last executing test programs: 3.900292859s ago: executing program 3 (id=4482): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r2}, 0x0) 2.855265014s ago: executing program 3 (id=4499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x1ff, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r6, 0xd16a}, &(0x7f0000000140)=0x8) 2.852196503s ago: executing program 2 (id=4500): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, "ff02000000000000"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x4008000) 2.675771025s ago: executing program 3 (id=4503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x10001, 0x9, 0x1}, 0x48) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x100000000000000, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.609965798s ago: executing program 2 (id=4506): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r0}, 0xc) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100100}, 0x0) 2.4580553s ago: executing program 3 (id=4509): r0 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @loopback}, {0x6, @local}, 0x5c, {0x2, 0x4e21, @multicast2}, 'bridge_slave_0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x7, 0x0, 0xfffffffffffffff8}) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x6, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4008880) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0x100, 0x40, 0x7fffffff, 0x3, 0x8}) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="ad9ac97b8a1eeb2df4e108a6ad63e0b0e5f922607df662e2eef17181a91421b65f63417875d97b166cef8d74ec5144f1167a47685759dfb52cde702d3f63bf1e90e085c845af187e252e81e602c94549e267d4e44859564de71f06660925eb17d5510995432478866e97fa6da29a3fd4e26d7edd2a0c78952251847b64f7bedcab2f63e5415f4ceb6526057b7dc693ecb0f9d837145d593dfc6bb422afc12403632335bf6dc1c6c5ac93eeb974f4c26556cdcaab0aba3acbc177d4d227f74221130c8dd410e7530e0d4607a8a8b24fe68c27b7a25fb697e5e1c609db617d330e14048caf2b57565ed0b246c954bafe7bb7f3242be871fba199", 0xf9}, {&(0x7f0000000480)="94e052b1fea3ac48aa64301d6d54ecd541c6d95ae87b4e0c639c2d6fecc5fcdbc38b3c5b66b42fbe924ffbbe", 0x2c}], 0x2, &(0x7f0000000500)=[{0xa8, 0x119, 0x0, "6475099b1efca3b64418b1404f7ef771d4330f8066e2731c3b3be17762f321a8956ecc00d6e9962dd38578dca317685ccf65f14064708356642bf4a4b6a071ac1c9733f7d0890e339df196cc994e717d721dbe5a26faec489c185315b231136e42ffdeef3e45e05734ec124962f83c44b582d48aa8b65a86b35a78c9993f61fb32a88690535f9f0ba1a6c1720273f172b493b3"}, {0x50, 0x1, 0x5, "a9983e152fdc347806ec08acb307b4c22c2696f81ca737f8791e097af7126401869f37b4defec5e88c22e93ac77032744bbd849f13fa56f6b94c"}], 0xf8}, 0x4000880) (async, rerun: 64) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x0, [0xfa6, 0x2, 0x6]}, &(0x7f00000006c0)=0x44) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000700)=0x3, 0x4) (async) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000740)={0xfd5, 0x8000000000000001, 0x5, 0xb3b, 0x2, 0x0, [{0xff, 0x4, 0x8, '\x00', 0x1}, {0x2, 0x5af, 0x8000, '\x00', 0x3804}]}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r7, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, 'bridge_slave_0\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, 'bridge_slave_0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '^){'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r8) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000bc0)={&(0x7f0000000a80), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) socket$netlink(0x10, 0x3, 0x4) ioctl$OCFS2_IOC_RESVSP64(r3, 0x4030582a, &(0x7f0000000c00)={0x2, 0x2, 0xb3, 0x4, 0x65cb31f8, 0x6}) r10 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000002a80)=[{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="469f6b816dbd09179505d03d32652d38c65510416e8a03bd6d693e28983308bf6c4b3ee019", 0x25}, {&(0x7f0000000c80)="a6795f5d20cd083d97cb6674a8cf660866b6f8bd9971ba80b4985144a020e102c921659103b117a920f4bb65f579f2701d94be009aad427e0768b39d23aa736772e9a7fbb8cf9400cb788e01609f9a87597825e562c34e70f5b47eacdd3f36be5514", 0x62}, {&(0x7f0000000d00)="d221ca", 0x3}], 0x3, &(0x7f0000000d80)=[@iv={0x48, 0x117, 0x2, 0x2f, "33f25623242db93866467030392a89bf46921dcd9fa214ef1c7561f890c5e7376e27000d3b5ed9fa71b853cf88c812"}, @assoc={0x18, 0x117, 0x4, 0xfffeffff}, @assoc={0x18, 0x117, 0x4, 0x1ff}], 0x78, 0x800}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e00)="78c1c9dc3c1ce0d6c45d7c142e4d71f7c42f17b42119a00a0347c6d2b7b1a47f61e9a70342fafd8a0c7482af2c61f116e6d9e9a1812d0edb4713b55b48fc9c399f628f36534899ac835cf2c5700d57df3141e2a730dc1f81da6fd1eeaa04e66269815acf9e381e8f9b349277a714f9cecdc94ccb47dc85429c1582b4b6c3e582b46d9e5a38f4a0361064b47c5326de4cdb7c3c62aed431c7d733c02ac168bc7ebdaab0b8b037ca89ba29160f0840e0a908869feb34c7f07bae44aed7fb5133a143", 0xc1}, {&(0x7f0000000f00)="d87197fe8b826197a02c25e016c5aea0adb673f152bbd9f1acd367b1186b694bacf4fc92e2b887", 0x27}, {&(0x7f0000000f40)="653d401d6834ac74791650db61ff989ed78f074a2e9493b8da5b661b675c5f0926f99d789b49e0d9796427ec3c0b4225b662cb0d4a626dc1c783d1fd1004c9bd766640293048df7ca0457f826f3ed536e6fcf4d82d97443d9c", 0x59}, {&(0x7f0000000fc0)="024665536f70ca1419a2a98a162b08ad93b536d2cf4b0361b060afd6deda4d6ba2935c1153e3ef43e3274ecf0ff85156fff6ee33681e156d34ce3805e69dd7a1e6bfe61bf11d490a7de0c8c2f85ea379a2dc14862e9db926bb1d7b264a936d50931d4b8f70f91588102561809ed2ef7022d4a879fa615ea0d8e38b55a9f344d0aa40daac68ddc138a5c11c5164081c204062314d6fa4e87f794bc4582adb643b62d4a97c68677c90f96aab4b8f84ec5add6d1410a7d633f49b1511ebab376c645bf1036bbfa2c333682701c3eccdb18a409516986f6c69cdb1c6d29f200b81f58cde2031422bc3c49e0f49a530ee83df396edec32f2fb90fb1", 0xf9}], 0x4, &(0x7f0000001100)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1000}, @iv={0xa8, 0x117, 0x2, 0x91, "5d823926fb49efc3ba15e73294f056be8a60da8985c1c102a7ca947b1b15d27a50e1e221133d59440091b4cc974725224c591c6cd4052c57df4a4ff8ff0eb5fc47e12db18cfc2ebc83559080d840d128626e7cba953e13ea6b655fdf9cceebf99ba724023f3e3d2231f2d97b7058af5d7f10390682e8c9e8a148c82aaa6b1fc011974508c7856104bf2f1d4a5f92ddb6bd"}], 0xd8, 0x10}, {0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001200)="25e12820f51f020e2466233c65fb25122c49aaa275d449ae0369e6adf4b9b05cd3", 0x21}, {&(0x7f0000001240)="02675a7c1a3c5643360c038c205a409998c2774f1321e0c13c788632186e5f7c469172c65be639b287e25b972c0f4a04463812a70b9185c743016f4c22445e6dd49e36ecc3a2158e46445ed4bf2860736bb8e8558d58a9f9eab3b25fcdddd02f37ee88c7c59004e7b90995a1c57d839341d3b3e031180717bb67d1defde027a2c392d89fdb12db623edb3f28259652f39868dd27b3d361822bf420a59a7aea5b3f8d77294d4b74e6b9b769c08ffd7dc2d875f490a5d29b4f7514e21d5e97a77e6d77618f0678d6fd51c05e355e78a425a6ae6fe6ee876b7df5dd7827", 0xdc}, {&(0x7f0000001340)}, {&(0x7f0000001380)="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", 0x1000}], 0x4, &(0x7f00000023c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x2d3fbc90}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7b, "c642010ee0ef6247139062dc2f34821f7757fa3052429d07a7169d3a436c6987198e876c7eb097462c2f53b7936c44180b74aaba04b27e8c750dfa0a20de87f688e96fa5d952456d11c92df0508124a386ce3d12d1b3170f7dfd0bc2267629aedb528f7b43343fbd653c2ed4ce022902bb2b522a29853f14ea47b2"}, @assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xe}], 0x150, 0x4000}, {0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002540)="54cc2b06c1f78972edb28da87efcf7e8ad982f5783e72bde72650e47b58a09ea6c1ce6c417c0939519bc032d9100a38734756a5b24661866a508eeb872b7d4de50c4a9a6ab4abf1a20d6f757e07cc72ee2ec8bdbe9f48ef1080348d9c37512295072b9ec9f1e1022b615739333ed9584ffa5c19cd6a6134664655d9af80dfef0fc9c9f31324f5873afe6230ced342eb1709f33de43a1325020973a68f7db7d60c199ae7de137d904b10520df3f396ab8750dcb21bb19ce1e39151ebafdab5bd3bba8593052c4a6121e247eed233c2db180170393fb79cc8719a2ab631f60bd192e", 0xe1}, {&(0x7f0000002640)="9c62d0b8c621da6fe9bd4063414182bef35e0ba1e240bc13a7abc038d3e3ab45574eb8afce5954cf6fca70f5dc4bcfb8b120ad654390ecac2ce5539917640233d14ac46dec8de255d8ef9d192faab766a42637e1459d6b6494e3b7a80e7bfe1eec08929ffb0c54", 0x67}, {&(0x7f00000026c0)="dbc2699fade857e74ce091616ae47b4f3426e9fa9b679548b17ab009606217b411b2dc78970ddbb8cb1113320b8ab9e41f28617916fc4e498e891ddfd2493fb8d8ae27bb7361a4d7d73ce94df7347b1000cbd30c0e574f378b64d184c3ada69c87eb252ac12c00fa9d7c6cf8233c0be6d4bde56db1cd1636e0112047f50d1c44bfec3698d88db3713bfd", 0x8a}, {&(0x7f0000002780)="c18a2be3444fba5b70fd83925b0e85205cfb658dec6de640faacb56d446381258ded76324d5d4b616045e9e7f511881a0e5814bd8966c4342c6afbd486ede12b07e67e476d019f7146e15ffb00f4bed320ebe94a90c8eb32055dd305efbf17b76895ecdae4cc89c1b768a190f92db5c2e84816f6fafff4", 0x77}], 0x4, &(0x7f0000002840)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7a0}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18}, @iv={0xd8, 0x117, 0x2, 0xc0, "2623dfbe5016ed219e7ecfc23dafce6f4ee4ce16609c8a5c6b539dccd53a6266b033910c97440114972872d0611eab64f1f813e1a4d8b0423fe2b75ee7f74cde299467195d8623b9c5d75ddf16614b101c5391df8b562aa06bd462a70a8873297d45777de2ee1a1a35bb88d6c90add0be5ebe3305b64f6b9dc53e382999e122fd4b3f249ee183778c54e851c63223285b91f4a836065c6582fa75b296d1d7a1408210a2f4217bab3e87932bff587f0100df3aa6cce4e441430c78405326dbfae"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xc0, 0x117, 0x2, 0xa8, "03793d5653ce672d8ccb109a87a025d6501c254f47b41673427239eac86a94084ecadeaa3abfa99b38dd3e784bd54df147487b5e4d578f8d469dca7ecb37ce340c4f45c04d2368132d13b1c21328068a3bcd288629e1d5055093813a7af48042057acf9ceac243f506ab40e6ba66ceddd600c820b9b906f74483597ec62027e56829dc52c67d40fd58d99dc87c753b346ca150f4ecf21917222f859d6a453b49c9cc4e78a358d101"}], 0x228}], 0x4, 0x804) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)={0xa8, r11, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffc01}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x804}, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002d40), r12) 2.457727407s ago: executing program 2 (id=4510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x1, 0x6, 0x20, 0x0, 0x4, 0x200]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 2.334723073s ago: executing program 2 (id=4514): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 2.329025953s ago: executing program 3 (id=4515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x81, 0x20, 0x2, 0x200}, &(0x7f0000000040)=0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r5, r3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in={{0x2, 0x4e20, @remote}}, 0x7, 0x3}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000008c0)=""/194, 0xc2}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3}}], 0x2, 0x40010003, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0xf, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', r9, 0x700, 0x0, 0x7, 0x40, {{0x24, 0x4, 0x2, 0x21, 0x90, 0x65, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@cipso={0x86, 0x27, 0x0, [{0x0, 0x10, "b02f7bf9c61a1e7ac3f63324f9cf"}, {0x6, 0x11, "7ea496972b1579ceabb3e7c17ed6c9"}]}, @timestamp_addr={0x44, 0x14, 0x29, 0x1, 0x1, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3}]}, @ssrr={0x89, 0x17, 0x74, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x6c, 0x1, 0x1, [{@multicast1, 0x3773f938}]}, @timestamp_addr={0x44, 0x1c, 0x3e, 0x1, 0x5, [{@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0xfffffff4}]}]}}}}}) 2.054849951s ago: executing program 1 (id=4516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000700000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 1.930078406s ago: executing program 1 (id=4518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x2c020400) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x42, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 1.906002886s ago: executing program 3 (id=4519): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.671374942s ago: executing program 4 (id=4522): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000500150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.619085108s ago: executing program 1 (id=4523): sendmsg$key(0xffffffffffffffff, 0x0, 0x48004) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000dc0)="ad56b6bd38e9b49dcd3ef0e1e8be9100ca1bcc242f77727e63f995e2a1055cf7b9adabe2785da999042cc1f6a0d5b7997245ff03c91fea3d4c2b4492e92f4e1192ecb25f3ff504ddc8b5efea473cddd32ee046a3e15bc59665332f1316887c00491bb3f3daa8d5859647abe78c4cc39d78f6003922ec36f19bc1070db26572508a0a12cd8cf67c654c3551f31f830d203235af285db6", 0xfffffd5d) accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f712a325c987", 0x15}], 0x3) 1.531977367s ago: executing program 4 (id=4525): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2dac000}, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xfffa, 0xb, 0x2, 0x5e84, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x5, 0x0, 0x9, 0x2, 0xfffff1ef}, &(0x7f0000000200)=0x14) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004e2ab940162c16cde110000000c0018000dac0ff915fa8ed12d68"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.347182411s ago: executing program 4 (id=4526): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$kcm(0x2, 0x200000000000001, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32], 0x24}}, 0x0) 1.339912415s ago: executing program 1 (id=4527): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@empty}, &(0x7f0000000280)=0xc) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.318223223s ago: executing program 0 (id=4528): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x2b}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0xffffffffffffff18, {0x2, 0x0, @local}}, 0x24) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r10, @ANYBLOB="200026bd700001800000390000000c009900000000004e0000009c005a8098000380140005000d000500030059000400050009000800050006000000000005000700000000000500070001000000050006000000000005000600000000002200010005506c60014101241201363605240302056c24240b24000c01001b300b080000310002000e08194115494e1246093826411c0d44140411084657500c2038253019556539360420153f0f37561821472b10ccb4387e7f326b0a9c34a7e6c890dc6ba25d73baf9228f025b0331f75cdd5a1949cc4abda91d88b503dac1e85c2a728e62c84128f3a44c7c63f97065ede74f60b9380dda9b2f0440a54327de1b5eba98c22a327561e3fef0f0be03f4a56ea4546e4c4b8d65d556c8f2c00c618212925766b24aa5e202e416171fb1a5914cf75aeb5528aba27e910d8441d14c655acc68188668f11c677c810bc3f2c8bc1349f9"], 0xbc}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000800)={0x344, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc969bf56bdd76252}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x12c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xbb8b5c49de44bb4b}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x344}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000010) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r13, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c00"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r10, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) write(r6, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 1.196713574s ago: executing program 4 (id=4529): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040004}, 0x8884) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f0007"], 0x38}}, 0x0) sendmsg$802154_raw(r1, 0x0, 0x44045) 839.515265ms ago: executing program 1 (id=4530): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000440)=0x7ff, 0x4) recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/234, 0xea}, {&(0x7f0000001700)=""/194, 0xc2}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/10, 0xa}, {&(0x7f0000001980)=""/225, 0xe1}, {&(0x7f0000001a80)=""/177, 0xb1}], 0x8, 0x0, 0xfffffffffffffe70}, 0x2143) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x20000237, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@var={0xc, 0x0, 0x0, 0xe, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0xb, 0x3}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000480)=""/4096, 0x5c, 0x1000, 0x0, 0x3}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff85}}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x5, 0x1, 0x10001, 0x80, r2, 0x401, '\x00', r3, r4, 0x1, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x8, 0x2) socket$inet6(0xa, 0x6, 0x0) 751.132008ms ago: executing program 4 (id=4531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000a0000000900020073797a31000000000500010007000000050005000a0000001400078008001240fffffffa08000b0000000401050004000000000011000300686173683a69702c6d6172"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9874, 0x4, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x54}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r6, 0x8, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24044c85}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 659.801364ms ago: executing program 0 (id=4532): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200008000000000000000dc000000850000002700000018010000646c6c2500000000002020207b1af8ff00000000a4a100000000000007010000f8ffffffb702000008000000b703000001000800850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x80000000, 0x4}, 0x80, 0x0}, 0x24044051) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYBLOB="6567257625aba425149ed23a538fe5574ff605e8941866d84d94d86b07521b3cbcb5a393aef50fb9f3196d44d1419d9c65695ef401a255e9bbdd05b638dfae08556a7ff5ff8206da2d003ddf372abef3a6a6a4c4e709e9d09645162a1dd15192bc2cce6f86b18b05a922dd646edf72ebcd26b7cd417945d2116f58c7870b23bb0bc6177d278129209d0de7658da02d13bd348e007e38714e81dc1baeb4d67a309609485163072f1a529a57061d9547ea34ac82cfa40967ff79e1d9700982aad6864c7740d18c27a2722c7017240a31568f945e93fd"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x100000004, 0x5}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x400) 542.101525ms ago: executing program 1 (id=4533): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x29, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0xdc050000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="338f556852842518c465780f3b5c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="0002000000000000b702000014000000b7030000000000008500000083000000bf09000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3, 0xa}, {0xffe0, 0xd}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x4000000) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(r10, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="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", 0x628}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, r12, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) 499.298383ms ago: executing program 0 (id=4534): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000085000000070000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 443.050394ms ago: executing program 0 (id=4535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 426.569775ms ago: executing program 4 (id=4536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000000f0000a004e220000000000000000000000bb0900000000000000f5ffffff0000000000000000000000000000f9de70ec44b58c600000000000000000000000000000000000000000ba13dbd69935eb3135df9d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004d222a8a6f1a69492224f25f450cf2f61a19b613a7644e74822686dc694f1138d47e00ec4722f4ecb25dde3b28017278583008f07603ad102e5b"], 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180ea4db1b1000000000000000000000240000000085100000fbffffff18640000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x4, 0x70bd29, 0x25dfdbfe, {0x80, 0x10, 0x20, 0x7, 0xff, 0x5, 0xff, 0x6, 0x1100}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d00000001900010000000000fcdbdf2500000000000000000000000000000040fe8000000000000000000000000000bb00000000e7ffffff0200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a307000000000000010000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000009000000000000000008000000200000000001000500000000000000b96b6e000100000000100000160008"], 0xd0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x5, 0x0, 0xac}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0x34, 0x5, 0x5, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r6, 0x6ff, 0x0, 0x25dfdbfb, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000900)={0x3fe, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe, 0x4}, 0x0, 0x0) close(r7) r8 = socket(0x1d, 0x6, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 325.669752ms ago: executing program 0 (id=4537): sendmsg$key(0xffffffffffffffff, 0x0, 0x48004) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000dc0)="ad56b6bd38e9b49dcd3ef0e1e8be9100ca1bcc242f77727e63f995e2a1055cf7b9adabe2785da999042cc1f6a0d5b7997245ff03c91fea3d4c2b4492e92f4e1192ecb25f3ff504ddc8b5efea473cddd32ee046a3e15bc59665332f1316887c00491bb3f3daa8d5859647abe78c4cc39d78f6003922ec36f19bc1070db26572508a0a12cd8cf67c654c3551f31f830d203235af285db6", 0xfffffd5d) accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f712a325c987", 0x15}], 0x3) 148.116528ms ago: executing program 2 (id=4538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000000)={0x70, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1d}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c014}, 0x40000) 23.129324ms ago: executing program 2 (id=4539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe24}, 0x48) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000029000000040000005e00000000000000500000000000000029"], 0x160}, 0xc4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaabb08004500452c00000000002f9078ac1e0001e0000001000065580018907804008b890000000086dd070000000000"], 0xfdef) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x28, r1, 0x5, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 0s ago: executing program 0 (id=4540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000a0000000900020073797a31000000000500010007000000050005000a0000001400078008001240fffffffa08000b0000000401050004000000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9874, 0x4, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x54}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r6, 0x8, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24044c85}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 505298][T17857] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3433'. [ 678.769804][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 678.778733][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3435'. [ 683.008346][T17887] netlink: 'syz.3.3442': attribute type 2 has an invalid length. [ 683.020511][T17889] dummy0: mtu less than device minimum [ 683.148316][T17896] netlink: 'syz.2.3446': attribute type 10 has an invalid length. [ 683.175816][T17896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3446'. [ 683.187693][T17896] veth1_vlan: left promiscuous mode [ 683.195444][T17896] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 683.336227][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3449'. [ 683.654822][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3454'. [ 683.689683][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3456'. [ 683.766439][T17923] bridge5: port 1(veth15) entered blocking state [ 683.785658][T17923] bridge5: port 1(veth15) entered disabled state [ 683.799099][T17923] veth15: entered allmulticast mode [ 683.805767][T17923] veth15: entered promiscuous mode [ 683.812346][T17923] bridge5: port 1(veth15) entered blocking state [ 683.818876][T17923] bridge5: port 1(veth15) entered forwarding state [ 683.858149][T17918] bridge5: port 2(veth17) entered blocking state [ 683.864873][T17918] bridge5: port 2(veth17) entered disabled state [ 683.877737][T17918] veth17: entered allmulticast mode [ 683.886618][T17918] veth17: entered promiscuous mode [ 683.893061][T17918] bridge5: port 2(veth17) entered blocking state [ 683.899577][T17918] bridge5: port 2(veth17) entered forwarding state [ 683.934089][T17930] batman_adv: batadv0: Adding interface: dummy0 [ 683.941369][T17930] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.972333][T17930] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 684.055348][T17930] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 684.055348][T17930] 3ìUH†5rºBnœæ [ 684.076538][T17935] netlink: 'syz.1.3461': attribute type 2 has an invalid length. [ 684.087292][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3461'. [ 684.091118][ T30] audit: type=1107 audit(1777952514.027:9): pid=17929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ã6#õvj…E?~÷´'G„‚ž¯¯6’p(ZËY­hsð1ÃàÞ#ƒø&*+' [ 684.293171][T17940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3462'. [ 684.425507][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'. [ 684.650868][T17952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3466'. [ 684.709467][T17948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3465'. [ 684.739481][ T37] bridge5: port 1(veth15) entered disabled state [ 684.780979][ T37] bridge5: port 2(veth17) entered disabled state [ 684.961908][T17964] dummy0: mtu less than device minimum [ 684.974813][T17966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3470'. [ 685.324406][T17983] FAULT_INJECTION: forcing a failure. [ 685.324406][T17983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.344840][T17983] CPU: 1 UID: 0 PID: 17983 Comm: syz.0.3475 Not tainted syzkaller #0 PREEMPT(full) [ 685.344865][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.344876][T17983] Call Trace: [ 685.344883][T17983] [ 685.344890][T17983] dump_stack_lvl+0xe8/0x150 [ 685.344917][T17983] should_fail_ex+0x412/0x560 [ 685.344944][T17983] _copy_to_user+0x31/0xb0 [ 685.344971][T17983] btf_new_fd+0x5b4/0xd40 [ 685.345002][T17983] ? __pfx_btf_new_fd+0x10/0x10 [ 685.345024][T17983] ? bpf_token_put+0x143/0x160 [ 685.345044][T17983] ? bpf_btf_load+0x126/0x190 [ 685.345064][T17983] __sys_bpf+0x4e5/0x950 [ 685.345092][T17983] ? __pfx___sys_bpf+0x10/0x10 [ 685.345140][T17983] ? ksys_write+0x242/0x270 [ 685.345168][T17983] ? __pfx_ksys_write+0x10/0x10 [ 685.345197][T17983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.345217][T17983] __x64_sys_bpf+0x7c/0x90 [ 685.345241][T17983] do_syscall_64+0x15f/0xf80 [ 685.345262][T17983] ? trace_irq_disable+0x3b/0x140 [ 685.345287][T17983] ? clear_bhb_loop+0x40/0x90 [ 685.345310][T17983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.345327][T17983] RIP: 0033:0x7f4fa699cdd9 [ 685.345344][T17983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.345360][T17983] RSP: 002b:00007f4fa778a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.345379][T17983] RAX: ffffffffffffffda RBX: 00007f4fa6c15fa0 RCX: 00007f4fa699cdd9 [ 685.345392][T17983] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000012 [ 685.345404][T17983] RBP: 00007f4fa778a090 R08: 0000000000000000 R09: 0000000000000000 [ 685.345415][T17983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 685.345426][T17983] R13: 00007f4fa6c16038 R14: 00007f4fa6c15fa0 R15: 00007fff3329e3b8 [ 685.345460][T17983] [ 685.778762][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 685.983460][T18009] dummy0: mtu less than device minimum [ 686.372039][T18034] sctp: [Deprecated]: syz.4.3494 (pid 18034) Use of int in maxseg socket option. [ 686.372039][T18034] Use struct sctp_assoc_value instead [ 686.379423][T18026] nbd0: detected capacity change from 0 to 127 [ 686.410674][T17912] block nbd0: Send control failed (result -32) [ 686.410788][ T5625] block nbd0: Receive control failed (result -32) [ 686.424332][T17912] block nbd0: Request send failed, requeueing [ 686.441164][ T25] block nbd0: Dead connection, failed to find a fallback [ 686.449045][ T25] block nbd0: shutting down sockets [ 686.452703][T17912] blk_print_req_error: 138 callbacks suppressed [ 686.452721][T17912] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.461171][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.461241][ T25] buffer_io_error: 138 callbacks suppressed [ 686.461251][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 686.521055][T17912] Buffer I/O error on dev nbd0, logical block 1, async page read [ 686.544547][T17912] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.554212][T17912] Buffer I/O error on dev nbd0, logical block 2, async page read [ 686.577662][T17912] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.595834][T17912] Buffer I/O error on dev nbd0, logical block 3, async page read [ 686.610424][T17912] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.633869][T17912] Buffer I/O error on dev nbd0, logical block 0, async page read [ 686.652064][T17912] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.676661][T17912] Buffer I/O error on dev nbd0, logical block 1, async page read [ 686.693201][T17912] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.726245][T17912] Buffer I/O error on dev nbd0, logical block 2, async page read [ 686.746702][T17912] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.768332][T17912] Buffer I/O error on dev nbd0, logical block 3, async page read [ 686.843035][T17912] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.880834][T17912] Buffer I/O error on dev nbd0, logical block 0, async page read [ 686.933063][T17912] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.974455][T17912] Buffer I/O error on dev nbd0, logical block 1, async page read [ 687.025451][T17912] ldm_validate_partition_table(): Disk read failed. [ 687.063999][T17912] Dev nbd0: unable to read RDB block 0 [ 687.150486][T17912] nbd0: unable to read partition table [ 687.247142][T17912] ldm_validate_partition_table(): Disk read failed. [ 687.284182][T17912] Dev nbd0: unable to read RDB block 0 [ 687.321244][T17912] nbd0: unable to read partition table [ 687.567092][T18080] bond2: Removing last ns target with arp_interval on [ 687.662599][T18096] netlink: 'syz.4.3508': attribute type 1 has an invalid length. [ 687.664960][T18097] dummy0: mtu less than device minimum [ 688.511084][T18122] __nla_validate_parse: 15 callbacks suppressed [ 688.511106][T18122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3518'. [ 688.537667][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'. [ 688.810327][T18128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3519'. [ 689.043940][T18131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 693.065850][T18135] dummy0: mtu less than device minimum [ 693.245397][T18145] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3526'. [ 693.625028][T18161] dummy0: mtu less than device minimum [ 693.674239][T18145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3526'. [ 693.794457][T18167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 694.008287][T18173] dummy0: mtu less than device minimum [ 694.152877][T18176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3533'. [ 695.108117][T18208] dummy0: mtu less than device minimum [ 695.325579][T18215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.475708][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 699.791433][T18222] dummy0: mtu less than device minimum [ 700.161965][T18242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3550'. [ 700.483845][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3561'. [ 700.582118][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 700.603717][T18281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3558'. [ 700.851769][T18288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3565'. [ 700.901192][T18290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3566'. [ 701.362756][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'. [ 701.523243][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3574'. [ 701.751522][T18322] netlink: 'syz.4.3576': attribute type 1 has an invalid length. [ 701.761077][T18321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.785114][T18322] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3576'. [ 701.797267][T18324] netlink: 'syz.1.3577': attribute type 2 has an invalid length. [ 701.969219][T18329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'. [ 702.005511][T18331] netlink: 'syz.2.3581': attribute type 10 has an invalid length. [ 702.344444][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 702.350674][ T5625] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 706.104325][T18325] bridge5: entered promiscuous mode [ 706.206953][T18331] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 706.226336][T18333] dummy0: mtu less than device minimum [ 706.375169][T18356] __nla_validate_parse: 1 callbacks suppressed [ 706.375188][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 706.435360][T18358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3584'. [ 706.547868][T18343] dummy0: mtu less than device minimum [ 706.775762][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3590'. [ 707.086533][T18345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.169767][T18385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3593'. [ 707.200070][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3595'. [ 707.313139][T18395] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3597'. [ 707.338742][T18395] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3597'. [ 707.348186][T18395] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3597'. [ 707.520993][T18404] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 707.522552][T18403] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.631308][T18400] lo speed is unknown, defaulting to 1000 [ 708.219845][T18426] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3605'. [ 708.627440][T18445] netlink: 'syz.0.3611': attribute type 1 has an invalid length. [ 708.715443][T18445] bond5: entered promiscuous mode [ 708.721462][T18445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.855054][T18448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3610'. [ 708.924599][T18445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.960222][T18445] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 708.974501][T18445] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 709.028863][T18445] bond5: (slave wireguard0): making interface the new active one [ 709.048698][T18445] wireguard0: entered promiscuous mode [ 709.080552][T18445] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 709.108375][T18455] dummy0: mtu less than device minimum [ 709.311723][T18464] dummy0: entered promiscuous mode [ 709.380395][T18458] dummy0: left promiscuous mode [ 709.801257][T18478] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 709.942052][T18484] FAULT_INJECTION: forcing a failure. [ 709.942052][T18484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.959331][T18484] CPU: 1 UID: 0 PID: 18484 Comm: syz.4.3621 Not tainted syzkaller #0 PREEMPT(full) [ 709.959358][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 709.959370][T18484] Call Trace: [ 709.959378][T18484] [ 709.959385][T18484] dump_stack_lvl+0xe8/0x150 [ 709.959412][T18484] should_fail_ex+0x412/0x560 [ 709.959438][T18484] _copy_from_user+0x2d/0xb0 [ 709.959461][T18484] netlink_setsockopt+0x1af/0x730 [ 709.959483][T18484] ? __pfx_aa_sk_perm+0x10/0x10 [ 709.959506][T18484] ? __pfx_netlink_setsockopt+0x10/0x10 [ 709.959524][T18484] ? aa_sock_opt_perm+0xff/0x1a0 [ 709.959548][T18484] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 709.959569][T18484] ? __pfx_netlink_setsockopt+0x10/0x10 [ 709.959590][T18484] do_sock_setsockopt+0x17c/0x1b0 [ 709.959616][T18484] __x64_sys_setsockopt+0x13d/0x1b0 [ 709.959639][T18484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.959658][T18484] do_syscall_64+0x15f/0xf80 [ 709.959678][T18484] ? trace_irq_disable+0x3b/0x140 [ 709.959703][T18484] ? clear_bhb_loop+0x40/0x90 [ 709.959722][T18484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.959739][T18484] RIP: 0033:0x7f79ecb9cdd9 [ 709.959756][T18484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.959769][T18484] RSP: 002b:00007f79eda28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 709.959787][T18484] RAX: ffffffffffffffda RBX: 00007f79ece15fa0 RCX: 00007f79ecb9cdd9 [ 709.959799][T18484] RDX: 000000000000000a RSI: 000000000000010e RDI: 0000000000000003 [ 709.959809][T18484] RBP: 00007f79eda28090 R08: 0000000000000300 R09: 0000000000000000 [ 709.959820][T18484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.959828][T18484] R13: 00007f79ece16038 R14: 00007f79ece15fa0 R15: 00007ffd3c3b6d38 [ 709.959855][T18484] [ 710.524567][T18516] netlink: 'syz.4.3626': attribute type 10 has an invalid length. [ 710.541470][T18516] veth1_vlan: left promiscuous mode [ 710.559920][T18516] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 710.650405][T18523] netlink: 'syz.0.3628': attribute type 1 has an invalid length. [ 710.895308][T18530] dummy0: mtu less than device minimum [ 711.216200][T18543] netlink: 'syz.1.3633': attribute type 1 has an invalid length. [ 711.883717][T18564] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 712.282139][T18582] __nla_validate_parse: 6 callbacks suppressed [ 712.282159][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3643'. [ 712.365821][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3645'. [ 712.540538][T18595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3648'. [ 712.587529][T18598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3652'. [ 712.637042][T18600] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 712.647391][T18600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3653'. [ 712.789912][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'. [ 712.814864][T18609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3657'. [ 712.836596][T18609] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 712.883858][T18611] ip6gretap2: entered promiscuous mode [ 712.889710][T18611] ip6gretap2: entered allmulticast mode [ 712.927258][T18614] FAULT_INJECTION: forcing a failure. [ 712.927258][T18614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.942140][T18614] CPU: 0 UID: 0 PID: 18614 Comm: syz.3.3659 Not tainted syzkaller #0 PREEMPT(full) [ 712.942175][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 712.942185][T18614] Call Trace: [ 712.942192][T18614] [ 712.942200][T18614] dump_stack_lvl+0xe8/0x150 [ 712.942227][T18614] should_fail_ex+0x412/0x560 [ 712.942254][T18614] _copy_from_user+0x2d/0xb0 [ 712.942278][T18614] sock_ioctl_inout+0x53/0x170 [ 712.942299][T18614] ipmr_sk_ioctl+0x14f/0x1c0 [ 712.942319][T18614] ? __pfx_ipmr_sk_ioctl+0x10/0x10 [ 712.942336][T18614] ? kasan_save_free_info+0x46/0x50 [ 712.942358][T18614] ? stack_depot_save_flags+0x33/0x810 [ 712.942385][T18614] ? kasan_save_track+0x4f/0x80 [ 712.942407][T18614] ? kasan_save_track+0x3e/0x80 [ 712.942427][T18614] ? kasan_save_free_info+0x46/0x50 [ 712.942446][T18614] ? kfree+0x1c5/0x640 [ 712.942464][T18614] ? tomoyo_path_number_perm+0x501/0x630 [ 712.942484][T18614] ? security_file_ioctl+0xc3/0x2a0 [ 712.942500][T18614] ? __se_sys_ioctl+0x47/0x170 [ 712.942527][T18614] sk_ioctl+0x138/0x6d0 [ 712.942548][T18614] ? __pfx_sk_ioctl+0x10/0x10 [ 712.942593][T18614] inet_ioctl+0x484/0x560 [ 712.942621][T18614] ? __pfx_inet_ioctl+0x10/0x10 [ 712.942674][T18614] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 712.942707][T18614] sock_do_ioctl+0x101/0x320 [ 712.942745][T18614] ? __pfx_sock_do_ioctl+0x10/0x10 [ 712.942787][T18614] sock_ioctl+0x5c6/0x7f0 [ 712.942815][T18614] ? __pfx_sock_ioctl+0x10/0x10 [ 712.942840][T18614] ? __fget_files+0x2a/0x420 [ 712.942859][T18614] ? __fget_files+0x3a0/0x420 [ 712.942876][T18614] ? __fget_files+0x2a/0x420 [ 712.942899][T18614] ? bpf_lsm_file_ioctl+0x9/0x20 [ 712.942924][T18614] ? __pfx_sock_ioctl+0x10/0x10 [ 712.942948][T18614] __se_sys_ioctl+0xfc/0x170 [ 712.942971][T18614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.942988][T18614] do_syscall_64+0x15f/0xf80 [ 712.943010][T18614] ? clear_bhb_loop+0x40/0x90 [ 712.943032][T18614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.943048][T18614] RIP: 0033:0x7fc66179cdd9 [ 712.943065][T18614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.943079][T18614] RSP: 002b:00007fc662598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.943098][T18614] RAX: ffffffffffffffda RBX: 00007fc661a15fa0 RCX: 00007fc66179cdd9 [ 712.943110][T18614] RDX: 0000200000000100 RSI: 00000000000089e0 RDI: 0000000000000003 [ 712.943121][T18614] RBP: 00007fc662598090 R08: 0000000000000000 R09: 0000000000000000 [ 712.943132][T18614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.943141][T18614] R13: 00007fc661a16038 R14: 00007fc661a15fa0 R15: 00007ffee4b31558 [ 712.943169][T18614] [ 713.365788][T18619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3661'. [ 713.510633][T18632] dummy0: mtu less than device minimum [ 713.615393][T18641] netlink: 'syz.2.3662': attribute type 1 has an invalid length. [ 713.774880][T18650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.852621][T18656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.871284][T18654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3676'. [ 714.019683][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3678'. [ 714.126713][T18669] gre0: entered promiscuous mode [ 714.132099][T18669] gre0: entered allmulticast mode [ 714.451670][T18685] dummy0: mtu less than device minimum [ 714.463263][T18683] tipc: Enabling of bearer rejected, already enabled [ 715.490326][T18713] netlink: 'syz.4.3696': attribute type 1 has an invalid length. [ 719.919274][T18736] dummy0: mtu less than device minimum [ 719.977986][T18738] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 720.030816][T18695] lo speed is unknown, defaulting to 1000 [ 720.215120][T18756] dummy0: mtu less than device minimum [ 720.687888][T18743] lo speed is unknown, defaulting to 1000 [ 720.694959][T18777] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 721.432044][T18792] __nla_validate_parse: 4 callbacks suppressed [ 721.432065][T18792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3715'. [ 721.482029][T18796] netlink: 'syz.1.3716': attribute type 1 has an invalid length. [ 721.491448][T18796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3716'. [ 721.654646][T18799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3717'. [ 721.688306][T18799] vlan1: entered promiscuous mode [ 721.693444][T18799] bond0: entered promiscuous mode [ 721.698839][T18799] bond_slave_0: entered promiscuous mode [ 721.704676][T18799] bond_slave_1: entered promiscuous mode [ 722.173457][T18809] dummy0: mtu less than device minimum [ 722.375962][T18815] tipc: Enabling of bearer rejected, failed to enable media [ 722.441513][T18817] dummy0: mtu less than device minimum [ 722.787941][T18832] netlink: 'syz.1.3726': attribute type 1 has an invalid length. [ 722.911935][T18828] lo speed is unknown, defaulting to 1000 [ 723.106562][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 723.430962][T18855] FAULT_INJECTION: forcing a failure. [ 723.430962][T18855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.444520][T18855] CPU: 0 UID: 0 PID: 18855 Comm: syz.2.3736 Not tainted syzkaller #0 PREEMPT(full) [ 723.444551][T18855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 723.444561][T18855] Call Trace: [ 723.444568][T18855] [ 723.444575][T18855] dump_stack_lvl+0xe8/0x150 [ 723.444601][T18855] should_fail_ex+0x412/0x560 [ 723.444629][T18855] _copy_from_iter+0x1d3/0x1670 [ 723.444654][T18855] ? rcu_is_watching+0x15/0xb0 [ 723.444681][T18855] ? __pfx__copy_from_iter+0x10/0x10 [ 723.444711][T18855] ? netlink_sendmsg+0x650/0xb40 [ 723.444730][T18855] ? skb_put+0x11b/0x210 [ 723.444754][T18855] netlink_sendmsg+0x6c0/0xb40 [ 723.444784][T18855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.444810][T18855] ? aa_sock_msg_perm+0xf1/0x1b0 [ 723.444833][T18855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.444860][T18855] ____sys_sendmsg+0x972/0x9f0 [ 723.444892][T18855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.444924][T18855] ? import_iovec+0x73/0xa0 [ 723.444951][T18855] ___sys_sendmsg+0x2a5/0x360 [ 723.444972][T18855] ? __lock_acquire+0x6b5/0x2cf0 [ 723.445005][T18855] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.445061][T18855] ? __fget_files+0x2a/0x420 [ 723.445082][T18855] ? __fget_files+0x3a0/0x420 [ 723.445112][T18855] __x64_sys_sendmsg+0x1bd/0x2a0 [ 723.445138][T18855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.445170][T18855] ? __pfx_ksys_write+0x10/0x10 [ 723.445203][T18855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.445222][T18855] do_syscall_64+0x15f/0xf80 [ 723.445243][T18855] ? trace_irq_disable+0x3b/0x140 [ 723.445266][T18855] ? clear_bhb_loop+0x40/0x90 [ 723.445288][T18855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.445305][T18855] RIP: 0033:0x7fc16279cdd9 [ 723.445322][T18855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.445337][T18855] RSP: 002b:00007fc16360b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.445355][T18855] RAX: ffffffffffffffda RBX: 00007fc162a15fa0 RCX: 00007fc16279cdd9 [ 723.445372][T18855] RDX: 0000000000040000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 723.445383][T18855] RBP: 00007fc16360b090 R08: 0000000000000000 R09: 0000000000000000 [ 723.445394][T18855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.445405][T18855] R13: 00007fc162a16038 R14: 00007fc162a15fa0 R15: 00007ffe070829b8 [ 723.445435][T18855] [ 724.375871][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 724.487849][T18884] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3744'. [ 724.539430][T18887] dummy0: mtu less than device minimum [ 724.942009][T18897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3746'. [ 725.021151][T18899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3749'. [ 725.095526][T18903] dummy0: mtu less than device minimum [ 725.103736][T18904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3749'. [ 725.640589][T18916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3754'. [ 726.229084][T18938] dummy0: entered promiscuous mode [ 726.239855][T18937] dummy0: left promiscuous mode [ 726.467542][T18950] Cannot find add_set index 2 as target [ 726.850487][T18964] dummy0: mtu less than device minimum [ 727.073816][T18969] __nla_validate_parse: 4 callbacks suppressed [ 727.073836][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 727.107802][T18971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3776'. [ 727.264321][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'. [ 727.366528][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 727.725622][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.770606][T19005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.778672][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 727.882900][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 728.044433][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3796'. [ 728.186187][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 728.226789][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3798'. [ 728.323874][T19029] FAULT_INJECTION: forcing a failure. [ 728.323874][T19029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.371900][T19029] CPU: 1 UID: 0 PID: 19029 Comm: syz.4.3800 Not tainted syzkaller #0 PREEMPT(full) [ 728.371926][T19029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 728.371937][T19029] Call Trace: [ 728.371945][T19029] [ 728.371952][T19029] dump_stack_lvl+0xe8/0x150 [ 728.371980][T19029] should_fail_ex+0x412/0x560 [ 728.372007][T19029] _copy_from_user+0x2d/0xb0 [ 728.372031][T19029] kstrtouint_from_user+0xd6/0x180 [ 728.372054][T19029] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 728.372092][T19029] proc_fail_nth_write+0x8e/0x210 [ 728.372115][T19029] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 728.372143][T19029] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 728.372165][T19029] vfs_write+0x29a/0xb90 [ 728.372199][T19029] ? __pfx_vfs_write+0x10/0x10 [ 728.372224][T19029] ? __fget_files+0x2a/0x420 [ 728.372248][T19029] ? __fget_files+0x3a0/0x420 [ 728.372265][T19029] ? __fget_files+0x2a/0x420 [ 728.372292][T19029] ksys_write+0x150/0x270 [ 728.372319][T19029] ? __pfx_ksys_write+0x10/0x10 [ 728.372352][T19029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.372371][T19029] do_syscall_64+0x15f/0xf80 [ 728.372392][T19029] ? trace_irq_disable+0x3b/0x140 [ 728.372418][T19029] ? clear_bhb_loop+0x40/0x90 [ 728.372441][T19029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.372458][T19029] RIP: 0033:0x7f79ecb5d60e [ 728.372476][T19029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 728.372492][T19029] RSP: 002b:00007f79eda27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 728.372511][T19029] RAX: ffffffffffffffda RBX: 00007f79eda286c0 RCX: 00007f79ecb5d60e [ 728.372524][T19029] RDX: 0000000000000001 RSI: 00007f79eda280a0 RDI: 0000000000000004 [ 728.372551][T19029] RBP: 00007f79eda28090 R08: 0000000000000000 R09: 0000000000000000 [ 728.372561][T19029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.372572][T19029] R13: 00007f79ece16038 R14: 00007f79ece15fa0 R15: 00007ffd3c3b6d38 [ 728.372603][T19029] [ 728.681383][T19037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3802'. [ 728.833890][T19048] netlink: 'syz.3.3809': attribute type 1 has an invalid length. [ 728.884140][T19048] netlink: 'syz.3.3809': attribute type 2 has an invalid length. [ 728.950543][T19056] netlink: 'syz.1.3812': attribute type 1 has an invalid length. [ 729.075911][T19069] netlink: 'syz.2.3818': attribute type 1 has an invalid length. [ 729.179664][T19069] bond4: entered promiscuous mode [ 729.196290][T19069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 729.236061][T19073] veth11: entered promiscuous mode [ 729.245571][T19073] veth11: entered allmulticast mode [ 729.255861][T19073] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 729.357865][T19085] netlink: 'syz.0.3821': attribute type 2 has an invalid length. [ 729.367350][T19085] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 729.646235][T19098] IPVS: Error connecting to the multicast addr [ 730.518804][T19142] netlink: 'syz.3.3840': attribute type 1 has an invalid length. [ 734.151383][T19140] dummy0: mtu less than device minimum [ 734.512396][T19175] netlink: 'syz.4.3845': attribute type 8 has an invalid length. [ 734.541993][T19172] bridge4: entered promiscuous mode [ 734.628386][T19181] dummy0: mtu less than device minimum [ 734.644920][T19183] x_tables: duplicate entry at hook 2 [ 734.669139][T19183] __nla_validate_parse: 8 callbacks suppressed [ 734.669159][T19183] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3852'. [ 734.819008][T19190] netlink: 'syz.1.3854': attribute type 1 has an invalid length. [ 734.827063][T19190] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3854'. [ 735.055335][T19192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3855'. [ 735.545893][T19215] dummy0: mtu less than device minimum [ 736.134594][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3872'. [ 736.287384][T19252] FAULT_INJECTION: forcing a failure. [ 736.287384][T19252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.303408][T19252] CPU: 0 UID: 0 PID: 19252 Comm: syz.3.3878 Not tainted syzkaller #0 PREEMPT(full) [ 736.303428][T19252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.303435][T19252] Call Trace: [ 736.303441][T19252] [ 736.303449][T19252] dump_stack_lvl+0xe8/0x150 [ 736.303469][T19252] should_fail_ex+0x412/0x560 [ 736.303487][T19252] _copy_from_user+0x2d/0xb0 [ 736.303504][T19252] do_ipt_set_ctl+0x6a5/0xe00 [ 736.303517][T19252] ? rcu_is_watching+0x15/0xb0 [ 736.303532][T19252] ? trace_contention_end+0x3d/0x140 [ 736.303548][T19252] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 736.303565][T19252] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 736.303576][T19252] ? __pfx___mutex_lock+0x10/0x10 [ 736.303591][T19252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 736.303607][T19252] ? __pfx_aa_sk_perm+0x10/0x10 [ 736.303623][T19252] nf_setsockopt+0x26f/0x290 [ 736.303636][T19252] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 736.303648][T19252] do_sock_setsockopt+0x17c/0x1b0 [ 736.303665][T19252] __x64_sys_setsockopt+0x13d/0x1b0 [ 736.303679][T19252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.303690][T19252] do_syscall_64+0x15f/0xf80 [ 736.303703][T19252] ? trace_irq_disable+0x3b/0x140 [ 736.303826][T19252] ? clear_bhb_loop+0x40/0x90 [ 736.303842][T19252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.303855][T19252] RIP: 0033:0x7fc66179cdd9 [ 736.303868][T19252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.303876][T19252] RSP: 002b:00007fc662598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 736.303888][T19252] RAX: ffffffffffffffda RBX: 00007fc661a15fa0 RCX: 00007fc66179cdd9 [ 736.303895][T19252] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 736.303901][T19252] RBP: 00007fc662598090 R08: 00000000000002f8 R09: 0000000000000000 [ 736.303907][T19252] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 736.303913][T19252] R13: 00007fc661a16038 R14: 00007fc661a15fa0 R15: 00007ffee4b31558 [ 736.303929][T19252] [ 736.584846][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3880'. [ 736.695441][T19265] FAULT_INJECTION: forcing a