syz.0.15956': attribute type 1 has an invalid length. [ 1343.194191][T16617] netlink: 'syz.3.15957': attribute type 13 has an invalid length. [ 1343.202600][T16617] netlink: 'syz.3.15957': attribute type 58 has an invalid length. [ 1343.288526][T16615] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1343.391607][T16628] netlink: 'syz.1.15960': attribute type 12 has an invalid length. [ 1343.483380][T16632] syz_tun: mtu greater than device maximum [ 1343.664866][T16645] openvswitch: netlink: Key type 31 is not supported [ 1343.830007][T16648] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 1343.837841][T16652] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1343.849811][T16648] mac80211_hwsim hwsim16 syzkaller0: left allmulticast mode [ 1343.919011][T16657] syzkaller0: entered promiscuous mode [ 1343.945475][T16657] syzkaller0: entered allmulticast mode [ 1344.112855][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.140588][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.174320][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.207882][T16674] IPVS: Unknown mcast interface: lo [ 1344.227315][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.246055][T16679] batadv_slave_0: mtu greater than device maximum [ 1344.414410][T16690] openvswitch: netlink: Key type 31 is not supported [ 1345.250830][T16754] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1345.272350][T16743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1345.319974][T16760] vxcan1: mtu less than device minimum [ 1345.432429][T16764] __nla_validate_parse: 97 callbacks suppressed [ 1345.432448][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15989'. [ 1345.504906][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15989'. [ 1345.547929][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15992'. [ 1345.815940][T16785] wlan1 speed is unknown, defaulting to 1000 [ 1345.835849][T16785] vxcan1 speed is unknown, defaulting to 1000 [ 1345.941674][T16800] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 1346.266388][T16785] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1346.438961][T16816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16004'. [ 1346.460187][T16816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16004'. [ 1346.551141][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16003'. [ 1347.315233][T16847] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16016'. [ 1347.327020][T16847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16016'. [ 1347.491035][T16858] validate_nla: 7 callbacks suppressed [ 1347.491055][T16858] netlink: 'syz.4.16021': attribute type 2 has an invalid length. [ 1347.601243][T16863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16022'. [ 1347.620874][T16862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16022'. [ 1347.643725][T16866] netlink: 'syz.0.16023': attribute type 1 has an invalid length. [ 1347.817462][T16872] bond24: (slave gretap5): making interface the new active one [ 1347.826577][T16872] bond24: (slave gretap5): Enslaving as an active interface with an up link [ 1347.851508][T16881] netlink: 'syz.3.16028': attribute type 2 has an invalid length. [ 1348.166061][T16901] netlink: 'syz.3.16036': attribute type 1 has an invalid length. [ 1348.352481][T16914] netlink: 'syz.2.16041': attribute type 2 has an invalid length. [ 1348.490219][T16915] xt_hashlimit: max too large, truncated to 1048576 [ 1348.539697][T16915] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1348.843298][T16938] netlink: 'syz.2.16049': attribute type 1 has an invalid length. [ 1349.027385][T16945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.224879][T16956] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1349.539158][T16978] netlink: 'syz.1.16064': attribute type 1 has an invalid length. [ 1349.565084][T16979] netlink: 'syz.3.16065': attribute type 5 has an invalid length. [ 1349.688849][T16984] tipc: Resetting bearer [ 1349.710876][T16984] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1349.761379][T16991] IPv6: Can't replace route, no match found [ 1349.778948][T16991] IPv6: Can't replace route, no match found [ 1349.808993][T16983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1350.123568][T17008] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1350.303147][T17019] netlink: 'syz.0.16081': attribute type 19 has an invalid length. [ 1350.568613][T17035] __nla_validate_parse: 29 callbacks suppressed [ 1350.568636][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16082'. [ 1350.812945][T17050] netlink: 'syz.2.16086': attribute type 4 has an invalid length. [ 1350.883153][T17054] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16087'. [ 1351.177490][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16094'. [ 1351.228884][T17075] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16093'. [ 1351.257038][T17077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16095'. [ 1351.268196][ T4943] block nbd4: Receive control failed (result -32) [ 1351.373197][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16096'. [ 1351.404879][T17084] batman_adv: batadv0: Removing interface: wlan0 [ 1351.422508][T17084] batman_adv: batadv0: Removing interface: gretap3 [ 1351.456562][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16096'. [ 1351.663713][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16102'. [ 1351.704825][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16102'. [ 1351.737200][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16102'. [ 1351.832680][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1351.855970][ T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1351.896509][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1351.918469][ T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.146070][T17119] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1353.024405][T17193] validate_nla: 4 callbacks suppressed [ 1353.024427][T17193] netlink: 'syz.0.16132': attribute type 9 has an invalid length. [ 1353.074291][T17193] netlink: 'syz.0.16132': attribute type 1 has an invalid length. [ 1353.096896][T17196] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1353.105489][T17196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1353.389703][T17212] netlink: 'syz.3.16141': attribute type 2 has an invalid length. [ 1353.400586][T17214] xt_hl: Unknown TTL match mode: 255 [ 1353.444794][T17217] netlink: 'syz.0.16143': attribute type 2 has an invalid length. [ 1353.703709][T17232] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1353.712328][T17232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1354.011507][T17253] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1354.144887][T17262] netlink: 'syz.2.16159': attribute type 1 has an invalid length. [ 1354.764072][T17296] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1354.912840][T17310] openvswitch: netlink: Key type 31 is not supported [ 1355.286879][T17333] FAULT_INJECTION: forcing a failure. [ 1355.286879][T17333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.303858][T17333] CPU: 1 UID: 0 PID: 17333 Comm: syz.4.16187 Not tainted syzkaller #0 PREEMPT(full) [ 1355.303888][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1355.303902][T17333] Call Trace: [ 1355.303910][T17333] [ 1355.303920][T17333] dump_stack_lvl+0xe8/0x150 [ 1355.303957][T17333] should_fail_ex+0x40c/0x560 [ 1355.303988][T17333] _copy_from_user+0x2d/0xb0 [ 1355.304020][T17333] ___sys_sendmsg+0x1c6/0x360 [ 1355.304042][T17333] ? __lock_acquire+0x683/0x2cf0 [ 1355.304075][T17333] ? __pfx____sys_sendmsg+0x10/0x10 [ 1355.304135][T17333] ? __fget_files+0x2a/0x420 [ 1355.304163][T17333] ? __fget_files+0x3a2/0x420 [ 1355.304211][T17333] __x64_sys_sendmsg+0x1b1/0x290 [ 1355.304236][T17333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1355.304278][T17333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.304302][T17333] do_syscall_64+0x174/0x580 [ 1355.304322][T17333] ? trace_irq_disable+0x3b/0x140 [ 1355.304349][T17333] ? clear_bhb_loop+0x40/0x90 [ 1355.304376][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.304398][T17333] RIP: 0033:0x7efc70b9de99 [ 1355.304417][T17333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.304437][T17333] RSP: 002b:00007efc719a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.304463][T17333] RAX: ffffffffffffffda RBX: 00007efc70e25fa0 RCX: 00007efc70b9de99 [ 1355.304479][T17333] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1355.304493][T17333] RBP: 00007efc719a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.304507][T17333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.304520][T17333] R13: 00007efc70e26038 R14: 00007efc70e25fa0 R15: 00007ffc4e7124f8 [ 1355.304554][T17333] [ 1355.531772][T17334] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1356.103220][T17374] FAULT_INJECTION: forcing a failure. [ 1356.103220][T17374] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.150230][T17374] CPU: 1 UID: 0 PID: 17374 Comm: syz.4.16199 Not tainted syzkaller #0 PREEMPT(full) [ 1356.150261][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1356.150275][T17374] Call Trace: [ 1356.150284][T17374] [ 1356.150294][T17374] dump_stack_lvl+0xe8/0x150 [ 1356.150332][T17374] should_fail_ex+0x40c/0x560 [ 1356.150363][T17374] should_failslab+0xa8/0x100 [ 1356.150400][T17374] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1356.150427][T17374] ? local_lock_release+0x9c/0x160 [ 1356.150461][T17374] ? __alloc_skb+0x1d7/0x7a0 [ 1356.150490][T17374] ? __alloc_skb+0x1d7/0x7a0 [ 1356.150528][T17374] __alloc_skb+0x1d7/0x7a0 [ 1356.150565][T17374] pfkey_sendmsg+0x20c/0x11d0 [ 1356.150689][T17374] ? unwind_next_frame+0x8f/0x2550 [ 1356.150732][T17374] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1356.150774][T17374] ? aa_sk_perm+0x6d5/0x900 [ 1356.150819][T17374] ? __pfx_aa_sk_perm+0x10/0x10 [ 1356.150858][T17374] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1356.150888][T17374] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1356.150925][T17374] sock_sendmsg_nosec+0x13a/0x180 [ 1356.150957][T17374] ____sys_sendmsg+0x54e/0x850 [ 1356.150985][T17374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1356.151018][T17374] ? import_iovec+0x73/0xa0 [ 1356.151055][T17374] ___sys_sendmsg+0x2a5/0x360 [ 1356.151076][T17374] ? __lock_acquire+0x683/0x2cf0 [ 1356.151117][T17374] ? __pfx____sys_sendmsg+0x10/0x10 [ 1356.151179][T17374] ? __fget_files+0x2a/0x420 [ 1356.151209][T17374] ? __fget_files+0x3a2/0x420 [ 1356.151250][T17374] __x64_sys_sendmsg+0x1b1/0x290 [ 1356.151276][T17374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1356.151320][T17374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.151346][T17374] do_syscall_64+0x174/0x580 [ 1356.151367][T17374] ? trace_irq_disable+0x3b/0x140 [ 1356.151397][T17374] ? clear_bhb_loop+0x40/0x90 [ 1356.151424][T17374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.151447][T17374] RIP: 0033:0x7efc70b9de99 [ 1356.151467][T17374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.151488][T17374] RSP: 002b:00007efc719a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.151512][T17374] RAX: ffffffffffffffda RBX: 00007efc70e25fa0 RCX: 00007efc70b9de99 [ 1356.151539][T17374] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1356.151554][T17374] RBP: 00007efc719a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.151569][T17374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.151582][T17374] R13: 00007efc70e26038 R14: 00007efc70e25fa0 R15: 00007ffc4e7124f8 [ 1356.151626][T17374] [ 1356.433736][T17380] openvswitch: netlink: Key type 31 is not supported [ 1356.489397][T17378] __nla_validate_parse: 17 callbacks suppressed [ 1356.489416][T17378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16202'. [ 1356.514812][T17384] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16204'. [ 1356.527304][T17384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1356.546392][T17385] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16205'. [ 1356.605543][T17384] bond42: Unable to set down delay as MII monitoring is disabled [ 1356.620900][T17384] bond42 (unregistering): Released all slaves [ 1356.830481][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16210'. [ 1356.847250][T17400] netlink: 84 bytes leftover after parsing attributes in process `syz.1.16211'. [ 1356.865538][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16210'. [ 1356.923836][T17407] netlink: 'syz.2.16213': attribute type 11 has an invalid length. [ 1357.096365][T17415] FAULT_INJECTION: forcing a failure. [ 1357.096365][T17415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.124044][T17415] CPU: 1 UID: 0 PID: 17415 Comm: syz.2.16217 Not tainted syzkaller #0 PREEMPT(full) [ 1357.124073][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1357.124087][T17415] Call Trace: [ 1357.124095][T17415] [ 1357.124105][T17415] dump_stack_lvl+0xe8/0x150 [ 1357.124143][T17415] should_fail_ex+0x40c/0x560 [ 1357.124175][T17415] _copy_from_iter+0x1d3/0x1660 [ 1357.124201][T17415] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1357.124229][T17415] ? rcu_is_watching+0x15/0xb0 [ 1357.124262][T17415] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1357.124290][T17415] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1357.124316][T17415] ? __pfx__copy_from_iter+0x10/0x10 [ 1357.124342][T17415] ? __alloc_skb+0x276/0x7a0 [ 1357.124371][T17415] ? __alloc_skb+0x276/0x7a0 [ 1357.124408][T17415] ? __alloc_skb+0x4cc/0x7a0 [ 1357.124436][T17415] ? skb_put+0x112/0x210 [ 1357.124471][T17415] pfkey_sendmsg+0x25f/0x11d0 [ 1357.124521][T17415] ? unwind_next_frame+0x8f/0x2550 [ 1357.124555][T17415] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1357.124595][T17415] ? aa_sk_perm+0x6d5/0x900 [ 1357.124640][T17415] ? __pfx_aa_sk_perm+0x10/0x10 [ 1357.124678][T17415] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1357.124707][T17415] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1357.124737][T17415] sock_sendmsg_nosec+0x13a/0x180 [ 1357.124769][T17415] ____sys_sendmsg+0x54e/0x850 [ 1357.124798][T17415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1357.124830][T17415] ? import_iovec+0x73/0xa0 [ 1357.124867][T17415] ___sys_sendmsg+0x2a5/0x360 [ 1357.124888][T17415] ? __lock_acquire+0x683/0x2cf0 [ 1357.124924][T17415] ? __pfx____sys_sendmsg+0x10/0x10 [ 1357.125002][T17415] ? __fget_files+0x2a/0x420 [ 1357.125032][T17415] ? __fget_files+0x3a2/0x420 [ 1357.125073][T17415] __x64_sys_sendmsg+0x1b1/0x290 [ 1357.125099][T17415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1357.125143][T17415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.125168][T17415] do_syscall_64+0x174/0x580 [ 1357.125189][T17415] ? trace_irq_disable+0x3b/0x140 [ 1357.125218][T17415] ? clear_bhb_loop+0x40/0x90 [ 1357.125246][T17415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.125268][T17415] RIP: 0033:0x7f032a99de99 [ 1357.125289][T17415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.125309][T17415] RSP: 002b:00007f032b885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1357.125333][T17415] RAX: ffffffffffffffda RBX: 00007f032ac25fa0 RCX: 00007f032a99de99 [ 1357.125350][T17415] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1357.125364][T17415] RBP: 00007f032b885090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.125378][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.125392][T17415] R13: 00007f032ac26038 R14: 00007f032ac25fa0 R15: 00007ffc72adda28 [ 1357.125429][T17415] [ 1357.630142][T17438] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16225'. [ 1357.641183][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16225'. [ 1357.964017][T17462] FAULT_INJECTION: forcing a failure. [ 1357.964017][T17462] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.995891][T17465] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16232'. [ 1357.999193][T17462] CPU: 0 UID: 0 PID: 17462 Comm: syz.0.16231 Not tainted syzkaller #0 PREEMPT(full) [ 1357.999268][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1357.999298][T17462] Call Trace: [ 1357.999324][T17462] [ 1357.999343][T17462] dump_stack_lvl+0xe8/0x150 [ 1357.999455][T17462] should_fail_ex+0x40c/0x560 [ 1357.999549][T17462] should_failslab+0xa8/0x100 [ 1357.999633][T17462] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1357.999697][T17462] ? skb_clone+0x212/0x3a0 [ 1357.999757][T17462] ? skb_clone+0x212/0x3a0 [ 1357.999830][T17462] skb_clone+0x212/0x3a0 [ 1357.999887][T17462] pfkey_sendmsg+0x4d6/0x11d0 [ 1357.999986][T17462] ? unwind_next_frame+0x8f/0x2550 [ 1358.000073][T17462] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1358.000218][T17462] ? __pfx_aa_sk_perm+0x10/0x10 [ 1358.000343][T17462] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1358.000423][T17462] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1358.000503][T17462] sock_sendmsg_nosec+0x13a/0x180 [ 1358.000583][T17462] ____sys_sendmsg+0x54e/0x850 [ 1358.000657][T17462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1358.000748][T17462] ? import_iovec+0x73/0xa0 [ 1358.000859][T17462] ___sys_sendmsg+0x2a5/0x360 [ 1358.000907][T17462] ? __lock_acquire+0x683/0x2cf0 [ 1358.001004][T17462] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.001170][T17462] ? __fget_files+0x2a/0x420 [ 1358.001243][T17462] ? __fget_files+0x3a2/0x420 [ 1358.001356][T17462] __x64_sys_sendmsg+0x1b1/0x290 [ 1358.001427][T17462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1358.001540][T17462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.001618][T17462] do_syscall_64+0x174/0x580 [ 1358.001691][T17462] ? trace_irq_disable+0x3b/0x140 [ 1358.001769][T17462] ? clear_bhb_loop+0x40/0x90 [ 1358.001846][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.001900][T17462] RIP: 0033:0x7f4c1819de99 [ 1358.001955][T17462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.002017][T17462] RSP: 002b:00007f4c19101028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.002076][T17462] RAX: ffffffffffffffda RBX: 00007f4c18425fa0 RCX: 00007f4c1819de99 [ 1358.002117][T17462] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1358.002156][T17462] RBP: 00007f4c19101090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.002195][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.002227][T17462] R13: 00007f4c18426038 R14: 00007f4c18425fa0 R15: 00007ffeef83c188 [ 1358.002324][T17462] [ 1358.459341][T17484] x_tables: duplicate underflow at hook 1 [ 1358.543013][T17488] netlink: 'syz.4.16237': attribute type 2 has an invalid length. [ 1359.053816][T17524] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1359.115865][T17534] FAULT_INJECTION: forcing a failure. [ 1359.115865][T17534] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.167861][T17534] CPU: 0 UID: 0 PID: 17534 Comm: syz.2.16252 Not tainted syzkaller #0 PREEMPT(full) [ 1359.167891][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1359.167905][T17534] Call Trace: [ 1359.167914][T17534] [ 1359.167924][T17534] dump_stack_lvl+0xe8/0x150 [ 1359.167962][T17534] should_fail_ex+0x40c/0x560 [ 1359.167994][T17534] should_failslab+0xa8/0x100 [ 1359.168027][T17534] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1359.168054][T17534] ? xfrm_state_alloc+0x24/0x2f0 [ 1359.168173][T17534] ? xfrm_state_alloc+0x24/0x2f0 [ 1359.168205][T17534] xfrm_state_alloc+0x24/0x2f0 [ 1359.168232][T17534] pfkey_add+0x6e0/0x2e50 [ 1359.168285][T17534] ? __pfx_pfkey_add+0x10/0x10 [ 1359.168332][T17534] pfkey_sendmsg+0xceb/0x11d0 [ 1359.168377][T17534] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1359.168429][T17534] ? __pfx_aa_sk_perm+0x10/0x10 [ 1359.168466][T17534] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1359.168493][T17534] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1359.168521][T17534] sock_sendmsg_nosec+0x13a/0x180 [ 1359.168553][T17534] ____sys_sendmsg+0x54e/0x850 [ 1359.168585][T17534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1359.168618][T17534] ? import_iovec+0x73/0xa0 [ 1359.168654][T17534] ___sys_sendmsg+0x2a5/0x360 [ 1359.168674][T17534] ? __lock_acquire+0x683/0x2cf0 [ 1359.168708][T17534] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.168771][T17534] ? __fget_files+0x2a/0x420 [ 1359.168798][T17534] ? __fget_files+0x3a2/0x420 [ 1359.168856][T17534] __x64_sys_sendmsg+0x1b1/0x290 [ 1359.168879][T17534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1359.168920][T17534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.168943][T17534] do_syscall_64+0x174/0x580 [ 1359.168963][T17534] ? trace_irq_disable+0x3b/0x140 [ 1359.168988][T17534] ? clear_bhb_loop+0x40/0x90 [ 1359.169014][T17534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.169034][T17534] RIP: 0033:0x7f032a99de99 [ 1359.169053][T17534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.169071][T17534] RSP: 002b:00007f032b885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.169093][T17534] RAX: ffffffffffffffda RBX: 00007f032ac25fa0 RCX: 00007f032a99de99 [ 1359.169108][T17534] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1359.169121][T17534] RBP: 00007f032b885090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.169134][T17534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.169146][T17534] R13: 00007f032ac26038 R14: 00007f032ac25fa0 R15: 00007ffc72adda28 [ 1359.169179][T17534] [ 1359.475303][T17544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1359.697390][T17558] syzkaller1: entered promiscuous mode [ 1359.713927][T17558] syzkaller1: entered allmulticast mode [ 1359.931697][T17576] netlink: 10 bytes leftover after parsing attributes in process `syz.2.16266'. [ 1360.622825][T17621] FAULT_INJECTION: forcing a failure. [ 1360.622825][T17621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.681608][T17621] CPU: 1 UID: 0 PID: 17621 Comm: syz.4.16277 Not tainted syzkaller #0 PREEMPT(full) [ 1360.681638][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1360.681652][T17621] Call Trace: [ 1360.681662][T17621] [ 1360.681673][T17621] dump_stack_lvl+0xe8/0x150 [ 1360.681717][T17621] should_fail_ex+0x40c/0x560 [ 1360.681749][T17621] _copy_from_user+0x2d/0xb0 [ 1360.681783][T17621] ___sys_sendmsg+0x1c6/0x360 [ 1360.681804][T17621] ? __lock_acquire+0x683/0x2cf0 [ 1360.681839][T17621] ? __pfx____sys_sendmsg+0x10/0x10 [ 1360.681901][T17621] ? __fget_files+0x2a/0x420 [ 1360.681930][T17621] ? __fget_files+0x3a2/0x420 [ 1360.681971][T17621] __x64_sys_sendmsg+0x1b1/0x290 [ 1360.682009][T17621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1360.682050][T17621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.682075][T17621] do_syscall_64+0x174/0x580 [ 1360.682095][T17621] ? trace_irq_disable+0x3b/0x140 [ 1360.682122][T17621] ? clear_bhb_loop+0x40/0x90 [ 1360.682147][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.682168][T17621] RIP: 0033:0x7efc70b9de99 [ 1360.682212][T17621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.682248][T17621] RSP: 002b:00007efc71984028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1360.682271][T17621] RAX: ffffffffffffffda RBX: 00007efc70e26090 RCX: 00007efc70b9de99 [ 1360.682287][T17621] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1360.682301][T17621] RBP: 00007efc71984090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.682315][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.682329][T17621] R13: 00007efc70e26128 R14: 00007efc70e26090 R15: 00007ffc4e7124f8 [ 1360.682363][T17621] [ 1361.131252][T17632] bridge13: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1361.286660][T17651] netlink: 'syz.4.16291': attribute type 21 has an invalid length. [ 1361.313539][T17656] xt_cgroup: path and classid specified [ 1361.449208][T17656] bridge18: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1361.534958][T17658] netlink: 'syz.4.16291': attribute type 83 has an invalid length. [ 1361.562271][T17658] __nla_validate_parse: 9 callbacks suppressed [ 1361.562291][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16291'. [ 1361.783395][T17683] FAULT_INJECTION: forcing a failure. [ 1361.783395][T17683] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.818680][T17683] CPU: 1 UID: 0 PID: 17683 Comm: syz.3.16302 Not tainted syzkaller #0 PREEMPT(full) [ 1361.818709][T17683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1361.818722][T17683] Call Trace: [ 1361.818731][T17683] [ 1361.818740][T17683] dump_stack_lvl+0xe8/0x150 [ 1361.818776][T17683] should_fail_ex+0x40c/0x560 [ 1361.818806][T17683] should_failslab+0xa8/0x100 [ 1361.818837][T17683] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1361.818864][T17683] ? trace_kmalloc+0x2a/0xf0 [ 1361.818887][T17683] ? hwsim_del_radio_nl+0x367/0xec0 [ 1361.819000][T17683] ? hwsim_del_radio_nl+0x367/0xec0 [ 1361.819029][T17683] ? __kmalloc_noprof+0x396/0x720 [ 1361.819058][T17683] kstrndup+0x7e/0x160 [ 1361.819095][T17683] hwsim_del_radio_nl+0x367/0xec0 [ 1361.819122][T17683] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1361.819149][T17683] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1361.819185][T17683] genl_family_rcv_msg_doit+0x233/0x340 [ 1361.819219][T17683] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1361.819260][T17683] ? bpf_lsm_capable+0x9/0x20 [ 1361.819304][T17683] ? security_capable+0x7e/0x2c0 [ 1361.819345][T17683] genl_rcv_msg+0x614/0x7a0 [ 1361.819380][T17683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1361.819408][T17683] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 1361.819454][T17683] netlink_rcv_skb+0x226/0x4a0 [ 1361.819478][T17683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1361.819508][T17683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1361.819548][T17683] ? down_read+0x2be/0x330 [ 1361.819577][T17683] genl_rcv+0x28/0x40 [ 1361.819603][T17683] netlink_unicast+0x7bb/0x940 [ 1361.819647][T17683] netlink_sendmsg+0x813/0xb40 [ 1361.819682][T17683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1361.819711][T17683] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1361.819739][T17683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1361.819761][T17683] sock_sendmsg_nosec+0x13a/0x180 [ 1361.819793][T17683] ____sys_sendmsg+0x54e/0x850 [ 1361.819822][T17683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1361.819854][T17683] ? import_iovec+0x73/0xa0 [ 1361.819891][T17683] ___sys_sendmsg+0x2a5/0x360 [ 1361.819910][T17683] ? __lock_acquire+0x683/0x2cf0 [ 1361.819945][T17683] ? __pfx____sys_sendmsg+0x10/0x10 [ 1361.820008][T17683] ? __fget_files+0x2a/0x420 [ 1361.820036][T17683] ? __fget_files+0x3a2/0x420 [ 1361.820077][T17683] __x64_sys_sendmsg+0x1b1/0x290 [ 1361.820110][T17683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1361.820153][T17683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.820183][T17683] do_syscall_64+0x174/0x580 [ 1361.820202][T17683] ? trace_irq_disable+0x3b/0x140 [ 1361.820230][T17683] ? clear_bhb_loop+0x40/0x90 [ 1361.820258][T17683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.820280][T17683] RIP: 0033:0x7ff40ef9de99 [ 1361.820300][T17683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.820320][T17683] RSP: 