last executing test programs: 7.305546022s ago: executing program 4 (id=4005): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x11, r0, 0x100000000) 6.830864009s ago: executing program 4 (id=4010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee0f409}]}]}]}, 0x38}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) close(r2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000580)={r3, &(0x7f0000000480)='\x00', 0x202000, &(0x7f00000004c0)={@align=0x5, {0xfff, 0xfffa, 0x65d6, 0x8ce9}}, 0x4, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x1216}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x264, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x811f68c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fcf187e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c304cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb38a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37e68ce6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59e8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7944d7d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7670ec6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23474ae8}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1608}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xead5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f0e51d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x356cc087}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa280}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24b0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45c3ce2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x349a77bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6087e0a4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x273c4154}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42b4be36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76f94b06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5041}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc047}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514dc762}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x462867a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2683}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x643fbe28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29084ff3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33d80b72}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1dcd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22c9bfec}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bea6c2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x393c48c0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48344db5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da2b05f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac78265}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbd8b43f}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8010}, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 6.828089608s ago: executing program 4 (id=4015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6.552129492s ago: executing program 4 (id=4020): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) socket(0x25, 0x4, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x800) 6.253832719s ago: executing program 4 (id=4027): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f00000000c0)='syzkaller\x00', 0x44000, &(0x7f0000000100)={@_ha_fsid={[0x9, 0x813]}, {0x400, 0x4, 0x6, 0xffffffff}}, 0x702f, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x6}, {[0x7, 0x8, 0x7fffffff]}, 0x6, 0xdd, &(0x7f00000001c0)=""/221}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000340)=[0x3, 0x1], 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$kcm(0x29, 0x5, 0x0) (rerun: 64) 5.960691313s ago: executing program 4 (id=4034): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0xfffffffffffffd58, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0xc055) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x20000022) unshare(0x20000400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x108, 0x30, 0x1, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_skbedit={0xf0, 0xe, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x84fc, 0x7, 0x3ff, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7ff, 0x546, 0x10000000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xf}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4930}]}, {0x63, 0x6, "3e0de0ecfc5b6f507f4673bf2eda696ded29aea202bf6b1a5e1531cc91422eb946d60d42e657ee772e6c21b5d672bc99477f39b0778455598510d5b29e3c0b57ff7ffda5e7b8230e00c9bf43b2eadbfa0d1ea5de236a4df8b1d99ce6e7f6d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x108}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000600000004000000000000"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000deffffff00000000950000000000603e0000", @ANYRESHEX=r4], &(0x7f0000000080)='GPL\x00', 0x1, 0xa8, &(0x7f00000002c0)=""/168, 0x41000, 0x70, '\x00', 0x0, @sk_msg=0x7, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="181400002500010324bd5502ffdbdf25010000000400ae"], 0x18}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) write(r9, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000250000001ff80020", 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002d80)=""/4101, 0x1005}, {&(0x7f0000004700)=""/4072, 0xfe8}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/191, 0xbf}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000740)=""/155, 0x9b}], 0x6}, 0x10000) 1.750715273s ago: executing program 0 (id=4101): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'pim6reg0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x28, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x6) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000001c0)=""/62, &(0x7f0000000200)=0x3e) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r7}, &(0x7f0000000300)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) getsockopt$sock_int(r9, 0x1, 0x8, 0x0, &(0x7f0000002c40)) r10 = openat$cgroup_int(r8, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) socket$kcm(0xa, 0x922000000003, 0x11) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r11, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x4880}], 0x1}, 0x7101}], 0x1, 0x4001c00) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000c004f639d2cfb19b5aea5358e2c6b4b16f5663472dcfa9ebc22a5a6b6d291aba5d40d61ac4e98780087585cf1b7e3340c42eb487a7400671197cc0f175af529d542f62913c06958f6eba427efd2be7ee600fb8f6b7bc6f7d90c4655c2abb8a756edd12dc409003849c79d854d35d5ce33fe34207e37a08529b01abaf6dc16a6c97dbdcee318af3ea22bbc09df119", @ANYRES16=r2, @ANYBLOB="010000000000fdffffff1000000018000180140002006e657464657673696d3000000000000008001100a9730000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x10) 1.600247933s ago: executing program 0 (id=4103): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/53, 0x35, 0x100, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) 804.259242ms ago: executing program 3 (id=4122): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0d000b5265c75e01022de90000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000004000050000d5bea2784d005b17"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x8915, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 803.603451ms ago: executing program 2 (id=4123): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000040)='^-,\x00', 0x581002, &(0x7f0000000080)={@align=0x8, {0x3, 0x4, 0x9, 0x6}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x3edd337e}, 0x4, &(0x7f0000000400)=[{0x2, 0xfffffffc, &(0x7f0000000140)='\x00', &(0x7f0000000180)="7bb2b6b18337b5dd5c0bef976da3e163e523a598b5e119710ae43d1b31b81cac475a1f93159a76bbcb560a1790500e550abfe6bca1816363ce5f0860157ee6b127724ee24cc770ec9d690b8a091b7ed59ad3073376be6625da145a356dd7647decf33bb92518bfdcec221aca", 0x6c, 0x3a}, {0x1, 0x81, &(0x7f0000000200)='GPL\x00', &(0x7f0000000240)="85ec7f2ad77464ac797fd4fd690de3db4a476c2e2f69880eaa9239c470b7dde69a30f7d23340f280252b17f78844e6165f2cff7398ca80a75d2dc4a6f78b3c2faab61dd94bd68a2220f2a4be4b2d8ce1c6a441d50303ed9df739c56276381e9be17aa5dceef30d9726eaf9c08947fd8730b3dc82bd265f4c155da985dd9328fb22b4330c6a749c446efaf841fd3e8b42bb714d1af9832b594943b0a612685537e4b2db6492eba9cfea0c33", 0xab, 0x10}, {0x3, 0x3, &(0x7f0000000300)='+(\'\x00', &(0x7f0000000340)="1d03fcff9379ee017c4a236d5e064c4f6997e6f2b00c09c694381cac195d9cbaade12bf9b31dea241280824519bc7b189e2e", 0x32}, {0x3, 0x3, &(0x7f0000000380)='$-,:!-\x00', &(0x7f00000003c0)="03ecd1588d158ffd9f0a", 0xa, 0x2}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 692.913652ms ago: executing program 0 (id=4124): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {0x0, 0xffffe000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ttl={{0x28}, {0x0, 0xa1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x1, 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x3, 0x6], 0x4}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 692.606348ms ago: executing program 3 (id=4125): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 656.762513ms ago: executing program 1 (id=4126): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xff, 0x30}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000030200"/44, @ANYRES32=0x0, @ANYBLOB="1800000000000000841200040000000000000000000000000958cb9e52edec621ad0f470d009ed705456f5a3ec9540edadef1ff25d4a"], 0x48}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xf}, {0x4, 0x7}, {0xe, 0xf}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x9, 0x2, 0x9, 0x7, 0x1}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={r7, @in={{0x2, 0x4e22, @multicast2}}, 0xf3a5, 0xce5b, 0x9, 0x0, 0xa, 0x9, 0x6}, &(0x7f0000000780)=0x9c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0xe63}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044001) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000010003704fc00"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000300ac1414bb0500040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r9 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r9, 0x0, 0x0, 0x2, 0x0, 0x0) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000080)=""/225, &(0x7f0000000180)=0xe1) 610.30761ms ago: executing program 0 (id=4127): r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@local, @remote}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) 556.649752ms ago: executing program 3 (id=4128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa080000000000000800450011907800f000000000000000004e2000089078"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="610cb265933baaaa000100004540002400620c000005119078ac0514aae00000019078e1fd0001800000000000000000"], 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20303, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x448}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r4], 0x80}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r4], 0x80}}, 0x0) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast2}, 0x4, 0x4, 0x4, 0x2}}, 0x26) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYRES32=r8, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x10}, {0xfff1, 0x10}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x10}, {0xfff1, 0x10}}}, 0x24}}, 0x0) close(0x3) 554.659162ms ago: executing program 2 (id=4129): ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x586, 0x5, 0x1000, 0xffff}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c80)=ANY=[], 0x590) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000480)="c1", 0x1}], 0xe0}}], 0x1, 0x200400c0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) 495.016185ms ago: executing program 1 (id=4130): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x34, 0x2}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @const={0x66, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x30, 0x2e, 0x0, 0x30, 0x0]}}, &(0x7f0000000200)=""/59, 0x48, 0x3b, 0x0, 0x7, 0x8c21d06ba001a263}, 0x28) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x8, 0xe477, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 489.101996ms ago: executing program 2 (id=4131): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 384.416339ms ago: executing program 3 (id=4132): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) close(0xffffffffffffffff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 384.097592ms ago: executing program 1 (id=4133): socket$kcm(0x11, 0xa, 0x300) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x8919, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x24044010) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback={0xffffffffffffff8d}, 0x16}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x40) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xfffffffffffffffe) 382.623503ms ago: executing program 2 (id=4134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000001780)=""/93, &(0x7f0000001800)=0x5d) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 315.527959ms ago: executing program 3 (id=4135): r0 = socket(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@setneightbl={0xc8, 0x43, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7}, [@NDTA_PARMS={0x28, 0x6, 0x0, 0x1, [@NDTPA_QUEUE_LEN={0x8, 0x8, 0x7}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x9d9}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x81}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x1}]}, @NDTA_THRESH2={0x8, 0x3, 0x777}, @NDTA_PARMS={0x44, 0x6, 0x0, 0x1, [@NDTPA_UCAST_PROBES={0x8, 0xa, 0x7}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x27b9}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x5}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x1}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x6}, @NDTPA_LOCKTIME={0xc, 0xf, 0x6}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xbe71}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x8, 0x1, r6}]}, @NDTA_PARMS={0x10, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x2}]}, @NDTA_NAME={0xb, 0x1, 'TIPCv2\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x801}, 0x20000840) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) 272.194227ms ago: executing program 2 (id=4136): ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x586, 0x5, 0x1000, 0xffff}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket(0x2d, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c80)=ANY=[], 0x590) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000480)="c1", 0x1}], 0x1}}], 0x1, 0x200400c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x801a}, 0x24040051) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) 216.886551ms ago: executing program 1 (id=4137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r4}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) 199.657449ms ago: executing program 0 (id=4138): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x0, 0x3, 0x0, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xfffffffffffffd12) 188.236858ms ago: executing program 1 (id=4139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x1, 0x6000006, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xce69ced08c3e11b7}]}, 0x60}}, 0x0) 112.613824ms ago: executing program 3 (id=4140): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000000440)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000000440)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0x1010, r2, 0x28647000) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0x1010, r2, 0x28647000) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=[@op={0x18}], 0x18, 0x20000800}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="21df0a937c7b0ffc79b3fe7c899bb7b5af79478f0694a249673d5aaf341cde5fd3d1a911e617b88867625403593ff258e6c98fd82c2c74e16bab1badfa5e0113169a080c770b8890da0878e91aeea4e58f1102a493c1b4018567f69af7aa818911a24e0ef2de8165abf59f70473178dcc7024582c6f06d1541e5ee2c984c127012673a9234c230ed57779b9ed378c0204e4452a9fcdce36495c03ef9", 0x9c}, {&(0x7f0000000580)="f9110af6b79edc50ecf31478929ece802b26147fd551d3d1f29fb8010e62cdcffc97dd7cacb0fa141a73264269ef9dcb35ef63208cf6e2989a20114dd67b32f8ba0a66ad89e3bb61ad5e10453f5f5eadce52b45f0b9d556e4b44796305805c12e066fb7c80d3a1209656a83695c3550d9baf5f73cd33a96cb0a3abaa4b3b1a646f18387687fd4edf30bc2a4cbe54502fcafdcdeb13d16c7c43f6b07c9a29d9338ac3d24e0431cacaf29692ed773139ef355f0aea1dd94ed807b8c36f2e7ce3d3acd5db3d3702040b", 0xc8}], 0x2}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="7b34cf46a25654f6a8ef5b583c2118253e", 0x11}], 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000740)="009c878845d185c3963192ca8a2a2acba0408e5748f05a6697efa675e96d08c99905b072034c554145d601516380e72a5464ce55d84832f511fed5a732ae03d5b8d8f686dfabf629caec37c42bbc23b75426565430a63f8c767a17c279e98f68d680624addbe5e5982d1af4383f869abf4941ae3172f92b4f5", 0x79}], 0x1, &(0x7f0000000800)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4040}], 0x4, 0x0) 105.460702ms ago: executing program 2 (id=4141): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000000c0)=0x9bb, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000002540)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002580)=0x40) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) 81.558978ms ago: executing program 1 (id=4142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x60, 0x0, 0x8000}, 0x0) 0s ago: executing program 0 (id=4143): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) (async, rerun: 64) r0 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x90) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x58e6, 0xa}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080010) r5 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r7, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async, rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) kernel console output (not intermixed with test programs): 151 as target [ 286.601962][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 