failure. [ 736.695441][T19265] name failslab, interval 1, probability 0, space 0, times 0 [ 736.727737][T19265] CPU: 1 UID: 0 PID: 19265 Comm: syz.1.3884 Not tainted syzkaller #0 PREEMPT(full) [ 736.727762][T19265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.727777][T19265] Call Trace: [ 736.727785][T19265] [ 736.727793][T19265] dump_stack_lvl+0xe8/0x150 [ 736.727823][T19265] should_fail_ex+0x412/0x560 [ 736.727848][T19265] ? __d_alloc+0x37/0x6f0 [ 736.727869][T19265] should_failslab+0xa8/0x100 [ 736.727897][T19265] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 736.727927][T19265] __d_alloc+0x37/0x6f0 [ 736.727954][T19265] d_alloc_pseudo+0x21/0xc0 [ 736.727977][T19265] alloc_file_pseudo+0xdd/0x240 [ 736.728001][T19265] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 736.728018][T19265] ? do_raw_spin_unlock+0xf5/0x210 [ 736.728045][T19265] ? _raw_spin_unlock+0x28/0x50 [ 736.728072][T19265] sock_alloc_file+0xb8/0x2e0 [ 736.728096][T19265] ? __sys_socket+0x12b/0x1b0 [ 736.728116][T19265] __sys_socket+0x13c/0x1b0 [ 736.728134][T19265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.728154][T19265] __x64_sys_socket+0x7a/0x90 [ 736.728173][T19265] do_syscall_64+0x15f/0xf80 [ 736.728193][T19265] ? trace_irq_disable+0x3b/0x140 [ 736.728220][T19265] ? clear_bhb_loop+0x40/0x90 [ 736.728241][T19265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.728259][T19265] RIP: 0033:0x7f36a539cdd9 [ 736.728276][T19265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.728290][T19265] RSP: 002b:00007f36a6333fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 736.728310][T19265] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f36a539cdd9 [ 736.728322][T19265] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 736.728333][T19265] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 736.728344][T19265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.728354][T19265] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 736.728384][T19265] [ 737.229021][T19279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3887'. [ 737.431852][T19288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3891'. [ 737.883713][T19307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3899'. [ 737.985427][T19315] netlink: 'syz.2.3901': attribute type 1 has an invalid length. [ 737.995525][T19315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3901'. [ 738.010054][T19316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3904'. [ 738.634032][T19353] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 738.802940][T19357] lo speed is unknown, defaulting to 1000 [ 738.805003][T19360] dummy0: mtu less than device minimum [ 739.192361][T19370] FAULT_INJECTION: forcing a failure. [ 739.192361][T19370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.214092][T19370] CPU: 1 UID: 0 PID: 19370 Comm: syz.1.3922 Not tainted syzkaller #0 PREEMPT(full) [ 739.214121][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 739.214132][T19370] Call Trace: [ 739.214139][T19370] [ 739.214147][T19370] dump_stack_lvl+0xe8/0x150 [ 739.214174][T19370] should_fail_ex+0x412/0x560 [ 739.214202][T19370] _copy_from_iter+0x3b0/0x1670 [ 739.214237][T19370] ? __pfx__copy_from_iter+0x10/0x10 [ 739.214268][T19370] ? __alloc_skb+0x4e5/0x7d0 [ 739.214288][T19370] ? skb_put+0x11b/0x210 [ 739.214311][T19370] pfkey_sendmsg+0x265/0x1120 [ 739.214352][T19370] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 739.214380][T19370] ? aa_sk_perm+0x6d5/0x900 [ 739.214400][T19370] ? unwind_next_frame+0xa6/0x2550 [ 739.214430][T19370] ? __pfx_aa_sk_perm+0x10/0x10 [ 739.214449][T19370] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 739.214479][T19370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 739.214503][T19370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.214530][T19370] ____sys_sendmsg+0x972/0x9f0 [ 739.214560][T19370] ? __might_fault+0xaf/0x130 [ 739.214588][T19370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.214620][T19370] ? import_iovec+0x73/0xa0 [ 739.214647][T19370] ___sys_sendmsg+0x2a5/0x360 [ 739.214669][T19370] ? __lock_acquire+0x6b5/0x2cf0 [ 739.214693][T19370] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.214722][T19370] ? kstrtouint+0x6e/0xe0 [ 739.214769][T19370] ? __fget_files+0x2a/0x420 [ 739.214789][T19370] ? __fget_files+0x3a0/0x420 [ 739.214820][T19370] __sys_sendmmsg+0x27c/0x4e0 [ 739.214848][T19370] ? __pfx___sys_sendmmsg+0x10/0x10 [ 739.214869][T19370] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 739.214918][T19370] ? ksys_write+0x242/0x270 [ 739.214946][T19370] ? __pfx_ksys_write+0x10/0x10 [ 739.214977][T19370] __x64_sys_sendmmsg+0xa0/0xc0 [ 739.215001][T19370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.215019][T19370] do_syscall_64+0x15f/0xf80 [ 739.215040][T19370] ? trace_irq_disable+0x3b/0x140 [ 739.215065][T19370] ? clear_bhb_loop+0x40/0x90 [ 739.215087][T19370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.215105][T19370] RIP: 0033:0x7f36a539cdd9 [ 739.215122][T19370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.215137][T19370] RSP: 002b:00007f36a6334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 739.215156][T19370] RAX: ffffffffffffffda RBX: 00007f36a5615fa0 RCX: 00007f36a539cdd9 [ 739.215169][T19370] RDX: 0000000000000001 RSI: 0000200000006a00 RDI: 0000000000000003 [ 739.215180][T19370] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 739.215191][T19370] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.215202][T19370] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 739.215247][T19370] [ 739.747959][T19379] netlink: 'syz.1.3924': attribute type 3 has an invalid length. [ 739.886676][T19389] FAULT_INJECTION: forcing a failure. [ 739.886676][T19389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.935325][T19389] CPU: 1 UID: 0 PID: 19389 Comm: syz.2.3929 Not tainted syzkaller #0 PREEMPT(full) [ 739.935350][T19389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 739.935361][T19389] Call Trace: [ 739.935368][T19389] [ 739.935376][T19389] dump_stack_lvl+0xe8/0x150 [ 739.935403][T19389] should_fail_ex+0x412/0x560 [ 739.935430][T19389] _copy_from_user+0x2d/0xb0 [ 739.935457][T19389] ___sys_sendmsg+0x1c6/0x360 [ 739.935477][T19389] ? __lock_acquire+0x6b5/0x2cf0 [ 739.935500][T19389] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.935557][T19389] ? __fget_files+0x2a/0x420 [ 739.935577][T19389] ? __fget_files+0x3a0/0x420 [ 739.935608][T19389] __x64_sys_sendmsg+0x1bd/0x2a0 [ 739.935633][T19389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.935666][T19389] ? __pfx_ksys_write+0x10/0x10 [ 739.935698][T19389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.935717][T19389] do_syscall_64+0x15f/0xf80 [ 739.935737][T19389] ? trace_irq_disable+0x3b/0x140 [ 739.935760][T19389] ? clear_bhb_loop+0x40/0x90 [ 739.935780][T19389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.935796][T19389] RIP: 0033:0x7fc16279cdd9 [ 739.935812][T19389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.935826][T19389] RSP: 002b:00007fc16360b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.935843][T19389] RAX: ffffffffffffffda RBX: 00007fc162a15fa0 RCX: 00007fc16279cdd9 [ 739.935855][T19389] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 739.935865][T19389] RBP: 00007fc16360b090 R08: 0000000000000000 R09: 0000000000000000 [ 739.935875][T19389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.935885][T19389] R13: 00007fc162a16038 R14: 00007fc162a15fa0 R15: 00007ffe070829b8 [ 739.935915][T19389] [ 740.319750][T19399] dummy0: mtu less than device minimum [ 740.349933][T19401] __nla_validate_parse: 3 callbacks suppressed [ 740.349953][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3933'. [ 740.447698][T19395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3928'. [ 744.615194][T19412] dummy0: mtu less than device minimum [ 744.727467][T19426] netlink: 'syz.4.3941': attribute type 8 has an invalid length. [ 744.872818][T19429] netlink: 'syz.2.3942': attribute type 8 has an invalid length. [ 744.911719][T19433] netlink: 'syz.1.3944': attribute type 1 has an invalid length. [ 744.997269][T19439] dummy0: mtu less than device minimum [ 745.023446][T19437] netlink: 'syz.3.3946': attribute type 2 has an invalid length. [ 745.031665][T19437] netlink: 'syz.3.3946': attribute type 1 has an invalid length. [ 745.040431][T19437] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3946'. [ 745.057276][T19437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.074711][T19442] dummy0: mtu less than device minimum [ 745.153703][T19445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3949'. [ 745.326139][T19451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3950'. [ 745.467794][T19456] dummy0: mtu less than device minimum [ 745.785614][T19465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.885346][T19472] dummy0: mtu less than device minimum [ 746.065707][T19482] tipc: Resetting bearer [ 746.079525][T19482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.088431][T19482] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.106413][T19482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.164203][T19482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.177367][T19482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.187456][T19482] tipc: Resetting bearer [ 746.200033][T19482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 746.211211][T19482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.227261][T19482] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 746.247301][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.254725][ T7101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.270230][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.277531][ T7101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.416094][T19487] tipc: Enabled bearer , priority 0 [ 746.479117][T19487] syzkaller0: entered promiscuous mode [ 746.486725][T19487] syzkaller0: entered allmulticast mode [ 746.495121][T19487] tipc: Resetting bearer [ 746.508206][T19486] tipc: Resetting bearer [ 746.534966][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 746.955006][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3969'. [ 747.075494][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 748.667696][T19534] netlink: 'syz.4.3978': attribute type 5 has an invalid length. [ 748.941068][T19541] FAULT_INJECTION: forcing a failure. [ 748.941068][T19541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.956275][T19541] CPU: 0 UID: 0 PID: 19541 Comm: syz.4.3981 Not tainted syzkaller #0 PREEMPT(full) [ 748.956304][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.956313][T19541] Call Trace: [ 748.956319][T19541] [ 748.956326][T19541] dump_stack_lvl+0xe8/0x150 [ 748.956349][T19541] should_fail_ex+0x412/0x560 [ 748.956372][T19541] _copy_from_iter+0x1d3/0x1670 [ 748.956394][T19541] ? rcu_is_watching+0x15/0xb0 [ 748.956419][T19541] ? __pfx__copy_from_iter+0x10/0x10 [ 748.956452][T19541] ? netlink_sendmsg+0x650/0xb40 [ 748.956470][T19541] ? skb_put+0x11b/0x210 [ 748.956490][T19541] netlink_sendmsg+0x6c0/0xb40 [ 748.956515][T19541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.956536][T19541] ? aa_sock_msg_perm+0xf1/0x1b0 [ 748.956556][T19541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.956579][T19541] ____sys_sendmsg+0x972/0x9f0 [ 748.956598][T19541] ? __might_fault+0xaf/0x130 [ 748.956622][T19541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.956648][T19541] ? import_iovec+0x73/0xa0 [ 748.956670][T19541] ___sys_sendmsg+0x2a5/0x360 [ 748.956689][T19541] ? __lock_acquire+0x6b5/0x2cf0 [ 748.956708][T19541] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.956757][T19541] ? __fget_files+0x2a/0x420 [ 748.956773][T19541] ? __fget_files+0x3a0/0x420 [ 748.956799][T19541] __x64_sys_sendmsg+0x1bd/0x2a0 [ 748.956820][T19541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.956847][T19541] ? __pfx_ksys_write+0x10/0x10 [ 748.956875][T19541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.956891][T19541] do_syscall_64+0x15f/0xf80 [ 748.956914][T19541] ? trace_irq_disable+0x3b/0x140 [ 748.956935][T19541] ? clear_bhb_loop+0x40/0x90 [ 748.956954][T19541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.956969][T19541] RIP: 0033:0x7f79ecb9cdd9 [ 748.956986][T19541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.956998][T19541] RSP: 002b:00007f79eda28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.957015][T19541] RAX: ffffffffffffffda RBX: 00007f79ece15fa0 RCX: 00007f79ecb9cdd9 [ 748.957025][T19541] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 748.957034][T19541] RBP: 00007f79eda28090 R08: 0000000000000000 R09: 0000000000000000 [ 748.957043][T19541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.957051][T19541] R13: 00007f79ece16038 R14: 00007f79ece15fa0 R15: 00007ffd3c3b6d38 [ 748.957076][T19541] [ 749.373650][T19545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3982'. [ 750.604717][T19486] tipc: Disabling bearer [ 750.645027][T19511] dummy0: entered promiscuous mode [ 750.650685][T19511] dummy0: left promiscuous mode [ 750.655936][T19513] dummy0: mtu less than device minimum [ 750.902619][T19559] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3987'. [ 750.933244][T19558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.944845][T19562] netlink: 'syz.2.3988': attribute type 3 has an invalid length. [ 751.136031][T19572] dummy0: mtu less than device minimum [ 751.251987][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3996'. [ 751.356481][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'. [ 751.421715][T19596] netlink: 'syz.1.3998': attribute type 1 has an invalid length. [ 751.558405][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4003'. [ 751.703031][T19613] xt_hashlimit: max too large, truncated to 1048576 [ 751.712530][T19613] xt_bpf: check failed: parse error [ 751.761456][T19615] netlink: 'syz.3.4006': attribute type 8 has an invalid length. [ 752.111429][T19624] FAULT_INJECTION: forcing a failure. [ 752.111429][T19624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.125256][T19624] CPU: 1 UID: 0 PID: 19624 Comm: syz.4.4009 Not tainted syzkaller #0 PREEMPT(full) [ 752.125281][T19624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.125292][T19624] Call Trace: [ 752.125299][T19624] [ 752.125307][T19624] dump_stack_lvl+0xe8/0x150 [ 752.125335][T19624] should_fail_ex+0x412/0x560 [ 752.125363][T19624] _copy_from_iter+0x1d3/0x1670 [ 752.125388][T19624] ? rcu_is_watching+0x15/0xb0 [ 752.125437][T19624] ? __pfx__copy_from_iter+0x10/0x10 [ 752.125467][T19624] ? netlink_sendmsg+0x650/0xb40 [ 752.125488][T19624] ? skb_put+0x11b/0x210 [ 752.125514][T19624] netlink_sendmsg+0x6c0/0xb40 [ 752.125545][T19624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.125571][T19624] ? aa_sock_msg_perm+0xf1/0x1b0 [ 752.125595][T19624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.125622][T19624] ____sys_sendmsg+0x972/0x9f0 [ 752.125645][T19624] ? __might_fault+0xaf/0x130 [ 752.125674][T19624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.125705][T19624] ? import_iovec+0x73/0xa0 [ 752.125732][T19624] ___sys_sendmsg+0x2a5/0x360 [ 752.125753][T19624] ? __lock_acquire+0x6b5/0x2cf0 [ 752.125776][T19624] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.125833][T19624] ? __fget_files+0x2a/0x420 [ 752.125853][T19624] ? __fget_files+0x3a0/0x420 [ 752.125884][T19624] __x64_sys_sendmsg+0x1bd/0x2a0 [ 752.125909][T19624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.125941][T19624] ? __pfx_ksys_write+0x10/0x10 [ 752.125970][T19624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.125987][T19624] do_syscall_64+0x15f/0xf80 [ 752.126008][T19624] ? trace_irq_disable+0x3b/0x140 [ 752.126033][T19624] ? clear_bhb_loop+0x40/0x90 [ 752.126056][T19624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.126073][T19624] RIP: 0033:0x7f79ecb9cdd9 [ 752.126090][T19624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.126105][T19624] RSP: 002b:00007f79eda28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.126125][T19624] RAX: ffffffffffffffda RBX: 00007f79ece15fa0 RCX: 00007f79ecb9cdd9 [ 752.126141][T19624] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 752.126152][T19624] RBP: 00007f79eda28090 R08: 0000000000000000 R09: 0000000000000000 [ 752.126162][T19624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.126172][T19624] R13: 00007f79ece16038 R14: 00007f79ece15fa0 R15: 00007ffd3c3b6d38 [ 752.126204][T19624] [ 752.834740][T19645] tipc: Resetting bearer [ 752.875958][T19657] netlink: 'syz.3.4018': attribute type 8 has an invalid length. [ 752.881581][T19645] bridge0: port 4(syz_tun) entered disabled state [ 752.911672][T19645] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.920302][T19645] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.207869][T19662] netlink: 'syz.2.4020': attribute type 1 has an invalid length. [ 753.240168][T19645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.264444][T19645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.288395][T19645] tipc: Resetting bearer [ 753.451259][T19662] bond5: entered promiscuous mode [ 753.469429][T19662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 753.521088][T19664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 753.549712][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 753.553043][T19664] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 753.590545][T19664] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 753.612936][T19664] bond5: (slave vcan1): making interface the new active one [ 753.641407][T19664] vcan1: entered promiscuous mode [ 