last executing test programs: 2.287194441s ago: executing program 3 (id=4187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x157, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x84f, @remote, 0x4, 0x1}, 0x20) 1.994160501s ago: executing program 3 (id=4192): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$nl_rdma(0x10, 0x3, 0x14) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 1.519358192s ago: executing program 3 (id=4194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) socketpair(0x1e, 0x2, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r9, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x27}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000400}, 0x4800) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf253e000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263775f6d61635f69735f6d756c746963617374000500830000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) ioctl$SIOCAX25GETINFO(r10, 0x89ed, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x8, 0xc35, 0x6, 0x9}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x40851) 1.471944206s ago: executing program 0 (id=4195): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a300000000009000100"], 0xd8}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) (fail_nth: 8) 1.434507388s ago: executing program 4 (id=4196): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1108, 0x12, 0x800, 0x70bd29, 0x25dfdbfb, {0x3, 0x2, 0x8, 0x0, {0x4e23, 0x4e22, [0x3, 0xc6, 0xffffffff, 0x6], [0x26a, 0xaa39, 0x3, 0xfffffffd], r2, [0x3, 0x7fffffff]}, 0xe, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "beef2f440257899a9ad8879b495015db96d8cff48d800e0167745db7b5a8fd9fc5b8f0c72101c49f7c532a13f7763d5b77151857f5c594256b6bd936e487679a690b245a114220792dfd235c1ae25f900997c9a94880122e02550f5b38e100b585145132124d9141b490e9d634db5e8faacfde3df2159dc6e216a6c86dd2c80f5879bc0d09e7cbd481e16015845b726584a9d6c1516173179fb64b78f4160098d4fbfdec3bfbe30562f8cf15e244a0f5c232"}]}, 0x1108}, 0x1, 0x0, 0x0, 0x4000880}, 0x40010) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x3, 0x4) 1.299749324s ago: executing program 3 (id=4197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.277471518s ago: executing program 0 (id=4198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket(0xa, 0x1, 0x0) listen(r6, 0x7f) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000100000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.271367632s ago: executing program 1 (id=4199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (rerun: 64) 1.159584242s ago: executing program 4 (id=4200): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000a00)=""/95, 0x5f}], 0x2}, 0x4ce0}], 0x1, 0x20, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x464, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xfff3}, {0xffff, 0xffff}, {0x5, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x438, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "a4113289214100995478f25fd176966f912445f60f3ec5bdd05b6d4c129e878af1640acad63ddf23bfd479c71f1b5cb75c55ceaed2b6cc96ba38c5113cd9f9c6ed8463be56d6d35c3223007f4d81f0474e2b413b7b8338241d0c40f0bf5ec329fe007deaf2a6b4f4532f259649ede4af7da929ea7909947a6c55a144944670d75615b29b3b561f338f586b1af0b43716723b13f55ce5ad25811854c2d3efca3a750a9b92b8dac9a29dd644d609de36f69823a4dcdfcb8d44145c6359da67753bed85d9f26efda91a18b47aea561628d9569fb08e3c75b04e1f1991173dd5d9b6fc6c44eaa25a3f141e7c9aa69ff733ddedbf3a3cc0bb06cf7f683389675d3182"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7}, @TCA_RED_STAB={0x104, 0x2, "9033772b32570ffbd473622f7b76b48c27700db99910acb99cc6daf79934b5a4b4db27eee4f05e6e20891f8efe02d0acb44f48ad199e18acd3ce81430c9878853de91a5b52b39f00a15e2df3936aa9bdc607bd0ccc53d69e532f1c654012bf8f1c01c858c91e5869e17abf904f45d070e4dd46048bc298cf27ef77db5bd04fcea22c66a7c6c4d4db502758f39769cc3fc84bc49d37cc19b5165b848ea4ea9e3851c03093fc6e2ed7971c4f3e4b9fa968e78985d758102d958caebfce60274257995eba2b24e7d73b80d39e3f1230917717fefe6c5b06fa91e768fe6a36292ba2787d2f17b696442acd47101f3c87738ae691a6919f6b8ba95d53937f11012bea"}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x9}, @TCA_RED_STAB={0x104, 0x2, "84523e118b1e385781fdef76189c224a38d44d70a23324dedbf6e41f2d17a0e35b6708c05ccc9fb96a462b5de0d199c00e0b3eb34b0af049797c9053897ad9ed8c294e1ca37d93b4385519518dc50900194eeb4cb41c0b19946faf9d6878df9a4980810c932f07fe7b28b5f486af6ba287cc3aabf5d6418f2e8a60b5891735c915bc279025fd9c97310d7327d841185a148ef48c0019bb043dd2229c744d02adc836523e1a85a222222ac642e688398358e591b3705061a4a802e2500462a6981aadae1156667b060bcad83eb830c668a7ea5212f4c841b4201200bcc03e25f365178319c1cf905fe7c8a38ce7281bbd6a220a3683706af8cfbebab7ed5a7976"}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}, {&(0x7f0000001fc0)=ANY=[@ANYBLOB="a01100001f00000323bd7000ffdbdf25840025800400b58008004b00000000000b004a0074617072696f0000168a0b240da44ce4a594bf295aa4db13782ff1e106842507dab0964067ac5e6489944c3c4797e56eb2287cd8a0467b4d71cb6411b550dd1a4a985ab9463ad4dfcfb10826d895ac0379ddfe4f4054a3fc36eb12da9c3b469ad38bcef095b41c265b7479e0f57d9315429e68632aa49a9444d1929247c6b4c6c9e025b1e65ab60f7e7e96056819d05f4499b61b5af7dc64276390fe1bc24c12c3b4bfc123e327c14cfc7a4f2324c18b53cdbce5e006115f657760b595b0b285b9d84bba49b02dc54f23189e4744eabcea2c893bd91574d13f85c0c4c9cbbd2358b6f1b77288daa49a04c1dff9b5090cb840777f02f7bdc9dabab56e48498790a3d013408ad0d6895b6a2e6a21fd44561170395bd64168c4a524a64b73452da595de66379f374344f7dfc1425650ceef8cb6e761529e442d436b2dd00f4ad047d084964afefcedb4b027812596fdfe486dc5dc9d96c7345a7afe34306989d0c400e07a13f8ddccd15bf51e643ae62569ffc49f5c6675b77a65161ffbf89456c5a1b19037baa23cd2ac70a89f94d851ee6548a84e4c3d1e298b40303bb1d2030a9b1dcea8dd661308f69498b6dbd2dfc3aae01f2c057f5cfbb491e6fb32130b57d9a39a6f06a9e0472f9a678fc1dc100cb70b8e53aebe022a0df3a597b721c6391bf03a548b89836bf213c4459e051cbed9327470510a78aadd752fc82adc14eb0c2ffebb6c328e0ce1d5d5e8e7dd15655c97014d611280b8ee98848050412870993995e7cea01891e24341abb0a86c5aba56b117ab310924d9133cfc50f733264272dfff509859021acd76d1236ae386b25cdd9c778949041ab10c7f81ff14895392d281e97a6dc91aa359d80b7c0100b6e2e6fe3900b77c679c5dcac29f70bab53c0c3642d527e0f63eb6667645052229b266e115d5ecd42c65b6e27373a702f68b213dfa4fb6fc28da8185dfae09ee1d75b909ee783a9ed6e62a4cd3012d543c8bd69dbf1a1e11d32d3d443ed17c6f817e3d2fb3d73c728ff64e2e58a202c2f311c29dd12c54089227c404dc50d7e29413cd9f7bee1a8286b45fd60853c4dee2bc5a36bc4d85c8cd0237ba1cf798f9cc13405d21e49344a191875ba1c029cfae0cc5c79c842b1eff26b707c53bfd129c22756efc42725817a2070a776eccc510ac0d239f85d6a3299af235b25a03ec67b9f2e2f70d6234bdd03cbe1aabfb8757c59c676c4d12a46e491c2e7cc65625f98ceda8c2523f13edc1efcd1e392297de1d1985367c45af5c28deb31b908efc719d9d5ed587036a4b230ec6b0468cd5a6bffd65de02899cfbae8b4de071bc15c7d328b7052faa31fa5c0bea0eaf730ace9889b2e6bb499694f54a6433f96a2d18dce83d1276948327f32836d895961d2112b6f8d2