286.611481][T13824] openvswitch: netlink: Flow actions attr not present in new flow. [ 286.654812][T13826] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2347'. [ 286.722480][T13829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.739540][T13832] openvswitch: netlink: IPv4 tun info is not correct [ 286.864378][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 286.885383][T13842] hsr_slave_1 (unregistering): left promiscuous mode [ 287.005687][T13856] FAULT_INJECTION: forcing a failure. [ 287.005687][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 287.022153][T13856] CPU: 1 UID: 0 PID: 13856 Comm: syz.4.2355 Not tainted syzkaller #0 PREEMPT(full) [ 287.022180][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 287.022191][T13856] Call Trace: [ 287.022199][T13856] [ 287.022207][T13856] dump_stack_lvl+0xe8/0x150 [ 287.022236][T13856] should_fail_ex+0x412/0x560 [ 287.022268][T13856] should_failslab+0xa8/0x100 [ 287.022294][T13856] __kmalloc_cache_noprof+0x88/0x660 [ 287.022314][T13856] ? net_generic+0x1e/0x240 [ 287.022333][T13856] ? ila_xlat_nl_dump_start+0xcf/0x180 [ 287.022368][T13856] ila_xlat_nl_dump_start+0xcf/0x180 [ 287.022390][T13856] genl_start+0x4c3/0x6c0 [ 287.022422][T13856] __netlink_dump_start+0x469/0x7e0 [ 287.022450][T13856] genl_family_rcv_msg_dumpit+0x213/0x310 [ 287.022479][T13856] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 287.022502][T13856] ? genl_get_cmd+0x7f4/0x930 [ 287.022527][T13856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.022548][T13856] ? __pfx_genl_start+0x10/0x10 [ 287.022569][T13856] ? __pfx_genl_dumpit+0x10/0x10 [ 287.022590][T13856] ? __pfx_genl_done+0x10/0x10 [ 287.022618][T13856] ? __lock_acquire+0x6b5/0x2cf0 [ 287.022645][T13856] genl_rcv_msg+0x5e8/0x7a0 [ 287.022675][T13856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.022697][T13856] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 287.022717][T13856] ? __pfx_ila_xlat_nl_dump+0x10/0x10 [ 287.022735][T13856] ? __pfx_ila_xlat_nl_dump_done+0x10/0x10 [ 287.022755][T13856] ? __lock_acquire+0x6b5/0x2cf0 [ 287.022788][T13856] netlink_rcv_skb+0x232/0x4b0 [ 287.022810][T13856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.022832][T13856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.022867][T13856] ? down_read+0x272/0x2e0 [ 287.022883][T13856] ? genl_rcv+0xd/0x40 [ 287.022906][T13856] genl_rcv+0x28/0x40 [ 287.022926][T13856] netlink_unicast+0x80f/0x9b0 [ 287.022953][T13856] ? __pfx_netlink_unicast+0x10/0x10 [ 287.022974][T13856] ? netlink_sendmsg+0x650/0xb40 [ 287.022992][T13856] ? skb_put+0x11b/0x210 [ 287.023013][T13856] netlink_sendmsg+0x813/0xb40 [ 287.023044][T13856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.023063][T13856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 287.023086][T13856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.023108][T13856] ____sys_sendmsg+0x972/0x9f0 [ 287.023137][T13856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.023166][T13856] ? import_iovec+0x73/0xa0 [ 287.023188][T13856] ___sys_sendmsg+0x2a5/0x360 [ 287.023213][T13856] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.023262][T13856] ? __fget_files+0x2a/0x420 [ 287.023276][T13856] ? __fget_files+0x3a0/0x420 [ 287.023300][T13856] __x64_sys_sendmsg+0x1bd/0x2a0 [ 287.023322][T13856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.023357][T13856] ? __pfx_ksys_write+0x10/0x10 [ 287.023386][T13856] do_syscall_64+0x14d/0xf80 [ 287.023407][T13856] ? trace_irq_disable+0x3b/0x150 [ 287.023422][T13856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.023439][T13856] ? clear_bhb_loop+0x40/0x90 [ 287.023459][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.023477][T13856] RIP: 0033:0x7fb3d479c819 [ 287.023495][T13856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.023511][T13856] RSP: 002b:00007fb3d5693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.023530][T13856] RAX: ffffffffffffffda RBX: 00007fb3d4a15fa0 RCX: 00007fb3d479c819 [ 287.023542][T13856] RDX: 0000000000000884 RSI: 00002000000001c0 RDI: 0000000000000004 [ 287.023553][T13856] RBP: 00007fb3d5693090 R08: 0000000000000000 R09: 0000000000000000 [ 287.023563][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.023572][T13856] R13: 00007fb3d4a16038 R14: 00007fb3d4a15fa0 R15: 00007ffe4166dcd8 [ 287.023600][T13856] [ 287.604283][T13858] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2357'. [ 287.681351][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2360'. [ 287.702016][T13874] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 287.717641][T13874] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2361'. [ 287.742638][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2361'. [ 287.786793][T13874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.810762][T13881] SET target dimension over the limit! [ 287.911445][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 287.944751][T13889] openvswitch: netlink: Flow actions attr not present in new flow. [ 287.946163][T13885] bond4: (slave gre0): Device is not bonding slave [ 287.961052][T13885] bond4: option active_slave: invalid value (gre0) [ 287.961155][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2369'. [ 287.978730][T13894] netlink: 'syz.3.2369': attribute type 2 has an invalid length. [ 287.988518][T13885] bond4 (unregistering): Released all slaves [ 288.407498][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 288.578372][T13924] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2381'. [ 288.593498][T13924] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2381'. [ 288.612952][T13924] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2381'. [ 289.083059][T13953] netlink: 'syz.3.2390': attribute type 8 has an invalid length. [ 289.106449][T13953] sch_fq: defrate 0 ignored. [ 289.162690][T13957] syzkaller0: entered promiscuous mode [ 289.182901][T13957] syzkaller0: entered allmulticast mode [ 289.242739][T13964] bond5: Removing last arp target with arp_interval on [ 289.326861][T13973] openvswitch: netlink: Flow actions attr not present in new flow. [ 289.473916][T13979] Cannot find del_set index 1 as target [ 289.936344][T14008] syzkaller0: entered promiscuous mode [ 289.942170][T14008] syzkaller0: entered allmulticast mode [ 290.428745][T14029] FAULT_INJECTION: forcing a failure. [ 290.428745][T14029] name failslab, interval 1, probability 0, space 0, times 0 [ 290.442091][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.3.2414 Not tainted syzkaller #0 PREEMPT(full) [ 290.442118][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 290.442136][T14029] Call Trace: [ 290.442143][T14029] [ 290.442151][T14029] dump_stack_lvl+0xe8/0x150 [ 290.442182][T14029] should_fail_ex+0x412/0x560 [ 290.442214][T14029] should_failslab+0xa8/0x100 [ 290.442240][T14029] __kmalloc_cache_noprof+0x88/0x660 [ 290.442262][T14029] ? sctp_add_bind_addr+0x8c/0x370 [ 290.442288][T14029] sctp_add_bind_addr+0x8c/0x370 [ 290.442313][T14029] sctp_copy_local_addr_list+0x314/0x4f0 [ 290.442337][T14029] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 290.442358][T14029] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 290.442383][T14029] ? sctp_v4_is_any+0x35/0x60 [ 290.442403][T14029] ? sctp_copy_one_addr+0x93/0x360 [ 290.442426][T14029] sctp_bind_addr_copy+0xb3/0x3c0 [ 290.442448][T14029] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 290.442478][T14029] sctp_connect_new_asoc+0x2ff/0x6b0 [ 290.442505][T14029] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 290.442536][T14029] ? __local_bh_enable_ip+0xd0/0x130 [ 290.442557][T14029] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 290.442578][T14029] ? security_sctp_bind_connect+0x7e/0x2c0 [ 290.442605][T14029] sctp_sendmsg+0x1528/0x2c10 [ 290.442643][T14029] ? __pfx_sctp_sendmsg+0x10/0x10 [ 290.442669][T14029] ? aa_sk_perm+0x6d5/0x900 [ 290.442703][T14029] ? __pfx_aa_sk_perm+0x10/0x10 [ 290.442731][T14029] ? sock_rps_record_flow+0x19/0x400 [ 290.442758][T14029] ? inet_sendmsg+0x2f4/0x370 [ 290.442786][T14029] ____sys_sendmsg+0x80a/0x9f0 [ 290.442819][T14029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.442852][T14029] ? import_iovec+0x73/0xa0 [ 290.442878][T14029] ___sys_sendmsg+0x2a5/0x360 [ 290.442906][T14029] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.442934][T14029] ? kstrtouint+0x6e/0xe0 [ 290.442987][T14029] ? __fget_files+0x2a/0x420 [ 290.443003][T14029] ? __fget_files+0x3a0/0x420 [ 290.443029][T14029] __sys_sendmmsg+0x27c/0x4e0 [ 290.443056][T14029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 290.443076][T14029] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 290.443128][T14029] ? ksys_write+0x242/0x270 [ 290.443150][T14029] ? __pfx_ksys_write+0x10/0x10 [ 290.443178][T14029] __x64_sys_sendmmsg+0xa0/0xc0 [ 290.443204][T14029] do_syscall_64+0x14d/0xf80 [ 290.443227][T14029] ? trace_irq_disable+0x3b/0x150 [ 290.443243][T14029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.443261][T14029] ? clear_bhb_loop+0x40/0x90 [ 290.443283][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.443301][T14029] RIP: 0033:0x7f7d4959c819 [ 290.443319][T14029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.443335][T14029] RSP: 002b:00007f7d4a390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.443355][T14029] RAX: ffffffffffffffda RBX: 00007f7d49815fa0 RCX: 00007f7d4959c819 [ 290.443368][T14029] RDX: 0000000000000001 RSI: 0000200000004240 RDI: 0000000000000003 [ 290.443378][T14029] RBP: 00007f7d4a390090 R08: 0000000000000000 R09: 0000000000000000 [ 290.443390][T14029] R10: 00000000240c4850 R11: 0000000000000246 R12: 0000000000000002 [ 290.443401][T14029] R13: 00007f7d49816038 R14: 00007f7d49815fa0 R15: 00007ffea403a078 [ 290.443432][T14029] [ 290.822437][T14035] sctp: [Deprecated]: syz.0.2416 (pid 14035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.822437][T14035] Use struct sctp_sack_info instead [ 290.877396][T14041] sctp: [Deprecated]: syz.0.2416 (pid 14041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.877396][T14041] Use struct sctp_sack_info instead [ 291.757198][T14048] openvswitch: netlink: Flow actions attr not present in new flow. [ 291.910271][ T49] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 291.920328][ T49] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 291.930058][ T5950] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 291.999996][T14053] x_tables: duplicate entry at hook 3 [ 292.123090][T14064] netlink: 'syz.2.2426': attribute type 4 has an invalid length. [ 292.226466][T14073] openvswitch: netlink: Flow actions attr not present in new flow. [ 292.633451][T14107] __nla_validate_parse: 7 callbacks suppressed [ 292.633472][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 292.654677][T14107] openvswitch: netlink: Flow actions attr not present in new flow. [ 292.792022][ T5950] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 292.874351][ T5950] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 293.084591][T14127] Cannot find del_set index 1 as target [ 293.096508][T14128] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 293.215473][T14128] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.224510][T14133] bond4: entered allmulticast mode [ 293.336201][T14143] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2454'. [ 293.383818][T14143] syzkaller0: entered promiscuous mode [ 293.389627][T14143] syzkaller0: entered allmulticast mode [ 293.621320][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.632801][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.713104][T14166] syzkaller0: entered promiscuous mode [ 293.723816][T14166] syzkaller0: entered allmulticast mode [ 293.767485][T14168] vcan0: entered allmulticast mode [ 293.832906][T14176] tipc: Enabled bearer , priority 22 [ 293.842241][T14176] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 293.962518][T14180] netlink: 'syz.4.2469': attribute type 4 has an invalid length. [ 293.972320][T14183] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2470'. [ 293.974148][T14180] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2469'. [ 293.994822][T14180] block nbd0: not configured, cannot reconfigure [ 294.006901][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2471'. [ 294.038612][T14186] syzkaller0: entered promiscuous mode [ 294.044249][T14186] syzkaller0: entered allmulticast mode [ 294.055186][T14186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2470'. [ 294.206872][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 294.215967][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 294.396963][T14214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2481'. [ 294.464097][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2483'. [ 294.537407][T14222] Cannot find del_set index 1 as target [ 294.716925][T14230] syzkaller0: entered promiscuous mode [ 294.734064][T14230] syzkaller0: entered allmulticast mode [ 294.862201][T14243] netlink: 'syz.4.2493': attribute type 9 has an invalid length. [ 295.000282][T14242] syzkaller0: entered promiscuous mode [ 295.007099][T14242] syzkaller0: entered allmulticast mode [ 295.178642][T14262] 8021q: VLANs not supported on lo [ 295.198105][T14262] netlink: 'syz.1.2500': attribute type 11 has an invalid length. [ 295.332305][T14271] syzkaller0: entered promiscuous mode [ 295.337894][T14271] syzkaller0: entered allmulticast mode [ 295.565888][T14284] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 295.595163][T14287] syzkaller0: entered promiscuous mode [ 295.602801][T14287] syzkaller0: entered allmulticast mode [ 295.717421][T14245] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 295.882652][T14304] syzkaller0: entered promiscuous mode [ 295.891859][T14304] syzkaller0: entered allmulticast mode [ 295.964917][T14310] netlink: 'syz.3.2521': attribute type 51 has an invalid length. [ 295.989982][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 296.046935][T14315] tipc: Enabled bearer , priority 0 [ 296.133350][T14309] syzkaller0: entered promiscuous mode [ 296.139021][T14309] syzkaller0: entered allmulticast mode [ 296.160554][T14309] tipc: Resetting bearer [ 296.260155][ T136] tipc: Resetting bearer [ 296.281760][T14307] tipc: Resetting bearer [ 296.463683][T14344] netlink: 'syz.0.2531': attribute type 7 has an invalid length. [ 296.479239][T14344] netlink: 'syz.0.2531': attribute type 8 has an invalid length. [ 297.030782][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 297.679740][T14307] tipc: Disabling bearer [ 297.706043][T14338] batadv_slave_1: mtu less than device minimum [ 298.080462][T14362] netlink: 'syz.4.2536': attribute type 5 has an invalid length. [ 298.163627][T14373] FAULT_INJECTION: forcing a failure. [ 298.163627][T14373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.197970][T14373] CPU: 0 UID: 0 PID: 14373 Comm: syz.0.2543 Not tainted syzkaller #0 PREEMPT(full) [ 298.197997][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.198007][T14373] Call Trace: [ 298.198013][T14373] [ 298.198020][T14373] dump_stack_lvl+0xe8/0x150 [ 298.198049][T14373] should_fail_ex+0x412/0x560 [ 298.198078][T14373] _copy_from_user+0x2d/0xb0 [ 298.198099][T14373] ___sys_sendmsg+0x1c6/0x360 [ 298.198127][T14373] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.198180][T14373] ? __fget_files+0x2a/0x420 [ 298.198197][T14373] ? __fget_files+0x3a0/0x420 [ 298.198221][T14373] __x64_sys_sendmsg+0x1bd/0x2a0 [ 298.198246][T14373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.198276][T14373] ? __pfx_ksys_write+0x10/0x10 [ 298.198306][T14373] do_syscall_64+0x14d/0xf80 [ 298.198329][T14373] ? trace_irq_disable+0x3b/0x150 [ 298.198345][T14373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.198362][T14373] ? clear_bhb_loop+0x40/0x90 [ 298.198381][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.198397][T14373] RIP: 0033:0x7fe19959c819 [ 298.198414][T14373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.198429][T14373] RSP: 002b:00007fe19a3c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.198449][T14373] RAX: ffffffffffffffda RBX: 00007fe199815fa0 RCX: 00007fe19959c819 [ 298.198462][T14373] RDX: 0000000000040004 RSI: 0000200000000440 RDI: 0000000000000003 [ 298.198473][T14373] RBP: 00007fe19a3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 298.198488][T14373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.198499][T14373] R13: 00007fe199816038 R14: 00007fe199815fa0 R15: 00007ffd58c5d548 [ 298.198527][T14373] [ 299.269336][T14443] __nla_validate_parse: 11 callbacks suppressed [ 299.269357][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2562'. [ 299.313837][T14443] batman_adv: batadv0: Adding interface: dummy0 [ 299.330685][T14443] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.383890][T14443] batman_adv: batadv0: Interface activated: dummy0 [ 299.443440][T14450] batadv0: mtu less than device minimum [ 299.460766][T14450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.472888][T14450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.484601][T14450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.496336][T14450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.508045][T14450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.512180][T14456] FAULT_INJECTION: forcing a failure. [ 299.512180][T14456] name failslab, interval 1, probability 0, space 0, times 0 [ 299.519703][T14450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.542820][T14450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.552816][T14456] CPU: 0 UID: 0 PID: 14456 Comm: syz.2.2559 Not tainted syzkaller #0 PREEMPT(full) [ 299.552844][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 299.552855][T14456] Call Trace: [ 299.552862][T14456] [ 299.552869][T14456] dump_stack_lvl+0xe8/0x150 [ 299.552898][T14456] should_fail_ex+0x412/0x560 [ 299.552929][T14456] should_failslab+0xa8/0x100 [ 