753.668152][T19664] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 753.949904][T19690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4027'. [ 754.286082][T19716] netlink: 'syz.4.4031': attribute type 8 has an invalid length. [ 754.294247][T19705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4028'. [ 758.509844][T19740] netlink: 'syz.0.4035': attribute type 3 has an invalid length. [ 758.522357][T19740] netlink: 'syz.0.4035': attribute type 3 has an invalid length. [ 758.531166][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4035'. [ 758.633962][T19758] FAULT_INJECTION: forcing a failure. [ 758.633962][T19758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.648899][T19758] CPU: 1 UID: 0 PID: 19758 Comm: syz.3.4041 Not tainted syzkaller #0 PREEMPT(full) [ 758.648923][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.648934][T19758] Call Trace: [ 758.648941][T19758] [ 758.648949][T19758] dump_stack_lvl+0xe8/0x150 [ 758.648980][T19758] should_fail_ex+0x412/0x560 [ 758.649008][T19758] _copy_from_user+0x2d/0xb0 [ 758.649033][T19758] ___sys_sendmsg+0x1c6/0x360 [ 758.649056][T19758] ? __lock_acquire+0x6b5/0x2cf0 [ 758.649080][T19758] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.649107][T19758] ? kstrtouint+0x6e/0xe0 [ 758.649151][T19758] ? __fget_files+0x2a/0x420 [ 758.649171][T19758] ? __fget_files+0x3a0/0x420 [ 758.649201][T19758] __sys_sendmmsg+0x27c/0x4e0 [ 758.649229][T19758] ? __pfx___sys_sendmmsg+0x10/0x10 [ 758.649249][T19758] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 758.649297][T19758] ? ksys_write+0x242/0x270 [ 758.649321][T19758] ? __pfx_ksys_write+0x10/0x10 [ 758.649351][T19758] __x64_sys_sendmmsg+0xa0/0xc0 [ 758.649373][T19758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.649392][T19758] do_syscall_64+0x15f/0xf80 [ 758.649411][T19758] ? trace_irq_disable+0x3b/0x140 [ 758.649435][T19758] ? clear_bhb_loop+0x40/0x90 [ 758.649457][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.649475][T19758] RIP: 0033:0x7fc66179cdd9 [ 758.649491][T19758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.649506][T19758] RSP: 002b:00007fc662598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 758.649525][T19758] RAX: ffffffffffffffda RBX: 00007fc661a15fa0 RCX: 00007fc66179cdd9 [ 758.649539][T19758] RDX: 0000000000000001 RSI: 0000200000004f80 RDI: 0000000000000004 [ 758.649550][T19758] RBP: 00007fc662598090 R08: 0000000000000000 R09: 0000000000000000 [ 758.649560][T19758] R10: 0000000000044880 R11: 0000000000000246 R12: 0000000000000001 [ 758.649570][T19758] R13: 00007fc661a16038 R14: 00007fc661a15fa0 R15: 00007ffee4b31558 [ 758.649600][T19758] [ 758.923354][T19762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4043'. [ 758.932499][T19762] openvswitch: netlink: Flow actions attr not present in new flow. [ 758.983596][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'. [ 759.089292][T19766] dummy0: mtu less than device minimum [ 759.363609][T19778] netlink: 'syz.2.4050': attribute type 8 has an invalid length. [ 759.374525][T19781] netlink: 'syz.0.4049': attribute type 1 has an invalid length. [ 759.887965][T19805] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 760.151423][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 760.167819][T19821] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 760.178474][T19821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.244243][T19825] dummy0: mtu less than device minimum [ 760.554180][T19837] netlink: 'syz.2.4068': attribute type 29 has an invalid length. [ 760.562411][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 760.572272][T19837] netlink: 'syz.2.4068': attribute type 29 has an invalid length. [ 760.580838][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 760.590299][T19837] netlink: 'syz.2.4068': attribute type 29 has an invalid length. [ 760.599783][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 760.609115][T19837] netlink: 'syz.2.4068': attribute type 29 has an invalid length. [ 760.617069][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 760.626814][T19837] netlink: 'syz.2.4068': attribute type 29 has an invalid length. [ 760.634949][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 760.644165][T19837] netlink: 'syz.2.4068': attribute type 29 has an invalid length. [ 760.652170][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 761.159087][T19861] tipc: Enabled bearer , priority 0 [ 761.234360][T19861] syzkaller0: entered promiscuous mode [ 761.243734][T19861] syzkaller0: entered allmulticast mode [ 761.253027][T19861] tipc: Resetting bearer [ 761.294155][T19859] tipc: Resetting bearer [ 761.645622][T19877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.164479][T19894] FAULT_INJECTION: forcing a failure. [ 762.164479][T19894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.180118][T19894] CPU: 0 UID: 0 PID: 19894 Comm: syz.3.4087 Not tainted syzkaller #0 PREEMPT(full) [ 762.180141][T19894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.180150][T19894] Call Trace: [ 762.180157][T19894] [ 762.180164][T19894] dump_stack_lvl+0xe8/0x150 [ 762.180187][T19894] should_fail_ex+0x412/0x560 [ 762.180211][T19894] _copy_from_user+0x2d/0xb0 [ 762.180234][T19894] ipv6_flowlabel_opt+0x147/0x28e0 [ 762.180260][T19894] ? register_lock_class+0x31/0x2e0 [ 762.180285][T19894] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 762.180304][T19894] ? __pfx___schedule+0x10/0x10 [ 762.180334][T19894] ? irqentry_exit+0x218/0x730 [ 762.180351][T19894] ? lockdep_hardirqs_on+0x7a/0x110 [ 762.180368][T19894] ? irqentry_exit+0x218/0x730 [ 762.180384][T19894] ? trace_irq_disable+0x3b/0x140 [ 762.180420][T19894] ? do_ipv6_setsockopt+0x8a2/0x3150 [ 762.180442][T19894] do_ipv6_setsockopt+0xd9f/0x3150 [ 762.180460][T19894] ? get_pid_task+0x20/0x1f0 [ 762.180486][T19894] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 762.180513][T19894] ? get_pid_task+0x20/0x1f0 [ 762.180530][T19894] ? get_pid_task+0x20/0x1f0 [ 762.180546][T19894] ? get_pid_task+0x20/0x1f0 [ 762.180575][T19894] ? __lock_acquire+0x6b5/0x2cf0 [ 762.180609][T19894] ? aa_sk_perm+0x6d5/0x900 [ 762.180628][T19894] ? __fget_files+0x2a/0x420 [ 762.180650][T19894] ? __pfx_aa_sk_perm+0x10/0x10 [ 762.180670][T19894] ? __fget_files+0x2a/0x420 [ 762.180684][T19894] ? aa_sock_opt_perm+0xff/0x1a0 [ 762.180706][T19894] ipv6_setsockopt+0x59/0x170 [ 762.180725][T19894] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 762.180744][T19894] do_sock_setsockopt+0x17c/0x1b0 [ 762.180768][T19894] __x64_sys_setsockopt+0x13d/0x1b0 [ 762.180789][T19894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.180806][T19894] do_syscall_64+0x15f/0xf80 [ 762.180824][T19894] ? trace_irq_disable+0x3b/0x140 [ 762.180845][T19894] ? clear_bhb_loop+0x40/0x90 [ 762.180863][T19894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.180878][T19894] RIP: 0033:0x7fc66179cdd9 [ 762.180894][T19894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.180907][T19894] RSP: 002b:00007fc662598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 762.180924][T19894] RAX: ffffffffffffffda RBX: 00007fc661a15fa0 RCX: 00007fc66179cdd9 [ 762.180935][T19894] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000005 [ 762.180944][T19894] RBP: 00007fc662598090 R08: 0000000000000020 R09: 0000000000000000 [ 762.180953][T19894] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 762.180963][T19894] R13: 00007fc661a16038 R14: 00007fc661a15fa0 R15: 00007ffee4b31558 [ 762.180989][T19894] [ 764.732668][T19859] tipc: Disabling bearer [ 764.904414][T19902] __nla_validate_parse: 29 callbacks suppressed [ 764.904435][T19902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4089'. [ 764.937685][T19904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4090'. [ 764.986422][T19906] validate_nla: 25 callbacks suppressed [ 764.986442][T19906] netlink: 'syz.1.4091': attribute type 16 has an invalid length. [ 765.021811][T19906] netlink: 'syz.1.4091': attribute type 3 has an invalid length. [ 765.039534][T19906] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4091'. [ 765.379726][T19928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.612684][T19937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4104'. [ 765.752894][T19943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4107'. [ 768.574433][T19964] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4114'. [ 768.635530][T19957] : renamed from hsr0 [ 768.717917][T19978] netlink: 'syz.0.4115': attribute type 8 has an invalid length. [ 768.773600][T19981] dummy0: mtu less than device minimum [ 769.524928][T19999] xfrm1: entered allmulticast mode [ 769.532007][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 769.583204][T19999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4124'. [ 769.588629][T19997] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4122'. [ 769.737238][T20007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.818142][T20013] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 769.965858][T20032] netlink: 'syz.2.4132': attribute type 8 has an invalid length. [ 769.981620][T20028] dummy0: mtu less than device minimum [ 770.078380][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4136'. [ 770.350513][T20022] lo speed is unknown, defaulting to 1000 [ 770.667409][T20056] sctp: [Deprecated]: syz.0.4140 (pid 20056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.667409][T20056] Use struct sctp_sack_info instead [ 770.773703][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4140'. [ 770.873448][T20069] FAULT_INJECTION: forcing a failure. [ 770.873448][T20069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.910058][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4140'. [ 770.919346][T20069] CPU: 1 UID: 0 PID: 20069 Comm: syz.3.4142 Not tainted syzkaller #0 PREEMPT(full) [ 770.919365][T20069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.919375][T20069] Call Trace: [ 770.919381][T20069] [ 770.919387][T20069] dump_stack_lvl+0xe8/0x150 [ 770.919410][T20069] should_fail_ex+0x412/0x560 [ 770.919433][T20069] _copy_to_user+0x31/0xb0 [ 770.919465][T20069] simple_read_from_buffer+0xe1/0x170 [ 770.919487][T20069] proc_fail_nth_read+0x1bb/0x230 [ 770.919507][T20069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.919528][T20069] ? rw_verify_area+0x2a6/0x4d0 [ 770.919547][T20069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.919567][T20069] vfs_read+0x20c/0xa70 [ 770.919590][T20069] ? __pfx___mutex_lock+0x10/0x10 [ 770.919610][T20069] ? __pfx_vfs_read+0x10/0x10 [ 770.919631][T20069] ? __fget_files+0x2a/0x420 [ 770.919651][T20069] ? __fget_files+0x3a0/0x420 [ 770.919667][T20069] ? __fget_files+0x2a/0x420 [ 770.919690][T20069] ksys_read+0x150/0x270 [ 770.919712][T20069] ? __pfx_ksys_read+0x10/0x10 [ 770.919739][T20069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.919755][T20069] do_syscall_64+0x15f/0xf80 [ 770.919772][T20069] ? trace_irq_disable+0x3b/0x140 [ 770.919794][T20069] ? clear_bhb_loop+0x40/0x90 [ 770.919812][T20069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.919826][T20069] RIP: 0033:0x7fc66175d60e [ 770.919841][T20069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 770.919854][T20069] RSP: 002b:00007fc662597fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.919870][T20069] RAX: ffffffffffffffda RBX: 00007fc6625986c0 RCX: 00007fc66175d60e [ 770.919880][T20069] RDX: 000000000000000f RSI: 00007fc6625980a0 RDI: 0000000000000003 [ 770.919889][T20069] RBP: 00007fc662598090 R08: 0000000000000000 R09: 0000000000000000 [ 770.919898][T20069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.919906][T20069] R13: 00007fc661a16038 R14: 00007fc661a15fa0 R15: 00007ffee4b31558 [ 770.919933][T20069] [ 771.226164][T20074] FAULT_INJECTION: forcing a failure. [ 771.226164][T20074] name failslab, interval 1, probability 0, space 0, times 0 [ 771.240739][T20074] CPU: 0 UID: 0 PID: 20074 Comm: syz.3.4143 Not tainted syzkaller #0 PREEMPT(full) [ 771.240764][T20074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.240775][T20074] Call Trace: [ 771.240782][T20074] [ 771.240790][T20074] dump_stack_lvl+0xe8/0x150 [ 771.240816][T20074] should_fail_ex+0x412/0x560 [ 771.240844][T20074] should_failslab+0xa8/0x100 [ 771.240873][T20074] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 771.240896][T20074] ? __alloc_skb+0x186/0x7d0 [ 771.240916][T20074] ? __alloc_skb+0x1d0/0x7d0 [ 771.240933][T20074] ? __local_bh_enable_ip+0xd0/0x130 [ 771.240957][T20074] __alloc_skb+0x1d0/0x7d0 [ 771.240983][T20074] netlink_sendmsg+0x5d4/0xb40 [ 771.241015][T20074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.241041][T20074] ? aa_sock_msg_perm+0xf1/0x1b0 [ 771.241066][T20074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.241094][T20074] ____sys_sendmsg+0x972/0x9f0 [ 771.241117][T20074] ? __might_fault+0xaf/0x130 [ 771.241145][T20074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.241178][T20074] ? import_iovec+0x73/0xa0 [ 771.241205][T20074] ___sys_sendmsg+0x2a5/0x360 [ 771.241227][T20074] ? __lock_acquire+0x6b5/0x2cf0 [ 771.241251][T20074] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.241309][T20074] ? __fget_files+0x2a/0x420 [ 771.241329][T20074] ? __fget_files+0x3a0/0x420 [ 771.241360][T20074] __x64_sys_sendmsg+0x1bd/0x2a0 [ 771.241393][T20074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.241425][T20074] ? __pfx_ksys_write+0x10/0x10 [ 771.241459][T20074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.241478][T20074] do_syscall_64+0x15f/0xf80 [ 771.241500][T20074] ? trace_irq_disable+0x3b/0x140 [ 771.241525][T20074] ? clear_bhb_loop+0x40/0x90 [ 771.241548][T20074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.241565][T20074] RIP: 0033:0x7fc66179cdd9 [ 771.241583][T20074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.241597][T20074] RSP: 002b:00007fc662598028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.241616][T20074] RAX: ffffffffffffffda RBX: 00007fc661a15fa0 RCX: 00007fc66179cdd9 [ 771.241633][T20074] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 771.241644][T20074] RBP: 00007fc662598090 R08: 0000000000000000 R09: 0000000000000000 [ 771.241655][T20074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.241666][T20074] R13: 00007fc661a16038 R14: 00007fc661a15fa0 R15: 00007ffee4b31558 [ 771.241696][T20074] [ 771.633147][T20081] netlink: 'syz.2.4146': attribute type 2 has an invalid length. [ 771.687063][T20083] tipc: Enabled bearer , priority 0 [ 771.779714][T20076] syzkaller0: entered promiscuous mode [ 771.786876][T20076] syzkaller0: entered allmulticast mode [ 771.797628][T20076] tipc: Resetting bearer [ 771.953263][T20075] tipc: Resetting bearer [ 774.516467][T20075] tipc: Disabling bearer [ 774.698174][T20103] dummy0: mtu less than device minimum [ 775.045036][T20085] lo speed is unknown, defaulting to 1000 [ 775.222474][T20129] tipc: Enabled bearer , priority 0 [ 775.238472][T20127] tipc: Disabling bearer [ 775.631977][T20149] FAULT_INJECTION: forcing a failure. [ 775.631977][T20149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.646283][T20149] CPU: 1 UID: 0 PID: 20149 Comm: syz.1.4165 Not tainted syzkaller #0 PREEMPT(full) [ 775.646308][T20149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 775.646318][T20149] Call Trace: [ 775.646326][T20149] [ 775.646333][T20149] dump_stack_lvl+0xe8/0x150 [ 775.646360][T20149] should_fail_ex+0x412/0x560 [ 775.646388][T20149] _copy_from_iter+0x1d3/0x1670 [ 775.646414][T20149] ? rcu_is_watching+0x15/0xb0 [ 775.646442][T20149] ? __pfx__copy_from_iter+0x10/0x10 [ 775.646473][T20149] ? netlink_sendmsg+0x650/0xb40 [ 775.646494][T20149] ? skb_put+0x11b/0x210 [ 775.646519][T20149] netlink_sendmsg+0x6c0/0xb40 [ 775.646551][T20149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.646577][T20149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 775.646600][T20149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 775.646627][T20149] ____sys_sendmsg+0x972/0x9f0 [ 775.646654][T20149] ? __might_fault+0xaf/0x130 [ 775.646683][T20149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.646715][T20149] ? import_iovec+0x73/0xa0 [ 775.646742][T20149] ___sys_sendmsg+0x2a5/0x360 [ 775.646764][T20149] ? __lock_acquire+0x6b5/0x2cf0 [ 775.646788][T20149] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.646846][T20149] ? __fget_files+0x2a/0x420 [ 775.646866][T20149] ? __fget_files+0x3a0/0x420 [ 775.646896][T20149] __x64_sys_sendmsg+0x1bd/0x2a0 [ 775.646923][T20149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.646955][T20149] ? __pfx_ksys_write+0x10/0x10 [ 775.646989][T20149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.647009][T20149] do_syscall_64+0x15f/0xf80 [ 775.647029][T20149] ? trace_irq_disable+0x3b/0x140 [ 775.647060][T20149] ? clear_bhb_loop+0x40/0x90 [ 775.647082][T20149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.647100][T20149] RIP: 0033:0x7f36a539cdd9 [ 775.647118][T20149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.647133][T20149] RSP: 002b:00007f36a6334028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.647152][T20149] RAX: ffffffffffffffda RBX: 00007f36a5615fa0 RCX: 00007f36a539cdd9 [ 775.647165][T20149] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 775.647176][T20149] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 775.647187][T20149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.647197][T20149] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 775.647228][T20149] [ 776.292556][T20162] netlink: 'syz.2.4169': attribute type 9 has an invalid length. [ 776.306290][T20162] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4169'. [ 776.544138][T20174] dummy0: mtu