last executing test programs: 23.976205497s ago: executing program 3 (id=10268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="004000000000000000000000000000000000000000000000000000003fdbe2d75f6f7cb2822bdb34b3e9a899f1e30cff68c4e01e9e22d5f3bac72b0bda968e038944a5d0e8ba06ffb92b028815fda8eaf8051fa4519ddf0429aecde8e69551ebbf63a00caf4a20a2e59c5bafba786428bcb808"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) 23.827215795s ago: executing program 3 (id=10270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x9000000}}, 0x70}}, 0x0) 23.682108528s ago: executing program 3 (id=10273): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630000dd000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x1, 0xf, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) connect$unix(r6, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x8b}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x7a, &(0x7f0000000200)=""/122, 0x41100, 0x12, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x38fd9465, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x2, 0x2, 0x6, 0x8}, {0x2, 0x4, 0xc, 0x3}], 0x10, 0x8}, 0x94) 23.424660451s ago: executing program 3 (id=10276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}}, 0x0) 23.305823288s ago: executing program 3 (id=10280): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x48, 0x6a, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 23.234670284s ago: executing program 3 (id=10282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'caif0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc1, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 9.704235998s ago: executing program 2 (id=10459): getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x3, 0x5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xb76eb000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) splice(r2, &(0x7f0000000180)=0xa, r3, &(0x7f0000000200)=0x9c81, 0x3, 0x4) r4 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002380)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000002480)=0xe8) r6 = getgid() r7 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f00000025c0)=0xe8) r9 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0}, &(0x7f0000002640)=0xc) r11 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002680)={0x0, 0x0, 0x0}, &(0x7f00000026c0)=0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002700)=0x0) r14 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b00)={0x0}, &(0x7f0000002b40)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002b80)=0x0) r17 = getgid() r18 = socket$alg(0x26, 0x5, 0x0) r19 = socket$igmp6(0xa, 0x3, 0x2) r20 = accept$nfc_llcp(r0, &(0x7f0000002bc0), &(0x7f0000002c40)=0x60) r21 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002c80)='cpuset.cpus\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002cc0)={0x0}, &(0x7f0000002d00)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d40)={0x0, 0x0}, &(0x7f0000002d80)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e40)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000002c0)="89e38b0845274c3e9a0799ea1f429e6ac4d9eb7f34ae00b0203386e31faed30e5919704d15ae9d1492ec43286896f2341041089aacfa", 0x36}, {&(0x7f0000000300)="1f56e8b7b29d5a18ff189c485a1bd85e892c0e516074afde2578deb580f1b7e8b7b53fd6e205259a94a6c2b04504ea10a4df64f2307eb281864140d66c8702da38f3f4de5251d370cceb052836e58cca992addb1adf88b6c8feafaa5d8155bfa53ce8bb0c8af58b81ea716066323ae12e165ef5af010c6ad388f4eeb0fb4c13eb8171087", 0x84}, {&(0x7f00000003c0)="00bfad6426372032c9a3c19ed04b8a1960827b264d7ea01f69b0ecef49741f626917b77abb36ca707c8ca7518af6bf6417f3215c8619fa107c591a40049fd5caa43baf0b73d8fbfe6dc3061fddab119adab8a10b5326d5aabc795e6f6e2772c90f8ddb0d2de9b193e0f5d7c1eb0c7670e078a6e738a06d8de2cb6ffd2153ceb537889a7288b59ed480d1b7050cc0da3e65652d0cff63718d3156de3af8ee8a674c3465878b8db7ecc6b32ea4b5d166a1a0334852716c7e59a7f7444c8e28e330271312e55f514ccb44a76bf51629d0a6cc21adbcfc1a80d339af39cdd4c2b80d908d811f434e6918d8c0dd46080c9f355ce1c7fa8a139aabd5ac7dd9f1a26ed2cda66e8baf9f1f3ec7c1715e9ad94488134ffdabac407079a71eb284b55fc0836fbcabcf740eb6379359e19aca63d36c4331526b29fb4d22e3cb05250b7117b6a5c2e4ce7cf683d920ec128d30f0a5514185e6d5dbb2213712442619f0e5898330fb2531ce99fda3a445f00afbfd65edab42ac593356de74cad1486ebfc5d2376588e4d96ba26e0baaf8827bea78dc2287cdfbaa87024dd59ae73c3b19a8f66321f16e73334ca20b95cb41fe7d96594e4138b49a368b3ed7204d974e5289dfc0ba11805d000e801145ea20ade3815cf4712faebee052c3d1eb9a9023a7b483e9a5e5bdf51718f3df5c66bd8a2e49719732086c37a0350651cf8dffb4290e3239ca03a4773f8efeab50b4116f097054f0590fe644f837a2f977bab650b1ebadb455ff5526e291cc3a12d2fc6331aeea2d125ab750a8896ab08a61e4926279bb8b8aea4758ce4ca9600449ba5f161b37c5ee3511cfdd30b8c19238fd9aad6cb3a511eee90d0cfce4ebdad4e2f7657bffea06ab2173b06fb867549035397f1b5fce0562bc678ffec65b007223d2657f2aea2b86e56bf266b3ea64c438871bbf43805d36d96e838301bb98a00719e72a43d01bc2fcc19909f65f85f33bb026ef6069dc1c45e184e81f1eccf70e835ac9f9bf3861f8b8fe6d9c62dcb5e84100b236947c0ca136747e2644a3a39f9ce381f2e94ed3f1bd5988a525363ba1b579b8b0becc9890f7c55722cc04fe32b5858fb0d26c125615e3bee7a5a394019f98eda17b046bf445964402e6a1e2afcd7981927ad602bb5141636406e94c9fd025eabb7bba9479fa9f11a2427068a8ed9f01af186d52e5d16c69f87f0d8222ab0285ee056b5cc0c06efc6f7f8303969773f1f5c6f40f9a954d7c758c098d59985626ff6fa6b17a958166a64bc0352bff9c5287a2ff57cee662dc21a92606972e437c35cfac0f556162763fd4d677526978c0118505440bb421a5ba1400bfbaf7fe70ae73cc41f4ca5a97ad9ba475fe37ad8bdd0bac88767937635ceaf01465cd492d015f471d3b645b6c79465a5f30d2badcd4bd6278b62939c253c02bdfdeb944dae514dabc472409fb943bf0773a1e4cd206f1f68033c783032e421a9c4c843f654f6be3ed70562464cf2d90c342e520f5e113aab32ad4985916ee8031065781fd6a375f94f8d2693442c16ca6d6cd199782ee8326cb1930a56371cf701cd1fcd13b791c11c9245f6a1548331ef12c1b5676481452a1b8f711f6e6393a54488321a64bc649357d261ab6885e05f18a46405311c95d02231feb1730ada5c78d7958de118d47af9d320c3c26f3e065ae4a7b412405bdde32921a38d10cd31100d62c652273ee5118b0069095e9e2b62073fd5ab51eedb4a43a12fe012bd9ae7e520c5ae26d69f00578febe5d5c13e6cb4c73172ce62d882eca0e56de0b93e64c92fd5d32f33be73aac3a7dec6132f8c5e488ab00d7d77ee12e005a192e2b27610eac3be30e3c62b7afa221fa39281fa64e382488ccdca66ec4c0c6ace279054297578a5e1f4be99e53be9eb99120cdead874e7b90b5151515a0f5978fd0e5c4f86ca554e86141e9070527268700126a261aca4a78c7226ade3470fb8dc35bd8a19bcd17ab4099837fdfaf797c9e907cec9159b7c4e819b77e18b21a0d4fed6177501bb0ea64358a135c12d87995593668f29704b6372181c062a8b49a8158c68333980ad81c57e4d2f019abcd5a36a84f1cbf35a310e849f9425929a23427b0c46726d00679983350be05ebf3757d94bd1d9af593a3b4f53e199a8e563f4422a478243c43b3b8eeaa40ae22d555efc5f0ca3826276ffef08df674f7eac1c2af73592fb7841cba2d978db9bff8e2d62d4edebb8e76c84b59a1a0c8c120e9ff668d34f986ca5084101da3d07210b134cbf1f6c14ecd6d6742360a77fc9996fda12c5bd88c27652765b4def4a49f0372ca8228dbc4bcfbadba1949f958c04bc866507b0188895fcc84a11b3749f7c1e1ade80fbcf7c2edede309114e878c8cf4089cc344dfb11465304ab234c8e46aaccefaef7ef3f34725d88469833fdf8b5278f38caa28c5c2d9778861c72bf679a42a8beaa819500227d765e25e7d3f62aebeda59817b9a4678caaba4badf1a014cdc14d9984365e69bca32122110c65fee452a3afeb3ca1ead9815f1ebf9bc5c9a28ca589a648821a6e2005dcdcef00665ed28b71c5f651c8179f0f70fd3860623c9ef590481965f570dceb77dcc7d83dabb4e147cd26505c8a2d98d869e925f56a42dceb7b7f992e360c10311c13b4f25fdebd7c9e0827be10215dde93e1fc9135be9a70be5f99f434a45ba808797517983a555d70cb8731718b44b599ceb42463d49e2b39e5653b6b8d0bd85f56198161b2360a59eec7177d31ee2fcd799996ba18fdb3ed584c6298ae14049c499ca3fa52ba034676535202cddbb800a3fe1e58883cdd722fff83db7abf96d44ff425245c659024359e985a7b7055bdb1bcfdf9b5024115653a3fdf6d36dbeb82f0762b42c309a82a7ab60af1654eaaaa62f865737b14fa4fafb906dfabeb6767b15231d6c52537280d00679d229f98b2936beb509e7ecbf705d568acc5a20b207adc6f83106290afb2e92b7bbc4a37131eb1887c8e91a108629faf6bc740bdccdd671fb1c520afb6ba2818da16f35e7271b1516b813fdf150717c7f089ac5c40fe27886a5195e8002b3bcdac7ff6a797a6d8ec86260d45dc503dcc8b97d0c8a86eaa8d36233698deeda63c46cb13f96a6a6541811e4af730c53c3addd86ef966e973a87fd6867563abc2bde59d5e4e8c81c84b1ce0764f15302ff4966c7044045f85835f395565072bc8cded2e3436506e0f04a557350c52147dc8eb8f58ce8680fc86c5ea503c26ab8e448a91826a322cbc66da3ab348dc9cd73f518a984ba26089889e3e1ea1577c46328dfc1daacf01f4faef8047ba374a8b76c5c30a728edd7e5991e8b5386f5f918022f87393ab35479dbc1d9598ee186f8d4c9ecd579c1202042c2b79cd42f23b210f8a87dc839680f4c43b6b6831d129491db7f3e25fd8cf84dddd473630dd1eb7d66086e4bda33ac57dfb99af4ef69c17b9235cbd80d4518dcecef4339639da6b646401baee9dd8ed69229fb6320c23b24d77e726ae5cc943fefdbd521feed55e98bc6c4ff6f81e3143f095e60e58df67198ea6d7c4a41a03a07a5041d747a2ba384c063ff929c25a228a723aca429755d9c58d8b4fd2cfc13ab0b124d46a91aeb71b5dd2671c3b158478d8a88989433c588f2ecc06d5270f20dd802a9c2f9fa51a0a8a3c4ac0b812c57bb04da0da58c1f223d06d9ef426505f80a57d59cfa507e61b81bb2f8cd6345cd2fe1a72af3fffb6fee3f58322608a61c6c5c013a52361f29b4878b99578767f4026c87dfcf81accfaf1ef8dd6c757baea7294763238c76bbc50a676cbc41f235ca93f3b0646cb7c786ca75f9912bed5df8c4862382118d4045b6fdc325dcd1b5f6ffc9536e94632a522ce9755bd8ab289d256705a25fec940d659985fae35c53edcd25a36b5c6e74518ac4d1d808982d9d895114a258ce60f363d7d9d90a029aec02d9114132e520915aeada4b6f97e59235127707fdd20edbff8f5b41350e084a7e1e910a56f872514c4bbdac5baec0aee3c544c4729dab6debb4dcf2143ef972d955bcb2436128b4f8f9cd044174c1ae1b77968a845ef265921dbaef8cca8958cf891d69791963fea073c2c139b1eac0f24c601f3c9913968162240883ac4140fa25deae474eb8ae6ebd8431e16b49ee27d45c42e8517eaa4c0f181d0b7d701a5aade02a8fe8a762fdf83f5255508d894199fcd8668c3f00b17dca737cfdb6b787b61d1c56eb6a25bf782df368af8952db2eed057f8d0ba82a664184a82c61ef2032799a443b5bc23363268e48b120c740cb079ed8c266d2ad65088e2fe841c88278bad62dfb042cdb612ce2a5e6e1de156676b7f789353c3034c86921f1c1d0f555e4b23cd5508146d55bff8114e9dd7c6d0be6f3e2bf4750abcd90c08aa81f0fd9434b360b8808ea25f68d2c2be40d904dcfd865d8318cb48b95e2a66a2be54abfa10be820b7db1a8f3aa6f337c5ab9606323854eacf311512377419814f75598ae093e4b59bf066eec494fa918453eabd2fc8ffe7e76c631ab9155e49265eb82589d8520a8e75743b517d230377d7efe7984098f1a0c315f6b5929822806f307c8decc3d66a7e58f393c319895a02b8b208532b709ff1a158dfa55b6cb1f5daaaee7eb24f3c1a90f7c2c6f046c38b269355f600f0005629902f68807e7bc4cb013f6446a049214896f6246b8dd1065ea60adc536e30bb2aae86f9c46bdde19778d50b1b21eb6215b59091144a9ee737faf8349ec0e2b62accd03f4bd502a7032fd8684568344a1c3283d628fe283170247bac09970eebd0b3ff008fc707e6e6a19f02cd86798c678ed6f58a8bfc5107c1c7aedde6fca76a75d06fb4fb8233ca27108920c74c0b8cd2ce9312ea20233aae5f5331801377b543e0d8d3f4146da9977f633a18acd066201f0a8a1fe731d64eb00e37547020832f1aee47bc5c47610d411159fce04136e8b7ff5482e382bb908bba85d77cfbd08cfc277f6aca442887504f91e42f0eaf358ac110a54ad9ca36edd6c020f98829a914de3470611e2916bde5eeb862fe5e68f274c90e07bd5ec7d995f075a10aaf031a7312123568bc6bc261c7cd83f0334891ffa95dcea900847e549826ca05c8673a38bd7639cf29a1953c6ffa931629415b18e07cac43721abeb12abc3ad1af14b0a3be7ab6aaba3b0a99970dc3ea5d0da6a4f771a51d4d5d69968bf2b2b9b13ff7f8f75c6ce1b6ec83f4842e68337cb66551849ed90ea0c60e047be00e9cb74a639f2dcaf9300c7de9855eb998fdadabc10cf4b801a4ab797fd53b6b95516bfc12b564b60531f1775a983eef3f8abfbdd61e160d57f25d9345960c193e05537e5cd17093f84d1d9c34607021d7d3daa521f6b8f3beb5014850503789509219584ae90a36f3f2ff541f4fd15ea67dc38b2637e1bc484105c15746d78f7b78f503fb8a97497d4829dcb4ad7c6ae409fe42d633fc7c24ee1ac4befde257bf354902fdfd5c5b43a953eef33093c4316b0d9b3e3a7f80f160527fa7a63c6050bcb648b9db976c316744a18ef56163ed8378a5392c319f710550b5176e07d7c8ee88e3f77b10d5534c86226884c86754d86f41c10c43963394ecaf1112c566e493004ce5b1268745dc2e892e537ca02a1adf3b109c8d45fc79647819e32c6d9579b19cbc50d40c9ef8464a8c3d5bb4f80ce042f1ad4161070d03c926388f2b9699f0801d9b09983112197e2c766d5824bad822017fcba0c722eb6cef65f083998d27cb8df5eadd51685c70bb8a68e469b6c22852c508e178ca41bf5", 0x1000}, {&(0x7f00000013c0)="18f29acde696de44df3a95e46d2b143c7c0b251bd03501d8acc38e8b5973a74e956c486fa6a45aec6b05d757b1450d201565e6ad3c40e9297250dd031c5c3519d4c6b041", 0x44}, {&(0x7f0000001440)="ad09f2a770065866eaf6eaf25a8cd72e99f19903f2e477f7b127e9c9693285b4e66f83d712316df2b8bd", 0x2a}, {&(0x7f0000001480)="ad3a0c8df8e63c10476f0ab926d2d4fa98a8e728d555d4681eb811d588d1dd45b65d62dc2dab7f6dd4a591fb781d93f9feedf0733f0a6a46f11b0f0e047f2776841b3c28929ec45bfd108201e6ea93cd83be8f9ae52bdf987cdaa66f76f034055d1a229d296e1d8278298566be4dc054bb", 0x71}, {&(0x7f0000001500)="4e0d3a0c4e24e2f89813738e8c882bdec720ce1cc55f6f60e35d5b2d4edc77b0e236a41ac579135c3dc3ee772fc8f6b4c30513c93eceeca81dd2420be9e73f415c7e9c51d26075c5cbd3179b8e123496d8bc195c5cb5bea32936fb6a5bcde45969a2451ef71a711f80b0fe62a5a6b2ee32194fbde573d05ea1863b3113354cc66e7436ce3cbb3ea6f2c7cdf6cc714c7735513022010f926dab1110f25082ffc0c78d252c4351ab4ecfd6ab", 0xab}, {&(0x7f00000015c0)="a0f73eda7dcee3827f17e1543569e370d326f3a1f6975d2abcd0d3b0a8e68bc106e8849515bbbcd1998c9dec0d67ee3528925c5b00eae44997f84f6cdfb0de48", 0x40}, {&(0x7f0000001600)="33f6d0aaa83114b8a6f50361708296fbec57b068aff488086c41725e84e75272e454bcab80eabc50342d3f549ac8f5ce4c8476e09a1abee0b1618a4823f28821b273377d4d6ccdc6ddcbf051e0617ac5e49cf690a4a36ef4ca546322e5a24bb48b346b483169af5e9d4fcf7aecbf09ac5d8325140243053e96598197ab5bfbe60ebd3b43615f8a121a7ee5f884ea9229c8febde8fab04c69c7a10c67150ef989fcff9041e309d3133b36739a265eb87c0ca8e1680f30a8d391be4d323aab7111a5914188786a80157f18d31e07eeaaeae64b8327", 0xd4}, {&(0x7f0000001700)="02d3aec1411109c5bff693da0e55dbe3b99c1ada6c40a8756c5ba74728af8a560c615dbaa1fac22178996b485aee02bdca24677758c670cd49a99c1589bc7eb9e596ecac61c34caf427a592b56f9aa6ca69c653f5f4ef8275ddd2b46d8bb8fee3b77abb25a91c25a9392a78287639c00a9747fe548", 0x75}], 0xa, 0x0, 0x0, 0x24008041}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001840)="761690f058ee9782902b2a02c3d12cdc", 0x10}, {&(0x7f0000001880)="862a7b7a4884846327639ac4a85e0f5c3e328b2882b557bd9c4d0092adadef38ae973d923d8bd5a2cd1fabd38af4a6566b77254dd2f1b7a9d5a72ad6c485cfbc36749669059727b25adecffc1a1a1794151357c4885bfa98ea3114e2be79d1f621c439a430f7f8a80efb3e05c2f78dd77839f6c4d0964cfbceaa8693e64cb9b7dec69c7ea957bb1c35681c53ae3ca0ba8aae9dc5ae99053dd19476ab45b8f9bdaea7c7787f9808d35f0d1bffcf1c34ea40513811b75512ca7e1d4f82f00165377cbc7398e81871472ddb48", 0xcb}, {&(0x7f0000001980)="83231fb5947d8ccb1e5beb6d89255e2d40cc920babd1f59843387589b3fe44998d0a79784094cfc3149f14cefe277d955d6803d5adab43037ae77b36f01080771f9b99d3aff25ae39e4343d9c5240ccb50987df1a6c2a5d02124847919f0e38d0f69fd93343323e22e449798730ef66f96f20bf6ab9196045a660773f7f950b045d86993f8bb7d08da2cf1f0385094c676137a23d19307eaba84aa05aff9db4264631fe9c2f68d2aa74511d69c4a6cd805876074398706b3a0200f09e0fa2e0daa7234ea6f7ee6b88763f0c7276a86e9e812cc2f40df4e2703865351ad49ca4ca6a3a794f24a9f", 0xe7}, {&(0x7f0000001a80)="d632bcdd40e026faaa36e513200c31f6831b3729ef31a9dba4d763bac097a2c8538e39028093aaa49cb820dcd77bcedc2610d4017e249e0d153ca8c15ab116fc1e0b75605f08e63d4df4d26beac86e8145b0333d87cc8d84c6e001f483fe936922f2e2a36b1139792f2c7b3179bd7f9fedb858aa6de58a284d7e3c95d4c9", 0x7e}, {&(0x7f0000001b00)="7e5c42fb570b9b52e1fa485339ed91014cb784840c00874bfa8e2e21c12f5c2ad9a0d351f77ccc03e50d4140026b018f8bb4e0afa322b545054b53485fa856d1aa975da7ca7a12fb5c7b008162cd7464bdaa273e122f71ff86c20b78bd5d75c83adfa580fdcae0e7ca5374150d6be142bfc441859d7dfd2623f3c93a48c0eeb767336bc39b43c767e03823429871147914387fd4ceb89e34a0fbb5a96d08ffa00aae1e76a8e987a240550d117bb4d83070e1e73f214e35533a7ecf76ddb8a0719dbb19b977e14cb5dcb428596385750a390a447c94f2278e860589c0fc93ec9e9433", 0xe2}, {&(0x7f0000001c00)="0409413979e90cf546c0446bd27c8aee35592fc4aa07fd98196b0c76ddb7d8aeb11d34f84f322d1701028d967da1dc886285139275c90b67d8025fff733519e275045df9a5d1329ca9aa931bea214b7092169fb2d86824de45aedb54b0c1acff3ca0a6ebc8f12469842cd0eb9b7bebb63478a62f8f9fe2b0a6640dd8cba097d4043a67ab18580fd22464e9bf333056c5d63474df86d17cf03a5dd17a105807fbb0f821f7b6fbb3f4cd6bf367610fad27ff62b02ad6c64eeadd83eb165fa457da5519126d2801694a8e18088105dd2c201b1d7211bf3cc599dfa49f58db68d128331a649319ccf779640bf11e", 0xec}, {&(0x7f0000001d00)="5f1a89e1a82753f15fe15ca8c6164b25a38f9c5d74992696f2f31607d6be2355e8c8a8e1a4f43a81aebd9a4e7d6e530f3593d21150a08282cb74407be1785bdb76bbc759dcbaaae443141f0e02f6dda9c3c5af79e5fd5f927ae81eb3933dfa02a6673be55eed", 0x66}, {&(0x7f0000001d80)="05cb9d76be553385eac1421ae45126a47e326733ff1ea63628891ee3819cbbb16d67ab2d2d96d3f7518659a078e3d9d041a8b1c55c50ac975c5035f5da391a3f2f4e3e89938527d291d91a8221c6d4e7f2cae9865bbffc2ab0f6fd6c4bfe5b5b4b9f168bc508d9283afbbe2c2a58281c5f4140953e9db7864b55a0d579a0bfc7bf5652e82685daf70102e7c686d54a317a2164649960064f26593e585d5315b8671b73258aaa21a92782691acb69eb63735a70e145eb19de42c33d592a43949ff19321b6f4", 0xc5}, {&(0x7f0000001e80)="706be936b206b63587ee0b3065ad745e6ae60c8f20165f3b6ce6dd37fa31d3bcc371a30d04130d6ab91f59194773729cea54357f6fbe5c266687b2e7b77b", 0x3e}], 0x9, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f80)="6ff2484468de1985ed21e1ea40108aa945ead7cc58535d816e15afb4bcb4fafd28ce0a1e357d6519cf6a844ab2d2a1a724fa7633229cb9", 0x37}, {&(0x7f0000001fc0)="0cd6c3e9c26928aadef5b9e8308cf2eb46a51996cd1f994707bf38ca57e2c55e6f67df871c8ab107b1be0ea1e02a4ecc0c08cf816c1a0c35d572bcc0b300b82d8972e42ca91586187c4ab02b76e26d9803c6848f4c9b75bca15cb7474751f4531048e2235b83d43538d1210bd8ac40e01a54c9e75e71cf859cc56ff75530655a948d22b7fa1526932155e75ce27da973789f95da2746e79837d6a879cf7a265c1790c4475e05c4bd6191ed46a419cb61f673eec662e56f646d17013948c8cfa605b04f3c6e5d71", 0xc7}, {&(0x7f00000020c0)="b0af914d6998c9a9dbb1d3c8a5c2027ed73bef6a266fa3ad5f808c6b21a1c64e881fac393b18f9f3c9dcc2fcf40678cde4e4f64a172ffdfe33d08634e41ffd1d9a5d8118360497d1db8f8639277ddd63e07b2b4a714411eb234cfe011eb7ee3de8c1e93a", 0x64}, {&(0x7f0000002140)="20d547324ab848daa91095fb81a332a5dc4a773231765ce26d", 0x19}, {&(0x7f0000002180)="a9daf248c8a2336a33a80b404fdc8a45f803346ceab94f78d3f635b9cb0dae45b49cf2ae6c938139e649dc0e600b1cca05d7990936b30b27f4af6d3d2311c4982aaa061a5b4d790ae33cab6e1856e943a9037ebda91ab63f8bdf479e86fc02b727d77a71cff8e0ba848f6edf0bb970b0bee5354d5ae64937432b5b7d4b59c476a1f3123aa5a2e35e2452a5d64cd41b99c8ff6f4fff30c9bd032e533760e8be477f8a3dcfde19455dc36653748311f9c3b93e4f2664ace835db44687814b8381a76bad58b2364ba836dec600704ce43d2e0603022ae5726c6f62b70c24641fa01186c522e51fbadf543ecf68446914543574f1317d6", 0xf5}, {&(0x7f0000002280)="5b19c266102675aecaeb277c57afeb1e572ced8f04098856d070e7c80bb1659d92de8700f9380d1737e349d98681876e121afef5f19665900b120b5a8ef3b00beaedfa9b", 0x44}], 0x6, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0xb8, 0xc851}}, {{&(0x7f0000002800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)="756458887bf534fdd37f898cca093cddb27f9ff56d2c2c2fd526fac332c8a3abb2fe6cea4b76c0ec50e9509b900cf1ae06da6d9f43a0fc1b31f12a379b3b08d3a989c5cee5aef1fe91b13a48ea014db20313f7ef9e2a5456d52c3aac6bc7284b1ce196f38aa8363c2168396a7406eb32b1dbd8a0e216e2eed667803530268b51a6eb609bc1f821289a19e3efec3aeb26e291df11e84d72c673e0fbda8f60d39dd27974f8c4688faa5e6152f900bdfdd83ec4a1f4fc576528bfbef769994d4599d24d2791aac82a0ac71d2f1dbfef8ed758c9b1ee6556ee19d32e4b806a59365606", 0xe1}, {&(0x7f0000002980)="cf96adb3c9e87210a1daa648830f947a9b850d8a6aaba20c637e2ed96e346b01bdf6b710cb612ec935d2022cdb767cc4dbaa4630abc9c375834e4fcd22f5d7ef08840301ff1a82138699d8ca2160c95811c8ce70d86e417c892010fb375caade860cacae80ce8308be9c3540e0c1c1a918bf347285ffc35546dff2e317941e0afbf9b84806e11628a706e42a3763fb67d72c81ee5c469c63ef5400cff7762c30d45b146ae564f77cee2745ce1e719da1a2063a5a8fecce2b709090b969", 0xbd}, {&(0x7f0000002a40)="f9aaa16519d76eb4a1cf60ea2fef6a14f84d7ed1ef19681cc221aa408634a19d7b9cb4c2c5b843b0dd940aed506b906309b9ac0461d6c2cb82e9cf688f92378d9133ea14911e4fcd484fbcff0c19b813f392abd8c2978eb2c12154", 0x5b}], 0x3, &(0x7f0000002f80)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r0, r3, r3, r18]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r0]}}, @rights={{0x34, 0x1, 0x1, [r2, r1, r19, r20, r3, r0, r2, r0, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x138, 0x20014810}}, {{&(0x7f00000030c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003140)="85fcc54e0f2e035bc2f40b4703444a015e1e61df035f44dde6c22e9f0bdaf5be4b5e68dc7b5dc2484fc0e2a14805d535d46db9a6f1daa7769d507da815e8c966c7d5592121fd24e7e57d68d0b58410dbae50df9b3aa692113a2928a9f0142ae3c915d3f7f2fd5e0fac08f14019296c4d7fdc396354439d7d7d7ff715df185b2fed37dbaf198d594384078bcccf1e7b991fa15b28eb6b21d53e950757a87c2be061f452e0c72dba213e1de6e6d78c7431237d4bd2488fa9e0c9c870ef20c2dc9b1c3704237752a95997857134ed70373f962878e737ca9c", 0xd7}, {&(0x7f0000003240)="1334624299ae8e051c7ee3950bcafa542b24a23152b119ff80c85a87f491bc6210d97005c9ce73391273c1c49bd35a5b0392f7355a76a6ee8c57869cbf3745d6862997d18c9abd5e2a7b981652d689bf85c52dbd9c16123fa6ecd52c98e5aabd1d6541630bfd6bb7", 0x68}, {&(0x7f00000032c0)="d6063f6bb58b3776fce0eed24b3399c026d1ff1ffe35", 0x16}, {&(0x7f0000003300)="add837645c811081dfa176f0c1f3fcd4b941c896fcb61eb53f9587a2adeab2d1d00098f262124cd429dd2ec46616a973dc04ac98dc14f9562ba6008cf99a585c7dff55c40512b277a248ffcc0409fcf26c7692f81df62d0e0b523a0ff5", 0x5d}, {&(0x7f0000003380)="fb5534", 0x3}], 0x5, &(0x7f00000034c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r0, r1, 0xffffffffffffffff, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x98, 0x4084040}}, {{&(0x7f0000003580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003600)="eb979942c8c38193f42b453971fb5f0cf6994460e1545fc664a58fcccef292049f30737814e1fe8e556a44f6ef8707a46e529954ecf44ac72dab6d7bff73daa3da06bafe121d3e1123685caf1f68382b4f355f3fb84588dd722775f51d27d5368b66f010f3", 0x65}, {&(0x7f0000003680)="5a2b500ebd35517b326e8d7cf48735ddf94e250398e7e2680b72bba975bc3e2744ea2f605ae540bc97dd53e0452ee88e80d349a2e3e41c20581beb980f1cf991573b8165e11db1787e5148636e46bf051b8d36ac19a480f869b8478a16236cb74b27d567b88fe4d2f1fe401fc79771f32b44d82d55bc258dada4cbbb4298df8c2a3eb99bcca96f465a906e53185a5bf19a41a45a781a4a3e90d1e6a9cce605deb9e5b9e22b697a7a5478ef1fde88fbc76a7a55dc0afe96", 