f0aae8e33795e206aa90670b9b5f0edaf056df48c26376d7df5b72ff62bbaa058ff710171f6b3ba9e8166fbf02e85fb519493a5ab4fe6acd284f729c67824707022cc2de09214938b2cce0db3d6073859faf3812a5be6e288b741903d77600f880ad656bdce8a60f942ca5f8841c5e2e1830b41958631d12c645101b65755e14861a430992b8249c3010581e5813fe79ec06013cf3c96c6fa536ef5f8e74bb49dbe421572f6d9f768a93dded8f35c5b73fa11fc298252eaa4eb7d06f509deef72f8a1e38c2f5323094cd3f32845b74ef2707a44e082d0c4cf4fa0fa89a54123173f8c4d45435176710b02aecb597c2b39e38b032f1c00d03a3b3206a25132a133a568bc1dd599f7cddb7c0d087f3cccdbec4d74d991a0956aead87f32cd85a5e91ec7fb9c9474224e0ce78e8b96caa223f2ecdf6416c3f3cd73c53fb959fa87ad32a1d6798f83d3b4997d0f0da97361f4374bbb92d377aec3a74bff19edb31a0d9a74160d6a99bbfff6e082cd076f2ef12033419cbb2f0f9d4730f6152bad9abb3e1feb651128015abc011235cc29743a7cabbd591ee59e4c600bf65e41faf83a40b0627f4fa8ea76db7d311d4fd70fdbc33fbc35f39e40d424fa389fab3d44b8de3cbb9b5ced889ae3a1e8a613394fb596347ee74800fde2c1b2405cfebc8c101cc76ed6a36aad3a31af39c964317657186e685c421535089a78e47063acd3ff84e94d910a4db9e92a024be0884e8b116a5a2afd0a30ae509b35e7fcdedd2cf565bc085d8e6fa7b12c3755a1ce4de8908c2e6dbc4b456f298eb9d10716c53656cd5c2c341a69f38a7045530e3d2b11f0f57511090ced1d2d267b8e3a6d26926c92c57f24e0f3e247ca2805a51acb521f6b9f004c34d817b1a716d6be77b7c81e6231a5385065bd90f4332114ab170f2f5ed3bb3b5bce0a8641d5c79a6a4c9996f6aa9c4f7db260bb1a6dbfcc557a54f32dd1dabe663221a1c86baab88d5f5f0ab219fd7ab0548793ae74728a658e1ed7b41fd231dd2e19ecebe568300c0471b169d6dd9a6981d40ef843a7c18cd65b5c8020969b7d6a6500a927a8210518df34992dd15f26398dee367941e7dcbf10de118102dff3f4f2955630f755bf67b173c34dd64a403d49eb248e6e2db41dcfad6fbaac8b3e533ef75226c0faf2f165181cc973b11db1b66a2c2d752a7341ff29d1d07b4834eaa42ecc86f7a430ee6ec769a192f6a2f4aaf8a933740d772a028eba07af10c5766ecd10395ad33ab0b470d7572ba4c05726249935927d7919dbbafb41a5cbfc4433315633ec8b0f32c431c1255d3acf3f82a40350d3710ddc30d0e2b23d6fc71c7618070977ad7f6f77ff6733df4558122218825b38b217ac408f4df3b6b8a9cfe1cec494999e37f0494ce7af84e369de78c5ee0e2b3459703efe5d273ffc8ff7de340aee91e9cc7510ac0ce2afd63457e1307dda34e7f814f492744563c4ed771da2d86f08ed151167ff1acd1c5fbd7c8fd6374ed70a8f0f2d47b832252e5b4e100bad64db5cea403ddc64ce814ff5eb9d60a69bf0253c69487d868525b5d652ca50d300add8c7574184031f718585eed3ce2108677fe2cc0fc911849ead374155362e812042ea941f783ab2653d807d279b0475eb29112341309f451376ea2f80a4de6a3cb932bf70a9172775b035ffdeb386a93229b62123b9b6e23e6a27dc6ca91f818b40a79048c39651d72e63a95440301cbe9268d18ee38e7780141d6fc3d93f6909a069dfcaa2b0e32c071e6750e601e5b944b5372fa820a2dad0b17464ba9bb5a89570f31735a8e966adbee0b2e8a1cabae75411683e7de7a106085609a9ac2892b237572fa6ac61c02419750acc275af97e7b23e92c0eecfef98dd7697bcbaf7ee30f00b0872e95cc8ea03f4d185f45365833459cbe0cfb69feba5aec36984eccf54e0b9dd1ab67d44bff5430f0ca24f87a97e825530505ef658a888429ff186e26d7a44fc306e7dededa713c89c49cbee450aa318f22d74d9390bf7489c1d570de1a863b6e0a12f631389089acd24384b00b31d94279926faaaada2e9b3a7e5d730814e88d5b49d8d15ec2c505ec839ef27aaa1ef2db4572aca4c27674899aeff9432d52564aba1c407b33846d0ed1d682ca359ac5e456bf285b4198b719fe60c8777978f0cd7ded9a103418681b6f26a661a1c3f9e7e6493dba2508b9f229683a56dc00df725d3cf9282a7e9bf4d4daaa6e87d66daa531a69f40b33cf60c0f9316ec470d0cb83d068d7f69d5789f6d3d8634e0f1dae5e925c867e7357f6e12f02dd43e1a9a0acd1ae56ab9b6a10cd36b50a429e12270f2cc1c31cf7196fd3120d9bffd730102155acd20a6ecb78d622fd25f4fc07f52c063a2cfa8cd9fe9fe999248e86965db427338f2e202b25b1faad3762f3c1e33fc8dc83f2f16cbd802c5c075cb5dc61eb17f5997ea84fa391ee403f07de0a11e9e70022b408f3971cd679868a2259a53072f329cc6d8aea64c4011c946df1ab6e30f66ffbe852d74b9b09324aeea1fd6a16e5282a051f605c1816e99b232fd30bd805667ced37f996bfce36aa755a5bcf14bcd71e7548c6a0bbd11bd5cf9f56f2615a58fc03adf50e85348a393a9750d66a38c144e145b51a05be689e6c9183966481dd3cb1290d228c54db7a73b807150c413d39671512b1d8831445826f8141b2da0450554782a38f7e0c39f93a73e7234636cdd92e6459418d31851be62d1f1ae3744b863a6ae7b931fde67c1a9dc1bab6796a02dc2f24f82cdec14c8391c7b2d19e6b64c879e2a738a8d5349f29c78bc820c4f3bb81a60ab4443cafcad25140928e1da8976801c8b5e48ecad4f1e0c8c1816f3dcd8045f13713c8195520e2d403b2ae562f506b32ee8757f26804919f6996f9a8caa66bfb963b0b8d58345d04b1cf46c53f8dbddf103bd2188e79bbdd36d83b72c9cb98992a7855ad409fce7bb97f5d82fee3b699fefe6e2c0a496332dc9ded59027fdb915f7a24ff1efe0ffeb58a6a0c0b3425d28d27e18f3a1f612084b5e5a4dc9833d8fdf69f746b9e5042b66645e3593e8afc2f6f2524f4bcce3adb0472fc4a2c6d5dfdf5e297939d9e5117517a9d49ef5d8ab041a255d779fd77f2ea119310214ec01c700cf42a79201e3134ecb209cd5e37d570c06aed306366098d39c58595a0a7b17b46e75bae56894ed527de539e93b396b42b7ccfec37fe22acecd9117d9afeeebad086b000f82af5cc1e393c6d79ef25c5aa5e670958265331e2c98bd14b087a418b19e5a7dd6e236c8856564ac2b802f2f0d7ff335c52ae30679668d16bfe0e2809dc3a7850bc0ffae12f09d692021fb4aaaf427112c19585ecd87d63a7b7a6835c6fc7687a69a2c87640304e1ad4c39a58c6ec7904f526ef8f796c674c4ccc285b116235e77696f1a31d9e6358020fa87bf9d02aa30d29d4eb8eb9f9ea5c18052ec47bf72e1893c70820e158b191e8273079e869f7d7126c32b04253f51bf34ebe43d97dee8f552fab4a9042bd93ab96f3b4fb3f75615b6a9bf1d4cba5d14c2af32ffc2ef34d6a69d2714839152ea3eb64816b42d19cc00cbe4632acd020e52bc00199ef071b726e3327440936ccfcd536eb1471bbbe945fcefa586165a6cde7023df02ecc39c4bea6ab337e8883b15f762a33bd23959ee85043e80c55870c4fa2bbba4083eed0bbd90efe7a9a21d29ce2eece1b41224d6f38beaf5fd7c925d7cdffd03545267443dc0c28e896864efe85c4646907e3f09c7140e69c49a11fdf27a10b498dc6c46da4bf071a366c78ae40d98b1e132e5ec2746cd936fc728a6545bc99ae965c8c7767da726093e95a8631390def2a0aa681201aa0ccea011c0d264f67f868ad518c684de478367233e4dde8534aae63453ac477e2d41bab9a3b0b6f435b723bd7914df5305fc7c540714ff7ecba69ce51ed562c9db58713248682f81f0993e8ee3a99f835903780729781a77b9766fa058401534882d9433cf9d95164449fecf38111d8b7b6994b178e41ef7e6394d5b6fe842c30e41639fef836d1c88a46626ab6b6a3e27bbffc3b27bc62a7f24ea69bcd94fa7c896988dcb313a2efc64636ee5ba8652c294efd9ed0363509286ba868570d67ed73e110d7da187b6c31d72b4088f2c78bb9545c8410b726e457ac2bf72bf40d9063184484728a7b51ebda13193ff18e437b391c272504983dac603be2694fe53e1a283a7cb6e608917848ccd32cc16068bb91bdab74d412c86cfd8f8ce0f5c4a530b502aa9f06401e3ab13554e85862db3ae62b540624eb89f6589c00b32007ef2abbdfda6f35cbef1ad2fd955a0e47755f477f3a55006b6206d0b65520faec5c2aac3adf20db6b256a16bc29a0dea196062674da30aed480d9b5eb579f72f6945d87e5661abe4e1e61a0ff3f897fcc655602ca256389a2149a27066f190cf950b2aca5180b395651bf1db114dee4d8f3a356665e13ae3824ab84da86bd4600c681c00cd4910e3663c55220570f0240d665f792604df44c389fc77613a0dcdad3e130509c46dc616768468ce7d02af2782a94ead167614886931e278241fea0de1b446ef3f514d4cd82d2e47fbe6578cdd4a06739027b4a61a95c3969446da7fca26cb18cd325ef6c5623b1ed319ffceedb9d3da0eb78816e21691007c95531a31002680503689d9268730406560ba843ab1915798ec574bf045f50637c60a46863cab43232cd7eef5482ace02fbd092ea00000018005680040042800400b08008008500", @ANYRES32=r0, @ANYBLOB="0400488023d6bccf683603765028cb498785ba8860db76fdce79b26807c99f89b192edb3b3334ecaff69aa72fccd67ef2322cca54bf5693dd7b8858b98463a61ee25a7ccaa78be1b3719de51a411edcc9fc732ab71aca2d08d33f2a2a2e0d392b3b4b8d2652e00"], 