less than device minimum [ 776.560393][T20175] netlink: 'syz.2.4173': attribute type 8 has an invalid length. [ 776.595235][T20178] FAULT_INJECTION: forcing a failure. [ 776.595235][T20178] name failslab, interval 1, probability 0, space 0, times 0 [ 776.608476][T20178] CPU: 1 UID: 0 PID: 20178 Comm: syz.1.4177 Not tainted syzkaller #0 PREEMPT(full) [ 776.608504][T20178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.608515][T20178] Call Trace: [ 776.608522][T20178] [ 776.608529][T20178] dump_stack_lvl+0xe8/0x150 [ 776.608555][T20178] should_fail_ex+0x412/0x560 [ 776.608582][T20178] should_failslab+0xa8/0x100 [ 776.608610][T20178] __kmalloc_noprof+0xe8/0x760 [ 776.608633][T20178] ? bpf_test_init+0x9f/0x150 [ 776.608658][T20178] bpf_test_init+0x9f/0x150 [ 776.608679][T20178] bpf_prog_test_run_xdp+0x529/0x1160 [ 776.608712][T20178] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 776.608738][T20178] ? __fget_files+0x2a/0x420 [ 776.608760][T20178] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 776.608781][T20178] bpf_prog_test_run+0x2c7/0x340 [ 776.608802][T20178] __sys_bpf+0x643/0x950 [ 776.608828][T20178] ? __pfx___sys_bpf+0x10/0x10 [ 776.608867][T20178] ? ksys_write+0x242/0x270 [ 776.608892][T20178] ? __pfx_ksys_write+0x10/0x10 [ 776.608918][T20178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.608937][T20178] __x64_sys_bpf+0x7c/0x90 [ 776.608961][T20178] do_syscall_64+0x15f/0xf80 [ 776.608980][T20178] ? trace_irq_disable+0x3b/0x140 [ 776.609003][T20178] ? clear_bhb_loop+0x40/0x90 [ 776.609025][T20178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.609043][T20178] RIP: 0033:0x7f36a539cdd9 [ 776.609059][T20178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.609071][T20178] RSP: 002b:00007f36a6334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 776.609089][T20178] RAX: ffffffffffffffda RBX: 00007f36a5615fa0 RCX: 00007f36a539cdd9 [ 776.609101][T20178] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 776.609112][T20178] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 776.609122][T20178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.609132][T20178] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 776.609170][T20178] [ 776.816895][T20179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4176'. [ 776.932153][T20191] netlink: 'syz.1.4180': attribute type 1 has an invalid length. [ 776.983177][T20191] bond2: (slave geneve2): making interface the new active one [ 776.991796][T20191] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 777.000683][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 777.010062][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 777.018986][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 777.044783][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 777.106847][T20195] Set syz1 is full, maxelem 65536 reached [ 777.125826][T20202] bridge9: entered promiscuous mode [ 777.222934][ T134] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 777.233095][ T134] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 777.242956][ T134] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 777.251700][ T134] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 777.570400][T20224] FAULT_INJECTION: forcing a failure. [ 777.570400][T20224] name failslab, interval 1, probability 0, space 0, times 0 [ 777.585899][T20224] CPU: 1 UID: 0 PID: 20224 Comm: syz.2.4190 Not tainted syzkaller #0 PREEMPT(full) [ 777.585924][T20224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.585935][T20224] Call Trace: [ 777.585942][T20224] [ 777.585949][T20224] dump_stack_lvl+0xe8/0x150 [ 777.585974][T20224] should_fail_ex+0x412/0x560 [ 777.585999][T20224] should_failslab+0xa8/0x100 [ 777.586028][T20224] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 777.586052][T20224] ? __alloc_skb+0x1d0/0x7d0 [ 777.586070][T20224] ? __local_bh_enable_ip+0xd0/0x130 [ 777.586093][T20224] __alloc_skb+0x1d0/0x7d0 [ 777.586120][T20224] ? netlink_ack_tlv_len+0x6c/0x210 [ 777.586145][T20224] netlink_ack+0x146/0xa50 [ 777.586164][T20224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.586205][T20224] netlink_rcv_skb+0x2b6/0x4b0 [ 777.586228][T20224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.586252][T20224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.586290][T20224] ? down_read+0x270/0x2e0 [ 777.586311][T20224] ? genl_rcv+0xd/0x40 [ 777.586336][T20224] genl_rcv+0x28/0x40 [ 777.586358][T20224] netlink_unicast+0x75c/0x8e0 [ 777.586387][T20224] netlink_sendmsg+0x813/0xb40 [ 777.586422][T20224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.586448][T20224] ? aa_sock_msg_perm+0xf1/0x1b0 [ 777.586472][T20224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.586503][T20224] ____sys_sendmsg+0x972/0x9f0 [ 777.586526][T20224] ? __might_fault+0xaf/0x130 [ 777.586555][T20224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.586587][T20224] ? import_iovec+0x73/0xa0 [ 777.586614][T20224] ___sys_sendmsg+0x2a5/0x360 [ 777.586636][T20224] ? __lock_acquire+0x6b5/0x2cf0 [ 777.586659][T20224] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.586719][T20224] ? __fget_files+0x2a/0x420 [ 777.586739][T20224] ? __fget_files+0x3a0/0x420 [ 777.586771][T20224] __x64_sys_sendmsg+0x1bd/0x2a0 [ 777.586797][T20224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.586829][T20224] ? __pfx_ksys_write+0x10/0x10 [ 777.586862][T20224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.586883][T20224] do_syscall_64+0x15f/0xf80 [ 777.586903][T20224] ? trace_irq_disable+0x3b/0x140 [ 777.586928][T20224] ? clear_bhb_loop+0x40/0x90 [ 777.586951][T20224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.586968][T20224] RIP: 0033:0x7fc16279cdd9 [ 777.586985][T20224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.587000][T20224] RSP: 002b:00007fc16360b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.587019][T20224] RAX: ffffffffffffffda RBX: 00007fc162a15fa0 RCX: 00007fc16279cdd9 [ 777.587032][T20224] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004 [ 777.587043][T20224] RBP: 00007fc16360b090 R08: 0000000000000000 R09: 0000000000000000 [ 777.587055][T20224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.587064][T20224] R13: 00007fc162a16038 R14: 00007fc162a15fa0 R15: 00007ffe070829b8 [ 777.587095][T20224] [ 778.436233][T20252] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 778.571469][T20249] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 778.763466][T20259] syzkaller0: entered promiscuous mode [ 778.770712][T20259] syzkaller0: entered allmulticast mode [ 782.015429][T20276] tipc: Enabling of bearer rejected, already enabled [ 782.025077][T20253] lo speed is unknown, defaulting to 1000 [ 782.025531][T20285] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4210'. [ 782.326577][T20302] Bluetooth: MGMT ver 1.23 [ 782.704782][T20322] netlink: 'syz.1.4219': attribute type 8 has an invalid length. [ 782.807342][T20318] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 782.835261][T20325] tipc: Enabling of bearer rejected, already enabled [ 783.147155][T20333] dummy0: mtu less than device minimum [ 783.170526][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'. [ 783.514910][T20340] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4228'. [ 783.527575][T20340] netlink: 'syz.1.4228': attribute type 9 has an invalid length. [ 783.535715][T20340] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4228'. [ 783.546076][T20340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4228'. [ 783.607711][T20323] lo speed is unknown, defaulting to 1000 [ 783.703472][T20343] x_tables: unsorted underflow at hook 2 [ 784.109103][T20357] dummy0: mtu less than device minimum [ 784.431307][T20365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4236'. [ 784.621546][T20372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4236'. [ 784.630705][T20372] nbd: device at index 64 is going down [ 784.636617][T20378] nbd: socks must be embedded in a SOCK_ITEM attr [ 784.913386][T20394] FAULT_INJECTION: forcing a failure. [ 784.913386][T20394] name failslab, interval 1, probability 0, space 0, times 0 [ 784.953133][T20379] udevd[20379]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 785.002582][T20394] CPU: 1 UID: 0 PID: 20394 Comm: syz.2.4240 Not tainted syzkaller #0 PREEMPT(full) [ 785.002609][T20394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 785.002620][T20394] Call Trace: [ 785.002627][T20394] [ 785.002635][T20394] dump_stack_lvl+0xe8/0x150 [ 785.002662][T20394] should_fail_ex+0x412/0x560 [ 785.002691][T20394] should_failslab+0xa8/0x100 [ 785.002725][T20394] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 785.002752][T20394] ? __alloc_skb+0x1d0/0x7d0 [ 785.002769][T20394] ? __local_bh_enable_ip+0xd0/0x130 [ 785.002791][T20394] __alloc_skb+0x1d0/0x7d0 [ 785.002809][T20394] ? netlink_ack_tlv_len+0x6c/0x210 [ 785.002832][T20394] netlink_ack+0x146/0xa50 [ 785.002849][T20394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.002868][T20394] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 785.002886][T20394] ? __pfx_nl802154_post_doit+0x10/0x10 [ 785.002916][T20394] netlink_rcv_skb+0x2b6/0x4b0 [ 785.002938][T20394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.002963][T20394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.003001][T20394] ? down_read+0x270/0x2e0 [ 785.003021][T20394] ? genl_rcv+0xd/0x40 [ 785.003045][T20394] genl_rcv+0x28/0x40 [ 785.003068][T20394] netlink_unicast+0x75c/0x8e0 [ 785.003102][T20394] netlink_sendmsg+0x813/0xb40 [ 785.003131][T20394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.003156][T20394] ? aa_sock_msg_perm+0xf1/0x1b0 [ 785.003179][T20394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 785.003214][T20394] ____sys_sendmsg+0x972/0x9f0 [ 785.003237][T20394] ? __might_fault+0xaf/0x130 [ 785.003265][T20394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.003296][T20394] ? import_iovec+0x73/0xa0 [ 785.003324][T20394] ___sys_sendmsg+0x2a5/0x360 [ 785.003346][T20394] ? __lock_acquire+0x6b5/0x2cf0 [ 785.003368][T20394] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.003422][T20394] ? __fget_files+0x2a/0x420 [ 785.003440][T20394] ? __fget_files+0x3a0/0x420 [ 785.003465][T20394] __x64_sys_sendmsg+0x1bd/0x2a0 [ 785.003489][T20394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 785.003521][T20394] ? __pfx_ksys_write+0x10/0x10 [ 785.003552][T20394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.003571][T20394] do_syscall_64+0x15f/0xf80 [ 785.003591][T20394] ? trace_irq_disable+0x3b/0x140 [ 785.003616][T20394] ? clear_bhb_loop+0x40/0x90 [ 785.003637][T20394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.003653][T20394] RIP: 0033:0x7fc16279cdd9 [ 785.003670][T20394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.003685][T20394] RSP: 002b:00007fc1635ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.003705][T20394] RAX: ffffffffffffffda RBX: 00007fc162a16090 RCX: 00007fc16279cdd9 [ 785.003717][T20394] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 785.003726][T20394] RBP: 00007fc1635ea090 R08: 0000000000000000 R09: 0000000000000000 [ 785.003736][T20394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.003744][T20394] R13: 00007fc162a16128 R14: 00007fc162a16090 R15: 00007ffe070829b8 [ 785.003773][T20394] [ 785.004290][T20379] udevd[20379]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 785.142897][T20402] dummy0: mtu less than device minimum [ 785.431340][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4242'. [ 785.561169][T20419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.789667][T20430] dummy0: mtu less than device minimum [ 785.891479][T20438] FAULT_INJECTION: forcing a failure. [ 785.891479][T20438] name failslab, interval 1, probability 0, space 0, times 0 [ 785.922103][T20438] CPU: 0 UID: 0 PID: 20438 Comm: syz.1.4254 Not tainted syzkaller #0 PREEMPT(full) [ 785.922141][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 785.922152][T20438] Call Trace: [ 785.922159][T20438] [ 785.922167][T20438] dump_stack_lvl+0xe8/0x150 [ 785.922194][T20438] should_fail_ex+0x412/0x560 [ 785.922222][T20438] should_failslab+0xa8/0x100 [ 785.922252][T20438] __kmalloc_noprof+0xe8/0x760 [ 785.922275][T20438] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 785.922302][T20438] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 785.922327][T20438] genl_family_rcv_msg_doit+0xd9/0x330 [ 785.922361][T20438] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 785.922396][T20438] ? apparmor_capable+0x126/0x170 [ 785.922424][T20438] ? bpf_lsm_capable+0x9/0x20 [ 785.922441][T20438] ? security_capable+0x7e/0x2c0 [ 785.922469][T20438] genl_rcv_msg+0x61c/0x7a0 [ 785.922502][T20438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.922526][T20438] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 785.922545][T20438] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 785.922563][T20438] ? __pfx_nl80211_post_doit+0x10/0x10 [ 785.922601][T20438] netlink_rcv_skb+0x232/0x4b0 [ 785.922624][T20438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.922650][T20438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.922688][T20438] ? down_read+0x270/0x2e0 [ 785.922708][T20438] ? genl_rcv+0xd/0x40 [ 785.922734][T20438] genl_rcv+0x28/0x40 [ 785.922757][T20438] netlink_unicast+0x75c/0x8e0 [ 785.922787][T20438] netlink_sendmsg+0x813/0xb40 [ 785.922819][T20438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.922844][T20438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 785.922867][T20438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 785.922893][T20438] ____sys_sendmsg+0x972/0x9f0 [ 785.922916][T20438] ? __might_fault+0xaf/0x130 [ 785.922944][T20438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.922974][T20438] ? import_iovec+0x73/0xa0 [ 785.923000][T20438] ___sys_sendmsg+0x2a5/0x360 [ 785.923022][T20438] ? __lock_acquire+0x6b5/0x2cf0 [ 785.923046][T20438] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.923104][T20438] ? __fget_files+0x2a/0x420 [ 785.923122][T20438] ? __fget_files+0x3a0/0x420 [ 785.923157][T20438] __x64_sys_sendmsg+0x1bd/0x2a0 [ 785.923180][T20438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 785.923209][T20438] ? __pfx_ksys_write+0x10/0x10 [ 785.923238][T20438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.923256][T20438] do_syscall_64+0x15f/0xf80 [ 785.923275][T20438] ? trace_irq_disable+0x3b/0x140 [ 785.923298][T20438] ? clear_bhb_loop+0x40/0x90 [ 785.923318][T20438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.923335][T20438] RIP: 0033:0x7f36a539cdd9 [ 785.923352][T20438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.923365][T20438] RSP: 002b:00007f36a6334028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.923383][T20438] RAX: ffffffffffffffda RBX: 00007f36a5615fa0 RCX: 00007f36a539cdd9 [ 785.923394][T20438] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 785.923405][T20438] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 785.923415][T20438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.923424][T20438] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 785.923451][T20438] [ 786.412266][T20441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4256'. [ 786.455691][T20449] dummy0: mtu less than device minimum [ 786.504470][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4259'. [ 786.890339][T20477] IPv6: NLM_F_CREATE should be specified when creating new route [ 787.050700][T20485] FAULT_INJECTION: forcing a failure. [ 787.050700][T20485] name failslab, interval 1, probability 0, space 0, times 0 [ 787.070022][T20485] CPU: 0 UID: 0 PID: 20485 Comm: syz.2.4273 Not tainted syzkaller #0 PREEMPT(full) [ 787.070048][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 787.070059][T20485] Call Trace: [ 787.070065][T20485] [ 787.070072][T20485] dump_stack_lvl+0xe8/0x150 [ 787.070099][T20485] should_fail_ex+0x412/0x560 [ 787.070127][T20485] should_failslab+0xa8/0x100 [ 787.070156][T20485] __kvmalloc_node_noprof+0x178/0x8a0 [ 787.070181][T20485] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 787.070212][T20485] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 787.070240][T20485] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 787.070277][T20485] ? __pfx_autoremove_wake_function+0x10/0x10 [ 787.070315][T20485] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 787.070358][T20485] ? 0xffffffffa02019d4 [ 787.070374][T20485] ? 0xffffffffa0203470 [ 787.070387][T20485] ? 0xffffffffa02034f0 [ 787.070402][T20485] ? 0xffffffffa02035dc [ 787.070424][T20485] ? 0xffffffffa020366c [ 787.070438][T20485] ? 0xffffffffa02065f0 [ 787.070457][T20485] ? 