299.552952][T14456] ? security_inode_alloc+0x39/0x310 [ 299.552970][T14456] kmem_cache_alloc_noprof+0x87/0x650 [ 299.552996][T14456] security_inode_alloc+0x39/0x310 [ 299.553016][T14456] inode_init_always_gfp+0x9ed/0xdc0 [ 299.553045][T14456] ? __pfx_sock_alloc_inode+0x10/0x10 [ 299.553062][T14456] alloc_inode+0x82/0x1b0 [ 299.553085][T14456] __sock_create+0x12d/0x9d0 [ 299.553112][T14456] __sys_socket+0xd6/0x1b0 [ 299.553134][T14456] __x64_sys_socket+0x7a/0x90 [ 299.553152][T14456] do_syscall_64+0x14d/0xf80 [ 299.553172][T14456] ? trace_irq_disable+0x3b/0x150 [ 299.553185][T14456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.553201][T14456] ? clear_bhb_loop+0x40/0x90 [ 299.553220][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.553237][T14456] RIP: 0033:0x7fa44e79c819 [ 299.553253][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.553267][T14456] RSP: 002b:00007fa44f5c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 299.553286][T14456] RAX: ffffffffffffffda RBX: 00007fa44ea16180 RCX: 00007fa44e79c819 [ 299.553299][T14456] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000008 [ 299.553314][T14456] RBP: 00007fa44f5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 299.553324][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.553335][T14456] R13: 00007fa44ea16218 R14: 00007fa44ea16180 R15: 00007fff411dfcf8 [ 299.553361][T14456] [ 299.553748][T14456] socket: no more sockets [ 299.758768][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 299.889666][T14472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2572'. [ 300.063754][T14478] 8021q: VLANs not supported on lo [ 300.078534][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 300.111560][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2577'. [ 300.409547][T14511] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.447984][T14511] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 300.463327][T14511] bridge_slave_1: left allmulticast mode [ 300.474342][T14511] bridge_slave_1: entered allmulticast mode [ 300.481105][T14511] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 300.615232][T14522] netlink: 'syz.2.2590': attribute type 1 has an invalid length. [ 300.843940][T14540] syzkaller0: entered promiscuous mode [ 300.849623][T14540] syzkaller0: entered allmulticast mode [ 301.306041][T14520] netlink: 816 bytes leftover after parsing attributes in process `syz.1.2589'. [ 301.648886][T14565] block nbd0: not configured, cannot reconfigure [ 301.733988][T14571] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2605'. [ 301.823765][T14571] syzkaller0: entered promiscuous mode [ 301.829460][T14571] syzkaller0: entered allmulticast mode [ 301.884148][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2607'. [ 301.897739][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 302.111883][T14592] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003 [ 302.157720][T14588] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2612'. [ 302.190870][T14588] bond0 (unregistering): left promiscuous mode [ 302.202506][T14588] bridge_slave_1: left promiscuous mode [ 302.219740][T14588] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 302.234437][T14588] bond0 (unregistering): Released all slaves [ 302.297065][T14602] netlink: 'syz.4.2618': attribute type 32 has an invalid length. [ 302.420551][T14610] FAULT_INJECTION: forcing a failure. [ 302.420551][T14610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.443680][T14610] CPU: 1 UID: 0 PID: 14610 Comm: syz.0.2622 Not tainted syzkaller #0 PREEMPT(full) [ 302.443707][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 302.443718][T14610] Call Trace: [ 302.443725][T14610] [ 302.443732][T14610] dump_stack_lvl+0xe8/0x150 [ 302.443766][T14610] should_fail_ex+0x412/0x560 [ 302.443796][T14610] _copy_from_user+0x2d/0xb0 [ 302.443817][T14610] ___sys_sendmsg+0x1c6/0x360 [ 302.443845][T14610] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.443900][T14610] ? __fget_files+0x2a/0x420 [ 302.443916][T14610] ? __fget_files+0x3a0/0x420 [ 302.443941][T14610] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.443966][T14610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.443994][T14610] ? __pfx_ksys_write+0x10/0x10 [ 302.444022][T14610] do_syscall_64+0x14d/0xf80 [ 302.444044][T14610] ? trace_irq_disable+0x3b/0x150 [ 302.444059][T14610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.444076][T14610] ? clear_bhb_loop+0x40/0x90 [ 302.444097][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.444114][T14610] RIP: 0033:0x7fe19959c819 [ 302.444130][T14610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.444145][T14610] RSP: 002b:00007fe19a3c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.444163][T14610] RAX: ffffffffffffffda RBX: 00007fe199815fa0 RCX: 00007fe19959c819 [ 302.444199][T14610] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 302.444210][T14610] RBP: 00007fe19a3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 302.444220][T14610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.444230][T14610] R13: 00007fe199816038 R14: 00007fe199815fa0 R15: 00007ffd58c5d548 [ 302.444264][T14610] [ 302.626478][T14566] syz.1.2602 (14566) used greatest stack depth: 17472 bytes left [ 302.819198][T14618] syzkaller1: entered promiscuous mode [ 302.828411][T14618] syzkaller1: entered allmulticast mode [ 303.416610][T14669] : entered promiscuous mode [ 303.590929][T14676] team0 (unregistering): Port device batadv1 removed [ 303.825379][T14695] syzkaller0: entered promiscuous mode [ 303.840469][T14695] syzkaller0: entered allmulticast mode [ 304.197912][T14728] FAULT_INJECTION: forcing a failure. [ 304.197912][T14728] name failslab, interval 1, probability 0, space 0, times 0 [ 304.214591][T14728] CPU: 0 UID: 0 PID: 14728 Comm: syz.3.2656 Not tainted syzkaller #0 PREEMPT(full) [ 304.214615][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.214625][T14728] Call Trace: [ 304.214632][T14728] [ 304.214640][T14728] dump_stack_lvl+0xe8/0x150 [ 304.214669][T14728] should_fail_ex+0x412/0x560 [ 304.214697][T14728] should_failslab+0xa8/0x100 [ 304.214722][T14728] __kvmalloc_node_noprof+0x178/0x8a0 [ 304.214745][T14728] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 304.214775][T14728] __nf_hook_entries_try_shrink+0x328/0x700 [ 304.214806][T14728] __nf_unregister_net_hook+0x4cc/0x6f0 [ 304.214835][T14728] nf_unregister_net_hooks+0xcb/0x140 [ 304.214860][T14728] ip_vs_unregister_hooks+0xbc/0x120 [ 304.214888][T14728] ip_vs_unlink_service+0x40d/0xa30 [ 304.214921][T14728] ip_vs_genl_set_cmd+0x5e9/0x1590 [ 304.214948][T14728] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 304.214988][T14728] ? rcu_is_watching+0x15/0xb0 [ 304.215030][T14728] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 304.215063][T14728] genl_family_rcv_msg_doit+0x22a/0x330 [ 304.215095][T14728] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 304.215141][T14728] ? bpf_lsm_capable+0x9/0x20 [ 304.215165][T14728] ? security_capable+0x7e/0x2c0 [ 304.215197][T14728] genl_rcv_msg+0x61c/0x7a0 [ 304.215228][T14728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.215250][T14728] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 304.215274][T14728] ? __lock_acquire+0x6b5/0x2cf0 [ 304.215309][T14728] netlink_rcv_skb+0x232/0x4b0 [ 304.215330][T14728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.215355][T14728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.215391][T14728] ? down_read+0x272/0x2e0 [ 304.215407][T14728] ? genl_rcv+0xd/0x40 [ 304.215432][T14728] genl_rcv+0x28/0x40 [ 304.215452][T14728] netlink_unicast+0x80f/0x9b0 [ 304.215480][T14728] ? __pfx_netlink_unicast+0x10/0x10 [ 304.215500][T14728] ? netlink_sendmsg+0x650/0xb40 [ 304.215518][T14728] ? skb_put+0x11b/0x210 [ 304.215545][T14728] netlink_sendmsg+0x813/0xb40 [ 304.215575][T14728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.215598][T14728] ? aa_sock_msg_perm+0xf1/0x1b0 [ 304.215624][T14728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.215646][T14728] ____sys_sendmsg+0x972/0x9f0 [ 304.215678][T14728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.215709][T14728] ? import_iovec+0x73/0xa0 [ 304.215732][T14728] ___sys_sendmsg+0x2a5/0x360 [ 304.215759][T14728] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.215821][T14728] ? __fget_files+0x2a/0x420 [ 304.215837][T14728] ? __fget_files+0x3a0/0x420 [ 304.215863][T14728] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.215889][T14728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.215922][T14728] ? __pfx_ksys_write+0x10/0x10 [ 304.215955][T14728] do_syscall_64+0x14d/0xf80 [ 304.215977][T14728] ? trace_irq_disable+0x3b/0x150 [ 304.215991][T14728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.216008][T14728] ? clear_bhb_loop+0x40/0x90 [ 304.216030][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.216047][T14728] RIP: 0033:0x7f7d4959c819 [ 304.216063][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.216078][T14728] RSP: 002b:00007f7d4a390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.216096][T14728] RAX: ffffffffffffffda RBX: 00007f7d49815fa0 RCX: 00007f7d4959c819 [ 304.216109][T14728] RDX: 0000000000040004 RSI: 0000200000000440 RDI: 0000000000000003 [ 304.216119][T14728] RBP: 00007f7d4a390090 R08: 0000000000000000 R09: 0000000000000000 [ 304.216136][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.216145][T14728] R13: 00007f7d49816038 R14: 00007f7d49815fa0 R15: 00007ffea403a078 [ 304.216175][T14728] [ 304.429974][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 304.761300][T14740] syzkaller0: entered promiscuous mode [ 304.766947][T14740] syzkaller0: entered allmulticast mode [ 304.920691][T14747] __nla_validate_parse: 10 callbacks suppressed [ 304.920713][T14747] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2665'. [ 305.058974][T14755] ieee802154 phy1 wpan1: encryption failed: -22 [ 305.069457][T14751] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 305.268943][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 305.328669][T14766] hsr0: entered promiscuous mode [ 305.345169][T14766] macvlan3: entered allmulticast mode [ 305.356599][T14766] hsr0: entered allmulticast mode [ 305.369578][T14766] hsr_slave_0: entered allmulticast mode [ 305.382033][T14766] hsr_slave_1: entered allmulticast mode [ 305.448475][T14773] syzkaller0: entered promiscuous mode [ 305.464091][T14773] syzkaller0: entered allmulticast mode [ 305.532623][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 305.623395][T14779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2675'. [ 305.623736][T14781] net_ratelimit: 16 callbacks suppressed [ 305.623750][T14781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.670321][T14783] syzkaller0: entered promiscuous mode [ 305.700425][T14783] syzkaller0: entered allmulticast mode [ 305.892869][T14797] tipc: Enabling of bearer rejected, failed to enable media [ 306.022832][T14800] SET target dimension over the limit! [ 306.208708][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 306.272062][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 306.578595][T14836] lo speed is unknown, defaulting to 1000 [ 306.595669][T14838] netlink: 'syz.3.2690': attribute type 1 has an invalid length. [ 306.609430][T14798] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 306.638909][T14838] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 306.666512][T14841] lo: entered promiscuous mode [ 306.675124][T14841] lo: left allmulticast mode [ 306.681413][T14841] tunl0: entered promiscuous mode [ 306.687016][T14841] tunl0: left allmulticast mode [ 306.692741][T14841] gre0: entered promiscuous mode [ 306.697890][T14841] gre0: left allmulticast mode [ 306.717577][T14841] gretap0: entered promiscuous mode [ 306.742775][T14841] gretap0: left allmulticast mode [ 306.754023][T14841] erspan0: entered promiscuous mode [ 306.773795][T14841] erspan0: left allmulticast mode [ 306.787069][T14841] ip_vti0: entered promiscuous mode [ 306.809880][T14841] ip_vti0: left allmulticast mode [ 306.927866][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'. [ 306.942997][T14850] Cannot find del_set index 1 as target [ 306.962134][T14851] dvmrp0: entered allmulticast mode [ 306.981171][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2695'. [ 307.011060][T14852] netlink: 'syz.1.2695': attribute type 2 has an invalid length. [ 307.025195][T14852] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2695'. [ 307.064651][T14855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.082342][T14857] Cannot find add_set index 0 as target [ 307.242861][T14868] FAULT_INJECTION: forcing a failure. [ 307.242861][T14868] name failslab, interval 1, probability 0, space 0, times 0 [ 307.262688][T14868] CPU: 1 UID: 0 PID: 14868 Comm: syz.1.2702 Not tainted syzkaller #0 PREEMPT(full) [ 307.262715][T14868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.262726][T14868] Call Trace: [ 307.262734][T14868] [ 307.262742][T14868] dump_stack_lvl+0xe8/0x150 [ 307.262772][T14868] should_fail_ex+0x412/0x560 [ 307.262803][T14868] should_failslab+0xa8/0x100 [ 307.262826][T14868] ? skb_clone+0x212/0x3a0 [ 307.262850][T14868] kmem_cache_alloc_noprof+0x87/0x650 [ 307.262870][T14868] ? __netlink_lookup+0xc6/0x8b0 [ 307.262898][T14868] skb_clone+0x212/0x3a0 [ 307.262933][T14868] __netlink_deliver_tap+0x404/0x850 [ 307.262962][T14868] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.262980][T14868] netlink_deliver_tap+0x19c/0x1b0 [ 307.262999][T14868] netlink_unicast+0x7e3/0x9b0 [ 307.263025][T14868] ? __pfx_netlink_unicast+0x10/0x10 [ 307.263043][T14868] ? netlink_sendmsg+0x650/0xb40 [ 307.263060][T14868] ? skb_put+0x11b/0x210 [ 307.263083][T14868] netlink_sendmsg+0x813/0xb40 [ 307.263110][T14868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.263131][T14868] ? aa_sock_msg_perm+0xf1/0x1b0 [ 307.263156][T14868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.263179][T14868] ____sys_sendmsg+0x972/0x9f0 [ 307.263210][T14868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.263241][T14868] ? import_iovec+0x73/0xa0 [ 307.263264][T14868] ___sys_sendmsg+0x2a5/0x360 [ 307.263293][T14868] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.263349][T14868] ? __fget_files+0x2a/0x420 [ 307.263365][T14868] ? __fget_files+0x3a0/0x420 [ 307.263391][T14868] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.263416][T14868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.263448][T14868] ? __pfx_ksys_write+0x10/0x10 [ 307.263479][T14868] do_syscall_64+0x14d/0xf80 [ 307.263502][T14868] ? trace_irq_disable+0x3b/0x150 [ 307.263518][T14868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.263536][T14868] ? clear_bhb_loop+0x40/0x90 [ 307.263562][T14868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.263580][T14868] RIP: 0033:0x7f3f6199c819 [ 307.263597][T14868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.263612][T14868] RSP: 002b:00007f3f6288e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.263631][T14868] RAX: ffffffffffffffda RBX: 00007f3f61c15fa0 RCX: 00007f3f6199c819 [ 307.263644][T14868] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 307.263655][T14868] RBP: 00007f3f6288e090 R08: 0000000000000000 R09: 0000000000000000 [ 307.263665][T14868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.263675][T14868] R13: 00007f3f61c16038 R14: 00007f3f61c15fa0 R15: 00007ffd160a4378 [ 307.263701][T14868] [ 307.267339][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2701'. [ 307.603602][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.613481][ T172] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.632691][ T172] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.648643][T14876] bond_slave_0: entered promiscuous mode [ 307.824841][ T172] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.838220][T14882] syzkaller0: entered promiscuous mode [ 307.843946][T14882] syzkaller0: entered allmulticast mode [ 307.895056][T14875] bond_slave_0: left promiscuous mode [ 307.910331][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 308.169631][T14888] delete_channel: no stack [ 308.183777][T14897] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20001 [ 308.225853][T14902] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 308.243783][T14902] netlink: 'syz.4.2714': attribute type 3 has an invalid length. [ 309.004511][T14950] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.025556][T14950] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 309.982088][T15012] __nla_validate_parse: 10 callbacks suppressed [ 309.982108][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2757'. [ 310.024943][T15017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2759'. [ 310.125538][T15019] macsec2: entered promiscuous mode [ 310.136379][T15019] batadv0: entered promiscuous mode [ 310.144118][T15023] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2762'. [ 310.155738][T15019] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 310.166752][T15019] batadv0: left promiscuous mode [ 310.174052][T15025] FAULT_INJECTION: forcing a failure. [ 310.174052][T15025] name failslab, interval 1, probability 0, space 0, times 0 [ 310.190545][T15025] CPU: 0 UID: 0 PID: 15025 Comm: syz.4.2763 Not tainted syzkaller #0 PREEMPT(full) [ 310.190571][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.190581][T15025] Call Trace: [ 310.190588][T15025] [ 310.190596][T15025] dump_stack_lvl+0xe8/0x150 [ 310.190626][T15025] should_fail_ex+0x412/0x560 [ 310.190658][T15025] should_failslab+0xa8/0x100 [ 310.190683][T15025] __kmalloc_cache_noprof+0x88/0x660 [ 310.190702][T15025] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 310.190734][T15025] ? nft_trans_table_add+0x56/0x430 [ 310.190764][T15025] nft_trans_table_add+0x56/0x430 [ 310.190794][T15025] nf_tables_newtable+0xce3/0x1910 [ 310.190837][T15025] nfnetlink_rcv+0x1240/0x27b0 [ 310.190853][T15025] ? is_bpf_text_address+0x26/0x2b0 [ 310.190906][T15025] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 310.190934][T15025] ? __lock_acquire+0x6b5/0x2cf0 [ 310.190990][T15025] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.191027][T15025] netlink_unicast+0x80f/0x9b0 [ 310.191054][T15025] ? __pfx_netlink_unicast+0x10/0x10 [ 310.191074][T15025] ? netlink_sendmsg+0x650/0xb40 [ 310.191092][T15025] ? skb_put+0x11b/0x210 [ 310.191118][T15025] netlink_sendmsg+0x813/0xb40 [ 310.191147][T15025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.191171][T15025] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.191198][T15025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.191218][T15025] ____sys_sendmsg+0x972/0x9f0 [ 310.191246][T15025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.191275][T15025] ? import_iovec+0x73/0xa0 [ 310.191299][T15025] ___sys_sendmsg+0x2a5/0x360 [ 310.191328][T15025] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.191384][T15025] ? __fget_files+0x2a/0x420 [ 310.191400][T15025] ? __fget_files+0x3a0/0x420 [ 310.191425][T15025] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.191450][T15025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.191481][T15025] ? __pfx_ksys_write+0x10/0x10 [ 310.191511][T15025] do_syscall_64+0x14d/0xf80 [ 310.191533][T15025] ? trace_irq_disable+0x3b/0x150 [ 310.191549][T15025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.191570][T15025] ? clear_bhb_loop+0x40/0x90 [ 310.191589][T15025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.191606][T15025] RIP: 0033:0x7fb3d479c819 [ 310.191622][T15025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.191636][T15025] RSP: 002b:00007fb3d5693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.191655][T15025] RAX: ffffffffffffffda RBX: 00007fb3d4a15fa0 RCX: 00007fb3d479c819 [ 310.191668][T15025] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 310.191679][T15025] RBP: 00007fb3d5693090 R08: 0000000000000000 R09: 0000000000000000 [ 310.191690][T15025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.191699][T15025] R13: 00007fb3d4a16038 R14: 00007fb3d4a15fa0 R15: 00007ffe4166dcd8 [ 310.191736][T15025] [ 310.846142][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 310.964633][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2773'. [ 310.994819][T15056] sctp: [Deprecated]: syz.1.2774 (pid 15056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.994819][T15056] Use struct sctp_sack_info instead [ 311.065141][T15056] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 311.204594][T15069] netlink: 808 bytes leftover after parsing attributes in process `syz.2.2780'. [ 311.321682][T15071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.334877][T15070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.365233][T15081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2784'. [ 311.386819][T15081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2784'. [ 311.506484][T15086] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 [ 311.590716][T15092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2787'. [ 311.792374][T15103] syzkaller0: entered promiscuous mode [ 311.797979][T15103] syzkaller0: entered allmulticast mode [ 311.956424][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2796'. [ 311.971872][T15118] block nbd0: not configured, cannot reconfigure [ 312.125784][T15126] pim6reg: entered allmulticast mode [ 312.142295][T15130] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 312.259069][T15130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.280674][T15130] vlan2: entered promiscuous mode [ 312.285762][T15130] bond4: entered promiscuous mode [ 312.292403][T15130] vlan2: entered allmulticast mode [ 312.297554][T15130] bond4: entered allmulticast mode [ 312.381163][T15130] bond4: (slave gretap1): making interface the new active one [ 312.394478][T15130] gretap1: entered promiscuous mode [ 312.406737][T15130] gretap1: entered allmulticast mode [ 312.432647][T15130] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 312.637817][T15157] netlink: 'syz.2.2809': attribute type 10 has an invalid length. [ 312.686172][T15159] openvswitch: netlink: IP tunnel dst address not specified [ 312.801699][T15142] syzkaller0: entered promiscuous mode [ 312.811410][T15142] syzkaller0: entered allmulticast mode [ 312.872969][T15170] syzkaller0: entered promiscuous mode [ 312.878540][T15170] syzkaller0: entered allmulticast mode [ 313.364582][T15203] netlink: 'syz.0.2827': attribute type 1 has an invalid length. [ 313.388616][T15209] Cannot find add_set index 4 as target [ 313.391670][T15210] Cannot find add_set index 4 as target [ 313.410847][T15203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.420087][T15202] syzkaller0: entered promiscuous mode [ 313.425627][T15202] syzkaller0: entered allmulticast mode [ 314.121785][T15255] syzkaller0: entered promiscuous mode [ 314.136358][T15255] syzkaller0: entered allmulticast mode [ 314.156796][T15260] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 314.583398][T15276] "syz.4.2851" (15276) uses obsolete ecb(arc4) skcipher [ 314.703552][T15297] FAULT_INJECTION: forcing a failure. [ 314.703552][T15297] name failslab, interval 1, probability 0, space 0, times 0 [ 314.723919][T15295] Cannot find add_set index 0 as target [ 314.741035][T15297] CPU: 0 UID: 0 PID: 15297 Comm: syz.0.2858 Not tainted syzkaller #0 PREEMPT(full) [ 314.741058][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.741067][T15297] Call Trace: [ 314.741073][T15297] [ 314.741080][T15297] dump_stack_lvl+0xe8/0x150 [ 314.741109][T15297] should_fail_ex+0x412/0x560 [ 314.741137][T15297] should_failslab+0xa8/0x100 [ 314.741162][T15297] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 314.741184][T15297] ? __alloc_skb+0x1d0/0x7d0 [ 314.741203][T15297] ? __local_bh_enable_ip+0xd0/0x130 [ 314.741228][T15297] __alloc_skb+0x1d0/0x7d0 [ 314.741252][T15297] netlink_dump+0x1ef/0xe80 [ 314.741274][T15297] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 314.741296][T15297] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.741318][T15297] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 314.741342][T15297] ? __pfx_netlink_dump+0x10/0x10 [ 314.741382][T15297] netlink_recvmsg+0x690/0xa50 [ 314.741409][T15297] ? __lock_acquire+0x6b5/0x2cf0 [ 314.741437][T15297] ? __pfx_netlink_recvmsg+0x10/0x10 [ 314.741462][T15297] ? aa_sock_msg_perm+0xf1/0x1b0 [ 314.741487][T15297] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 314.741504][T15297] ? security_socket_recvmsg+0x7e/0x2c0 [ 314.741522][T15297] ? __pfx_netlink_recvmsg+0x10/0x10 [ 314.741540][T15297] sock_recvmsg+0x172/0x1b0 [ 314.741558][T15297] ____sys_recvmsg+0x1e6/0x4a0 [ 314.741587][T15297] ? __pfx_____sys_recvmsg+0x10/0x10 [ 314.741620][T15297] ? import_iovec+0x73/0xa0 [ 314.741641][T15297] ___sys_recvmsg+0x215/0x590 [ 314.741669][T15297] ? __pfx____sys_recvmsg+0x10/0x10 [ 314.741713][T15297] ? __fget_files+0x3a0/0x420 [ 314.741739][T15297] do_recvmmsg+0x334/0x800 [ 314.741770][T15297] ? __pfx_do_recvmmsg+0x10/0x10 [ 314.741801][T15297] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.741841][T15297] __x64_sys_recvmmsg+0x198/0x250 [ 314.741866][T15297] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 314.741899][T15297] do_syscall_64+0x14d/0xf80 [ 314.741920][T15297] ? trace_irq_disable+0x3b/0x150 [ 314.741935][T15297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.741953][T15297] ? clear_bhb_loop+0x40/0x90 [ 314.741974][T15297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.741992][T15297] RIP: 0033:0x7fe19959c819 [ 314.742010][T15297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.742026][T15297] RSP: 002b:00007fe19a3c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 314.742044][T15297] RAX: ffffffffffffffda RBX: 00007fe199815fa0 RCX: 00007fe19959c819 [ 314.742062][T15297] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 314.742073][T15297] RBP: 00007fe19a3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 314.742085][T15297] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 314.742096][T15297] R13: 00007fe199816038 R14: 00007fe199815fa0 R15: 00007ffd58c5d548 [ 314.742124][T15297] [ 315.071888][T15299] syzkaller0: entered promiscuous mode [ 315.077409][T15299] syzkaller0: entered allmulticast mode [ 315.125760][T15304] __nla_validate_parse: 16 callbacks suppressed [ 315.125778][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2863'. [ 315.392582][T15322] netlink: 'syz.2.2866': attribute type 16 has an invalid length. [ 315.413620][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2866'. [ 315.784462][T15337] SET target dimension over the limit! [ 316.832695][T15314] xfrm0: left allmulticast mode [ 316.892732][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2872'. [ 316.901887][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2872'. [ 317.077538][T15353] netlink: 'syz.1.2874': attribute type 2 has an invalid length. [ 317.142442][T15357] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 317.200133][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.401894][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 317.447195][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2882'. [ 317.517130][T15385] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 317.806092][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 317.840479][T15396] : renamed from hsr0 (while UP) [ 317.861428][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 317.871110][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 317.880413][T15416] netlink: 'syz.3.2892': attribute type 15 has an invalid length. [ 317.974137][ T35] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 317.986539][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 318.006218][ T35] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 318.021018][T15423] netlink: Unknown conntrack attr (0) [ 318.034699][ T35] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 318.054772][T15416] netlink: 'syz.3.2892': attribute type 15 has an invalid length. [ 318.078991][ T35] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 318.469677][T15448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.551624][T15452] netlink: 'syz.1.2903': attribute type 4 has an invalid length. [ 318.713422][T15461] Cannot find add_set index 0 as target [ 318.723219][T15465] IPv6: addrconf: prefix option has invalid lifetime [ 318.758777][T15465] pimreg3: entered allmulticast mode [ 319.206455][T15498] only policy match revision 0 supported [ 319.206479][T15498] unable to load match [ 319.298487][T15507] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 319.744589][T15536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.975375][T15553] Cannot find del_set index 1 as target [ 320.105709][T15562] syzkaller0: entered promiscuous mode [ 320.117382][T15562] syzkaller0: entered allmulticast mode [ 320.284538][T15571] lo speed is unknown, defaulting to 1000 [ 320.306142][T15574] __nla_validate_parse: 11 callbacks suppressed [ 320.306163][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 320.376743][T15577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2947'. [ 320.390026][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 320.465504][T15579] sit1: entered promiscuous mode [ 320.484463][T15579] sit1: entered allmulticast mode [ 320.504655][T15583] x_tables: duplicate underflow at hook 2 [ 320.862073][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2956'. [ 320.872269][T15597] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2957'. [ 320.884382][T15596] openvswitch: netlink: Key type 30 is not supported [ 320.905106][T15597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 320.908125][T15599] SET target dimension over the limit! [ 320.953042][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 321.243598][T15622] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2966'. [ 321.270532][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 321.472185][T15632] SET target dimension over the limit! [ 321.634440][T15638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2974'. [ 321.652508][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 321.662731][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 321.803923][T15651] netlink: zone id is out of range [ 321.812341][T15651] netlink: zone id is out of range [ 321.817772][T15651] netlink: zone id is out of range [ 321.825295][T15651] netlink: zone id is out of range [ 321.851253][T15651] netlink: zone id is out of range [ 322.086744][T15659] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 322.349307][T15659] bond2: entered promiscuous mode [ 322.413534][T15659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.692877][T15665] bond2: (slave bridge1): making interface the new active one [ 322.695284][T15688] netlink: 'syz.1.2989': attribute type 5 has an invalid length. [ 322.707462][T15665] bridge1: entered promiscuous mode [ 322.767237][T15665] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 323.097044][T15710] SET target dimension over the limit! [ 323.190040][T15712] netlink: 'syz.4.3001': attribute type 1 has an invalid length. [ 323.246258][T15724] netlink: 'syz.1.2999': attribute type 14 has an invalid length. [ 323.306481][T15728] netlink: 'syz.4.3001': attribute type 2 has an invalid length. [ 323.393566][T15728] 9: entered promiscuous mode [ 323.831371][T15764] netlink: 'syz.4.3012': attribute type 10 has an invalid length. [ 323.850430][T15761] syzkaller0: entered promiscuous mode [ 323.872651][T15761] syzkaller0: entered allmulticast mode [ 323.900639][T15764] batadv0: entered promiscuous mode [ 323.913323][T15764] batadv0: entered allmulticast mode [ 323.918830][T15764] net_ratelimit: 40 callbacks suppressed [ 323.918846][T15764] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 324.196637][T15785] syzkaller0: entered promiscuous mode [ 324.215771][T15785] syzkaller0: entered allmulticast mode [ 324.942024][T15842] netlink: 'syz.4.3030': attribute type 1 has an invalid length. [ 325.018227][T15842] bond4: entered promiscuous mode [ 325.025614][T15842] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.078191][T15850] syzkaller1: entered promiscuous mode [ 325.085624][T15850] syzkaller1: entered allmulticast mode [ 325.115388][T15842] bond4: (slave bridge0): making interface the new active one [ 325.123393][T15842] bridge0: entered promiscuous mode [ 325.130864][T15842] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 325.527326][T15876] __nla_validate_parse: 10 callbacks suppressed [ 325.527348][T15876] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3041'. [ 325.842043][T15891] netlink: 804 bytes leftover after parsing attributes in process `syz.3.3046'. [ 325.937296][T15900] netlink: 'syz.0.3050': attribute type 10 has an invalid length. [ 325.948213][T15898] FAULT_INJECTION: forcing a failure. [ 325.948213][T15898] name failslab, interval 1, probability 0, space 0, times 0 [ 325.958880][T15900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3050'. [ 325.993147][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.2.3048 Not tainted syzkaller #0 PREEMPT(full) [ 325.993175][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 325.993187][T15898] Call Trace: [ 325.993194][T15898] [ 325.993202][T15898] dump_stack_lvl+0xe8/0x150 [ 325.993232][T15898] should_fail_ex+0x412/0x560 [ 325.993264][T15898] should_failslab+0xa8/0x100 [ 325.993288][T15898] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 325.993310][T15898] ? __alloc_skb+0x1d0/0x7d0 [ 325.993330][T15898] ? __local_bh_enable_ip+0xd0/0x130 [ 325.993358][T15898] __alloc_skb+0x1d0/0x7d0 [ 325.993383][T15898] netlink_dump+0x1ef/0xe80 [ 325.993406][T15898] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 325.993429][T15898] ? lockdep_hardirqs_on+0x7a/0x110 [ 325.993452][T15898] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 325.993476][T15898] ? __pfx_netlink_dump+0x10/0x10 [ 325.993520][T15898] netlink_recvmsg+0x690/0xa50 [ 325.993540][T15898] ? __lock_acquire+0x6b5/0x2cf0 [ 325.993577][T15898] ? __pfx_netlink_recvmsg+0x10/0x10 [ 325.993610][T15898] ? __pfx_netlink_recvmsg+0x10/0x10 [ 325.993632][T15898] sock_recvmsg_nosec+0x10c/0x140 [ 325.993654][T15898] ____sys_recvmsg+0x3e3/0x4a0 [ 325.993687][T15898] ? __pfx_____sys_recvmsg+0x10/0x10 [ 325.993725][T15898] ? import_iovec+0x73/0xa0 [ 325.993750][T15898] ___sys_recvmsg+0x215/0x590 [ 325.993771][T15898] ? __lock_acquire+0x6b5/0x2cf0 [ 325.993798][T15898] ? __pfx____sys_recvmsg+0x10/0x10 [ 325.993858][T15898] do_recvmmsg+0x334/0x800 [ 325.993890][T15898] ? __pfx_do_recvmmsg+0x10/0x10 [ 325.993923][T15898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.993961][T15898] __x64_sys_recvmmsg+0x198/0x250 [ 325.993987][T15898] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 325.994018][T15898] do_syscall_64+0x14d/0xf80 [ 325.994037][T15898] ? trace_irq_disable+0x3b/0x150 [ 325.994050][T15898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.994067][T15898] ? clear_bhb_loop+0x40/0x90 [ 325.994085][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.994103][T15898] RIP: 0033:0x7fa44e79c819 [ 325.994121][T15898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.994134][T15898] RSP: 002b:00007fa44f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 325.994152][T15898] RAX: ffffffffffffffda RBX: 00007fa44ea15fa0 RCX: 00007fa44e79c819 [ 325.994165][T15898] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 325.994175][T15898] RBP: 00007fa44f604090 R08: 0000000000000000 R09: 0000000000000000 [ 325.994185][T15898] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 325.994195][T15898] R13: 00007fa44ea16038 R14: 00007fa44ea15fa0 R15: 00007fff411dfcf8 [ 325.994223][T15898] [ 326.011372][T15900] netlink: 'syz.0.3050': attribute type 1 has an invalid length. [ 326.420962][T15919] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3055'. [ 