0x11a0}], 0x2}, 0x0) 1.156348894s ago: executing program 2 (id=4201): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0x300, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0xed, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10) 1.070340607s ago: executing program 2 (id=4202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 1.048464809s ago: executing program 0 (id=4203): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 971.649977ms ago: executing program 4 (id=4204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000100140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 971.407711ms ago: executing program 2 (id=4205): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 943.228607ms ago: executing program 1 (id=4206): socket$igmp(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$tun(r0, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r4 = socket(0x21, 0x5, 0x401) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, &(0x7f0000000140)='t'}, 0x20) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r4, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x4, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x66010101}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x6f6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 893.079066ms ago: executing program 0 (id=4207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x24000010) 775.641736ms ago: executing program 2 (id=4208): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000}, 0x800) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x27, 0x2}]}, {0x0, [0x2e, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x61]}}, &(0x7f00000002c0)=""/209, 0x31, 0xd1, 0x0, 0x81}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0200000002003096137572c72b9f70cbe7000001000000008000"/39], 0x50) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x303, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 64) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000980)=0x1) (rerun: 64) 772.911378ms ago: executing program 1 (id=4209): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a300000000009000100"], 0xd8}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) (fail_nth: 9) 761.421468ms ago: executing program 0 (id=4210): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2981, 0x4fc25b57, 0x3, 0xffff7730}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001980)={0x401}, 0x8) getsockopt$rose(r0, 0x104, 0x6ba05eb0794edd29, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x4, 0x500, 0x6, 0x180107}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3ff, @default, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001940)={'vcan0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x4, '\x00', 0x0, @sk_msg}, 0x94) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000003000000040000001200000000000000", @ANYRES32, @ANYBLOB="01f8ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002000000000000000000004000000000b30c0000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f00000002c0), &(0x7f0000000440)=r3}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) sendmsg(r6, &(0x7f0000000400)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="734d81582f5b274b644b54edf1a5b0d17cf2c5c7f4da4af4d7122303bcfaf0a13f2d7d805d1b75b765977590837691bca1ad1493ae70c5d57ac25abb5832103ac5f58e62ccb9c5fab1eaf59c23639b8ee0176ed0f6b7e4550a50def47632b846ee", 0x61}, {&(0x7f0000000180)="111409493fad72c9622aa483289b9fb5771017e8d0d9a5c60687db88a2232460abee861aa3fef1beca85cdaf54296560d4ff984dd457b61cfa3d6954b88ef4520129ecff4b9aea69fc8f9aaf9d1c0172", 0x50}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000280)="6358c21aec623a6d10589105cbc018e13f1ca50cb201782a3ae70d5cce", 0x1d}, {&(0x7f0000000300)="ad257114f0d2c43e8a240d9a157dbdaba62e2c89ce", 0x15}, {&(0x7f0000000340)="09dc54990234aaac5d66d66ab8fb4cd92df7f9a618451dba6dd7e0cbb0839292dab7e72d0500a7152a5eea5f361c86050057760753f8a04f", 0x38}], 0x6, &(0x7f00000019c0)=ANY=[@ANYRESOCT=r5], 0xd0}, 0x14) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) 442.407252ms ago: executing program 4 (id=4211): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffa3ed}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x400c040) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d650000"], 0x44}}, 0x4) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d650000"], 0x44}}, 0x4) 363.555053ms ago: executing program 4 (id=4212): socket$inet(0x2, 0x3, 0x2) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$unix(0x1, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 322.956897ms ago: executing program 1 (id=4213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000000000000000000000000000000004000000000020010000000000100000000400000000000000004e2400000200002021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff00000800000000000000000002000481680000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 316.120243ms ago: executing program 3 (id=4214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000040a01040000000000000000020000020900010073797a300000003000000000a49a351beff3d821a5f1f89539bfef42d5da2499b47aca72a118d5209ad9214054d3f49f7f8fa183653b922762bb5b1a2be87d4253e1ceb65eefa5a255a866f9413d88dcaf1f9a0e905513efa99769ac703a59a0d066cfe8bbb089c452e17d0000000000000000dac4944bf49edecc68c94b647495bfddbf190bdb9396cc037fe5fa77f37647"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 291.189159ms ago: executing program 2 (id=4215): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) 253.508305ms ago: executing program 0 (id=4216): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000190001001647d7189755db2000000004fe050000000074"], 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x2, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRESHEX=0x0], 0x4c}}, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0xfffffffffffffffd, {0x2, 0xff, 0x4}, 0xfe}, 0x1e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a247c3375665f1451949cc0010b176ef3809d61ad2274871c22ce161543c7f570b8da73c2f78b97b8f3c5eba999144be36a42aac7cf35"]) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r9, 0xd1a}, 0x8) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r10]}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r12, r11}, 0xc) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (rerun: 64) 163.876762ms ago: executing program 1 (id=4217): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 121.527783ms ago: executing program 2 (id=4218): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301410000000000950000004d000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301410000000000950000004d000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 