0xffffffffa0206738 [ 787.070494][T20485] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 787.070528][T20485] ? _copy_from_user+0x94/0xb0 [ 787.070553][T20485] ? bpf_test_init+0x113/0x150 [ 787.070576][T20485] ? xdp_convert_md_to_buff+0x5b/0x330 [ 787.070601][T20485] bpf_prog_test_run_xdp+0x81c/0x1160 [ 787.070639][T20485] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 787.070666][T20485] ? __fget_files+0x2a/0x420 [ 787.070692][T20485] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 787.070715][T20485] bpf_prog_test_run+0x2c7/0x340 [ 787.070737][T20485] __sys_bpf+0x643/0x950 [ 787.070774][T20485] ? __pfx___sys_bpf+0x10/0x10 [ 787.070814][T20485] ? ksys_write+0x242/0x270 [ 787.070838][T20485] ? __pfx_ksys_write+0x10/0x10 [ 787.070870][T20485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.070890][T20485] __x64_sys_bpf+0x7c/0x90 [ 787.070913][T20485] do_syscall_64+0x15f/0xf80 [ 787.070934][T20485] ? trace_irq_disable+0x3b/0x140 [ 787.070959][T20485] ? clear_bhb_loop+0x40/0x90 [ 787.070981][T20485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.070999][T20485] RIP: 0033:0x7fc16279cdd9 [ 787.071015][T20485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.071030][T20485] RSP: 002b:00007fc16360b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 787.071056][T20485] RAX: ffffffffffffffda RBX: 00007fc162a15fa0 RCX: 00007fc16279cdd9 [ 787.071069][T20485] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 787.071081][T20485] RBP: 00007fc16360b090 R08: 0000000000000000 R09: 0000000000000000 [ 787.071092][T20485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.071102][T20485] R13: 00007fc162a16038 R14: 00007fc162a15fa0 R15: 00007ffe070829b8 [ 787.071136][T20485] [ 787.691568][T20512] openvswitch: netlink: VXLAN extension message has 99 unknown bytes. [ 787.791686][T20512] __nla_validate_parse: 4 callbacks suppressed [ 787.791707][T20512] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.4280'. [ 787.842050][T20516] netlink: 2120 bytes leftover after parsing attributes in process `syz.1.4282'. [ 787.871495][T20521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4283'. [ 787.880662][T20522] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4284'. [ 787.893428][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4282'. [ 788.026768][T20527] dummy0: mtu less than device minimum [ 788.135646][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'. [ 788.594473][T20558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4296'. [ 788.713579][T20560] syzkaller0: entered promiscuous mode [ 788.724596][T20560] syzkaller0: entered allmulticast mode [ 792.129471][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4304'. [ 792.264779][T20599] xt_hashlimit: size too large, truncated to 1048576 [ 792.480107][T20610] batadv0: entered promiscuous mode [ 792.498176][T20610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.593060][T20567] lo speed is unknown, defaulting to 1000 [ 793.160727][T20615] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 793.273149][T20592] lo speed is unknown, defaulting to 1000 [ 793.359682][T20625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.646657][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4318'. [ 793.727922][T20640] FAULT_INJECTION: forcing a failure. [ 793.727922][T20640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.742119][T20640] CPU: 1 UID: 0 PID: 20640 Comm: syz.1.4320 Not tainted syzkaller #0 PREEMPT(full) [ 793.742144][T20640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.742155][T20640] Call Trace: [ 793.742163][T20640] [ 793.742171][T20640] dump_stack_lvl+0xe8/0x150 [ 793.742198][T20640] should_fail_ex+0x412/0x560 [ 793.742226][T20640] _copy_from_user+0x2d/0xb0 [ 793.742251][T20640] kstrtouint_from_user+0xd6/0x180 [ 793.742275][T20640] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 793.742311][T20640] proc_fail_nth_write+0x8e/0x210 [ 793.742338][T20640] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 793.742371][T20640] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 793.742394][T20640] vfs_write+0x29a/0xb90 [ 793.742428][T20640] ? __pfx_vfs_write+0x10/0x10 [ 793.742451][T20640] ? __fget_files+0x2a/0x420 [ 793.742475][T20640] ? __fget_files+0x3a0/0x420 [ 793.742495][T20640] ? __fget_files+0x2a/0x420 [ 793.742525][T20640] ksys_write+0x150/0x270 [ 793.742549][T20640] ? __pfx_ksys_write+0x10/0x10 [ 793.742580][T20640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.742598][T20640] do_syscall_64+0x15f/0xf80 [ 793.742618][T20640] ? trace_irq_disable+0x3b/0x140 [ 793.742640][T20640] ? clear_bhb_loop+0x40/0x90 [ 793.742663][T20640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.742679][T20640] RIP: 0033:0x7f36a535d60e [ 793.742696][T20640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 793.742709][T20640] RSP: 002b:00007f36a6333fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 793.742727][T20640] RAX: ffffffffffffffda RBX: 00007f36a63346c0 RCX: 00007f36a535d60e [ 793.742739][T20640] RDX: 0000000000000001 RSI: 00007f36a63340a0 RDI: 0000000000000004 [ 793.742749][T20640] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 793.742758][T20640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.742767][T20640] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 793.742796][T20640] [ 794.019914][T20644] dummy0: mtu less than device minimum [ 794.077374][T20646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.158190][T20619] lo speed is unknown, defaulting to 1000 [ 794.174808][T20646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.199302][T20646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.216615][T20646] netlink: 'syz.1.4322': attribute type 11 has an invalid length. [ 794.243778][T20652] netlink: 'syz.0.4321': attribute type 1 has an invalid length. [ 796.660289][T20683] netem: change failed [ 796.920688][T20689] dummy0: mtu less than device minimum [ 797.444754][T20696] dummy0: mtu less than device minimum [ 797.653902][T20709] nbd: socks must be embedded in a SOCK_ITEM attr [ 797.805991][T20717] netlink: 'syz.3.4336': attribute type 1 has an invalid length. [ 797.959243][T20727] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4342'. [ 798.072842][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4343'. [ 798.427008][T20751] dummy0: mtu less than device minimum [ 799.858832][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 799.858978][ T5625] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 800.409468][T20829] netlink: 320 bytes leftover after parsing attributes in process `syz.1.4379'. [ 800.418816][T20829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4379'. [ 800.427812][T20829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4379'. [ 800.447085][T20829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4379'. [ 800.507833][T20831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.638936][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4382'. [ 800.658384][T20838] openvswitch: netlink: Flow key attr not present in new flow. [ 800.792484][T20849] dummy0: mtu less than device minimum [ 800.885091][T20856] FAULT_INJECTION: forcing a failure. [ 800.885091][T20856] name failslab, interval 1, probability 0, space 0, times 0 [ 800.909597][T20856] CPU: 0 UID: 0 PID: 20856 Comm: syz.1.4391 Not tainted syzkaller #0 PREEMPT(full) [ 800.909623][T20856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.909633][T20856] Call Trace: [ 800.909641][T20856] [ 800.909648][T20856] dump_stack_lvl+0xe8/0x150 [ 800.909675][T20856] should_fail_ex+0x412/0x560 [ 800.909702][T20856] should_failslab+0xa8/0x100 [ 800.909730][T20856] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 800.909756][T20856] ? __alloc_skb+0x1d0/0x7d0 [ 800.909775][T20856] ? __local_bh_enable_ip+0xd0/0x130 [ 800.909797][T20856] __alloc_skb+0x1d0/0x7d0 [ 800.909822][T20856] wireless_send_event+0x2c2/0xbd0 [ 800.909856][T20856] ? __pfx_wireless_send_event+0x10/0x10 [ 800.909882][T20856] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 800.909905][T20856] ioctl_standard_call+0x145/0x1b0 [ 800.909929][T20856] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 800.909945][T20856] wext_ioctl_dispatch+0xee/0x410 [ 800.909963][T20856] ? __pfx_ioctl_standard_call+0x10/0x10 [ 800.910072][T20856] wext_handle_ioctl+0x10f/0x1d0 [ 800.910098][T20856] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 800.910118][T20856] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 800.910159][T20856] sock_ioctl+0x159/0x7f0 [ 800.910188][T20856] ? __pfx_sock_ioctl+0x10/0x10 [ 800.910215][T20856] ? __fget_files+0x2a/0x420 [ 800.910235][T20856] ? __fget_files+0x3a0/0x420 [ 800.910255][T20856] ? __fget_files+0x2a/0x420 [ 800.910279][T20856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 800.910303][T20856] ? __pfx_sock_ioctl+0x10/0x10 [ 800.910325][T20856] __se_sys_ioctl+0xfc/0x170 [ 800.910349][T20856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.910367][T20856] do_syscall_64+0x15f/0xf80 [ 800.910386][T20856] ? trace_irq_disable+0x3b/0x140 [ 800.910410][T20856] ? clear_bhb_loop+0x40/0x90 [ 800.910431][T20856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.910448][T20856] RIP: 0033:0x7f36a539cdd9 [ 800.910466][T20856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.910480][T20856] RSP: 002b:00007f36a6334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.910497][T20856] RAX: ffffffffffffffda RBX: 00007f36a5615fa0 RCX: 00007f36a539cdd9 [ 800.910508][T20856] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003 [ 800.910518][T20856] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 800.910528][T20856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.910538][T20856] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 800.910566][T20856] [ 800.915899][T20858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.410079][T20882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4399'. [ 801.573264][T20891] netlink: 'syz.2.4396': attribute type 1 has an invalid length. [ 801.595021][T20891] netlink: 'syz.2.4396': attribute type 11 has an invalid length. [ 801.623280][T20891] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4396'. [ 801.955464][T20915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.326368][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4411'. [ 802.542776][T20930] lo speed is unknown, defaulting to 1000 [ 802.716235][T20908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.312649][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 805.322764][T20953] syzkaller1: entered promiscuous mode [ 805.328288][T20953] syzkaller1: entered allmulticast mode [ 805.350870][T20956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4421'. [ 805.550809][T20968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4423'. [ 806.103969][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4429'. [ 806.244767][T20990] FAULT_INJECTION: forcing a failure. [ 806.244767][T20990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.262003][T20990] CPU: 0 UID: 0 PID: 20990 Comm: syz.1.4432 Not tainted syzkaller #0 PREEMPT(full) [ 806.262027][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 806.262038][T20990] Call Trace: [ 806.262045][T20990] [ 806.262053][T20990] dump_stack_lvl+0xe8/0x150 [ 806.262079][T20990] should_fail_ex+0x412/0x560 [ 806.262106][T20990] _copy_from_user+0x2d/0xb0 [ 806.262132][T20990] ___sys_sendmsg+0x1c6/0x360 [ 806.262155][T20990] ? __lock_acquire+0x6b5/0x2cf0 [ 806.262178][T20990] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.262237][T20990] ? __fget_files+0x2a/0x420 [ 806.262257][T20990] ? __fget_files+0x3a0/0x420 [ 806.262296][T20990] __x64_sys_sendmsg+0x1bd/0x2a0 [ 806.262322][T20990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 806.262353][T20990] ? __pfx_ksys_write+0x10/0x10 [ 806.262385][T20990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.262405][T20990] do_syscall_64+0x15f/0xf80 [ 806.262425][T20990] ? trace_irq_disable+0x3b/0x140 [ 806.262450][T20990] ? clear_bhb_loop+0x40/0x90 [ 806.262472][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.262490][T20990] RIP: 0033:0x7f36a539cdd9 [ 806.262505][T20990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.262519][T20990] RSP: 002b:00007f36a6334028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.262536][T20990] RAX: ffffffffffffffda RBX: 00007f36a5615fa0 RCX: 00007f36a539cdd9 [ 806.262552][T20990] RDX: 0000000024000050 RSI: 00002000000007c0 RDI: 0000000000000003 [ 806.262564][T20990] RBP: 00007f36a6334090 R08: 0000000000000000 R09: 0000000000000000 [ 806.262574][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.262585][T20990] R13: 00007f36a5616038 R14: 00007f36a5615fa0 R15: 00007ffddd412d18 [ 806.262614][T20990] [ 806.302992][T20980] lo speed is unknown, defaulting to 1000 [ 806.400591][T20996] batadv_slave_0: entered promiscuous mode [ 806.553392][T20999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4434'. [ 806.737912][T20993] batadv_slave_0: left promiscuous mode [ 806.787444][T21010] netlink: 'syz.4.4438': attribute type 1 has an invalid length. [ 806.884954][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4439'. [ 806.910285][T21014] FAULT_INJECTION: forcing a failure. [ 806.910285][T21014] name failslab, interval 1, probability 0, space 0, times 0 [ 806.933560][T21014] CPU: 1 UID: 0 PID: 21014 Comm: syz.0.4439 Not tainted syzkaller #0 PREEMPT(full) [ 806.933587][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 806.933598][T21014] Call Trace: [ 806.933605][T21014] [ 806.933613][T21014] dump_stack_lvl+0xe8/0x150 [ 806.933639][T21014] should_fail_ex+0x412/0x560 [ 806.933668][T21014] should_failslab+0xa8/0x100 [ 806.933697][T21014] __kmalloc_noprof+0xe8/0x760 [ 806.933726][T21014] ? nla_strdup+0x9d/0x140 [ 806.933755][T21014] nla_strdup+0x9d/0x140 [ 806.933782][T21014] nf_tables_dump_rules_start+0xcb/0x1f0 [ 806.933810][T21014] __netlink_dump_start+0x469/0x7e0 [ 806.933838][T21014] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 806.933858][T21014] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 806.933882][T21014] nf_tables_getrule+0x1f5/0xb90 [ 806.933902][T21014] ? __lock_acquire+0x6b5/0x2cf0 [ 806.933930][T21014] ? __pfx_nf_tables_getrule+0x10/0x10 [ 806.933947][T21014] ? nfnl_pernet+0x23/0x240 [ 806.933967][T21014] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 806.933987][T21014] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 806.934006][T21014] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 806.934035][T21014] ? __nla_parse+0x40/0x60 [ 806.934062][T21014] ? __pfx_nf_tables_getrule+0x10/0x10 [ 806.934082][T21014] nfnetlink_rcv_msg+0x8b1/0x12c0 [ 806.934102][T21014] ? __lock_acquire+0x6b5/0x2cf0 [ 806.934120][T21014] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 806.934160][T21014] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 806.934216][T21014] ? __lock_acquire+0x6b5/0x2cf0 [ 806.934254][T21014] netlink_rcv_skb+0x232/0x4b0 [ 806.934277][T21014] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 806.934300][T21014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.934335][T21014] ? bpf_lsm_capable+0x9/0x20 [ 806.934353][T21014] ? security_capable+0x7e/0x2c0 [ 806.934382][T21014] nfnetlink_rcv+0x2c0/0x27b0 [ 806.934406][T21014] ? kernel_text_address+0xa5/0xe0 [ 806.934432][T21014] ? __kernel_text_address+0xd/0x30 [ 806.934455][T21014] ? unwind_get_return_address+0x4d/0x90 [ 806.934476][T21014] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 806.934502][T21014] ? arch_stack_walk+0xfb/0x150 [ 806.934537][T21014] ? stack_trace_save+0xa9/0x100 [ 806.934565][T21014] ? __lock_acquire+0x6b5/0x2cf0 [ 806.934584][T21014] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 806.934610][T21014] ? kasan_save_track+0x4f/0x80 [ 806.934631][T21014] ? kasan_save_track+0x3e/0x80 [ 806.934652][T21014] ? __kasan_slab_alloc+0x6c/0x80 [ 806.934673][T21014] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 806.934695][T21014] ? __alloc_skb+0x27d/0x7d0 [ 806.934713][T21014] ? netlink_sendmsg+0x5d4/0xb40 [ 806.934744][T21014] ? __lock_acquire+0x6b5/0x2cf0 [ 806.934775][T21014] ? __netlink_lookup+0xc6/0x8b0 [ 806.934809][T21014] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.934831][T21014] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.934861][T21014] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.934883][T21014] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.934911][T21014] netlink_unicast+0x75c/0x8e0 [ 806.934944][T21014] netlink_sendmsg+0x813/0xb40 [ 806.934976][T21014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.935003][T21014] ? aa_sock_msg_perm+0xf1/0x1b0 [ 806.935028][T21014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 806.935056][T21014] ____sys_sendmsg+0x972/0x9f0 [ 806.935081][T21014] ? __might_fault+0xaf/0x130 [ 806.935109][T21014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.935149][T21014] ? import_iovec+0x73/0xa0 [ 806.935178][T21014] ___sys_sendmsg+0x2a5/0x360 [ 806.935205][T21014] ? __lock_acquire+0x6b5/0x2cf0 [ 806.935230][T21014] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.935291][T21014] ? __fget_files+0x2a/0x420 [ 806.935312][T21014] ? __fget_files+0x3a0/0x420 [ 806.935344][T21014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 806.935371][T21014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 806.935405][T21014] ? __pfx_ksys_write+0x10/0x10 [ 806.935439][T21014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.935461][T21014] do_syscall_64+0x15f/0xf80 [ 806.935482][T21014] ? trace_irq_disable+0x3b/0x140 [ 806.935508][T21014] ? clear_bhb_loop+0x40/0x90 [ 806.935532][T21014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.935551][T21014] RIP: 0033:0x7f4fa699cdd9 [ 806.935569][T21014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.935585][T21014] RSP: 002b:00007f4fa778a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.935605][T21014] RAX: ffffffffffffffda RBX: 00007f4fa6c15fa0 RCX: 00007f4fa699cdd9 [ 806.935618][T21014] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000003 [ 806.935631][T21014] RBP: 00007f4fa778a090 R08: 0000000000000000 R09: 0000000000000000 [ 806.935641][T21014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.935653][T21014] R13: 00007f4fa6c16038 R14: 00007f4fa6c15fa0 R15: 00007fff3329e3b8 [ 806.935685][T21014] [ 807.626020][T21025] tipc: Enabling of bearer rejected, failed to enable media [ 807.684966][T21029] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4445'. [ 807.704682][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4445'. [ 807.731288][T21031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4446'. [ 807.884735][T21035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4447'. [ 807.912623][T21037] dummy0: mtu less than device minimum [ 808.073472][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 808.088590][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 808.116947][ T7097] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.128589][ T7097] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.137355][ T7097] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.147829][ T7097] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.196263][ T7097] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.206218][ T7097] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.211191][T21042] netlink: 'syz.0.4449': attribute type 13 has an invalid length. [ 808.222717][ T7097] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.233987][ T7097] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.248572][T21042] netlink: 'syz.0.4449': attribute type 17 has an invalid length. [ 808.261225][T21042] netlink: 'syz.0.4449': attribute type 27 has an invalid length. [ 808.316708][T21039] lo speed is unknown, defaulting to 1000 [ 808.882134][T21060] bridge10: entered promiscuous mode [ 809.970304][T21122] dummy0: mtu less than device minimum [ 810.034882][T21126] FAULT_INJECTION: forcing a failure. [ 810.034882][T21126] name failslab, interval 1, probability 0, space 0, times 0 [ 810.080665][T21126] CPU: 0 UID: 0 PID: 21126 Comm: syz.4.4470 Not tainted syzkaller #0 PREEMPT(full) [ 810.080692][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 810.080704][T21126] Call Trace: [ 810.080712][T21126] [ 810.080720][T21126] dump_stack_lvl+0xe8/0x150 [ 810.080747][T21126] should_fail_ex+0x412/0x560 [ 810.080776][T21126] should_failslab+0xa8/0x100 [ 810.080805][T21126] __kvmalloc_node_noprof+0x178/0x8a0 [ 810.080833][T21126] ? page_pool_create_percpu+0x304/0xc80 [ 810.080862][T21126] ? page_pool_create_percpu+0xaf/0xc80 [ 810.080893][T21126] page_pool_create_percpu+0x304/0xc80 [ 810.080934][T21126] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 810.080966][T21126] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 810.081003][T21126] ? __pfx_autoremove_wake_function+0x10/0x10 [ 810.081034][T21126] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 810.081079][T21126] ? 