0xb7}, {&(0x7f0000003740)="14dc77332ae885e96abd8a6a09a544461d48a4acc6a84c73cf8659fa85725c150c", 0x21}, {&(0x7f0000003780)="33b57cb8e2e478df62acef0d9f7a24e31d5e0f58940d0ccd416f90acb76fc198e6fecd331a72c9d7689dcc881c0fc53321a55a081502e08d36e96e9480da501e6464a25f65cf7775eb8f01e887b400a0633eb33e8488bdd7e495819cef0657e877e85b84dd4694505aae19761219a71a6f34a14dce4b69dd73e5a2a602311ccec016143f0dc25f93771703f9a0ab85b961cb1add623f0e558567fde6d84e3317813de525ab916a141fef997f862c9495d33427b993621b21aa74bc756f0c3254ad773826986b3f544cfe62a39461bdecacba7f332d1288683200d33c74e9c6564b2c6b348e775309a61e6942cea2f109093d", 0xf2}, {&(0x7f0000003880)="c17ab7c5194c3dd78212d9e4f77336e62102245144e5441d58e1ae5014dc67aef1e74b454e448950673ea6761289549106096bd93708d40c98c4205e4ba45c00e8655cdc08cd400030f0c3c276109fff058ae732a43c07e86cce9ae5911010da65425119c595bbe699d23eb286a610eda4f1f50334cbe1dca84bdfc6e90fd179fa6d6986", 0x84}, {&(0x7f0000003940)="8606a5c4d2ca5ff15c8c", 0xa}, {&(0x7f0000003980)="a5533022f6b952acb9653a43a6a942fb8389bea21568c3e0a5b54a3dbd244e121c4450c71e7c1ca501112fc78f758635780b841896498e262a6fa81e7580cc9a28c605d8dd52f159c9046ed2b10fbf4cb5b6aa2daa8429a3f8", 0x59}, {&(0x7f0000003a00)="e6a26d3a23fe135c3c80374976704362e433799654c234fe103bd195337b361a516be9fe1fa9bb90f0dd6dca7f3817905e3b4c62e115cceee93fe68c09fa964ada5a62c699c633a82fef396de18dde319c049f8844591db183cbee09e4340f1a8a536e02204eeb88a5ddb76b0eeae02558ff10598fba48b8135f0250624af3f45245a5fe09d335360a7cf09cc1df3b1df971326593e082509d40", 0x9a}, {&(0x7f0000003ac0)="1d2a4343d2d507536e31194b39c66a2cd275f33c1ab7a4c83ad30b72151db64f18ca09ba1c94d2fd6b1173a3b6cb0193e33ad3fa9508e493b834561e07f4040086ee755bdfd0354fef1d9ebfb0b8c2c7783ef48853f3b13ccec837f5ac12086e091231324587d650af5756b363e5f4bed54494a93c27d4370ad7618f5301742e9b1cd4ccf953682fd4496192a50e05bcec0f98", 0x93}], 0x9, &(0x7f0000003fc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r1, r1, r2]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r1, r2, r3, r1, r1, r2, r2, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xc0, 0x8000}}, {{&(0x7f0000004080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004100)="046df1bff04759cb6da94cb8da75400b600f526cbe76438baa091301b9f74e431988d1f6deabf803865e63ab4a532fcc73b4ecdfaa20cc3974650b8518020c3e25bf6df619b49f54e9727881928fff3e016fb254b2d479e48361d80e4b3f7db060ac32779da6ceb1d61c78008afe3cff80268638fb742209a7bd7d0a3b7e4038300aee164b084941e6f6d62e3d74e0326a0cc2c1df804db9", 0x98}, {&(0x7f00000041c0)="d43f3d6424b9763b528dae1ed48f04480d46c7ee", 0x14}, {&(0x7f0000004200)="1971e603c784b1910aa86617a2cf2cc01c153fc27b0a275bf12a798e7ddc162988369edc5d5dfaba534575f10a3f2e9def5d27367e2a31e3c1ca50f6552c1d32c5321dd3dc61fb3d1543bbb8ccb9267c74c15e0aefaf5596ac10e42be874d2d87863d40dfea8e438b207d46f473d767183f5238a78d76fe4dc0e97c2dce1fc4edff0fed3aff98974d3be8b", 0x8b}, {&(0x7f00000042c0)="bb9153ac9062e393b1b25994d80cb3490deef662a22cbd0d5efba3abc6196650ed58c565b798c938bac7f6814a7214b5bb380ec1ca9f1bfd4df3f145f9dd666cd4c98718de0979dff6b756b37c51ddfbcd49d1b15cd6ed4de6b779a6e1c5bea5b6143a6d97cb215af6396de717cca0fdfbf494aad7c814f7eaab5bcdb3f1", 0x7e}, {&(0x7f0000004340)="ec4abcfebc2f4ee76a629fea7f9ff12c532eb79401715a", 0x17}, {&(0x7f0000004380)="19a7cae3bcb0eeca21f84ef38b28f49f2fe400e44dd1513a640e1b39a441a225e9309b61c3950b4ddaf0bd505f511951bfe36996a14d95de7fd159476a7a27112a343187c944f5175270d0bdc508d768fe140ac9aff6c91cc9d78cdc", 0x5c}, {&(0x7f0000004400)="c2a1fe2fff8c56912a81eecbb1c2cb895db783f2d2d4d931b5963112e5054c857dced884a4b8b6feaee7aafcf82ab7aab37d200724c66040c584dcfb247341cd", 0x40}], 0x7, &(0x7f0000004b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r3, r2, r0, r3]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x150, 0x20000800}}, {{&(0x7f0000004c80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004d00)="a3c6df04a8a4c2325cc5cf8eb6024faa00bb8f6119f2effb268519cdccc650ac2b290fcbcb08604b2db36102df4675c39ffe3ebd24e0ab0d451f9259b77c8f2724da740457625c35fe43119a6c7bef0d06286d53fbac37757765168f203f20b3a7b3662285f8559c6dbe8cbd", 0x6c}], 0x1, &(0x7f0000004dc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r1, r2, r1]}}], 0x68, 0x44808}}], 0x8, 0x0) 9.59014719s ago: executing program 2 (id=10462): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r4 = socket$kcm(0x21, 0x2, 0xa) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000b40)={0xa, &(0x7f0000000540)=[{}, {@fixed}, {@fixed}, {}, {@fixed}, {}, {@fixed}, {}, {@fixed}, {@fixed}]}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1fd, 0x6}}]}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (rerun: 64) 9.264929923s ago: executing program 2 (id=10468): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000c0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x43}, 0x1d, 0x1c}}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, 0x0}, 0x0) sendmsg$sock(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}, 0x600}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 8.325263226s ago: executing program 2 (id=10486): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000e0ffffff0084000000070000007f"], 0x18, 0x48d5}, 0x20008050) 8.21092427s ago: executing program 32 (id=10282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'caif0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc1, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 8.202233745s ago: executing program 2 (id=10491): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x3, &(0x7f0000000240), 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x20}, &(0x7f0000000080)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r5, 0x37}, 0x20) getsockopt$nfc_llcp(r5, 0x118, 0x0, &(0x7f0000000300)=""/242, 0xf2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="a8"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4407000011002006000000", @ANYRES8=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES8=r1, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x24000041}, 0x2000800) 8.029602265s ago: executing program 2 (id=10492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @void}, 0x10) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x6d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000100)={@empty, 0xf}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000206010200000000000000000600160005000200000005000400000000000c000780080012400010000014000300686173683a69702c706f72742c69700005000100070000000900020073797a30000000000000"], 0x58}}, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) 3.199470043s ago: executing program 4 (id=10526): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000880)=""/145, 0x91}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000940)=""/260, 0x104}, {&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000140)=""/113, 0x71}], 0xa}, 0x10000fff}], 0x1, 0x6000000, 0x0) 3.090364516s ago: executing program 4 (id=10528): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="270502001a0014000600002fb96dbcf706e105000000890600001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57", 0x3d}], 0x1}, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@int=0x5470, 0x4) 1.976250047s ago: executing program 4 (id=10535): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffe6d) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000000200"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r3, &(0x7f00000006c0)="526cd547d37a958e4c9ab479c59bfc189c298caa8d03e5817680cb2c9b04c779bfc1358bb5953c61eb6f7d1e134b5016ab4fe8c670f55143c859dca41526db81d32dd44d8ca9ee4d1cc8675b10bca59b3ec660049db59d6cc1303b80a7015a14db43f6e51c58826e938dfe3261b8eb9c3c9d7ff5a7821112c1199deda4cb794e95e2f61c734fac5c78d3e4f15ac6a921bf6397b6124a716f2ba92ec3a7d97bae74374b680b3b5a578034da3e42792446441d82eac803", &(0x7f0000000900)=""/240}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r8, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x4, 0x54, @remote, @remote, 0x20, 0x7, 0xbe, 0x9}}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)}, 0x20004800) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) 1.423488043s ago: executing program 4 (id=10539): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRESHEX], 0x40}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r3, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000740)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "fabda650570b2f7f77535cb02a28d7ac4ce4f72d8082c2c3682103fcfc6e4700", "712ae9a047b22bcacbcaa048f50f7f312f9b52132660776b584d75d4585984df", "01fb4c832453a6c71b89fd4fc116c5aa54fc64cb3783430e2be07bdb2d62f351", "94885d9cd480828dddd834276e5ab75be02af8055a4dcd2d14ccb64b61b4e626", "1a7a86cd1d8904aab0ec95c6a67a4d0a7b559ab4c623fca2c52225eee6e6b462", "54fb100c3c3f0a345103c230", 0xe8, 0x0, 0xd2b4, 0x3ff, 0x81}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002640)={r0, 0x20, &(0x7f0000002600)={&(0x7f0000001540)=""/4096, 0x1000, 0x0, &(0x7f0000002540)=""/139, 0x8b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.352000352s ago: executing program 1 (id=10540): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1.120440632s ago: executing program 1 (id=10542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005000000000b440012"], 0xb0}, 0x1, 0x200000000000000, 0x0, 0x4044050}, 0x40) 1.10681786s ago: executing program 0 (id=10543): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000040)=@raw=[@ringbuf_query, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00', 0x101, 0xd8, &(0x7f0000000100)=""/216, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x2, 0xe, 0xc}, {0x1, 0x2, 0xa, 0xa}, {0x5, 0x5, 0x10, 0xc}], 0x10, 0x2}, 0x94) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000b00)={&(0x7f0000000a80)=[{&(0x7f0000000400)="db7963960ef01458e29120e55f7de198cb82bbe61d643a08f735f9eae8812a4508693371940d88ae59ecbdacf435bef717ee7063b9b690ca947f8a1aebb4d634af663099cb6546607be08fa076f3dbe646ec245f8408d6f0416bf306877d21f50a53a0be46c420bebb7707fff4c1fc2806f0758782e5677f92c70eff8c6f7370ee7c12efa6c05abd6a171dbd008c50707331aeaeabcb43fb22f924a57829a5fc7783699f9bb645e3a59813b1c29083e11a47f724e68160a740d44a", 0xbb}, {&(0x7f00000004c0)="e546df087e7382cb593b7defc1ab2e90911b21a2f703c5f72343766181cf25e4dffa46fe1f1a145542f7baab58ebd2b1de12ce22d59ff23311476d412a143ce9a9de7a912749ec205900fa8d8741b690c3550ad5a480d0f76121d7354676954e94bc96ac8682221739d26c2550700dfc1a8538b9e96eccb0ce1e006133b65bcffa4bc1bce892ee0cec8ff857c8cd291740e0c1daf91790b5bd139b50a638e70e335be69e91", 0xa5}, {&(0x7f0000000580)="1764092ce62a35cbd8770994c59b4e17f03d4dbe233e2eb214d040dd6f7f4715ca2c45d32c21fbc06a94d94970e08a132d757b733067b3ddeb24f7eea10df8f7b044e2f51285e90e4e7d2e68a6f2b4f794d19afd6929487c73187aee2d47320a7243237bf0cb4d8fd21d55514b37d67718c26542009433b45c3a976c968c68c0b28fca3124a5972f02210e44494022a2027ea8299c522edf60178e42fcb3787c49868dccc6c1a8ad79b524757b2dd78dfcb90b8e6a92fe8a1f9d099492bea8539d04bb79762cc0d1c6e8da891b0e6f8d093ecc58d8b2a68ead85efc13c425339841f14f8f9108dffd9f60d7fdbe30bd2ee98d6", 0xf3}, {&(0x7f0000000680)="ed99d21c5924700708a40ea0a4bc3606b6c8a6fedea284aebe44fb0e9a0316cfac5f11e1e13c0659a9d7c54a290a6a1773eda92bbeb1412836d8df5facd0ed18d6d1f419fb0ae33c46d073a8550a13a65b8fc432111c4e2616cee7f1b0d5fb9a020a0458d1cf27ecb6d4b54f48a2fc5deb44a47908f075af2d9a8a050b327a7d3bc0ffc0996741f2f7313482da830001208325cf6b451a4157acbcd488eed79dcf3c2c7aa577e4e5f66786a817bbdb5fe3b2c17a5f8567e335d824895bd7da31678ef459bea2e9fef930c879a9cc3998238fa6413f009758b6cb971466", 0xdd}, {&(0x7f0000000780)="10a0cc0ce7f9a42f64b185c3e92544aa6485a07ba7c5612e756580f1613f0d35f937de548834c9c80464d2e9255e4b516eb0eeddf2fda441ff69c6e5d5eb33cb544a843dab6524a7c6f7166834eb7324cbc6e54a9bcaabd30a78f5c6ab5dc1c5e76d386be8a7432f352368d8b6749d172f17b2b5f3f52174f104e40ff9fb43fab58eebaad1a27557192d33f11e96ff3066db820ded966b7604a71103", 0x9c}, {&(0x7f0000000840)="2b0f0014e5577770bdc5f8c6cfd93854763da555d90a0a48cb0525a6b0f50aebb4df0ca81dbe0d52133907f19ec99b74c0ac1dba5ae34b6a98dc8b3821a580e523db56cb3b688ccd99eea81c48044ca227c139ab49ab0ad9c07511f22ebcaa616d4d7fca3dadd68c0019685b62468ae2dfcb13c1da513139c6d167302eed8677738ac49c2fbda479daabbeec0dbe2701b5e373ed02c90362a055011edd7890f149db8e4df87184bc4d949d6e825e4c17f49d1a335fc6c6749435cf35e3c00d9d1ab2784cd40cd70cff0c8e970abea56d4fc5c06446eac48a4e0123bb3ee15152", 0xe0}, {&(0x7f0000000940)='4\v', 0x2}, {&(0x7f0000000980)="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", 0xfd}], 0x8, 0x9606, 0x0, 0x9, 0x1, 0x6, 0x7, 0x6a}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, r1, 0x15, 0x0, 0x4000}, 0x20) 1.00102574s ago: executing program 1 (id=10544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000007fffffff00000080611250000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 952.589425ms ago: executing program 0 (id=10545): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000de0a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) 925.872481ms ago: executing program 0 (id=10546): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8=r0, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e", @ANYRES8, @ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 813.049899ms ago: executing program 1 (id=10547): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) close(0x4) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 756.505308ms ago: executing program 0 (id=10548): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffe6d) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000000200"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r3, &(0x7f00000006c0)="526cd547d37a958e4c9ab479c59bfc189c298caa8d03e5817680cb2c9b04c779bfc1358bb5953c61eb6f7d1e134b5016ab4fe8c670f55143c859dca41526db81d32dd44d8ca9ee4d1cc8675b10bca59b3ec660049db59d6cc1303b80a7015a14db43f6e51c58826e938dfe3261b8eb9c3c9d7ff5a7821112c1199deda4cb794e95e2f61c734fac5c78d3e4f15ac6a921bf6397b6124a716f2ba92ec3a7d97bae74374b680b3b5a578034da3e42792446441d82eac803", &(0x7f0000000900)=""/240}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r8, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x4, 0x54, @remote, @remote, 0x20, 0x7, 0xbe, 0x9}}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000480)}, 0x20004800) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) 449.29347ms ago: executing program 1 (id=10549): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000ef", @ANYRES32=r9], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', 0x0}) 441.811381ms ago: executing program 4 (id=10550): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a310000000095656990296edde1ef19da5b95873400048010000180080001006e6962000400028009099a073f1ef20de218f314113b0073797a3200000000140000001100010000002300000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000680)={'security\x00', 0x0, [0x1, 0x7a1, 0x3f, 0x9, 0x7]}, &(0x7f00000008c0)=0x54) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@random="e38cab5f3de2", @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @dev={0xac, 0x14, 0x14, 0x3e}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) write$tun(r3, &(0x7f0000000300)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) 303.739493ms ago: executing program 0 (id=10551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 181.527047ms ago: executing program 0 (id=10552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r4, 0x0, 0x62, 0x0, &(0x7f0000000780)) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x8080) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x800, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x809001}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8095}, 0x1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x1c080}, 0x804) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}}, 0x0) 108.666546ms ago: executing program 4 (id=10553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005000000000b440012"], 0xb0}, 0x1, 0xf5ffffffffffffff, 0x0, 0x4044050}, 0x40) 0s ago: executing program 1 (id=10554): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x6d5) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) (async) connect$vsock_stream(r1, &(0x7f0000000100), 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) close(0x4) kernel console output (not intermixed with test programs): x619/0x8c0 [ 1095.415502][ T1610] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1095.415538][ T1610] ? bpf_lsm_file_permission+0x9/0x20 [ 1095.415569][ T1610] ? security_file_permission+0x75/0x260 [ 1095.415598][ T1610] ? rw_verify_area+0x255/0x4d0 [ 1095.415631][ T1610] vfs_writev+0x33c/0x990 [ 1095.415662][ T1610] ? __pfx_vfs_writev+0x10/0x10 [ 1095.415701][ T1610] ? __fget_files+0x2a/0x420 [ 1095.415731][ T1610] ? __fget_files+0x3a0/0x420 [ 1095.415755][ T1610] ? __fget_files+0x2a/0x420 [ 1095.415790][ T1610] do_writev+0x154/0x2e0 [ 1095.415815][ T1610] ? __pfx_do_writev+0x10/0x10 [ 1095.415847][ T1610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.415871][ T1610] do_syscall_64+0x174/0xf80 [ 1095.415894][ T1610] ? trace_irq_disable+0x3b/0x140 [ 1095.415934][ T1610] ? clear_bhb_loop+0x40/0x90 [ 1095.415960][ T1610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.415982][ T1610] RIP: 0033:0x7f92f1d9ce59 [ 1095.416003][ T1610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.416022][ T1610] RSP: 002b:00007f92f2c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1095.416044][ T1610] RAX: ffffffffffffffda RBX: 00007f92f2016180 RCX: 00007f92f1d9ce59 [ 1095.416059][ T1610] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000005 [ 1095.416072][ T1610] RBP: 00007f92f2c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.416084][ T1610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.416096][ T1610] R13: 00007f92f2016218 R14: 00007f92f2016180 R15: 00007fff47152ab8 [ 1095.416141][ T1610] [ 1097.778593][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 1099.030947][ T1599] tipc: Started in network mode [ 1099.037420][ T1599] tipc: Node identity eea0a8f9401e, cluster identity 4711 [ 1099.045390][ T1599] tipc: Enabled bearer , priority 0 [ 1099.216326][ T1603] syzkaller0: entered promiscuous mode [ 1099.235928][ T1603] syzkaller0: entered allmulticast mode [ 1099.242842][ T1603] tipc: Resetting bearer [ 1099.272606][ T1598] tipc: Resetting bearer [ 1099.424406][ T1630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9132'. [ 1099.464562][ T1630] openvswitch: netlink: Message has 8 unknown bytes. [ 1099.536285][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1099.579669][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1099.597219][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1099.607230][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1099.620614][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1099.630255][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1099.641656][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1099.652564][ T1649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9136'. [ 1099.662302][ T1633] netlink: 83 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1102.853689][ T1598] tipc: Disabling bearer [ 1102.899811][ T5759] tipc: Node number set to 2931730681 [ 1102.944661][T31062] bridge_slave_1: left allmulticast mode [ 1102.969068][T31062] bridge_slave_1: left promiscuous mode [ 1102.975906][T31062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.021445][T31062] bridge_slave_0: left allmulticast mode [ 1103.034996][T31062] bridge_slave_0: left promiscuous mode [ 1103.046908][T31062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.373848][T31062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.384405][T31062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.395836][T31062] bond0 (unregistering): Released all slaves [ 1104.413808][T31062] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1104.424013][T31062] bond1 (unregistering): Released all slaves [ 1104.443575][T31062] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1104.454379][T31062] bond2 (unregistering): Released all slaves [ 1104.472274][T31062] bond3 (unregistering): Released all slaves [ 1104.500631][T31062] bond4 (unregistering): (slave veth7): Releasing backup interface [ 1104.510746][T31062] bond4 (unregistering): Released all slaves [ 1104.530911][T31062] bond5 (unregistering): (slave veth9): Releasing backup interface [ 1104.542475][T31062] bond5 (unregistering): Released all slaves [ 1104.558900][ T1666] netlink: 'syz.0.9140': attribute type 12 has an invalid length. [ 1104.567231][ T1666] netlink: 'syz.0.9140': attribute type 29 has an invalid length. [ 1104.581676][ T1666] __nla_validate_parse: 25 callbacks suppressed [ 1104.581709][ T1666] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1104.800053][T31062] tipc: Disabling bearer [ 1104.807228][T31062] tipc: Left network mode [ 1105.084744][ T1711] netlink: 'syz.2.9148': attribute type 10 has an invalid length. [ 1105.142963][ T1715] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.9148'. [ 1105.180336][ T1713] tipc: Enabled bearer , priority 0 [ 1105.214779][ T1720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9151'. [ 1105.237833][ T1720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9151'. [ 1105.258279][ T1724] FAULT_INJECTION: forcing a failure. [ 1105.258279][ T1724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.272955][ T1724] CPU: 1 UID: 0 PID: 1724 Comm: syz.4.9149 Not tainted syzkaller #0 PREEMPT(full) [ 1105.272982][ T1724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1105.272995][ T1724] Call Trace: [ 1105.273004][ T1724] [ 1105.273013][ T1724] dump_stack_lvl+0xe8/0x150 [ 1105.273106][ T1724] should_fail_ex+0x412/0x560 [ 1105.273158][ T1724] _copy_from_iter+0x3b0/0x1670 [ 