326.455658][T15900] bond6: entered promiscuous mode [ 326.461200][T15900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.524161][T15925] sock: sock_timestamping_bind_phc: sock not bind to device [ 326.715943][T15930] set match dimension is over the limit! [ 326.911826][T15957] netlink: 'syz.1.3064': attribute type 2 has an invalid length. [ 326.961894][T15957] netlink: 'syz.1.3064': attribute type 33 has an invalid length. [ 326.991906][T15955] netlink: 'syz.1.3064': attribute type 2 has an invalid length. [ 327.094656][T15957] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 327.167456][T15957] bond6 (unregistering): Released all slaves [ 327.276405][T15971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3069'. [ 328.020780][T16026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3081'. [ 328.060800][T16026] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3081'. [ 328.543064][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'. [ 328.583221][T16067] openvswitch: netlink: IP tunnel TTL not specified. [ 328.632407][T16071] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3096'. [ 328.676283][T16073] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 328.699388][T16069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3095'. [ 328.867569][T16083] FAULT_INJECTION: forcing a failure. [ 328.867569][T16083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.890826][T16083] CPU: 0 UID: 0 PID: 16083 Comm: syz.3.3100 Not tainted syzkaller #0 PREEMPT(full) [ 328.890853][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.890864][T16083] Call Trace: [ 328.890872][T16083] [ 328.890880][T16083] dump_stack_lvl+0xe8/0x150 [ 328.890910][T16083] should_fail_ex+0x412/0x560 [ 328.890941][T16083] _copy_from_user+0x2d/0xb0 [ 328.890963][T16083] ___sys_recvmsg+0x175/0x590 [ 328.890987][T16083] ? __lock_acquire+0x6b5/0x2cf0 [ 328.891013][T16083] ? __pfx____sys_recvmsg+0x10/0x10 [ 328.891071][T16083] do_recvmmsg+0x334/0x800 [ 328.891103][T16083] ? __pfx_do_recvmmsg+0x10/0x10 [ 328.891137][T16083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.891179][T16083] __x64_sys_recvmmsg+0x198/0x250 [ 328.891205][T16083] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 328.891237][T16083] do_syscall_64+0x14d/0xf80 [ 328.891259][T16083] ? trace_irq_disable+0x3b/0x150 [ 328.891275][T16083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.891292][T16083] ? clear_bhb_loop+0x40/0x90 [ 328.891313][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.891328][T16083] RIP: 0033:0x7f7d4959c819 [ 328.891351][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.891366][T16083] RSP: 002b:00007f7d4a390028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 328.891383][T16083] RAX: ffffffffffffffda RBX: 00007f7d49815fa0 RCX: 00007f7d4959c819 [ 328.891396][T16083] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 328.891407][T16083] RBP: 00007f7d4a390090 R08: 0000000000000000 R09: 0000000000000000 [ 328.891418][T16083] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 328.891428][T16083] R13: 00007f7d49816038 R14: 00007f7d49815fa0 R15: 00007ffea403a078 [ 328.891456][T16083] [ 329.155839][T16095] SET target dimension over the limit! [ 329.534463][T16121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.013547][T16153] SET target dimension over the limit! [ 330.194556][T16161] syzkaller0: entered promiscuous mode [ 330.201020][T16161] syzkaller0: entered allmulticast mode [ 331.588449][T16179] netlink: 'syz.4.3124': attribute type 1 has an invalid length. [ 331.632794][T16179] netlink: 'syz.4.3124': attribute type 2 has an invalid length. [ 331.740779][T16194] __nla_validate_parse: 3 callbacks suppressed [ 331.740796][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3127'. [ 331.782441][T16195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3129'. [ 331.842779][T16195] syzkaller0: entered promiscuous mode [ 331.865731][T16195] syzkaller0: entered allmulticast mode [ 332.001466][T16211] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 332.165133][T16219] Cannot find add_set index 2 as target [ 332.179446][T16221] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 332.208937][T16221] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3135'. [ 332.223515][T16221] NCSI netlink: No device for ifindex 0 [ 332.735832][T16250] SET target dimension over the limit! [ 333.198595][T16265] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 333.273823][T16271] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3152'. [ 333.319432][T16273] : renamed from hsr0 [ 333.520963][T16283] IPVS: set_ctl: invalid protocol: 50 172.30.1.1:20004 [ 333.545316][T16285] Cannot find del_set index 1 as target [ 333.718993][T16290] SET target dimension over the limit! [ 333.858974][T16298] xt_cgroup: path and classid specified [ 333.955329][T16305] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 334.208708][T16318] Cannot find del_set index 49151 as target [ 334.397525][T16330] netlink: 'syz.1.3173': attribute type 10 has an invalid length. [ 334.422258][T16331] SET target dimension over the limit! [ 334.431121][T16330] team0: Port device vxcan1 added [ 334.548083][T16335] netlink: 'syz.1.3175': attribute type 4 has an invalid length. [ 335.010555][T16339] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3176'. [ 335.022905][T16339] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3176'. [ 335.158397][T16358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.299961][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 335.325428][T16366] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.348813][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 335.369027][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 335.370016][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.404377][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.439766][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.472253][ T3511] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.528392][T16379] SET target dimension over the limit! [ 335.534305][T16378] netlink: 'syz.4.3188': attribute type 83 has an invalid length. [ 335.697220][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 335.707098][T16398] FAULT_INJECTION: forcing a failure. [ 335.707098][T16398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.740177][T16398] CPU: 1 UID: 0 PID: 16398 Comm: syz.2.3191 Not tainted syzkaller #0 PREEMPT(full) [ 335.740204][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.740215][T16398] Call Trace: [ 335.740222][T16398] [ 335.740230][T16398] dump_stack_lvl+0xe8/0x150 [ 335.740260][T16398] should_fail_ex+0x412/0x560 [ 335.740290][T16398] _copy_to_user+0x31/0xb0 [ 335.740314][T16398] simple_read_from_buffer+0xe1/0x170 [ 335.740343][T16398] proc_fail_nth_read+0x1bb/0x230 [ 335.740372][T16398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.740399][T16398] ? rw_verify_area+0x2a6/0x4d0 [ 335.740418][T16398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.740444][T16398] vfs_read+0x20c/0xa70 [ 335.740461][T16398] ? fdget_pos+0x246/0x320 [ 335.740483][T16398] ? __pfx___mutex_lock+0x10/0x10 [ 335.740508][T16398] ? __pfx_vfs_read+0x10/0x10 [ 335.740529][T16398] ? __fget_files+0x2a/0x420 [ 335.740550][T16398] ? __fget_files+0x3a0/0x420 [ 335.740565][T16398] ? __fget_files+0x2a/0x420 [ 335.740590][T16398] ksys_read+0x150/0x270 [ 335.740611][T16398] ? __pfx_ksys_read+0x10/0x10 [ 335.740642][T16398] do_syscall_64+0x14d/0xf80 [ 335.740665][T16398] ? trace_irq_disable+0x3b/0x150 [ 335.740681][T16398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.740699][T16398] ? clear_bhb_loop+0x40/0x90 [ 335.740720][T16398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.740738][T16398] RIP: 0033:0x7fa44e75d04e [ 335.740755][T16398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.740770][T16398] RSP: 002b:00007fa44f5e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.740788][T16398] RAX: ffffffffffffffda RBX: 00007fa44f5e36c0 RCX: 00007fa44e75d04e [ 335.740801][T16398] RDX: 000000000000000f RSI: 00007fa44f5e30a0 RDI: 0000000000000006 [ 335.740812][T16398] RBP: 00007fa44f5e3090 R08: 0000000000000000 R09: 0000000000000000 [ 335.740822][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.740833][T16398] R13: 00007fa44ea16128 R14: 00007fa44ea16090 R15: 00007fff411dfcf8 [ 335.740863][T16398] [ 336.030958][T16404] netlink: 'syz.4.3197': attribute type 11 has an invalid length. [ 336.204792][T16418] Cannot find del_set index 1 as target [ 336.226517][T16417] SET target dimension over the limit! [ 337.138620][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.155473][T16483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.163024][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.174685][T16475] __nla_validate_parse: 3 callbacks suppressed [ 337.174703][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3224'. [ 337.218966][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3228'. [ 337.355721][T16500] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3232'. [ 337.701704][T16519] bond6: entered promiscuous mode [ 337.706805][T16519] bond6: entered allmulticast mode [ 337.739019][T16519] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.775222][T16536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3245'. [ 337.911337][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 337.930553][T16545] nbd: must specify at least one socket [ 337.943699][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 337.953747][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 338.016312][T16551] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3250'. [ 338.084209][T16553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3251'. [ 338.208367][T16559] gtp1: entered promiscuous mode [ 338.229405][T16559] gtp1: entered allmulticast mode [ 338.273661][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3254'. [ 338.290542][T16568] tipc: Invalid UDP bearer configuration [ 338.290604][T16568] tipc: Enabling of bearer rejected, failed to enable media [ 338.619228][T16593] netlink: 'syz.1.3265': attribute type 1 has an invalid length. [ 338.836860][T16608] lo speed is unknown, defaulting to 1000 [ 339.040248][T16625] Cannot find del_set index 1 as target [ 339.541295][T16652] netlink: 'syz.4.3281': attribute type 11 has an invalid length. [ 339.630166][T16659] syzkaller0: entered promiscuous mode [ 339.640257][T16659] syzkaller0: entered allmulticast mode [ 339.681915][T16644] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 339.875247][T16674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.084154][T16684] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 340.159399][T16688] ip6gre2: entered allmulticast mode [ 340.413110][T16699] xt_hashlimit: size too large, truncated to 1048576 [ 340.893076][T16728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.217686][T16739] syzkaller0: entered promiscuous mode [ 341.240514][T16739] syzkaller0: entered allmulticast mode [ 341.267878][T16739] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 341.310474][T16747] xfrm1: entered promiscuous mode [ 341.325551][T16747] xfrm1: entered allmulticast mode [ 341.375219][T16746] xt_socket: unknown flags 0x50 [ 341.631364][T16773] FAULT_INJECTION: forcing a failure. [ 341.631364][T16773] name failslab, interval 1, probability 0, space 0, times 0 [ 341.668505][T16773] CPU: 1 UID: 0 PID: 16773 Comm: syz.3.3308 Not tainted syzkaller #0 PREEMPT(full) [ 341.668532][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 341.668543][T16773] Call Trace: [ 341.668550][T16773] [ 341.668558][T16773] dump_stack_lvl+0xe8/0x150 [ 341.668589][T16773] should_fail_ex+0x412/0x560 [ 341.668620][T16773] should_failslab+0xa8/0x100 [ 341.668645][T16773] __kmalloc_noprof+0xe8/0x760 [ 341.668665][T16773] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.668683][T16773] ? sock_kmalloc+0xd6/0x160 [ 341.668719][T16773] sock_kmalloc+0xd6/0x160 [ 341.668745][T16773] alg_setkey+0x55/0x190 [ 341.668762][T16773] ? alg_setsockopt+0x3c5/0x4a0 [ 341.668782][T16773] alg_setsockopt+0x3da/0x4a0 [ 341.668801][T16773] ? __pfx_alg_setsockopt+0x10/0x10 [ 341.668821][T16773] do_sock_setsockopt+0x17c/0x1b0 [ 341.668848][T16773] __x64_sys_setsockopt+0x13d/0x1b0 [ 341.668877][T16773] do_syscall_64+0x14d/0xf80 [ 341.668900][T16773] ? trace_irq_disable+0x3b/0x150 [ 341.668916][T16773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.668935][T16773] ? clear_bhb_loop+0x40/0x90 [ 341.668958][T16773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.668976][T16773] RIP: 0033:0x7f7d4959c819 [ 341.668993][T16773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.669008][T16773] RSP: 002b:00007f7d4a390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 341.669028][T16773] RAX: ffffffffffffffda RBX: 00007f7d49815fa0 RCX: 00007f7d4959c819 [ 341.669041][T16773] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 341.669052][T16773] RBP: 00007f7d4a390090 R08: 000000000000001e R09: 0000000000000000 [ 341.669063][T16773] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 341.669074][T16773] R13: 00007f7d49816038 R14: 00007f7d49815fa0 R15: 00007ffea403a078 [ 341.669104][T16773] [ 342.032080][T16782] tipc: Enabling of bearer rejected, failed to enable media [ 342.503967][T16805] __nla_validate_parse: 13 callbacks suppressed [ 342.503987][T16805] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3316'. [ 342.535107][T16805] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 342.594366][T16802] syzkaller0: entered promiscuous mode [ 342.607657][T16802] syzkaller0: entered allmulticast mode [ 342.615499][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3319'. [ 342.779461][T16831] sctp: [Deprecated]: syz.1.3322 (pid 16831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.779461][T16831] Use struct sctp_sack_info instead [ 343.083944][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3330'. [ 343.104964][T16849] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3330'. [ 344.751327][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 344.876738][T16889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.923507][T16891] sctp: [Deprecated]: syz.3.3337 (pid 16891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.923507][T16891] Use struct sctp_sack_info instead [ 345.097279][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3344'. [ 345.109337][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3344'. [ 345.140694][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'. [ 345.151674][T16906] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 345.260913][T16912] syzkaller0: entered promiscuous mode [ 345.270938][T16912] syzkaller0: entered allmulticast mode [ 345.283132][T16912] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3343'. [ 345.292929][T16912] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 345.483970][T16936] sctp: [Deprecated]: syz.0.3353 (pid 16936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.483970][T16936] Use struct sctp_sack_info instead [ 345.501273][T16932] netlink: 'syz.2.3352': attribute type 3 has an invalid length. [ 345.569526][T16940] 8021q: VLANs not supported on nr0 [ 345.870756][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3357'. [ 346.146303][T16975] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 346.536010][T16997] syzkaller0: entered promiscuous mode [ 346.542372][T16997] syzkaller0: entered allmulticast mode [ 346.556524][T16990] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 346.711138][T16999] syzkaller0: entered promiscuous mode [ 346.717577][T16999] syzkaller0: entered allmulticast mode [ 346.916857][T17019] netlink: Unknown conntrack attr (0) [ 347.000385][T17021] syzkaller0: entered promiscuous mode [ 347.013392][T17021] syzkaller0: entered allmulticast mode [ 347.433063][T17051] syzkaller0: entered promiscuous mode [ 347.460350][T17051] syzkaller0: entered allmulticast mode [ 347.476058][T17047] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 347.638301][T17062] SET target dimension over the limit! [ 347.643153][T17060] dvmrp0: entered allmulticast mode [ 347.773738][T17073] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 347.792023][T17073] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.825687][T17079] __nla_validate_parse: 9 callbacks suppressed [ 347.825707][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 347.866359][T17080] lo speed is unknown, defaulting to 1000 [ 347.911864][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3393'. [ 347.990518][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 348.597025][T17121] SET target dimension over the limit! [ 348.693459][T17125] syzkaller0: entered promiscuous mode [ 348.699239][T17125] syzkaller0: entered allmulticast mode [ 348.736292][T17106] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 348.746929][T17123] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3402'. [ 348.768477][T17123] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 348.796121][T17106] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 349.278562][T17156] openvswitch: netlink: Flow key attr not present in new flow. [ 349.334219][T17156] netlink: 'syz.0.3412': attribute type 16 has an invalid length. [ 349.362748][T17156] netlink: 'syz.0.3412': attribute type 17 has an invalid length. [ 349.381037][T17156] lo: left promiscuous mode [ 349.383002][T17164] SET target dimension over the limit! [ 349.407523][T17156] tunl0: left promiscuous mode [ 349.419274][T17156] gre0: left promiscuous mode [ 349.429373][T17156] gretap0: left promiscuous mode [ 349.451316][T17156] erspan0: left promiscuous mode [ 349.463871][T17156] ip_vti0: left promiscuous mode [ 349.478775][T17156] ip6_vti0: left allmulticast mode [ 349.506150][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3415'. [ 349.508726][T17156] sit0: left