last executing test programs: 5.467573385s ago: executing program 4 (id=1594): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x588, 0x208, 0x350, 0xffffffff, 0x118, 0x0, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "9f64", 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@local, @icmp_id=0x68, @port=0x4e24}}}, {{@ipv6={@empty, @loopback, [0x0, 0xffff00, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xff000000], 'macvlan0\x00', 'netdevsim0\x00', {}, {}, 0x3b, 0x1, 0x5, 0x1}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x12, @ipv6=@empty, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@mcast1, @empty, [0xffffffff, 0xac5aa3227b0afb31, 0xff, 0xff], [0xff000000, 0xff, 0x0, 0xff000000], 'veth1_vlan\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x88, 0x94, 0x7, 0x43}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x6}, @common=@frag={{0x30}, {[0x80000001, 0x7f], 0x4, 0xaf211d8fc33faa19, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv4=@multicast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xffffffff, 0xf9948b6b673ef9ab, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xff000000], 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x2b, 0xa3, 0x2, 0x1}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x3, 0xf0, 0x1}}, @common=@hbh={{0x48}, {0x7f, 0x0, 0x0, [0x81, 0x6bf6, 0x0, 0x7f, 0x5, 0x400, 0xd70a, 0x0, 0x5, 0x5cb, 0x0, 0x4, 0x2ef, 0x1, 0x0, 0xfff2], 0xd}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x20, @ipv6=@loopback, @ipv6=@mcast1, @icmp_id=0x68, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb0"}}}}}}, 0x0) 5.32987139s ago: executing program 4 (id=1595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @empty, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a000100c8f5b145000000000a0080000000c0fe"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) sendto$l2tp(r2, &(0x7f0000000540)="dc9a956a", 0x4, 0x40000, &(0x7f0000000580)={0x2, 0x0, @remote, 0x1}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 5.258561843s ago: executing program 4 (id=1596): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x3, 0x7, 0x0, 0xd}, 0xc) listen(r1, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) vmsplice(r5, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) splice(r3, 0x0, r5, 0x0, 0xc, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x38, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000020000100009500020000fbff00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', r2, 0x25, r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r2, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) write$tun(r8, &(0x7f0000000480)={@val={0x0, 0xa00}, @void, @eth={@broadcast, @broadcast, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x0, 0x1, "02", "38f898", 0x5, "f0425b"}}}}}}}, 0x1d) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe004000000000000800040001000000", 0x24) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) 2.919284747s ago: executing program 0 (id=1612): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3b5cc370465e24f6, 0x84}}}, 0x7c}}, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002040)=ANY=[@ANYBLOB="f00000001000080027bd7000fbdbdf257f"], 0xf0}, 0x1, 0x0, 0x0, 0x4805}, 0x0) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61}, {&(0x7f0000000040)=""/37}], 0x0, &(0x7f0000000180)=""/193}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/22}, {&(0x7f0000000340)=""/122}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/238}, {&(0x7f0000001600)=""/17}, {&(0x7f0000001640)=""/242}, {&(0x7f0000001740)=""/171}, {&(0x7f0000001800)=""/153}, {&(0x7f00000018c0)=""/225}, {&(0x7f00000019c0)=""/44}]}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66}, {&(0x7f0000001c80)=""/184}, {&(0x7f0000001d40)=""/116}, {&(0x7f0000001dc0)=""/8, 0xfffffffffffffee3}], 0x0, &(0x7f0000001e40)=""/84, 0x48}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8}, {&(0x7f0000001f80)=""/27}, {&(0x7f0000001fc0)=""/244}, {&(0x7f00000020c0)=""/54}, {&(0x7f00000000c0)=""/27}, {&(0x7f00000003c0)=""/61}, {&(0x7f0000000400)=""/61}, {&(0x7f0000005340)=""/209}, {&(0x7f0000005440)=""/45}], 0x0, &(0x7f0000002140)=""/59}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x0, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1, 0x64}, {&(0x7f0000002240)=""/172}], 0x0, &(0x7f0000002340)=""/53}, 0x7fd}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68}, {&(0x7f0000002480)=""/246}, {&(0x7f0000002580)=""/225}, {&(0x7f0000002680)=""/4096}, {&(0x7f0000003680)=""/102}, {&(0x7f0000003700)=""/161}, {&(0x7f00000037c0)=""/135}], 0x0, &(0x7f0000003900)=""/239}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32}, {&(0x7f0000003ac0)=""/246}, {&(0x7f0000003bc0)=""/253}, {&(0x7f0000003cc0)=""/212}, {&(0x7f0000003dc0)=""/127}, {&(0x7f0000003e40)=""/190}, {&(0x7f0000003f00)=""/161}, {&(0x7f0000003fc0)=""/4096}, {&(0x7f0000004fc0)=""/42}], 0x0, &(0x7f00000050c0)=""/173}, 0x16}], 0x400000000000213, 0x40002002, 0x0) 2.796906748s ago: executing program 0 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 2.739915065s ago: executing program 1 (id=1615): socket$kcm(0xa, 0x3, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x6, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x0, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x76c0042f5e68b742) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001300)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001440)={{{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x0, 0x4e20, 0x10, 0x2, 0x80, 0x20, 0x3c, 0x0, r4}, {0x6, 0x2, 0x1, 0x4, 0x8, 0xe, 0x2, 0x1}, {0x5, 0x3b9, 0x9, 0x6}, 0x7, 0x0, 0x0, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d3, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x1, 0x2, 0x4, 0x866, 0x4, 0x6}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r5) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r7, 0x1) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5}, 0x7}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/242}, {&(0x7f0000000880)=""/34}, {&(0x7f00000008c0)=""/114}, {&(0x7f0000000b00)=""/233}]}, 0xc2}], 0x4000000000001b1, 0x120, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000e0d11ba341bfab23dc00b3dd72518f35a8552718c524ac9991e875b8c3970d9a064872661db2d5480b217774e57fc14fbcf4b8a1c5d06a166edab62a57991cdd184be6688c0594ead2c05d3213defd1e3cd52e5079ca0e60c6eff8049df445a83f5fb650f827", @ANYRES32, @ANYBLOB="0000000000000000000000000004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000077faa1bbd000000000000007010000f8ffffffb702000008000000b703000000000480850000002d0000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 2.614144707s ago: executing program 0 (id=1617): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0xfc, 0x5}}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0xfc, 0x5}}, 0x1c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) 2.158453383s ago: executing program 4 (id=1621): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000000000000500600004"], 0x18}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x4}) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="030429bd7000fbdbdf250200000008000100010000002f1c3020b5a5c592957a38e6e05a6c499eb2b75a73b1829213cab2069d59ee33b3f511e1e2b2437062270d82cdcfd8b98c4e6294c2c23a3d28915006e61943fe62641e0aa1d88c596d63be4e096510c146b654e13c996991d5c5705fab601eb9c78e769aef5ee62e916da5e5dbf8e8ddce6affbc2911ec001e74a352d48ed8333c0ace4ceccb0a8e7e0fceb2a1c69819ac245d24dd4fde320e9f10335389bf1b08d8f5edcfae2713f84273e1c35d1caa6e386cfa8e09ef5f5092d97fca715ece0911b30dae8e27846678c887ab06"], 0x1c}}, 0x8054) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 2.111575848s ago: executing program 0 (id=1622): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r1, 0x40, 0x6, 0x36a0d384}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0bc6a33cc87d4cc23eb205848aa1febd8dd07bc25978ee5c6f83db659433b6187af151b76870a994fe4440c46b27fc4fae2e4ed9d711e652e6c397ccd89fc7181d168405d21d9f218508d0af65af34d43b95a83cdeb6a2bed82a8b75dcd514403aa7201818b9a0b5fe9c6ef1ce91bb73a66ee7c1a9a66b736f5556eb0d06ddef99bd96b0e9385db94623bbb509536211963e99cf3cacab5e61491086104702d8df708e72b81f4ad4e045b51deece6dc18ea", 0x278}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc61914f291a898418ceeb9c7b62b2150c93a629d18e5a5032b098de85cda1f19e1479f35d4189736cde69a5da42390c0714f69d1cc78062b5e660f8cbb3e538110925c63649288d", 0x62}, {&(0x7f00000022c0)="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", 0x1fa}], 0x4}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 2.025587154s ago: executing program 3 (id=1623): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0x1, &(0x7f0000000100)="f642f65881083db4f1d4fe48fc539ca1b7c205927def765882ae56e1f7d6a0940a035eb4c93f59e90244012ec9ce1fb97e616df291da862425021041615345cfbf5994ac1d8cb81a708cd4a3a16be2a470211669c4fc6769d256a24520d79f8b581714634173ddeb307c204d6b2848f7f2b3f86856c785550b1c8e15e263ea0a7fcb6b6277acd794410674073929239b360e921ede", &(0x7f00000001c0)=""/145}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r2 = socket$igmp6(0xa, 0x3, 0x2) ppoll(&(0x7f0000000340)=[{r1, 0x821e}, {r2, 0x8000}, {r0, 0x1180}, {r0, 0x1002}, {r0, 0x4}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7fffffffffffffff]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xfe, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8000, 0x8000, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', r3, 0x40, 0x8, 0x4, 0xfd, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty, {[@timestamp={0x44, 0x18, 0x82, 0x0, 0xc, [0x608, 0x1, 0x0, 0x8, 0x7]}]}}}}}) getpeername$inet(r0, &(0x7f0000000580)={0x2, 0x0, @loopback}, &(0x7f00000005c0)=0x10) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8011) connect$inet6(r2, &(0x7f0000000700)={0xa, 0x4e20, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000740)=[0x0, 0xff]) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000780)) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x80, r4, 0x9}, 0xc) getsockopt(r2, 0x8, 0x6e6, &(0x7f0000000880)=""/55, &(0x7f00000008c0)=0x37) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000900)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000940)=0x9, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000a80)={r0, &(0x7f0000000980)='-/\x00', 0x8900, &(0x7f00000009c0)={@align=0x8000000000000001, {0x0, 0xa2, 0x73, 0x7}}, 0x6b7eafc0, &(0x7f0000000a00), &(0x7f0000000a40)=0xe}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x84, r7, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x17d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x18bd}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000e00)={{{@in=@initdev, @in=@dev}}, {{@in=@dev}}}, &(0x7f0000000f00)=0xe8) write$cgroup_subtree(r6, &(0x7f0000000f40)={[{0x2b, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}, {0x2d, 'io'}, {0x2d, 'perf_event'}, {0x2b, 'devices'}, {0x2b, 'net_prio'}]}, 0x3b) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r8, 0x40786e88, &(0x7f0000001300)={{&(0x7f0000000f80)=[{0x1, 0x800, 0x3, {0x8, 0x2}, 0x4, 0x6, 0x22}, {0x1, 0x2, 0x9, {0xe, 0x5}, 0x4, 0x10001, 0x9}, {0x7, 0x0, 0x0, {0x80, 0x5}, 0x5, 0x7fffffff, 0x6aab}, {0x100, 0x6, 0xfffffffffffff10e, {0x9, 0x7}, 0xfffffffffffff801, 0x7fffffffffffffff, 0x1}, {0x100000000, 0x1, 0x7, {0x401, 0x8000000000000000}, 0x2, 0x0, 0x5}, {0xfffffffffffffff7, 0x800, 0xf, {0x80, 0x6}, 0x3, 0x2, 0x7}, {0xfffffffffffffffe, 0x4, 0x800000, {0x8, 0x9}, 0x9, 0x6}, {0x1, 0x80000000, 0x3, {0x5, 0x3}, 0xffffffff7fffffff, 0xc, 0x8}], 0x8, 0x40, 0xf59f, 0x3}, {&(0x7f0000001180)=[{0xffffffffffffffff, 0xfffffffffffffffa}, {0x100, 0x8}], 0x2, 0x10, 0x507, 0x4}, {&(0x7f00000011c0)=[0x1, 0x5, 0x7, 0x5], 0x4, 0x8, 0x4, 0xfffffffffffffffd}, {&(0x7f0000001200)=[{0x73a5, 0xc4, 0xc, 0x8, 0x3}, {0x3, 0x2, 0x6, 0x8, 0x6}, {0x4f82, 0x3, 0x9b8, 0xe, 0x9}, {0x63, 0x7, 0x2, 0x10000, 0x1}], 0x4, 0x28, 0x4, 0x2}, {&(0x7f00000012c0)=[0x6, 0x9], 0x2, 0x8, 0x3, 0x9}}) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000001380)="c5c22ab4e84261ceec24475082fd7aa74a3f12a327890ac57b4dc9f4da731c86905e9ee2") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r6, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x1b, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0xc5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001580)='syzkaller\x00', 0x8, 0xe7, &(0x7f00000015c0)=""/231, 0x40f00, 0x57, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001740)={0x3, 0x0, 0x6013, 0x1000}, 0x10, 0x0, r6, 0x3, &(0x7f0000001980)=[r1, 0xffffffffffffffff, r1, r6, r6, r6, 0xffffffffffffffff, r6], &(0x7f00000019c0)=[{0x4, 0x1, 0xf, 0x6}, {0x2, 0x5, 0xb, 0x1}, {0x1, 0x5, 0x8, 0xa}], 0x10, 0x8}, 0x94) 1.745599425s ago: executing program 1 (id=1624): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x800) sendto$inet6(r2, &(0x7f0000000200)="0600", 0x2, 0x0, 0x0, 0x0) 1.667499262s ago: executing program 0 (id=1625): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000540)="ef24644b6af1f81785", 0x9) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/19, 0x13}, 0x7}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="010002000000000000080a00", @ANYRES8, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f0000000240)) epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0x2, 0x0, 0x0) 1.591631224s ago: executing program 1 (id=1626): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) 1.485213894s ago: executing program 1 (id=1627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 1.359087098s ago: executing program 1 (id=1628): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x9}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000400)={r1, 0x2, 0x4}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d61637365630000000002c008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0xc060500) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000faff04060101dbb900000000000000000a00000905000100070000000900020073797a31000000000500010007000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) write$nci(r4, 0x0, 0x7) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8}, 0x8) socket$kcm(0x29, 0x5, 0x0) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0xffffffffffffff7e, 0x80000) setsockopt$packet_int(r7, 0x107, 0x3, &(0x7f00000004c0)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="bd606a2a7f2c24475466a8f086dd60902d0300380000fe880000000000000000000000000001fe800009a200000000000000000000aa6c0600000000000007280000000008050400060000000000f7ff020000000000000001000000000000000100000000000000c20400008001"], 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x20000811) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x24060400) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.002710972s ago: executing program 3 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 904.310981ms ago: executing program 4 (id=1631): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x802, 0x2}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005a0025"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 671.034724ms ago: executing program 0 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000020c0)={@ifindex, 0xffffffffffffffff, 0x22, 0x2000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r6, 0x5, 0x1000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffb6}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000380)={0x2c, r6, 0x5, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 670.141095ms ago: executing program 3 (id=1634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2c8, 0x3b8, 0x488, 0x3b8, 0x488, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000600000000000000004a", @ANYRES32=0x0, @ANYBLOB="8000000000000000140012800b0001006261746164760000f9ff028008000a00", @ANYRES32=0x0, @ANYBLOB="0a0001000000000000000000"], 0x48}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x20, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) sendmmsg$alg(r6, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYRES16, @ANYBLOB="00000000e1ff000000000000000000000000000068a3705d6e14c579fe136cfb6dd2de5ca1758ad2065a10ba4fbde70c5d456a88", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x0, 0x7ffc}, 0xffffffffffffffd5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000640)=ANY=[@ANYRES64=r11, @ANYRESOCT=r10, @ANYRESOCT=r4, @ANYRES32=r7, @ANYRESHEX=r4, @ANYRES8=r10, @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000280)=r13, 0x4) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001f"], 0x5c}}, 0x40) 638.700782ms ago: executing program 4 (id=1636): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) r3 = socket(0x9, 0x5, 0x6) unshare(0x400) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x2c020400) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x7, 0x7f}) write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x1}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0x3ff, 0x1, 0x81, 0xc69}, 0x10) 486.695506ms ago: executing program 2 (id=1638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 425.6462ms ago: executing program 1 (id=1639): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001940)={0x44, r0, 0x801, 0x400, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x44}, 0x1, 0x2000000}, 0x0) 385.372879ms ago: executing program 3 (id=1640): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write(r7, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 384.725002ms ago: executing program 2 (id=1641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="811068000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 227.258094ms ago: executing program 2 (id=1642): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd00001c0012800b0001006970766c616e00000c000280060001000100000008000500", @ANYRES32=r2, @ANYBLOB="00000000bb31c79514e35c29193bacd2852753991e01040d50464e6906baa12e6e42903985e567b76ab93e2491734bf3eff3c7c6fcfc28b82f06f6cf5967ff775846862680a361aa5a478fa772eaa29f9a93e150a47e109d47ce12e28d5da1f3ee3bef2ddca26af27895c96a0f1c96e2ab536d45645bf96bce24a47b4d1aa01413a90462e5afc9da8c13c5400255d149b90c5b5e94c6f1493dc100051a3fd8d9e7cf7682c08d7b8bba2fb97be5a913bd4077e9d1b5159c80f13408a68b5a2c22", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 177.903804ms ago: executing program 2 (id=1643): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0xfe0, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xfaa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed3818f72a81be869956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea02f74a38f6df32922736506ceae50f7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb275322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c2078468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c1927693b33f37d941fab4cd11a0f13ed9ac8b4202cb7af31c7dd69399ce4facc3b5231829129f93f4ce9557979916350bbdbbc9fe8ce1628426bdb0fa886661019610343338af93fa6dd5a07"}}}}}, 0x0) 85.101741ms ago: executing program 3 (id=1644): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x300, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x24000845) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0x0, @ANYBLOB="090001"], 0x38}}, 0x40000) 27.452952ms ago: executing program 2 (id=1645): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800090010003904000000000000000000000040", @ANYRES32=r5, @ANYBLOB="80030000000000003800128008000100677265002c00028008000700ac141402050009000300000006000f000200000006000f000800000006000e0001000000"], 0x58}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2", 0x13, 0x40, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.118015ms ago: executing program 2 (id=1646): unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x2, 0x338, 0x98, 0x98, 0xfeffffff, 0x98, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00', @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000500), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x50) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0x1, {{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x1}, 0x90) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000480)={{r7}, 0xd, 0x2, 0x49e1}) r8 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r10, 0x1, 0x27, &(0x7f0000000180)=0x400, 0x4) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @broadcast}, {0x306, @remote}, 0x0, {0x2, 0x4e22, @broadcast}, 'veth0_macvtap\x00'}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000d, 0x13, r8, 0x27f54000) r11 = socket$nl_rdma(0x10, 0x3, 0x14) socket$pptp(0x18, 0x1, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000000000029bd7000ffdbdf3d0900020073797a3200000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x4000) 0s ago: executing program 3 (id=1647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0xf, 0x80000001}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x52) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r3, 0x1, 0x70bd30, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894) kernel console output (not intermixed with test programs): _fail_ex+0x412/0x560 [ 146.252052][ T7981] _copy_from_user+0x2d/0xb0 [ 146.252080][ T7981] kstrtouint_from_user+0xd6/0x180 [ 146.252106][ T7981] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 146.252147][ T7981] proc_fail_nth_write+0x8e/0x210 [ 146.252171][ T7981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.252200][ T7981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.252225][ T7981] vfs_write+0x29a/0xb90 [ 146.252258][ T7981] ? __pfx_vfs_write+0x10/0x10 [ 146.252285][ T7981] ? __fget_files+0x2a/0x420 [ 146.252311][ T7981] ? __fget_files+0x3a0/0x420 [ 146.252331][ T7981] ? __fget_files+0x2a/0x420 [ 146.252361][ T7981] ksys_write+0x150/0x270 [ 146.252389][ T7981] ? __pfx_ksys_write+0x10/0x10 [ 146.252422][ T7981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.252442][ T7981] do_syscall_64+0x15f/0xf80 [ 146.252459][ T7981] ? trace_irq_disable+0x3b/0x140 [ 146.252485][ T7981] ? clear_bhb_loop+0x40/0x90 [ 146.252508][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.252526][ T7981] RIP: 0033:0x7f83c135d68e [ 146.252543][ T7981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.252561][ T7981] RSP: 002b:00007f83c231ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.252580][ T7981] RAX: ffffffffffffffda RBX: 00007f83c23206c0 RCX: 00007f83c135d68e [ 146.252593][ T7981] RDX: 0000000000000001 RSI: 00007f83c23200a0 RDI: 0000000000000009 [ 146.252604][ T7981] RBP: 00007f83c2320090 R08: 0000000000000000 R09: 0000000000000000 [ 146.252614][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.252625][ T7981] R13: 00007f83c1616038 R14: 00007f83c1615fa0 R15: 00007ffe23cdbf38 [ 146.252657][ T7981] [ 146.482484][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 147.115717][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 147.261414][ T7992] netlink: 'syz.0.598': attribute type 11 has an invalid length. [ 147.608461][ T8000] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 148.147828][ T8013] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 148.362509][ T8014] bond3: (slave geneve3): making interface the new active one [ 148.383969][ T8014] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 148.540218][ T8030] FAULT_INJECTION: forcing a failure. [ 148.540218][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 148.570679][ T7716] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.583309][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.1.610 Not tainted syzkaller #0 PREEMPT(full) [ 148.583334][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.583345][ T8030] Call Trace: [ 148.583352][ T8030] [ 148.583360][ T8030] dump_stack_lvl+0xe8/0x150 [ 148.583393][ T8030] should_fail_ex+0x412/0x560 [ 148.583423][ T8030] should_failslab+0xa8/0x100 [ 148.583452][ T8030] __kmalloc_noprof+0xe8/0x760 [ 148.583474][ T8030] ? __kasan_kmalloc+0x93/0xb0 [ 148.583499][ T8030] ? nla_strdup+0x9d/0x140 [ 148.583524][ T8030] ? __kmalloc_cache_noprof+0x31c/0x660 [ 148.583553][ T8030] nla_strdup+0x9d/0x140 [ 148.583581][ T8030] nf_tables_newchain+0x1a9a/0x2890 [ 148.583621][ T8030] ? __pfx_nf_tables_newchain+0x10/0x10 [ 148.583670][ T8030] ? nft_trans_table_add+0x230/0x430 [ 148.583700][ T8030] ? nfnl_pernet+0x23/0x240 [ 148.583719][ T8030] ? nfnl_pernet+0x23/0x240 [ 148.583748][ T8030] ? __nla_parse+0x40/0x60 [ 148.583779][ T8030] nfnetlink_rcv+0x123e/0x27b0 [ 148.583834][ T8030] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 148.583870][ T8030] ? ref_tracker_free+0x693/0x840 [ 148.583925][ T8030] ? __netlink_deliver_tap+0x807/0x850 [ 148.583955][ T8030] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.583975][ T8030] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.584001][ T8030] netlink_unicast+0x75c/0x8e0 [ 148.584031][ T8030] netlink_sendmsg+0x813/0xb40 [ 148.584061][ T8030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.584086][ T8030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 148.584112][ T8030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.584140][ T8030] ____sys_sendmsg+0x972/0x9f0 [ 148.584160][ T8030] ? __might_fault+0xaf/0x130 [ 148.584189][ T8030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.584218][ T8030] ? import_iovec+0x73/0xa0 [ 148.584249][ T8030] ___sys_sendmsg+0x2a5/0x360 [ 148.584266][ T8030] ? __lock_acquire+0x6b5/0x2cf0 [ 148.584290][ T8030] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.584343][ T8030] ? __fget_files+0x2a/0x420 [ 148.584364][ T8030] ? __fget_files+0x3a0/0x420 [ 148.584401][ T8030] __x64_sys_sendmsg+0x1bd/0x2a0 [ 148.584424][ T8030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.584454][ T8030] ? __pfx_ksys_write+0x10/0x10 [ 148.584488][ T8030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.584508][ T8030] do_syscall_64+0x15f/0xf80 [ 148.584526][ T8030] ? trace_irq_disable+0x3b/0x140 [ 148.584556][ T8030] ? clear_bhb_loop+0x40/0x90 [ 148.584579][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.584597][ T8030] RIP: 0033:0x7fb35139ce59 [ 148.584614][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.584628][ T8030] RSP: 002b:00007fb35222d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.584648][ T8030] RAX: ffffffffffffffda RBX: 00007fb351615fa0 RCX: 00007fb35139ce59 [ 148.584661][ T8030] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 148.584672][ T8030] RBP: 00007fb35222d090 R08: 0000000000000000 R09: 0000000000000000 [ 148.584683][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.584694][ T8030] R13: 00007fb351616038 R14: 00007fb351615fa0 R15: 00007ffe250e2108 [ 148.584725][ T8030] [ 148.617094][ T7716] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.981698][ T8036] __nla_validate_parse: 4 callbacks suppressed [ 148.981714][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 149.035960][ T8038] syzkaller0: entered promiscuous mode [ 149.054892][ T8038] syzkaller0: entered allmulticast mode [ 149.120020][ T8041] ip6gre1: entered promiscuous mode [ 149.145291][ T8041] ip6gre1: entered allmulticast mode [ 149.161355][ T7716] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.227819][ T7716] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.688596][ T8070] netlink: 'syz.4.621': attribute type 1 has an invalid length. [ 149.777585][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 149.868665][ T8070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.912134][ T8074] vlan2: entered allmulticast mode [ 149.930528][ T8074] bond4: entered allmulticast mode [ 150.089385][ T8076] bond4: (slave geneve4): making interface the new active one [ 150.098020][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 150.108176][ T8076] geneve4: entered allmulticast mode [ 150.120683][ T8076] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 150.691920][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 150.733568][ T8105] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 150.948742][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 151.280762][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 151.374123][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 151.403599][ T8135] FAULT_INJECTION: forcing a failure. [ 151.403599][ T8135] name failslab, interval 1, probability 0, space 0, times 0 [ 151.489880][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.0.634 Not tainted syzkaller #0 PREEMPT(full) [ 151.489904][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.489915][ T8135] Call Trace: [ 151.489922][ T8135] [ 151.489930][ T8135] dump_stack_lvl+0xe8/0x150 [ 151.489958][ T8135] should_fail_ex+0x412/0x560 [ 151.489988][ T8135] should_failslab+0xa8/0x100 [ 151.490018][ T8135] __kmalloc_noprof+0xe8/0x760 [ 151.490044][ T8135] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.490075][ T8135] tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.490103][ T8135] ? tomoyo_domain+0xd7/0x130 [ 151.490134][ T8135] ? tomoyo_path_number_perm+0x219/0x630 [ 151.490157][ T8135] tomoyo_path_number_perm+0x246/0x630 [ 151.490182][ T8135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.490203][ T8135] ? __lock_acquire+0x6b5/0x2cf0 [ 151.490239][ T8135] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 151.490279][ T8135] ? __fget_files+0x2a/0x420 [ 151.490305][ T8135] ? __fget_files+0x2a/0x420 [ 151.490324][ T8135] ? __fget_files+0x3a0/0x420 [ 151.490351][ T8135] ? __fget_files+0x2a/0x420 [ 151.490377][ T8135] security_file_ioctl+0xc3/0x2a0 [ 151.490400][ T8135] __se_sys_ioctl+0x47/0x170 [ 151.490426][ T8135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.490447][ T8135] do_syscall_64+0x15f/0xf80 [ 151.490464][ T8135] ? trace_irq_disable+0x3b/0x140 [ 151.490490][ T8135] ? clear_bhb_loop+0x40/0x90 [ 151.490513][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.490531][ T8135] RIP: 0033:0x7f03d6b9ce59 [ 151.490548][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.490563][ T8135] RSP: 002b:00007f03d7a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.490582][ T8135] RAX: ffffffffffffffda RBX: 00007f03d6e16180 RCX: 00007f03d6b9ce59 [ 151.490595][ T8135] RDX: 00002000000000c0 RSI: 00000000800442d2 RDI: 0000000000000008 [ 151.490610][ T8135] RBP: 00007f03d7a76090 R08: 0000000000000000 R09: 0000000000000000 [ 151.490621][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.490631][ T8135] R13: 00007f03d6e16218 R14: 00007f03d6e16180 R15: 00007ffed623e078 [ 151.490661][ T8135] [ 151.492754][ T8135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.883157][ T8149] sch_tbf: peakrate 5120 is lower than or equals to rate 67108864 ! [ 152.444127][ T8167] bond0: (slave dummy0): Releasing backup interface [ 152.466764][ T8167] dummy0: left promiscuous mode [ 152.482283][ T8167] bridge_slave_0: left allmulticast mode [ 152.490564][ T8167] bridge_slave_0: left promiscuous mode [ 152.502261][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.521447][ T8167] bridge_slave_1: left allmulticast mode [ 152.529853][ T8167] bridge_slave_1: left promiscuous mode [ 152.536876][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.559706][ T8167] bond0: (slave bond_slave_0): Releasing backup interface [ 152.567865][ T8167] bond_slave_0: left promiscuous mode [ 152.577744][ T8167] bond0: (slave bond_slave_1): Releasing backup interface [ 152.585957][ T8167] bond_slave_1: left promiscuous mode [ 152.597997][ T8167] team0: Port device team_slave_0 removed [ 152.610902][ T8167] team0: Port device team_slave_1 removed [ 152.619904][ T8167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.496797][ T8206] FAULT_INJECTION: forcing a failure. [ 153.496797][ T8206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.532870][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 153.604621][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.2.653 Not tainted syzkaller #0 PREEMPT(full) [ 153.604644][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.604655][ T8206] Call Trace: [ 153.604662][ T8206] [ 153.604670][ T8206] dump_stack_lvl+0xe8/0x150 [ 153.604697][ T8206] should_fail_ex+0x412/0x560 [ 153.604726][ T8206] _copy_from_user+0x2d/0xb0 [ 153.604753][ T8206] do_ipv6_setsockopt+0x25c/0x3150 [ 153.604792][ T8206] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 153.604816][ T8206] ? kstrtouint+0x6e/0xe0 [ 153.604838][ T8206] ? aa_label_sk_perm+0x532/0x6e0 [ 153.604859][ T8206] ? get_pid_task+0x20/0x1f0 [ 153.604890][ T8206] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 153.604912][ T8206] ? get_pid_task+0x20/0x1f0 [ 153.604933][ T8206] ? get_pid_task+0x20/0x1f0 [ 153.604952][ T8206] ? get_pid_task+0x20/0x1f0 [ 153.604983][ T8206] ? __lock_acquire+0x6b5/0x2cf0 [ 153.605022][ T8206] ? aa_sk_perm+0x6d5/0x900 [ 153.605048][ T8206] ipv6_setsockopt+0x59/0x170 [ 153.605075][ T8206] rawv6_setsockopt+0x276/0x5f0 [ 153.605102][ T8206] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 153.605131][ T8206] ? aa_sock_opt_perm+0xff/0x1a0 [ 153.605157][ T8206] ? sock_common_setsockopt+0x36/0xc0 [ 153.605181][ T8206] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 153.605208][ T8206] do_sock_setsockopt+0x17c/0x1b0 [ 153.605232][ T8206] __x64_sys_setsockopt+0x13d/0x1b0 [ 153.605253][ T8206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.605273][ T8206] do_syscall_64+0x15f/0xf80 [ 153.605290][ T8206] ? trace_irq_disable+0x3b/0x140 [ 153.605316][ T8206] ? clear_bhb_loop+0x40/0x90 [ 153.605339][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.605357][ T8206] RIP: 0033:0x7f83c139ce59 [ 153.605373][ T8206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.605388][ T8206] RSP: 002b:00007f83c22ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.605407][ T8206] RAX: ffffffffffffffda RBX: 00007f83c1616090 RCX: 00007f83c139ce59 [ 153.605420][ T8206] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 153.605430][ T8206] RBP: 00007f83c22ff090 R08: 0000000000000378 R09: 0000000000000000 [ 153.605441][ T8206] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.605452][ T8206] R13: 00007f83c1616128 R14: 00007f83c1616090 R15: 00007ffe23cdbf38 [ 153.605482][ T8206] [ 153.719919][ T8214] netlink: 56 bytes leftover after parsing attributes in process `syz.3.657'. [ 153.827080][ T8217] openvswitch: netlink: IPv6 tunnel dst address is zero [ 153.879498][ T8215] tipc: Enabling of bearer rejected, failed to enable media [ 154.016932][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 154.295929][ T8236] syzkaller0: entered promiscuous mode [ 154.301451][ T8236] syzkaller0: entered allmulticast mode [ 154.899032][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 155.727936][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 155.780663][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 155.929006][ T8297] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 156.015934][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.069907][ T8297] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 156.125591][ T8297] team0: Failed to send options change via netlink (err -105) [ 156.157960][ T8297] team0: Port device netdevsim1 added [ 156.189666][ T65] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 156.218300][ T8307] FAULT_INJECTION: forcing a failure. [ 156.218300][ T8307] name failslab, interval 1, probability 0, space 0, times 0 [ 156.231001][ T8307] CPU: 1 UID: 0 PID: 8307 Comm: syz.2.678 Not tainted syzkaller #0 PREEMPT(full) [ 156.231022][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.231031][ T8307] Call Trace: [ 156.231038][ T8307] [ 156.231045][ T8307] dump_stack_lvl+0xe8/0x150 [ 156.231070][ T8307] should_fail_ex+0x412/0x560 [ 156.231099][ T8307] should_failslab+0xa8/0x100 [ 156.231128][ T8307] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 156.231152][ T8307] ? __alloc_skb+0x186/0x7d0 [ 156.231169][ T8307] ? __alloc_skb+0x1d0/0x7d0 [ 156.231183][ T8307] ? __local_bh_enable_ip+0xd0/0x130 [ 156.231206][ T8307] __alloc_skb+0x1d0/0x7d0 [ 156.231228][ T8307] netlink_sendmsg+0x5d4/0xb40 [ 156.231259][ T8307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.231283][ T8307] ? aa_sock_msg_perm+0xf1/0x1b0 [ 156.231307][ T8307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.231334][ T8307] ____sys_sendmsg+0x972/0x9f0 [ 156.231354][ T8307] ? __might_fault+0xaf/0x130 [ 156.231382][ T8307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.231410][ T8307] ? import_iovec+0x73/0xa0 [ 156.231439][ T8307] ___sys_sendmsg+0x2a5/0x360 [ 156.231456][ T8307] ? __lock_acquire+0x6b5/0x2cf0 [ 156.231480][ T8307] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.231530][ T8307] ? __fget_files+0x2a/0x420 [ 156.231550][ T8307] ? __fget_files+0x3a0/0x420 [ 156.231578][ T8307] __x64_sys_sendmsg+0x1bd/0x2a0 [ 156.231608][ T8307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.231636][ T8307] ? __pfx_ksys_write+0x10/0x10 [ 156.231668][ T8307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.231688][ T8307] do_syscall_64+0x15f/0xf80 [ 156.231704][ T8307] ? trace_irq_disable+0x3b/0x140 [ 156.231729][ T8307] ? clear_bhb_loop+0x40/0x90 [ 156.231749][ T8307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.231765][ T8307] RIP: 0033:0x7f83c139ce59 [ 156.231781][ T8307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.231794][ T8307] RSP: 002b:00007f83c2320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.231811][ T8307] RAX: ffffffffffffffda RBX: 00007f83c1615fa0 RCX: 00007f83c139ce59 [ 156.231823][ T8307] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 156.231834][ T8307] RBP: 00007f83c2320090 R08: 0000000000000000 R09: 0000000000000000 [ 156.231844][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.231853][ T8307] R13: 00007f83c1616038 R14: 00007f83c1615fa0 R15: 00007ffe23cdbf38 [ 156.231880][ T8307] [ 156.513957][ T8301] x_tables: duplicate underflow at hook 2 [ 157.475811][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 157.508009][ T8343] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 157.542972][ T8343] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 157.559602][ T8340] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 157.727764][ T8357] syzkaller0: entered promiscuous mode [ 157.733388][ T8357] syzkaller0: entered allmulticast mode [ 157.755437][ T8357] netlink: 312 bytes leftover after parsing attributes in process `syz.3.693'. [ 157.942319][ T8368] syzkaller0: entered promiscuous mode [ 157.947822][ T8368] syzkaller0: entered allmulticast mode [ 157.958582][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 158.412557][ T8389] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 158.887098][ T8417] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 158.924056][ T8417] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 159.007733][ T29] audit: type=1107 audit(1779746049.303:9): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':þP5êÇPŠ›)W‚PZNYOG˜hg¿Å+îâæËô Ÿ¼<3†h™±Y¢AÛ®ÇIäÀX…·S-Ðÿðöõ\ªõ5½¶Ü|`8ôXE7nsP_ÁY—Ì؇€I‡ÝëËH“ˆÓL$å䀯)ü>>šéå!