80.302296ms ago: executing program 3 (id=4219): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001400000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 62.207531ms ago: executing program 1 (id=4220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x24000010) 0s ago: executing program 4 (id=4221): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000e001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001", @ANYRES64=r0], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) kernel console output (not intermixed with test programs): 0:50 [ 416.801539][T15963] netlink: 'syz.2.3233': attribute type 2 has an invalid length. [ 417.203967][T15979] netlink: 'syz.3.3239': attribute type 4 has an invalid length. [ 417.358728][T15982] __nla_validate_parse: 5 callbacks suppressed [ 417.358749][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 417.417862][T15982] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 417.441790][T15982] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 417.458862][T15982] gretap1: entered promiscuous mode [ 417.472696][T15982] gretap1: entered allmulticast mode [ 417.766750][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.776845][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.794680][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.808828][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.820631][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.173613][T15994] gre0 speed is unknown, defaulting to 1000 [ 418.232292][T16010] netlink: 'syz.4.3251': attribute type 10 has an invalid length. [ 418.240293][T16010] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3251'. [ 418.268203][ T5844] Bluetooth: hci1: command tx timeout [ 418.303755][T16014] sctp: [Deprecated]: syz.3.3253 (pid 16014) Use of int in maxseg socket option. [ 418.303755][T16014] Use struct sctp_assoc_value instead [ 418.438104][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 418.555982][T16024] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 418.767877][T16024] nbd29: detected capacity change from 0 to 127 [ 418.780366][ T5844] block nbd29: Receive control failed (result -32) [ 418.949097][T16041] syzkaller0: entered promiscuous mode [ 418.954629][T16041] syzkaller0: entered allmulticast mode [ 419.098465][T16049] netlink: 'syz.1.3265': attribute type 1 has an invalid length. [ 419.354067][T16064] netlink: 'syz.4.3269': attribute type 1 has an invalid length. [ 419.368837][T16064] netlink: 'syz.4.3269': attribute type 3 has an invalid length. [ 419.390703][T16064] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3269'. [ 419.440223][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 419.878207][ T5844] Bluetooth: hci0: command tx timeout [ 420.654280][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3268'. [ 420.742279][T15994] chnl_net:caif_netlink_parms(): no params data found [ 420.999155][T15994] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.009425][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.016930][T15994] bridge_slave_0: entered allmulticast mode [ 421.025530][T15994] bridge_slave_0: entered promiscuous mode [ 421.046379][T15994] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.053610][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.086005][T15994] bridge_slave_1: entered allmulticast mode [ 421.094827][T15994] bridge_slave_1: entered promiscuous mode [ 421.256232][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.284515][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.350506][T16108] netlink: 'syz.1.3281': attribute type 29 has an invalid length. [ 421.412264][T16116] netlink: 'syz.4.3283': attribute type 13 has an invalid length. [ 421.420449][T16115] netlink: 'syz.4.3283': attribute type 13 has an invalid length. [ 421.778480][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'. [ 421.790772][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 421.872943][T16116] gretap1: left promiscuous mode [ 421.880225][T16116] gretap1: left allmulticast mode [ 421.933152][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'. [ 421.951691][ T5844] Bluetooth: hci0: command tx timeout [ 421.957837][T15994] team0: Port device team_slave_0 added [ 421.967369][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 422.008913][T15994] team0: Port device team_slave_1 added [ 422.107132][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.116042][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.143162][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.187918][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.197062][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.223739][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.240403][T16142] lo speed is unknown, defaulting to 1000 [ 422.328914][T16142] lo speed is unknown, defaulting to 1000 [ 422.363214][T16142] lo speed is unknown, defaulting to 1000 [ 422.406415][T15994] hsr_slave_0: entered promiscuous mode [ 422.414515][T15994] hsr_slave_1: entered promiscuous mode [ 422.421344][T15994] debugfs: 'hsr0' already exists in 'hsr' [ 422.427377][T15994] Cannot create hsr debugfs directory [ 422.658948][T16142] infiniband sz1: set active [ 422.663772][T16142] infiniband sz1: added lo [ 422.703446][T13741] lo speed is unknown, defaulting to 1000 [ 422.728220][T16142] RDS/IB: sz1: added [ 422.732451][T16142] smc: adding ib device sz1 with port count 1 [ 422.742905][T16142] smc: ib device sz1 port 1 has no pnetid [ 422.807499][T13741] lo speed is unknown, defaulting to 1000 [ 422.820869][T16161] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3300'. [ 422.834418][T16161] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 422.848692][T16142] lo speed is unknown, defaulting to 1000 [ 423.211234][T15994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.245094][T15994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.351557][T16142] lo speed is unknown, defaulting to 1000 [ 423.445559][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3309'. [ 423.455484][T15994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.471467][T15994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.607963][T15994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.645100][T15994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.770820][T16192] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3313'. [ 423.783972][T15994] batman_adv: batadv0: Removing interface: netdevsim0 [ 423.813074][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3314'. [ 423.832607][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3314'. [ 424.025172][ T5844] Bluetooth: hci0: command tx timeout [ 424.059046][T16211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3318'. [ 