0xffffffffa02019d4 [ 810.081095][T21126] ? 0xffffffffa0203470 [ 810.081110][T21126] ? 0xffffffffa02034f0 [ 810.081125][T21126] ? 0xffffffffa02035dc [ 810.081140][T21126] ? 0xffffffffa020366c [ 810.081155][T21126] ? 0xffffffffa0206708 [ 810.081170][T21126] ? 0xffffffffa020678c [ 810.081208][T21126] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 810.081242][T21126] ? _copy_from_user+0x94/0xb0 [ 810.081268][T21126] ? bpf_test_init+0x113/0x150 [ 810.081287][T21126] ? xdp_convert_md_to_buff+0x5b/0x330 [ 810.081313][T21126] bpf_prog_test_run_xdp+0x81c/0x1160 [ 810.081351][T21126] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 810.081379][T21126] ? __fget_files+0x2a/0x420 [ 810.081406][T21126] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 810.081430][T21126] bpf_prog_test_run+0x2c7/0x340 [ 810.081453][T21126] __sys_bpf+0x643/0x950 [ 810.081482][T21126] ? __pfx___sys_bpf+0x10/0x10 [ 810.081523][T21126] ? ksys_write+0x242/0x270 [ 810.081550][T21126] ? __pfx_ksys_write+0x10/0x10 [ 810.081579][T21126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.081600][T21126] __x64_sys_bpf+0x7c/0x90 [ 810.081625][T21126] do_syscall_64+0x15f/0xf80 [ 810.081646][T21126] ? trace_irq_disable+0x3b/0x140 [ 810.081671][T21126] ? clear_bhb_loop+0x40/0x90 [ 810.081698][T21126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.081716][T21126] RIP: 0033:0x7f79ecb9cdd9 [ 810.081733][T21126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.081749][T21126] RSP: 002b:00007f79eda28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 810.081768][T21126] RAX: ffffffffffffffda RBX: 00007f79ece15fa0 RCX: 00007f79ecb9cdd9 [ 810.081782][T21126] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 810.081794][T21126] RBP: 00007f79eda28090 R08: 0000000000000000 R09: 0000000000000000 [ 810.081806][T21126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.081817][T21126] R13: 00007f79ece16038 R14: 00007f79ece15fa0 R15: 00007ffd3c3b6d38 [ 810.081848][T21126] [ 810.081856][T21126] page_pool_create_percpu() gave up with errno -12 [ 810.635141][T21146] FAULT_INJECTION: forcing a failure. [ 810.635141][T21146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.648871][T21146] CPU: 0 UID: 0 PID: 21146 Comm: syz.0.4478 Not tainted syzkaller #0 PREEMPT(full) [ 810.648896][T21146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 810.648908][T21146] Call Trace: [ 810.648916][T21146] [ 810.648924][T21146] dump_stack_lvl+0xe8/0x150 [ 810.648952][T21146] should_fail_ex+0x412/0x560 [ 810.648979][T21146] _copy_from_user+0x2d/0xb0 [ 810.649004][T21146] get_user_ifreq+0x6b/0x180 [ 810.649031][T21146] sock_ioctl+0x704/0x7f0 [ 810.649059][T21146] ? __pfx_sock_ioctl+0x10/0x10 [ 810.649087][T21146] ? __fget_files+0x3a0/0x420 [ 810.649108][T21146] ? __fget_files+0x2a/0x420 [ 810.649133][T21146] ? bpf_lsm_file_ioctl+0x9/0x20 [ 810.649165][T21146] ? __pfx_sock_ioctl+0x10/0x10 [ 810.649191][T21146] __se_sys_ioctl+0xfc/0x170 [ 810.649216][T21146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.649236][T21146] do_syscall_64+0x15f/0xf80 [ 810.649256][T21146] ? trace_irq_disable+0x3b/0x140 [ 810.649282][T21146] ? clear_bhb_loop+0x40/0x90 [ 810.649306][T21146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.649324][T21146] RIP: 0033:0x7f4fa699cdd9 [ 810.649341][T21146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.649357][T21146] RSP: 002b:00007f4fa778a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.649377][T21146] RAX: ffffffffffffffda RBX: 00007f4fa6c15fa0 RCX: 00007f4fa699cdd9 [ 810.649391][T21146] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 810.649403][T21146] RBP: 00007f4fa778a090 R08: 0000000000000000 R09: 0000000000000000 [ 810.649415][T21146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.649426][T21146] R13: 00007f4fa6c16038 R14: 00007f4fa6c15fa0 R15: 00007fff3329e3b8 [ 810.649457][T21146] [ 811.007649][T21159] dummy0: mtu less than device minimum [ 811.099664][T21165] bridge11: entered promiscuous mode [ 811.299207][T21178] __nla_validate_parse: 4 callbacks suppressed [ 811.299227][T21178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4492'. [ 811.326359][T21180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4492'. [ 811.464468][T21186] FAULT_INJECTION: forcing a failure. [ 811.464468][T21186] name failslab, interval 1, probability 0, space 0, times 0 [ 811.478584][T21186] CPU: 0 UID: 0 PID: 21186 Comm: syz.0.4495 Not tainted syzkaller #0 PREEMPT(full) [ 811.478607][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.478618][T21186] Call Trace: [ 811.478625][T21186] [ 811.478632][T21186] dump_stack_lvl+0xe8/0x150 [ 811.478656][T21186] should_fail_ex+0x412/0x560 [ 811.478684][T21186] should_failslab+0xa8/0x100 [ 811.478711][T21186] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 811.478735][T21186] ? __alloc_skb+0x1d0/0x7d0 [ 811.478753][T21186] ? __local_bh_enable_ip+0xd0/0x130 [ 811.478784][T21186] __alloc_skb+0x1d0/0x7d0 [ 811.478813][T21186] netlink_dump+0x1d8/0xe10 [ 811.478846][T21186] ? __pfx_netlink_dump+0x10/0x10 [ 811.478880][T21186] ? genl_start+0x499/0x6c0 [ 811.478914][T21186] __netlink_dump_start+0x5cb/0x7e0 [ 811.478943][T21186] genl_family_rcv_msg_dumpit+0x213/0x310 [ 811.478974][T21186] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 811.478999][T21186] ? genl_get_cmd+0x82e/0x960 [ 811.479034][T21186] ? __pfx_genl_start+0x10/0x10 [ 811.479058][T21186] ? __pfx_genl_dumpit+0x10/0x10 [ 811.479082][T21186] ? __pfx_genl_done+0x10/0x10 [ 811.479101][T21186] ? __lock_acquire+0x6b5/0x2cf0 [ 811.479133][T21186] genl_rcv_msg+0x5e8/0x7a0 [ 811.479166][T21186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.479192][T21186] ? __pfx_batadv_netlink_dump_hardif+0x10/0x10 [ 811.479236][T21186] netlink_rcv_skb+0x232/0x4b0 [ 811.479260][T21186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.479288][T21186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.479326][T21186] ? down_read+0x270/0x2e0 [ 811.479348][T21186] ? genl_rcv+0xd/0x40 [ 811.479375][T21186] genl_rcv+0x28/0x40 [ 811.479399][T21186] netlink_unicast+0x75c/0x8e0 [ 811.479430][T21186] netlink_sendmsg+0x813/0xb40 [ 811.479463][T21186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.479490][T21186] ? aa_sock_msg_perm+0xf1/0x1b0 [ 811.479516][T21186] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 811.479544][T21186] ____sys_sendmsg+0x972/0x9f0 [ 811.479566][T21186] ? __might_fault+0xaf/0x130 [ 811.479595][T21186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.479626][T21186] ? import_iovec+0x73/0xa0 [ 811.479650][T21186] ___sys_sendmsg+0x2a5/0x360 [ 811.479671][T21186] ? __lock_acquire+0x6b5/0x2cf0 [ 811.479692][T21186] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.479746][T21186] ? __fget_files+0x2a/0x420 [ 811.479773][T21186] ? __fget_files+0x3a0/0x420 [ 811.479804][T21186] __x64_sys_sendmsg+0x1bd/0x2a0 [ 811.479829][T21186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.479860][T21186] ? __pfx_ksys_write+0x10/0x10 [ 811.479893][T21186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.479913][T21186] do_syscall_64+0x15f/0xf80 [ 811.479933][T21186] ? trace_irq_disable+0x3b/0x140 [ 811.479958][T21186] ? clear_bhb_loop+0x40/0x90 [ 811.479981][T21186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.479999][T21186] RIP: 0033:0x7f4fa699cdd9 [ 811.480017][T21186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.480032][T21186] RSP: 002b:00007f4fa778a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.480052][T21186] RAX: ffffffffffffffda RBX: 00007f4fa6c15fa0 RCX: 00007f4fa699cdd9 [ 811.480066][T21186] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 811.480078][T21186] RBP: 00007f4fa778a090 R08: 0000000000000000 R09: 0000000000000000 [ 811.480090][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.480100][T21186] R13: 00007f4fa6c16038 R14: 00007f4fa6c15fa0 R15: 00007fff3329e3b8 [ 811.480132][T21186] [ 811.980443][T21196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4498'. [ 812.249045][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4505'. [ 812.293728][T21212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4504'. [ 812.435338][T21230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4512'. [ 812.454410][T21228] FAULT_INJECTION: forcing a failure. [ 812.454410][T21228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.488280][T21228] CPU: 1 UID: 0 PID: 21228 Comm: syz.0.4511 Not tainted syzkaller #0 PREEMPT(full) [ 812.488307][T21228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 812.488319][T21228] Call Trace: [ 812.488327][T21228] [ 812.488335][T21228] dump_stack_lvl+0xe8/0x150 [ 812.488363][T21228] should_fail_ex+0x412/0x560 [ 812.488391][T21228] _copy_to_user+0x31/0xb0 [ 812.488418][T21228] simple_read_from_buffer+0xe1/0x170 [ 812.488447][T21228] proc_fail_nth_read+0x1bb/0x230 [ 812.488473][T21228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.488501][T21228] ? rw_verify_area+0x2a6/0x4d0 [ 812.488523][T21228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.488545][T21228] vfs_read+0x20c/0xa70 [ 812.488573][T21228] ? __pfx___mutex_lock+0x10/0x10 [ 812.488597][T21228] ? __pfx_vfs_read+0x10/0x10 [ 812.488622][T21228] ? __fget_files+0x2a/0x420 [ 812.488647][T21228] ? __fget_files+0x3a0/0x420 [ 812.488666][T21228] ? __fget_files+0x2a/0x420 [ 812.488695][T21228] ksys_read+0x150/0x270 [ 812.488723][T21228] ? __pfx_ksys_read+0x10/0x10 [ 812.488755][T21228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.488776][T21228] do_syscall_64+0x15f/0xf80 [ 812.488797][T21228] ? trace_irq_disable+0x3b/0x140 [ 812.488822][T21228] ? clear_bhb_loop+0x40/0x90 [ 812.488846][T21228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.488864][T21228] RIP: 0033:0x7f4fa695d60e [ 812.488882][T21228] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 812.488897][T21228] RSP: 002b:00007f4fa7789fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.488917][T21228] RAX: ffffffffffffffda RBX: 00007f4fa778a6c0 RCX: 00007f4fa695d60e [ 812.488930][T21228] RDX: 000000000000000f RSI: 00007f4fa778a0a0 RDI: 0000000000000005 [ 812.488942][T21228] RBP: 00007f4fa778a090 R08: 0000000000000000 R09: 0000000000000000 [ 812.488959][T21228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.488969][T21228] R13: 00007f4fa6c16038 R14: 00007f4fa6c15fa0 R15: 00007fff3329e3b8 [ 812.489000][T21228] [ 812.935497][T21234] lo speed is unknown, defaulting to 1000 [ 813.219590][T21259] tipc: Enabling of bearer rejected, failed to enable media [ 813.299617][T21262] netlink: 'syz.0.4524': attribute type 1 has an invalid length. [ 813.388374][T21262] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 813.399357][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4524'. [ 813.490604][T21268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4526'. [ 813.817826][T21289] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4529'. [ 813.863258][T21285] netlink: 'syz.4.4529': attribute type 1 has an invalid length. [ 814.085820][T21250] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 814.119898][T21250] bond0: (slave wlan0): Error: Slave does not support XDP [ 814.197227][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4519'. [ 814.330594][T21309] dummy0: mtu less than device minimum [ 814.363897][T21247] lo speed is unknown, defaulting to 1000 [ 814.649441][T21325] tipc: Enabling of bearer rejected, already enabled [ 814.672163][T21323] tipc: Resetting bearer [ 814.738731][ T7101] ------------[ cut here ]------------ [ 814.747634][ T7101] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 814.782856][ T7101] shift exponent 64 is too large for 64-bit type 'unsigned long' [ 814.800694][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 814.800720][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 814.800738][ T7101] Workqueue: events_unbound conn_resize_work_handler [ 814.800773][ T7101] Call Trace: [ 814.800781][ T7101] [ 814.800790][ T7101] dump_stack_lvl+0xe8/0x150 [ 814.800815][ T7101] ubsan_epilogue+0xa/0x30 [ 814.800839][ T7101] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 814.800878][ T7101] ? __css_rstat_lock+0xa1/0x4c0 [ 814.800907][ T7101] ip_vs_rht_desired_size+0x2cf/0x410 [ 814.800931][ T7101] conn_resize_work_handler+0x1b6/0x14c0 [ 814.800959][ T7101] ? __lock_acquire+0x6b5/0x2cf0 [ 814.800991][ T7101] ? do_raw_spin_lock+0x12b/0x2f0 [ 814.801015][ T7101] ? lock_acquire+0x106/0x350 [ 814.801042][ T7101] ? __pfx_conn_resize_work_handler+0x10/0x10 [ 814.801071][ T7101] ? process_scheduled_works+0xa70/0x1860 [ 814.801099][ T7101] ? process_scheduled_works+0xa70/0x1860 [ 814.801117][ T7101] ? process_scheduled_works+0xa70/0x1860 [ 814.801139][ T7101] process_scheduled_works+0xb5d/0x1860 [ 814.801192][ T7101] ? __pfx_process_scheduled_works+0x10/0x10 [ 814.801219][ T7101] ? assign_work+0x3d5/0x5e0 [ 814.801244][ T7101] worker_thread+0xa53/0xfc0 [ 814.801294][ T7101] kthread+0x388/0x470 [ 814.801318][ T7101] ? __pfx_worker_thread+0x10/0x10 [ 814.801335][ T7101] ? __pfx_kthread+0x10/0x10 [ 814.801360][ T7101] ret_from_fork+0x514/0xb70 [ 814.801384][ T7101] ? __pfx_ret_from_fork+0x10/0x10 [ 814.801404][ T7101] ? __switch_to+0xc79/0x1410 [ 814.801436][ T7101] ? __pfx_kthread+0x10/0x10 [ 814.801460][ T7101] ret_from_fork_asm+0x1a/0x30 [ 814.801498][ T7101] [ 814.802230][ T7101] ---[ end trace ]--- [ 814.993322][ T7101] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 815.000595][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 815.010161][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.020237][ T7101] Workqueue: events_unbound conn_resize_work_handler [ 815.026967][ T7101] Call Trace: [ 815.030263][ T7101] [ 815.033210][ T7101] vpanic+0x56c/0xa60 [ 815.037222][ T7101] ? __pfx_vpanic+0x10/0x10 [ 815.041757][ T7101] ? irqentry_exit+0x218/0x730 [ 815.046565][ T7101] panic+0xc5/0xd0 [ 815.050315][ T7101] ? __pfx_panic+0x10/0x10 [ 815.054767][ T7101] ? __pfx__printk+0x10/0x10 [ 815.059396][ T7101] check_panic_on_warn+0x89/0xb0 [ 815.064370][ T7101] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 815.070831][ T7101] ? __css_rstat_lock+0xa1/0x4c0 [ 815.075805][ T7101] ip_vs_rht_desired_size+0x2cf/0x410 [ 815.081207][ T7101] conn_resize_work_handler+0x1b6/0x14c0 [ 815.086877][ T7101] ? __lock_acquire+0x6b5/0x2cf0 [ 815.091857][ T7101] ? do_raw_spin_lock+0x12b/0x2f0 [ 815.096910][ T7101] ? lock_acquire+0x106/0x350 [ 815.101612][ T7101] ? __pfx_conn_resize_work_handler+0x10/0x10 [ 815.107693][ T7101] ? process_scheduled_works+0xa70/0x1860 [ 815.113426][ T7101] ? process_scheduled_works+0xa70/0x1860 [ 815.119139][ T7101] ? process_scheduled_works+0xa70/0x1860 [ 815.124872][ T7101] process_scheduled_works+0xb5d/0x1860 [ 815.130463][ T7101] ? __pfx_process_scheduled_works+0x10/0x10 [ 815.136473][ T7101] ? assign_work+0x3d5/0x5e0 [ 815.141099][ T7101] worker_thread+0xa53/0xfc0 [ 815.145835][ T7101] kthread+0x388/0x470 [ 815.149910][ T7101] ? __pfx_worker_thread+0x10/0x10 [ 815.155032][ T7101] ? __pfx_kthread+0x10/0x10 [ 815.159707][ T7101] ret_from_fork+0x514/0xb70 [ 815.164298][ T7101] ? __pfx_ret_from_fork+0x10/0x10 [ 815.169402][ T7101] ? __switch_to+0xc79/0x1410 [ 815.174095][ T7101] ? __pfx_kthread+0x10/0x10 [ 815.178718][ T7101] ret_from_fork_asm+0x1a/0x30 [ 815.183534][ T7101] [ 815.187093][ T7101] Kernel Offset: disabled [ 815.191525][ T7101] Rebooting in 86400 seconds..