002b:00007ff40ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.820342][T17683] RAX: ffffffffffffffda RBX: 00007ff40f225fa0 RCX: 00007ff40ef9de99 [ 1361.820359][T17683] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 1361.820373][T17683] RBP: 00007ff40ff41090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.820387][T17683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.820400][T17683] R13: 00007ff40f226038 R14: 00007ff40f225fa0 R15: 00007ffec6647c58 [ 1361.820436][T17683] [ 1362.294011][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16308'. [ 1362.306443][T17690] netlink: 'syz.2.16304': attribute type 32 has an invalid length. [ 1362.335114][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16304'. [ 1362.474647][T17690] bond19: option coupled_control: invalid value (192) [ 1362.489699][T17690] bond19 (unregistering): Released all slaves [ 1362.542064][T17701] macvlan4: entered promiscuous mode [ 1362.555583][T17701] macvlan4: entered allmulticast mode [ 1362.660483][T17716] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16311'. [ 1362.685954][T17716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16311'. [ 1362.772537][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16315'. [ 1362.832221][T17723] openvswitch: netlink: EtherType 0 is less than min 600 [ 1362.860352][T17725] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1362.866479][T17725] syzkaller1: linktype set to 823 [ 1363.137255][T17743] netlink: 'syz.1.16320': attribute type 12 has an invalid length. [ 1363.339725][T17757] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1363.386577][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16325'. [ 1363.435733][T17764] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1363.503620][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16327'. [ 1363.555620][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16327'. [ 1363.601317][T17768] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1363.654020][T17775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16332'. [ 1363.673437][T17775] netlink: 'syz.2.16332': attribute type 1 has an invalid length. [ 1363.700764][T17776] xt_cgroup: path and classid specified [ 1363.725814][T17780] netlink: 'syz.1.16334': attribute type 12 has an invalid length. [ 1363.745101][T17779] x_tables: duplicate entry at hook 1 [ 1363.869006][T17788] netlink: 'syz.2.16336': attribute type 27 has an invalid length. [ 1363.878776][T17788] netlink: 'syz.2.16336': attribute type 4 has an invalid length. [ 1363.908320][T17789] netlink: 'syz.3.16338': attribute type 1 has an invalid length. [ 1363.923073][T17793] FAULT_INJECTION: forcing a failure. [ 1363.923073][T17793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.973400][T17793] CPU: 1 UID: 0 PID: 17793 Comm: syz.4.16339 Not tainted syzkaller #0 PREEMPT(full) [ 1363.973429][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1363.973442][T17793] Call Trace: [ 1363.973451][T17793] [ 1363.973461][T17793] dump_stack_lvl+0xe8/0x150 [ 1363.973499][T17793] should_fail_ex+0x40c/0x560 [ 1363.973530][T17793] _copy_from_user+0x2d/0xb0 [ 1363.973564][T17793] ___sys_recvmsg+0x173/0x5a0 [ 1363.973586][T17793] ? ktime_get_ts64+0xa9/0x410 [ 1363.973620][T17793] ? __pfx____sys_recvmsg+0x10/0x10 [ 1363.973648][T17793] ? __fget_files+0x2a/0x420 [ 1363.973695][T17793] ? __fget_files+0x3a2/0x420 [ 1363.973735][T17793] do_recvmmsg+0x31a/0x7f0 [ 1363.973767][T17793] ? __pfx_do_recvmmsg+0x10/0x10 [ 1363.973804][T17793] ? get_timespec64+0x119/0x1b0 [ 1363.973834][T17793] ? __pfx_get_timespec64+0x10/0x10 [ 1363.973875][T17793] __x64_sys_recvmmsg+0x1b7/0x250 [ 1363.973908][T17793] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1363.973940][T17793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.973965][T17793] do_syscall_64+0x174/0x580 [ 1363.973989][T17793] ? trace_irq_disable+0x3b/0x140 [ 1363.974016][T17793] ? clear_bhb_loop+0x40/0x90 [ 1363.974042][T17793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.974062][T17793] RIP: 0033:0x7efc70b9de99 [ 1363.974083][T17793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.974102][T17793] RSP: 002b:00007efc719a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1363.974125][T17793] RAX: ffffffffffffffda RBX: 00007efc70e25fa0 RCX: 00007efc70b9de99 [ 1363.974142][T17793] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1363.974157][T17793] RBP: 00007efc719a5090 R08: 0000200000003700 R09: 0000000000000000 [ 1363.974172][T17793] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.974185][T17793] R13: 00007efc70e26038 R14: 00007efc70e25fa0 R15: 00007ffc4e7124f8 [ 1363.974221][T17793] [ 1364.366028][T17807] netlink: 'syz.2.16346': attribute type 1 has an invalid length. [ 1364.378973][T17811] openvswitch: netlink: Key type 31 is not supported [ 1364.414380][T17803] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1364.488486][T17814] netlink: 'syz.1.16348': attribute type 12 has an invalid length. [ 1364.643715][T17825] netlink: 'syz.2.16353': attribute type 1 has an invalid length. [ 1364.827170][T17838] openvswitch: netlink: Key type 31 is not supported [ 1364.864992][T17839] FAULT_INJECTION: forcing a failure. [ 1364.864992][T17839] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.887499][T17839] CPU: 0 UID: 0 PID: 17839 Comm: syz.3.16358 Not tainted syzkaller #0 PREEMPT(full) [ 1364.887528][T17839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1364.887542][T17839] Call Trace: [ 1364.887550][T17839] [ 1364.887560][T17839] dump_stack_lvl+0xe8/0x150 [ 1364.887602][T17839] should_fail_ex+0x40c/0x560 [ 1364.887634][T17839] should_failslab+0xa8/0x100 [ 1364.887668][T17839] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1364.887694][T17839] ? local_lock_release+0x9c/0x160 [ 1364.887728][T17839] ? __alloc_skb+0x1d7/0x7a0 [ 1364.887756][T17839] ? __alloc_skb+0x1d7/0x7a0 [ 1364.887795][T17839] __alloc_skb+0x1d7/0x7a0 [ 1364.887830][T17839] netlink_ack+0x136/0xb30 [ 1364.887850][T17839] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1364.887883][T17839] ? __lock_acquire+0x683/0x2cf0 [ 1364.887927][T17839] netlink_rcv_skb+0x2a4/0x4a0 [ 1364.887950][T17839] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1364.887984][T17839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1364.888021][T17839] ? netlink_deliver_tap+0x2e/0x1b0 [ 1364.888043][T17839] ? netlink_deliver_tap+0x2e/0x1b0 [ 1364.888073][T17839] netlink_unicast+0x7bb/0x940 [ 1364.888119][T17839] netlink_sendmsg+0x813/0xb40 [ 1364.888153][T17839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1364.888181][T17839] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1364.888211][T17839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1364.888233][T17839] sock_sendmsg_nosec+0x13a/0x180 [ 1364.888264][T17839] ____sys_sendmsg+0x54e/0x850 [ 1364.888293][T17839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1364.888326][T17839] ? import_iovec+0x73/0xa0 [ 1364.888370][T17839] ___sys_sendmsg+0x2a5/0x360 [ 1364.888391][T17839] ? __lock_acquire+0x683/0x2cf0 [ 1364.888424][T17839] ? __pfx____sys_sendmsg+0x10/0x10 [ 1364.888485][T17839] ? __fget_files+0x2a/0x420 [ 1364.888514][T17839] ? __fget_files+0x3a2/0x420 [ 1364.888552][T17839] __x64_sys_sendmsg+0x1b1/0x290 [ 1364.888578][T17839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1364.888621][T17839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.888646][T17839] do_syscall_64+0x174/0x580 [ 1364.888667][T17839] ? trace_irq_disable+0x3b/0x140 [ 1364.888695][T17839] ? clear_bhb_loop+0x40/0x90 [ 1364.888723][T17839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.888757][T17839] RIP: 0033:0x7ff40ef9de99 [ 1364.888777][T17839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.888797][T17839] RSP: 002b:00007ff40ff20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1364.888820][T17839] RAX: ffffffffffffffda RBX: 00007ff40f226090 RCX: 00007ff40ef9de99 [ 1364.888836][T17839] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1364.888850][T17839] RBP: 00007ff40ff20090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.888865][T17839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.888877][T17839] R13: 00007ff40f226128 R14: 00007ff40f226090 R15: 00007ffec6647c58 [ 1364.888910][T17839] [ 1365.312219][T17852] sctp: [Deprecated]: syz.3.16363 (pid 17852) Use of int in max_burst socket option. [ 1365.312219][T17852] Use struct sctp_assoc_value instead [ 1365.343641][T17853] netlink: 'syz.2.16362': attribute type 12 has an invalid length. [ 1365.538008][T17869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1365.783095][T17882] FAULT_INJECTION: forcing a failure. [ 1365.783095][T17882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.797324][T17882] CPU: 1 UID: 0 PID: 17882 Comm: syz.0.16375 Not tainted syzkaller #0 PREEMPT(full) [ 1365.797350][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1365.797364][T17882] Call Trace: [ 1365.797373][T17882] [ 1365.797382][T17882] dump_stack_lvl+0xe8/0x150 [ 1365.797415][T17882] should_fail_ex+0x40c/0x560 [ 1365.797447][T17882] _copy_from_user+0x2d/0xb0 [ 1365.797479][T17882] ___sys_sendmsg+0x1c6/0x360 [ 1365.797496][T17882] ? __lock_acquire+0x683/0x2cf0 [ 1365.797523][T17882] ? __pfx____sys_sendmsg+0x10/0x10 [ 1365.797538][T17882] ? __lock_acquire+0x683/0x2cf0 [ 1365.797565][T17882] ? kstrtouint+0x6e/0xe0 [ 1365.797623][T17882] __sys_sendmmsg+0x273/0x4d0 [ 1365.797656][T17882] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1365.797680][T17882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1365.797708][T17882] ? ksys_write+0x242/0x270 [ 1365.797736][T17882] ? __pfx_ksys_write+0x10/0x10 [ 1365.797775][T17882] __x64_sys_sendmmsg+0xa0/0xc0 [ 1365.797792][T17882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.797810][T17882] do_syscall_64+0x174/0x580 [ 1365.797824][T17882] ? trace_irq_disable+0x3b/0x140 [ 1365.797845][T17882] ? clear_bhb_loop+0x40/0x90 [ 1365.797865][T17882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.797882][T17882] RIP: 0033:0x7f4c1819de99 [ 1365.797898][T17882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.797912][T17882] RSP: 002b:00007f4c19101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1365.797930][T17882] RAX: ffffffffffffffda RBX: 00007f4c18425fa0 RCX: 00007f4c1819de99 [ 1365.797941][T17882] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000005 [ 1365.797952][T17882] RBP: 00007f4c19101090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.797963][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.797972][T17882] R13: 00007f4c18426038 R14: 00007f4c18425fa0 R15: 00007ffeef83c188 [ 1365.797998][T17882] [ 1366.108496][T17885] FAULT_INJECTION: forcing a failure. [ 1366.108496][T17885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.134534][T17885] CPU: 0 UID: 0 PID: 17885 Comm: syz.1.16374 Not tainted syzkaller #0 PREEMPT(full) [ 1366.134563][T17885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1366.134575][T17885] Call Trace: [ 1366.134583][T17885] [ 1366.134592][T17885] dump_stack_lvl+0xe8/0x150 [ 1366.134646][T17885] should_fail_ex+0x40c/0x560 [ 1366.134677][T17885] _copy_to_user+0x31/0xb0 [ 1366.134712][T17885] simple_read_from_buffer+0xe1/0x170 [ 1366.134749][T17885] proc_fail_nth_read+0x1bb/0x230 [ 1366.134782][T17885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.134815][T17885] ? rw_verify_area+0x24a/0x4c0 [ 1366.134855][T17885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.134883][T17885] vfs_read+0x213/0xa80 [ 1366.134920][T17885] ? __pfx___mutex_lock+0x10/0x10 [ 1366.134953][T17885] ? __pfx_vfs_read+0x10/0x10 [ 1366.134984][T17885] ? __fget_files+0x2a/0x420 [ 1366.135014][T17885] ? __fget_files+0x3a2/0x420 [ 1366.135040][T17885] ? __fget_files+0x2a/0x420 [ 1366.135094][T17885] ksys_read+0x150/0x270 [ 1366.135128][T17885] ? __pfx_ksys_read+0x10/0x10 [ 1366.135169][T17885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.135194][T17885] do_syscall_64+0x174/0x580 [ 1366.135221][T17885] ? trace_irq_disable+0x3b/0x140 [ 1366.135249][T17885] ? clear_bhb_loop+0x40/0x90 [ 1366.135276][T17885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.135298][T17885] RIP: 0033:0x7fdb70b5e6ce [ 1366.135318][T17885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1366.135336][T17885] RSP: 002b:00007fdb719c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1366.135359][T17885] RAX: ffffffffffffffda RBX: 00007fdb719c26c0 RCX: 00007fdb70b5e6ce [ 1366.135375][T17885] RDX: 000000000000000f RSI: 00007fdb719c20a0 RDI: 0000000000000006 [ 1366.135389][T17885] RBP: 00007fdb719c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.135403][T17885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.135415][T17885] R13: 00007fdb70e26128 R14: 00007fdb70e26090 R15: 00007ffe86038a28 [ 1366.135452][T17885] [ 1366.398942][T17897] netlink: 'syz.1.16379': attribute type 12 has an invalid length. [ 1366.663710][T17903] FAULT_INJECTION: forcing a failure. [ 1366.663710][T17903] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.698953][T17903] CPU: 0 UID: 0 PID: 17903 Comm: syz.3.16381 Not tainted syzkaller #0 PREEMPT(full) [ 1366.698983][T17903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1366.698996][T17903] Call Trace: [ 1366.699005][T17903] [ 1366.699013][T17903] dump_stack_lvl+0xe8/0x150 [ 1366.699060][T17903] should_fail_ex+0x40c/0x560 [ 1366.699089][T17903] should_failslab+0xa8/0x100 [ 1366.699122][T17903] __kmalloc_node_noprof+0x105/0x740 [ 1366.699148][T17903] ? __pfx___up_read+0x10/0x10 [ 1366.699167][T17903] ? crypto_create_tfm_node+0x81/0x3c0 [ 1366.699198][T17903] ? crypto_create_tfm_node+0x81/0x3c0 [ 1366.699236][T17903] crypto_create_tfm_node+0x81/0x3c0 [ 1366.699271][T17903] crypto_spawn_tfm2+0x5c/0x90 [ 1366.699369][T17903] crypto_authenc_init_tfm+0x47/0x1c0 [ 1366.699402][T17903] crypto_create_tfm_node+0x143/0x3c0 [ 1366.699436][T17903] crypto_spawn_tfm2+0x5c/0x90 [ 1366.699461][T17903] aead_init_geniv+0xa6/0x170 [ 1366.699493][T17903] crypto_create_tfm_node+0x143/0x3c0 [ 1366.699531][T17903] crypto_alloc_tfm_node+0x169/0x3e0 [ 1366.699571][T17903] esp_init_state+0x615/0x1220 [ 1366.699611][T17903] ? ____sys_sendmsg+0x54e/0x850 [ 1366.699631][T17903] ? ___sys_sendmsg+0x2a5/0x360 [ 1366.699650][T17903] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1366.699683][T17903] ? __pfx_esp_init_state+0x10/0x10 [ 1366.699736][T17903] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1366.699764][T17903] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1366.699799][T17903] ? __xfrm_init_state+0x745/0x1320 [ 1366.699837][T17903] __xfrm_init_state+0x9dd/0x1320 [ 1366.699869][T17903] ? __xfrm_init_state+0x745/0x1320 [ 1366.699904][T17903] xfrm_init_state+0x1e/0xa0 [ 1366.699951][T17903] pfkey_add+0x1d71/0x2e50 [ 1366.700006][T17903] ? __pfx_pfkey_add+0x10/0x10 [ 1366.700054][T17903] pfkey_sendmsg+0xceb/0x11d0 [ 1366.700085][T17903] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1366.700129][T17903] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1366.700181][T17903] ? __pfx_aa_sk_perm+0x10/0x10 [ 1366.700219][T17903] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1366.700247][T17903] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1366.700278][T17903] sock_sendmsg_nosec+0x13a/0x180 [ 1366.700310][T17903] ____sys_sendmsg+0x54e/0x850 [ 1366.700339][T17903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1366.700372][T17903] ? import_iovec+0x73/0xa0 [ 1366.700410][T17903] ___sys_sendmsg+0x2a5/0x360 [ 1366.700431][T17903] ? __lock_acquire+0x683/0x2cf0 [ 1366.700466][T17903] ? __pfx____sys_sendmsg+0x10/0x10 [ 1366.700527][T17903] ? __fget_files+0x2a/0x420 [ 1366.700556][T17903] ? __fget_files+0x3a2/0x420 [ 1366.700597][T17903] __x64_sys_sendmsg+0x1b1/0x290 [ 1366.700624][T17903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1366.700669][T17903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.700695][T17903] do_syscall_64+0x174/0x580 [ 1366.700724][T17903] ? trace_irq_disable+0x3b/0x140 [ 1366.700753][T17903] ? clear_bhb_loop+0x40/0x90 [ 1366.700781][T17903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.700804][T17903] RIP: 0033:0x7ff40ef9de99 [ 1366.700825][T17903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.700845][T17903] RSP: 002b:00007ff40ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.700869][T17903] RAX: ffffffffffffffda RBX: 00007ff40f225fa0 RCX: 00007ff40ef9de99 [ 1366.700886][T17903] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1366.700901][T17903] RBP: 00007ff40ff41090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.700915][T17903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.700928][T17903] R13: 00007ff40f226038 R14: 00007ff40f225fa0 R15: 00007ffec6647c58 [ 1366.700965][T17903] [ 1366.788428][T17908] bond19: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1366.791412][T17912] __nla_validate_parse: 8 callbacks suppressed [ 1366.791474][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16382'. [ 1366.834380][T17913] FAULT_INJECTION: forcing a failure. [ 1366.834380][T17913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.834511][T17913] CPU: 1 UID: 0 PID: 17913 Comm: syz.0.16383 Not tainted syzkaller #0 PREEMPT(full) [ 1366.834546][T17913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1366.834603][T17913] Call Trace: [ 1366.834632][T17913] [ 1366.834661][T17913] dump_stack_lvl+0xe8/0x150 [ 1366.834793][T17913] should_fail_ex+0x40c/0x560 [ 1366.834870][T17913] _copy_to_user+0x31/0xb0 [ 1366.834955][T17913] simple_read_from_buffer+0xe1/0x170 [ 1366.835042][T17913] proc_fail_nth_read+0x1bb/0x230 [ 1366.835124][T17913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.835209][T17913] ? rw_verify_area+0x24a/0x4c0 [ 1366.835292][T17913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.835361][T17913] vfs_read+0x213/0xa80 [ 1366.835453][T17913] ? __pfx___mutex_lock+0x10/0x10 [ 1366.835510][T17913] ? __pfx_vfs_read+0x10/0x10 [ 1366.835598][T17913] ? __fget_files+0x2a/0x420 [ 1366.835684][T17913] ? __fget_files+0x3a2/0x420 [ 1366.835754][T17913] ? __fget_files+0x2a/0x420 [ 1366.835846][T17913] ksys_read+0x150/0x270 [ 1366.835933][T17913] ? __pfx_ksys_read+0x10/0x10 [ 1366.836055][T17913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.836132][T17913] do_syscall_64+0x174/0x580 [ 1366.836173][T17913] ? trace_irq_disable+0x3b/0x140 [ 1366.836272][T17913] ? clear_bhb_loop+0x40/0x90 [ 1366.836333][T17913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.836389][T17913] RIP: 0033:0x7f4c1815e6ce [ 1366.836443][T17913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1366.836491][T17913] RSP: 002b:00007f4c190dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1366.836542][T17913] RAX: ffffffffffffffda RBX: 00007f4c190e06c0 RCX: 00007f4c1815e6ce [ 1366.836580][T17913] RDX: 000000000000000f RSI: 00007f4c190e00a0 RDI: 0000000000000004 [ 1366.836617][T17913] RBP: 00007f4c190e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.836653][T17913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.836682][T17913] R13: 00007f4c18426128 R14: 00007f4c18426090 R15: 00007ffeef83c188 [ 1366.836770][T17913] [ 1367.311668][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16382'. [ 1367.329075][T17908] bond19 (unregistering): Released all slaves [ 1367.492731][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16385'. [ 1367.587339][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16385'. [ 1367.614556][T17920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16385'. [ 1367.631201][T17924] tipc: Enabling of bearer rejected, already enabled [ 1367.961358][T17944] FAULT_INJECTION: forcing a failure. [ 1367.961358][T17944] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.974838][T17944] CPU: 1 UID: 0 PID: 17944 Comm: syz.3.16396 Not tainted syzkaller #0 PREEMPT(full) [ 1367.974866][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1367.974879][T17944] Call Trace: [ 1367.974900][T17944] [ 1367.974908][T17944] dump_stack_lvl+0xe8/0x150 [ 1367.974944][T17944] should_fail_ex+0x40c/0x560 [ 1367.974973][T17944] should_failslab+0xa8/0x100 [ 1367.975004][T17944] __kmalloc_node_noprof+0x105/0x740 [ 1367.975030][T17944] ? __pfx___up_read+0x10/0x10 [ 1367.975048][T17944] ? crypto_create_tfm_node+0x81/0x3c0 [ 1367.975077][T17944] ? crypto_create_tfm_node+0x81/0x3c0 [ 1367.975114][T17944] crypto_create_tfm_node+0x81/0x3c0 [ 1367.975157][T17944] crypto_spawn_tfm2+0x5c/0x90 [ 1367.975182][T17944] crypto_authenc_init_tfm+0x69/0x1c0 [ 1367.975215][T17944] crypto_create_tfm_node+0x143/0x3c0 [ 1367.975251][T17944] crypto_spawn_tfm2+0x5c/0x90 [ 1367.975276][T17944] aead_init_geniv+0xa6/0x170 [ 1367.975309][T17944] crypto_create_tfm_node+0x143/0x3c0 [ 1367.975343][T17944] crypto_alloc_tfm_node+0x169/0x3e0 [ 1367.975385][T17944] esp_init_state+0x615/0x1220 [ 1367.975409][T17944] ? ____sys_sendmsg+0x54e/0x850 [ 1367.975427][T17944] ? ___sys_sendmsg+0x2a5/0x360 [ 1367.975444][T17944] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1367.975475][T17944] ? __pfx_esp_init_state+0x10/0x10 [ 1367.975518][T17944] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1367.975543][T17944] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1367.975576][T17944] ? __xfrm_init_state+0x745/0x1320 [ 1367.975612][T17944] __xfrm_init_state+0x9dd/0x1320 [ 1367.975646][T17944] ? __xfrm_init_state+0x745/0x1320 [ 1367.975680][T17944] xfrm_init_state+0x1e/0xa0 [ 1367.975709][T17944] pfkey_add+0x1d71/0x2e50 [ 1367.975760][T17944] ? __pfx_pfkey_add+0x10/0x10 [ 1367.975803][T17944] pfkey_sendmsg+0xceb/0x11d0 [ 1367.975846][T17944] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1367.975895][T17944] ? __pfx_aa_sk_perm+0x10/0x10 [ 1367.975929][T17944] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1367.975954][T17944] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1367.975983][T17944] sock_sendmsg_nosec+0x13a/0x180 [ 1367.976011][T17944] ____sys_sendmsg+0x54e/0x850 [ 1367.976038][T17944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1367.976069][T17944] ? import_iovec+0x73/0xa0 [ 1367.976103][T17944] ___sys_sendmsg+0x2a5/0x360 [ 1367.976122][T17944] ? __lock_acquire+0x683/0x2cf0 [ 1367.976161][T17944] ? __pfx____sys_sendmsg+0x10/0x10 [ 1367.976220][T17944] ? __fget_files+0x2a/0x420 [ 1367.976263][T17944] ? __fget_files+0x3a2/0x420 [ 1367.976304][T17944] __x64_sys_sendmsg+0x1b1/0x290 [ 1367.976329][T17944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1367.976373][T17944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.976398][T17944] do_syscall_64+0x174/0x580 [ 1367.976418][T17944] ? trace_irq_disable+0x3b/0x140 [ 1367.976446][T17944] ? clear_bhb_loop+0x40/0x90 [ 1367.976473][T17944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.976496][T17944] RIP: 0033:0x7ff40ef9de99 [ 1367.976517][T17944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.976536][T17944] RSP: 002b:00007ff40ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1367.976559][T17944] RAX: ffffffffffffffda RBX: 00007ff40f225fa0 RCX: 00007ff40ef9de99 [ 1367.976576][T17944] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1367.976590][T17944] RBP: 00007ff40ff41090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.976604][T17944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.976618][T17944] R13: 00007ff40f226038 R14: 00007ff40f225fa0 R15: 00007ffec6647c58 [ 1367.976655][T17944] [ 1368.345795][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16395'. [ 1368.400648][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16398'. [ 1368.643641][T17962] syzkaller0: entered promiscuous mode [ 1368.662766][T17962] syzkaller0: entered allmulticast mode [ 1369.023792][T17987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16410'. [ 1369.059416][T17991] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1369.225752][T18004] validate_nla: 1 callbacks suppressed [ 1369.225772][T18004] netlink: 'syz.1.16415': attribute type 2 has an invalid length. [ 1369.281352][T18006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16417'. [ 1369.303067][T18009] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16418'. [ 1369.434837][T18018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1370.051269][T18050] netlink: 'syz.2.16431': attribute type 2 has an invalid length. [ 1370.388402][T18676] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1370.565805][T18090] netlink: 'syz.0.16444': attribute type 2 has an invalid length. [ 1370.891874][T18116] netlink: 'syz.1.16453': attribute type 15 has an invalid length. [ 1370.892969][T18117] netlink: 'syz.1.16453': attribute type 15 has an invalid length. [ 1370.901766][T18116] netlink: 'syz.1.16453': attribute type 15 has an invalid length. [ 1370.917988][T18117] netlink: 'syz.1.16453': attribute type 15 has an invalid length. [ 1370.943767][T18116] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 1371.274979][T18137] tunl0: Caught tx_queue_len zero misconfig [ 1373.282391][T18065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1373.292754][T18112] __nla_validate_parse: 13 callbacks suppressed [ 1373.292771][T18112] netlink: 260 bytes leftover after parsing attributes in process `syz.0.16452'. [ 1373.864463][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16469'. [ 1374.111784][T16724] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1374.158829][T18199] bond19: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1374.171507][T18199] bond19 (unregistering): Released all slaves [ 1374.197028][T18187] netlink: 'syz.4.16475': attribute type 27 has an invalid length. [ 1374.207881][T18187] netlink: 'syz.4.16475': attribute type 4 has an invalid length. [ 1374.216142][T18187] netlink: 144 bytes leftover after parsing attributes in process `syz.4.16475'. [ 1374.408582][T18206] openvswitch: netlink: Key type 31 is not supported [ 1376.991322][T18180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.007059][T18208] netlink: 'syz.0.16479': attribute type 3 has an invalid length. [ 1377.041082][T18208] netlink: 244 bytes leftover after parsing attributes in process `syz.0.16479'. [ 1377.245537][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16483'. [ 1377.388385][T18227] netlink: 'syz.3.16486': attribute type 1 has an invalid length. [ 1377.433706][T18227] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1377.502250][T18236] openvswitch: netlink: Key type 31 is not supported [ 1377.547398][T18227] bond42: (slave geneve4): making interface the new active one [ 1377.584201][T18227] bond42: (slave geneve4): Enslaving as an active interface with an up link [ 1377.616306][T16724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.626587][T16724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.662098][T16724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.740620][T16724] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1377.910385][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16494'. [ 1377.919842][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16494'. [ 1380.623948][T18238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1380.809320][T18283] netlink: 'syz.0.16503': attribute