424.231794][T16203] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.239651][T16203] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.644900][T16203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.666605][T16203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.801924][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3320'. [ 425.126641][T16142] lo speed is unknown, defaulting to 1000 [ 425.179290][T13751] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.215539][T13751] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.237725][T13751] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.268304][T13751] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.324794][T15994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.342302][T15994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.374812][T15994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.390804][T16232] netlink: 'syz.4.3321': attribute type 4 has an invalid length. [ 425.414547][T15994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.592348][T16142] lo speed is unknown, defaulting to 1000 [ 425.649071][T15994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.691199][T15994] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.714759][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.722055][T13749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.762791][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.770091][T13751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.941853][T16142] lo speed is unknown, defaulting to 1000 [ 426.076356][T15994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.105126][ T5844] Bluetooth: hci0: command tx timeout [ 426.197265][T15994] veth0_vlan: entered promiscuous mode [ 426.221479][T15994] veth1_vlan: entered promiscuous mode [ 426.314197][T15994] veth0_macvtap: entered promiscuous mode [ 426.344712][T16252] syzkaller0: entered promiscuous mode [ 426.350627][T16252] syzkaller0: entered allmulticast mode [ 426.360050][T16142] lo speed is unknown, defaulting to 1000 [ 426.368539][T15994] veth1_macvtap: entered promiscuous mode [ 426.429584][T15994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.467279][T15994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.510979][T13753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.535201][T13753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.561463][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3329'. [ 426.572638][T13753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.595773][T13753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.614060][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3329'. [ 426.669909][T16257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3329'. [ 426.816096][T13751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.834376][T13751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.957776][T16142] lo speed is unknown, defaulting to 1000 [ 426.958332][T13750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.002940][T13750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.038215][T16268] netlink: 'syz.3.3333': attribute type 10 has an invalid length. [ 427.132693][T16268] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 427.216583][T16275] netlink: 'syz.4.3335': attribute type 10 has an invalid length. [ 427.271517][T13748] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.294184][T16277] Bluetooth: MGMT ver 1.23 [ 427.300294][T13748] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.321880][T16277] Bluetooth: hci1: too big key_count value 32778 [ 427.336572][T13748] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.360692][T13748] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.652544][T16291] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 427.665104][T16291] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 427.713375][T16142] lo speed is unknown, defaulting to 1000 [ 428.185258][ T5844] Bluetooth: hci0: command tx timeout [ 428.250908][T16142] lo speed is unknown, defaulting to 1000 [ 428.689687][T16332] openvswitch: netlink: Key type 262 is out of range max 32 [ 428.710164][T16336] __nla_validate_parse: 6 callbacks suppressed [ 428.710188][T16336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3359'. [ 428.759374][T16338] FAULT_INJECTION: forcing a failure. [ 428.759374][T16338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.795150][T16338] CPU: 0 UID: 0 PID: 16338 Comm: syz.4.3360 Not tainted syzkaller #0 PREEMPT(full) [ 428.795182][T16338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.795200][T16338] Call Trace: [ 428.795209][T16338] [ 428.795220][T16338] dump_stack_lvl+0x189/0x250 [ 428.795254][T16338] ? __pfx____ratelimit+0x10/0x10 [ 428.795286][T16338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.795317][T16338] ? __pfx__printk+0x10/0x10 [ 428.795353][T16338] should_fail_ex+0x414/0x560 [ 428.795393][T16338] _copy_to_user+0x31/0xb0 [ 428.795424][T16338] simple_read_from_buffer+0xe1/0x170 [ 428.795462][T16338] proc_fail_nth_read+0x1b3/0x220 [ 428.795495][T16338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.795545][T16338] ? rw_verify_area+0x2a6/0x4d0 [ 428.795575][T16338] ? __lock_acquire+0xab9/0xd20 [ 428.795596][T16338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.795628][T16338] vfs_read+0x200/0xa30 [ 428.795658][T16338] ? fdget_pos+0x247/0x320 [ 428.795685][T16338] ? __pfx___mutex_lock+0x10/0x10 [ 428.795721][T16338] ? __pfx_vfs_read+0x10/0x10 [ 428.795754][T16338] ? __fget_files+0x2a/0x420 [ 428.795781][T16338] ? __fget_files+0x3a0/0x420 [ 428.795802][T16338] ? __fget_files+0x2a/0x420 [ 428.795834][T16338] ksys_read+0x145/0x250 [ 428.795870][T16338] ? __pfx_ksys_read+0x10/0x10 [ 428.795906][T16338] ? do_syscall_64+0xbe/0xfa0 [ 428.795944][T16338] do_syscall_64+0xfa/0xfa0 [ 428.795975][T16338] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.796008][T16338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.796037][T16338] ? clear_bhb_loop+0x60/0xb0 [ 428.796064][T16338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.796093][T16338] RIP: 0033:0x7fbecc38e15c [ 428.796115][T16338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 428.796137][T16338] RSP: 002b:00007fbecd2be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.796161][T16338] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38e15c [ 428.796178][T16338] RDX: 000000000000000f RSI: 00007fbecd2be0a0 RDI: 0000000000000006 [ 428.796193][T16338] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 428.796208][T16338] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 428.796223][T16338] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 428.796261][T16338] [ 429.241884][T16142] lo speed is unknown, defaulting to 1000 [ 429.432309][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'. [ 429.483880][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3365'. [ 