allmulticast mode [ 349.527166][T17156] ip6tnl0: left allmulticast mode [ 349.548087][T17156] ip6gre0: left allmulticast mode [ 349.555337][T17156] ip6gretap0: left allmulticast mode [ 349.563785][T17156] vcan0: left allmulticast mode [ 349.570832][T17156] bond0: left allmulticast mode [ 349.575796][T17156] bridge_slave_1: left allmulticast mode [ 349.583639][T17156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.592520][T17156] dummy0: left allmulticast mode [ 349.610407][T17156] nlmon0: left allmulticast mode [ 349.617483][T17156] caif0: left allmulticast mode [ 349.622876][T17156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.768720][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3417'. [ 349.807628][T17176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.883704][T17180] syzkaller0: entered promiscuous mode [ 349.889285][T17180] syzkaller0: entered allmulticast mode [ 349.901915][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3418'. [ 349.915019][T17172] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3416'. [ 349.927481][T17172] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 350.226343][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'. [ 350.441996][T17214] bond7: option fail_over_mac: invalid value (16) [ 350.453268][T17214] bond7 (unregistering): Released all slaves [ 350.469983][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 350.494335][T17224] FAULT_INJECTION: forcing a failure. [ 350.494335][T17224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.508344][T17224] CPU: 0 UID: 0 PID: 17224 Comm: syz.1.3437 Not tainted syzkaller #0 PREEMPT(full) [ 350.508368][T17224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 350.508379][T17224] Call Trace: [ 350.508386][T17224] [ 350.508393][T17224] dump_stack_lvl+0xe8/0x150 [ 350.508422][T17224] should_fail_ex+0x412/0x560 [ 350.508453][T17224] _copy_from_user+0x2d/0xb0 [ 350.508475][T17224] ___sys_sendmsg+0x1c6/0x360 [ 350.508502][T17224] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.508555][T17224] ? __fget_files+0x2a/0x420 [ 350.508572][T17224] ? __fget_files+0x3a0/0x420 [ 350.508597][T17224] __x64_sys_sendmsg+0x1bd/0x2a0 [ 350.508622][T17224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.508652][T17224] ? __pfx_ksys_write+0x10/0x10 [ 350.508679][T17224] do_syscall_64+0x14d/0xf80 [ 350.508700][T17224] ? trace_irq_disable+0x3b/0x150 [ 350.508715][T17224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.508733][T17224] ? clear_bhb_loop+0x40/0x90 [ 350.508755][T17224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.508782][T17224] RIP: 0033:0x7f3f6199c819 [ 350.508799][T17224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.508814][T17224] RSP: 002b:00007f3f6288e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.508834][T17224] RAX: ffffffffffffffda RBX: 00007f3f61c15fa0 RCX: 00007f3f6199c819 [ 350.508847][T17224] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 350.508859][T17224] RBP: 00007f3f6288e090 R08: 0000000000000000 R09: 0000000000000000 [ 350.508870][T17224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.508880][T17224] R13: 00007f3f61c16038 R14: 00007f3f61c15fa0 R15: 00007ffd160a4378 [ 350.508908][T17224] [ 350.883217][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 351.159409][T17258] xt_hashlimit: size too large, truncated to 1048576 [ 351.176550][T17258] netlink: 'syz.4.3450': attribute type 18 has an invalid length. [ 351.281675][T17258] netlink: 'syz.4.3450': attribute type 18 has an invalid length. [ 351.304633][T17266] bond5: option fail_over_mac: invalid value (16) [ 351.320516][T17266] bond5 (unregistering): Released all slaves [ 352.031396][T17319] SET target dimension over the limit! [ 352.039387][T17321] FAULT_INJECTION: forcing a failure. [ 352.039387][T17321] name failslab, interval 1, probability 0, space 0, times 0 [ 352.070528][T17321] CPU: 1 UID: 0 PID: 17321 Comm: syz.0.3475 Not tainted syzkaller #0 PREEMPT(full) [ 352.070556][T17321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.070567][T17321] Call Trace: [ 352.070574][T17321] [ 352.070581][T17321] dump_stack_lvl+0xe8/0x150 [ 352.070611][T17321] should_fail_ex+0x412/0x560 [ 352.070643][T17321] should_failslab+0xa8/0x100 [ 352.070678][T17321] __kmalloc_noprof+0xe8/0x760 [ 352.070699][T17321] ? kernfs_fop_write_iter+0x158/0x540 [ 352.070726][T17321] kernfs_fop_write_iter+0x158/0x540 [ 352.070754][T17321] vfs_write+0x61d/0xb90 [ 352.070783][T17321] ? __pfx_vfs_write+0x10/0x10 [ 352.070814][T17321] ? __fget_files+0x2a/0x420 [ 352.070840][T17321] ksys_write+0x150/0x270 [ 352.070863][T17321] ? __pfx_ksys_write+0x10/0x10 [ 352.070895][T17321] do_syscall_64+0x14d/0xf80 [ 352.070918][T17321] ? trace_irq_disable+0x3b/0x150 [ 352.070934][T17321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.070953][T17321] ? clear_bhb_loop+0x40/0x90 [ 352.070975][T17321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.070993][T17321] RIP: 0033:0x7fe19959c819 [ 352.071010][T17321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.071025][T17321] RSP: 002b:00007fe19a3c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.071044][T17321] RAX: ffffffffffffffda RBX: 00007fe199815fa0 RCX: 00007fe19959c819 [ 352.071057][T17321] RDX: 0000000000000012 RSI: 0000200000000340 RDI: 0000000000000006 [ 352.071069][T17321] RBP: 00007fe19a3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 352.071080][T17321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.071091][T17321] R13: 00007fe199816038 R14: 00007fe199815fa0 R15: 00007ffd58c5d548 [ 352.071122][T17321] [ 352.316972][T17323] unsupported nlmsg_type 40 [ 352.378806][T17326] syzkaller1: entered promiscuous mode [ 352.384704][T17326] syzkaller1: entered allmulticast mode [ 353.125939][T17387] __nla_validate_parse: 8 callbacks suppressed [ 353.125961][T17387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3493'. [ 353.292931][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 353.327895][T17402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.407042][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'. [ 353.454011][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 353.469094][T17417] tipc: Enabling of bearer rejected, failed to enable media [ 353.484419][T17417] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3503'. [ 353.921546][T17442] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3510'. [ 353.961760][T17442] netlink: 'syz.2.3510': attribute type 10 has an invalid length. [ 354.171059][T17450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3517'. [ 354.195443][T17450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3517'. [ 354.222758][T17450] sctp: [Deprecated]: syz.3.3517 (pid 17450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.222758][T17450] Use struct sctp_sack_info instead [ 354.422258][T17454] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 354.783892][T17481] FAULT_INJECTION: forcing a failure. [ 354.783892][T17481] name failslab, interval 1, probability 0, space 0, times 0 [ 354.798862][T17481] CPU: 0 UID: 0 PID: 17481 Comm: syz.0.3526 Not tainted syzkaller #0 PREEMPT(full) [ 354.798887][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 354.798897][T17481] Call Trace: [ 354.798904][T17481] [ 354.798911][T17481] dump_stack_lvl+0xe8/0x150 [ 354.798941][T17481] should_fail_ex+0x412/0x560 [ 354.798972][T17481] should_failslab+0xa8/0x100 [ 354.798995][T17481] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 354.799013][T17481] ? __alloc_skb+0x186/0x7d0 [ 354.799031][T17481] ? __alloc_skb+0x1d0/0x7d0 [ 354.799047][T17481] ? __local_bh_enable_ip+0xd0/0x130 [ 354.799071][T17481] __alloc_skb+0x1d0/0x7d0 [ 354.799093][T17481] netlink_sendmsg+0x5d4/0xb40 [ 354.799120][T17481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.799143][T17481] ? aa_sock_msg_perm+0xf1/0x1b0 [ 354.799169][T17481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.799191][T17481] ____sys_sendmsg+0x972/0x9f0 [ 354.799219][T17481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.799246][T17481] ? import_iovec+0x73/0xa0 [ 354.799266][T17481] ___sys_sendmsg+0x2a5/0x360 [ 354.799292][T17481] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.799346][T17481] ? __fget_files+0x2a/0x420 [ 354.799360][T17481] ? __fget_files+0x3a0/0x420 [ 354.799383][T17481] __x64_sys_sendmsg+0x1bd/0x2a0 [ 354.799406][T17481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.799435][T17481] ? __pfx_ksys_write+0x10/0x10 [ 354.799463][T17481] do_syscall_64+0x14d/0xf80 [ 354.799486][T17481] ? trace_irq_disable+0x3b/0x150 [ 354.799502][T17481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.799520][T17481] ? clear_bhb_loop+0x40/0x90 [ 354.799542][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.799560][T17481] RIP: 0033:0x7fe19959c819 [ 354.799578][T17481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.799593][T17481] RSP: 002b:00007fe19a3a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.799612][T17481] RAX: ffffffffffffffda RBX: 00007fe199816090 RCX: 00007fe19959c819 [ 354.799625][T17481] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000004 [ 354.799637][T17481] RBP: 00007fe19a3a0090 R08: 0000000000000000 R09: 0000000000000000 [ 354.799648][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.799659][T17481] R13: 00007fe199816128 R14: 00007fe199816090 R15: 00007ffd58c5d548 [ 354.799688][T17481] [ 355.210834][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3530'. [ 355.227470][T17491] netlink: 'syz.2.3527': attribute type 1 has an invalid length. [ 355.256047][T17492] netlink: 'syz.2.3527': attribute type 1 has an invalid length. [ 355.391450][T17497] SET target dimension over the limit! [ 355.519334][T17503] netlink: 592 bytes leftover after parsing attributes in process `syz.3.3536'. [ 355.630611][T17516] netlink: 'syz.2.3540': attribute type 2 has an invalid length. [ 355.644294][T17516] netlink: 'syz.2.3540': attribute type 1 has an invalid length. [ 355.675816][T17517] sctp: [Deprecated]: syz.2.3540 (pid 17517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.675816][T17517] Use struct sctp_sack_info instead [ 355.877889][T17531] syzkaller0: entered promiscuous mode [ 355.893864][T17531] syzkaller0: entered allmulticast mode [ 355.907192][T17531] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 356.052502][T17550] x_tables: duplicate underflow at hook 1 [ 356.307404][T17562] syzkaller0: entered promiscuous mode [ 356.313109][T17562] syzkaller0: entered allmulticast mode [ 356.472744][T17581] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.518897][T17583] bond7: option all_slaves_active: invalid value (222) [ 356.554296][T17583] bond7 (unregistering): Released all slaves [ 356.722116][T17597] syzkaller0: entered promiscuous mode [ 356.741731][T17597] syzkaller0: entered allmulticast mode [ 356.777393][T17587] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 357.122686][T17620] SET target dimension over the limit! [ 357.536324][T17655] syzkaller0: entered promiscuous mode [ 357.552381][T17655] syzkaller0: entered allmulticast mode [ 357.592632][T17648] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 357.609007][T17659] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 357.629078][T17659] team0: Unable to change to the same mode the team is in [ 357.943350][T17679] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 357.966733][T17679] netlink: 'syz.3.3596': attribute type 2 has an invalid length. [ 357.977466][T17679] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 357.988766][T17679] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 358.000730][T17679] netlink: 'syz.3.3596': attribute type 2 has an invalid length. [ 358.009550][T17679] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 358.236052][T17701] netlink: 'syz.4.3603': attribute type 3 has an invalid length. [ 358.244176][T17701] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 358.252104][T17701] __nla_validate_parse: 8 callbacks suppressed [ 358.252119][T17701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3603'. [ 358.341915][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'. [ 358.352925][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'. [ 358.388045][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3604'. [ 358.402101][T17698] netlink: 'syz.0.3602': attribute type 29 has an invalid length. [ 358.411382][T17704] netlink: 'syz.2.3604': attribute type 1 has an invalid length. [ 358.486334][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3607'. [ 358.546777][T17711] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3601'. [ 358.584661][T17728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3607'. [ 358.594095][T17703] syzkaller0: entered promiscuous mode [ 358.597269][T17716] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 358.621850][T17703] syzkaller0: entered allmulticast mode [ 358.904215][T17745] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3615'. [ 359.111780][T17751] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 359.241369][T17758] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3617'. [ 359.251109][T17758] openvswitch: netlink: Flow key attr not present in new flow. [ 360.514500][T17770] FAULT_INJECTION: forcing a failure. [ 360.514500][T17770] name failslab, interval 1, probability 0, space 0, times 0 [ 360.548064][T17770] CPU: 0 UID: 0 PID: 17770 Comm: syz.1.3621 Not tainted syzkaller #0 PREEMPT(full) [ 360.548091][T17770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.548106][T17770] Call Trace: [ 360.548113][T17770] [ 360.548121][T17770] dump_stack_lvl+0xe8/0x150 [ 360.548150][T17770] should_fail_ex+0x412/0x560 [ 360.548178][T17770] should_failslab+0xa8/0x100 [ 360.548199][T17770] ? skb_clone+0x212/0x3a0 [ 360.548222][T17770] kmem_cache_alloc_noprof+0x87/0x650 [ 360.548257][T17770] skb_clone+0x212/0x3a0 [ 360.548282][T17770] __netlink_deliver_tap+0x404/0x850 [ 360.548314][T17770] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.548335][T17770] netlink_deliver_tap+0x19c/0x1b0 [ 360.548354][T17770] netlink_sendskb+0x68/0x140 [ 360.548373][T17770] netlink_unicast+0x3a3/0x9b0 [ 360.548398][T17770] ? __pfx_netlink_unicast+0x10/0x10 [ 360.548426][T17770] nfnetlink_rcv+0x2517/0x27b0 [ 360.548470][T17770] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 360.548501][T17770] ? ref_tracker_free+0x693/0x840 [ 360.548545][T17770] ? __netlink_deliver_tap+0x807/0x850 [ 360.548564][T17770] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.548598][T17770] netlink_unicast+0x80f/0x9b0 [ 360.548626][T17770] ? __pfx_netlink_unicast+0x10/0x10 [ 360.548646][T17770] ? netlink_sendmsg+0x650/0xb40 [ 360.548663][T17770] ? skb_put+0x11b/0x210 [ 360.548687][T17770] netlink_sendmsg+0x813/0xb40 [ 360.548715][T17770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.548739][T17770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.548766][T17770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.548790][T17770] ____sys_sendmsg+0x972/0x9f0 [ 360.548819][T17770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.548850][T17770] ? import_iovec+0x73/0xa0 [ 360.548875][T17770] ___sys_sendmsg+0x2a5/0x360 [ 360.548903][T17770] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.548955][T17770] ? __fget_files+0x2a/0x420 [ 360.548971][T17770] ? __fget_files+0x3a0/0x420 [ 360.548994][T17770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 360.549020][T17770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.549052][T17770] ? __pfx_ksys_write+0x10/0x10 [ 360.549083][T17770] do_syscall_64+0x14d/0xf80 [ 360.549106][T17770] ? trace_irq_disable+0x3b/0x150 [ 360.549122][T17770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.549139][T17770] ? clear_bhb_loop+0x40/0x90 [ 360.549161][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.549187][T17770] RIP: 0033:0x7f3f6199c819 [ 360.549206][T17770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.549222][T17770] RSP: 002b:00007f3f6288e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.549247][T17770] RAX: ffffffffffffffda RBX: 00007f3f61c15fa0 RCX: 00007f3f6199c819 [ 360.549260][T17770] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 360.549271][T17770] RBP: 00007f3f6288e090 R08: 0000000000000000 R09: 0000000000000000 [ 360.549283][T17770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.549293][T17770] R13: 00007f3f61c16038 R14: 00007f3f61c15fa0 R15: 00007ffd160a4378 [ 360.549322][T17770] [ 360.948731][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3622'. [ 361.387552][T17813] syzkaller0: entered promiscuous mode [ 361.412463][T17813] syzkaller0: entered allmulticast mode [ 361.437633][T17806] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 361.449687][T17817] sctp: [Deprecated]: syz.2.3635 (pid 17817) Use of int in maxseg socket option. [ 361.449687][T17817] Use struct sctp_assoc_value instead [ 362.119307][T17863] FAULT_INJECTION: forcing a failure. [ 362.119307][T17863] name failslab, interval 1, probability 0, space 0, times 0 [ 362.137235][T17863] CPU: 0 UID: 0 PID: 17863 Comm: syz.3.3652 Not tainted syzkaller #0 PREEMPT(full) [ 362.137263][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 362.137273][T17863] Call Trace: [ 362.137280][T17863] [ 362.137287][T17863] dump_stack_lvl+0xe8/0x150 [ 362.137317][T17863] should_fail_ex+0x412/0x560 [ 362.137350][T17863] should_failslab+0xa8/0x100 [ 362.137374][T17863] __kmalloc_noprof+0xe8/0x760 [ 362.137394][T17863] ? kernfs_fop_write_iter+0x158/0x540 [ 362.137418][T17863] kernfs_fop_write_iter+0x158/0x540 [ 362.137444][T17863] vfs_write+0x61d/0xb90 [ 362.137469][T17863] ? __pfx_vfs_write+0x10/0x10 [ 362.137495][T17863] ? __fget_files+0x2a/0x420 [ 362.137519][T17863] ksys_write+0x150/0x270 [ 362.137540][T17863] ? __pfx_ksys_write+0x10/0x10 [ 362.137569][T17863] do_syscall_64+0x14d/0xf80 [ 362.137592][T17863] ? trace_irq_disable+0x3b/0x150 [ 362.137609][T17863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.137633][T17863] ? clear_bhb_loop+0x40/0x90 [ 362.137655][T17863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.137673][T17863] RIP: 0033:0x7f7d4959c819 [ 362.137691][T17863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.137707][T17863] RSP: 002b:00007f7d4a390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.137726][T17863] RAX: ffffffffffffffda RBX: 00007f7d49815fa0 RCX: 00007f7d4959c819 [ 362.137739][T17863] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000005 [ 362.137750][T17863] RBP: 00007f7d4a390090 R08: 0000000000000000 R09: 0000000000000000 [ 362.137761][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.137772][T17863] R13: 00007f7d49816038 R14: 00007f7d49815fa0 R15: 00007ffea403a078 [ 362.137803][T17863] [ 362.749326][T17893] syzkaller0: entered promiscuous mode [ 362.790876][T17893] syzkaller0: entered allmulticast mode [ 363.332380][T17925] __nla_validate_parse: 7 callbacks suppressed [ 363.332401][T17925] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3679'. [ 363.358365][T17925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3679'. [ 363.392993][T17925] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3679'. [ 363.515484][T17931] lo speed is unknown, defaulting to 1000 [ 363.649934][T17943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3684'. [ 363.659002][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3680'. [ 363.773544][T17935] openvswitch: netlink: Flow key attribute not present in set flow. [ 364.000547][T17958] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3690'. [ 364.597593][T17994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3702'. [ 364.780296][T17994] bond0: entered allmulticast mode [ 364.834446][T18004] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 365.103344][T18021] validate_nla: 1 callbacks suppressed [ 365.103363][T18021] netlink: 'syz.2.3707': attribute type 1 has an invalid length. [ 365.139434][T18012] netlink: 'syz.2.3707': attribute type 29 has an invalid length. [ 365.156350][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3707'. [ 365.171029][T18022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3710'. [ 365.181943][T18022] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3710'. [ 365.222640][T18022] netlink: 'syz.1.3710': attribute type 5 has an invalid length. [ 365.695079][T18055] netlink: 'syz.3.3721': attribute type 10 has an invalid length. [ 365.780739][T18060] netlink: 'syz.0.3722': attribute type 4 has an invalid length. [ 365.794297][T18061] netlink: 'syz.0.3722': attribute type 4 has an invalid length. [ 365.813988][T18060] .