type 1 has an invalid length. [ 1380.837573][T18283] netlink: 'syz.0.16503': attribute type 1 has an invalid length. [ 1380.852166][T18280] rose0: default FDB implementation only supports local addresses [ 1381.096056][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16511'. [ 1381.296904][T18309] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1381.429004][T18318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16518'. [ 1381.909724][T18357] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1384.309775][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16533'. [ 1384.336162][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16533'. [ 1384.359718][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16533'. [ 1384.379050][T18379] netlink: 'syz.2.16533': attribute type 15 has an invalid length. [ 1384.406528][ T1179] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 1384.415199][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16533'. [ 1384.436325][ T1179] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 1384.448717][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16533'. [ 1384.459915][T18386] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1384.480073][ T1179] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 1384.498696][T18386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.509848][ T1179] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 1384.518814][T18379] netlink: 'syz.2.16533': attribute type 15 has an invalid length. [ 1384.765036][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16543'. [ 1384.860710][T18405] tipc: Resetting bearer [ 1384.867191][T18405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.875183][T18405] tipc: Resetting bearer [ 1384.892748][T12854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1384.946897][T12854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1385.058080][T18420] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1385.155988][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16546'. [ 1385.190481][T18413] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1385.616858][T22062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1385.644916][T18442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16553'. [ 1385.669059][T18433] syzkaller1: entered promiscuous mode [ 1385.681698][T18433] syzkaller1: entered allmulticast mode [ 1385.829378][T12854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1386.361995][T18468] __nla_validate_parse: 3 callbacks suppressed [ 1386.362024][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16561'. [ 1386.628747][T16724] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1386.648451][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16570'. [ 1386.652930][T16724] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1386.767050][T18494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16572'. [ 1387.282098][T13620] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1387.312645][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16582'. [ 1387.602751][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16589'. [ 1387.659438][T18550] tipc: Resetting bearer [ 1387.674478][T18550] tipc: Disabling bearer [ 1387.895015][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16596'. [ 1387.997152][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1388.079993][T18583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16597'. [ 1388.526768][T18614] netlink: 124 bytes leftover after parsing attributes in process `syz.4.16612'. [ 1389.023505][T18648] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1389.441290][T18669] tipc: Enabling of bearer rejected, failed to enable media [ 1390.096114][T18705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16643'. [ 1390.192264][T18709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16645'. [ 1390.508652][T18726] macvlan0: Caught tx_queue_len zero misconfig [ 1390.524082][T18728] FAULT_INJECTION: forcing a failure. [ 1390.524082][T18728] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.575858][T18728] CPU: 1 UID: 0 PID: 18728 Comm: syz.0.16651 Not tainted syzkaller #0 PREEMPT(full) [ 1390.575886][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1390.575900][T18728] Call Trace: [ 1390.575910][T18728] [ 1390.575919][T18728] dump_stack_lvl+0xe8/0x150 [ 1390.575957][T18728] should_fail_ex+0x40c/0x560 [ 1390.575989][T18728] should_failslab+0xa8/0x100 [ 1390.576023][T18728] __kmalloc_cache_noprof+0xa8/0x660 [ 1390.576053][T18728] ? genl_start+0x1c9/0x6d0 [ 1390.576080][T18728] ? genl_start+0x1c9/0x6d0 [ 1390.576116][T18728] genl_start+0x1c9/0x6d0 [ 1390.576159][T18728] __netlink_dump_start+0x442/0x7b0 [ 1390.576202][T18728] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1390.576237][T18728] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1390.576266][T18728] ? genl_get_cmd+0x82f/0x960 [ 1390.576299][T18728] ? __pfx_genl_start+0x10/0x10 [ 1390.576325][T18728] ? __pfx_genl_dumpit+0x10/0x10 [ 1390.576350][T18728] ? __pfx_genl_done+0x10/0x10 [ 1390.576381][T18728] ? __lock_acquire+0x683/0x2cf0 [ 1390.576422][T18728] genl_rcv_msg+0x5e1/0x7a0 [ 1390.576458][T18728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.576486][T18728] ? __pfx_netlbl_unlabel_staticlist+0x10/0x10 [ 1390.576530][T18728] netlink_rcv_skb+0x226/0x4a0 [ 1390.576554][T18728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.576584][T18728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1390.576625][T18728] ? down_read+0x2be/0x330 [ 1390.576654][T18728] genl_rcv+0x28/0x40 [ 1390.576680][T18728] netlink_unicast+0x7bb/0x940 [ 1390.576738][T18728] netlink_sendmsg+0x813/0xb40 [ 1390.576770][T18728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.576797][T18728] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1390.576825][T18728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.576845][T18728] sock_sendmsg_nosec+0x13a/0x180 [ 1390.576881][T18728] ____sys_sendmsg+0x54e/0x850 [ 1390.576935][T18728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1390.576970][T18728] ? import_iovec+0x73/0xa0 [ 1390.577007][T18728] ___sys_sendmsg+0x2a5/0x360 [ 1390.577028][T18728] ? __lock_acquire+0x683/0x2cf0 [ 1390.577067][T18728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1390.577134][T18728] ? __fget_files+0x2a/0x420 [ 1390.577169][T18728] ? __fget_files+0x3a2/0x420 [ 1390.577210][T18728] __x64_sys_sendmsg+0x1b1/0x290 [ 1390.577237][T18728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1390.577281][T18728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.577306][T18728] do_syscall_64+0x174/0x580 [ 1390.577327][T18728] ? trace_irq_disable+0x3b/0x140 [ 1390.577355][T18728] ? clear_bhb_loop+0x40/0x90 [ 1390.577384][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.577407][T18728] RIP: 0033:0x7f4c1819de99 [ 1390.577427][T18728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.577447][T18728] RSP: 002b:00007f4c19101028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.577470][T18728] RAX: ffffffffffffffda RBX: 00007f4c18425fa0 RCX: 00007f4c1819de99 [ 1390.577487][T18728] RDX: 0000000000040800 RSI: 00002000000007c0 RDI: 0000000000000004 [ 1390.577502][T18728] RBP: 00007f4c19101090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.577517][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.577531][T18728] R13: 00007f4c18426038 R14: 00007f4c18425fa0 R15: 00007ffeef83c188 [ 1390.577569][T18728] [ 1391.027793][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1391.112264][T18737] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1391.224375][T18740] FAULT_INJECTION: forcing a failure. [ 1391.224375][T18740] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.256435][T18740] CPU: 0 UID: 0 PID: 18740 Comm: syz.2.16654 Not tainted syzkaller #0 PREEMPT(full) [ 1391.256466][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1391.256480][T18740] Call Trace: [ 1391.256489][T18740] [ 1391.256498][T18740] dump_stack_lvl+0xe8/0x150 [ 1391.256536][T18740] should_fail_ex+0x40c/0x560 [ 1391.256567][T18740] should_failslab+0xa8/0x100 [ 1391.256609][T18740] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1391.256636][T18740] ? local_lock_release+0x9c/0x160 [ 1391.256668][T18740] ? __alloc_skb+0x1d7/0x7a0 [ 1391.256697][T18740] ? __alloc_skb+0x1d7/0x7a0 [ 1391.256734][T18740] __alloc_skb+0x1d7/0x7a0 [ 1391.256771][T18740] sock_wmalloc+0xb2/0x130 [ 1391.256797][T18740] pppol2tp_sendmsg+0x17d/0x610 [ 1391.256905][T18740] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 1391.256929][T18740] sock_sendmsg_nosec+0x13a/0x180 [ 1391.256960][T18740] ____sys_sendmsg+0x54e/0x850 [ 1391.256988][T18740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1391.257020][T18740] ? import_iovec+0x73/0xa0 [ 1391.257056][T18740] ___sys_sendmsg+0x2a5/0x360 [ 1391.257077][T18740] ? __lock_acquire+0x683/0x2cf0 [ 1391.257112][T18740] ? __pfx____sys_sendmsg+0x10/0x10 [ 1391.257131][T18740] ? __lock_acquire+0x683/0x2cf0 [ 1391.257167][T18740] ? kstrtouint+0x6e/0xe0 [ 1391.257235][T18740] __sys_sendmmsg+0x273/0x4d0 [ 1391.257264][T18740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1391.257296][T18740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1391.257335][T18740] ? ksys_write+0x242/0x270 [ 1391.257371][T18740] ? __pfx_ksys_write+0x10/0x10 [ 1391.257415][T18740] __x64_sys_sendmmsg+0xa0/0xc0 [ 1391.257437][T18740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.257461][T18740] do_syscall_64+0x174/0x580 [ 1391.257481][T18740] ? trace_irq_disable+0x3b/0x140 [ 1391.257508][T18740] ? clear_bhb_loop+0x40/0x90 [ 1391.257536][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.257569][T18740] RIP: 0033:0x7f032a99de99 [ 1391.257594][T18740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.257613][T18740] RSP: 002b:00007f032b885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1391.257633][T18740] RAX: ffffffffffffffda RBX: 00007f032ac25fa0 RCX: 00007f032a99de99 [ 1391.257648][T18740] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000005 [ 1391.257661][T18740] RBP: 00007f032b885090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.257674][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1391.257686][T18740] R13: 00007f032ac26038 R14: 00007f032ac25fa0 R15: 00007ffc72adda28 [ 1391.257719][T18740] [ 1391.545980][T18745] __nla_validate_parse: 2 callbacks suppressed [ 1391.546024][T18745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16655'. [ 1391.770588][T18757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16659'. [ 1391.834512][T18761] syzkaller1: entered promiscuous mode [ 1391.845518][T18761] syzkaller1: entered allmulticast mode [ 1391.853607][T18761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.888556][T18761] netlink: 'syz.2.16662': attribute type 2 has an invalid length. [ 1391.938857][T18772] FAULT_INJECTION: forcing a failure. [ 1391.938857][T18772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.957084][T18772] CPU: 1 UID: 0 PID: 18772 Comm: syz.0.16665 Not tainted syzkaller #0 PREEMPT(full) [ 1391.957112][T18772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1391.957125][T18772] Call Trace: [ 1391.957132][T18772] [ 1391.957141][T18772] dump_stack_lvl+0xe8/0x150 [ 1391.957176][T18772] should_fail_ex+0x40c/0x560 [ 1391.957203][T18772] _copy_from_iter+0x1d3/0x1660 [ 1391.957228][T18772] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1391.957257][T18772] ? rcu_is_watching+0x15/0xb0 [ 1391.957287][T18772] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1391.957312][T18772] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1391.957335][T18772] ? __pfx__copy_from_iter+0x10/0x10 [ 1391.957359][T18772] ? __alloc_skb+0x276/0x7a0 [ 1391.957385][T18772] ? __alloc_skb+0x276/0x7a0 [ 1391.957418][T18772] ? __alloc_skb+0x4cc/0x7a0 [ 1391.957443][T18772] ? skb_put+0x112/0x210 [ 1391.957473][T18772] pfkey_sendmsg+0x25f/0x11d0 [ 1391.957503][T18772] ? unwind_next_frame+0x8f/0x2550 [ 1391.957533][T18772] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1391.957569][T18772] ? aa_sk_perm+0x6d5/0x900 [ 1391.957608][T18772] ? __pfx_aa_sk_perm+0x10/0x10 [ 1391.957641][T18772] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1391.957665][T18772] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1391.957692][T18772] sock_sendmsg_nosec+0x13a/0x180 [ 1391.957720][T18772] ____sys_sendmsg+0x54e/0x850 [ 1391.957745][T18772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1391.957773][T18772] ? import_iovec+0x73/0xa0 [ 1391.957805][T18772] ___sys_sendmsg+0x2a5/0x360 [ 1391.957823][T18772] ? __lock_acquire+0x683/0x2cf0 [ 1391.957853][T18772] ? __pfx____sys_sendmsg+0x10/0x10 [ 1391.957907][T18772] ? __fget_files+0x2a/0x420 [ 1391.957932][T18772] ? __fget_files+0x3a2/0x420 [ 1391.957967][T18772] __x64_sys_sendmsg+0x1b1/0x290 [ 1391.957990][T18772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1391.958039][T18772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.958063][T18772] do_syscall_64+0x174/0x580 [ 1391.958080][T18772] ? trace_irq_disable+0x3b/0x140 [ 1391.958105][T18772] ? clear_bhb_loop+0x40/0x90 [ 1391.958129][T18772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.958148][T18772] RIP: 0033:0x7f4c1819de99 [ 1391.958167][T18772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.958184][T18772] RSP: 002b:00007f4c19101028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1391.958206][T18772] RAX: ffffffffffffffda RBX: 00007f4c18425fa0 RCX: 00007f4c1819de99 [ 1391.958221][T18772] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1391.958234][T18772] RBP: 