ã,ÙǜOÒR¼CO¯¦ó±ôNç‡5ß„f†ËW–í‡zO3cÈ­æ©JB‹ïï´‰Áè"éÈv`Q]¥‚*Í=¡ÉPšt_i’Ó‚Þ î=' [ 159.117894][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.136883][ T8429] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 159.290679][ T8435] syzkaller0: entered promiscuous mode [ 159.312975][ T8435] syzkaller0: entered allmulticast mode [ 159.333575][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 159.603202][ T8464] xt_nat: multiple ranges no longer supported [ 159.665486][ T8467] pimreg: entered allmulticast mode [ 159.698455][ T8467] pimreg: left allmulticast mode [ 159.790886][ T8471] wg1 speed is unknown, defaulting to 1000 [ 160.277556][ T8484] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 162.273288][ T8451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.476736][ T8498] netlink: 52 bytes leftover after parsing attributes in process `syz.3.733'. [ 162.488259][ T8498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.949234][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 163.775785][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 163.849826][ T8549] tipc: Started in network mode [ 163.874707][ T8549] tipc: Node identity 22538d4db504, cluster identity 4711 [ 163.890360][ T8549] tipc: Enabled bearer , priority 0 [ 163.902656][ T8562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.754'. [ 163.931517][ T8562] ip6erspan0: entered promiscuous mode [ 164.026785][ T8554] tipc: Resetting bearer [ 164.098716][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.757'. [ 164.238092][ T8548] tipc: Disabling bearer [ 164.721965][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.729683][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.775058][ T8573] bond0: left promiscuous mode [ 164.781172][ T8573] bond_slave_0: left promiscuous mode [ 164.787096][ T8573] bond_slave_1: left promiscuous mode [ 164.963421][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.991458][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.192015][ T8573] ip6erspan0: left promiscuous mode [ 165.201280][ T157] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.213935][ T157] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.238345][ T157] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.278183][ T157] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.457378][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 165.474229][ T8594] syzkaller0: entered promiscuous mode [ 165.493094][ T8594] syzkaller0: entered allmulticast mode [ 165.775099][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'. [ 165.922378][ T8608] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 166.013035][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 166.193449][ T8622] netlink: 76 bytes leftover after parsing attributes in process `syz.4.771'. [ 166.238250][ T8622] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 166.522891][ T8633] netlink: 428 bytes leftover after parsing attributes in process `syz.0.775'. [ 166.735582][ T8641] tipc: Started in network mode [ 166.771366][ T8641] tipc: Node identity 567f2f94c07b, cluster identity 4711 [ 166.823952][ T8641] tipc: Enabled bearer , priority 0 [ 167.024123][ T8641] tipc: Disabling bearer [ 167.190240][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.783'. [ 167.254437][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 167.329705][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 167.436319][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 167.750524][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 167.786757][ T8671] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 167.911655][ T8681] netlink: 'syz.4.791': attribute type 3 has an invalid length. [ 167.949295][ T8684] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 167.969368][ T8684] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.285940][ T8694] lo: entered allmulticast mode [ 168.299308][ T8694] pimreg: entered allmulticast mode [ 168.342190][ T8693] lo: left allmulticast mode [ 168.389728][ T8696] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 168.632619][ T8710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 168.657308][ T8708] team0: Port device team_slave_0 removed [ 168.937081][ T8721] netlink: 'syz.0.807': attribute type 23 has an invalid length. [ 168.943069][ T8724] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 168.972478][ T8724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.095149][ T4943] block nbd0: Receive control failed (result -32) [ 169.835164][ T8771] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 169.888267][ T8771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.899890][ T8774] syzkaller1: entered promiscuous mode [ 169.905350][ T8774] syzkaller1: entered allmulticast mode [ 170.218542][ T8784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.226069][ T8784] batadv_slave_0: entered allmulticast mode [ 170.232601][ T8784] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 170.248793][ T8783] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 170.324566][ T8790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.342278][ T8790] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.478287][ T8799] xt_bpf: check failed: parse error [ 170.484968][ T8799] netlink: 'syz.4.835': attribute type 1 has an invalid length. [ 170.553937][ T8799] bond7: (slave dummy0): making interface the new active one [ 170.577992][ T8799] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 170.615501][ T8799] bond7: entered promiscuous mode [ 170.618483][ T8804] __nla_validate_parse: 28 callbacks suppressed [ 170.618497][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 170.620546][ T8799] dummy0: entered promiscuous mode [ 170.735291][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.742654][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.759583][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 170.790862][ T8799] bond7: (slave dummy0): Releasing active interface [ 170.797476][ T8799] dummy0: left promiscuous mode [ 170.852304][ T8799] bridge_slave_0: left allmulticast mode [ 170.857968][ T8799] bridge_slave_0: left promiscuous mode [ 170.935028][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.038659][ T8799] bridge_slave_1: left allmulticast mode [ 171.044326][ T8799] bridge_slave_1: left promiscuous mode [ 171.050099][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.067436][ T8799] bond0: (slave bond_slave_0): Releasing backup interface [ 171.081147][ T8799] bond0: (slave bond_slave_1): Releasing backup interface [ 171.102814][ T8799] team0: Port device team_slave_1 removed [ 171.131185][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.146775][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.156846][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.171598][ T8799] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.258274][ T8790] tipc: Started in network mode [ 171.264836][ T8790] tipc: Node identity d2a4041d3364, cluster identity 4711 [ 171.272172][ T8790] tipc: Enabled bearer , priority 0 [ 171.279477][ T8809] netlink: 'syz.4.835': attribute type 24 has an invalid length. [ 171.280523][ T5739] wg1 speed is unknown, defaulting to 1000 [ 171.293006][ T5739] syz0: Port: 1 Link DOWN [ 171.321012][ T8813] syzkaller0: entered promiscuous mode [ 171.326585][ T8813] syzkaller0: entered allmulticast mode [ 171.340879][ T8789] tipc: Disabling bearer [ 171.353199][ T8798] bond7: left promiscuous mode [ 171.358218][ T5739] wg1 speed is unknown, defaulting to 1000 [ 171.417798][ T8824] netlink: 276 bytes leftover after parsing attributes in process `syz.4.840'. [ 171.479348][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.841'. [ 171.793570][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 173.149016][ T8842] netlink: 'syz.2.844': attribute type 2 has an invalid length. [ 173.534009][ T8855] vlan2: entered promiscuous mode [ 173.546801][ T8855] veth0: entered promiscuous mode [ 173.566431][ T42] IPVS: starting estimator thread 0... [ 173.665251][ T8862] IPVS: using max 31 ests per chain, 74400 per kthread [ 173.883286][ T8881] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 173.999294][ T8887] batman_adv: batadv0: Adding interface: dummy0 [ 174.017476][ T8887] batman_adv: batadv0: Interface activated: dummy0 [ 174.062943][ T8889] netlink: 'syz.2.859': attribute type 29 has an invalid length. [ 174.073820][ T8889] x_tables: duplicate underflow at hook 1 [ 174.093001][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.860'. [ 174.145727][ T8895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 174.269547][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 174.392369][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 174.411379][ T5640] block nbd64: NBD_DISCONNECT [ 174.540108][ T8897] batadv0: mtu less than device minimum [ 174.554980][ T8897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.567369][ T8897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.579099][ T8897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.590812][ T8897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.602568][ T8897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.614335][ T8897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.626084][ T8897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.745593][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 174.966242][ T8927] netlink: 56 bytes leftover after parsing attributes in process `syz.1.868'. [ 175.796364][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.877'. [ 175.968731][ T8949] Bluetooth: MGMT ver 1.23 [ 176.069654][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 176.160776][ T8964] lo: entered allmulticast mode [ 176.172249][ T8966] netlink: 68 bytes leftover after parsing attributes in process `syz.1.885'. [ 176.186101][ T8966] netlink: 'syz.1.885': attribute type 10 has an invalid length. [ 176.197451][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 176.294769][ T4943] Bluetooth: hci3: link tx timeout [ 176.301588][ T4943] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 176.387377][ T8972] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 176.653598][ T8972] syzkaller0: entered promiscuous mode [ 176.662008][ T8972] syzkaller0: entered allmulticast mode [ 177.188019][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 178.364794][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 178.968489][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 179.330952][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 179.671976][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 179.796068][ T9027] syzkaller0: entered promiscuous mode [ 179.833647][ T9027] syzkaller0: entered allmulticast mode [ 182.063751][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.098259][ T9061] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.124240][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.213049][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.237933][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.259294][ T9061] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 182.278050][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.285219][ T7077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.319682][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.326855][ T7077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.528930][ T9078] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 182.946731][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'. [ 183.049852][ T9107] netlink: 'syz.3.917': attribute type 15 has an invalid length. [ 183.062987][ T9107] netlink: 642 bytes leftover after parsing attributes in process `syz.3.917'. [ 183.202351][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 183.266683][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 183.285234][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 183.855008][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'. [ 184.093413][ T9160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 184.255898][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 184.845383][ T9189] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.890023][ T9189] syzkaller0: entered promiscuous mode [ 184.895802][ T9189] syzkaller0: entered allmulticast mode [ 184.930325][ T9193] wg1 speed is unknown, defaulting to 1000 [ 185.177463][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 185.299777][ T9209] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 185.692953][ T9221] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.947'. [ 186.749200][ T9257] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 186.758004][ T9250] net_ratelimit: 12 callbacks suppressed [ 186.758025][ T9250] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.782844][ T5739] IPVS: starting estimator thread 0... [ 186.961279][ T9260] IPVS: using max 29 ests per chain, 69600 per kthread [ 187.043317][ T9267] bond0 (unregistering): Released all slaves [ 187.707517][ T9303] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 187.717382][ T9303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.800883][ T9305] netlink: 'syz.3.967': attribute type 10 has an invalid length. [ 188.524307][ T4943] block nbd1: Receive control failed (result -32) [ 188.685240][ T9351] __nla_validate_parse: 11 callbacks suppressed [ 188.685260][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'. [ 188.688371][ T9353] netlink: 'syz.0.975': attribute type 9 has an invalid length. [ 188.708248][ T9353] netlink: 'syz.0.975': attribute type 6 has an invalid length. [ 188.716686][ T9353] netlink: 'syz.0.975': attribute type 7 has an invalid length. [ 188.724743][ T9353] netlink: 'syz.0.975': attribute type 8 has an invalid length. [ 188.752925][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 188.966686][ T9359] netpci0: tun_chr_ioctl cmd 1074025678 [ 188.983092][ T9359] netpci0: group set to 0 [ 188.988298][ T9364] tap0: tun_chr_ioctl cmd 1074025677 [ 188.993969][ T9364] tap0: linktype set to 6 [ 189.094036][ T9373] netlink: 840 bytes leftover after parsing attributes in process `syz.1.980'. [ 189.117037][ T9375] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 189.260407][ T9375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.573186][ T9396] block nbd2: Unsupported socket: should be TCP or UNIX. [ 190.047116][ T9422] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1003'. [ 190.255676][ T9419] syzkaller0: entered promiscuous mode [ 190.278401][ T9419] syzkaller0: entered allmulticast mode [ 190.369589][ T9428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1005'. [ 190.673861][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 191.906211][ T9422] gretap0: entered promiscuous mode [ 192.001969][ T9451] FAULT_INJECTION: forcing a failure. [ 192.001969][ T9451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.025161][ T9451] CPU: 0 UID: 0 PID: 9451 Comm: syz.0.1011 Not tainted syzkaller #0 PREEMPT(full) [ 192.025185][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.025196][ T9451] Call Trace: [ 192.025204][ T9451] [ 192.025211][ T9451] dump_stack_lvl+0xe8/0x150 [ 192.025244][ T9451] should_fail_ex+0x412/0x560 [ 192.025273][ T9451] _copy_to_user+0x31/0xb0 [ 192.025303][ T9451] bpf_test_finish+0x22c/0x6b0 [ 192.025329][ T9451] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 192.025353][ T9451] ? __pfx_bpf_test_finish+0x10/0x10 [ 192.025379][ T9451] ? _copy_from_user+0x94/0xb0 [ 192.025405][ T9451] ? bpf_test_init+0x113/0x150 [ 192.025427][ T9451] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 192.025464][ T9451] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 192.025489][ T9451] ? __fget_files+0x2a/0x420 [ 192.025517][ T9451] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 192.025540][ T9451] bpf_prog_test_run+0x2c7/0x340 [ 192.025562][ T9451] __sys_bpf+0x643/0x950 [ 192.025590][ T9451] ? __pfx___sys_bpf+0x10/0x10 [ 192.025632][ T9451] ? ksys_write+0x242/0x270 [ 192.025659][ T9451] ? __pfx_ksys_write+0x10/0x10 [ 192.025688][ T9451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.025708][ T9451] __x64_sys_bpf+0x7c/0x90 [ 192.025733][ T9451] do_syscall_64+0x15f/0xf80 [ 192.025751][ T9451] ? trace_irq_disable+0x3b/0x140 [ 192.025776][ T9451] ? clear_bhb_loop+0x40/0x90 [ 192.025799][ T9451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.025816][ T9451] RIP: 0033:0x7f03d6b9ce59 [ 192.025833][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.025847][ T9451] RSP: 002b:00007f03d7ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.025866][ T9451] RAX: ffffffffffffffda RBX: 00007f03d6e15fa0 RCX: 00007f03d6b9ce59 [ 