429.501928][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3365'. [ 429.659949][T16360] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 429.671444][T16360] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 429.834171][T16368] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3368'. [ 429.977712][T16376] syzkaller0: entered promiscuous mode [ 429.985127][T16376] syzkaller0: entered allmulticast mode [ 430.022509][T16378] netlink: 'syz.0.3374': attribute type 4 has an invalid length. [ 430.220871][T16388] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 430.283313][T16392] netlink: 'syz.2.3380': attribute type 1 has an invalid length. [ 430.495297][T16392] nbd30: detected capacity change from 0 to 127 [ 430.510646][ T5844] block nbd30: Receive control failed (result -32) [ 430.598264][T16408] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 430.648878][T16408] bond4: (slave gretap1): making interface the new active one [ 430.657752][T16408] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 431.037683][T16416] netlink: 'syz.2.3390': attribute type 10 has an invalid length. [ 431.053086][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3389'. [ 431.069510][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3389'. [ 431.113127][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 431.202435][T16420] team1: entered promiscuous mode [ 431.208453][T16420] team1: entered allmulticast mode [ 431.283833][T16433] sit0: entered promiscuous mode [ 431.312642][T16433] netlink: 'syz.2.3395': attribute type 1 has an invalid length. [ 431.354185][T16433] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3395'. [ 431.597299][T16447] netlink: 'syz.0.3398': attribute type 1 has an invalid length. [ 431.708175][T16453] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 431.745798][T16447] nbd31: detected capacity change from 0 to 127 [ 431.752517][T16452] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3398'. [ 431.763335][T16453] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 431.792953][T16452] nbd: couldn't find a device at index 100663296 [ 431.801199][T16453] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 431.823817][ T5844] block nbd31: Receive control failed (result -32) [ 432.033279][T16469] netlink: 'syz.1.3406': attribute type 10 has an invalid length. [ 432.603330][T16499] FAULT_INJECTION: forcing a failure. [ 432.603330][T16499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.620758][T16499] CPU: 1 UID: 0 PID: 16499 Comm: syz.3.3417 Not tainted syzkaller #0 PREEMPT(full) [ 432.620789][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.620804][T16499] Call Trace: [ 432.620813][T16499] [ 432.620824][T16499] dump_stack_lvl+0x189/0x250 [ 432.620858][T16499] ? __pfx____ratelimit+0x10/0x10 [ 432.620890][T16499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.620921][T16499] ? __pfx__printk+0x10/0x10 [ 432.620943][T16499] ? __might_fault+0xb0/0x130 [ 432.620996][T16499] should_fail_ex+0x414/0x560 [ 432.621035][T16499] _copy_from_iter+0x1de/0x1790 [ 432.621073][T16499] ? rcu_is_watching+0x15/0xb0 [ 432.621120][T16499] ? kmalloc_reserve+0xbd/0x290 [ 432.621144][T16499] ? __pfx__copy_from_iter+0x10/0x10 [ 432.621172][T16499] ? __build_skb_around+0x262/0x3f0 [ 432.621198][T16499] ? netlink_sendmsg+0x642/0xb30 [ 432.621221][T16499] ? skb_put+0x11b/0x210 [ 432.621248][T16499] netlink_sendmsg+0x6b2/0xb30 [ 432.621282][T16499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.621310][T16499] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.621345][T16499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.621369][T16499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.621393][T16499] __sock_sendmsg+0x21c/0x270 [ 432.621429][T16499] ____sys_sendmsg+0x505/0x830 [ 432.621461][T16499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.621497][T16499] ? import_iovec+0x74/0xa0 [ 432.621530][T16499] ___sys_sendmsg+0x21f/0x2a0 [ 432.621559][T16499] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.621625][T16499] ? __fget_files+0x2a/0x420 [ 432.621646][T16499] ? __fget_files+0x3a0/0x420 [ 432.621681][T16499] __x64_sys_sendmsg+0x19b/0x260 [ 432.621710][T16499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.621747][T16499] ? __pfx_ksys_write+0x10/0x10 [ 432.621785][T16499] ? do_syscall_64+0xbe/0xfa0 [ 432.621822][T16499] do_syscall_64+0xfa/0xfa0 [ 432.621854][T16499] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.621887][T16499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.621910][T16499] ? clear_bhb_loop+0x60/0xb0 [ 432.621938][T16499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.621967][T16499] RIP: 0033:0x7f254358f749 [ 432.621987][T16499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.622007][T16499] RSP: 002b:00007f2544483038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.622031][T16499] RAX: ffffffffffffffda RBX: 00007f25437e5fa0 RCX: 00007f254358f749 [ 432.622049][T16499] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 432.622064][T16499] RBP: 00007f2544483090 R08: 0000000000000000 R09: 0000000000000000 [ 432.622079][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.622093][T16499] R13: 00007f25437e6038 R14: 00007f25437e5fa0 R15: 00007ffc895be788 [ 432.622130][T16499] [ 433.254784][T16526] IPv6: sit1: Disabled Multicast RS [ 433.396474][T16532] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 433.769425][T16537] __nla_validate_parse: 8 callbacks suppressed [ 433.769447][T16537] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3431'. [ 434.288070][T16569] syzkaller0: entered promiscuous mode [ 434.293702][T16569] syzkaller0: entered allmulticast mode [ 434.295472][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'. [ 434.331950][T16578] FAULT_INJECTION: forcing a failure. [ 434.331950][T16578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.364465][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'. [ 434.376705][T16578] CPU: 1 UID: 0 PID: 16578 Comm: syz.3.3448 Not tainted syzkaller #0 PREEMPT(full) [ 434.376742][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.376757][T16578] Call Trace: [ 434.376767][T16578] [ 434.376784][T16578] dump_stack_lvl+0x189/0x250 [ 434.376820][T16578] ? __pfx____ratelimit+0x10/0x10 [ 434.376852][T16578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.376883][T16578] ? __pfx__printk+0x10/0x10 [ 434.376906][T16578] ? __might_fault+0xb0/0x130 [ 434.376952][T16578] should_fail_ex+0x414/0x560 [ 434.376992][T16578] _copy_from_user+0x2d/0xb0 [ 434.377022][T16578] ___sys_sendmsg+0x158/0x2a0 [ 434.377052][T16578] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.377117][T16578] ? __fget_files+0x2a/0x420 [ 434.377138][T16578] ? __fget_files+0x3a0/0x420 [ 434.377171][T16578] __x64_sys_sendmsg+0x19b/0x260 [ 