00007f4c19101090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.958246][T18772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.958258][T18772] R13: 00007f4c18426038 R14: 00007f4c18425fa0 R15: 00007ffeef83c188 [ 1391.958290][T18772] [ 1392.865175][T18807] openvswitch: netlink: Message has 1 unknown bytes. [ 1393.384754][T18849] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1393.520104][T18861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16694'. [ 1393.570088][T18864] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1394.370981][T18886] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1396.325125][T18842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1396.564598][T18897] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1396.640188][T18903] netlink: 'syz.3.16711': attribute type 1 has an invalid length. [ 1396.842020][T18916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.115700][T18924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16716'. [ 1397.193722][T18932] netlink: 'syz.0.16718': attribute type 29 has an invalid length. [ 1397.218347][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16718'. [ 1397.236102][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16721'. [ 1397.299924][T18942] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1397.515825][T18956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1397.832215][T18974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16736'. [ 1398.296857][T19009] netlink: 27 bytes leftover after parsing attributes in process `syz.2.16741'. [ 1398.296857][T19006] netlink: 27 bytes leftover after parsing attributes in process `syz.2.16741'. [ 1398.458577][T19020] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16745'. [ 1398.604849][T19033] netlink: 'syz.1.16751': attribute type 12 has an invalid length. [ 1398.712461][T19040] netlink: 'syz.4.16752': attribute type 1 has an invalid length. [ 1398.753857][T19040] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1398.779553][T19040] macvlan5: entered promiscuous mode [ 1398.785524][T19040] macvlan5: entered allmulticast mode [ 1398.793286][T19040] bond25: entered promiscuous mode [ 1398.799614][T19040] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1398.814868][T19040] bond25: left promiscuous mode [ 1398.886779][T18993] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1398.919371][T19051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16756'. [ 1399.121715][T19062] netlink: 'syz.2.16763': attribute type 12 has an invalid length. [ 1399.571639][T19091] netlink: 'syz.2.16767': attribute type 10 has an invalid length. [ 1399.586616][T19095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16771'. [ 1399.602339][T19091] openvswitch: netlink: Flow key attr not present in new flow. [ 1399.735964][T19100] netlink: 284 bytes leftover after parsing attributes in process `syz.4.16772'. [ 1399.822195][T19105] FAULT_INJECTION: forcing a failure. [ 1399.822195][T19105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.843604][T19105] CPU: 1 UID: 0 PID: 19105 Comm: syz.1.16775 Not tainted syzkaller #0 PREEMPT(full) [ 1399.843649][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1399.843672][T19105] Call Trace: [ 1399.843687][T19105] [ 1399.843703][T19105] dump_stack_lvl+0xe8/0x150 [ 1399.843761][T19105] should_fail_ex+0x40c/0x560 [ 1399.843817][T19105] _copy_from_user+0x2d/0xb0 [ 1399.843871][T19105] kstrtouint_from_user+0xd6/0x180 [ 1399.843922][T19105] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1399.843970][T19105] proc_fail_nth_write+0x8e/0x210 [ 1399.844000][T19105] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1399.844038][T19105] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1399.844067][T19105] vfs_write+0x296/0xba0 [ 1399.844109][T19105] ? __pfx_vfs_write+0x10/0x10 [ 1399.844144][T19105] ? __fget_files+0x2a/0x420 [ 1399.844176][T19105] ? __fget_files+0x3a2/0x420 [ 1399.844203][T19105] ? __fget_files+0x2a/0x420 [ 1399.844241][T19105] ksys_write+0x150/0x270 [ 1399.844276][T19105] ? __pfx_ksys_write+0x10/0x10 [ 1399.844318][T19105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.844343][T19105] do_syscall_64+0x174/0x580 [ 1399.844363][T19105] ? trace_irq_disable+0x3b/0x140 [ 1399.844390][T19105] ? clear_bhb_loop+0x40/0x90 [ 1399.844418][T19105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.844440][T19105] RIP: 0033:0x7fdb70b5e6ce [ 1399.844459][T19105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1399.844497][T19105] RSP: 002b:00007fdb719e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1399.844520][T19105] RAX: ffffffffffffffda RBX: 00007fdb719e36c0 RCX: 00007fdb70b5e6ce [ 1399.844537][T19105] RDX: 0000000000000001 RSI: 00007fdb719e30a0 RDI: 0000000000000004 [ 1399.844551][T19105] RBP: 00007fdb719e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.844565][T19105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.844579][T19105] R13: 00007fdb70e26038 R14: 00007fdb70e25fa0 R15: 00007ffe86038a28 [ 1399.844617][T19105] [ 1400.049596][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1400.616334][T19144] netlink: 'syz.0.16792': attribute type 1 has an invalid length. [ 1401.346946][T19191] openvswitch: netlink: Key type 31 is not supported [ 1401.660066][T19212] xt_ecn: cannot match TCP bits for non-tcp packets [ 1402.072872][T19240] FAULT_INJECTION: forcing a failure. [ 1402.072872][T19240] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.110238][T19240] CPU: 1 UID: 0 PID: 19240 Comm: syz.0.16823 Not tainted syzkaller #0 PREEMPT(full) [ 1402.110266][T19240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1402.110278][T19240] Call Trace: [ 1402.110286][T19240] [ 1402.110295][T19240] dump_stack_lvl+0xe8/0x150 [ 1402.110330][T19240] should_fail_ex+0x40c/0x560 [ 1402.110359][T19240] should_failslab+0xa8/0x100 [ 1402.110391][T19240] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1402.110415][T19240] ? local_lock_release+0x9c/0x160 [ 1402.110446][T19240] ? __alloc_skb+0x1d7/0x7a0 [ 1402.110472][T19240] ? __alloc_skb+0x1d7/0x7a0 [ 1402.110507][T19240] __alloc_skb+0x1d7/0x7a0 [ 1402.110541][T19240] sock_wmalloc+0xb2/0x130 [ 1402.110564][T19240] pppol2tp_sendmsg+0x17d/0x610 [ 1402.110594][T19240] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 1402.110616][T19240] sock_sendmsg_nosec+0x13a/0x180 [ 1402.110652][T19240] ____sys_sendmsg+0x54e/0x850 [ 1402.110677][T19240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1402.110707][T19240] ? import_iovec+0x73/0xa0 [ 1402.110741][T19240] ___sys_sendmsg+0x2a5/0x360 [ 1402.110759][T19240] ? __lock_acquire+0x683/0x2cf0 [ 1402.110792][T19240] ? __pfx____sys_sendmsg+0x10/0x10 [ 1402.110828][T19240] ? __lock_acquire+0x683/0x2cf0 [ 1402.110862][T19240] ? kstrtouint+0x6e/0xe0 [ 1402.110931][T19240] __sys_sendmmsg+0x273/0x4d0 [ 1402.110960][T19240] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1402.110992][T19240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1402.111030][T19240] ? ksys_write+0x242/0x270 [ 1402.111065][T19240] ? __pfx_ksys_write+0x10/0x10 [ 1402.111106][T19240] __x64_sys_sendmmsg+0xa0/0xc0 [ 1402.111128][T19240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.111153][T19240] do_syscall_64+0x174/0x580 [ 1402.111172][T19240] ? trace_irq_disable+0x3b/0x140 [ 1402.111199][T19240] ? clear_bhb_loop+0x40/0x90 [ 1402.111226][T19240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.111248][T19240] RIP: 0033:0x7f4c1819de99 [ 1402.111268][T19240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.111287][T19240] RSP: 002b:00007f4c19101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1402.111310][T19240] RAX: ffffffffffffffda RBX: 00007f4c18425fa0 RCX: 00007f4c1819de99 [ 1402.111327][T19240] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000005 [ 1402.111341][T19240] RBP: 00007f4c19101090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.111355][T19240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1402.111368][T19240] R13: 00007f4c18426038 R14: 00007f4c18425fa0 R15: 00007ffeef83c188 [ 1402.111404][T19240] [ 1402.266984][T19242] __nla_validate_parse: 11 callbacks suppressed [ 1402.267046][T19242] netlink: 244 bytes leftover after parsing attributes in process `syz.4.16826'. [ 1402.404845][ T4943] block nbd0: Receive control failed (result -107) [ 1402.456526][T19242] block nbd0: reconnected socket [ 1402.506930][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16830'. [ 1402.520796][T19254] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1402.529446][T19255] netlink: 'syz.2.16829': attribute type 24 has an invalid length. [ 1402.692727][T19266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16834'. [ 1402.712737][T19266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16834'. [ 1402.793627][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16836'. [ 1403.073947][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16842'. [ 1403.116295][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16843'. [ 1403.331748][T19305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16847'. [ 1403.346012][T19305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16847'. [ 1403.468308][T19314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16849'. [ 1403.563943][T19318] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1404.310218][T19370] netlink: 'syz.2.16873': attribute type 1 has an invalid length. [ 1404.381274][T19372] mac80211_hwsim hwsim35 @: renamed from wlan1 [ 1405.149434][T19411] tunl0: left promiscuous mode [ 1405.299135][T19411] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 1405.307046][T19411] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 1405.559309][T19444] netlink: 'syz.1.16892': attribute type 1 has an invalid length. [ 1405.886225][T19469] tipc: Enabling of bearer rejected, already enabled [ 1405.933815][T19469] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1405.968722][T19469] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1406.211669][T19487] netlink: 'syz.4.16907': attribute type 12 has an invalid length. [ 1406.336286][T19494] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1406.500686][T19508] tc_dump_action: action bad kind [ 1406.722506][T19522] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1406.769937][T19525] netlink: 'syz.1.16922': attribute type 12 has an invalid length. [ 1406.918819][T19536] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 1406.957061][T19536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.199611][T19552] IPVS: stopping backup sync thread 4261 ... [ 1407.320102][T19548] tipc: Enabled bearer , priority 0 [ 1407.382474][T19558] __nla_validate_parse: 16 callbacks suppressed [ 1407.382494][T19558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16931'. [ 1407.419363][T19548] syzkaller0: entered promiscuous mode [ 1407.429074][T19548] syzkaller0: entered allmulticast mode [ 1407.439996][T19548] tipc: Resetting bearer [ 1407.449908][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16929'. [ 1407.721032][T19567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16934'. [ 1407.739984][T19567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16934'. [ 1407.814558][ T1179] tipc: Resetting bearer [ 1407.822490][T19546] tipc: Resetting bearer [ 1407.931200][T19576] FAULT_INJECTION: forcing a failure. [ 1407.931200][T19576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1407.945240][T19576] CPU: 1 UID: 0 PID: 19576 Comm: syz.0.16936 Not tainted syzkaller #0 PREEMPT(full) [ 1407.945267][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1407.945281][T19576] Call Trace: [ 1407.945288][T19576] [ 1407.945297][T19576] dump_stack_lvl+0xe8/0x150 [ 1407.945333][T19576] should_fail_ex+0x40c/0x560 [ 1407.945362][T19576] _copy_to_user+0x31/0xb0 [ 1407.945395][T19576] simple_read_from_buffer+0xe1/0x170 [ 1407.945428][T19576] proc_fail_nth_read+0x1bb/0x230 [ 1407.945459][T19576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1407.945508][T19576] ? rw_verify_area+0x24a/0x4c0 [ 1407.945538][T19576] ? tun_chr_write_iter+0xe0/0x200 [ 1407.945655][T19576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1407.945685][T19576] vfs_read+0x213/0xa80 [ 1407.945723][T19576] ? __pfx___mutex_lock+0x10/0x10 [ 1407.945751][T19576] ? __pfx_vfs_read+0x10/0x10 [ 1407.945784][T19576] ? __fget_files+0x2a/0x420 [ 1407.945817][T19576] ? __fget_files+0x3a2/0x420 [ 1407.945845][T19576] ? __fget_files+0x2a/0x420 [ 1407.945884][T19576] ksys_read+0x150/0x270 [ 1407.945919][T19576] ? __pfx_ksys_read+0x10/0x10 [ 1407.945962][T19576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.945997][T19576] do_syscall_64+0x174/0x580 [ 1407.946016][T19576] ? trace_irq_disable+0x3b/0x140 [ 1407.946042][T19576] ? clear_bhb_loop+0x40/0x90 [ 1407.946068][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.946089][T19576] RIP: 0033:0x7f4c1815e6ce [ 1407.946108][T19576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1407.946125][T19576] RSP: 002b:00007f4c190befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1407.946146][T19576] RAX: ffffffffffffffda RBX: 00007f4c190bf6c0 RCX: 00007f4c1815e6ce [ 1407.946161][T19576] RDX: 000000000000000f RSI: 00007f4c190bf0a0 RDI: 0000000000000005 [ 1407.946173][T19576] RBP: 00007f4c190bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.946186][T19576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.946198][T19576] R13: 00007f4c18426218 R14: 00007f4c18426180 R15: 00007ffeef83c188 [ 1407.946233][T19576] [ 1410.135206][T19546] tipc: Disabling