1105.273198][ T1724] ? __pfx__copy_from_iter+0x10/0x10 [ 1105.273218][ T1724] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1105.273269][ T1724] ? __pfx__copy_from_iter+0x10/0x10 [ 1105.273295][ T1724] ? __napi_alloc_frag_align+0x163/0x550 [ 1105.273354][ T1724] ? lock_acquire+0x106/0x350 [ 1105.273395][ T1724] ? __napi_alloc_frag_align+0x163/0x550 [ 1105.273427][ T1724] copy_page_from_iter+0x220/0x2d0 [ 1105.273463][ T1724] skb_copy_datagram_from_iter+0x306/0x710 [ 1105.273500][ T1724] tun_get_user+0xc5e/0x43e0 [ 1105.273544][ T1724] ? __lock_acquire+0x6b5/0x2cf0 [ 1105.273577][ T1724] ? __lock_acquire+0x5e1/0x2cf0 [ 1105.273609][ T1724] ? __pfx_tun_get_user+0x10/0x10 [ 1105.273633][ T1724] ? __lock_acquire+0x6b5/0x2cf0 [ 1105.273662][ T1724] ? aa_file_perm+0x192/0x15e0 [ 1105.273713][ T1724] ? ref_tracker_alloc+0x35c/0x4c0 [ 1105.273748][ T1724] ? aa_file_perm+0x192/0x15e0 [ 1105.273778][ T1724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1105.273803][ T1724] ? tun_get+0x1c/0x2f0 [ 1105.273824][ T1724] ? tun_get+0x1c/0x2f0 [ 1105.273852][ T1724] ? tun_get+0x1c/0x2f0 [ 1105.273872][ T1724] ? tun_get+0x1c/0x2f0 [ 1105.273898][ T1724] tun_chr_write_iter+0x113/0x200 [ 1105.273923][ T1724] do_iter_readv_writev+0x619/0x8c0 [ 1105.273969][ T1724] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1105.274005][ T1724] ? bpf_lsm_file_permission+0x9/0x20 [ 1105.274048][ T1724] ? security_file_permission+0x75/0x260 [ 1105.274084][ T1724] ? rw_verify_area+0x255/0x4d0 [ 1105.274118][ T1724] vfs_writev+0x33c/0x990 [ 1105.274151][ T1724] ? __pfx_vfs_writev+0x10/0x10 [ 1105.274189][ T1724] ? __fget_files+0x2a/0x420 [ 1105.274218][ T1724] ? __fget_files+0x3a0/0x420 [ 1105.274241][ T1724] ? __fget_files+0x2a/0x420 [ 1105.274275][ T1724] do_writev+0x154/0x2e0 [ 1105.274300][ T1724] ? __pfx_do_writev+0x10/0x10 [ 1105.274332][ T1724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.274368][ T1724] do_syscall_64+0x174/0xf80 [ 1105.274411][ T1724] ? trace_irq_disable+0x3b/0x140 [ 1105.274455][ T1724] ? clear_bhb_loop+0x40/0x90 [ 1105.274480][ T1724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.274501][ T1724] RIP: 0033:0x7f31d579ce59 [ 1105.274522][ T1724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.274545][ T1724] RSP: 002b:00007f31d6714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1105.274567][ T1724] RAX: ffffffffffffffda RBX: 00007f31d5a16090 RCX: 00007f31d579ce59 [ 1105.274582][ T1724] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000005 [ 1105.274595][ T1724] RBP: 00007f31d6714090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.274607][ T1724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.274619][ T1724] R13: 00007f31d5a16128 R14: 00007f31d5a16090 R15: 00007ffda17b7a38 [ 1105.274651][ T1724] [ 1105.425015][ T1711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.636497][ T1711] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1105.879020][ T1713] syzkaller0: entered promiscuous mode [ 1105.884930][ T1713] syzkaller0: entered allmulticast mode [ 1105.895541][ T1713] tipc: Resetting bearer [ 1105.968047][ T1712] tipc: Resetting bearer [ 1109.605701][ T1712] tipc: Disabling bearer [ 1109.888894][ T1748] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.9160'. [ 1110.632641][ T1787] tipc: Enabled bearer , priority 0 [ 1110.727821][ T1792] FAULT_INJECTION: forcing a failure. [ 1110.727821][ T1792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.777763][ T1792] CPU: 1 UID: 0 PID: 1792 Comm: syz.4.9172 Not tainted syzkaller #0 PREEMPT(full) [ 1110.777793][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1110.777806][ T1792] Call Trace: [ 1110.777815][ T1792] [ 1110.777824][ T1792] dump_stack_lvl+0xe8/0x150 [ 1110.777856][ T1792] should_fail_ex+0x412/0x560 [ 1110.777884][ T1792] _copy_from_iter+0x3b0/0x1670 [ 1110.777921][ T1792] ? __pfx__copy_from_iter+0x10/0x10 [ 1110.777942][ T1792] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1110.777972][ T1792] ? __pfx___schedule+0x10/0x10 [ 1110.778004][ T1792] ? __pfx__copy_from_iter+0x10/0x10 [ 1110.778026][ T1792] ? __napi_alloc_frag_align+0x163/0x550 [ 1110.778065][ T1792] ? lock_acquire+0x106/0x350 [ 1110.778089][ T1792] ? __napi_alloc_frag_align+0x163/0x550 [ 1110.778122][ T1792] copy_page_from_iter+0x220/0x2d0 [ 1110.778155][ T1792] skb_copy_datagram_from_iter+0x306/0x710 [ 1110.778194][ T1792] tun_get_user+0xc5e/0x43e0 [ 1110.778217][ T1792] ? __lock_acquire+0x6b5/0x2cf0 [ 1110.778254][ T1792] ? __lock_acquire+0x5e1/0x2cf0 [ 1110.778286][ T1792] ? __pfx_tun_get_user+0x10/0x10 [ 1110.778312][ T1792] ? __lock_acquire+0x6b5/0x2cf0 [ 1110.778339][ T1792] ? aa_file_perm+0x192/0x15e0 [ 1110.778375][ T1792] ? ref_tracker_alloc+0x35c/0x4c0 [ 1110.778399][ T1792] ? aa_file_perm+0x192/0x15e0 [ 1110.778429][ T1792] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1110.778455][ T1792] ? tun_get+0x1c/0x2f0 [ 1110.778477][ T1792] ? tun_get+0x1c/0x2f0 [ 1110.778509][ T1792] ? tun_get+0x1c/0x2f0 [ 1110.778530][ T1792] ? tun_get+0x1c/0x2f0 [ 1110.778557][ T1792] tun_chr_write_iter+0x113/0x200 [ 1110.778582][ T1792] do_iter_readv_writev+0x619/0x8c0 [ 1110.778617][ T1792] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1110.778653][ T1792] ? bpf_lsm_file_permission+0x9/0x20 [ 1110.778683][ T1792] ? security_file_permission+0x75/0x260 [ 1110.778709][ T1792] ? rw_verify_area+0x255/0x4d0 [ 1110.778740][ T1792] vfs_writev+0x33c/0x990 [ 1110.778770][ T1792] ? __pfx_vfs_writev+0x10/0x10 [ 1110.778807][ T1792] ? __fget_files+0x2a/0x420 [ 1110.778837][ T1792] ? __fget_files+0x3a0/0x420 [ 1110.778860][ T1792] ? __fget_files+0x2a/0x420 [ 1110.778893][ T1792] do_writev+0x154/0x2e0 [ 1110.778917][ T1792] ? __pfx_do_writev+0x10/0x10 [ 1110.778949][ T1792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.778974][ T1792] do_syscall_64+0x174/0xf80 [ 1110.778995][ T1792] ? trace_irq_disable+0x3b/0x140 [ 1110.779026][ T1792] ? clear_bhb_loop+0x40/0x90 [ 1110.779062][ T1792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.779084][ T1792] RIP: 0033:0x7f31d579ce59 [ 1110.779104][ T1792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.779121][ T1792] RSP: 002b:00007f31d6714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1110.779144][ T1792] RAX: ffffffffffffffda RBX: 00007f31d5a16090 RCX: 00007f31d579ce59 [ 1110.779159][ T1792] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000005 [ 1110.779177][ T1792] RBP: 00007f31d6714090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.779191][ T1792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.779203][ T1792] R13: 00007f31d5a16128 R14: 00007f31d5a16090 R15: 00007ffda17b7a38 [ 1110.779238][ T1792] [ 1111.022389][ T1787] syzkaller0: entered promiscuous mode [ 1111.126254][ T1787] syzkaller0: entered allmulticast mode [ 1111.132875][ T1787] tipc: Resetting bearer [ 1111.259810][ T1803] netlink: 'syz.2.9176': attribute type 1 has an invalid length. [ 1111.340244][ T1786] tipc: Resetting bearer [ 1111.401672][ T1808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9176'. [ 1114.682878][ T1786] tipc: Disabling bearer [ 1114.697011][T31062] hsr_slave_0: left promiscuous mode [ 1114.703600][T31062] hsr_slave_1: left promiscuous mode [ 1114.709787][T31062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.717211][T31062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.725343][T31062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.733943][T31062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.749679][T31062] veth1_macvtap: left promiscuous mode [ 1114.755255][T31062] veth0_macvtap: left promiscuous mode [ 1114.762430][T31062] veth1_vlan: left promiscuous mode [ 1114.767952][T31062] veth0_vlan: left promiscuous mode [ 1114.926530][ T1830] xt_hashlimit: size too large, truncated to 1048576 [ 1114.968163][T31062] pim6reg (unregistering): left allmulticast mode [ 1115.264937][T31062] team0 (unregistering): Port device team_slave_1 removed [ 1115.281714][T31062] team0 (unregistering): Port device team_slave_0 removed [ 1115.432784][ T1803] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1115.455353][ T1805] veth5: entered promiscuous mode [ 1115.776032][ T1845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1115.852694][ T1850] netlink: 'syz.2.9192': attribute type 10 has an invalid length. [ 1115.878756][ T1850] veth1_macvtap: left promiscuous mode [ 1115.906373][ T1850] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1115.938857][ T1853] Cannot find add_set index 0 as target [ 1116.028897][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1116.105244][T31062] IPVS: stop unused estimator thread 0... [ 1116.296251][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9200'. [ 1116.322786][ T1866] netlink: 'syz.4.9200': attribute type 11 has an invalid length. [ 1116.343551][ T1866] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9200'. [ 1116.853644][ T1886] xt_hashlimit: size too large, truncated to 1048576 [ 1117.429674][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9221'. [ 1117.501005][ T1923] tipc: Enabling of bearer rejected, failed to enable media [ 1117.534508][ T1924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9219'. [ 1118.037962][ T1943] netlink: 'syz.0.9226': attribute type 8 has an invalid length. [ 1118.087352][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 1118.334578][ T1952] FAULT_INJECTION: forcing a failure. [ 1118.334578][ T1952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1118.368171][ T1952] CPU: 0 UID: 0 PID: 1952 Comm: syz.3.9231 Not tainted syzkaller #0 PREEMPT(full) [ 1118.368201][ T1952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1118.368215][ T1952] Call Trace: [ 1118.368224][ T1952] [ 1118.368234][ T1952] dump_stack_lvl+0xe8/0x150 [ 1118.368264][ T1952] should_fail_ex+0x412/0x560 [ 1118.368293][ T1952] _copy_to_user+0x31/0xb0 [ 1118.368323][ T1952] simple_read_from_buffer+0xe1/0x170 [ 1118.368355][ T1952] proc_fail_nth_read+0x1bb/0x230 [ 1118.368494][ T1952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1118.368525][ T1952] ? rw_verify_area+0x2a6/0x4d0 [ 1118.368554][ T1952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1118.368583][ T1952] vfs_read+0x20c/0xa70 [ 1118.368618][ T1952] ? __pfx___mutex_lock+0x10/0x10 [ 1118.368651][ T1952] ? __pfx_vfs_read+0x10/0x10 [ 1118.368682][ T1952] ? __fget_files+0x2a/0x420 [ 1118.368711][ T1952] ? __fget_files+0x3a0/0x420 [ 1118.368736][ T1952] ? __fget_files+0x2a/0x420 [ 1118.368770][ T1952] ksys_read+0x150/0x270 [ 1118.368801][ T1952] ? __pfx_ksys_read+0x10/0x10 [ 1118.368827][ T1952] ? fput+0xa0/0xd0 [ 1118.368858][ T1952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.368881][ T1952] do_syscall_64+0x174/0xf80 [ 1118.368903][ T1952] ? trace_irq_disable+0x3b/0x140 [ 1118.368938][ T1952] ? clear_bhb_loop+0x40/0x90 [ 1118.368965][ T1952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.368986][ T1952] RIP: 0033:0x7f1352b5d68e [ 1118.369007][ T1952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1118.369025][ T1952] RSP: 002b:00007f1353989fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1118.369047][ T1952] RAX: ffffffffffffffda RBX: 00007f135398a6c0 RCX: 00007f1352b5d68e [ 1118.369063][ T1952] RDX: 000000000000000f RSI: 00007f135398a0a0 RDI: 0000000000000004 [ 1118.369076][ T1952] RBP: 00007f135398a090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.369087][ T1952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.369099][ T1952] R13: 00007f1352e16038 R14: 00007f1352e15fa0 R15: 00007ffe15753258 [ 1118.369135][ T1952] [ 1118.894239][ T1966] netem: incorrect ge model size [ 1118.909324][ T1966] netem: change failed [ 1118.932014][ T1971] netlink: 'syz.4.9239': attribute type 8 has an invalid length. [ 1119.019537][ T1976] netlink: 'syz.0.9240': attribute type 12 has an invalid length. [ 1119.059690][ T1976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9240'. [ 1119.261680][ T1986] netlink: 'syz.4.9245': attribute type 1 has an invalid length. [ 1119.342212][ T1992] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1119.414967][ T1986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9245'. [ 1119.456304][ T1996] veth5: entered promiscuous mode [ 1119.475276][ T1996] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1119.494215][ T1986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1119.526323][ T2005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9252'. [ 1119.660800][ T2011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9255'. [ 1120.100455][ T2033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9265'. [ 1120.126863][ T2033] openvswitch: netlink: Unknown nsh attribute 0 [ 1121.002758][ T2064] FAULT_INJECTION: forcing a failure. [ 1121.002758][ T2064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.058333][ T2064] CPU: 1 UID: 0 PID: 2064 Comm: syz.1.9276 Not tainted syzkaller #0 PREEMPT(full) [ 1121.058361][ T2064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1121.058374][ T2064] Call Trace: [ 1121.058384][ T2064] [ 1121.058393][ T2064] dump_stack_lvl+0xe8/0x150 [ 1121.058423][ T2064] should_fail_ex+0x412/0x560 [ 1121.058452][ T2064] _copy_from_iter+0x1d3/0x1670 [ 1121.058482][ T2064] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1121.058510][ T2064] ? tcp_leave_memory_pressure+0xe8/0x100 [ 1121.058655][ T2064] ? __pfx__copy_from_iter+0x10/0x10 [ 1121.058692][ T2064] ? __sk_mem_schedule+0x7f/0xf0 [ 1121.058720][ T2064] copy_page_from_iter+0x220/0x2d0 [ 1121.058749][ T2064] tcp_connect+0x2676/0x53a0 [ 1121.058836][ T2064] ? __pfx_tcp_connect+0x10/0x10 [ 1121.058866][ T2064] ? ktime_get_with_offset+0x93/0x2d0 [ 1121.058925][ T2064] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1121.058974][ T2064] ? __asan_memset+0x22/0x50 [ 1121.059015][ T2064] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1121.059082][ T2064] ? inet6_hash_connect+0xeb/0x170 [ 1121.059165][ T2064] tcp_v6_connect+0x1295/0x1b10 [ 1121.059199][ T2064] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1121.059225][ T2064] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1121.059250][ T2064] ? tcp_sendmsg_locked+0x4a88/0x5360 [ 1121.059291][ T2064] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1121.059330][ T2064] __inet_stream_connect+0x25a/0xdd0 [ 1121.059380][ T2064] ? __pfx___inet_stream_connect+0x10/0x10 [ 1121.059407][ T2064] ? __kasan_kmalloc+0x93/0xb0 [ 1121.059438][ T2064] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1121.059466][ T2064] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.059487][ T2064] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1121.059514][ T2064] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1121.059548][ T2064] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 1121.059584][ T2064] tcp_sendmsg_locked+0x4a88/0x5360 [ 1121.059617][ T2064] ? tcp_sendmsg_locked+0x2f1/0x5360 [ 1121.059643][ T2064] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1121.059692][ T2064] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.059748][ T2064] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1121.059784][ T2064] ? tcp_sendmsg+0x21/0x50 [ 1121.059815][ T2064] ? __local_bh_enable_ip+0xd0/0x130 [ 1121.059850][ T2064] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1121.059908][ T2064] tcp_sendmsg+0x2f/0x50 [ 1121.059936][ T2064] __sys_sendto+0x4a3/0x710 [ 1121.059980][ T2064] ? __pfx___sys_sendto+0x10/0x10 [ 1121.060008][ T2064] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1121.060046][ T2064] ? __fget_files+0x3a0/0x420 [ 1121.060084][ T2064] ? ksys_write+0x242/0x270 [ 1121.060116][ T2064] ? __pfx_ksys_write+0x10/0x10 [ 1121.060152][ T2064] __x64_sys_sendto+0xde/0x100 [ 1121.060184][ T2064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.060208][ T2064] do_syscall_64+0x174/0xf80 [ 1121.060229][ T2064] ? trace_irq_disable+0x3b/0x140 [ 1121.060261][ T2064] ? clear_bhb_loop+0x40/0x90 [ 1121.060287][ T2064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.060309][ T2064] RIP: 0033:0x7f92f1d9ce59 [ 1121.060329][ T2064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.060348][ T2064] RSP: 002b:00007f92f2cac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1121.060370][ T2064] RAX: ffffffffffffffda RBX: 00007f92f2015fa0 RCX: 00007f92f1d9ce59 [ 1121.060386][ T2064] RDX: fffffffffffffc5c RSI: 00002000000027c0 RDI: 0000000000000003 [ 1121.060400][ T2064] RBP: 00007f92f2cac090 R08: 00002000000001c0 R09: 000000000000001c [ 1121.060414][ T2064] R10: 0000000024008084 R11: 0000000000000246 R12: 0000000000000002 [ 1121.060427][ T2064] R13: 00007f92f2016038 R14: 00007f92f2015fa0 R15: 00007fff47152ab8 [ 1121.060460][ T2064] [ 1121.864118][ T2092] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1122.094517][ T2099] sctp: [Deprecated]: syz.3.9289 (pid 2099) Use of int in maxseg socket option. [ 1122.094517][ T2099] Use struct sctp_assoc_value instead [ 1122.169560][ T2099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9289'. [ 1122.206482][ T2102] FAULT_INJECTION: forcing a failure. [ 1122.206482][ T2102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.220315][ T2102] CPU: 1 UID: 0 PID: 2102 Comm: syz.1.9290 Not tainted syzkaller #0 PREEMPT(full) [ 1122.220344][ T2102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1122.220357][ T2102] Call Trace: [ 1122.220365][ T2102] [ 1122.220375][ T2102] dump_stack_lvl+0xe8/0x150 [ 1122.220406][ T2102] should_fail_ex+0x412/0x560 [ 1122.220434][ T2102] _copy_from_iter+0x1d3/0x1670 [ 1122.220461][ T2102] ? rcu_is_watching+0x15/0xb0 [ 1122.220491][ T2102] ? __pfx__copy_from_iter+0x10/0x10 [ 1122.220523][ T2102] ? netlink_sendmsg+0x650/0xb40 [ 1122.220615][ T2102] ? skb_put+0x11b/0x210 [ 1122.220651][ T2102] netlink_sendmsg+0x6c0/0xb40 [ 1122.220680][ T2102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.220712][ T2102] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1122.220742][ T2102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1122.220773][ T2102] ____sys_sendmsg+0x972/0x9f0 [ 1122.220794][ T2102] ? __might_fault+0xaf/0x130 [ 1122.220834][ T2102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1122.220864][ T2102] ? import_iovec+0x73/0xa0 [ 1122.220892][ T2102] ___sys_sendmsg+0x2a5/0x360 [ 1122.220912][ T2102] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.220940][ T2102] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.220999][ T2102] ? __fget_files+0x2a/0x420 [ 1122.221023][ T2102] ? __fget_files+0x3a0/0x420 [ 1122.221058][ T2102] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1122.221083][ T2102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1122.221115][ T2102] ? __pfx_ksys_write+0x10/0x10 [ 1122.221154][ T2102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.221178][ T2102] do_syscall_64+0x174/0xf80 [ 1122.221199][ T2102] ? trace_irq_disable+0x3b/0x140 [ 1122.221230][ T2102] ? clear_bhb_loop+0x40/0x90 [ 1122.221256][ T2102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.221277][ T2102] RIP: 0033:0x7f92f1d9ce59 [ 1122.221297][ T2102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.221313][ T2102] RSP: 002b:00007f92f2cac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.221335][ T2102] RAX: ffffffffffffffda RBX: 00007f92f2015fa0 RCX: 00007f92f1d9ce59 [ 1122.221350][ T2102] RDX: 0000000020004090 RSI: 0000200000000280 RDI: 0000000000000003 [ 1122.221364][ T2102] RBP: 00007f92f2cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.221377][ T2102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.221389][ T2102] R13: 00007f92f2016038 R14: 00007f92f2015fa0 R15: 00007fff47152ab8 [ 1122.221423][ T2102] [ 1122.511371][ T2106] FAULT_INJECTION: forcing a failure. [ 1122.511371][ T2106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.538964][ T2106] CPU: 0 UID: 0 PID: 2106 Comm: syz.2.9291 Not tainted syzkaller #0 PREEMPT(full) [ 1122.538994][ T2106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1122.539008][ T2106] Call Trace: [ 1122.539017][ T2106] [ 1122.539027][ T2106] dump_stack_lvl+0xe8/0x150 [ 1122.539058][ T2106] should_fail_ex+0x412/0x560 [ 1122.539086][ T2106] _copy_from_iter+0x1d3/0x1670 [ 1122.539117][ T2106] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1122.539146][ T2106] ? tcp_leave_memory_pressure+0xe8/0x100 [ 1122.539175][ T2106] ? __pfx__copy_from_iter+0x10/0x10 [ 1122.539208][ T2106] ? __sk_mem_schedule+0x7f/0xf0 [ 1122.539237][ T2106] copy_page_from_iter+0x220/0x2d0 [ 1122.539265][ T2106] tcp_connect+0x2676/0x53a0 [ 1122.539324][ T2106] ? __pfx_tcp_connect+0x10/0x10 [ 1122.539354][ T2106] ? ktime_get_with_offset+0x93/0x2d0 [ 1122.539385][ T2106] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1122.539424][ T2106] ? __asan_memset+0x22/0x50 [ 1122.539458][ T2106] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1122.539501][ T2106] ? inet6_hash_connect+0xeb/0x170 [ 1122.539533][ T2106] tcp_v6_connect+0x1295/0x1b10 [ 1122.539557][ T2106] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1122.539585][ T2106] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1122.539611][ T2106] ? tcp_sendmsg_locked+0x4a88/0x5360 [ 1122.539654][ T2106] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1122.539694][ T2106] __inet_stream_connect+0x25a/0xdd0 [ 1122.539734][ T2106] ? __pfx___inet_stream_connect+0x10/0x10 [ 1122.539762][ T2106] ? __kasan_kmalloc+0x93/0xb0 [ 1122.539793][ T2106] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1122.539821][ T2106] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.539842][ T2106] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1122.539876][ T2106] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1122.539910][ T2106] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 