`: renamed from bond0 (while UP) [ 367.444164][T18140] netlink: 'syz.4.3750': attribute type 1 has an invalid length. [ 367.521372][T18141] block nbd0: not configured, cannot reconfigure [ 367.528473][T18138] syzkaller0: entered promiscuous mode [ 367.534234][T18138] syzkaller0: entered allmulticast mode [ 367.956224][T18175] netlink: 'syz.3.3754': attribute type 10 has an invalid length. [ 369.243546][T18175] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 369.487487][T18207] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 369.675054][T18222] __nla_validate_parse: 14 callbacks suppressed [ 369.675077][T18222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3770'. [ 372.337202][T18196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.635447][T18259] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3780'. [ 372.645374][T18259] tc_dump_action: action bad kind [ 372.862222][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3785'. [ 373.013092][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'. [ 373.216765][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 373.286375][T18301] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 373.318152][T18301] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 373.360500][T18314] SET target dimension over the limit! [ 373.554579][T18329] FAULT_INJECTION: forcing a failure. [ 373.554579][T18329] name failslab, interval 1, probability 0, space 0, times 0 [ 373.568947][T18329] CPU: 0 UID: 0 PID: 18329 Comm: syz.3.3801 Not tainted syzkaller #0 PREEMPT(full) [ 373.568974][T18329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 373.568986][T18329] Call Trace: [ 373.568993][T18329] [ 373.569000][T18329] dump_stack_lvl+0xe8/0x150 [ 373.569030][T18329] should_fail_ex+0x412/0x560 [ 373.569060][T18329] should_failslab+0xa8/0x100 [ 373.569084][T18329] __kmalloc_noprof+0xe8/0x760 [ 373.569105][T18329] ? rcu_is_watching+0x15/0xb0 [ 373.569128][T18329] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 373.569159][T18329] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 373.569189][T18329] genl_family_rcv_msg_doit+0xd9/0x330 [ 373.569217][T18329] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 373.569248][T18329] ? apparmor_capable+0x126/0x170 [ 373.569269][T18329] ? bpf_lsm_capable+0x9/0x20 [ 373.569292][T18329] ? security_capable+0x7e/0x2c0 [ 373.569329][T18329] genl_rcv_msg+0x61c/0x7a0 [ 373.569360][T18329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.569383][T18329] ? __pfx_fou_nl_del_doit+0x10/0x10 [ 373.569402][T18329] ? __lock_acquire+0x6b5/0x2cf0 [ 373.569435][T18329] netlink_rcv_skb+0x232/0x4b0 [ 373.569455][T18329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.569480][T18329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.569518][T18329] ? down_read+0x272/0x2e0 [ 373.569534][T18329] ? genl_rcv+0xd/0x40 [ 373.569559][T18329] genl_rcv+0x28/0x40 [ 373.569584][T18329] netlink_unicast+0x80f/0x9b0 [ 373.569612][T18329] ? __pfx_netlink_unicast+0x10/0x10 [ 373.569632][T18329] ? netlink_sendmsg+0x650/0xb40 [ 373.569650][T18329] ? skb_put+0x11b/0x210 [ 373.569677][T18329] netlink_sendmsg+0x813/0xb40 [ 373.569706][T18329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.569730][T18329] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.569757][T18329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.569780][T18329] ____sys_sendmsg+0x972/0x9f0 [ 373.569809][T18329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.569839][T18329] ? import_iovec+0x73/0xa0 [ 373.569862][T18329] ___sys_sendmsg+0x2a5/0x360 [ 373.569889][T18329] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.569947][T18329] ? __fget_files+0x2a/0x420 [ 373.569963][T18329] ? __fget_files+0x3a0/0x420 [ 373.569990][T18329] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.570015][T18329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.570048][T18329] ? __pfx_ksys_write+0x10/0x10 [ 373.570079][T18329] do_syscall_64+0x14d/0xf80 [ 373.570101][T18329] ? trace_irq_disable+0x3b/0x150 [ 373.570117][T18329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.570135][T18329] ? clear_bhb_loop+0x40/0x90 [ 373.570158][T18329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.570175][T18329] RIP: 0033:0x7f7d4959c819 [ 373.570193][T18329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.570207][T18329] RSP: 002b:00007f7d4a390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.570226][T18329] RAX: ffffffffffffffda RBX: 00007f7d49815fa0 RCX: 00007f7d4959c819 [ 373.570238][T18329] RDX: 0000000004000084 RSI: 0000200000000240 RDI: 0000000000000003 [ 373.570250][T18329] RBP: 00007f7d4a390090 R08: 0000000000000000 R09: 0000000000000000 [ 373.570261][T18329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.570271][T18329] R13: 00007f7d49816038 R14: 00007f7d49815fa0 R15: 00007ffea403a078 [ 373.570302][T18329] [ 373.946263][T18335] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 373.979902][T18335] netlink: 396 bytes leftover after parsing attributes in process `syz.4.3805'. [ 374.212998][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'. [ 374.325439][T18372] batman_adv: batadv0: Adding interface: dummy0 [ 374.344632][T18372] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.397580][T18372] batman_adv: batadv0: Interface activated: dummy0 [ 374.408383][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 374.423579][T18363] batadv0: mtu less than device minimum [ 374.455773][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.467556][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.479244][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.491024][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.502791][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.514478][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.526185][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.537896][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.549621][T18363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.650610][T18353] delete_channel: no stack [ 374.754779][T18395] FAULT_INJECTION: forcing a failure. [ 374.754779][T18395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.768295][T18395] CPU: 0 UID: 0 PID: 18395 Comm: syz.3.3817 Not tainted syzkaller #0 PREEMPT(full) [ 374.768320][T18395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 374.768330][T18395] Call Trace: [ 374.768337][T18395] [ 374.768344][T18395] dump_stack_lvl+0xe8/0x150 [ 374.768373][T18395] should_fail_ex+0x412/0x560 [ 374.768404][T18395] _copy_from_user+0x2d/0xb0 [ 374.768424][T18395] tipc_ioctl+0x165/0x340 [ 374.768447][T18395] ? __pfx_tipc_ioctl+0x10/0x10 [ 374.768470][T18395] ? tomoyo_path_number_perm+0x219/0x630 [ 374.768502][T18395] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 374.768528][T18395] sock_do_ioctl+0x101/0x320 [ 374.768549][T18395] ? __pfx_sock_do_ioctl+0x10/0x10 [ 374.768563][T18395] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 374.768602][T18395] sock_ioctl+0x5c6/0x7f0 [ 374.768630][T18395] ? __pfx_sock_ioctl+0x10/0x10 [ 374.768653][T18395] ? __fget_files+0x2a/0x420 [ 374.768668][T18395] ? __fget_files+0x3a0/0x420 [ 374.768681][T18395] ? __fget_files+0x2a/0x420 [ 374.768701][T18395] ? bpf_lsm_file_ioctl+0x9/0x20 [ 374.768723][T18395] ? __pfx_sock_ioctl+0x10/0x10 [ 374.768745][T18395] __se_sys_ioctl+0xfc/0x170 [ 374.768765][T18395] do_syscall_64+0x14d/0xf80 [ 374.768785][T18395] ? trace_irq_disable+0x3b/0x150 [ 374.768800][T18395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.768815][T18395] ? clear_bhb_loop+0x40/0x90 [ 374.768835][T18395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.768853][T18395] RIP: 0033:0x7f7d4959c819 [ 374.768869][T18395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.768884][T18395] RSP: 002b:00007f7d4a390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.768902][T18395] RAX: ffffffffffffffda RBX: 00007f7d49815fa0 RCX: 00007f7d4959c819 [ 374.768914][T18395] RDX: 0000200000000000 RSI: 00000000000089e1 RDI: 0000000000000003 [ 374.768924][T18395] RBP: 00007f7d4a390090 R08: 0000000000000000 R09: 0000000000000000 [ 374.768934][T18395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.768943][T18395] R13: 00007f7d49816038 R14: 00007f7d49815fa0 R15: 00007ffea403a078 [ 374.768968][T18395] [ 374.771456][T18340] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 374.780467][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'. [ 375.060961][T18404] syzkaller0: entered promiscuous mode [ 375.066486][T18404] syzkaller0: entered allmulticast mode [ 375.112023][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 375.173078][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 375.191447][T18399] vcan0 (unregistering): left allmulticast mode [ 375.865446][T18453] syzkaller0: entered promiscuous mode [ 375.885030][T18453] syzkaller0: entered allmulticast mode [ 375.968486][T18454] tap0: tun_chr_ioctl cmd 1074025672 [ 375.973974][T18454] tap0: ignored: set checksum disabled [ 376.212607][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 376.277413][T18484] netlink: 'syz.1.3840': attribute type 21 has an invalid length. [ 376.310203][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 376.321362][T18484] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 376.332416][ T49] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 376.347770][T18484] bond7 (unregistering): Released all slaves [ 376.384572][T18486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3841'. [ 376.434048][T18486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3841'. [ 376.752566][T18513] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3847'. [ 376.803766][T18517] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.3849'. [ 376.894155][T18519] FAULT_INJECTION: forcing a failure. [ 376.894155][T18519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.918349][T18519] CPU: 1 UID: 0 PID: 18519 Comm: syz.0.3850 Not tainted syzkaller #0 PREEMPT(full) [ 376.918375][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.918385][T18519] Call Trace: [ 376.918391][T18519] [ 376.918398][T18519] dump_stack_lvl+0xe8/0x150 [ 376.918426][T18519] should_fail_ex+0x412/0x560 [ 376.918457][T18519] _copy_to_user+0x31/0xb0 [ 376.918481][T18519] simple_read_from_buffer+0xe1/0x170 [ 376.918510][T18519] proc_fail_nth_read+0x1bb/0x230 [ 376.918536][T18519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.918563][T18519] ? rw_verify_area+0x2a6/0x4d0 [ 376.918581][T18519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.918604][T18519] vfs_read+0x20c/0xa70 [ 376.918620][T18519] ? fdget_pos+0x246/0x320 [ 376.918640][T18519] ? __pfx___mutex_lock+0x10/0x10 [ 376.918665][T18519] ? __pfx_vfs_read+0x10/0x10 [ 376.918683][T18519] ? __fget_files+0x2a/0x420 [ 376.918702][T18519] ? __fget_files+0x3a0/0x420 [ 376.918717][T18519] ? __fget_files+0x2a/0x420 [ 376.918741][T18519] ksys_read+0x150/0x270 [ 376.918763][T18519] ? __pfx_ksys_read+0x10/0x10 [ 376.918817][T18519] do_syscall_64+0x14d/0xf80 [ 376.918838][T18519] ? trace_irq_disable+0x3b/0x150 [ 376.918853][T18519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.918869][T18519] ? clear_bhb_loop+0x40/0x90 [ 376.918890][T18519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.918906][T18519] RIP: 0033:0x7fe19955d04e [ 376.918922][T18519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 376.918935][T18519] RSP: 002b:00007fe19a3c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.918954][T18519] RAX: ffffffffffffffda RBX: 00007fe19a3c16c0 RCX: 00007fe19955d04e [ 376.918966][T18519] RDX: 000000000000000f RSI: 00007fe19a3c10a0 RDI: 0000000000000004 [ 376.918977][T18519] RBP: 00007fe19a3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 376.918986][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.918996][T18519] R13: 00007fe199816038 R14: 00007fe199815fa0 R15: 00007ffd58c5d548 [ 376.919024][T18519] [ 377.195872][T18531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3854'. [ 378.146507][T18583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3866'. [ 378.444849][T18596] bond0: entered promiscuous mode [ 378.454327][T18596] bond0: entered allmulticast mode [ 378.465309][T18596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.636288][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.871311][T18640] tipc: Enabled bearer , priority 0 [ 378.976636][T18640] syzkaller0: entered promiscuous mode [ 378.983528][T18640] syzkaller0: entered allmulticast mode [ 378.990045][T18640] tipc: Resetting bearer [ 379.048084][T18648] syzkaller0: entered promiscuous mode [ 379.054626][T18648] syzkaller0: entered allmulticast mode [ 379.064876][T18648] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 379.116657][T18650] syzkaller0: entered promiscuous mode [ 379.122553][T18650] syzkaller0: entered allmulticast mode [ 379.133787][T18650] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 379.318481][T18656] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 379.332517][T18656] bond7 (unregistering): Released all slaves [ 379.347729][T18663] SET target dimension over the limit! [ 379.417930][T18657] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.475837][T18667] Cannot find del_set index 49151 as target [ 379.587004][ T35] tipc: Resetting bearer [ 379.614746][T18669] lo speed is unknown, defaulting to 1000 [ 379.676198][T18639] tipc: Resetting bearer [ 381.167954][T18692] __nla_validate_parse: 6 callbacks suppressed [ 381.167976][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3900'. [ 381.253682][T18639] tipc: Disabling bearer [ 381.300185][ T798] tipc: Node number set to 3287034233 [ 381.537059][T18702] lo speed is unknown, defaulting to 1000 [ 382.014493][T18727] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 382.475944][T18745] : renamed from hsr0 (while UP) [ 382.875144][T18761] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 382.975835][T18767] net_ratelimit: 11 callbacks suppressed [ 382.975855][T18767] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 382.978790][T18761] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.286780][T18779] xt_hashlimit: size too large, truncated to 1048576 [ 383.479143][T18782] lo speed is unknown, defaulting to 1000 [ 383.802630][T18798] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3934'. [ 383.831057][T18802] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3935'. [ 384.033526][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3939'. [ 384.257071][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 384.376308][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3946'. [ 384.397945][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3946'. [ 384.561461][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'. [ 384.578274][T18836] netlink: 'syz.0.3948': attribute type 12 has an invalid length. [ 384.586671][T18836] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3948'. [ 384.628352][T18838] vlan4: entered allmulticast mode [ 384.644912][T18838] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 385.001122][T18861] nftables ruleset with unbound chain [ 385.231833][T18865] FAULT_INJECTION: forcing a failure. [ 385.231833][T18865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.279952][T18865] CPU: 