bearer [ 1410.341546][T19589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1410.378380][T19590] netlink: 'syz.3.16940': attribute type 1 has an invalid length. [ 1410.460219][T19596] netlink: 'syz.2.16943': attribute type 75 has an invalid length. [ 1410.510006][T19590] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1410.593756][T19597] bond43: (slave veth15): Enslaving as a backup interface with a down link [ 1410.610676][T19602] netlink: 'syz.3.16940': attribute type 10 has an invalid length. [ 1410.627181][T19602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16940'. [ 1410.711458][T19614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16946'. [ 1411.104499][T19633] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1411.133141][T19631] syzkaller0: entered promiscuous mode [ 1411.151561][T19631] syzkaller0: entered allmulticast mode [ 1411.401751][T19644] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16958'. [ 1411.589317][T19654] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16960'. [ 1411.714192][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16962'. [ 1411.770543][T19663] pim6reg: entered allmulticast mode [ 1411.892480][T19666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1412.171024][T19685] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1412.213918][T19691] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16972'. [ 1412.332490][T19691] syzkaller0: entered promiscuous mode [ 1412.343338][T19691] syzkaller0: entered allmulticast mode [ 1412.585871][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16978'. [ 1412.599303][T19709] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 1412.624546][T19711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16979'. [ 1412.772960][ T1179] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1412.809736][ T1179] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1412.849385][ T1179] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1412.864278][ T1179] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1412.948920][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16984'. [ 1413.054094][T19734] netlink: 'syz.0.16986': attribute type 10 has an invalid length. [ 1413.445471][T19758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16992'. [ 1413.499905][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16991'. [ 1413.769331][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16997'. [ 1413.795671][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16995'. [ 1413.941503][T19788] veth0_macvtap: entered allmulticast mode [ 1414.072818][T19794] openvswitch: netlink: Key type 31 is not supported [ 1414.233611][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17002'. [ 1414.273796][T19807] netlink: 'syz.4.17002': attribute type 1 has an invalid length. [ 1414.323247][T19807] netlink: 'syz.4.17002': attribute type 2 has an invalid length. [ 1414.566883][T19828] veth1_to_bond: entered promiscuous mode [ 1414.585328][T19827] veth1_to_bond: entered allmulticast mode [ 1414.615481][T19827] veth1_to_bond: left allmulticast mode [ 1414.621633][T19827] veth1_to_bond: left promiscuous mode [ 1414.716689][T19838] openvswitch: netlink: Key type 31 is not supported [ 1414.781469][T19846] FAULT_INJECTION: forcing a failure. [ 1414.781469][T19846] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.795039][T19846] CPU: 1 UID: 0 PID: 19846 Comm: syz.3.17016 Not tainted syzkaller #0 PREEMPT(full) [ 1414.795066][T19846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1414.795080][T19846] Call Trace: [ 1414.795088][T19846] [ 1414.795097][T19846] dump_stack_lvl+0xe8/0x150 [ 1414.795134][T19846] should_fail_ex+0x40c/0x560 [ 1414.795165][T19846] should_failslab+0xa8/0x100 [ 1414.795199][T19846] __kmalloc_noprof+0xfe/0x720 [ 1414.795226][T19846] ? is_bpf_text_address+0x26/0x2b0 [ 1414.795257][T19846] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1414.795286][T19846] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1414.795325][T19846] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1414.795364][T19846] genl_family_rcv_msg_doit+0xda/0x340 [ 1414.795402][T19846] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1414.795440][T19846] ? apparmor_capable+0x126/0x170 [ 1414.795472][T19846] ? bpf_lsm_capable+0x9/0x20 [ 1414.795498][T19846] ? security_capable+0x7e/0x2c0 [ 1414.795546][T19846] genl_rcv_msg+0x614/0x7a0 [ 1414.795581][T19846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1414.795608][T19846] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1414.795660][T19846] netlink_rcv_skb+0x226/0x4a0 [ 1414.795683][T19846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1414.795724][T19846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1414.795761][T19846] ? down_read+0x2be/0x330 [ 1414.795787][T19846] genl_rcv+0x28/0x40 [ 1414.795810][T19846] netlink_unicast+0x7bb/0x940 [ 1414.795851][T19846] netlink_sendmsg+0x813/0xb40 [ 1414.795881][T19846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.795908][T19846] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1414.795951][T19846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.795987][T19846] sock_sendmsg_nosec+0x13a/0x180 [ 1414.796014][T19846] ____sys_sendmsg+0x54e/0x850 [ 1414.796039][T19846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1414.796088][T19846] ? import_iovec+0x73/0xa0 [ 1414.796124][T19846] ___sys_sendmsg+0x2a5/0x360 [ 1414.796144][T19846] ? __lock_acquire+0x683/0x2cf0 [ 1414.796177][T19846] ? __pfx____sys_sendmsg+0x10/0x10 [ 1414.796238][T19846] ? __fget_files+0x2a/0x420 [ 1414.796266][T19846] ? __fget_files+0x3a2/0x420 [ 1414.796306][T19846] __x64_sys_sendmsg+0x1b1/0x290 [ 1414.796330][T19846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1414.796373][T19846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.796398][T19846] do_syscall_64+0x174/0x580 [ 1414.796418][T19846] ? trace_irq_disable+0x3b/0x140 [ 1414.796444][T19846] ? clear_bhb_loop+0x40/0x90 [ 1414.796471][T19846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.796492][T19846] RIP: 0033:0x7ff40ef9de99 [ 1414.796513][T19846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.796540][T19846] RSP: 002b:00007ff40ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.796563][T19846] RAX: ffffffffffffffda RBX: 00007ff40f225fa0 RCX: 00007ff40ef9de99 [ 1414.796578][T19846] RDX: 000000002000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1414.796592][T19846] RBP: 00007ff40ff41090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.796606][T19846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.796618][T19846] R13: 00007ff40f226038 R14: 00007ff40f225fa0 R15: 00007ffec6647c58 [ 1414.796654][T19846] [ 1415.265467][T19851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17017'. [ 1415.292175][T19851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17017'. [ 1415.489760][T19869] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 1415.501530][T19872] openvswitch: netlink: Key type 31 is not supported [ 1415.722694][T19891] netlink: 'syz.0.17031': attribute type 10 has an invalid length. [ 1416.273407][T19914] openvswitch: netlink: Key type 31 is not supported [ 1416.384712][T18676] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1416.416483][T19922] FAULT_INJECTION: forcing a failure. [ 1416.416483][T19922] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.431971][T19923] openvswitch: netlink: IP tunnel dst address not specified [ 1416.460033][T19922] CPU: 0 UID: 0 PID: 19922 Comm: syz.3.17041 Not tainted syzkaller #0 PREEMPT(full) [ 1416.460059][T19922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1416.460072][T19922] Call Trace: [ 1416.460080][T19922] [ 1416.460090][T19922] dump_stack_lvl+0xe8/0x150 [ 1416.460126][T19922] should_fail_ex+0x40c/0x560 [ 1416.460155][T19922] should_failslab+0xa8/0x100 [ 1416.460206][T19922] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1416.460232][T19922] ? local_lock_release+0x9c/0x160 [ 1416.460265][T19922] ? __alloc_skb+0x1d7/0x7a0 [ 1416.460293][T19922] ? __alloc_skb+0x1d7/0x7a0 [ 1416.460330][T19922] __alloc_skb+0x1d7/0x7a0 [ 1416.460365][T19922] netlink_sendmsg+0x5d4/0xb40 [ 1416.460399][T19922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1416.460436][T19922] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1416.460465][T19922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1416.460487][T19922] sock_sendmsg_nosec+0x13a/0x180 [ 1416.460517][T19922] ____sys_sendmsg+0x54e/0x850 [ 1416.460545][T19922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1416.460577][T19922] ? import_iovec+0x73/0xa0 [ 1416.460613][T19922] ___sys_sendmsg+0x2a5/0x360 [ 1416.460634][T19922] ? __lock_acquire+0x683/0x2cf0 [ 1416.460668][T19922] ? __pfx____sys_sendmsg+0x10/0x10 [ 1416.460729][T19922] ? __fget_files+0x2a/0x420 [ 1416.460756][T19922] ? __fget_files+0x3a2/0x420 [ 1416.460796][T19922] __x64_sys_sendmsg+0x1b1/0x290 [ 1416.460839][T19922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1416.460883][T19922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.460908][T19922] do_syscall_64+0x174/0x580 [ 1416.460930][T19922] ? trace_irq_disable+0x3b/0x140 [ 1416.460957][T19922] ? clear_bhb_loop+0x40/0x90 [ 1416.460985][T19922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.461007][T19922] RIP: 0033:0x7ff40ef9de99 [ 1416.461029][T19922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.461049][T19922] RSP: 002b:00007ff40ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1416.461072][T19922] RAX: ffffffffffffffda RBX: 00007ff40f225fa0 RCX: 00007ff40ef9de99 [ 1416.461089][T19922] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1416.461104][T19922] RBP: 00007ff40ff41090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.461119][T19922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.461133][T19922] R13: 00007ff40f226038 R14: 00007ff40f225fa0 R15: 00007ffec6647c58 [ 1416.461169][T19922] [ 1417.287084][T19967] netlink: 'syz.2.17057': attribute type 4 has an invalid length. [ 1419.257703][T19915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1420.109386][T20027] __nla_validate_parse: 12 callbacks suppressed [ 1420.109408][T20027] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17073'. [ 1420.265839][T20039] netlink: 'syz.2.17075': attribute type 2 has an invalid length. [ 1420.302653][T20039] netlink: 'syz.2.17075': attribute type 2 has an invalid length. [ 1420.330677][T20039] netlink: 'syz.2.17075': attribute type 2 has an invalid length. [ 1420.361253][T20039] netlink: 'syz.2.17075': attribute type 2 has an invalid length. [ 1420.366280][T20044] openvswitch: netlink: Key type 31 is not supported [ 1420.684252][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17087'. [ 1420.696551][T20063] netlink: 'syz.3.17087': attribute type 7 has an invalid length. [ 1420.710616][T20063] netlink: 'syz.3.17087': attribute type 8 has an invalid length. [ 1420.720879][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17087'. [ 1421.073594][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17093'. [ 1421.112412][T20094] xt_SECMARK: invalid mode: 9 [ 1421.384293][T20111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.475631][T20120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17102'. [ 1421.645941][T20127] gre0: Caught tx_queue_len zero misconfig [ 1421.677920][T20129] bond0: (slave gre0): refused to change device type [ 1421.772175][T20135] netlink: 5 bytes leftover after parsing attributes in process `syz.2.17107'. [ 1421.796679][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17106'. [ 1421.815032][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17106'. [ 1421.956094][T20146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17108'. [ 1422.141998][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17114'. [ 1422.235479][T20164] netlink: 'syz.3.17115': attribute type 8 has an invalid length. [ 1422.362622][T20166] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 1422.379675][T20166] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 1423.184716][T20226] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1423.497113][T20241] netlink: 'syz.4.17142': attribute type 12 has an invalid length. [ 1423.642675][T20251] xt_ecn: cannot match TCP bits for non-tcp packets [ 1423.880369][T20261] netlink: 'syz.3.17147': attribute type 4 has an invalid length. [ 1424.778961][T20324] FAULT_INJECTION: forcing a failure. [ 1424.778961][T20324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.827262][T20324] CPU: 1 UID: 0 PID: 20324 Comm: syz.3.17162 Not tainted syzkaller #0 PREEMPT(full) [ 1424.827290][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1424.827304][T20324] Call Trace: [ 1424.827313][T20324] [ 1424.827322][T20324] dump_stack_lvl+0xe8/0x150 [ 1424.827357][T20324] should_fail_ex+0x40c/0x560 [ 1424.827387][T20324] _copy_from_user+0x2d/0xb0 [ 1424.827421][T20324] ___sys_sendmsg+0x1c6/0x360 [ 1424.827441][T20324] ? __lock_acquire+0x683/0x2cf0 [ 1424.827472][T20324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1424.827527][T20324] ? __fget_files+0x2a/0x420 [ 1424.827553][T20324] ? __fget_files+0x3a2/0x420 [ 1424.827589][T20324] __x64_sys_sendmsg+0x1b1/0x290 [ 1424.827612][T20324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1424.827649][T20324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.827672][T20324] do_syscall_64+0x174/0x580 [ 1424.827691][T20324] ? trace_irq_disable+0x3b/0x140 [ 1424.827716][T20324] ? clear_bhb_loop+0x40/0x90 [ 1424.827741][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.827760][T20324] RIP: 