1122.539946][ T2106] tcp_sendmsg_locked+0x4a88/0x5360 [ 1122.539979][ T2106] ? tcp_sendmsg_locked+0x2f1/0x5360 [ 1122.540006][ T2106] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1122.540047][ T2106] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.540103][ T2106] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1122.540139][ T2106] ? tcp_sendmsg+0x21/0x50 [ 1122.540168][ T2106] ? __local_bh_enable_ip+0xd0/0x130 [ 1122.540192][ T2106] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1122.540221][ T2106] tcp_sendmsg+0x2f/0x50 [ 1122.540247][ T2106] __sys_sendto+0x4a3/0x710 [ 1122.540281][ T2106] ? __pfx___sys_sendto+0x10/0x10 [ 1122.540308][ T2106] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1122.540346][ T2106] ? __fget_files+0x3a0/0x420 [ 1122.540383][ T2106] ? ksys_write+0x242/0x270 [ 1122.540414][ T2106] ? __pfx_ksys_write+0x10/0x10 [ 1122.540453][ T2106] __x64_sys_sendto+0xde/0x100 [ 1122.540483][ T2106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.540506][ T2106] do_syscall_64+0x174/0xf80 [ 1122.540526][ T2106] ? trace_irq_disable+0x3b/0x140 [ 1122.540555][ T2106] ? clear_bhb_loop+0x40/0x90 [ 1122.540578][ T2106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.540599][ T2106] RIP: 0033:0x7f7d1159ce59 [ 1122.540619][ T2106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.540639][ T2106] RSP: 002b:00007f7d1249d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1122.540661][ T2106] RAX: ffffffffffffffda RBX: 00007f7d11815fa0 RCX: 00007f7d1159ce59 [ 1122.540675][ T2106] RDX: fffffffffffffc5c RSI: 00002000000027c0 RDI: 0000000000000003 [ 1122.540689][ T2106] RBP: 00007f7d1249d090 R08: 00002000000001c0 R09: 000000000000001c [ 1122.540702][ T2106] R10: 0000000024008084 R11: 0000000000000246 R12: 0000000000000002 [ 1122.540714][ T2106] R13: 00007f7d11816038 R14: 00007f7d11815fa0 R15: 00007fff3236cdf8 [ 1122.540745][ T2106] [ 1122.960442][ T2117] netlink: 404 bytes leftover after parsing attributes in process `syz.4.9295'. [ 1123.173120][ T2125] netlink: 'syz.0.9297': attribute type 12 has an invalid length. [ 1123.194800][ T2125] netlink: 'syz.0.9297': attribute type 29 has an invalid length. [ 1123.219939][ T2125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9297'. [ 1123.236208][ T2125] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9297'. [ 1123.420119][ T2127] syzkaller0: entered promiscuous mode [ 1123.439647][ T2148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.451876][ T2127] syzkaller0: entered allmulticast mode [ 1123.602466][ T2162] FAULT_INJECTION: forcing a failure. [ 1123.602466][ T2162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.637578][ T2162] CPU: 1 UID: 0 PID: 2162 Comm: syz.3.9306 Not tainted syzkaller #0 PREEMPT(full) [ 1123.637606][ T2162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1123.637620][ T2162] Call Trace: [ 1123.637632][ T2162] [ 1123.637639][ T2162] dump_stack_lvl+0xe8/0x150 [ 1123.637667][ T2162] should_fail_ex+0x412/0x560 [ 1123.637691][ T2162] _copy_from_iter+0x1d3/0x1670 [ 1123.637715][ T2162] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1123.637742][ T2162] ? tcp_leave_memory_pressure+0xe8/0x100 [ 1123.637768][ T2162] ? __pfx__copy_from_iter+0x10/0x10 [ 1123.637797][ T2162] ? __sk_mem_schedule+0x7f/0xf0 [ 1123.637824][ T2162] copy_page_from_iter+0x220/0x2d0 [ 1123.637849][ T2162] tcp_connect+0x2676/0x53a0 [ 1123.637903][ T2162] ? __pfx_tcp_connect+0x10/0x10 [ 1123.637932][ T2162] ? ktime_get_with_offset+0x93/0x2d0 [ 1123.637961][ T2162] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1123.638001][ T2162] ? __asan_memset+0x22/0x50 [ 1123.638033][ T2162] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1123.638073][ T2162] ? inet6_hash_connect+0xeb/0x170 [ 1123.638116][ T2162] tcp_v6_connect+0x1295/0x1b10 [ 1123.638142][ T2162] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1123.638168][ T2162] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1123.638193][ T2162] ? tcp_sendmsg_locked+0x4a88/0x5360 [ 1123.638234][ T2162] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1123.638272][ T2162] __inet_stream_connect+0x25a/0xdd0 [ 1123.638311][ T2162] ? __pfx___inet_stream_connect+0x10/0x10 [ 1123.638337][ T2162] ? __kasan_kmalloc+0x93/0xb0 [ 1123.638366][ T2162] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1123.638394][ T2162] ? __lock_acquire+0x6b5/0x2cf0 [ 1123.638414][ T2162] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1123.638439][ T2162] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1123.638472][ T2162] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 1123.638506][ T2162] tcp_sendmsg_locked+0x4a88/0x5360 [ 1123.638539][ T2162] ? tcp_sendmsg_locked+0x2f1/0x5360 [ 1123.638565][ T2162] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1123.638605][ T2162] ? __lock_acquire+0x6b5/0x2cf0 [ 1123.638658][ T2162] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1123.638692][ T2162] ? tcp_sendmsg+0x21/0x50 [ 1123.638721][ T2162] ? __local_bh_enable_ip+0xd0/0x130 [ 1123.638743][ T2162] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1123.638771][ T2162] tcp_sendmsg+0x2f/0x50 [ 1123.638797][ T2162] __sys_sendto+0x4a3/0x710 [ 1123.638832][ T2162] ? __pfx___sys_sendto+0x10/0x10 [ 1123.638860][ T2162] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1123.638896][ T2162] ? __fget_files+0x3a0/0x420 [ 1123.638926][ T2162] ? ksys_write+0x242/0x270 [ 1123.638952][ T2162] ? __pfx_ksys_write+0x10/0x10 [ 1123.638980][ T2162] __x64_sys_sendto+0xde/0x100 [ 1123.639006][ T2162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.639025][ T2162] do_syscall_64+0x174/0xf80 [ 1123.639041][ T2162] ? trace_irq_disable+0x3b/0x140 [ 1123.639067][ T2162] ? clear_bhb_loop+0x40/0x90 [ 1123.639088][ T2162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.639114][ T2162] RIP: 0033:0x7f1352b9ce59 [ 1123.639132][ T2162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.639147][ T2162] RSP: 002b:00007f135398a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1123.639165][ T2162] RAX: ffffffffffffffda RBX: 00007f1352e15fa0 RCX: 00007f1352b9ce59 [ 1123.639177][ T2162] RDX: fffffffffffffc5c RSI: 00002000000027c0 RDI: 0000000000000003 [ 1123.639189][ T2162] RBP: 00007f135398a090 R08: 00002000000001c0 R09: 000000000000001c [ 1123.639200][ T2162] R10: 0000000024008084 R11: 0000000000000246 R12: 0000000000000002 [ 1123.639210][ T2162] R13: 00007f1352e16038 R14: 00007f1352e15fa0 R15: 00007ffe15753258 [ 1123.639237][ T2162] [ 1127.344823][ T9638] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.363199][ T9638] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.400433][ T9638] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.437807][ T9638] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.558109][ T2185] xt_hashlimit: size too large, truncated to 1048576 [ 1127.756980][ T2198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9319'. [ 1127.798503][ T2198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9319'. [ 1127.850494][ T9638] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.877604][ T9638] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.910650][ T9638] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.936017][ T9638] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.994984][ T2205] FAULT_INJECTION: forcing a failure. [ 1127.994984][ T2205] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.030702][ T2205] CPU: 0 UID: 0 PID: 2205 Comm: syz.1.9322 Not tainted syzkaller #0 PREEMPT(full) [ 1128.030732][ T2205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1128.030744][ T2205] Call Trace: [ 1128.030752][ T2205] [ 1128.030762][ T2205] dump_stack_lvl+0xe8/0x150 [ 1128.030792][ T2205] should_fail_ex+0x412/0x560 [ 1128.030821][ T2205] should_failslab+0xa8/0x100 [ 1128.030856][ T2205] __kmalloc_noprof+0xe8/0x760 [ 1128.030886][ T2205] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1128.030926][ T2205] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1128.030961][ T2205] ? tomoyo_domain+0xd7/0x130 [ 1128.030988][ T2205] ? tomoyo_path_number_perm+0x219/0x630 [ 1128.031016][ T2205] tomoyo_path_number_perm+0x246/0x630 [ 1128.031048][ T2205] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1128.031075][ T2205] ? __lock_acquire+0x6b5/0x2cf0 [ 1128.031115][ T2205] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1128.031163][ T2205] ? __fget_files+0x2a/0x420 [ 1128.031193][ T2205] ? __fget_files+0x2a/0x420 [ 1128.031217][ T2205] ? __fget_files+0x3a0/0x420 [ 1128.031241][ T2205] ? __fget_files+0x2a/0x420 [ 1128.031271][ T2205] security_file_ioctl+0xc3/0x2a0 [ 1128.031301][ T2205] __se_sys_ioctl+0x47/0x170 [ 1128.031337][ T2205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.031361][ T2205] do_syscall_64+0x174/0xf80 [ 1128.031382][ T2205] ? trace_irq_disable+0x3b/0x140 [ 1128.031412][ T2205] ? clear_bhb_loop+0x40/0x90 [ 1128.031447][ T2205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.031468][ T2205] RIP: 0033:0x7f92f1d9ce59 [ 1128.031489][ T2205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.031507][ T2205] RSP: 002b:00007f92f2cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.031530][ T2205] RAX: ffffffffffffffda RBX: 00007f92f2015fa0 RCX: 00007f92f1d9ce59 [ 1128.031545][ T2205] RDX: 0000200000000180 RSI: 0000000000008b30 RDI: 0000000000000004 [ 1128.031558][ T2205] RBP: 00007f92f2cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.031570][ T2205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.031582][ T2205] R13: 00007f92f2016038 R14: 00007f92f2015fa0 R15: 00007fff47152ab8 [ 1128.031615][ T2205] [ 1128.031637][ T2205] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1128.858646][ T2239] netlink: 'syz.0.9336': attribute type 10 has an invalid length. [ 1128.875271][ T2239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.885704][ T2239] team0: Port device netdevsim1 added [ 1129.274596][ T2253] IPv6: sit1: Disabled Multicast RS [ 1129.292220][ T2253] sit1: entered allmulticast mode [ 1129.390199][ T2261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9346'. [ 1129.429684][ T2261] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9346'. [ 1129.458541][ T2261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9346'. [ 1129.552007][ T2265] tipc: Enabled bearer , priority 0 [ 1129.625388][ T2264] tipc: Disabling bearer [ 1129.855128][ T2283] netlink: 640 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1129.865139][ T2283] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1130.150211][ T2283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1130.482301][ T2294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9357'. [ 1130.518576][ T2294] netlink: 'syz.2.9357': attribute type 11 has an invalid length. [ 1130.540619][ T2294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9357'. [ 1130.590472][ T2300] gtp0: entered promiscuous mode [ 1130.598041][ T2300] gtp0: entered allmulticast mode [ 1130.670984][ T2304] netlink: 308 bytes leftover after parsing attributes in process `syz.0.9361'. [ 1130.937521][ T2314] tipc: Started in network mode [ 1130.960984][ T2314] tipc: Node identity 5eb8ce94cbde, cluster identity 4711 [ 1130.985071][ T2314] tipc: Enabled bearer , priority 0 [ 1131.074552][ T2321] syzkaller0: entered promiscuous mode [ 1131.094991][ T2321] syzkaller0: entered allmulticast mode [ 1131.110475][ T2321] tipc: Resetting bearer [ 1131.177615][ T2313] tipc: Resetting bearer [ 1131.272827][ T2336] netlink: 'syz.2.9373': attribute type 11 has an invalid length. [ 1131.393177][ T2342] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 1134.671146][ T2313] tipc: Disabling bearer [ 1134.682707][ T2322] syzkaller0: entered promiscuous mode [ 1134.688792][ T2322] syzkaller0: entered allmulticast mode [ 1134.712943][ T5759] tipc: Node number set to 2506542740 [ 1134.927015][ T2351] __nla_validate_parse: 3 callbacks suppressed [ 1134.927037][ T2351] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1135.129495][ T2364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9381'. [ 1135.146571][ T2355] lo speed is unknown, defaulting to 1000 [ 1135.152784][ T2364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9381'. [ 1135.178190][ T2355] lo speed is unknown, defaulting to 1000 [ 1135.189769][ T2359] »»»»»»: renamed from lo (while UP) [ 1135.243809][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.283380][ T2355] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1135.323036][ T2355] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1135.363492][ T2372] netlink: 'syz.4.9383': attribute type 1 has an invalid length. [ 1135.370140][ T2355] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1135.383733][ T2372] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1135.408495][ T2372] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1135.434044][ T2372] netlink: 658 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1135.466969][ T2355] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 1135.570024][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.600289][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.634373][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.664673][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.700993][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.721216][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.732030][ T2388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9386'. [ 1135.735122][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.752371][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.762978][ T2388] netlink: 'syz.4.9386': attribute type 11 has an invalid length. [ 1135.775247][ T2355] »»»»»» speed is unknown, defaulting to 1000 [ 1135.782647][ T2388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9386'. [ 1135.929976][ T2392] tipc: Enabled bearer , priority 0 [ 1136.064643][ T2392] syzkaller0: entered promiscuous mode [ 1136.071742][ T2392] syzkaller0: entered allmulticast mode [ 1136.079360][ T2392] tipc: Resetting bearer [ 1136.122728][ T2391] tipc: Resetting bearer [ 1139.593030][ T2391] tipc: Disabling bearer [ 1139.833008][ T2437] netlink: 'syz.0.9399': attribute type 1 has an invalid length. [ 1140.114790][ T2447] Cannot find add_set index 0 as target [ 1140.150780][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9406'. [ 1140.184331][ T2447] 8021q: VLANs not supported on ip6gre0 [ 1140.320461][ T2467] netlink: 'syz.2.9408': attribute type 10 has an invalid length. [ 1140.360434][ T2467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.383489][ T2467] bond0: (slave team0): Enslaving as an active interface with an up link [ 1140.411246][ T2469] netlink: 'syz.3.9409': attribute type 9 has an invalid length. [ 1140.734297][ T2487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9416'. [ 1140.865592][ T2490] netlink: 'syz.0.9418': attribute type 8 has an invalid length. [ 1140.917851][ T2493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9419'. [ 1140.966864][ T2493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1141.042258][ T2501] netlink: 'syz.0.9421': attribute type 1 has an invalid length. [ 1141.065364][ T2503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9419'. [ 1141.093114][ T2493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1141.102106][ T2493] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1141.172487][ T2503] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1141.205878][ T2503] bond1 (unregistering): Released all slaves [ 1141.456144][ T2518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9425'. [ 1141.662789][ T2537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9428'. [ 1141.678974][ T2535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9429'. [ 1141.704409][ T2537] openvswitch: netlink: Unknown nsh attribute 0 [ 1141.893618][ T2548] netlink: 'syz.0.9432': attribute type 8 has an invalid length. [ 1142.532637][ T2574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9441'. [ 1142.715757][ T2585] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1142.899667][ T2591] netlink: 'syz.0.9448': attribute type 1 has an invalid length. [ 1142.938436][ T2602] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1143.013336][ T2603] veth3: entered promiscuous mode [ 1143.023741][ T2591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1143.052105][ T2603] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1143.073769][ T2591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1143.185469][ T2616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1143.199424][ T2616] openvswitch: netlink: Unknown nsh attribute 0 [ 1143.991874][ T2675] netlink: 'syz.3.9465': attribute type 1 has an invalid length. [ 1144.439227][ T2675] veth3: entered promiscuous mode [ 1144.455559][ T2675] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1144.508199][ T2681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1144.568041][ T2697] netlink: 'syz.2.9471': attribute type 12 has an invalid length. [ 1144.588865][ T2697] netlink: 'syz.2.9471': attribute type 29 has an invalid length. [ 1144.780031][ T2710] ipt_REJECT: ECHOREPLY no longer supported. [ 1144.844683][ T2717] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1145.244385][ T2746] syzkaller0: entered promiscuous mode [ 1145.252524][ T2746] syzkaller0: entered allmulticast mode [ 1145.261859][ T2749] bridge_slave_1: left allmulticast mode [ 1145.269424][ T2749] bridge_slave_1: left promiscuous mode [ 1145.275345][ T2749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.325028][ T2749] bridge_slave_0: left allmulticast mode [ 1145.332124][ T2749] bridge_slave_0: left promiscuous mode [ 1145.341686][ T2749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.737061][ T2765] __nla_validate_parse: 10 callbacks suppressed [ 1145.737083][ T2765] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9490'. [ 1145.802464][ T2766] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1145.926876][ T2779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9494'. [ 1146.123487][ T2794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.682860][ T2828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9509'. [ 1147.153944][ T2850] syzkaller0: entered promiscuous mode [ 1147.173395][ T2850] syzkaller0: entered allmulticast mode [ 1147.305215][ T2870] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9513'. [ 1147.359575][ T2864] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1147.377451][ T2864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1147.406644][ T2864] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1147.434482][ T2864] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1147.456738][ T2865] syzkaller0: entered promiscuous mode [ 1147.482749][ T2865] syzkaller0: entered allmulticast mode [ 1147.499217][ T2876] erspan0: entered promiscuous mode [ 1147.596358][ T2886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9517'. [ 1147.646364][ T2886] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9517'. [ 1148.133737][ T2910] xt_hashlimit: size too large, truncated to 1048576 [ 1148.424569][ T2917] bond3: option xmit_hash_policy: invalid value (64) [ 1148.436292][ T2917] bond3 (unregistering): Released all slaves [ 1149.603553][ T2975] syzkaller0: entered promiscuous mode [ 1149.633606][ T2975] syzkaller0: entered allmulticast mode [ 1150.313533][ T3024] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1150.401862][ T3027] geneve1: entered promiscuous mode [ 1150.623932][ T3043] netlink: 'syz.4.9580': attribute type 2 has an invalid length. [ 1150.632285][ T3043] netlink: 'syz.4.9580': attribute type 2 has an invalid length. [ 1150.910266][ T3061] syzkaller0: entered promiscuous mode [ 1150.916012][ T3061] syzkaller0: entered allmulticast mode [ 1151.002737][ T3067] Bluetooth: MGMT ver 1.23 [ 1151.073378][ T3067] __nla_validate_parse: 15 callbacks suppressed [ 1151.073399][ T3067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9589'. [ 1151.101719][ T3065] syzkaller0: entered promiscuous mode [ 1151.109777][ T3065] syzkaller0: entered allmulticast mode [ 1151.117095][ T3069] veth0: entered promiscuous mode [ 1151.135025][ T3068] veth0: left promiscuous mode [ 1151.144474][ T3067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9589'. [ 1151.735936][ T3103] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 1151.762332][ T3106] siw: device registration error -23 [ 1153.933927][T17321] Bluetooth: hci2: command 0x0406 tx timeout [ 1155.430657][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.473146][ T3115] veth5: entered allmulticast mode [ 1155.479811][ T3121] netlink: 'syz.2.9606': attribute type 3 has an invalid length. [ 1155.493312][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.508479][ T3121] netlink: 'syz.2.9606': attribute type 3 has an invalid length. [ 1155.537400][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.563577][ T3102] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1155.597532][ T3102] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1155.626476][ T3102] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1155.676856][ T3102] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1155.786438][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.802128][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.828892][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.851066][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.859770][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.872308][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.881748][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.892887][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1155.902397][ T3102] xfrm0 speed is unknown, defaulting to 1000 [ 1156.035190][ T3145] netlink: 'syz.4.9615': attribute type 8 has an invalid length. [ 1156.095450][ T3147] tipc: Enabling of bearer rejected, failed to enable media [ 1156.475473][ T3170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9629'. [ 1156.520764][ T3172] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9628'. [ 1156.541727][ T3172] vcan0: tx address claim with dlc 0 [ 1156.649151][T20038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.691634][ T3182] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1156.861842][ T3189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.884652][ T3189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.894875][ T3189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.939674][ T3189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.964314][ T3189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.996194][ T3187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.059313][ T3187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.207082][ T3206] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9641'. [ 1157.240256][ T3206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9641'. [ 1157.264136][ T3212] netlink: 'syz.4.9640': attribute type 1 has an invalid length. [ 1157.408122][T27440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.524070][ T3222] bond4: (slave geneve2): making interface the new active one [ 1157.536553][ T3222] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1157.630084][ T3239] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9646'. [ 1157.640674][ T3240] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9646'. [ 1157.760329][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9647'. [ 1157.808591][ T3243] bridge_slave_0: left allmulticast mode [ 1157.814481][ T3243] bridge_slave_0: left promiscuous mode [ 1157.820584][ T3243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.838576][ T3243] bridge_slave_1: left allmulticast mode [ 1157.844490][ T3243] bridge_slave_1: left promiscuous mode [ 1157.860119][ T3243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.881681][ T3243] bond0: (slave bond_slave_0): Releasing backup interface [ 1157.911036][ T3243] bond0: (slave bond_slave_1): Releasing backup interface [ 1157.970914][ T3243] team0: Port device team_slave_0 removed [ 1158.000388][ T3243] team0: Port device team_slave_1 removed [ 1158.020750][ T3243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.036953][ T3243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.052545][ T3243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.065181][ T3256] netlink: 'syz.2.9652': attribute type 8 has an invalid length. [ 1158.070084][ T3243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.347450][ T3266] netlink: 'syz.0.9656': attribute type 12 has an invalid length. [ 1158.356551][ T3266] netlink: 'syz.0.9656': attribute type 29 has an invalid length. [ 1158.366390][ T3266] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9656'. [ 1158.376639][ T3266] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9656'. [ 1158.716135][ T3287] xt_hashlimit: size too large, truncated to 1048576 [ 1158.859656][ T3298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9669'. [ 1158.921980][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.978443][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.021242][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.045657][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.344172][ T3313] tipc: Enabling not permitted [ 1159.379071][ T3313] tipc: Enabling of bearer rejected, failed to enable media [ 1159.646906][ T3332] syzkaller0: entered promiscuous mode [ 1159.669989][ T3332] syzkaller0: entered allmulticast mode [ 1160.006921][ T3352] netlink: 'syz.3.9689': attribute type 1 has an invalid length. [ 1160.220813][ T3355] veth7: entered promiscuous mode [ 1160.244000][ T3355] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 1160.280527][ T3352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1160.856711][ T3377] pimreg: entered allmulticast mode [ 1161.061583][ T3396] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1161.224575][ T3405] netlink: 'syz.2.9706': attribute type 1 has an invalid length. [ 1161.302627][ T3410] FAULT_INJECTION: forcing a failure. [ 1161.302627][ T3410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.316886][ T3410] CPU: 0 UID: 0 PID: 3410 Comm: syz.0.9709 Not tainted syzkaller #0 PREEMPT(full) [ 1161.316916][ T3410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1161.316929][ T3410] Call Trace: [ 1161.316938][ T3410] [ 1161.316948][ T3410] dump_stack_lvl+0xe8/0x150 [ 1161.316982][ T3410] should_fail_ex+0x412/0x560 [ 1161.317014][ T3410] _copy_from_user+0x2d/0xb0 [ 1161.317042][ T3410] kstrtouint_from_user+0xd6/0x180 [ 1161.317067][ T3410] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1161.317107][ T3410] proc_fail_nth_write+0x8e/0x210 [ 1161.317137][ T3410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1161.317181][ T3410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1161.317210][ T3410] vfs_write+0x29a/0xb90 [ 1161.317254][ T3410] ? __pfx_vfs_write+0x10/0x10 [ 1161.317285][ T3410] ? __fget_files+0x2a/0x420 [ 1161.317315][ T3410] ? __fget_files+0x3a0/0x420 [ 1161.317338][ T3410] ? __fget_files+0x2a/0x420 [ 1161.317371][ T3410] ksys_write+0x150/0x270 [ 1161.317403][ T3410] ? __pfx_ksys_write+0x10/0x10 [ 1161.317441][ T3410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.317464][ T3410] do_syscall_64+0x174/0xf80 [ 1161.317490][ T3410] ? trace_irq_disable+0x3b/0x140 [ 1161.317522][ T3410] ? clear_bhb_loop+0x40/0x90 [ 1161.317549][ T3410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.317570][ T3410] RIP: 0033:0x7fa1ec75d68e [ 1161.317590][ T3410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1161.317609][ T3410] RSP: 002b:00007fa1ea9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1161.317632][ T3410] RAX: ffffffffffffffda RBX: 00007fa1ea9f66c0 RCX: 00007fa1ec75d68e [ 1161.317648][ T3410] RDX: 0000000000000001 RSI: 00007fa1ea9f60a0 RDI: 0000000000000006 [ 1161.317661][ T3410] RBP: 00007fa1ea9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.317674][ T3410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.317687][ T3410] R13: 00007fa1eca16038 R14: 00007fa1eca15fa0 R15: 00007ffed2579cb8 [ 1161.317723][ T3410] [ 1161.542050][ T3405] __nla_validate_parse: 9 callbacks suppressed [ 1161.542074][ T3405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9706'. [ 1161.616381][ T3420] xt_hashlimit: size too large, truncated to 1048576 [ 1161.712591][ T3426] net_ratelimit: 12 callbacks suppressed [ 1161.712613][ T3426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.729300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.789015][ T3415] veth5: entered promiscuous mode [ 1161.844332][ T3415] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1161.889765][ T3405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1161.920624][ T3423] tipc: Enabled bearer , priority 0 [ 1161.971860][ T3433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9713'. [ 1161.996511][ T3422] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 1162.024298][ T3422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9712'. [ 1162.083249][ T3427] syzkaller0: entered promiscuous mode [ 1162.100255][ T3427] syzkaller0: entered allmulticast mode [ 1162.106928][ T3427] tipc: Resetting bearer [ 1162.142163][ T3413] tipc: Resetting bearer [ 1162.231443][ T3445] netlink: 'syz.2.9718': attribute type 1 has an invalid length. [ 1162.310415][ T3447] xt_hashlimit: size too large, truncated to 1048576 [ 1162.350297][ T3450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9718'. [ 1162.363576][ T3450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9718'. [ 1166.093069][ T3413] tipc: Disabling bearer [ 1166.104943][ T3445] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1166.206139][ T3454] netlink: 'syz.4.9720': attribute type 12 has an invalid length. [ 1166.231663][ T3454] netlink: 'syz.4.9720': attribute type 29 has an invalid length. [ 1166.267976][ T3454] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9720'. [ 1166.445555][ T3468] netlink: 'syz.3.9725': attribute type 1 has an invalid length. [ 1166.596056][ T3468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9725'. [ 1166.656034][ T3480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9727'. [ 1166.718032][ T3474] veth9: entered promiscuous mode [ 1166.749245][ T3474] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 1166.809723][ T3468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1167.011289][ T3490] Cannot find add_set index 0 as target [ 1167.051850][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1167.912353][ T3550] netlink: 'syz.1.9750': attribute type 8 has an invalid length. [ 1168.647543][ T3582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9760'. [ 1168.678368][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9761'. [ 1168.800382][ T3590] FAULT_INJECTION: forcing a failure. [ 1168.800382][ T3590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.823781][ T3590] CPU: 1 UID: 0 PID: 3590 Comm: syz.3.9763 Not tainted syzkaller #0 PREEMPT(full) [ 1168.823810][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1168.823823][ T3590] Call Trace: [ 1168.823832][ T3590] [ 1168.823841][ T3590] dump_stack_lvl+0xe8/0x150 [ 1168.823871][ T3590] should_fail_ex+0x412/0x560 [ 1168.823904][ T3590] _copy_to_iter+0x404/0x17d0 [ 1168.823930][ T3590] ? do_raw_spin_lock+0x12b/0x2f0 [ 1168.823970][ T3590] ? __pfx__copy_to_iter+0x10/0x10 [ 1168.823994][ T3590] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1168.824018][ T3590] ? lockdep_hardirqs_on+0x7a/0x110 [ 1168.824034][ T3590] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1168.824056][ T3590] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1168.824082][ T3590] __skb_datagram_iter+0xf8/0x980 [ 1168.824100][ T3590] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1168.824123][ T3590] skb_copy_datagram_iter+0xb5/0x240 [ 1168.824142][ T3590] netlink_recvmsg+0x2c3/0xa50 [ 1168.824166][ T3590] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1168.824185][ T3590] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1168.824217][ T3590] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1168.824238][ T3590] ? security_socket_recvmsg+0x7e/0x2c0 [ 1168.824254][ T3590] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1168.824269][ T3590] sock_recvmsg+0x172/0x1b0 [ 1168.824292][ T3590] ____sys_recvmsg+0x1e6/0x4a0 [ 1168.824315][ T3590] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1168.824342][ T3590] ? import_iovec+0x73/0xa0 [ 1168.824362][ T3590] ___sys_recvmsg+0x215/0x590 [ 1168.824382][ T3590] ? __pfx____sys_recvmsg+0x10/0x10 [ 1168.824401][ T3590] ? __fget_files+0x2a/0x420 [ 1168.824433][ T3590] ? __fget_files+0x3a0/0x420 [ 1168.824458][ T3590] do_recvmmsg+0x334/0x800 [ 1168.824479][ T3590] ? __pfx_do_recvmmsg+0x10/0x10 [ 1168.824504][ T3590] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1168.824533][ T3590] __x64_sys_recvmmsg+0x198/0x250 [ 1168.824551][ T3590] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1168.824573][ T3590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.824590][ T3590] do_syscall_64+0x174/0xf80 [ 1168.824604][ T3590] ? trace_irq_disable+0x3b/0x140 [ 1168.824626][ T3590] ? clear_bhb_loop+0x40/0x90 [ 1168.824644][ T3590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.824658][ T3590] RIP: 0033:0x7f1352b9ce59 [ 1168.824673][ T3590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.824686][ T3590] RSP: 002b:00007f135398a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1168.824704][ T3590] RAX: ffffffffffffffda RBX: 00007f1352e15fa0 RCX: 00007f1352b9ce59 [ 1168.824715][ T3590] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1168.824725][ T3590] RBP: 00007f135398a090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.824734][ T3590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.824743][ T3590] R13: 00007f1352e16038 R14: 00007f1352e15fa0 R15: 00007ffe15753258 [ 1168.824767][ T3590] [ 1169.151742][ T3596] syzkaller0: entered promiscuous mode [ 1169.157682][ T3596] syzkaller0: entered allmulticast mode [ 1169.389051][ T3605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1169.808421][ T3624] syzkaller0: entered promiscuous mode [ 1169.830444][ T3624] syzkaller0: entered allmulticast mode [ 1170.411499][ T3654] FAULT_INJECTION: forcing a failure. [ 1170.411499][ T3654] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.427852][ T3654] CPU: 1 UID: 0 PID: 3654 Comm: syz.0.9786 Not tainted syzkaller #0 PREEMPT(full) [ 1170.427881][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1170.427895][ T3654] Call Trace: [ 1170.427904][ T3654] [ 1170.427913][ T3654] dump_stack_lvl+0xe8/0x150 [ 1170.427944][ T3654] should_fail_ex+0x412/0x560 [ 1170.427972][ T3654] should_failslab+0xa8/0x100 [ 1170.428005][ T3654] ? skb_clone+0x212/0x3a0 [ 1170.428027][ T3654] kmem_cache_alloc_noprof+0x87/0x650 [ 1170.428056][ T3654] ? sk_filter_trim_cap+0x19e/0xce0 [ 1170.428106][ T3654] skb_clone+0x212/0x3a0 [ 1170.428131][ T3654] __netlink_deliver_tap+0x404/0x850 [ 1170.428166][ T3654] ? netlink_deliver_tap+0x2e/0x1b0 [ 1170.428206][ T3654] netlink_deliver_tap+0x19c/0x1b0 [ 1170.428240][ T3654] netlink_dump+0x8ed/0xe10 [ 1170.428285][ T3654] ? __pfx_netlink_dump+0x10/0x10 [ 1170.428331][ T3654] ? netlink_recvmsg+0x5d6/0xa50 [ 1170.428349][ T3654] ? kmem_cache_free+0x182/0x650 [ 1170.428386][ T3654] netlink_recvmsg+0x690/0xa50 [ 1170.428417][ T3654] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1170.428458][ T3654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1170.428492][ T3654] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1170.428519][ T3654] ? security_socket_recvmsg+0x7e/0x2c0 [ 1170.428541][ T3654] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1170.428564][ T3654] sock_recvmsg+0x172/0x1b0 [ 1170.428596][ T3654] ____sys_recvmsg+0x1e6/0x4a0 [ 1170.428633][ T3654] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1170.428672][ T3654] ? import_iovec+0x73/0xa0 [ 1170.428701][ T3654] ___sys_recvmsg+0x215/0x590 [ 1170.428730][ T3654] ? __pfx____sys_recvmsg+0x10/0x10 [ 1170.428757][ T3654] ? __fget_files+0x2a/0x420 [ 1170.428802][ T3654] ? __fget_files+0x3a0/0x420 [ 1170.428839][ T3654] do_recvmmsg+0x334/0x800 [ 1170.428871][ T3654] ? __pfx_do_recvmmsg+0x10/0x10 [ 1170.428907][ T3654] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1170.428951][ T3654] __x64_sys_recvmmsg+0x198/0x250 [ 1170.428978][ T3654] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1170.429012][ T3654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.429036][ T3654] do_syscall_64+0x174/0xf80 [ 1170.429057][ T3654] ? trace_irq_disable+0x3b/0x140 [ 1170.429088][ T3654] ? clear_bhb_loop+0x40/0x90 [ 1170.429115][ T3654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.429136][ T3654] RIP: 0033:0x7fa1ec79ce59 [ 1170.429156][ T3654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.429174][ T3654] RSP: 002b:00007fa1ea9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1170.429196][ T3654] RAX: ffffffffffffffda RBX: 00007fa1eca15fa0 RCX: 00007fa1ec79ce59 [ 1170.429211][ T3654] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1170.429224][ T3654] RBP: 00007fa1ea9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.429237][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.429249][ T3654] R13: 00007fa1eca16038 R14: 00007fa1eca15fa0 R15: 00007ffed2579cb8 [ 1170.429284][ T3654] [ 1170.861428][ T3660] netlink: 'syz.4.9790': attribute type 15 has an invalid length. [ 1170.973445][ T3668] netlink: 'syz.3.9792': attribute type 1 has an invalid length. [ 1170.982387][ T3668] netlink: 'syz.3.9792': attribute type 2 has an invalid length. [ 1170.994359][ T3668] openvswitch: netlink: Flow actions attr not present in new flow. [ 1171.226979][ T3679] siw: device registration error -23 [ 1171.272947][ T3683] FAULT_INJECTION: forcing a failure. [ 1171.272947][ T3683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.310168][ T3683] CPU: 0 UID: 0 PID: 3683 Comm: syz.3.9799 Not tainted syzkaller #0 PREEMPT(full) [ 1171.310198][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.310212][ T3683] Call Trace: [ 1171.310222][ T3683] [ 1171.310231][ T3683] dump_stack_lvl+0xe8/0x150 [ 1171.310263][ T3683] should_fail_ex+0x412/0x560 [ 1171.310292][ T3683] _copy_from_user+0x2d/0xb0 [ 1171.310318][ T3683] ___sys_sendmsg+0x1c6/0x360 [ 1171.310340][ T3683] ? __lock_acquire+0x6b5/0x2cf0 [ 1171.310367][ T3683] ? __pfx____sys_sendmsg+0x10/0x10 [ 1171.310419][ T3683] ? __fget_files+0x2a/0x420 [ 1171.310445][ T3683] ? __fget_files+0x3a0/0x420 [ 1171.310480][ T3683] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1171.310505][ T3683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1171.310538][ T3683] ? __pfx_ksys_write+0x10/0x10 [ 1171.310581][ T3683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.310604][ T3683] do_syscall_64+0x174/0xf80 [ 1171.310626][ T3683] ? trace_irq_disable+0x3b/0x140 [ 1171.310657][ T3683] ? clear_bhb_loop+0x40/0x90 [ 1171.310681][ T3683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.310702][ T3683] RIP: 0033:0x7f1352b9ce59 [ 1171.310722][ T3683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.310740][ T3683] RSP: 002b:00007f135398a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.310762][ T3683] RAX: ffffffffffffffda RBX: 00007f1352e15fa0 RCX: 00007f1352b9ce59 [ 1171.310778][ T3683] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1171.310791][ T3683] RBP: 00007f135398a090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.310803][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.310815][ T3683] R13: 00007f1352e16038 R14: 00007f1352e15fa0 R15: 00007ffe15753258 [ 1171.310849][ T3683] [ 1171.574146][ T3686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9800'. [ 1171.583472][ T3686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9800'. [ 1171.642816][ T3686] gretap1: entered promiscuous mode [ 1171.648754][ T3686] gretap1: entered allmulticast mode [ 1171.734667][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9803'. [ 1171.745464][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9803'. [ 1171.804295][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9806'. [ 1171.825224][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9806'. [ 1171.854084][ T3695] netlink: 'syz.0.9806': attribute type 21 has an invalid length. [ 1171.917968][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1171.951146][ T3702] netlink: 'syz.4.9809': attribute type 7 has an invalid length. [ 1171.959230][ T3702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1172.071537][ T3706] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9810'. [ 1172.137484][ T3708] netlink: 'syz.1.9811': attribute type 1 has an invalid length. [ 1172.434632][ T3729] syzkaller0: entered promiscuous mode [ 1172.451985][ T3729] syzkaller0: entered allmulticast mode [ 1172.473179][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9818'. [ 1172.526752][ T3735] netlink: 'syz.4.9818': attribute type 3 has an invalid length. [ 1172.535600][ T3735] netlink: 'syz.4.9818': attribute type 1 has an invalid length. [ 1172.545413][ T3735] netlink: 212 bytes leftover after parsing attributes in process `syz.4.9818'. [ 1172.556470][ T3735] NCSI netlink: No device for ifindex 813332851 [ 1172.661356][ T3732] bond5: Invalid ad_actor_system MAC address. [ 1172.679978][ T3732] bond5: option ad_actor_system: invalid value (1) [ 1172.693449][ T3732] bond5 (unregistering): Released all slaves [ 1172.850882][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1172.872141][ T3752] netlink: 'syz.2.9824': attribute type 1 has an invalid length. [ 1172.991006][ T3763] xt_hashlimit: size too large, truncated to 1048576 [ 1173.018050][ T3758] veth7: entered promiscuous mode [ 1173.045081][ T3758] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 1173.091097][ T3752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1173.291974][ T3778] netlink: 'syz.4.9832': attribute type 1 has an invalid length. [ 1173.331981][ T3778] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1173.378793][ T3779] bond5: (slave geneve3): making interface the new active one [ 1173.389305][ T3779] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1173.756000][ T3807] xt_hashlimit: size too large, truncated to 1048576 [ 1173.908046][ T3812] sit0: entered promiscuous mode [ 1173.944229][ T3812] netlink: 'syz.4.9846': attribute type 1 has an invalid length. [ 1174.530722][ T3829] tipc: Enabling of bearer rejected, failed to enable media [ 1174.992927][ T3857] netlink: 'syz.1.9861': attribute type 1 has an invalid length. [ 1175.191228][ T3863] FAULT_INJECTION: forcing a failure. [ 1175.191228][ T3863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.247998][ T3863] CPU: 1 UID: 0 PID: 3863 Comm: syz.2.9863 Not tainted syzkaller #0 PREEMPT(full) [ 1175.248028][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1175.248042][ T3863] Call Trace: [ 1175.248050][ T3863] [ 1175.248060][ T3863] dump_stack_lvl+0xe8/0x150 [ 1175.248091][ T3863] should_fail_ex+0x412/0x560 [ 1175.248120][ T3863] _copy_from_iter+0x1d3/0x1670 [ 1175.248147][ T3863] ? rcu_is_watching+0x15/0xb0 [ 1175.248180][ T3863] ? __pfx__copy_from_iter+0x10/0x10 [ 1175.248212][ T3863] ? netlink_sendmsg+0x650/0xb40 [ 1175.248232][ T3863] ? skb_put+0x11b/0x210 [ 1175.248267][ T3863] netlink_sendmsg+0x6c0/0xb40 [ 1175.248298][ T3863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.248322][ T3863] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1175.248354][ T3863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1175.248386][ T3863] ____sys_sendmsg+0x972/0x9f0 [ 1175.248412][ T3863] ? __might_fault+0xaf/0x130 [ 1175.248447][ T3863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.248479][ T3863] ? import_iovec+0x73/0xa0 [ 1175.248506][ T3863] ___sys_sendmsg+0x2a5/0x360 [ 1175.248526][ T3863] ? __lock_acquire+0x6b5/0x2cf0 [ 1175.248553][ T3863] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.248620][ T3863] ? __fget_files+0x2a/0x420 [ 1175.248646][ T3863] ? __fget_files+0x3a0/0x420 [ 1175.248681][ T3863] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1175.248706][ T3863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1175.248738][ T3863] ? __pfx_ksys_write+0x10/0x10 [ 1175.248778][ T3863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.248802][ T3863] do_syscall_64+0x174/0xf80 [ 1175.248824][ T3863] ? trace_irq_disable+0x3b/0x140 [ 1175.248854][ T3863] ? clear_bhb_loop+0x40/0x90 [ 1175.248881][ T3863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.248902][ T3863] RIP: 0033:0x7f7d1159ce59 [ 1175.248921][ T3863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.248939][ T3863] RSP: 002b:00007f7d1249d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.248962][ T3863] RAX: ffffffffffffffda RBX: 00007f7d11815fa0 RCX: 00007f7d1159ce59 [ 1175.248978][ T3863] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1175.248991][ T3863] RBP: 00007f7d1249d090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.249003][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.249015][ T3863] R13: 00007f7d11816038 R14: 00007f7d11815fa0 R15: 00007fff3236cdf8 [ 1175.249049][ T3863] [ 1176.603575][ T3932] netlink: 'syz.1.9887': attribute type 1 has an invalid length. [ 1176.664438][ T3933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.855625][ T3941] __nla_validate_parse: 9 callbacks suppressed [ 1176.855651][ T3941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9892'. [ 1177.122207][ T3961] FAULT_INJECTION: forcing a failure. [ 1177.122207][ T3961] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.137393][ T3961] CPU: 0 UID: 0 PID: 3961 Comm: syz.0.9895 Not tainted syzkaller #0 PREEMPT(full) [ 1177.137423][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1177.137442][ T3961] Call Trace: [ 1177.137451][ T3961] [ 1177.137461][ T3961] dump_stack_lvl+0xe8/0x150 [ 1177.137491][ T3961] should_fail_ex+0x412/0x560 [ 1177.137519][ T3961] should_failslab+0xa8/0x100 [ 1177.137555][ T3961] __kmalloc_cache_noprof+0x88/0x660 [ 1177.137586][ T3961] ? sctp_add_bind_addr+0x8c/0x370 [ 1177.137644][ T3961] ? __ipv6_addr_type+0x247/0x2f0 [ 1177.137673][ T3961] sctp_add_bind_addr+0x8c/0x370 [ 1177.137701][ T3961] sctp_bind_addr_copy+0xb3/0x3c0 [ 1177.137724][ T3961] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1177.137760][ T3961] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1177.137797][ T3961] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1177.137825][ T3961] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1177.137852][ T3961] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1177.137877][ T3961] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1177.137906][ T3961] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1177.137936][ T3961] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1177.137965][ T3961] sctp_sendmsg+0x1576/0x2c50 [ 1177.138008][ T3961] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1177.138038][ T3961] ? aa_sk_perm+0x6d5/0x900 [ 1177.138066][ T3961] ? __might_fault+0xaf/0x130 [ 1177.138100][ T3961] ? __pfx_aa_sk_perm+0x10/0x10 [ 1177.138136][ T3961] ? sock_rps_record_flow+0x19/0x350 [ 1177.138167][ T3961] ? inet_sendmsg+0x2f4/0x370 [ 1177.138190][ T3961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1177.138222][ T3961] ____sys_sendmsg+0x80a/0x9f0 [ 1177.138254][ T3961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1177.138285][ T3961] ? import_iovec+0x73/0xa0 [ 1177.138315][ T3961] ___sys_sendmsg+0x2a5/0x360 [ 1177.138335][ T3961] ? __lock_acquire+0x6b5/0x2cf0 [ 1177.138363][ T3961] ? __pfx____sys_sendmsg+0x10/0x10 [ 1177.138447][ T3961] ? __fget_files+0x2a/0x420 [ 1177.138472][ T3961] ? __fget_files+0x3a0/0x420 [ 1177.138508][ T3961] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1177.138533][ T3961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1177.138565][ T3961] ? __pfx_ksys_write+0x10/0x10 [ 1177.138602][ T3961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.138634][ T3961] do_syscall_64+0x174/0xf80 [ 1177.138657][ T3961] ? trace_irq_disable+0x3b/0x140 [ 1177.138687][ T3961] ? clear_bhb_loop+0x40/0x90 [ 1177.138713][ T3961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.138734][ T3961] RIP: 0033:0x7fa1ec79ce59 [ 1177.138754][ T3961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.138773][ T3961] RSP: 002b:00007fa1ea9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1177.138794][ T3961] RAX: ffffffffffffffda RBX: 00007fa1eca15fa0 RCX: 00007fa1ec79ce59 [ 1177.138810][ T3961] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1177.138823][ T3961] RBP: 00007fa1ea9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.138836][ T3961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.138848][ T3961] R13: 00007fa1eca16038 R14: 00007fa1eca15fa0 R15: 00007ffed2579cb8 [ 1177.138880][ T3961] [ 1177.180426][ T3959] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9897'. [ 1177.460486][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1177.496344][ T3959] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9897'. [ 1177.604171][ T3971] validate_nla: 1 callbacks suppressed [ 1177.604200][ T3971] netlink: 'syz.4.9899': attribute type 61 has an invalid length. [ 1177.705608][ T3977] netlink: 'syz.0.9900': attribute type 1 has an invalid length. [ 1177.961577][ T3990] tipc: Enabling not permitted [ 1177.967623][ T3990] tipc: Enabling of bearer rejected, failed to enable media [ 1178.168358][ T3996] FAULT_INJECTION: forcing a failure. [ 1178.168358][ T3996] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.183709][ T3996] CPU: 0 UID: 0 PID: 3996 Comm: syz.1.9908 Not tainted syzkaller #0 PREEMPT(full) [ 1178.183740][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1178.183754][ T3996] Call Trace: [ 1178.183763][ T3996] [ 1178.183772][ T3996] dump_stack_lvl+0xe8/0x150 [ 1178.183805][ T3996] should_fail_ex+0x412/0x560 [ 1178.183835][ T3996] should_failslab+0xa8/0x100 [ 1178.183870][ T3996] __kmalloc_cache_noprof+0x88/0x660 [ 1178.183901][ T3996] ? sctp_transport_new+0x7e/0x620 [ 1178.183939][ T3996] sctp_transport_new+0x7e/0x620 [ 1178.183972][ T3996] sctp_assoc_add_peer+0x259/0x13b0 [ 1178.184012][ T3996] sctp_sendmsg+0x2371/0x2c50 [ 1178.184056][ T3996] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1178.184089][ T3996] ? __might_fault+0xaf/0x130 [ 1178.184123][ T3996] ? __pfx_aa_sk_perm+0x10/0x10 [ 1178.184158][ T3996] ? sock_rps_record_flow+0x19/0x350 [ 1178.184187][ T3996] ? inet_sendmsg+0x2f4/0x370 [ 1178.184210][ T3996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1178.184242][ T3996] ____sys_sendmsg+0x80a/0x9f0 [ 1178.184275][ T3996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1178.184307][ T3996] ? import_iovec+0x73/0xa0 [ 1178.184337][ T3996] ___sys_sendmsg+0x2a5/0x360 [ 1178.184357][ T3996] ? __lock_acquire+0x6b5/0x2cf0 [ 1178.184385][ T3996] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.184447][ T3996] ? __fget_files+0x2a/0x420 [ 1178.184526][ T3996] ? __fget_files+0x3a0/0x420 [ 1178.184563][ T3996] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1178.184594][ T3996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1178.184627][ T3996] ? __pfx_ksys_write+0x10/0x10 [ 1178.184666][ T3996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.184689][ T3996] do_syscall_64+0x174/0xf80 [ 1178.184712][ T3996] ? trace_irq_disable+0x3b/0x140 [ 1178.184742][ T3996] ? clear_bhb_loop+0x40/0x90 [ 1178.184767][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.184789][ T3996] RIP: 0033:0x7f92f1d9ce59 [ 1178.184809][ T3996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.184826][ T3996] RSP: 002b:00007f92f2cac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.184848][ T3996] RAX: ffffffffffffffda RBX: 00007f92f2015fa0 RCX: 00007f92f1d9ce59 [ 1178.184864][ T3996] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1178.184877][ T3996] RBP: 00007f92f2cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.184890][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.184901][ T3996] R13: 00007f92f2016038 R14: 00007f92f2015fa0 R15: 00007fff47152ab8 [ 1178.184936][ T3996] [ 1178.965182][ T4023] netlink: 'syz.0.9918': attribute type 1 has an invalid length. [ 1179.430442][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9926'. [ 1179.528554][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 1179.997193][ T4074] Cannot find del_set index 4 as target [ 1180.184147][ T4083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9938'. [ 1180.305312][ T4090] netlink: 'syz.0.9941': attribute type 12 has an invalid length. [ 1180.311150][ T4091] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9942'. [ 1180.323270][ T4090] netlink: 'syz.0.9941': attribute type 29 has an invalid length. [ 1180.345504][ T4090] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9941'. [ 1180.367571][ T4090] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9941'. [ 1180.780174][ T4119] xt_ecn: cannot match TCP bits for non-tcp packets [ 1181.172300][ T4137] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.9957'. [ 1181.195865][ T4137] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1181.226730][ T4137] netlink: 'syz.3.9957': attribute type 21 has an invalid length. [ 1181.416190][ T4155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1181.443194][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9959'. [ 1181.457967][ T4156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1181.533237][ T4155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1181.607629][T17321] Bluetooth: hci4: command 0x0406 tx timeout [ 1181.701273][ T4162] sctp: [Deprecated]: syz.3.9962 (pid 4162) Use of int in max_burst socket option. [ 1181.701273][ T4162] Use struct sctp_assoc_value instead [ 1181.821990][ T4172] openvswitch: netlink: Message has 4 unknown bytes. [ 1182.042837][ T4186] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1182.095256][ T5759] »»»»»» speed is unknown, defaulting to 1000 [ 1182.608626][ T4223] FAULT_INJECTION: forcing a failure. [ 1182.608626][ T4223] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.623494][ T4223] CPU: 1 UID: 0 PID: 4223 Comm: syz.4.9978 Not tainted syzkaller #0 PREEMPT(full) [ 1182.623528][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1182.623541][ T4223] Call Trace: [ 1182.623550][ T4223] [ 1182.623568][ T4223] dump_stack_lvl+0xe8/0x150 [ 1182.623599][ T4223] should_fail_ex+0x412/0x560 [ 1182.623628][ T4223] should_failslab+0xa8/0x100 [ 1182.623664][ T4223] __kmalloc_cache_noprof+0x88/0x660 [ 1182.623695][ T4223] ? sctp_transport_new+0x7e/0x620 [ 1182.623732][ T4223] sctp_transport_new+0x7e/0x620 [ 1182.623765][ T4223] sctp_assoc_add_peer+0x259/0x13b0 [ 1182.623806][ T4223] sctp_sendmsg+0x2371/0x2c50 [ 1182.623850][ T4223] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1182.623882][ T4223] ? __might_fault+0xaf/0x130 [ 1182.623917][ T4223] ? __pfx_aa_sk_perm+0x10/0x10 [ 1182.623949][ T4223] ? sock_rps_record_flow+0x19/0x350 [ 1182.623979][ T4223] ? inet_sendmsg+0x2f4/0x370 [ 1182.624001][ T4223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1182.624034][ T4223] ____sys_sendmsg+0x80a/0x9f0 [ 1182.624065][ T4223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1182.624098][ T4223] ? import_iovec+0x73/0xa0 [ 1182.624127][ T4223] ___sys_sendmsg+0x2a5/0x360 [ 1182.624148][ T4223] ? __lock_acquire+0x6b5/0x2cf0 [ 1182.624175][ T4223] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.624236][ T4223] ? __fget_files+0x2a/0x420 [ 1182.624260][ T4223] ? __fget_files+0x3a0/0x420 [ 1182.624297][ T4223] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1182.624322][ T4223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1182.624355][ T4223] ? __pfx_ksys_write+0x10/0x10 [ 1182.624393][ T4223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.624417][ T4223] do_syscall_64+0x174/0xf80 [ 1182.624439][ T4223] ? trace_irq_disable+0x3b/0x140 [ 1182.624469][ T4223] ? clear_bhb_loop+0x40/0x90 [ 1182.624494][ T4223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.624515][ T4223] RIP: 0033:0x7f31d579ce59 [ 1182.624535][ T4223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.624553][ T4223] RSP: 002b:00007f31d6735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.624583][ T4223] RAX: ffffffffffffffda RBX: 00007f31d5a15fa0 RCX: 00007f31d579ce59 [ 1182.624598][ T4223] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1182.624611][ T4223] RBP: 00007f31d6735090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.624624][ T4223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1182.624636][ T4223] R13: 00007f31d5a16038 R14: 00007f31d5a15fa0 R15: 00007ffda17b7a38 [ 1182.624671][ T4223] [ 1182.961362][ T4228] netlink: 'syz.1.9980': attribute type 1 has an invalid length. [ 1183.097314][ T4228] __nla_validate_parse: 1 callbacks suppressed [ 1183.097335][ T4228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9980'. [ 1183.123548][ T4231] veth5: entered promiscuous mode [ 1183.132553][ T4231] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 1183.201465][ T4228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1183.222111][ T4239] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9983'. [ 1183.267035][ T4239] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9983'. [ 1183.308291][ T4239] FAULT_INJECTION: forcing a failure. [ 1183.308291][ T4239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.321723][ T4239] CPU: 1 UID: 0 PID: 4239 Comm: syz.4.9983 Not tainted syzkaller #0 PREEMPT(full) [ 1183.321751][ T4239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1183.321765][ T4239] Call Trace: [ 1183.321774][ T4239] [ 1183.321783][ T4239] dump_stack_lvl+0xe8/0x150 [ 1183.321813][ T4239] should_fail_ex+0x412/0x560 [ 1183.321841][ T4239] _copy_from_user+0x2d/0xb0 [ 1183.321866][ T4239] ___sys_sendmsg+0x1c6/0x360 [ 1183.321887][ T4239] ? __lock_acquire+0x6b5/0x2cf0 [ 1183.321913][ T4239] ? __pfx____sys_sendmsg+0x10/0x10 [ 1183.321970][ T4239] ? __fget_files+0x2a/0x420 [ 1183.321995][ T4239] ? __fget_files+0x3a0/0x420 [ 1183.322031][ T4239] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1183.322056][ T4239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1183.322088][ T4239] ? __pfx_ksys_write+0x10/0x10 [ 1183.322126][ T4239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.322150][ T4239] do_syscall_64+0x174/0xf80 [ 1183.322172][ T4239] ? trace_irq_disable+0x3b/0x140 [ 1183.322202][ T4239] ? clear_bhb_loop+0x40/0x90 [ 1183.322229][ T4239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.322250][ T4239] RIP: 0033:0x7f31d579ce59 [ 1183.322271][ T4239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.322288][ T4239] RSP: 002b:00007f31d6735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.322310][ T4239] RAX: ffffffffffffffda RBX: 00007f31d5a15fa0 RCX: 00007f31d579ce59 [ 1183.322325][ T4239] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 1183.322338][ T4239] RBP: 00007f31d6735090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.322350][ T4239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.322362][ T4239] R13: 00007f31d5a16038 R14: 00007f31d5a15fa0 R15: 00007ffda17b7a38 [ 1183.322396][ T4239] [ 1183.661598][ T4249] netlink: 'syz.1.9990': attribute type 1 has an invalid length. [ 1183.672783][ T4249] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9990'. [ 1183.821405][ T4257] netlink: 'syz.2.9992': attribute type 39 has an invalid length. [ 1183.877523][ T4262] netlink: 'syz.1.9991': attribute type 8 has an invalid length. [ 1184.092872][ T4272] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9993'. [ 1184.536539][ T4280] syzkaller0: entered promiscuous mode [ 1184.558111][ T4280] syzkaller0: entered allmulticast mode [ 1184.572750][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10000'. [ 1184.793883][ T4302] xt_bpf: check failed: parse error [ 1185.514384][ T4330] netlink: 'syz.1.10006': attribute type 8 has an invalid length. [ 1189.063965][T31064] batadv1: left allmulticast mode [ 1189.076292][T31064] batadv1: left promiscuous mode [ 1189.103593][T31064] bridge0: port 3(batadv1) entered disabled state [ 1189.142857][T31064] bridge_slave_1: left allmulticast mode [ 1189.164435][T31064] bridge_slave_1: left promiscuous mode [ 1189.183778][ T4334] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10007'. [ 1189.193375][T31064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.206971][ T4336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10009'. [ 1189.223231][ T4337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10009'. [ 1189.255320][T31064] bridge_slave_0: left allmulticast mode [ 1189.285657][T31064] bridge_slave_0: left promiscuous mode [ 1189.313653][T31064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.344051][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10012'. [ 1189.490944][ T4359] netlink: 'syz.2.10011': attribute type 2 has an invalid length. [ 1189.615643][T31064] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1189.868481][ T4374] netlink: 'syz.0.10019': attribute type 20 has an invalid length. [ 1189.887646][ T4374] IPv6: NLM_F_CREATE should be specified when creating new route [ 1190.104448][T31064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.115772][T31064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.126507][T31064] bond0 (unregistering): Released all slaves [ 1190.144933][T31064] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1190.154248][T31064] bond1 (unregistering): Released all slaves [ 1190.174872][T31064] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1190.188910][T31064] bond2 (unregistering): Released all slaves [ 1190.205928][T31064] bond3 (unregistering): Released all slaves [ 1190.223917][T31064] bond4 (unregistering): Released all slaves [ 1190.254184][T31064] bond5 (unregistering): (slave lo): Releasing backup interface [ 1190.263324][T31064] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1190.280709][T31064] bond5 (unregistering): Released all slaves [ 1190.297375][T31064] bond6 (unregistering): Released all slaves [ 1190.314338][T31064] bond7 (unregistering): Released all slaves [ 1190.359294][ T4371] netlink: 'syz.4.10018': attribute type 12 has an invalid length. [ 1190.368252][ T4371] netlink: 'syz.4.10018': attribute type 29 has an invalid length. [ 1190.376406][ T4371] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10018'. [ 1190.454713][T31064] : left promiscuous mode [ 1190.625763][T31064] tipc: Left network mode [ 1190.909295][ T4379] syzkaller0: entered promiscuous mode [ 1190.929110][ T4379] syzkaller0: entered allmulticast mode [ 1190.998233][ T4391] tipc: Started in network mode [ 1191.011151][ T4391] tipc: Node identity ca06a9b9ecfc, cluster identity 4711 [ 1191.061694][ T4391] tipc: Enabled bearer , priority 0 [ 1191.101961][ T4395] netlink: 'syz.1.10026': attribute type 1 has an invalid length. [ 1191.208010][T31064] IPVS: stopping backup sync thread 31416 ... [ 1195.563678][ T4391] tipc: Resetting bearer [ 1195.574304][ T4398] syzkaller0: entered promiscuous mode [ 1195.582629][ T4398] syzkaller0: entered allmulticast mode [ 1195.590294][ T4383] tipc: Resetting bearer [ 1195.649106][ T4383] tipc: Disabling bearer [ 1195.746529][ T5769] tipc: Node number set to 653961657 [ 1195.827948][ T4445] macvtap0: entered allmulticast mode [ 1195.843455][ T4445] veth0_macvtap: entered allmulticast mode [ 1195.859350][ T4445] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1195.898138][ T4448] x_tables: duplicate underflow at hook 2 [ 1196.183427][ T4461] xt_connbytes: Forcing CT accounting to be enabled [ 1196.669395][ T4481] syzkaller0: entered promiscuous mode [ 1196.689457][ T4481] syzkaller0: entered allmulticast mode [ 1197.764210][ T4527] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1200.826566][ T4510] netlink: 'syz.4.10050': attribute type 2 has an invalid length. [ 1201.035789][ T4538] netlink: 'syz.0.10057': attribute type 12 has an invalid length. [ 1201.060142][ T4538] netlink: 'syz.0.10057': attribute type 29 has an invalid length. [ 1201.091050][ T4538] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10057'. [ 1201.122682][ T4538] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10057'. [ 1201.180554][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10059'. [ 1201.243215][ T4546] netlink: 'syz.3.10061': attribute type 1 has an invalid length. [ 1201.409474][ T4546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10061'. [ 1201.460522][T31064] hsr_slave_0: left promiscuous mode [ 1201.474632][T31064] hsr_slave_1: left promiscuous mode [ 1201.501173][T31064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.533326][T31064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.546406][T31064] veth1_vlan: left allmulticast mode [ 1201.816366][T31064] team0 (unregistering): Port device team_slave_1 removed [ 1201.843024][T31064] team0 (unregistering): Port device team_slave_0 