0 UID: 0 PID: 18865 Comm: syz.0.3956 Not tainted syzkaller #0 PREEMPT(full) [ 385.279980][T18865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 385.279991][T18865] Call Trace: [ 385.279998][T18865] [ 385.280006][T18865] dump_stack_lvl+0xe8/0x150 [ 385.280034][T18865] should_fail_ex+0x412/0x560 [ 385.280065][T18865] _copy_from_user+0x2d/0xb0 [ 385.280088][T18865] ___sys_sendmsg+0x1c6/0x360 [ 385.280117][T18865] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.280144][T18865] ? kstrtouint+0x6e/0xe0 [ 385.280200][T18865] ? __fget_files+0x2a/0x420 [ 385.280216][T18865] ? __fget_files+0x3a0/0x420 [ 385.280242][T18865] __sys_sendmmsg+0x27c/0x4e0 [ 385.280270][T18865] ? __pfx___sys_sendmmsg+0x10/0x10 [ 385.280291][T18865] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 385.280339][T18865] ? ksys_write+0x242/0x270 [ 385.280362][T18865] ? __pfx_ksys_write+0x10/0x10 [ 385.280388][T18865] __x64_sys_sendmmsg+0xa0/0xc0 [ 385.280412][T18865] do_syscall_64+0x14d/0xf80 [ 385.280435][T18865] ? trace_irq_disable+0x3b/0x150 [ 385.280451][T18865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.280469][T18865] ? clear_bhb_loop+0x40/0x90 [ 385.280490][T18865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.280508][T18865] RIP: 0033:0x7fe19959c819 [ 385.280525][T18865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.280541][T18865] RSP: 002b:00007fe19a3c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.280560][T18865] RAX: ffffffffffffffda RBX: 00007fe199815fa0 RCX: 00007fe19959c819 [ 385.280573][T18865] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 385.280584][T18865] RBP: 00007fe19a3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 385.280595][T18865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.280605][T18865] R13: 00007fe199816038 R14: 00007fe199815fa0 R15: 00007ffd58c5d548 [ 385.280634][T18865] [ 385.906670][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3962'. [ 385.926805][T18886] netlink: 'syz.0.3963': attribute type 4 has an invalid length. [ 385.991440][T18881] bond4: (slave bridge0): Releasing backup interface [ 386.009060][T18881] bridge0 (unregistering): left promiscuous mode [ 386.131260][T18897] netlink: 'syz.1.3967': attribute type 1 has an invalid length. [ 386.165069][T18887] lo speed is unknown, defaulting to 1000 [ 386.223001][T18897] bond8: entered promiscuous mode [ 386.240550][T18905] __nla_validate_parse: 1 callbacks suppressed [ 386.240571][T18905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3969'. [ 386.254155][T18897] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.325981][T18901] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.368145][T18901] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 386.405934][T18901] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 386.425774][T18901] bond8: (slave ip6gre1): making interface the new active one [ 386.433633][T18901] ip6gre1: entered promiscuous mode [ 386.443867][T18901] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 386.618693][T18893] lo speed is unknown, defaulting to 1000 [ 387.225658][T18941] xt_hashlimit: invalid rate [ 387.268468][T18942] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3977'. [ 387.311210][T18938] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3977'. [ 387.359939][T18942] openvswitch: netlink: Flow key attr not present in new flow. [ 387.360844][T18938] openvswitch: netlink: Flow key attr not present in new flow. [ 387.725668][T18968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3984'. [ 387.871441][T18975] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 388.497476][T18981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3988'. [ 388.771225][T18996] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3991'. [ 389.137172][T19014] netlink: 'syz.2.3994': attribute type 1 has an invalid length. [ 389.279235][T19014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.321386][T19019] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 389.541848][T19019] 8021q: adding VLAN 0 to HW filter on device bond6 [ 389.563804][T19019] bond5: (slave bond6): Enslaving as an active interface with a down link [ 389.894401][T19053] Cannot find del_set index 49151 as target [ 390.359076][T19090] syzkaller0: entered promiscuous mode [ 390.380545][T19090] syzkaller0: entered allmulticast mode [ 390.432461][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4016'. [ 390.442274][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 390.639680][T19105] openvswitch: netlink: IP tunnel TTL not specified. [ 390.649198][T19110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.739396][T19110] bond6: entered promiscuous mode [ 390.864615][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'. [ 390.874790][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'. [ 390.997518][T19136] netlink: 'syz.0.4028': attribute type 2 has an invalid length. [ 391.281304][T19154] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 391.322550][T19157] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 391.406935][T19165] openvswitch: netlink: IP tunnel dst address not specified [ 391.459112][T19167] openvswitch: netlink: IP tunnel dst address not specified [ 391.575168][T19175] netlink: 'syz.3.4039': attribute type 1 has an invalid length. [ 391.612295][T19180] openvswitch: netlink: Actions may not be safe on all matching packets [ 391.632617][T19180] __nla_validate_parse: 1 callbacks suppressed [ 391.632634][T19180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4042'. [ 391.648403][T19180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4042'. [ 391.659448][T19175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.713973][T19182] vlan5: entered promiscuous mode [ 391.719188][T19182] bond0: entered promiscuous mode [ 391.726603][T19182] vlan5: entered allmulticast mode [ 391.732841][T19182] bond0: entered allmulticast mode [ 391.879640][T19198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4046'. [ 392.149499][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 392.404814][T19238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4061'. [ 394.445225][T19283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4074'. [ 394.455564][T19283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4074'. [ 394.474786][T19289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4075'. [ 394.486263][T19283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4074'. [ 394.500945][T19283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4074'. [ 394.544474][T19284] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 394.617528][T19284] 8021q: adding VLAN 0 to HW filter on device bond7 [ 394.662594][T19283] bond7: (slave veth9): Enslaving as an active interface with a down link [ 394.755415][T19284] bond7: (slave dummy0): making interface the new active one [ 394.811636][T19284] dummy0: entered promiscuous mode [ 394.817768][T19284] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 395.076509][T19338] netlink: 'syz.0.4091': attribute type 18 has an invalid length. [ 395.077188][T19340] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 395.148043][T19340] bond9: entered promiscuous mode [ 395.201132][T19342] delete_channel: no stack [ 395.215987][T19340] macvlan2: entered promiscuous mode [ 395.221973][T19340] macvlan2: entered allmulticast mode [ 395.229332][T19340] bond9: (slave macvlan2): Opening slave failed [ 395.342940][T19357] Cannot find del_set index 49151 as target [ 395.997819][T19400] Cannot find del_set index 49151 as target [ 396.094753][T19406] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 396.475759][T19434] Cannot find del_set index 49151 as target [ 396.502529][T19436] tipc: MTU too low for tipc bearer [ 397.101029][T19486] netlink: 'syz.2.4141': attribute type 1 has an invalid length. [ 397.161597][T19490] ------------[ cut here ]------------ [ 397.167473][T19490] hook not found, pf 2 num 0 [ 397.167505][T19490] WARNING: net/netfilter/core.c:514 at __nf_unregister_net_hook+0x2c5/0x6f0, CPU#1: syz.1.4142/19490 [ 397.183285][T19490] Modules linked in: [ 397.187534][T19490] CPU: 1 UID: 0 PID: 19490 Comm: syz.1.4142 Not tainted syzkaller #0 PREEMPT(full) [ 397.197726][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 397.207909][T19490] RIP: 0010:__nf_unregister_net_hook+0x2dc/0x6f0 [ 397.215838][T19490] Code: 24 30 48 8b 5c 24 08 44 8b 6c 24 04 48 8d 3d 9b 56 59 06 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 f1 02 00 00 41 8b 17 44 89 ee <67> 48 0f b9 3a e9 db 01 00 00 e8 35 35 e8 01 89 c3 31 ff 89 c6 e8 [ 397.236163][T19490] RSP: 0018:ffffc90003466e90 EFLAGS: 00010246 [ 397.242715][T19490] RAX: 0000000000000000 RBX: ffff888089a21b00 RCX: 0000000000080000 [ 397.251078][T19490] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffff90210940 [ 397.259078][T19490] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 397.267671][T19490] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff888036a78000 [ 397.275803][T19490] R13: 0000000000000002 R14: ffff888036a79388 R15: ffff88804f5f083c [ 397.283895][T19490] FS: 00007f3f6288e6c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 397.293400][T19490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.296416][T19498] __nla_validate_parse: 8 callbacks suppressed [ 397.296435][T19498] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4144'. [ 397.300252][T19490] CR2: 0000001b30724000 CR3: 000000003178a000 CR4: 00000000003526f0 [ 397.300324][T19490] Call Trace: [ 397.300333][T19490] [ 397.300354][T19490] nf_unregister_net_hook+0x9a/0xf0 [ 397.300390][T19490] nf_tables_table_disable+0x125/0x200 [ 397.300428][T19490] nf_tables_commit+0x51b0/0xa400 [ 397.300456][T19490] ? netlink_unicast+0x80f/0x9b0 [ 397.300511][T19490] ? __pfx_nf_tables_commit+0x10/0x10 [ 397.300549][T19490] ? nft_pernet+0x23/0x240 [ 397.300592][T19490] ? nft_pernet+0x23/0x240 [ 397.300620][T19490] ? nft_pernet+0x23/0x240 [ 397.300646][T19490] ? nft_pernet+0x23/0x240 [ 397.300681][T19490] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 397.300718][T19490] ? nf_tables_newtable+0x1474/0x1910 [ 397.300766][T19490] nfnetlink_rcv+0x1c1b/0x27b0 [ 397.300820][T19490] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 397.300858][T19490] ? ref_tracker_free+0x693/0x840 [ 397.300907][T19490] ? __netlink_deliver_tap+0x807/0x850 [ 397.408397][T19490] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.414082][T19490] netlink_unicast+0x80f/0x9b0 [ 397.418876][T19490] ? __pfx_netlink_unicast+0x10/0x10 [ 397.424249][T19490] ? netlink_sendmsg+0x650/0xb40 [ 397.429221][T19490] ? skb_put+0x11b/0x210 [ 397.433601][T19490] netlink_sendmsg+0x813/0xb40 [ 397.438403][T19490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.444178][T19490] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.449174][T19490] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.454550][T19490] ____sys_sendmsg+0x972/0x9f0 [ 397.459343][T19490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.464711][T19490] ? import_iovec+0x73/0xa0 [ 397.469238][T19490] ___sys_sendmsg+0x2a5/0x360 [ 397.474493][T19490] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.479717][T19490] ? futex_wake+0x4ac/0x580 [ 397.484364][T19490] ? __fget_files+0x2a/0x420 [ 397.488985][T19490] ? __fget_files+0x3a0/0x420 [ 397.493818][T19490] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.498800][T19490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.504874][T19490] ? rcu_is_watching+0x15/0xb0 [ 397.509665][T19490] do_syscall_64+0x14d/0xf80 [ 397.514479][T19490] ? trace_irq_disable+0x3b/0x150 [ 397.519541][T19490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.525691][T19490] ? clear_bhb_loop+0x40/0x90 [ 397.530877][T19490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.536816][T19490] RIP: 0033:0x7f3f6199c819 [ 397.541294][T19490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.561521][T19490] RSP: 002b:00007f3f6288e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.570162][T19490] RAX: ffffffffffffffda RBX: 00007f3f61c15fa0 RCX: 00007f3f6199c819 [ 397.578169][T19490] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 397.586225][T19490] RBP: 00007f3f61a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 397.594541][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.602801][T19490] R13: 00007f3f61c16038 R14: 00007f3f61c15fa0 R15: 00007ffd160a4378 [ 397.610892][T19490] [ 397.613960][T19490] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 397.621232][T19490] CPU: 1 UID: 0 PID: 19490 Comm: syz.1.4142 Not tainted syzkaller #0 PREEMPT(full) [ 397.630587][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 397.640720][T19490] Call Trace: [ 397.643990][T19490] [ 397.646924][T19490] vpanic+0x56c/0xa60 [ 397.650933][T19490] ? __pfx__printk+0x10/0x10 [ 397.655521][T19490] ? __pfx_vpanic+0x10/0x10 [ 397.660034][T19490] ? is_bpf_text_address+0x292/0x2b0 [ 397.665331][T19490] ? is_bpf_text_address+0x26/0x2b0 [ 397.670549][T19490] panic+0xc5/0xd0 [ 397.674369][T19490] ? __pfx_panic+0x10/0x10 [ 397.678808][T19490] __warn+0x315/0x4f0 [ 397.682788][T19490] ? __nf_unregister_net_hook+0x2c5/0x6f0 [ 397.688505][T19490] ? __nf_unregister_net_hook+0x2c5/0x6f0 [ 397.694217][T19490] __report_bug+0x29a/0x540 [ 397.698718][T19490] ? __pfx___mutex_trylock_common+0x10/0x10 [ 397.704614][T19490] ? __nf_unregister_net_hook+0x2c5/0x6f0 [ 397.710433][T19490] ? __pfx___report_bug+0x10/0x10 [ 397.715549][T19490] ? nf_tables_commit+0x936/0xa400 [ 397.720663][T19490] ? nfnetlink_rcv+0x1c1b/0x27b0 [ 397.725604][T19490] ? netlink_unicast+0x80f/0x9b0 [ 397.730533][T19490] ? netlink_sendmsg+0x813/0xb40 [ 397.735471][T19490] ? ____sys_sendmsg+0x972/0x9f0 [ 397.740405][T19490] ? ___sys_sendmsg+0x2a5/0x360 [ 397.745250][T19490] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.750360][T19490] report_bug_entry+0x19a/0x290 [ 397.755210][T19490] ? __nf_unregister_net_hook+0x2dc/0x6f0 [ 397.760922][T19490] ? __nf_unregister_net_hook+0x2e1/0x6f0 [ 397.766631][T19490] handle_bug+0xce/0x200 [ 397.770868][T19490] exc_invalid_op+0x1a/0x50 [ 397.775365][T19490] asm_exc_invalid_op+0x1a/0x20 [ 397.780292][T19490] RIP: 0010:__nf_unregister_net_hook+0x2dc/0x6f0 [ 397.786617][T19490] Code: 24 30 48 8b 5c 24 08 44 8b 6c 24 04 48 8d 3d 9b 56 59 06 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 f1 02 00 00 41 8b 17 44 89 ee <67> 48 0f b9 3a e9 db 01 00 00 e8 35 35 e8 01 89 c3 31 ff 89 c6 e8 [ 397.806213][T19490] RSP: 0018:ffffc90003466e90 EFLAGS: 00010246 [ 397.812276][T19490] RAX: 0000000000000000 RBX: ffff888089a21b00 RCX: 0000000000080000 [ 397.820243][T19490] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffff90210940 [ 397.828218][T19490] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 397.836182][T19490] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff888036a78000 [ 397.844160][T19490] R13: 0000000000000002 R14: ffff888036a79388 R15: ffff88804f5f083c [ 397.852178][T19490] nf_unregister_net_hook+0x9a/0xf0 [ 397.857405][T19490] nf_tables_table_disable+0x125/0x200 [ 397.862869][T19490] nf_tables_commit+0x51b0/0xa400 [ 397.867889][T19490] ? netlink_unicast+0x80f/0x9b0 [ 397.872933][T19490] ? __pfx_nf_tables_commit+0x10/0x10 [ 397.878316][T19490] ? nft_pernet+0x23/0x240 [ 397.882761][T19490] ? nft_pernet+0x23/0x240 [ 397.887174][T19490] ? nft_pernet+0x23/0x240 [ 397.891584][T19490] ? nft_pernet+0x23/0x240 [ 397.896000][T19490] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 397.902239][T19490] ? nf_tables_newtable+0x1474/0x1910 [ 397.907629][T19490] nfnetlink_rcv+0x1c1b/0x27b0 [ 397.912411][T19490] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 397.917526][T19490] ? ref_tracker_free+0x693/0x840 [ 397.922564][T19490] ? __netlink_deliver_tap+0x807/0x850 [ 397.928017][T19490] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.933226][T19490] netlink_unicast+0x80f/0x9b0 [ 397.937996][T19490] ? __pfx_netlink_unicast+0x10/0x10 [ 397.943281][T19490] ? netlink_sendmsg+0x650/0xb40 [ 397.948209][T19490] ? skb_put+0x11b/0x210 [ 397.952450][T19490] netlink_sendmsg+0x813/0xb40 [ 397.957212][T19490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.962503][T19490] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.967443][T19490] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.972726][T19490] ____sys_sendmsg+0x972/0x9f0 [ 397.977496][T19490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.982926][T19490] ? import_iovec+0x73/0xa0 [ 397.987427][T19490] ___sys_sendmsg+0x2a5/0x360 [ 397.992105][T19490] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.997303][T19490] ? futex_wake+0x4ac/0x580 [ 398.001825][T19490] ? __fget_files+0x2a/0x420 [ 398.006402][T19490] ? __fget_files+0x3a0/0x420 [ 398.011072][T19490] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.016010][T19490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.021481][T19490] ? rcu_is_watching+0x15/0xb0 [ 398.026270][T19490] do_syscall_64+0x14d/0xf80 [ 398.030875][T19490] ? trace_irq_disable+0x3b/0x150 [ 398.035912][T19490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.041981][T19490] ? clear_bhb_loop+0x40/0x90 [ 398.046655][T19490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.052537][T19490] RIP: 0033:0x7f3f6199c819 [ 398.056947][T19490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.076636][T19490] RSP: 002b:00007f3f6288e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.085054][T19490] RAX: ffffffffffffffda RBX: 00007f3f61c15fa0 RCX: 00007f3f6199c819 [ 398.093019][T19490] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 398.100978][T19490] RBP: 00007f3f61a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 398.108937][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.116897][T19490] R13: 00007f3f61c16038 R14: 00007f3f61c15fa0 R15: 00007ffd160a4378 [ 398.124887][T19490] [ 398.128265][T19490] Kernel Offset: disabled [ 398.132588][T19490] Rebooting in 86400 seconds..