192.025879][ T9451] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 192.025890][ T9451] RBP: 00007f03d7ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 192.025901][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.025912][ T9451] R13: 00007f03d6e16038 R14: 00007f03d6e15fa0 R15: 00007ffed623e078 [ 192.025941][ T9451] [ 192.561698][ T9456] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1013'. [ 192.630445][ T9466] FAULT_INJECTION: forcing a failure. [ 192.630445][ T9466] name failslab, interval 1, probability 0, space 0, times 0 [ 192.649392][ T9466] CPU: 1 UID: 0 PID: 9466 Comm: syz.2.1015 Not tainted syzkaller #0 PREEMPT(full) [ 192.649418][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.649430][ T9466] Call Trace: [ 192.649437][ T9466] [ 192.649445][ T9466] dump_stack_lvl+0xe8/0x150 [ 192.649471][ T9466] should_fail_ex+0x412/0x560 [ 192.649498][ T9466] should_failslab+0xa8/0x100 [ 192.649527][ T9466] __kmalloc_noprof+0xe8/0x760 [ 192.649552][ T9466] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.649585][ T9466] tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.649613][ T9466] ? tomoyo_domain+0xd7/0x130 [ 192.649643][ T9466] ? tomoyo_path_number_perm+0x219/0x630 [ 192.649665][ T9466] tomoyo_path_number_perm+0x246/0x630 [ 192.649689][ T9466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.649710][ T9466] ? __lock_acquire+0x6b5/0x2cf0 [ 192.649734][ T9466] ? taprio_dequeue+0x26/0x540 [ 192.649754][ T9466] ? taprio_dequeue+0x26/0x540 [ 192.649802][ T9466] ? __fget_files+0x2a/0x420 [ 192.649828][ T9466] ? __fget_files+0x2a/0x420 [ 192.649848][ T9466] ? __fget_files+0x3a0/0x420 [ 192.649868][ T9466] ? __fget_files+0x2a/0x420 [ 192.649893][ T9466] security_file_ioctl+0xc3/0x2a0 [ 192.649924][ T9466] __se_sys_ioctl+0x47/0x170 [ 192.649950][ T9466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.649971][ T9466] do_syscall_64+0x15f/0xf80 [ 192.649991][ T9466] ? clear_bhb_loop+0x40/0x90 [ 192.650014][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.650032][ T9466] RIP: 0033:0x7f83c139ce59 [ 192.650050][ T9466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.650065][ T9466] RSP: 002b:00007f83c2320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.650085][ T9466] RAX: ffffffffffffffda RBX: 00007f83c1615fa0 RCX: 00007f83c139ce59 [ 192.650097][ T9466] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 192.650109][ T9466] RBP: 00007f83c2320090 R08: 0000000000000000 R09: 0000000000000000 [ 192.650119][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.650130][ T9466] R13: 00007f83c1616038 R14: 00007f83c1615fa0 R15: 00007ffe23cdbf38 [ 192.650160][ T9466] [ 192.650370][ T9466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.742489][ T9475] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 193.305069][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1020'. [ 193.332647][ T9487] syzkaller0: entered promiscuous mode [ 193.353789][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1020'. [ 193.366910][ T9487] syzkaller0: entered allmulticast mode [ 193.399725][ T9498] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 194.130349][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.142080][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.916677][ T9507] team0 (unregistering): Port device team_slave_1 removed [ 194.925183][ T9507] team0 (unregistering): Port device netdevsim1 removed [ 194.935367][ T9508] syzkaller0: entered promiscuous mode [ 194.940820][ T9508] syzkaller0: entered allmulticast mode [ 195.065474][ T9517] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1027'. [ 195.117953][ T9519] FAULT_INJECTION: forcing a failure. [ 195.117953][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 195.130571][ T9519] CPU: 1 UID: 0 PID: 9519 Comm: syz.4.1030 Not tainted syzkaller #0 PREEMPT(full) [ 195.130593][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.130604][ T9519] Call Trace: [ 195.130611][ T9519] [ 195.130619][ T9519] dump_stack_lvl+0xe8/0x150 [ 195.130646][ T9519] should_fail_ex+0x412/0x560 [ 195.130675][ T9519] should_failslab+0xa8/0x100 [ 195.130705][ T9519] __kmalloc_cache_noprof+0x88/0x660 [ 195.130732][ T9519] ? __hw_addr_create+0x60/0x250 [ 195.130757][ T9519] __hw_addr_create+0x60/0x250 [ 195.130776][ T9519] ? stack_depot_init+0x36/0x1a0 [ 195.130802][ T9519] __hw_addr_add_ex+0x1c2/0x520 [ 195.130830][ T9519] dev_addr_init+0x15e/0x240 [ 195.130855][ T9519] ? __pfx_dev_addr_init+0x10/0x10 [ 195.130879][ T9519] ? alloc_netdev_mqs+0xa8/0x1210 [ 195.130910][ T9519] alloc_netdev_mqs+0x2b3/0x1210 [ 195.130937][ T9519] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 195.130962][ T9519] rtnl_create_link+0x31f/0xd70 [ 195.130993][ T9519] rtnl_newlink_create+0x277/0xb70 [ 195.131013][ T9519] ? __pfx___nla_validate_parse+0x10/0x10 [ 195.131050][ T9519] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 195.131074][ T9519] ? __pfx___mutex_lock+0x10/0x10 [ 195.131105][ T9519] ? ns_capable+0x89/0xe0 [ 195.131126][ T9519] rtnl_newlink+0x166a/0x1bb0 [ 195.131160][ T9519] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.131192][ T9519] ? __lock_acquire+0x6b5/0x2cf0 [ 195.131216][ T9519] ? __lock_acquire+0x6b5/0x2cf0 [ 195.131246][ T9519] ? unwind_next_frame+0xa6/0x2550 [ 195.131275][ T9519] ? unwind_next_frame+0xa6/0x2550 [ 195.131300][ T9519] ? is_bpf_text_address+0x26/0x2b0 [ 195.131330][ T9519] ? is_bpf_text_address+0x26/0x2b0 [ 195.131355][ T9519] ? __lock_acquire+0x6b5/0x2cf0 [ 195.131378][ T9519] ? kernel_text_address+0xa5/0xe0 [ 195.131402][ T9519] ? __kernel_text_address+0xd/0x30 [ 195.131425][ T9519] ? unwind_get_return_address+0x4d/0x90 [ 195.131446][ T9519] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 195.131473][ T9519] ? arch_stack_walk+0xfb/0x150 [ 195.131508][ T9519] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 195.131551][ T9519] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.131577][ T9519] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 195.131603][ T9519] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 195.131627][ T9519] ? netlink_sendmsg+0x5d4/0xb40 [ 195.131649][ T9519] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 195.131675][ T9519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.131703][ T9519] ? __lock_acquire+0x6b5/0x2cf0 [ 195.131738][ T9519] netlink_rcv_skb+0x232/0x4b0 [ 195.131759][ T9519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.131789][ T9519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.131823][ T9519] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.131844][ T9519] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.131871][ T9519] netlink_unicast+0x75c/0x8e0 [ 195.131902][ T9519] netlink_sendmsg+0x813/0xb40 [ 195.131939][ T9519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.131963][ T9519] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.131990][ T9519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.132018][ T9519] ____sys_sendmsg+0x972/0x9f0 [ 195.132039][ T9519] ? __might_fault+0xaf/0x130 [ 195.132069][ T9519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.132099][ T9519] ? import_iovec+0x73/0xa0 [ 195.132130][ T9519] ___sys_sendmsg+0x2a5/0x360 [ 195.132148][ T9519] ? __lock_acquire+0x6b5/0x2cf0 [ 195.132173][ T9519] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.132232][ T9519] ? __fget_files+0x2a/0x420 [ 195.132253][ T9519] ? __fget_files+0x3a0/0x420 [ 195.132287][ T9519] __x64_sys_sendmsg+0x1bd/0x2a0 [ 195.132310][ T9519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.132342][ T9519] ? __pfx_ksys_write+0x10/0x10 [ 195.132376][ T9519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.132397][ T9519] do_syscall_64+0x15f/0xf80 [ 195.132414][ T9519] ? trace_irq_disable+0x3b/0x140 [ 195.132440][ T9519] ? clear_bhb_loop+0x40/0x90 [ 195.132465][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.132483][ T9519] RIP: 0033:0x7f70b479ce59 [ 195.132500][ T9519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.132517][ T9519] RSP: 002b:00007f70b5632028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.132537][ T9519] RAX: ffffffffffffffda RBX: 00007f70b4a15fa0 RCX: 00007f70b479ce59 [ 195.132551][ T9519] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 195.132562][ T9519] RBP: 00007f70b5632090 R08: 0000000000000000 R09: 0000000000000000 [ 195.132574][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.132584][ T9519] R13: 00007f70b4a16038 R14: 00007f70b4a15fa0 R15: 00007ffdb8eb4b28 [ 195.132617][ T9519] [ 195.781629][ T9534] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.931855][ T9538] wg1 speed is unknown, defaulting to 1000 [ 195.947509][ T9544] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 195.999916][ T9544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.015004][ T9544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1034'. [ 196.024636][ T9544] bond3: entered allmulticast mode [ 196.032085][ T9544] batman_adv: batadv0: Interface deactivated: dummy0 [ 196.039672][ T9544] batman_adv: batadv0: Removing interface: dummy0 [ 196.066317][ T9544] bond3: (slave dummy0): making interface the new active one [ 196.082853][ T9544] dummy0: entered allmulticast mode [ 196.089256][ T9544] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 196.303687][ T9554] FAULT_INJECTION: forcing a failure. [ 196.303687][ T9554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.317129][ T9554] CPU: 1 UID: 0 PID: 9554 Comm: syz.3.1037 Not tainted syzkaller #0 PREEMPT(full) [ 196.317151][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.317163][ T9554] Call Trace: [ 196.317171][ T9554] [ 196.317177][ T9554] dump_stack_lvl+0xe8/0x150 [ 196.317204][ T9554] should_fail_ex+0x412/0x560 [ 196.317234][ T9554] prepare_alloc_pages+0x22a/0x650 [ 196.317268][ T9554] __alloc_frozen_pages_noprof+0x12f/0x380 [ 196.317299][ T9554] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 196.317329][ T9554] ? __pfx_policy_nodemask+0x10/0x10 [ 196.317360][ T9554] ? __lock_acquire+0x6b5/0x2cf0 [ 196.317384][ T9554] alloc_pages_mpol+0x235/0x490 [ 196.317415][ T9554] folio_alloc_mpol_noprof+0x39/0x160 [ 196.317444][ T9554] vma_alloc_folio_noprof+0xe1/0x1e0 [ 196.317466][ T9554] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 196.317484][ T9554] ? __pte_offset_map+0x29/0x240 [ 196.317508][ T9554] ? __pte_offset_map+0x29/0x240 [ 196.317533][ T9554] do_pte_missing+0x159d/0x33f0 [ 196.317571][ T9554] ? handle_mm_fault+0xee/0x3170 [ 196.317598][ T9554] handle_mm_fault+0x1bd9/0x3170 [ 196.317636][ T9554] ? handle_mm_fault+0xee/0x3170 [ 196.317666][ T9554] ? __pfx_handle_mm_fault+0x10/0x10 [ 196.317689][ T9554] ? follow_page_pte+0x6b5/0xe50 [ 196.317721][ T9554] ? __pfx_follow_page_pte+0x10/0x10 [ 196.317755][ T9554] __get_user_pages+0x1683/0x2720 [ 196.317816][ T9554] __gup_longterm_locked+0xdcf/0x1630 [ 196.317844][ T9554] ? lock_acquire+0x106/0x350 [ 196.317869][ T9554] ? sanity_check_pinned_pages+0x7a8/0x870 [ 196.317899][ T9554] gup_fast_fallback+0x1d84/0x20d0 [ 196.317954][ T9554] ? __pfx_gup_fast_fallback+0x10/0x10 [ 196.317984][ T9554] ? pin_user_pages_fast+0x4d/0xb0 [ 196.318008][ T9554] iov_iter_extract_pages+0x37b/0x5f0 [ 196.318045][ T9554] extract_iter_to_sg+0xefb/0x25d0 [ 196.318086][ T9554] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 196.318123][ T9554] ? rcu_is_watching+0x15/0xb0 [ 196.318149][ T9554] ? __asan_memset+0x22/0x50 [ 196.318174][ T9554] af_alg_get_rsgl+0x4b6/0x8e0 [ 196.318218][ T9554] skcipher_recvmsg+0x392/0x1140 [ 196.318263][ T9554] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 196.318287][ T9554] ? __lock_acquire+0x6b5/0x2cf0 [ 196.318307][ T9554] ? aa_sock_msg_perm+0xf1/0x1b0 [ 196.318333][ T9554] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 196.318357][ T9554] ? security_socket_recvmsg+0x7e/0x2c0 [ 196.318376][ T9554] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 196.318402][ T9554] sock_recvmsg+0x172/0x1b0 [ 196.318430][ T9554] ____sys_recvmsg+0x1e6/0x4a0 [ 196.318460][ T9554] ? __pfx_____sys_recvmsg+0x10/0x10 [ 196.318496][ T9554] ? import_iovec+0x73/0xa0 [ 196.318526][ T9554] ___sys_recvmsg+0x215/0x590 [ 196.318545][ T9554] ? get_pid_task+0x20/0x1f0 [ 196.318573][ T9554] ? __pfx____sys_recvmsg+0x10/0x10 [ 196.318599][ T9554] ? __fget_files+0x2a/0x420 [ 196.318641][ T9554] ? __fget_files+0x3a0/0x420 [ 196.318674][ T9554] __x64_sys_recvmsg+0x1ba/0x2a0 [ 196.318698][ T9554] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 196.318729][ T9554] ? __pfx_ksys_write+0x10/0x10 [ 196.318764][ T9554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.318785][ T9554] do_syscall_64+0x15f/0xf80 [ 196.318808][ T9554] ? trace_irq_disable+0x3b/0x140 [ 196.318834][ T9554] ? clear_bhb_loop+0x40/0x90 [ 196.318857][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.318875][ T9554] RIP: 0033:0x7fad6c59ce59 [ 196.318893][ T9554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.318908][ T9554] RSP: 002b:00007fad6d3fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 196.318927][ T9554] RAX: ffffffffffffffda RBX: 00007fad6c815fa0 RCX: 00007fad6c59ce59 [ 196.318940][ T9554] RDX: 0000000000000000 RSI: 000020000000b680 RDI: 0000000000000007 [ 196.318952][ T9554] RBP: 00007fad6d3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 196.318962][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.318973][ T9554] R13: 00007fad6c816038 R14: 00007fad6c815fa0 R15: 00007ffe3b3ec1d8 [ 196.319004][ T9554] [ 196.890100][ T9557] syzkaller0: entered promiscuous mode [ 196.895595][ T9557] syzkaller0: entered allmulticast mode [ 198.502530][ T9576] syzkaller0: entered promiscuous mode [ 198.528429][ T9576] syzkaller0: entered allmulticast mode [ 198.968153][ T9605] netlink: 'syz.1.1048': attribute type 6 has an invalid length. [ 199.003678][ T9605] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1048'. [ 199.161082][ T42] IPVS: starting estimator thread 0... [ 199.166392][ T9610] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.285856][ T9614] IPVS: using max 33 ests per chain, 79200 per kthread [ 199.505427][ T9590] syzkaller0: entered promiscuous mode [ 199.569593][ T9590] syzkaller0: entered allmulticast mode [ 199.781467][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 200.378799][ T9647] syzkaller0: entered promiscuous mode [ 200.384770][ T9647] syzkaller0: entered allmulticast mode [ 200.487103][ T9652] netlink: 'syz.4.1056': attribute type 13 has an invalid length. [ 201.071485][ T9675] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1061'. [ 201.135188][ T9680] ip6tnl0: Caught tx_queue_len zero misconfig [ 201.194943][ T9681] lo: Caught tx_queue_len zero misconfig [ 201.327547][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 201.331695][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 201.334352][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 201.727483][ T9697] tipc: Enabling of bearer rejected, failed to enable media [ 202.042551][ T9708] xt_CONNSECMARK: invalid mode: 0 [ 202.473850][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 202.700860][ T9739] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1081'. [ 202.748032][ T9739] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1081'. [ 202.771369][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 202.863804][ T9742] syz_tun: entered allmulticast mode [ 202.893241][ T9742] pimreg: entered allmulticast mode [ 202.911163][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 202.921754][ T9741] syz_tun: left allmulticast mode [ 203.048870][ T9752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1089'. [ 203.075931][ T9745] 8021q: adding VLAN 0 to HW filter on device bond10 [ 203.170298][ T9748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.190043][ T9748] bond10: (slave macvlan2): Enslaving as a backup interface with a down link [ 203.381853][ T9762] FAULT_INJECTION: forcing a failure. [ 203.381853][ T9762] name failslab, interval 1, probability 0, space 0, times 0 [ 203.451196][ T9762] CPU: 1 UID: 0 PID: 9762 Comm: syz.4.1094 Not tainted syzkaller #0 PREEMPT(full) [ 203.451221][ T9762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.451232][ T9762] Call Trace: [ 203.451240][ T9762] [ 203.451247][ T9762] dump_stack_lvl+0xe8/0x150 [ 203.451274][ T9762] should_fail_ex+0x412/0x560 [ 203.451304][ T9762] should_failslab+0xa8/0x100 [ 203.451333][ T9762] __kmalloc_cache_noprof+0x88/0x660 [ 203.451360][ T9762] ? sctp_add_bind_addr+0x8c/0x370 [ 203.451392][ T9762] sctp_add_bind_addr+0x8c/0x370 [ 203.451421][ T9762] sctp_copy_local_addr_list+0x314/0x4f0 [ 203.451451][ T9762] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 203.451477][ T9762] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 203.451501][ T9762] ? sctp_association_new+0x1894/0x25e0 [ 203.451524][ T9762] ? sctp_v6_is_any+0x64/0x80 [ 203.451552][ T9762] ? sctp_copy_one_addr+0x93/0x360 [ 203.451581][ T9762] sctp_bind_addr_copy+0xb3/0x3c0 [ 203.451607][ T9762] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 203.451635][ T9762] sctp_connect_new_asoc+0x2ff/0x6b0 [ 203.451658][ T9762] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.451686][ T9762] ? __local_bh_enable_ip+0xd0/0x130 [ 203.451704][ T9762] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 203.451730][ T9762] ? security_sctp_bind_connect+0x7e/0x2c0 [ 203.451753][ T9762] sctp_sendmsg+0x1576/0x2c50 [ 203.451786][ T9762] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.451808][ T9762] ? aa_sk_perm+0x6d5/0x900 [ 203.451828][ T9762] ? __might_fault+0xaf/0x130 [ 203.451857][ T9762] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.451883][ T9762] ? sock_rps_record_flow+0x19/0x350 [ 203.451908][ T9762] ? __pfx_inet_sendmsg+0x10/0x10 [ 203.451934][ T9762] ? inet_sendmsg+0x2f4/0x370 [ 203.451960][ T9762] ? __pfx_inet_sendmsg+0x10/0x10 [ 203.451986][ T9762] __sys_sendto+0x5de/0x710 [ 203.452006][ T9762] ? __pfx___sys_sendto+0x10/0x10 [ 203.452022][ T9762] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 203.452056][ T9762] ? __fget_files+0x3a0/0x420 [ 203.452095][ T9762] ? ksys_write+0x242/0x270 [ 203.452123][ T9762] ? __pfx_ksys_write+0x10/0x10 [ 203.452154][ T9762] __x64_sys_sendto+0xde/0x100 [ 203.452173][ T9762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.452193][ T9762] do_syscall_64+0x15f/0xf80 [ 203.452211][ T9762] ? trace_irq_disable+0x3b/0x140 [ 203.452238][ T9762] ? clear_bhb_loop+0x40/0x90 [ 203.452261][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.452279][ T9762] RIP: 0033:0x7f70b479ce59 [ 203.452296][ T9762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.452312][ T9762] RSP: 002b:00007f70b5632028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 203.452332][ T9762] RAX: ffffffffffffffda RBX: 00007f70b4a15fa0 RCX: 00007f70b479ce59 [ 203.452346][ T9762] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 203.452358][ T9762] RBP: 00007f70b5632090 R08: 0000200000000140 R09: 000000000000001c [ 203.452370][ T9762] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 203.452382][ T9762] R13: 00007f70b4a16038 R14: 00007f70b4a15fa0 R15: 00007ffdb8eb4b28 [ 203.452413][ T9762] [ 203.506064][ T9770] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1097'. [ 203.789774][ T9773] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 203.837554][ T9770] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1097'. [ 203.847431][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 203.879809][ T9770] team0: Port device team_slave_0 removed [ 204.560752][ T9787] bond7: option miimon: invalid value (18446744073709551607) [ 204.581785][ T9787] bond7: option miimon: allowed values 0 - 2147483647 [ 204.596548][ T9787] bond7 (unregistering): Released all slaves [ 204.939702][ T9806] xt_hashlimit: size too large, truncated to 1048576 [ 205.056593][ T9812] batadv1: entered allmulticast mode [ 205.077447][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 205.486430][ T9826] netlink: 'syz.1.1112': attribute type 10 has an invalid length. [ 206.068321][ T9851] xt_hashlimit: size too large, truncated to 1048576 [ 206.185585][ T9859] syzkaller0: entered promiscuous mode [ 206.219735][ T9859] syzkaller0: entered allmulticast mode [ 206.290823][ T9859] tipc: Enabled bearer , priority 0 [ 206.326971][ T9865] IPVS: set_ctl: invalid protocol: 135 172.20.20.16:20004 [ 206.465577][ T9868] tipc: Enabled bearer , priority 0 [ 206.487337][ T9870] __nla_validate_parse: 7 callbacks suppressed [ 206.487351][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 206.487862][ T9868] syzkaller0: entered promiscuous mode [ 206.496373][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 206.522011][ T9868] syzkaller0: entered allmulticast mode [ 206.545545][ T9867] wg1 speed is unknown, defaulting to 1000 [ 206.547445][ T9868] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 206.627195][ T9849] tipc: Resetting bearer [ 206.678228][ T9849] tipc: Disabling bearer [ 206.717076][ T9866] tipc: Resetting bearer [ 206.789730][ T9866] tipc: Disabling bearer [ 207.098524][ T9888] netlink: 'syz.1.1133': attribute type 21 has an invalid length. [ 207.118540][ T9888] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.137222][ T9888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.145759][ T9888] IPv6: NLM_F_CREATE should be set when creating new route [ 207.153087][ T9888] IPv6: NLM_F_CREATE should be set when creating new route [ 207.160345][ T9888] IPv6: NLM_F_CREATE should be set when creating new route [ 207.532238][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 207.634416][ T9905] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1140'. [ 207.679392][ T9909] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 207.835100][ T9915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1143'. [ 207.846251][ T9915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1143'. [ 207.956776][ T9922] syzkaller0: entered promiscuous mode [ 207.962267][ T9922] syzkaller0: entered allmulticast mode [ 207.998793][ T9922] FAULT_INJECTION: forcing a failure. [ 207.998793][ T9922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.011838][ T9922] CPU: 1 UID: 0 PID: 9922 Comm: syz.4.1146 Not tainted syzkaller #0 PREEMPT(full) [ 208.011859][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.011871][ T9922] Call Trace: [ 208.011878][ T9922] [ 208.011885][ T9922] dump_stack_lvl+0xe8/0x150 [ 208.011911][ T9922] should_fail_ex+0x412/0x560 [ 208.011941][ T9922] _copy_from_iter+0x4ff/0x1670 [ 208.011978][ T9922] ? __pfx__copy_from_iter+0x10/0x10 [ 208.012012][ T9922] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 208.012039][ T9922] skb_copy_datagram_from_iter+0xf5/0x710 [ 208.012064][ T9922] ? dev_get_by_index+0x22/0x2e0 [ 208.012086][ T9922] ? skb_put+0x11b/0x210 [ 208.012108][ T9922] packet_sendmsg+0x35b1/0x4fb0 [ 208.012155][ T9922] ? unwind_next_frame+0xa6/0x2550 [ 208.012198][ T9922] ? __pfx_packet_sendmsg+0x10/0x10 [ 208.012217][ T9922] ? aa_sk_perm+0x6d5/0x900 [ 208.012248][ T9922] ? __pfx_aa_sk_perm+0x10/0x10 [ 208.012268][ T9922] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 208.012301][ T9922] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.012327][ T9922] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.012356][ T9922] ____sys_sendmsg+0x972/0x9f0 [ 208.012399][ T9922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.012428][ T9922] ? import_iovec+0x73/0xa0 [ 208.012457][ T9922] ___sys_sendmsg+0x2a5/0x360 [ 208.012476][ T9922] ? __lock_acquire+0x6b5/0x2cf0 [ 208.012501][ T9922] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.012555][ T9922] ? __fget_files+0x2a/0x420 [ 208.012576][ T9922] ? __fget_files+0x3a0/0x420 [ 208.012606][ T9922] __x64_sys_sendmsg+0x1bd/0x2a0 [ 208.012635][ T9922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.012664][ T9922] ? __pfx_ksys_write+0x10/0x10 [ 208.012698][ T9922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.012719][ T9922] do_syscall_64+0x15f/0xf80 [ 208.012737][ T9922] ? trace_irq_disable+0x3b/0x140 [ 208.012764][ T9922] ? clear_bhb_loop+0x40/0x90 [ 208.012787][ T9922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.012805][ T9922] RIP: 0033:0x7f70b479ce59 [ 208.012823][ T9922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.012840][ T9922] RSP: 002b:00007f70b5632028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.012859][ T9922] RAX: ffffffffffffffda RBX: 00007f70b4a15fa0 RCX: 00007f70b479ce59 [ 208.012873][ T9922] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 208.012885][ T9922] RBP: 00007f70b5632090 R08: 0000000000000000 R09: 0000000000000000 [ 208.012897][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.012908][ T9922] R13: 00007f70b4a16038 R14: 00007f70b4a15fa0 R15: 00007ffdb8eb4b28 [ 208.012939][ T9922] [ 208.527705][ T9932] FAULT_INJECTION: forcing a failure. [ 208.527705][ T9932] name failslab, interval 1, probability 0, space 0, times 0 [ 208.540402][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.1.1150 Not tainted syzkaller #0 PREEMPT(full) [ 208.540424][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.540435][ T9932] Call Trace: [ 208.540442][ T9932] [ 208.540450][ T9932] dump_stack_lvl+0xe8/0x150 [ 208.540477][ T9932] should_fail_ex+0x412/0x560 [ 208.540507][ T9932] should_failslab+0xa8/0x100 [ 208.540535][ T9932] ? skb_clone+0x212/0x3a0 [ 208.540556][ T9932] kmem_cache_alloc_noprof+0x87/0x650 [ 208.540581][ T9932] ? __bpf_redirect+0xcb4/0x12a0 [ 208.540611][ T9932] skb_clone+0x212/0x3a0 [ 208.540635][ T9932] bpf_clone_redirect+0x16a/0x4b0 [ 208.540669][ T9932] ? bpf_test_run+0x1d1/0x830 [ 208.540690][ T9932] bpf_prog_1939c40fbf65037b+0x5f/0x68 [ 208.540712][ T9932] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 208.540740][ T9932] ? arch_stack_walk+0xfb/0x150 [ 208.540772][ T9932] ? ktime_get+0x45/0x220 [ 208.540805][ T9932] ? ktime_get+0x45/0x220 [ 208.540833][ T9932] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 208.540860][ T9932] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.540878][ T9932] ? ktime_get+0x45/0x220 [ 208.540901][ T9932] ? seqcount_lockdep_reader_access+0xea/0x100 [ 208.540928][ T9932] ? bpf_test_run+0x1d1/0x830 [ 208.540951][ T9932] ? bpf_test_timer_continue+0x10c/0x320 [ 208.540976][ T9932] bpf_test_run+0x354/0x830 [ 208.541017][ T9932] ? __pfx_bpf_test_run+0x10/0x10 [ 208.541056][ T9932] ? eth_type_trans+0x348/0x7e0 [ 208.541083][ T9932] ? skb_dst_set+0x72/0x140 [ 208.541105][ T9932] bpf_prog_test_run_skb+0xe2c/0x2260 [ 208.541147][ T9932] ? __fget_files+0x3a0/0x420 [ 208.541168][ T9932] ? __fget_files+0x2a/0x420 [ 208.541194][ T9932] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 208.541215][ T9932] bpf_prog_test_run+0x2c7/0x340 [ 208.541238][ T9932] __sys_bpf+0x643/0x950 [ 208.541267][ T9932] ? __pfx___sys_bpf+0x10/0x10 [ 208.541309][ T9932] ? ksys_write+0x242/0x270 [ 208.541342][ T9932] ? __pfx_ksys_write+0x10/0x10 [ 208.541372][ T9932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.541393][ T9932] __x64_sys_bpf+0x7c/0x90 [ 208.541418][ T9932] do_syscall_64+0x15f/0xf80 [ 208.541436][ T9932] ? trace_irq_disable+0x3b/0x140 [ 208.541463][ T9932] ? clear_bhb_loop+0x40/0x90 [ 208.541485][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.541504][ T9932] RIP: 0033:0x7fb35139ce59 [ 208.541520][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.541536][ T9932] RSP: 002b:00007fb35222d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.541554][ T9932] RAX: ffffffffffffffda RBX: 00007fb351615fa0 RCX: 00007fb35139ce59 [ 208.541568][ T9932] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 208.541580][ T9932] RBP: 00007fb35222d090 R08: 0000000000000000 R09: 0000000000000000 [ 208.541591][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.541602][ T9932] R13: 00007fb351616038 R14: 00007fb351615fa0 R15: 00007ffe250e2108 [ 208.541633][ T9932] [ 208.871826][ T9936] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 209.508154][ T9956] FAULT_INJECTION: forcing a failure. [ 209.508154][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 209.548993][ T9960] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.586760][ T9956] CPU: 1 UID: 0 PID: 9956 Comm: syz.1.1163 Not tainted syzkaller #0 PREEMPT(full) [ 209.586784][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.586796][ T9956] Call Trace: [ 209.586804][ T9956] [ 209.586811][ T9956] dump_stack_lvl+0xe8/0x150 [ 209.586839][ T9956] should_fail_ex+0x412/0x560 [ 209.586868][ T9956] should_failslab+0xa8/0x100 [ 209.586898][ T9956] __kmalloc_noprof+0xe8/0x760 [ 209.586920][ T9956] ? __kasan_kmalloc+0x93/0xb0 [ 209.586946][ T9956] ? nla_strdup+0x9d/0x140 [ 209.586971][ T9956] ? __kmalloc_cache_noprof+0x31c/0x660 [ 209.586999][ T9956] nla_strdup+0x9d/0x140 [ 209.587028][ T9956] nf_tables_newchain+0x1a9a/0x2890 [ 209.587068][ T9956] ? __pfx_nf_tables_newchain+0x10/0x10 [ 209.587116][ T9956] ? nft_trans_table_add+0x230/0x430 [ 209.587145][ T9956] ? nfnl_pernet+0x23/0x240 [ 209.587164][ T9956] ? nfnl_pernet+0x23/0x240 [ 209.587192][ T9956] ? __nla_parse+0x40/0x60 [ 209.587231][ T9956] nfnetlink_rcv+0x123e/0x27b0 [ 209.587285][ T9956] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.587321][ T9956] ? ref_tracker_free+0x693/0x840 [ 209.587375][ T9956] ? __netlink_deliver_tap+0x807/0x850 [ 209.587406][ T9956] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.587426][ T9956] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.587452][ T9956] netlink_unicast+0x75c/0x8e0 [ 209.587481][ T9956] netlink_sendmsg+0x813/0xb40 [ 209.587512][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.587536][ T9956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.587563][ T9956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.587591][ T9956] ____sys_sendmsg+0x972/0x9f0 [ 209.587611][ T9956] ? __might_fault+0xaf/0x130 [ 209.587641][ T9956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.587671][ T9956] ? import_iovec+0x73/0xa0 [ 209.587700][ T9956] ___sys_sendmsg+0x2a5/0x360 [ 209.587719][ T9956] ? __lock_acquire+0x6b5/0x2cf0 [ 209.587744][ T9956] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.587800][ T9956] ? __fget_files+0x2a/0x420 [ 209.587821][ T9956] ? __fget_files+0x3a0/0x420 [ 209.587854][ T9956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 209.587877][ T9956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.587908][ T9956] ? __pfx_ksys_write+0x10/0x10 [ 209.587942][ T9956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.587964][ T9956] do_syscall_64+0x15f/0xf80 [ 209.587980][ T9956] ? trace_irq_disable+0x3b/0x140 [ 209.588007][ T9956] ? clear_bhb_loop+0x40/0x90 [ 209.588030][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.588049][ T9956] RIP: 0033:0x7fb35139ce59 [ 209.588066][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.588081][ T9956] RSP: 002b:00007fb35222d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.588101][ T9956] RAX: ffffffffffffffda RBX: 00007fb351615fa0 RCX: 00007fb35139ce59 [ 209.588114][ T9956] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 209.588126][ T9956] RBP: 00007fb35222d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.588136][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.588146][ T9956] R13: 00007fb351616038 R14: 00007fb351615fa0 R15: 00007ffe250e2108 [ 209.588175][ T9956] [ 209.950083][ T9964] netlink: 'syz.4.1164': attribute type 3 has an invalid length. [ 209.991221][ T9958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.070140][ T9958] x_tables: duplicate underflow at hook 3 [ 210.123614][ T9970] xt_hashlimit: max too large, truncated to 1048576 [ 210.255586][ T9978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1169'. [ 210.607778][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1174'. [ 210.668839][T10001] xt_CONNSECMARK: invalid mode: 0 [ 210.825488][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 210.956348][T10016] x_tables: unsorted entry at hook 3 [ 211.035840][T10019] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1182'. [ 211.400507][T10031] FAULT_INJECTION: forcing a failure. [ 211.400507][T10031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.434294][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.3.1185 Not tainted syzkaller #0 PREEMPT(full) [ 211.434318][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.434329][T10031] Call Trace: [ 211.434336][T10031] [ 211.434343][T10031] dump_stack_lvl+0xe8/0x150 [ 211.434370][T10031] should_fail_ex+0x412/0x560 [ 211.434400][T10031] _copy_from_user+0x2d/0xb0 [ 211.434428][T10031] ___sys_sendmsg+0x1c6/0x360 [ 211.434448][T10031] ? __lock_acquire+0x6b5/0x2cf0 [ 211.434472][T10031] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.434527][T10031] ? __fget_files+0x2a/0x420 [ 211.434548][T10031] ? __fget_files+0x3a0/0x420 [ 211.434580][T10031] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.434601][T10031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.434630][T10031] ? __pfx_ksys_write+0x10/0x10 [ 211.434664][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.434683][T10031] do_syscall_64+0x15f/0xf80 [ 211.434703][T10031] ? clear_bhb_loop+0x40/0x90 [ 211.434726][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.434745][T10031] RIP: 0033:0x7fad6c59ce59 [ 211.434761][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.434778][T10031] RSP: 002b:00007fad6d3da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.434797][T10031] RAX: ffffffffffffffda RBX: 00007fad6c816090 RCX: 00007fad6c59ce59 [ 211.434811][T10031] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000c [ 211.434822][T10031] RBP: 00007fad6d3da090 R08: 0000000000000000 R09: 0000000000000000 [ 211.434833][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.434844][T10031] R13: 00007fad6c816128 R14: 00007fad6c816090 R15: 00007ffe3b3ec1d8 [ 211.434875][T10031] [ 212.278787][T10045] syzkaller1: entered promiscuous mode [ 212.284289][T10045] syzkaller1: entered allmulticast mode [ 212.441942][T10045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.511058][T10039] policy can only be matched on NF_INET_PRE_ROUTING [ 212.511077][T10039] unable to load match [ 212.639208][T10058] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 212.744274][T10058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.803631][T10058] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1192'. [ 213.427815][T10074] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1197'. [ 213.588552][T10084] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.626905][T10087] netlink: zone id is out of range [ 213.647878][T10087] netlink: zone id is out of range [ 213.665062][T10087] netlink: zone id is out of range [ 213.680889][T10087] netlink: zone id is out of range [ 213.715388][T10087] netlink: zone id is out of range [ 213.741095][T10089] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 213.763824][T10087] netlink: zone id is out of range [ 213.783390][T10087] netlink: zone id is out of range [ 213.800750][T10087] netlink: zone id is out of range [ 214.440898][T10103] xt_TCPMSS: Only works on TCP SYN packets [ 214.843995][T10121] netlink: 'syz.0.1203': attribute type 24 has an invalid length. [ 214.890319][T10126] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 215.061564][T10126] 8021q: adding VLAN 0 to HW filter on device bond11 [ 215.100939][T10136] netlink: 'syz.2.1209': attribute type 3 has an invalid length. [ 215.131468][T10136] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1209'. [ 215.155025][T10126] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1205'. [ 215.303949][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 215.624216][T10162] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 216.058350][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.066181][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.295079][T10184] --map-set only usable from mangle table [ 216.308032][T10184] nbd: must specify a device to reconfigure [ 216.524748][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.589161][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.087496][T10200] netlink: 'syz.4.1222': attribute type 2 has an invalid length. [ 217.126364][T10202] pim6reg: entered allmulticast mode [ 217.144417][T10202] pim6reg: left allmulticast mode [ 217.437537][T10222] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1230'. [ 217.471651][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1230'. [ 217.492589][T10222] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1230'. [ 217.548271][T10222] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 217.585487][T10222] ipt_ECN: cannot use operation on non-tcp rule [ 217.647035][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 217.836857][T10239] netlink: 'syz.4.1233': attribute type 16 has an invalid length. [ 217.853056][T10239] netlink: 'syz.4.1233': attribute type 17 has an invalid length. [ 217.927117][T10239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.974983][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.006059][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.094253][T10239] batadv_slave_0: left allmulticast mode [ 218.115110][T10239] net_ratelimit: 17 callbacks suppressed [ 218.115125][T10239] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 218.196921][T10178] wg1 speed is unknown, defaulting to 1000 [ 218.202779][T10178] syz0: Port: 1 Link ACTIVE [ 218.207367][T10178] wg1 speed is unknown, defaulting to 1000 [ 218.320851][T10249] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 218.380166][T10249] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.451823][T10253] xt_connbytes: Forcing CT accounting to be enabled [ 218.536808][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 218.545720][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 218.564244][T10258] x_tables: duplicate underflow at hook 4 [ 218.853012][T10275] FAULT_INJECTION: forcing a failure. [ 218.853012][T10275] name failslab, interval 1, probability 0, space 0, times 0 [ 218.879872][T10275] CPU: 1 UID: 0 PID: 10275 Comm: syz.3.1248 Not tainted syzkaller #0 PREEMPT(full) [ 218.879896][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.879908][T10275] Call Trace: [ 218.879916][T10275] [ 218.879924][T10275] dump_stack_lvl+0xe8/0x150 [ 218.879950][T10275] should_fail_ex+0x412/0x560 [ 218.879980][T10275] should_failslab+0xa8/0x100 [ 218.880010][T10275] __kmalloc_noprof+0xe8/0x760 [ 218.880036][T10275] ? tomoyo_encode+0x28b/0x550 [ 218.880068][T10275] tomoyo_encode+0x28b/0x550 [ 218.880097][T10275] tomoyo_realpath_from_path+0x58d/0x5d0 [ 218.880124][T10275] ? tomoyo_domain+0xd7/0x130 [ 218.880154][T10275] ? tomoyo_path_number_perm+0x219/0x630 [ 218.880175][T10275] tomoyo_path_number_perm+0x246/0x630 [ 218.880200][T10275] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.880220][T10275] ? __lock_acquire+0x6b5/0x2cf0 [ 218.880257][T10275] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 218.880297][T10275] ? __fget_files+0x2a/0x420 [ 218.880322][T10275] ? __fget_files+0x2a/0x420 [ 218.880343][T10275] ? __fget_files+0x3a0/0x420 [ 218.880363][T10275] ? __fget_files+0x2a/0x420 [ 218.880389][T10275] security_file_ioctl+0xc3/0x2a0 [ 218.880413][T10275] __se_sys_ioctl+0x47/0x170 [ 218.880440][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.880460][T10275] do_syscall_64+0x15f/0xf80 [ 218.880477][T10275] ? trace_irq_disable+0x3b/0x140 [ 218.880504][T10275] ? clear_bhb_loop+0x40/0x90 [ 218.880532][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.880551][T10275] RIP: 0033:0x7fad6c59ce59 [ 218.880568][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.880583][T10275] RSP: 002b:00007fad6d3fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.880603][T10275] RAX: ffffffffffffffda RBX: 00007fad6c815fa0 RCX: 00007fad6c59ce59 [ 218.880617][T10275] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 218.880629][T10275] RBP: 00007fad6d3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 218.880641][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.880651][T10275] R13: 00007fad6c816038 R14: 00007fad6c815fa0 R15: 00007ffe3b3ec1d8 [ 218.880683][T10275] [ 218.880702][T10275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.172107][T10283] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1250'. [ 219.181534][T10283] veth0_to_bond: default FDB implementation only supports local addresses [ 219.302210][T10290] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 219.359310][T10290] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.433195][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 219.442086][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 219.463082][T10301] FAULT_INJECTION: forcing a failure. [ 219.463082][T10301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.476869][T10301] CPU: 0 UID: 0 PID: 10301 Comm: syz.4.1257 Not tainted syzkaller #0 PREEMPT(full) [ 219.476892][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.476903][T10301] Call Trace: [ 219.476910][T10301] [ 219.476917][T10301] dump_stack_lvl+0xe8/0x150 [ 219.476943][T10301] should_fail_ex+0x412/0x560 [ 219.476973][T10301] _copy_from_user+0x2d/0xb0 [ 219.477000][T10301] ___sys_sendmsg+0x1c6/0x360 [ 219.477020][T10301] ? get_pid_task+0x20/0x1f0 [ 219.477048][T10301] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.477089][T10301] ? sb_end_write+0xe9/0x1c0 [ 219.477120][T10301] ? __pfx_vfs_write+0x10/0x10 [ 219.477155][T10301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 219.477179][T10301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.477208][T10301] ? __pfx_ksys_write+0x10/0x10 [ 219.477249][T10301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.477269][T10301] do_syscall_64+0x15f/0xf80 [ 219.477287][T10301] ? trace_irq_disable+0x3b/0x140 [ 219.477313][T10301] ? clear_bhb_loop+0x40/0x90 [ 219.477335][T10301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.477354][T10301] RIP: 0033:0x7f70b479ce59 [ 219.477370][T10301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.477386][T10301] RSP: 002b:00007f70b5632028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.477405][T10301] RAX: ffffffffffffffda RBX: 00007f70b4a15fa0 RCX: 00007f70b479ce59 [ 219.477418][T10301] RDX: 0000000000000840 RSI: 0000200000000040 RDI: 0000000000000005 [ 219.477430][T10301] RBP: 00007f70b5632090 R08: 0000000000000000 R09: 0000000000000000 [ 219.477441][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.477452][T10301] R13: 00007f70b4a16038 R14: 00007f70b4a15fa0 R15: 00007ffdb8eb4b28 [ 219.477482][T10301] [ 219.998309][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1264'. [ 220.601376][T10348] FAULT_INJECTION: forcing a failure. [ 220.601376][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 220.624355][T10348] CPU: 0 UID: 0 PID: 10348 Comm: syz.3.1268 Not tainted syzkaller #0 PREEMPT(full) [ 220.624380][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.624392][T10348] Call Trace: [ 220.624400][T10348] [ 220.624408][T10348] dump_stack_lvl+0xe8/0x150 [ 220.624434][T10348] should_fail_ex+0x412/0x560 [ 220.624463][T10348] should_failslab+0xa8/0x100 [ 220.624493][T10348] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 220.624519][T10348] ? __alloc_skb+0x186/0x7d0 [ 220.624536][T10348] ? __alloc_skb+0x1d0/0x7d0 [ 220.624550][T10348] ? __local_bh_enable_ip+0xd0/0x130 [ 220.624579][T10348] __alloc_skb+0x1d0/0x7d0 [ 220.624601][T10348] netlink_sendmsg+0x5d4/0xb40 [ 220.624636][T10348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.624661][T10348] ? aa_sock_msg_perm+0xf1/0x1b0 [ 220.624686][T10348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.624714][T10348] ____sys_sendmsg+0x972/0x9f0 [ 220.624734][T10348] ? __might_fault+0xaf/0x130 [ 220.624763][T10348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.624792][T10348] ? import_iovec+0x73/0xa0 [ 220.624822][T10348] ___sys_sendmsg+0x2a5/0x360 [ 220.624841][T10348] ? __lock_acquire+0x6b5/0x2cf0 [ 220.624866][T10348] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.624920][T10348] ? __fget_files+0x2a/0x420 [ 220.624941][T10348] ? __fget_files+0x3a0/0x420 [ 220.624973][T10348] __x64_sys_sendmsg+0x1bd/0x2a0 [ 220.624995][T10348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.625025][T10348] ? __pfx_ksys_write+0x10/0x10 [ 220.625059][T10348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.625078][T10348] do_syscall_64+0x15f/0xf80 [ 220.625096][T10348] ? trace_irq_disable+0x3b/0x140 [ 220.625129][T10348] ? clear_bhb_loop+0x40/0x90 [ 220.625151][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.625170][T10348] RIP: 0033:0x7fad6c59ce59 [ 220.625187][T10348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.625203][T10348] RSP: 002b:00007fad6d3fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.625222][T10348] RAX: ffffffffffffffda RBX: 00007fad6c815fa0 RCX: 00007fad6c59ce59 [ 220.625236][T10348] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 220.625248][T10348] RBP: 00007fad6d3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 220.625259][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.625270][T10348] R13: 00007fad6c816038 R14: 00007fad6c815fa0 R15: 00007ffe3b3ec1d8 [ 220.625301][T10348] [ 221.281763][T10360] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 221.322453][T10360] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1271'. [ 221.357839][T10360] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1271'. [ 221.411652][T10360] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1271'. [ 221.449820][T10367] batadv0: entered allmulticast mode [ 221.862182][T10378] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1278'. [ 222.142089][T10325] infiniband syz2: set down [ 222.153572][T10325] infiniband syz2: added bond_slave_0 [ 222.201035][T10325] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 222.216083][T10325] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 222.312387][T10325] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 222.361398][T10397] xt_TCPMSS: Only works on TCP SYN packets [ 222.416335][T10325] RDS/IB: syz2: added [ 222.420379][T10325] smc: adding ib device syz2 with port count 1 [ 222.426542][T10325] smc: ib device syz2 port 1 has no pnetid [ 222.538434][T10403] syzkaller0: entered promiscuous mode [ 222.543930][T10403] syzkaller0: entered allmulticast mode [ 223.085970][T10437] team0: entered promiscuous mode [ 223.096424][T10437] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 223.103921][T10437] team0: entered allmulticast mode [ 223.109051][T10437] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 223.131685][T10438] Bluetooth: MGMT ver 1.23 [ 223.151553][T10437] team0: Cannot enslave team device to itself [ 223.900919][T10457] syzkaller0: entered promiscuous mode [ 223.907061][T10457] syzkaller0: entered allmulticast mode [ 225.548028][T10413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.857970][T10472] __nla_validate_parse: 4 callbacks suppressed [ 225.857988][T10472] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1300'. [ 225.907462][T10473] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 225.917805][T10468] syzkaller0: entered promiscuous mode [ 225.938330][T10468] syzkaller0: entered allmulticast mode [ 225.992137][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 226.009763][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'. [ 226.181689][T10473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 227.788630][T10499] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1308'. [ 227.795115][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1310'. [ 227.932927][T10510] bond0: entered promiscuous mode [ 227.947145][T10510] bond_slave_0: entered promiscuous mode [ 227.973795][T10510] bond_slave_1: entered promiscuous mode [ 228.047612][T10502] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1309'. [ 228.079665][T10502] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1309'. [ 228.216809][T10523] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 228.288489][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 228.300726][T10523] netlink: 'syz.2.1317': attribute type 3 has an invalid length. [ 228.422021][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 228.787389][T10553] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 228.802068][T10553] bond8 (unregistering): Released all slaves [ 228.959021][T10562] syzkaller0: entered promiscuous mode [ 228.964569][T10562] syzkaller0: entered allmulticast mode [ 229.034110][T10560] sctp: [Deprecated]: syz.4.1330 (pid 10560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.034110][T10560] Use struct sctp_sack_info instead [ 229.119021][T10565] FAULT_INJECTION: forcing a failure. [ 229.119021][T10565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.132069][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.4.1332 Not tainted syzkaller #0 PREEMPT(full) [ 229.132089][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.132100][T10565] Call Trace: [ 229.132106][T10565] [ 229.132113][T10565] dump_stack_lvl+0xe8/0x150 [ 229.132138][T10565] should_fail_ex+0x412/0x560 [ 229.132164][T10565] _copy_from_user+0x2d/0xb0 [ 229.132188][T10565] do_sock_getsockopt+0x200/0x7e0 [ 229.132212][T10565] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 229.132252][T10565] ? __fget_files+0x3a0/0x420 [ 229.132269][T10565] ? __fget_files+0x2a/0x420 [ 229.132291][T10565] __x64_sys_getsockopt+0x1a4/0x240 [ 229.132314][T10565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.132332][T10565] do_syscall_64+0x15f/0xf80 [ 229.132348][T10565] ? trace_irq_disable+0x3b/0x140 [ 229.132373][T10565] ? clear_bhb_loop+0x40/0x90 [ 229.132394][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.132412][T10565] RIP: 0033:0x7f70b479ce59 [ 229.132428][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.132444][T10565] RSP: 002b:00007f70b5632028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 229.132464][T10565] RAX: ffffffffffffffda RBX: 00007f70b4a15fa0 RCX: 00007f70b479ce59 [ 229.132478][T10565] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003 [ 229.132488][T10565] RBP: 00007f70b5632090 R08: 0000200000000080 R09: 0000000000000000 [ 229.132500][T10565] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.132512][T10565] R13: 00007f70b4a16038 R14: 00007f70b4a15fa0 R15: 00007ffdb8eb4b28 [ 229.132542][T10565] [ 230.641320][ T7716] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 230.879729][T10638] syzkaller0: entered promiscuous mode [ 230.889852][T10638] syzkaller0: entered allmulticast mode [ 231.253565][T10611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.352110][T10658] netlink: 'syz.4.1357': attribute type 21 has an invalid length. [ 231.504618][T10658] __nla_validate_parse: 11 callbacks suppressed [ 231.504636][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 231.773871][T10682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1364'. [ 232.114915][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 232.328384][T10697] FAULT_INJECTION: forcing a failure. [ 232.328384][T10697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.342993][T10697] CPU: 1 UID: 0 PID: 10697 Comm: syz.2.1371 Not tainted syzkaller #0 PREEMPT(full) [ 232.343015][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.343027][T10697] Call Trace: [ 232.343034][T10697] [ 232.343042][T10697] dump_stack_lvl+0xe8/0x150 [ 232.343068][T10697] should_fail_ex+0x412/0x560 [ 232.343099][T10697] _copy_from_user+0x2d/0xb0 [ 232.343127][T10697] kstrtouint_from_user+0xd6/0x180 [ 232.343154][T10697] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 232.343196][T10697] proc_fail_nth_write+0x8e/0x210 [ 232.343220][T10697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 232.343250][T10697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 232.343275][T10697] vfs_write+0x29a/0xb90 [ 232.343310][T10697] ? __pfx_vfs_write+0x10/0x10 [ 232.343338][T10697] ? __fget_files+0x2a/0x420 [ 232.343364][T10697] ? __fget_files+0x3a0/0x420 [ 232.343385][T10697] ? __fget_files+0x2a/0x420 [ 232.343417][T10697] ksys_write+0x150/0x270 [ 232.343444][T10697] ? __pfx_ksys_write+0x10/0x10 [ 232.343467][T10697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.343496][T10697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.343516][T10697] do_syscall_64+0x15f/0xf80 [ 232.343534][T10697] ? trace_irq_disable+0x3b/0x140 [ 232.343561][T10697] ? clear_bhb_loop+0x40/0x90 [ 232.343584][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.343601][T10697] RIP: 0033:0x7f83c135d68e [ 232.343618][T10697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.343633][T10697] RSP: 002b:00007f83c231ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.343653][T10697] RAX: ffffffffffffffda RBX: 00007f83c23206c0 RCX: 00007f83c135d68e [ 232.343666][T10697] RDX: 0000000000000001 RSI: 00007f83c23200a0 RDI: 0000000000000005 [ 232.343678][T10697] RBP: 00007f83c2320090 R08: 0000000000000000 R09: 0000000000000000 [ 232.343689][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.343700][T10697] R13: 00007f83c1616038 R14: 00007f83c1615fa0 R15: 00007ffe23cdbf38 [ 232.343732][T10697] [ 232.387756][T10701] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 232.486725][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1373'. [ 232.704906][T10701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.775675][T10709] macvlan3: entered promiscuous mode [ 232.781198][T10709] macvlan3: entered allmulticast mode [ 232.782237][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 232.788623][T10709] bond0: entered promiscuous mode [ 232.802939][T10709] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 232.813112][T10709] bond0: left promiscuous mode [ 232.847315][T10718] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1378'. [ 232.863030][T10713] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1376'. [ 232.934519][T10725] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.372171][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 233.741225][T10754] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1386'. [ 234.318607][T10774] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1393'. [ 234.404533][T10774] syzkaller0: entered promiscuous mode [ 234.417980][T10774] syzkaller0: entered allmulticast mode [ 235.318002][T10798] wg1 speed is unknown, defaulting to 1000 [ 235.649976][T10811] netlink: 'syz.2.1408': attribute type 11 has an invalid length. [ 235.822888][T10820] FAULT_INJECTION: forcing a failure. [ 235.822888][T10820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.842252][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.1.1405 Not tainted syzkaller #0 PREEMPT(full) [ 235.842276][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.842295][T10820] Call Trace: [ 235.842303][T10820] [ 235.842310][T10820] dump_stack_lvl+0xe8/0x150 [ 235.842336][T10820] should_fail_ex+0x412/0x560 [ 235.842364][T10820] _copy_from_user+0x2d/0xb0 [ 235.842391][T10820] do_bnep_sock_ioctl+0x2cd/0x650 [ 235.842413][T10820] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 235.842437][T10820] ? tomoyo_path_number_perm+0x219/0x630 [ 235.842477][T10820] sock_do_ioctl+0x101/0x320 [ 235.842503][T10820] ? __pfx_sock_do_ioctl+0x10/0x10 [ 235.842522][T10820] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 235.842579][T10820] sock_ioctl+0x5c6/0x7f0 [ 235.842605][T10820] ? __pfx_sock_ioctl+0x10/0x10 [ 235.842627][T10820] ? __fget_files+0x2a/0x420 [ 235.842648][T10820] ? __fget_files+0x3a0/0x420 [ 235.842667][T10820] ? __fget_files+0x2a/0x420 [ 235.842690][T10820] ? bpf_lsm_file_ioctl+0x9/0x20 [ 235.842715][T10820] ? __pfx_sock_ioctl+0x10/0x10 [ 235.842736][T10820] __se_sys_ioctl+0xfc/0x170 [ 235.842762][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.842781][T10820] do_syscall_64+0x15f/0xf80 [ 235.842798][T10820] ? trace_irq_disable+0x3b/0x140 [ 235.842823][T10820] ? clear_bhb_loop+0x40/0x90 [ 235.842846][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.842863][T10820] RIP: 0033:0x7fb35139ce59 [ 235.842880][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.842895][T10820] RSP: 002b:00007fb3521eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.842913][T10820] RAX: ffffffffffffffda RBX: 00007fb351616180 RCX: 00007fb35139ce59 [ 235.842926][T10820] RDX: 00002000000000c0 RSI: 00000000800442d2 RDI: 0000000000000008 [ 235.842938][T10820] RBP: 00007fb3521eb090 R08: 0000000000000000 R09: 0000000000000000 [ 235.842948][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.842958][T10820] R13: 00007fb351616218 R14: 00007fb351616180 R15: 00007ffe250e2108 [ 235.842986][T10820] [ 236.119146][T10818] netlink: 'syz.3.1409': attribute type 5 has an invalid length. [ 236.269921][T10831] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 236.453139][T10841] sctp: [Deprecated]: syz.2.1414 (pid 10841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.453139][T10841] Use struct sctp_sack_info instead [ 236.558007][T10833] syzkaller0: entered promiscuous mode [ 236.563515][T10833] syzkaller0: entered allmulticast mode [ 236.641632][T10846] __nla_validate_parse: 6 callbacks suppressed [ 236.641650][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 237.933610][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 238.242463][T10858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 238.283202][T10858] ip6gretap1: entered allmulticast mode [ 238.349745][T10865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.548443][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1424'. [ 238.567767][T10871] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1422'. [ 238.709992][T10874] ip6gre1: entered promiscuous mode [ 238.717275][T10874] ip6gre1: entered allmulticast mode [ 238.727077][ T157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.749107][ T157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.759847][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.245449][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.484638][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.980614][T10920] netlink: 'syz.4.1435': attribute type 21 has an invalid length. [ 240.020349][T10920] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1435'. [ 240.069952][T10920] netlink: 'syz.4.1435': attribute type 5 has an invalid length. [ 240.085150][T10920] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1435'. [ 240.314654][T10946] syzkaller0: entered promiscuous mode [ 240.320212][T10946] syzkaller0: entered allmulticast mode [ 240.683685][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'. [ 240.706761][T10955] wg1 speed is unknown, defaulting to 1000 [ 240.730920][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'. [ 241.030641][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 241.761613][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1456'. [ 241.763625][T10986] syzkaller0: entered promiscuous mode [ 241.771451][T10988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1456'. [ 241.776033][T10986] syzkaller0: entered allmulticast mode [ 241.885585][T10984] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1457'. [ 241.919178][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 241.993622][T10994] sch_tbf: burst 240 is lower than device lo mtu (32783) ! [ 242.140636][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 242.593872][T11010] syzkaller0: entered promiscuous mode [ 242.599501][T11010] syzkaller0: entered allmulticast mode [ 242.836262][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1468'. [ 242.855141][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.122713][T11033] FAULT_INJECTION: forcing a failure. [ 243.122713][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 243.165554][T11035] tipc: Failed to remove unknown binding: 66,0,0/0:2003250714/2003250716 [ 243.193043][T11033] CPU: 0 UID: 0 PID: 11033 Comm: syz.0.1472 Not tainted syzkaller #0 PREEMPT(full) [ 243.193066][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.193085][T11033] Call Trace: [ 243.193092][T11033] [ 243.193100][T11033] dump_stack_lvl+0xe8/0x150 [ 243.193127][T11033] should_fail_ex+0x412/0x560 [ 243.193157][T11033] should_failslab+0xa8/0x100 [ 243.193187][T11033] __kmalloc_cache_noprof+0x88/0x660 [ 243.193213][T11033] ? sctp_add_bind_addr+0x8c/0x370 [ 243.193244][T11033] sctp_add_bind_addr+0x8c/0x370 [ 243.193274][T11033] sctp_copy_local_addr_list+0x314/0x4f0 [ 243.193304][T11033] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 243.193330][T11033] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 243.193354][T11033] ? sctp_association_new+0x1894/0x25e0 [ 243.193377][T11033] ? sctp_v6_is_any+0x64/0x80 [ 243.193404][T11033] ? sctp_copy_one_addr+0x93/0x360 [ 243.193434][T11033] sctp_bind_addr_copy+0xb3/0x3c0 [ 243.193461][T11033] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 243.193488][T11033] sctp_connect_new_asoc+0x2ff/0x6b0 [ 243.193512][T11033] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 243.193540][T11033] ? __local_bh_enable_ip+0xd0/0x130 [ 243.193558][T11033] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 243.193584][T11033] ? security_sctp_bind_connect+0x7e/0x2c0 [ 243.193609][T11033] sctp_sendmsg+0x1576/0x2c50 [ 243.193645][T11033] ? __pfx_sctp_sendmsg+0x10/0x10 [ 243.193668][T11033] ? aa_sk_perm+0x6d5/0x900 [ 243.193691][T11033] ? __might_fault+0xaf/0x130 [ 243.193721][T11033] ? __pfx_aa_sk_perm+0x10/0x10 [ 243.193748][T11033] ? sock_rps_record_flow+0x19/0x350 [ 243.193774][T11033] ? __pfx_inet_sendmsg+0x10/0x10 [ 243.193801][T11033] ? inet_sendmsg+0x2f4/0x370 [ 243.193826][T11033] ? __pfx_inet_sendmsg+0x10/0x10 [ 243.193853][T11033] __sys_sendto+0x5de/0x710 [ 243.193875][T11033] ? __pfx___sys_sendto+0x10/0x10 [ 243.193891][T11033] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 243.193925][T11033] ? __fget_files+0x3a0/0x420 [ 243.193958][T11033] ? ksys_write+0x242/0x270 [ 243.193986][T11033] ? __pfx_ksys_write+0x10/0x10 [ 243.194018][T11033] __x64_sys_sendto+0xde/0x100 [ 243.194037][T11033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.194058][T11033] do_syscall_64+0x15f/0xf80 [ 243.194084][T11033] ? trace_irq_disable+0x3b/0x140 [ 243.194110][T11033] ? clear_bhb_loop+0x40/0x90 [ 243.194133][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.194152][T11033] RIP: 0033:0x7f03d6b9ce59 [ 243.194169][T11033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.194185][T11033] RSP: 002b:00007f03d7ab8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 243.194205][T11033] RAX: ffffffffffffffda RBX: 00007f03d6e15fa0 RCX: 00007f03d6b9ce59 [ 243.194218][T11033] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 243.194231][T11033] RBP: 00007f03d7ab8090 R08: 0000200000000140 R09: 000000000000001c [ 243.194243][T11033] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 243.194255][T11033] R13: 00007f03d6e16038 R14: 00007f03d6e15fa0 R15: 00007ffed623e078 [ 243.194287][T11033] [ 243.510725][T11038] openvswitch: netlink: Multiple metadata blocks provided [ 243.576607][T11035] tipc: Failed to remove unknown binding: 66,0,0/0:2003250714/2003250715 [ 243.585899][T11035] tipc: Failed to remove unknown binding: 66,0,0/0:2003250714/2003250716 [ 243.627423][T11035] tipc: Failed to remove unknown binding: 66,0,0/0:2003250714/2003250715 [ 243.696022][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1475'. [ 243.896542][T11051] IPVS: Scheduler module ip_vs_sip not found [ 243.969165][T11060] syzkaller1: entered promiscuous mode [ 243.981487][T11060] syzkaller1: entered allmulticast mode [ 244.007992][T11060] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 244.433052][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.442133][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.479814][T11073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'. [ 244.977223][T11091] FAULT_INJECTION: forcing a failure. [ 244.977223][T11091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.990295][T11091] CPU: 1 UID: 0 PID: 11091 Comm: syz.3.1491 Not tainted syzkaller #0 PREEMPT(full) [ 244.990318][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.990328][T11091] Call Trace: [ 244.990335][T11091] [ 244.990342][T11091] dump_stack_lvl+0xe8/0x150 [ 244.990368][T11091] should_fail_ex+0x412/0x560 [ 244.990396][T11091] _copy_from_iter+0x1d3/0x1670 [ 244.990424][T11091] ? rcu_is_watching+0x15/0xb0 [ 244.990451][T11091] ? __pfx__copy_from_iter+0x10/0x10 [ 244.990484][T11091] ? netlink_sendmsg+0x650/0xb40 [ 244.990504][T11091] ? skb_put+0x11b/0x210 [ 244.990525][T11091] netlink_sendmsg+0x6c0/0xb40 [ 244.990554][T11091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.990579][T11091] ? aa_sock_msg_perm+0xf1/0x1b0 [ 244.990605][T11091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.990641][T11091] ____sys_sendmsg+0x972/0x9f0 [ 244.990661][T11091] ? __might_fault+0xaf/0x130 [ 244.990689][T11091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.990718][T11091] ? import_iovec+0x73/0xa0 [ 244.990747][T11091] ___sys_sendmsg+0x2a5/0x360 [ 244.990765][T11091] ? __lock_acquire+0x6b5/0x2cf0 [ 244.990789][T11091] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.990843][T11091] ? __fget_files+0x2a/0x420 [ 244.990863][T11091] ? __fget_files+0x3a0/0x420 [ 244.990893][T11091] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.990915][T11091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.990945][T11091] ? __pfx_ksys_write+0x10/0x10 [ 244.990979][T11091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.990999][T11091] do_syscall_64+0x15f/0xf80 [ 244.991017][T11091] ? trace_irq_disable+0x3b/0x140 [ 244.991042][T11091] ? clear_bhb_loop+0x40/0x90 [ 244.991064][T11091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.991082][T11091] RIP: 0033:0x7fad6c59ce59 [ 244.991099][T11091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.991115][T11091] RSP: 002b:00007fad6d3b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.991134][T11091] RAX: ffffffffffffffda RBX: 00007fad6c816180 RCX: 00007fad6c59ce59 [ 244.991148][T11091] RDX: 000000000004c090 RSI: 0000200000000580 RDI: 0000000000000003 [ 244.991160][T11091] RBP: 00007fad6d3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 244.991172][T11091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.991183][T11091] R13: 00007fad6c816218 R14: 00007fad6c816180 R15: 00007ffe3b3ec1d8 [ 244.991212][T11091] [ 245.275037][T11092] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 245.722354][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 245.909110][T11121] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 245.989271][T11126] FAULT_INJECTION: forcing a failure. [ 245.989271][T11126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.002340][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.3.1502 Not tainted syzkaller #0 PREEMPT(full) [ 246.002364][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.002375][T11126] Call Trace: [ 246.002382][T11126] [ 246.002390][T11126] dump_stack_lvl+0xe8/0x150 [ 246.002416][T11126] should_fail_ex+0x412/0x560 [ 246.002446][T11126] _copy_from_user+0x2d/0xb0 [ 246.002474][T11126] kstrtouint_from_user+0xd6/0x180 [ 246.002501][T11126] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 246.002538][T11126] proc_fail_nth_write+0x8e/0x210 [ 246.002563][T11126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 246.002592][T11126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 246.002617][T11126] vfs_write+0x29a/0xb90 [ 246.002651][T11126] ? __pfx_vfs_write+0x10/0x10 [ 246.002677][T11126] ? __fget_files+0x2a/0x420 [ 246.002703][T11126] ? __fget_files+0x3a0/0x420 [ 246.002724][T11126] ? __fget_files+0x2a/0x420 [ 246.002752][T11126] ksys_write+0x150/0x270 [ 246.002788][T11126] ? __pfx_ksys_write+0x10/0x10 [ 246.002822][T11126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.002842][T11126] do_syscall_64+0x15f/0xf80 [ 246.002859][T11126] ? trace_irq_disable+0x3b/0x140 [ 246.002885][T11126] ? clear_bhb_loop+0x40/0x90 [ 246.002908][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.002926][T11126] RIP: 0033:0x7fad6c55d68e [ 246.002944][T11126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.002960][T11126] RSP: 002b:00007fad6d3fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.002977][T11126] RAX: ffffffffffffffda RBX: 00007fad6d3fb6c0 RCX: 00007fad6c55d68e [ 246.002990][T11126] RDX: 0000000000000001 RSI: 00007fad6d3fb0a0 RDI: 0000000000000004 [ 246.003000][T11126] RBP: 00007fad6d3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 246.003011][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.003022][T11126] R13: 00007fad6c816038 R14: 00007fad6c815fa0 R15: 00007ffe3b3ec1d8 [ 246.003052][T11126] [ 246.309003][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 246.333871][T11131] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 246.533269][T11135] netlink: 'syz.0.1505': attribute type 11 has an invalid length. [ 246.544394][T11135] netlink: 'syz.0.1505': attribute type 23 has an invalid length. [ 246.580760][T11137] netlink: 'syz.2.1506': attribute type 9 has an invalid length. [ 246.589752][T11137] netlink: 'syz.2.1506': attribute type 6 has an invalid length. [ 246.600793][T11137] netlink: 'syz.2.1506': attribute type 9 has an invalid length. [ 246.611176][T11137] netlink: 'syz.2.1506': attribute type 6 has an invalid length. [ 246.776716][T11144] __nla_validate_parse: 3 callbacks suppressed [ 246.776733][T11144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1506'. [ 247.209757][T11155] wg1 speed is unknown, defaulting to 1000 [ 247.453574][T11157] syzkaller0: entered promiscuous mode [ 247.494356][T11157] syzkaller0: entered allmulticast mode [ 248.467142][T11179] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1520'. [ 248.682953][T11183] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1521'. [ 248.694234][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1521'. [ 248.810872][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 248.871929][T11185] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 248.879680][T11185] netlink: 'syz.1.1522': attribute type 2 has an invalid length. [ 249.912890][T11214] wg1 speed is unknown, defaulting to 1000 [ 250.494709][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 251.127695][T11250] syzkaller0: entered promiscuous mode [ 251.144338][T11250] syzkaller0: entered allmulticast mode [ 251.613358][T11261] FAULT_INJECTION: forcing a failure. [ 251.613358][T11261] name failslab, interval 1, probability 0, space 0, times 0 [ 251.654406][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.4.1544 Not tainted syzkaller #0 PREEMPT(full) [ 251.654431][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.654442][T11261] Call Trace: [ 251.654449][T11261] [ 251.654457][T11261] dump_stack_lvl+0xe8/0x150 [ 251.654484][T11261] should_fail_ex+0x412/0x560 [ 251.654513][T11261] should_failslab+0xa8/0x100 [ 251.654541][T11261] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 251.654567][T11261] ? __alloc_skb+0x1d0/0x7d0 [ 251.654583][T11261] ? __local_bh_enable_ip+0xd0/0x130 [ 251.654607][T11261] __alloc_skb+0x1d0/0x7d0 [ 251.654625][T11261] ? netlink_ack_tlv_len+0x6c/0x210 [ 251.654648][T11261] netlink_ack+0x146/0xa50 [ 251.654665][T11261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.654688][T11261] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 251.654710][T11261] ? __pfx_nl80211_post_doit+0x10/0x10 [ 251.654745][T11261] netlink_rcv_skb+0x2b6/0x4b0 [ 251.654767][T11261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.654793][T11261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.654811][T11261] ? genl_rcv+0x19/0x40 [ 251.654849][T11261] ? down_read+0x270/0x2e0 [ 251.654867][T11261] ? genl_rcv+0xd/0x40 [ 251.654891][T11261] genl_rcv+0x28/0x40 [ 251.654912][T11261] netlink_unicast+0x75c/0x8e0 [ 251.654941][T11261] netlink_sendmsg+0x813/0xb40 [ 251.654971][T11261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.654995][T11261] ? aa_sock_msg_perm+0xf1/0x1b0 [ 251.655022][T11261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.655058][T11261] ____sys_sendmsg+0x972/0x9f0 [ 251.655089][T11261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.655118][T11261] ? import_iovec+0x73/0xa0 [ 251.655148][T11261] ___sys_sendmsg+0x2a5/0x360 [ 251.655165][T11261] ? __lock_acquire+0x6b5/0x2cf0 [ 251.655190][T11261] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.655246][T11261] ? __fget_files+0x2a/0x420 [ 251.655267][T11261] ? __fget_files+0x3a0/0x420 [ 251.655298][T11261] __x64_sys_sendmsg+0x1bd/0x2a0 [ 251.655321][T11261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.655351][T11261] ? __pfx_ksys_write+0x10/0x10 [ 251.655386][T11261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.655407][T11261] do_syscall_64+0x15f/0xf80 [ 251.655424][T11261] ? trace_irq_disable+0x3b/0x140 [ 251.655451][T11261] ? clear_bhb_loop+0x40/0x90 [ 251.655474][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.655492][T11261] RIP: 0033:0x7f70b479ce59 [ 251.655509][T11261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.655525][T11261] RSP: 002b:00007f70b5632028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.655544][T11261] RAX: ffffffffffffffda RBX: 00007f70b4a15fa0 RCX: 00007f70b479ce59 [ 251.655558][T11261] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 251.655569][T11261] RBP: 00007f70b5632090 R08: 0000000000000000 R09: 0000000000000000 [ 251.655581][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.655592][T11261] R13: 00007f70b4a16038 R14: 00007f70b4a15fa0 R15: 00007ffdb8eb4b28 [ 251.655623][T11261] [ 251.724910][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.988838][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 252.225921][T11278] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 252.415746][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 252.585861][T11298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1553'. [ 252.648893][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 252.747632][T11304] syzkaller0: entered promiscuous mode [ 252.753339][T11304] syzkaller0: entered allmulticast mode [ 252.967966][T11314] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 253.144881][T11314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.510669][T11334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.700165][T11339] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 254.314022][T11339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.360777][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1569'. [ 254.395575][T11347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1569'. [ 254.500849][T11352] netlink: 'syz.4.1570': attribute type 24 has an invalid length. [ 254.536968][T11355] openvswitch: netlink: Message has 114 unknown bytes. [ 254.575532][ T29] audit: type=1800 audit(1779746144.853:10): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1574" name="memory.events" dev="tmpfs" ino=1606 res=0 errno=0 [ 254.584605][T11354] syzkaller0: entered promiscuous mode [ 254.649714][T11354] syzkaller0: entered allmulticast mode [ 254.918028][T11371] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 255.221359][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1584'. [ 255.239232][T11392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1583'. [ 255.435836][T11393] syzkaller0: entered promiscuous mode [ 255.441347][T11393] syzkaller0: entered allmulticast mode [ 255.592556][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.609428][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.618167][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.899979][T11426] FAULT_INJECTION: forcing a failure. [ 255.899979][T11426] name failslab, interval 1, probability 0, space 0, times 0 [ 255.912818][T11426] CPU: 0 UID: 0 PID: 11426 Comm: syz.4.1593 Not tainted syzkaller #0 PREEMPT(full) [ 255.912841][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.912852][T11426] Call Trace: [ 255.912859][T11426] [ 255.912866][T11426] dump_stack_lvl+0xe8/0x150 [ 255.912892][T11426] should_fail_ex+0x412/0x560 [ 255.912923][T11426] should_failslab+0xa8/0x100 [ 255.912952][T11426] __kmalloc_cache_noprof+0x88/0x660 [ 255.912979][T11426] ? sctp_stream_init_ext+0x57/0x180 [ 255.913009][T11426] sctp_stream_init_ext+0x57/0x180 [ 255.913035][T11426] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 255.913079][T11426] ? __asan_memset+0x22/0x50 [ 255.913102][T11426] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 255.913125][T11426] ? sctp_assoc_add_peer+0xcad/0x13b0 [ 255.913158][T11426] sctp_sendmsg+0x1b85/0x2c50 [ 255.913194][T11426] ? __pfx_sctp_sendmsg+0x10/0x10 [ 255.913220][T11426] ? __might_fault+0xaf/0x130 [ 255.913250][T11426] ? __pfx_aa_sk_perm+0x10/0x10 [ 255.913277][T11426] ? sock_rps_record_flow+0x19/0x350 [ 255.913307][T11426] ? inet_sendmsg+0x2f4/0x370 [ 255.913331][T11426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.913356][T11426] ____sys_sendmsg+0x80a/0x9f0 [ 255.913385][T11426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.913413][T11426] ? import_iovec+0x73/0xa0 [ 255.913443][T11426] ___sys_sendmsg+0x2a5/0x360 [ 255.913460][T11426] ? __lock_acquire+0x6b5/0x2cf0 [ 255.913484][T11426] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.913547][T11426] ? __fget_files+0x2a/0x420 [ 255.913567][T11426] ? __fget_files+0x3a0/0x420 [ 255.913597][T11426] __x64_sys_sendmsg+0x1bd/0x2a0 [ 255.913619][T11426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.913647][T11426] ? __pfx_ksys_write+0x10/0x10 [ 255.913681][T11426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.913700][T11426] do_syscall_64+0x15f/0xf80 [ 255.913717][T11426] ? trace_irq_disable+0x3b/0x140 [ 255.913742][T11426] ? clear_bhb_loop+0x40/0x90 [ 255.913763][T11426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.913781][T11426] RIP: 0033:0x7f70b479ce59 [ 255.913798][T11426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.913813][T11426] RSP: 002b:00007f70b5632028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.913833][T11426] RAX: ffffffffffffffda RBX: 00007f70b4a15fa0 RCX: 00007f70b479ce59 [ 255.913846][T11426] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 255.913857][T11426] RBP: 00007f70b5632090 R08: 0000000000000000 R09: 0000000000000000 [ 255.913868][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.913878][T11426] R13: 00007f70b4a16038 R14: 00007f70b4a15fa0 R15: 00007ffdb8eb4b28 [ 255.913908][T11426] [ 256.269214][T11428] x_tables: duplicate underflow at hook 1 [ 257.636997][T11416] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 257.655696][T11416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.777548][T11439] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 257.805185][T11439] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20265 [ 257.920280][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 257.945298][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1600'. [ 258.019165][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 258.175073][T11457] wg1 speed is unknown, defaulting to 1000 [ 258.274352][T11463] hsr0: entered promiscuous mode [ 258.819380][T11455] hsr0: left promiscuous mode [ 258.969235][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 259.163122][T11480] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 259.561329][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 259.713838][T11508] syzkaller0: entered promiscuous mode [ 259.719455][T11508] syzkaller0: entered allmulticast mode [ 260.165819][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1621'. [ 260.371236][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 260.390870][T11528] macsec2: entered promiscuous mode [ 260.396280][T11528] dummy0: entered promiscuous mode [ 260.402596][T11528] macsec2: entered allmulticast mode [ 260.408855][T11528] dummy0: entered allmulticast mode [ 260.417254][T11528] dummy0: left allmulticast mode [ 260.440936][ T5738] dummy0: left promiscuous mode [ 260.850929][T11536] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1630'. [ 260.911732][T11536] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1630'. [ 260.956556][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 261.380681][T11566] netlink: 'syz.3.1640': attribute type 1 has an invalid length. [ 261.733387][ C1] ------------[ cut here ]------------ [ 261.738863][ C1] len > ((int)(~0U >> 1)) [ 261.738879][ C1] WARNING: ./include/linux/skbuff.h:2864 at qdisc_pkt_len_segs_init+0x4c1/0xa30, CPU#1: syz.2.1646/11589 [ 261.754367][ C1] Modules linked in: [ 261.758276][ C1] CPU: 1 UID: 0 PID: 11589 Comm: syz.2.1646 Not tainted syzkaller #0 PREEMPT(full) [ 261.767651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.777708][ C1] RIP: 0010:qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 261.783964][ C1] Code: 81 e6 00 00 02 00 31 ff e8 ac ab 47 f8 41 81 e6 00 00 02 00 0f 85 fb 00 00 00 e8 5a a7 47 f8 e9 5b 01 00 00 e8 50 a7 47 f8 90 <0f> 0b 90 e9 e8 fd ff ff 44 89 e7 44 89 f6 e8 fc a8 47 f8 45 39 f4 [ 261.813047][ C1] RSP: 0018:ffffc90000a085d0 EFLAGS: 00010246 [ 261.819132][ C1] RAX: ffffffff897e1d70 RBX: 1ffff1100b27670b RCX: ffff88805ab7bd80 [ 261.827095][ C1] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 261.835051][ C1] RBP: ffff8880593b3780 R08: ffff888035132067 R09: 1ffff11006a2640c [ 261.843016][ C1] R10: dffffc0000000000 R11: ffffed1006a2640d R12: 00000000fffffffe [ 261.850989][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880590cf8d8 [ 261.858946][ C1] FS: 00007f83c23206c0(0000) GS:ffff888125376000(0000) knlGS:0000000000000000 [ 261.867863][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.874452][ C1] CR2: 0000200000000101 CR3: 0000000027600000 CR4: 00000000003526f0 [ 261.882421][ C1] Call Trace: [ 261.885700][ C1] [ 261.888541][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 261.894255][ C1] ? lock_acquire+0x106/0x350 [ 261.898943][ C1] ? unwind_next_frame+0xa6/0x2550 [ 261.904066][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 261.910154][ C1] ? kernel_text_address+0xa5/0xe0 [ 261.923520][ C1] ? __kernel_text_address+0xd/0x30 [ 261.928749][ C1] ? unwind_get_return_address+0x4d/0x90 [ 261.934401][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 261.940405][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 261.945367][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 261.951879][ C1] ? kfree+0x1c5/0x640 [ 261.955942][ C1] ? stack_depot_save_flags+0x33/0x810 [ 261.961390][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 261.967536][ C1] ? lock_acquire+0x106/0x350 [ 261.972222][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 261.978545][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 261.985214][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 261.990325][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 261.995436][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 262.000562][ C1] napi_complete_done+0x299/0x730 [ 262.005580][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 262.011119][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 262.015890][ C1] gro_cell_poll+0x5a9/0x5d0 [ 262.016092][T11553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.020522][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 262.020561][ C1] __napi_poll+0xae/0x340 [ 262.048025][ C1] ? skb_defer_free_flush+0x233/0x260 [ 262.053431][ C1] net_rx_action+0x627/0xf70 [ 262.058053][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 262.063197][ C1] ? sched_clock+0x3f/0x60 [ 262.067652][ C1] handle_softirqs+0x22a/0x840 [ 262.072437][ C1] ? do_softirq+0x76/0xd0 [ 262.076784][ C1] ? tun_rx_batched+0x185/0x790 [ 262.081658][ C1] do_softirq+0x76/0xd0 [ 262.085832][ C1] [ 262.088774][ C1] [ 262.091717][ C1] __local_bh_enable_ip+0xf8/0x130 [ 262.096841][ C1] ? tun_rx_batched+0x185/0x790 [ 262.101710][ C1] tun_rx_batched+0x617/0x790 [ 262.106409][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 262.111603][ C1] ? tun_get_user+0x2787/0x43e0 [ 262.116453][ C1] ? tun_get_user+0x2787/0x43e0 [ 262.121298][ C1] ? tun_get_user+0x2394/0x43e0 [ 262.126147][ C1] ? tun_get_user+0x2394/0x43e0 [ 262.131024][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 262.136309][ C1] tun_get_user+0x2bbc/0x43e0 [ 262.150855][ C1] ? tun_get_user+0x2787/0x43e0 [ 262.156304][ C1] ? aa_file_perm+0x192/0x15e0 [ 262.161102][ C1] ? aa_file_perm+0x50e/0x15e0 [ 262.165962][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 262.171013][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 262.175966][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 262.181363][ C1] ? preempt_schedule_common+0x82/0xd0 [ 262.186849][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 262.192001][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.197480][ C1] ? tun_get+0x1c/0x2f0 [ 262.201658][ C1] ? tun_get+0x1c/0x2f0 [ 262.205838][ C1] ? tun_get+0x1c/0x2f0 [ 262.210023][ C1] ? tun_get+0x1c/0x2f0 [ 262.214208][ C1] tun_chr_write_iter+0x113/0x200 [ 262.219259][ C1] vfs_write+0x61d/0xb90 [ 262.223531][ C1] ? __pfx_vfs_write+0x10/0x10 [ 262.228320][ C1] ? __pfx_do_futex+0x10/0x10 [ 262.233021][ C1] ksys_write+0x150/0x270 [ 262.237364][ C1] ? __pfx_ksys_write+0x10/0x10 [ 262.242228][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.248281][ C1] do_syscall_64+0x15f/0xf80 [ 262.252856][ C1] ? clear_bhb_loop+0x40/0x90 [ 262.264230][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.270831][ C1] RIP: 0033:0x7f83c139ce59 [ 262.275771][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.297039][ C1] RSP: 002b:00007f83c2320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.306309][ C1] RAX: ffffffffffffffda RBX: 00007f83c1615fa0 RCX: 00007f83c139ce59 [ 262.314288][ C1] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000005 [ 262.322259][ C1] RBP: 00007f83c1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.330215][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.338170][ C1] R13: 00007f83c1616038 R14: 00007f83c1615fa0 R15: 00007ffe23cdbf38 [ 262.346154][ C1] [ 262.349184][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.356444][ C1] CPU: 1 UID: 0 PID: 11589 Comm: syz.2.1646 Not tainted syzkaller #0 PREEMPT(full) [ 262.365796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.375854][ C1] Call Trace: [ 262.379134][ C1] [ 262.381971][ C1] vpanic+0x56c/0xa60 [ 262.385957][ C1] ? __pfx__printk+0x10/0x10 [ 262.390547][ C1] ? __pfx_vpanic+0x10/0x10 [ 262.395041][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 262.400316][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 262.405509][ C1] panic+0xc5/0xd0 [ 262.409224][ C1] ? __pfx_panic+0x10/0x10 [ 262.413639][ C1] __warn+0x315/0x4c0 [ 262.417607][ C1] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 262.423230][ C1] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 262.428851][ C1] __report_bug+0x29a/0x540 [ 262.433354][ C1] ? tun_get_user+0x2bbc/0x43e0 [ 262.438193][ C1] ? tun_chr_write_iter+0x113/0x200 [ 262.443379][ C1] ? vfs_write+0x61d/0xb90 [ 262.447802][ C1] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 262.453422][ C1] ? __pfx___report_bug+0x10/0x10 [ 262.458450][ C1] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 262.464069][ C1] report_bug+0x16a/0x220 [ 262.468392][ C1] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 262.474012][ C1] ? qdisc_pkt_len_segs_init+0x4c3/0xa30 [ 262.479630][ C1] handle_bug+0x9c/0x200 [ 262.483865][ C1] exc_invalid_op+0x1a/0x50 [ 262.488356][ C1] asm_exc_invalid_op+0x1a/0x20 [ 262.493194][ C1] RIP: 0010:qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 262.499437][ C1] Code: 81 e6 00 00 02 00 31 ff e8 ac ab 47 f8 41 81 e6 00 00 02 00 0f 85 fb 00 00 00 e8 5a a7 47 f8 e9 5b 01 00 00 e8 50 a7 47 f8 90 <0f> 0b 90 e9 e8 fd ff ff 44 89 e7 44 89 f6 e8 fc a8 47 f8 45 39 f4 [ 262.519049][ C1] RSP: 0018:ffffc90000a085d0 EFLAGS: 00010246 [ 262.525122][ C1] RAX: ffffffff897e1d70 RBX: 1ffff1100b27670b RCX: ffff88805ab7bd80 [ 262.533086][ C1] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 262.541047][ C1] RBP: ffff8880593b3780 R08: ffff888035132067 R09: 1ffff11006a2640c [ 262.549007][ C1] R10: dffffc0000000000 R11: ffffed1006a2640d R12: 00000000fffffffe [ 262.556965][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880590cf8d8 [ 262.564932][ C1] ? qdisc_pkt_len_segs_init+0x4c0/0xa30 [ 262.570582][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 262.576303][ C1] ? lock_acquire+0x106/0x350 [ 262.580975][ C1] ? unwind_next_frame+0xa6/0x2550 [ 262.586082][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 262.592157][ C1] ? kernel_text_address+0xa5/0xe0 [ 262.597268][ C1] ? __kernel_text_address+0xd/0x30 [ 262.602463][ C1] ? unwind_get_return_address+0x4d/0x90 [ 262.608088][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 262.614059][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 262.618996][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 262.625491][ C1] ? kfree+0x1c5/0x640 [ 262.629556][ C1] ? stack_depot_save_flags+0x33/0x810 [ 262.635016][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 262.641168][ C1] ? lock_acquire+0x106/0x350 [ 262.645836][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 262.652155][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 262.658827][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 262.663936][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 262.669039][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 262.674150][ C1] napi_complete_done+0x299/0x730 [ 262.679179][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 262.684722][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 262.689486][ C1] gro_cell_poll+0x5a9/0x5d0 [ 262.694076][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 262.698836][ C1] __napi_poll+0xae/0x340 [ 262.703161][ C1] ? skb_defer_free_flush+0x233/0x260 [ 262.708527][ C1] net_rx_action+0x627/0xf70 [ 262.713121][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 262.718242][ C1] ? sched_clock+0x3f/0x60 [ 262.722666][ C1] handle_softirqs+0x22a/0x840 [ 262.727422][ C1] ? do_softirq+0x76/0xd0 [ 262.731744][ C1] ? tun_rx_batched+0x185/0x790 [ 262.736588][ C1] do_softirq+0x76/0xd0 [ 262.740737][ C1] [ 262.743656][ C1] [ 262.746572][ C1] __local_bh_enable_ip+0xf8/0x130 [ 262.751672][ C1] ? tun_rx_batched+0x185/0x790 [ 262.756514][ C1] tun_rx_batched+0x617/0x790 [ 262.761186][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 262.766375][ C1] ? tun_get_user+0x2787/0x43e0 [ 262.771218][ C1] ? tun_get_user+0x2787/0x43e0 [ 262.776060][ C1] ? tun_get_user+0x2394/0x43e0 [ 262.780904][ C1] ? tun_get_user+0x2394/0x43e0 [ 262.785745][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 262.791019][ C1] tun_get_user+0x2bbc/0x43e0 [ 262.795691][ C1] ? tun_get_user+0x2787/0x43e0 [ 262.800540][ C1] ? aa_file_perm+0x192/0x15e0 [ 262.805299][ C1] ? aa_file_perm+0x50e/0x15e0 [ 262.810056][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 262.815072][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 262.820002][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 262.825370][ C1] ? preempt_schedule_common+0x82/0xd0 [ 262.830826][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 262.835934][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.841385][ C1] ? tun_get+0x1c/0x2f0 [ 262.845531][ C1] ? tun_get+0x1c/0x2f0 [ 262.849682][ C1] ? tun_get+0x1c/0x2f0 [ 262.853830][ C1] ? tun_get+0x1c/0x2f0 [ 262.857979][ C1] tun_chr_write_iter+0x113/0x200 [ 262.863000][ C1] vfs_write+0x61d/0xb90 [ 262.867246][ C1] ? __pfx_vfs_write+0x10/0x10 [ 262.872007][ C1] ? __pfx_do_futex+0x10/0x10 [ 262.876684][ C1] ksys_write+0x150/0x270 [ 262.881007][ C1] ? __pfx_ksys_write+0x10/0x10 [ 262.885855][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.891910][ C1] do_syscall_64+0x15f/0xf80 [ 262.896489][ C1] ? clear_bhb_loop+0x40/0x90 [ 262.901155][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.907468][ C1] RIP: 0033:0x7f83c139ce59 [ 262.911874][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.931464][ C1] RSP: 002b:00007f83c2320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.939866][ C1] RAX: ffffffffffffffda RBX: 00007f83c1615fa0 RCX: 00007f83c139ce59 [ 262.947840][ C1] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000005 [ 262.955814][ C1] RBP: 00007f83c1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.963776][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.971743][ C1] R13: 00007f83c1616038 R14: 00007f83c1615fa0 R15: 00007ffe23cdbf38 [ 262.979724][ C1] [ 262.983409][ C1] Kernel Offset: disabled [ 262.987726][ C1] Rebooting in 86400 seconds..