removed [ 1202.044212][ T4551] veth11: entered promiscuous mode [ 1202.055858][ T4551] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 1202.089795][ T4546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1202.266088][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10067'. [ 1202.308474][ T4578] xt_hashlimit: size too large, truncated to 1048576 [ 1202.325196][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10069'. [ 1202.349688][ T4581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10069'. [ 1202.466989][ T4579] syzkaller0: entered promiscuous mode [ 1202.473472][ T4579] syzkaller0: entered allmulticast mode [ 1202.841153][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10075'. [ 1202.892197][ T4600] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10076'. [ 1202.947089][ T4603] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10076'. [ 1206.471479][ T137] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.480567][ T137] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.543851][ T4589] vlan2: entered allmulticast mode [ 1206.550417][ T4589] bond0: entered allmulticast mode [ 1206.555655][ T4589] bond_slave_0: entered allmulticast mode [ 1206.576448][ T4589] bond_slave_1: entered allmulticast mode [ 1206.583118][ T4589] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1206.591223][ T4589] team0: entered allmulticast mode [ 1206.597088][ T4589] team_slave_0: entered allmulticast mode [ 1206.603893][ T4589] team_slave_1: entered allmulticast mode [ 1206.646968][ T137] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.658739][ T137] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.702321][T31064] IPVS: stop unused estimator thread 0... [ 1206.759608][ T4618] netlink: 'syz.0.10079': attribute type 1 has an invalid length. [ 1206.929533][ T4618] __nla_validate_parse: 1 callbacks suppressed [ 1206.929556][ T4618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10079'. [ 1207.001961][ T4630] IPVS: Scheduler module ip_vs_sip not found [ 1207.057084][ T4629] veth5: entered promiscuous mode [ 1207.094543][ T4629] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1207.104750][ T4647] netlink: 'syz.3.10081': attribute type 1 has an invalid length. [ 1207.150089][ T4618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1207.299485][ T4654] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10086'. [ 1207.345391][ T4654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10086'. [ 1207.551166][ T4664] netlink: 'syz.4.10089': attribute type 19 has an invalid length. [ 1207.552034][ T4668] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1207.643935][ T4664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1207.725263][ T4670] tipc: Started in network mode [ 1207.732269][ T4670] tipc: Node identity ac14142f, cluster identity 4711 [ 1207.744227][ T4670] tipc: Enabling of bearer rejected, failed to enable media [ 1207.916632][ T4683] netlink: 'syz.0.10096': attribute type 1 has an invalid length. [ 1207.973701][ T4679] erspan0: entered promiscuous mode [ 1207.981383][ T4679] vlan2: entered promiscuous mode [ 1208.015675][ T4683] veth7: entered promiscuous mode [ 1208.025822][ T4683] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 1208.039405][ T4683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10096'. [ 1208.061676][ T4683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1208.139591][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10099'. [ 1208.557979][ T4711] netlink: 'syz.0.10107': attribute type 1 has an invalid length. [ 1208.916987][ T4733] netlink: 'syz.3.10114': attribute type 1 has an invalid length. [ 1208.953409][ T4739] netlink: 'syz.3.10114': attribute type 1 has an invalid length. [ 1208.964289][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10115'. [ 1208.993928][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10115'. [ 1209.014540][ T4736] netlink: 'syz.0.10115': attribute type 3 has an invalid length. [ 1209.048178][ T4743] netlink: 'syz.1.10116': attribute type 2 has an invalid length. [ 1209.066784][ T4743] bridge0: mtu less than device minimum [ 1209.105850][ T4748] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 1209.488266][ T4773] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10126'. [ 1209.508634][ T4773] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10126'. [ 1209.523458][ T4770] tipc: Enabling of bearer rejected, media not registered [ 1209.590023][ T4776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10128'. [ 1209.645088][ T4778] netlink: 'syz.1.10129': attribute type 4 has an invalid length. [ 1210.046736][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808f043000: rx timeout, send abort [ 1210.171400][ T4804] veth9: entered promiscuous mode [ 1210.185460][ T4804] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 1210.255690][ T4796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1210.546872][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808f042800: rx timeout, send abort [ 1210.555437][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808f043000: abort rx timeout. Force session deactivation [ 1211.044529][ T4850] veth9: entered promiscuous mode [ 1211.055192][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808f042800: abort rx timeout. Force session deactivation [ 1211.075162][ T4850] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 1211.120188][ T4852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1211.345636][ T4868] syzkaller0: entered promiscuous mode [ 1211.366647][ T4868] syzkaller0: entered allmulticast mode [ 1211.403517][ T4868] tipc: Enabled bearer , priority 0 [ 1211.416466][ T4867] tipc: Resetting bearer [ 1211.455169][ T4867] tipc: Disabling bearer [ 1211.989367][ T4890] __nla_validate_parse: 6 callbacks suppressed [ 1211.989393][ T4890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10164'. [ 1212.023545][ T4890] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10164'. [ 1212.061974][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10164'. [ 1212.264741][ T4906] validate_nla: 3 callbacks suppressed [ 1212.264761][ T4906] netlink: 'syz.2.10169': attribute type 21 has an invalid length. [ 1212.290855][ T4895] bond0: entered promiscuous mode [ 1212.298502][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10169'. [ 1212.301738][ T4895] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1212.319916][ T4906] netlink: 'syz.2.10169': attribute type 3 has an invalid length. [ 1212.321960][ T4895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.375727][T31064] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1212.389328][T31064] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1212.418315][T31064] bond1: active interface up! [ 1212.526231][ T4920] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10171'. [ 1212.545601][ T1019] bond5: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 1212.569229][ T1019] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1212.589450][ T4921] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10171'. [ 1212.603063][ T1019] bond5: active interface up! [ 1212.615608][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10171'. [ 1212.657817][ T4910] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1212.716714][ T4912] syzkaller0: entered promiscuous mode [ 1212.734856][ T4912] syzkaller0: entered allmulticast mode [ 1212.764887][ T4907] tipc: Enabled bearer , priority 0 [ 1212.851450][ T4900] tipc: Resetting bearer [ 1212.925921][ T4900] tipc: Disabling bearer [ 1212.955147][ T4911] lo speed is unknown, defaulting to 1000 [ 1212.969046][ T12] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1213.001123][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1213.081921][ T12] bond4: active interface up! [ 1213.170091][ T9638] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1213.192751][ T9638] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1213.219980][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 1213.240379][ T9638] bond3: active interface up! [ 1213.381007][ T4949] netlink: 'syz.3.10180': attribute type 4 has an invalid length. [ 1213.390766][ T4949] netlink: 'syz.3.10180': attribute type 1 has an invalid length. [ 1213.402543][ T4949] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10180'. [ 1213.450411][ T4950] netlink: 'syz.3.10180': attribute type 8 has an invalid length. [ 1213.550731][ T4960] xt_hashlimit: size too large, truncated to 1048576 [ 1213.652693][ T4911] »»»»»» speed is unknown, defaulting to 1000 [ 1213.664567][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1213.670365][ T4911] xfrm0 speed is unknown, defaulting to 1000 [ 1213.808456][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1214.138185][ T4982] syzkaller0: entered promiscuous mode [ 1214.143800][ T4982] syzkaller0: entered allmulticast mode [ 1214.295726][ T4975] tipc: Enabled bearer , priority 0 [ 1214.426437][ T5004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1214.448157][ T4974] tipc: Resetting bearer [ 1214.564243][ T4974] tipc: Disabling bearer [ 1216.231242][T20038] IPVS: starting estimator thread 0... [ 1216.347313][ T5089] IPVS: using max 27 ests per chain, 64800 per kthread [ 1217.025252][ T5130] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1217.039575][ T5130] bond0: (slave lo): Error: Device can not be enslaved while up [ 1217.062340][ T5133] __nla_validate_parse: 10 callbacks suppressed [ 1217.062362][ T5133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10238'. [ 1217.499864][ T5156] netlink: 'syz.0.10246': attribute type 4 has an invalid length. [ 1217.537594][ T5151] bond6: entered promiscuous mode [ 1217.544166][ T5151] bond6: entered allmulticast mode [ 1217.553407][ T5151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1217.573420][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.583506][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.594598][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.604562][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.615525][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.626516][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.636536][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.646645][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.657104][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1217.781219][ T5165] xt_hashlimit: size too large, truncated to 1048576 [ 1218.826829][ T5222] geneve2: entered promiscuous mode [ 1218.836507][ T136] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 46549 - 0 [ 1218.971056][ T5223] bond7: option mode: invalid value (133) [ 1218.999236][ T5223] bond7 (unregistering): Released all slaves [ 1219.089247][ T136] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 46549 - 0 [ 1219.113923][ T136] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 46549 - 0 [ 1219.134573][ T136] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 46549 - 0 [ 1219.464394][ T5247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1219.486502][ T5246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1219.744071][ T5280] netlink: 'syz.1.10285': attribute type 8 has an invalid length. [ 1220.418841][ T5323] xt_hashlimit: size too large, truncated to 1048576 [ 1220.569290][ T5335] netlink: 'syz.0.10299': attribute type 8 has an invalid length. [ 1220.781023][ T5345] netlink: 'syz.1.10303': attribute type 8 has an invalid length. [ 1221.485729][ T5377] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 1221.688250][ T5388] Cannot find del_set index 4 as target [ 1222.138204][ T5412] __nla_validate_parse: 38 callbacks suppressed [ 1222.138225][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10326'. [ 1222.820599][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10339'. [ 1222.983208][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10342'. [ 1223.377341][ T5478] openvswitch: netlink: IP tunnel dst address not specified [ 1223.423090][ T5468] netlink: 'syz.0.10344': attribute type 12 has an invalid length. [ 1223.433487][ T5468] netlink: 'syz.0.10344': attribute type 29 has an invalid length. [ 1223.447839][ T5468] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10344'. [ 1223.468018][ T5468] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10344'. [ 1224.155143][ T5495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10353'. [ 1224.308943][ T5502] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10356'. [ 1224.358150][ T5499] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1224.377866][ T5508] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1224.385824][ T5507] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10356'. [ 1224.398782][ T5499] bridge0: port 1(bond7) entered blocking state [ 1224.420266][ T5499] bridge0: port 1(bond7) entered disabled state [ 1224.464188][ T5499] bond7: entered allmulticast mode [ 1224.485936][ T5499] bond7: entered promiscuous mode [ 1224.721542][ T5518] netlink: 'syz.0.10359': attribute type 12 has an invalid length. [ 1224.731405][ T5518] netlink: 'syz.0.10359': attribute type 29 has an invalid length. [ 1224.741151][ T5518] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10359'. [ 1224.752090][ T5518] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10359'. [ 1224.945419][ T5529] FAULT_INJECTION: forcing a failure. [ 1224.945419][ T5529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.984282][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.1.10363 Not tainted syzkaller #0 PREEMPT(full) [ 1224.984311][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1224.984325][ T5529] Call Trace: [ 1224.984334][ T5529] [ 1224.984343][ T5529] dump_stack_lvl+0xe8/0x150 [ 1224.984374][ T5529] should_fail_ex+0x412/0x560 [ 1224.984402][ T5529] _copy_from_iter+0x4ff/0x1670 [ 1224.984438][ T5529] ? __pfx__copy_from_iter+0x10/0x10 [ 1224.984470][ T5529] ? netlink_sendmsg+0x650/0xb40 [ 1224.984489][ T5529] ? skb_put+0x11b/0x210 [ 1224.984528][ T5529] netlink_sendmsg+0x6c0/0xb40 [ 1224.984559][ T5529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1224.984584][ T5529] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1224.984617][ T5529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1224.984648][ T5529] ____sys_sendmsg+0x972/0x9f0 [ 1224.984679][ T5529] ? __might_fault+0xaf/0x130 [ 1224.984714][ T5529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1224.984746][ T5529] ? import_iovec+0x73/0xa0 [ 1224.984775][ T5529] ___sys_sendmsg+0x2a5/0x360 [ 1224.984795][ T5529] ? __lock_acquire+0x6b5/0x2cf0 [ 1224.984822][ T5529] ? __pfx____sys_sendmsg+0x10/0x10 [ 1224.984850][ T5529] ? kstrtouint+0x6e/0xe0 [ 1224.984910][ T5529] ? __fget_files+0x2a/0x420 [ 1224.984935][ T5529] ? __fget_files+0x3a0/0x420 [ 1224.984971][ T5529] __sys_sendmmsg+0x27c/0x4e0 [ 1224.985000][ T5529] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1224.985019][ T5529] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1224.985071][ T5529] ? ksys_write+0x242/0x270 [ 1224.985104][ T5529] ? __pfx_ksys_write+0x10/0x10 [ 1224.985140][ T5529] __x64_sys_sendmmsg+0xa0/0xc0 [ 1224.985163][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.985185][ T5529] do_syscall_64+0x174/0xf80 [ 1224.985206][ T5529] ? trace_irq_disable+0x3b/0x140 [ 1224.985238][ T5529] ? clear_bhb_loop+0x40/0x90 [ 1224.985264][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.985286][ T5529] RIP: 0033:0x7f92f1d9ce59 [ 1224.985306][ T5529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.985325][ T5529] RSP: 002b:00007f92f2cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1224.985347][ T5529] RAX: ffffffffffffffda RBX: 00007f92f2015fa0 RCX: 00007f92f1d9ce59 [ 1224.985363][ T5529] RDX: 0492492492492856 RSI: 0000200000000140 RDI: 0000000000000006 [ 1224.985377][ T5529] RBP: 00007f92f2cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.985390][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.985403][ T5529] R13: 00007f92f2016038 R14: 00007f92f2015fa0 R15: 00007fff47152ab8 [ 1224.985436][ T5529] [ 1225.540646][ T5541] netlink: 'syz.1.10367': attribute type 1 has an invalid length. [ 1225.668268][ T5546] netlink: 'syz.0.10371': attribute type 12 has an invalid length. [ 1225.678020][ T5546] netlink: 'syz.0.10371': attribute type 29 has an invalid length. [ 1225.988421][ T5563] bond0: entered promiscuous mode [ 1225.998606][ T5563] bond_slave_0: entered promiscuous mode [ 1226.011754][ T5563] bond_slave_1: entered promiscuous mode [ 1226.025200][ T5563] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1226.054221][ T5563] team0: entered promiscuous mode [ 1226.065332][ T5563] team_slave_0: entered promiscuous mode [ 1226.072055][ T5563] team_slave_1: entered promiscuous mode [ 1226.082046][ T5563] batadv0: entered promiscuous mode [ 1226.096525][ T5568] netlink: 'syz.1.10377': attribute type 21 has an invalid length. [ 1226.105234][ T5563] debugfs: 'hsr1' already exists in 'hsr' [ 1226.112544][ T5563] Cannot create hsr debugfs directory [ 1226.119789][ T5563] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1226.128598][ T5563] bond0: left promiscuous mode [ 1226.133601][ T5563] bond_slave_0: left promiscuous mode [ 1226.141142][ T5563] bond_slave_1: left promiscuous mode [ 1226.146911][ T5563] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1226.156118][ T5563] team0: left promiscuous mode [ 1226.162884][ T5563] team_slave_0: left promiscuous mode [ 1226.169332][ T5563] team_slave_1: left promiscuous mode [ 1226.176716][ T5563] batadv0: left promiscuous mode [ 1226.210926][ T5568] netlink: 'syz.1.10377': attribute type 1 has an invalid length. [ 1226.382110][ T5573] netlink: 'syz.4.10379': attribute type 4 has an invalid length. [ 1226.915108][ T5605] syzkaller0: entered promiscuous mode [ 1226.921105][ T5605] syzkaller0: entered allmulticast mode [ 1227.302256][ T5630] __nla_validate_parse: 15 callbacks suppressed [ 1227.302279][ T5630] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10399'. [ 1227.406977][ T5636] ip6t_srh: unknown srh match flags 4000 [ 1227.734946][ T5656] openvswitch: netlink: IP tunnel dst address not specified [ 1227.902991][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10410'. [ 1227.965646][ T5670] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1228.152034][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10415'. [ 1228.319974][ T5688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10418'. [ 1228.329849][ T5688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10418'. [ 1228.594596][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10423'. [ 1228.789800][ T5715] 8021q: VLANs not supported on syzkaller1 [ 1228.905781][ T5721] Cannot find del_set index 4 as target [ 1229.084413][ T5735] : renamed from bond0 (while UP) [ 1229.205014][ T5737] syzkaller0: entered promiscuous mode [ 1229.217521][ T5737] syzkaller0: entered allmulticast mode [ 1229.364471][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10438'. [ 1229.692401][ T5775] bond6 (unregistering): Released all slaves [ 1232.452898][ T5750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1232.665202][ T5799] Cannot find del_set index 4 as target [ 1232.769301][ T5801] tipc: Enabled bearer , priority 10 [ 1232.885761][ T5814] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10457'. [ 1232.925628][ T5816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10458'. [ 1233.083198][ T5821] siw: device registration error -23 [ 1233.350505][ T5841] Cannot find del_set index 4 as target [ 1233.490053][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10469'. [ 1233.583072][ T5856] validate_nla: 4 callbacks suppressed [ 1233.583097][ T5856] netlink: 'syz.4.10473': attribute type 1 has an invalid length. [ 1233.664819][ T5856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10473'. [ 1233.690104][ T5856] bond7: (slave bridge9): making interface the new active one [ 1233.699159][ T5856] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 1233.728773][ T5860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10474'. [ 1233.746348][ T5856] syz_tun: entered allmulticast mode [ 1233.769930][ T5856] pimreg: entered allmulticast mode [ 1233.820695][ T5855] syz_tun: left allmulticast mode [ 1234.045112][ T5884] Cannot find del_set index 4 as target [ 1234.243217][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10484'. [ 1234.547663][ T5914] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1234.696966][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1234.710418][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1234.719248][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1234.745024][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1234.775182][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1235.015448][ T5927] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10492'. [ 1235.491461][ T5918] lo speed is unknown, defaulting to 1000 [ 1235.583820][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10496'. [ 1235.636338][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10498'. [ 1235.667745][ T5946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10498'. [ 1235.797859][ T5952] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1235.841616][ T5951] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1236.036487][ T5918] »»»»»» speed is unknown, defaulting to 1000 [ 1236.045903][ T5918] xfrm0 speed is unknown, defaulting to 1000 [ 1236.620469][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.647826][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.674822][ T5918] bridge_slave_0: entered allmulticast mode [ 1236.693961][ T5918] bridge_slave_0: entered promiscuous mode [ 1236.714871][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.736082][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.757139][ T5918] bridge_slave_1: entered allmulticast mode [ 1236.779728][ T5918] bridge_slave_1: entered promiscuous mode [ 1236.811896][ T5641] Bluetooth: hci1: command tx timeout [ 1236.934739][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.983438][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.144096][ T5918] team0: Port device team_slave_0 added [ 1237.161496][ T5918] team0: Port device team_slave_1 added [ 1237.235366][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.244788][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.273031][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.290347][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.299765][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.328925][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.444963][ T5918] hsr_slave_0: entered promiscuous mode [ 1237.465895][ T5918] hsr_slave_1: entered promiscuous mode [ 1237.559483][ T5958] Cannot find del_set index 4 as target [ 1238.459717][ T5988] nbd2: detected capacity change from 0 to 63 [ 1238.571482][ T5918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1238.605290][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1238.619718][ T5918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1238.628325][T17321] block nbd2: Receive control failed (result -104) [ 1238.639143][ T5641] block nbd2: Receive control failed (result -32) [ 1238.659862][ T6006] __nla_validate_parse: 4 callbacks suppressed [ 1238.659883][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10518'. [ 1238.683982][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1238.698648][ T5918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1238.726898][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1238.749194][ T5918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1238.775664][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1238.900128][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1238.914077][ T5641] Bluetooth: hci1: command tx timeout [ 1238.967534][ T9629] wlan1: Trigger new scan to find an IBSS to join [ 1239.048101][ T6011] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1239.099845][ T6011] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1239.261045][ T6027] syzkaller0: entered promiscuous mode [ 1239.274583][ T6027] syzkaller0: entered allmulticast mode [ 1239.565867][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.634519][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.661402][ T9638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.668764][ T9638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.726677][ T9638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.734079][ T9638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.962572][ T6046] bond6: Unable to set down delay as MII monitoring is disabled [ 1239.983365][ T6046] bond6 (unregistering): Released all slaves [ 1240.391314][ T6058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10533'. [ 1240.969550][ T5641] Bluetooth: hci1: command tx timeout [ 1241.595249][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10542'. [ 1241.671183][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.008375][ T137] wlan1: Trigger new scan to find an IBSS to join [ 1242.324256][ T5918] veth0_vlan: entered promiscuous mode [ 1242.376443][ T6119] netlink: 'syz.1.10549': attribute type 1 has an invalid length. [ 1242.388359][ T5918] veth1_vlan: entered promiscuous mode [ 1242.544858][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10549'. [ 1242.565172][ T6124] veth7: entered promiscuous mode [ 1242.576619][ T6124] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 1242.590637][ T6119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1242.678524][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10553'. [ 1242.688658][ T6129] [ 1242.691045][ T6129] ====================================================== [ 1242.698133][ T6129] WARNING: possible circular locking dependency detected [ 1242.705270][ T6129] syzkaller #0 Not tainted [ 1242.709834][ T6129] ------------------------------------------------------ [ 1242.717125][ T6129] syz.0.10552/6129 is trying to acquire lock: [ 1242.723223][ T6129] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 1242.732711][ T6129] [ 1242.732711][ T6129] but task is already holding lock: [ 1242.740116][ T6129] ffff88807a81a960 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 1242.747135][ T5918] veth0_macvtap: entered promiscuous mode [ 1242.751013][ T6129] [ 1242.751013][ T6129] which lock already depends on the new lock. [ 1242.751013][ T6129] [ 1242.751028][ T6129] [ 1242.751028][ T6129] the existing dependency chain (in reverse order) is: [ 1242.776255][ T6129] [ 1242.776255][ T6129] -> #7 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 1242.784481][ T6129] lock_sock_nested+0x41/0x100 [ 1242.789806][ T6129] mptcp_subflow_create_socket+0x142/0x800 [ 1242.796160][ T6129] __mptcp_nmpc_sk+0x155/0x790 [ 1242.801651][ T6129] mptcp_sendmsg_fastopen+0xd4/0x580 [ 1242.807489][ T6129] mptcp_sendmsg+0x1b0c/0x1dc0 [ 1242.812805][ T6129] ____sys_sendmsg+0x80a/0x9f0 [ 1242.818122][ T6129] ___sys_sendmsg+0x2a5/0x360 [ 1242.823346][ T6129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1242.828827][ T6129] do_syscall_64+0x174/0xf80 [ 1242.833968][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.840421][ T6129] [ 1242.840421][ T6129] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1242.848112][ T6129] lock_sock_nested+0x41/0x100 [ 1242.853815][ T6129] inet_shutdown+0x6a/0x390 [ 1242.858897][ T6129] nbd_mark_nsock_dead+0x2e9/0x560 [ 1242.864718][ T6129] recv_work+0x1c2e/0x1d40 [ 1242.869689][ T6129] process_scheduled_works+0xb5d/0x1860 [ 1242.875812][ T6129] worker_thread+0xa53/0xfc0 [ 1242.881069][ T6129] kthread+0x389/0x470 [ 1242.885715][ T6129] ret_from_fork+0x514/0xb70 [ 1242.890921][ T6129] ret_from_fork_asm+0x1a/0x30 [ 1242.896233][ T6129] [ 1242.896233][ T6129] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1242.903902][ T6129] __mutex_lock+0x1a3/0x1550 [ 1242.909046][ T6129] nbd_queue_rq+0x37b/0x1100 [ 1242.914191][ T6129] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1242.920386][ T6129] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1242.927324][ T6129] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1242.933882][ T6129] blk_mq_run_hw_queue+0x348/0x4f0 [ 1242.939545][ T6129] blk_mq_dispatch_list+0xd16/0xe10 [ 1242.945380][ T6129] blk_mq_flush_plug_list+0x48d/0x570 [ 1242.951656][ T6129] __blk_flush_plug+0x3ed/0x4d0 [ 1242.957159][ T6129] __submit_bio+0x28d/0x580 [ 1242.962225][ T6129] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1242.968406][ T6129] block_read_full_folio+0x599/0x830 [ 1242.974379][ T6129] filemap_read_folio+0x137/0x3b0 [ 1242.980038][ T6129] do_read_cache_folio+0x358/0x590 [ 1242.985710][ T6129] read_part_sector+0xb6/0x2b0 [ 1242.991149][ T6129] adfspart_check_ICS+0xb1/0x960 [ 1242.996655][ T6129] bdev_disk_changed+0x817/0x1770 [ 1243.002265][ T6129] blkdev_get_whole+0x380/0x510 [ 1243.007736][ T6129] bdev_open+0x31e/0xd30 [ 1243.012547][ T6129] blkdev_open+0x470/0x610 [ 1243.017515][ T6129] do_dentry_open+0x822/0x13a0 [ 1243.022831][ T6129] vfs_open+0x3b/0x340 [ 1243.027446][ T6129] path_openat+0x2e08/0x3860 [ 1243.032590][ T6129] do_file_open+0x23e/0x4a0 [ 1243.037642][ T6129] do_sys_openat2+0x113/0x200 [ 1243.042863][ T6129] __x64_sys_openat+0x138/0x170 [ 1243.048268][ T6129] do_syscall_64+0x174/0xf80 [ 1243.053401][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.059839][ T6129] [ 1243.059839][ T6129] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1243.067512][ T6129] __mutex_lock+0x1a3/0x1550 [ 1243.072653][ T6129] nbd_queue_rq+0xc6/0x1100 [ 1243.077713][ T6129] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1243.083804][ T6129] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1243.090676][ T6129] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1243.097203][ T6129] blk_mq_run_hw_queue+0x348/0x4f0 [ 1243.102860][ T6129] blk_mq_dispatch_list+0xd16/0xe10 [ 1243.108694][ T6129] blk_mq_flush_plug_list+0x48d/0x570 [ 1243.114611][ T6129] __blk_flush_plug+0x3ed/0x4d0 [ 1243.120005][ T6129] __submit_bio+0x28d/0x580 [ 1243.125055][ T6129] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1243.131229][ T6129] block_read_full_folio+0x599/0x830 [ 1243.137057][ T6129] filemap_read_folio+0x137/0x3b0 [ 1243.142628][ T6129] do_read_cache_folio+0x358/0x590 [ 1243.148287][ T6129] read_part_sector+0xb6/0x2b0 [ 1243.153603][ T6129] adfspart_check_ICS+0xb1/0x960 [ 1243.159100][ T6129] bdev_disk_changed+0x817/0x1770 [ 1243.164667][ T6129] blkdev_get_whole+0x380/0x510 [ 1243.170063][ T6129] bdev_open+0x31e/0xd30 [ 1243.174845][ T6129] blkdev_open+0x470/0x610 [ 1243.179817][ T6129] do_dentry_open+0x822/0x13a0 [ 1243.185228][ T6129] vfs_open+0x3b/0x340 [ 1243.189848][ T6129] path_openat+0x2e08/0x3860 [ 1243.194990][ T6129] do_file_open+0x23e/0x4a0 [ 1243.200042][ T6129] do_sys_openat2+0x113/0x200 [ 1243.205267][ T6129] __x64_sys_openat+0x138/0x170 [ 1243.210673][ T6129] do_syscall_64+0x174/0xf80 [ 1243.215813][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.222346][ T6129] [ 1243.222346][ T6129] -> #3 (set->srcu){.+.+}-{0:0}: [ 1243.229510][ T6129] __synchronize_srcu+0xca/0x300 [ 1243.234999][ T6129] elevator_switch+0x1e8/0x7a0 [ 1243.240469][ T6129] elevator_change+0x2cc/0x450 [ 1243.245778][ T6129] elevator_set_default+0x36c/0x430 [ 1243.251712][ T6129] blk_register_queue+0x3e9/0x4e0 [ 1243.257290][ T6129] __add_disk+0x677/0xd50 [ 1243.262174][ T6129] add_disk_fwnode+0xfb/0x480 [ 1243.267398][ T6129] nbd_dev_add+0x72c/0xb50 [ 1243.272370][ T6129] nbd_init+0x168/0x1f0 [ 1243.277269][ T6129] do_one_initcall+0x250/0x870 [ 1243.282581][ T6129] do_initcall_level+0x104/0x190 [ 1243.288195][ T6129] do_initcalls+0x59/0xa0 [ 1243.293081][ T6129] kernel_init_freeable+0x2a6/0x3e0 [ 1243.298828][ T6129] kernel_init+0x1d/0x1d0 [ 1243.303736][ T6129] ret_from_fork+0x514/0xb70 [ 1243.308869][ T6129] ret_from_fork_asm+0x1a/0x30 [ 1243.314251][ T6129] [ 1243.314251][ T6129] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1243.322099][ T6129] __mutex_lock+0x1a3/0x1550 [ 1243.327268][ T6129] elevator_change+0x1b3/0x450 [ 1243.332604][ T6129] elevator_set_none+0xb5/0x140 [ 1243.338002][ T6129] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1243.344726][ T6129] nbd_start_device+0x17f/0xb10 [ 1243.350130][ T6129] nbd_genl_connect+0x165b/0x1cf0 [ 1243.355713][ T6129] genl_family_rcv_msg_doit+0x22a/0x330 [ 1243.361904][ T6129] genl_rcv_msg+0x61c/0x7a0 [ 1243.366970][ T6129] netlink_rcv_skb+0x232/0x4b0 [ 1243.372318][ T6129] genl_rcv+0x28/0x40 [ 1243.376864][ T6129] netlink_unicast+0x75c/0x8e0 [ 1243.382201][ T6129] netlink_sendmsg+0x813/0xb40 [ 1243.387512][ T6129] ____sys_sendmsg+0x972/0x9f0 [ 1243.392829][ T6129] ___sys_sendmsg+0x2a5/0x360 [ 1243.398049][ T6129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1243.403528][ T6129] do_syscall_64+0x174/0xf80 [ 1243.408861][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.415318][ T6129] [ 1243.415318][ T6129] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1243.424036][ T6129] blk_alloc_queue+0x546/0x680 [ 1243.429371][ T6129] __blk_mq_alloc_disk+0x197/0x390 [ 1243.435064][ T6129] nbd_dev_add+0x499/0xb50 [ 1243.440043][ T6129] nbd_init+0x168/0x1f0 [ 1243.444738][ T6129] do_one_initcall+0x250/0x870 [ 1243.450189][ T6129] do_initcall_level+0x104/0x190 [ 1243.455683][ T6129] do_initcalls+0x59/0xa0 [ 1243.460562][ T6129] kernel_init_freeable+0x2a6/0x3e0 [ 1243.466304][ T6129] kernel_init+0x1d/0x1d0 [ 1243.471184][ T6129] ret_from_fork+0x514/0xb70 [ 1243.476327][ T6129] ret_from_fork_asm+0x1a/0x30 [ 1243.481654][ T6129] [ 1243.481654][ T6129] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1243.488905][ T6129] __lock_acquire+0x15a5/0x2cf0 [ 1243.494342][ T6129] lock_acquire+0x106/0x350 [ 1243.499396][ T6129] fs_reclaim_acquire+0x71/0x100 [ 1243.504883][ T6129] __kmalloc_cache_noprof+0x40/0x660 [ 1243.510902][ T6129] ref_tracker_alloc+0x15a/0x4c0 [ 1243.516392][ T6129] get_net_track+0x16e/0x230 [ 1243.521523][ T6129] sk_net_refcnt_upgrade+0xb2/0x130 [ 1243.527270][ T6129] mptcp_subflow_create_socket+0x32b/0x800 [ 1243.533628][ T6129] __mptcp_nmpc_sk+0x155/0x790 [ 1243.538938][ T6129] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 1243.545300][ T6129] genl_family_rcv_msg_doit+0x22a/0x330 [ 1243.551401][ T6129] genl_rcv_msg+0x61c/0x7a0 [ 1243.556450][ T6129] netlink_rcv_skb+0x232/0x4b0 [ 1243.561763][ T6129] genl_rcv+0x28/0x40 [ 1243.566288][ T6129] netlink_unicast+0x75c/0x8e0 [ 1243.571597][ T6129] netlink_sendmsg+0x813/0xb40 [ 1243.576903][ T6129] ____sys_sendmsg+0x972/0x9f0 [ 1243.582239][ T6129] ___sys_sendmsg+0x2a5/0x360 [ 1243.587476][ T6129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1243.592957][ T6129] do_syscall_64+0x174/0xf80 [ 1243.598097][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.604540][ T6129] [ 1243.604540][ T6129] other info that might help us debug this: [ 1243.604540][ T6129] [ 1243.614799][ T6129] Chain exists of: [ 1243.614799][ T6129] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET/1 [ 1243.614799][ T6129] [ 1243.627825][ T6129] Possible unsafe locking scenario: [ 1243.627825][ T6129] [ 1243.635363][ T6129] CPU0 CPU1 [ 1243.640793][ T6129] ---- ---- [ 1243.646173][ T6129] lock(k-sk_lock-AF_INET/1); [ 1243.650964][ T6129] lock(sk_lock-AF_INET); [ 1243.657931][ T6129] lock(k-sk_lock-AF_INET/1); [ 1243.665263][ T6129] lock(fs_reclaim); [ 1243.669271][ T6129] [ 1243.669271][ T6129] *** DEADLOCK *** [ 1243.669271][ T6129] [ 1243.677444][ T6129] 4 locks held by syz.0.10552/6129: [ 1243.682657][ T6129] #0: ffffffff8fe34ae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1243.690902][ T6129] #1: ffffffff8fe34920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1243.699907][ T6129] #2: ffff888056f4e460 (msk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 1243.710819][ T6129] #3: ffff88807a81a960 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 1243.721914][ T6129] [ 1243.721914][ T6129] stack backtrace: [ 1243.727873][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz.0.10552 Not tainted syzkaller #0 PREEMPT(full) [ 1243.727895][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.727907][ T6129] Call Trace: [ 1243.727915][ T6129] [ 1243.727925][ T6129] dump_stack_lvl+0xe8/0x150 [ 1243.727948][ T6129] print_circular_bug+0x2e1/0x300 [ 1243.728015][ T6129] check_noncircular+0x12e/0x150 [ 1243.728040][ T6129] __lock_acquire+0x15a5/0x2cf0 [ 1243.728060][ T6129] ? check_noncircular+0xda/0x150 [ 1243.728083][ T6129] ? lockdep_unlock+0x5d/0xd0 [ 1243.728097][ T6129] ? __lock_acquire+0x146e/0x2cf0 [ 1243.728117][ T6129] ? __kmalloc_cache_noprof+0x40/0x660 [ 1243.728142][ T6129] lock_acquire+0x106/0x350 [ 1243.728158][ T6129] ? __kmalloc_cache_noprof+0x40/0x660 [ 1243.728188][ T6129] fs_reclaim_acquire+0x71/0x100 [ 1243.728211][ T6129] ? __kmalloc_cache_noprof+0x40/0x660 [ 1243.728234][ T6129] __kmalloc_cache_noprof+0x40/0x660 [ 1243.728258][ T6129] ? ref_tracker_alloc+0x15a/0x4c0 [ 1243.728277][ T6129] ? rcu_is_watching+0x15/0xb0 [ 1243.728298][ T6129] ref_tracker_alloc+0x15a/0x4c0 [ 1243.728317][ T6129] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1243.728334][ T6129] ? ref_tracker_free+0x522/0x840 [ 1243.728353][ T6129] ? __pfx_ref_tracker_free+0x10/0x10 [ 1243.728370][ T6129] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 1243.728386][ T6129] ? mptcp_subflow_create_socket+0x32b/0x800 [ 1243.728407][ T6129] ? __mptcp_nmpc_sk+0x155/0x790 [ 1243.728426][ T6129] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 1243.728442][ T6129] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 1243.728465][ T6129] ? net_passive_dec+0x177/0x250 [ 1243.728488][ T6129] ? __pfx_net_passive_dec+0x10/0x10 [ 1243.728513][ T6129] get_net_track+0x16e/0x230 [ 1243.728530][ T6129] sk_net_refcnt_upgrade+0xb2/0x130 [ 1243.728547][ T6129] mptcp_subflow_create_socket+0x32b/0x800 [ 1243.728567][ T6129] ? irqentry_exit+0x218/0x8b0 [ 1243.728586][ T6129] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1243.728607][ T6129] ? do_raw_spin_lock+0x12b/0x2f0 [ 1243.728631][ T6129] __mptcp_nmpc_sk+0x155/0x790 [ 1243.728652][ T6129] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1243.728672][ T6129] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 1243.728687][ T6129] ? preempt_schedule_thunk+0x16/0x30 [ 1243.728713][ T6129] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 1243.728735][ T6129] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 1243.728835][ T6129] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1243.728856][ T6129] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1243.728881][ T6129] genl_family_rcv_msg_doit+0x22a/0x330 [ 1243.728903][ T6129] ? __asan_memcpy+0x40/0x70 [ 1243.728925][ T6129] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1243.728961][ T6129] ? bpf_lsm_capable+0x9/0x20 [ 1243.728984][ T6129] ? security_capable+0x7e/0x2c0 [ 1243.729012][ T6129] genl_rcv_msg+0x61c/0x7a0 [ 1243.729034][ T6129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1243.729053][ T6129] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 1243.729080][ T6129] ? __pfx_ref_tracker_free+0x10/0x10 [ 1243.729102][ T6129] netlink_rcv_skb+0x232/0x4b0 [ 1243.729128][ T6129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1243.729148][ T6129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1243.729180][ T6129] ? down_read+0x270/0x2e0 [ 1243.729198][ T6129] ? genl_rcv+0xd/0x40 [ 1243.729218][ T6129] genl_rcv+0x28/0x40 [ 1243.729235][ T6129] netlink_unicast+0x75c/0x8e0 [ 1243.729263][ T6129] netlink_sendmsg+0x813/0xb40 [ 1243.729282][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1243.729300][ T6129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1243.729324][ T6129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1243.729347][ T6129] ____sys_sendmsg+0x972/0x9f0 [ 1243.729363][ T6129] ? __might_fault+0xaf/0x130 [ 1243.729386][ T6129] ? __pfx_____sys_sendmsg+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1243.729406][ T6129] ? import_iovec+0x73/0xa0 [ 1243.729427][ T6129] ___sys_sendmsg+0x2a5/0x360 [ 1243.729442][ T6129] ? __lock_acquire+0x6b5/0x2cf0 [ 1243.729461][ T6129] ? __pfx____sys_sendmsg+0x10/0x10 [ 1243.729481][ T6129] ? futex_wake+0x4ac/0x580 [ 1243.729582][ T6129] ? __fget_files+0x2a/0x420 [ 1243.729602][ T6129] ? __fget_files+0x3a0/0x420 [ 1243.729626][ T6129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1243.729644][ T6129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1243.729664][ T6129] ? rcu_is_watching+0x15/0xb0 [ 1243.729686][ T6129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.729704][ T6129] do_syscall_64+0x174/0xf80 [ 1243.729721][ T6129] ? trace_irq_disable+0x3b/0x140 [ 1243.729745][ T6129] ? clear_bhb_loop+0x40/0x90 [ 1243.729764][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.729781][ T6129] RIP: 0033:0x7fa1ec79ce59 [ 1243.729798][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.729813][ T6129] RSP: 002b:00007fa1ea9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1243.729832][ T6129] RAX: ffffffffffffffda RBX: 00007fa1eca15fa0 RCX: 00007fa1ec79ce59 [ 1243.729845][ T6129] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 1243.729856][ T6129] RBP: 00007fa1ec832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1243.729867][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.729877][ T6129] R13: 00007fa1eca16038 R14: 00007fa1eca15fa0 R15: 00007ffed2579cb8 [ 1243.729898][ T6129] [ 1243.742824][ T5922] Set syz1 is full, maxelem 65536 reached [ 1243.783537][ T5918] veth1_macvtap: entered promiscuous mode [ 1244.106616][ T5641] Bluetooth: hci1: command tx timeout [ 1244.231682][ T137] wlan1: Creating new IBSS network, BSSID 86:4c:63:3c:b3:14 [ 1244.275286][ T6129] netlink: 'syz.0.10552': attribute type 1 has an invalid length. [ 1244.375344][ T6129] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1245.382259][ T136] bridge_slave_1: left allmulticast mode [ 1245.403514][ T136] bridge_slave_1: left promiscuous mode [ 1245.410973][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.420539][ T136] bridge_slave_0: left allmulticast mode [ 1245.426332][ T136] bridge_slave_0: left promiscuous mode [ 1245.432503][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.555149][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.568076][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.578924][ T136] bond0 (unregistering): Released all slaves [ 1245.759088][ T136] hsr_slave_0: left promiscuous mode [ 1245.765166][ T136] hsr_slave_1: left promiscuous mode [ 1245.772519][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.782051][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.803461][ T136] veth1_macvtap: left promiscuous mode [ 1245.809042][ T136] veth0_macvtap: left promiscuous mode [ 1245.814559][ T136] veth1_vlan: left promiscuous mode [ 1245.819987][ T136] veth0_vlan: left promiscuous mode [ 1245.940451][ T136] team0 (unregistering): Port device team_slave_1 removed [ 1245.955553][ T136] team0 (unregistering): Port device team_slave_0 removed [ 1246.026605][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1246.313535][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1246.588427][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1246.851343][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4