0033:0x7ff40ef9de99 [ 1424.827779][T20324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.827795][T20324] RSP: 002b:00007ff40ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.827817][T20324] RAX: ffffffffffffffda RBX: 00007ff40f225fa0 RCX: 00007ff40ef9de99 [ 1424.827832][T20324] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1424.827845][T20324] RBP: 00007ff40ff41090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.827858][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.827870][T20324] R13: 00007ff40f226038 R14: 00007ff40f225fa0 R15: 00007ffec6647c58 [ 1424.827915][T20324] [ 1425.045132][T20330] openvswitch: netlink: Key type 31 is not supported [ 1425.125956][T20333] __nla_validate_parse: 20 callbacks suppressed [ 1425.125976][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17166'. [ 1425.293617][T20347] netlink: 'syz.3.17168': attribute type 12 has an invalid length. [ 1425.312323][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17170'. [ 1425.337236][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17170'. [ 1425.545975][T20364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1425.636368][T20366] netlink: 'syz.0.17176': attribute type 3 has an invalid length. [ 1425.649553][T20370] [ 1425.651939][T20370] ====================================================== [ 1425.659030][T20370] WARNING: possible circular locking dependency detected [ 1425.664362][T20366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17176'. [ 1425.666077][T20370] syzkaller #0 Not tainted [ 1425.679531][T20370] ------------------------------------------------------ [ 1425.686567][T20370] syz.2.17177/20370 is trying to acquire lock: [ 1425.692746][T20370] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 1425.701957][T20370] [ 1425.701957][T20370] but task is already holding lock: [ 1425.709360][T20370] ffff8880320c29f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1425.718901][T20370] [ 1425.718901][T20370] which lock already depends on the new lock. [ 1425.718901][T20370] [ 1425.729343][T20370] [ 1425.729343][T20370] the existing dependency chain (in reverse order) is: [ 1425.738368][T20370] [ 1425.738368][T20370] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1425.745962][T20370] __might_fault+0xcb/0x130 [ 1425.751010][T20370] _copy_from_iter+0x100/0x1660 [ 1425.756405][T20370] tcp_sendmsg_locked+0x2620/0x55c0 [ 1425.762224][T20370] tcp_sendmsg+0x2f/0x50 [ 1425.766997][T20370] sock_sendmsg_nosec+0x10e/0x180 [ 1425.772563][T20370] sock_write_iter+0x2de/0x3e0 [ 1425.777865][T20370] vfs_write+0x612/0xba0 [ 1425.782648][T20370] ksys_write+0x150/0x270 [ 1425.787521][T20370] do_syscall_64+0x174/0x580 [ 1425.792645][T20370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.799077][T20370] [ 1425.799077][T20370] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1425.806741][T20370] lock_sock_nested+0x41/0x100 [ 1425.812050][T20370] inet_shutdown+0x6a/0x390 [ 1425.817098][T20370] nbd_mark_nsock_dead+0x2cb/0x550 [ 1425.822827][T20370] recv_work+0x1cee/0x1e10 [ 1425.827778][T20370] process_scheduled_works+0xa8e/0x14e0 [ 1425.833861][T20370] worker_thread+0xa47/0xfb0 [ 1425.838986][T20370] kthread+0x388/0x470 [ 1425.843595][T20370] ret_from_fork+0x514/0xb70 [ 1425.848724][T20370] ret_from_fork_asm+0x1a/0x30 [ 1425.854022][T20370] [ 1425.854022][T20370] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1425.861687][T20370] __mutex_lock+0x19d/0x1550 [ 1425.866816][T20370] nbd_queue_rq+0x373/0x1150 [ 1425.872016][T20370] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1425.878164][T20370] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1425.885060][T20370] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1425.891607][T20370] blk_mq_run_work_fn+0x16c/0x300 [ 1425.897166][T20370] process_scheduled_works+0xa8e/0x14e0 [ 1425.903261][T20370] worker_thread+0xa47/0xfb0 [ 1425.908388][T20370] kthread+0x388/0x470 [ 1425.912995][T20370] ret_from_fork+0x514/0xb70 [ 1425.918124][T20370] ret_from_fork_asm+0x1a/0x30 [ 1425.923431][T20370] [ 1425.923431][T20370] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1425.930659][T20370] __mutex_lock+0x19d/0x1550 [ 1425.935797][T20370] nbd_queue_rq+0xc1/0x1150 [ 1425.940840][T20370] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1425.946930][T20370] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1425.953800][T20370] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1425.960344][T20370] blk_mq_run_work_fn+0x16c/0x300 [ 1425.965905][T20370] process_scheduled_works+0xa8e/0x14e0 [ 1425.971983][T20370] worker_thread+0xa47/0xfb0 [ 1425.977123][T20370] kthread+0x388/0x470 [ 1425.981731][T20370] ret_from_fork+0x514/0xb70 [ 1425.986868][T20370] ret_from_fork_asm+0x1a/0x30 [ 1425.992169][T20370] [ 1425.992169][T20370] -> #3 (set->srcu){.+.+}-{0:0}: [ 1425.999320][T20370] __synchronize_srcu+0xc9/0x2f0 [ 1426.004797][T20370] elevator_switch+0x1e8/0x7b0 [ 1426.010170][T20370] elevator_change+0x2fa/0x480 [ 1426.015470][T20370] elevator_set_default+0x375/0x440 [ 1426.021212][T20370] blk_register_queue+0x3f3/0x4e0 [ 1426.026812][T20370] __add_disk+0x6cb/0xe30 [ 1426.031678][T20370] add_disk_fwnode+0x100/0x3a0 [ 1426.036977][T20370] nbd_dev_add+0x733/0xb60 [ 1426.041934][T20370] nbd_init+0x15f/0x1e0 [ 1426.046717][T20370] do_one_initcall+0x250/0x870 [ 1426.052020][T20370] do_initcall_level+0x10a/0x1a0 [ 1426.057512][T20370] do_initcalls+0x59/0xa0 [ 1426.062371][T20370] kernel_init_freeable+0x29d/0x3e0 [ 1426.068117][T20370] kernel_init+0x1d/0x1d0 [ 1426.072990][T20370] ret_from_fork+0x514/0xb70 [ 1426.078120][T20370] ret_from_fork_asm+0x1a/0x30 [ 1426.083415][T20370] [ 1426.083415][T20370] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1426.091258][T20370] __mutex_lock+0x19d/0x1550 [ 1426.096383][T20370] elevator_change+0x1af/0x480 [ 1426.101682][T20370] elevator_set_none+0xb5/0x140 [ 1426.107074][T20370] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1426.113419][T20370] nbd_start_device+0x189/0xb30 [ 1426.118810][T20370] nbd_genl_connect+0x1597/0x1c10 [ 1426.124384][T20370] genl_family_rcv_msg_doit+0x233/0x340 [ 1426.130467][T20370] genl_rcv_msg+0x614/0x7a0 [ 1426.135509][T20370] netlink_rcv_skb+0x226/0x4a0 [ 1426.140800][T20370] genl_rcv+0x28/0x40 [ 1426.145347][T20370] netlink_unicast+0x7bb/0x940 [ 1426.150664][T20370] netlink_sendmsg+0x813/0xb40 [ 1426.155970][T20370] sock_sendmsg_nosec+0x13a/0x180 [ 1426.161618][T20370] ____sys_sendmsg+0x54e/0x850 [ 1426.166914][T20370] ___sys_sendmsg+0x2a5/0x360 [ 1426.172115][T20370] __x64_sys_sendmsg+0x1b1/0x290 [ 1426.177579][T20370] do_syscall_64+0x174/0x580 [ 1426.182721][T20370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.189155][T20370] [ 1426.189155][T20370] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1426.197776][T20370] blk_alloc_queue+0x544/0x690 [ 1426.203091][T20370] __blk_mq_alloc_disk+0x194/0x390 [ 1426.208758][T20370] nbd_dev_add+0x494/0xb60 [ 1426.213706][T20370] nbd_init+0x15f/0x1e0 [ 1426.218394][T20370] do_one_initcall+0x250/0x870 [ 1426.223696][T20370] do_initcall_level+0x10a/0x1a0 [ 1426.229163][T20370] do_initcalls+0x59/0xa0 [ 1426.234026][T20370] kernel_init_freeable+0x29d/0x3e0 [ 1426.239783][T20370] kernel_init+0x1d/0x1d0 [ 1426.244643][T20370] ret_from_fork+0x514/0xb70 [ 1426.249779][T20370] ret_from_fork_asm+0x1a/0x30 [ 1426.255079][T20370] [ 1426.255079][T20370] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1426.262317][T20370] __lock_acquire+0x1520/0x2cf0 [ 1426.267722][T20370] lock_acquire+0x106/0x350 [ 1426.272779][T20370] fs_reclaim_acquire+0x71/0x100 [ 1426.278275][T20370] prepare_alloc_pages+0x15b/0x650 [ 1426.283945][T20370] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1426.290296][T20370] alloc_pages_mpol+0x212/0x380 [ 1426.295686][T20370] alloc_pages_noprof+0xac/0x2a0 [ 1426.301171][T20370] __pud_alloc+0x3a/0x460 [ 1426.306053][T20370] handle_mm_fault+0x1f85/0x3080 [ 1426.311526][T20370] do_user_addr_fault+0x744/0x1340 [ 1426.317180][T20370] exc_page_fault+0x6a/0xc0 [ 1426.322224][T20370] asm_exc_page_fault+0x26/0x30 [ 1426.327605][T20370] rep_movs_alternative+0x30/0xa0 [ 1426.333192][T20370] _copy_from_user+0x7a/0xb0 [ 1426.338360][T20370] vlan_ioctl_handler+0xbd/0x630 [ 1426.343951][T20370] sock_ioctl+0x612/0x7e0 [ 1426.348812][T20370] __se_sys_ioctl+0xfc/0x170 [ 1426.353934][T20370] do_syscall_64+0x174/0x580 [ 1426.359067][T20370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.365515][T20370] [ 1426.365515][T20370] other info that might help us debug this: [ 1426.365515][T20370] [ 1426.375750][T20370] Chain exists of: [ 1426.375750][T20370] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 1426.375750][T20370] [ 1426.388303][T20370] Possible unsafe locking scenario: [ 1426.388303][T20370] [ 1426.395761][T20370] CPU0 CPU1 [ 1426.401136][T20370] ---- ---- [ 1426.406520][T20370] rlock(&mm->mmap_lock); [ 1426.410955][T20370] lock(sk_lock-AF_INET); [ 1426.417908][T20370] lock(&mm->mmap_lock); [ 1426.424765][T20370] lock(fs_reclaim); [ 1426.428755][T20370] [ 1426.428755][T20370] *** DEADLOCK *** [ 1426.428755][T20370] [ 1426.436901][T20370] 2 locks held by syz.2.17177/20370: [ 1426.442212][T20370] #0: ffffffff9000db80 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 1426.451583][T20370] #1: ffff8880320c29f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1426.461523][T20370] [ 1426.461523][T20370] stack backtrace: [ 1426.467423][T20370] CPU: 1 UID: 0 PID: 20370 Comm: syz.2.17177 Not tainted syzkaller #0 PREEMPT(full) [ 1426.467443][T20370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1426.467454][T20370] Call Trace: [ 1426.467461][T20370] [ 1426.467470][T20370] dump_stack_lvl+0xe8/0x150 [ 1426.467495][T20370] print_circular_bug+0x2e1/0x300 [ 1426.467514][T20370] check_noncircular+0x12e/0x150 [ 1426.467545][T20370] __lock_acquire+0x1520/0x2cf0 [ 1426.467578][T20370] ? __lock_acquire+0x683/0x2cf0 [ 1426.467605][T20370] ? prepare_alloc_pages+0x15b/0x650 [ 1426.467626][T20370] lock_acquire+0x106/0x350 [ 1426.467647][T20370] ? prepare_alloc_pages+0x15b/0x650 [ 1426.467674][T20370] fs_reclaim_acquire+0x71/0x100 [ 1426.467694][T20370] ? prepare_alloc_pages+0x15b/0x650 [ 1426.467715][T20370] prepare_alloc_pages+0x15b/0x650 [ 1426.467739][T20370] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1426.467764][T20370] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1426.467789][T20370] ? __pfx_policy_nodemask+0x10/0x10 [ 1426.467812][T20370] ? is_bpf_text_address+0x26/0x2b0 [ 1426.467837][T20370] ? kernel_text_address+0xa5/0xe0 [ 1426.467865][T20370] alloc_pages_mpol+0x212/0x380 [ 1426.467891][T20370] alloc_pages_noprof+0xac/0x2a0 [ 1426.467916][T20370] __pud_alloc+0x3a/0x460 [ 1426.467934][T20370] handle_mm_fault+0x1f85/0x3080 [ 1426.467955][T20370] ? __pfx_mt_find+0x10/0x10 [ 1426.467973][T20370] ? handle_mm_fault+0xec/0x3080 [ 1426.467993][T20370] ? __pfx_handle_mm_fault+0x10/0x10 [ 1426.468015][T20370] ? __lock_acquire+0x683/0x2cf0 [ 1426.468044][T20370] ? lock_mm_and_find_vma+0xa7/0x340 [ 1426.468065][T20370] do_user_addr_fault+0x744/0x1340 [ 1426.468096][T20370] exc_page_fault+0x6a/0xc0 [ 1426.468122][T20370] asm_exc_page_fault+0x26/0x30 [ 1426.468138][T20370] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1426.468160][T20370] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1426.468175][T20370] RSP: 0018:ffffc90005677c98 EFLAGS: 00050206 [ 1426.468189][T20370] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 1426.468200][T20370] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90005677d00 [ 1426.468212][T20370] RBP: ffffc90005677db0 R08: ffffc90005677d37 R09: 1ffff92000acefa6 [ 1426.468225][T20370] R10: dffffc0000000000 R11: fffff52000acefa7 R12: dffffc0000000000 [ 1426.468237][T20370] R13: ffff888056564e80 R14: ffffc90005677d00 R15: 0000200000000000 [ 1426.468257][T20370] _copy_from_user+0x7a/0xb0 [ 1426.468282][T20370] vlan_ioctl_handler+0xbd/0x630 [ 1426.468309][T20370] ? __pfx___mutex_lock+0x10/0x10 [ 1426.468324][T20370] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1426.468349][T20370] ? hook_file_ioctl+0x1f0/0x5f0 [ 1426.468447][T20370] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1426.468472][T20370] sock_ioctl+0x612/0x7e0 [ 1426.468492][T20370] ? __pfx_sock_ioctl+0x10/0x10 [ 1426.468510][T20370] ? __fget_files+0x2a/0x420 [ 1426.468532][T20370] ? __fget_files+0x3a2/0x420 [ 1426.468552][T20370] ? __fget_files+0x2a/0x420 [ 1426.468574][T20370] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1426.468593][T20370] ? __pfx_sock_ioctl+0x10/0x10 [ 1426.468610][T20370] __se_sys_ioctl+0xfc/0x170 [ 1426.468625][T20370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.468642][T20370] do_syscall_64+0x174/0x580 [ 1426.468656][T20370] ? trace_irq_disable+0x3b/0x140 [ 1426.468676][T20370] ? clear_bhb_loop+0x40/0x90 [ 1426.468695][T20370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.468711][T20370] RIP: 0033:0x7f032a99de99 [ 1426.468725][T20370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.468740][T20370] RSP: 002b:00007f032b885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.468757][T20370] RAX: ffffffffffffffda RBX: 00007f032ac25fa0 RCX: 00007f032a99de99 [ 1426.468769][T20370] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 1426.468780][T20370] RBP: 00007f032aa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1426.468790][T20370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1426.468801][T20370] R13: 00007f032ac26038 R14: 00007f032ac25fa0 R15: 00007ffc72adda28 [ 1426.468821][T20370]