434.377200][T16578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.377237][T16578] ? __pfx_ksys_write+0x10/0x10 [ 434.377274][T16578] ? do_syscall_64+0xbe/0xfa0 [ 434.377310][T16578] do_syscall_64+0xfa/0xfa0 [ 434.377342][T16578] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.377374][T16578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.377397][T16578] ? clear_bhb_loop+0x60/0xb0 [ 434.377425][T16578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.377447][T16578] RIP: 0033:0x7f254358f749 [ 434.377468][T16578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.377488][T16578] RSP: 002b:00007f2544483038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.377512][T16578] RAX: ffffffffffffffda RBX: 00007f25437e5fa0 RCX: 00007f254358f749 [ 434.377530][T16578] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 434.377546][T16578] RBP: 00007f2544483090 R08: 0000000000000000 R09: 0000000000000000 [ 434.377560][T16578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.377574][T16578] R13: 00007f25437e6038 R14: 00007f25437e5fa0 R15: 00007ffc895be788 [ 434.377612][T16578] [ 434.798767][T16592] netlink: 'syz.3.3455': attribute type 4 has an invalid length. [ 434.800537][T16595] netlink: 'syz.3.3455': attribute type 4 has an invalid length. [ 434.831087][T16591] netlink: 'syz.3.3455': attribute type 4 has an invalid length. [ 435.078363][T16609] netlink: 'syz.1.3459': attribute type 1 has an invalid length. [ 435.084328][T16607] netlink: 'syz.3.3460': attribute type 10 has an invalid length. [ 435.096895][T16611] FAULT_INJECTION: forcing a failure. [ 435.096895][T16611] name failslab, interval 1, probability 0, space 0, times 0 [ 435.111830][T16611] CPU: 0 UID: 0 PID: 16611 Comm: syz.4.3461 Not tainted syzkaller #0 PREEMPT(full) [ 435.111858][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.111873][T16611] Call Trace: [ 435.111882][T16611] [ 435.111890][T16611] dump_stack_lvl+0x189/0x250 [ 435.111925][T16611] ? __pfx____ratelimit+0x10/0x10 [ 435.111956][T16611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.111987][T16611] ? __pfx__printk+0x10/0x10 [ 435.112017][T16611] ? __pfx___might_resched+0x10/0x10 [ 435.112042][T16611] ? fs_reclaim_acquire+0x7d/0x100 [ 435.112083][T16611] should_fail_ex+0x414/0x560 [ 435.112123][T16611] should_failslab+0xa8/0x100 [ 435.112148][T16611] kmem_cache_alloc_node_noprof+0x77/0x710 [ 435.112181][T16611] ? __alloc_skb+0x112/0x2d0 [ 435.112202][T16611] ? netlink_autobind+0xdb/0x300 [ 435.112232][T16611] __alloc_skb+0x112/0x2d0 [ 435.112258][T16611] netlink_sendmsg+0x5c6/0xb30 [ 435.112303][T16611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.112330][T16611] ? aa_sock_msg_perm+0xf1/0x1d0 [ 435.112366][T16611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.112388][T16611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.112412][T16611] __sock_sendmsg+0x21c/0x270 [ 435.112445][T16611] ____sys_sendmsg+0x505/0x830 [ 435.112476][T16611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.112511][T16611] ? import_iovec+0x74/0xa0 [ 435.112543][T16611] ___sys_sendmsg+0x21f/0x2a0 [ 435.112571][T16611] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.112635][T16611] ? __fget_files+0x2a/0x420 [ 435.112655][T16611] ? __fget_files+0x3a0/0x420 [ 435.112694][T16611] __x64_sys_sendmsg+0x19b/0x260 [ 435.112722][T16611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.112757][T16611] ? __pfx_ksys_write+0x10/0x10 [ 435.112793][T16611] ? do_syscall_64+0xbe/0xfa0 [ 435.112830][T16611] do_syscall_64+0xfa/0xfa0 [ 435.112860][T16611] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.112891][T16611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.112913][T16611] ? clear_bhb_loop+0x60/0xb0 [ 435.112940][T16611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.112961][T16611] RIP: 0033:0x7fbecc38f749 [ 435.112980][T16611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.113000][T16611] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.113023][T16611] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 435.113040][T16611] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 435.113055][T16611] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 435.113069][T16611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.113083][T16611] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 435.113119][T16611] [ 435.436827][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 435.568952][T16609] nbd32: detected capacity change from 0 to 127 [ 435.584783][T16615] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3459'. [ 435.601944][T16615] nbd: couldn't find a device at index 100663296 [ 435.620814][ T5844] block nbd32: Receive control failed (result -32) [ 435.686062][T16627] syzkaller0: entered promiscuous mode [ 435.708244][T16627] syzkaller0: entered allmulticast mode [ 435.971118][T16645] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 435.981088][T16645] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 435.998691][T16648] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3474'. [ 436.008637][T16649] netlink: 'syz.1.3475': attribute type 10 has an invalid length. [ 436.157368][T16656] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 436.206294][T16656] bond1 (unregistering): Released all slaves [ 436.753758][T16675] ip6t_rpfilter: unknown options [ 436.798688][T16677] syzkaller0: entered promiscuous mode [ 436.808512][T16677] syzkaller0: entered allmulticast mode [ 436.972146][T16684] netlink: 'syz.3.3487': attribute type 10 has an invalid length. [ 437.231545][T16700] FAULT_INJECTION: forcing a failure. [ 437.231545][T16700] name failslab, interval 1, probability 0, space 0, times 0 [ 437.238059][T16701] netlink: 'syz.4.3492': attribute type 4 has an invalid length. [ 437.245734][T16700] CPU: 1 UID: 0 PID: 16700 Comm: syz.2.3495 Not tainted syzkaller #0 PREEMPT(full) [ 437.245770][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.245787][T16700] Call Trace: [ 437.245798][T16700] [ 437.245811][T16700] dump_stack_lvl+0x189/0x250 [ 437.245851][T16700] ? __pfx____ratelimit+0x10/0x10 [ 437.245887][T16700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.245922][T16700] ? __pfx__printk+0x10/0x10 [ 437.245957][T16700] ? __lock_acquire+0xab9/0xd20 [ 437.245992][T16700] should_fail_ex+0x414/0x560 [ 437.246037][T16700] should_failslab+0xa8/0x100 [ 437.246068][T16700] kmem_cache_alloc_noprof+0x74/0x6e0 [ 437.246106][T16700] ? skb_clone+0x212/0x3a0 [ 437.246145][T16700] skb_clone+0x212/0x3a0 [ 437.246177][T16700] __netlink_deliver_tap+0x404/0x850 [ 437.246221][T16700] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.246248][T16700] netlink_deliver_tap+0x19c/0x1b0 [ 437.246285][T16700] netlink_unicast+0x7fa/0x9e0 [ 437.246333][T16700] ? __pfx_netlink_unicast+0x10/0x10 [ 437.246374][T16700] ? netlink_sendmsg+0x642/0xb30 [ 437.246396][T16700] ? skb_put+0x11b/0x210 [ 437.246428][T16700] netlink_sendmsg+0x805/0xb30 [ 437.246465][T16700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.246496][T16700] ? aa_sock_msg_perm+0xf1/0x1d0 [ 437.246536][T16700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.246560][T16700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.246587][T16700] __sock_sendmsg+0x21c/0x270 [ 437.246627][T16700] ____sys_sendmsg+0x505/0x830 [ 437.246662][T16700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.246702][T16700] ? import_iovec+0x74/0xa0 [ 437.246740][T16700] ___sys_sendmsg+0x21f/0x2a0 [ 437.246772][T16700] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.246847][T16700] ? __fget_files+0x2a/0x420 [ 437.246871][T16700] ? __fget_files+0x3a0/0x420 [ 437.246909][T16700] __x64_sys_sendmsg+0x19b/0x260 [ 437.246941][T16700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.246982][T16700] ? __pfx_ksys_write+0x10/0x10 [ 437.247024][T16700] ? do_syscall_64+0xbe/0xfa0 [ 437.247064][T16700] do_syscall_64+0xfa/0xfa0 [ 437.247099][T16700] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.247136][T16700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.247162][T16700] ? clear_bhb_loop+0x60/0xb0 [ 437.247192][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.247217][T16700] RIP: 0033:0x7f7c4818f749 [ 437.247239][T16700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.247262][T16700] RSP: 002b:00007f7c4905b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.247294][T16700] RAX: ffffffffffffffda RBX: 00007f7c483e5fa0 RCX: 00007f7c4818f749 [ 437.247313][T16700] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 437.247330][T16700] RBP: 00007f7c4905b090 R08: 0000000000000000 R09: 0000000000000000 [ 437.247347][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.247363][T16700] R13: 00007f7c483e6038 R14: 00007f7c483e5fa0 R15: 00007ffd3d0d5518 [ 437.247406][T16700] [ 437.247555][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 437.357439][T16706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3497'. [ 437.585535][T16706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3497'. [ 437.813627][T16723] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 437.938308][T16731] openvswitch: netlink: IP tunnel dst address not specified [ 437.988410][T16731] netlink: 'syz.1.3505': attribute type 1 has an invalid length. [ 438.015452][T16734] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3506'. [ 438.247987][T16747] FAULT_INJECTION: forcing a failure. [ 438.247987][T16747] name failslab, interval 1, probability 0, space 0, times 0 [ 438.289953][T16747] CPU: 0 UID: 0 PID: 16747 Comm: syz.1.3512 Not tainted syzkaller #0 PREEMPT(full) [ 438.289984][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.289999][T16747] Call Trace: [ 438.290008][T16747] [ 438.290017][T16747] dump_stack_lvl+0x189/0x250 [ 438.290052][T16747] ? __pfx____ratelimit+0x10/0x10 [ 438.290082][T16747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.290113][T16747] ? __pfx__printk+0x10/0x10 [ 438.290138][T16747] ? __pfx___might_resched+0x10/0x10 [ 438.290163][T16747] ? fs_reclaim_acquire+0x7d/0x100 [ 438.290212][T16747] should_fail_ex+0x414/0x560 [ 438.290251][T16747] should_failslab+0xa8/0x100 [ 438.290276][T16747] kmem_cache_alloc_noprof+0x74/0x6e0 [ 438.290307][T16747] ? skb_clone+0x212/0x3a0 [ 438.290339][T16747] skb_clone+0x212/0x3a0 [ 438.290363][T16747] ? nfnetlink_rcv+0x4ba/0x2590 [ 438.290398][T16747] nfnetlink_rcv+0x4ec/0x2590 [ 438.290433][T16747] ? __dev_queue_xmit+0x27b/0x3b50 [ 438.290461][T16747] ? __dev_queue_xmit+0x1d79/0x3b50 [ 438.290486][T16747] ? kasan_save_track+0x3e/0x80 [ 438.290516][T16747] ? __kasan_slab_alloc+0x6c/0x80 [ 438.290558][T16747] ? __dev_queue_xmit+0x27b/0x3b50 [ 438.290598][T16747] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 438.290648][T16747] ? ref_tracker_free+0x63a/0x7d0 [ 438.290670][T16747] ? __asan_memcpy+0x40/0x70 [ 438.290698][T16747] ? __pfx_ref_tracker_free+0x10/0x10 [ 438.290738][T16747] ? skb_clone+0x246/0x3a0 [ 438.290766][T16747] ? __netlink_deliver_tap+0x807/0x850 [ 438.290789][T16747] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.290830][T16747] netlink_unicast+0x82f/0x9e0 [ 438.290872][T16747] ? __pfx_netlink_unicast+0x10/0x10 [ 438.290907][T16747] ? netlink_sendmsg+0x642/0xb30 [ 438.290927][T16747] ? skb_put+0x11b/0x210 [ 438.290953][T16747] netlink_sendmsg+0x805/0xb30 [ 438.290986][T16747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.291012][T16747] ? aa_sock_msg_perm+0xf1/0x1d0 [ 438.291052][T16747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.291074][T16747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.291115][T16747] __sock_sendmsg+0x21c/0x270 [ 438.291161][T16747] ____sys_sendmsg+0x505/0x830 [ 438.291193][T16747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.291234][T16747] ? import_iovec+0x74/0xa0 [ 438.291267][T16747] ___sys_sendmsg+0x21f/0x2a0 [ 438.291295][T16747] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.291362][T16747] ? __fget_files+0x2a/0x420 [ 438.291383][T16747] ? __fget_files+0x3a0/0x420 [ 438.291417][T16747] __x64_sys_sendmsg+0x19b/0x260 [ 438.291446][T16747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.291484][T16747] ? __pfx_ksys_write+0x10/0x10 [ 438.291521][T16747] ? do_syscall_64+0xbe/0xfa0 [ 438.291558][T16747] do_syscall_64+0xfa/0xfa0 [ 438.291589][T16747] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.291622][T16747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.291645][T16747] ? clear_bhb_loop+0x60/0xb0 [ 438.291671][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.291692][T16747] RIP: 0033:0x7f460398f749 [ 438.291712][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.291731][T16747] RSP: 002b:00007f460482f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.291754][T16747] RAX: ffffffffffffffda RBX: 00007f4603be5fa0 RCX: 00007f460398f749 [ 438.291770][T16747] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 438.291785][T16747] RBP: 00007f460482f090 R08: 0000000000000000 R09: 0000000000000000 [ 438.291799][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.291813][T16747] R13: 00007f4603be6038 R14: 00007f4603be5fa0 R15: 00007fff7eb16de8 [ 438.291849][T16747] [ 438.960294][T16766] __nla_validate_parse: 1 callbacks suppressed [ 438.960320][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3519'. [ 439.077138][T16776] netlink: 'syz.0.3518': attribute type 1 has an invalid length. [ 439.101679][T16776] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3518'. [ 439.134149][T16779] netlink: 'syz.3.3523': attribute type 1 has an invalid length. [ 439.219931][T16783] tipc: Enabling of bearer rejected, failed to enable media [ 439.234314][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 439.251818][T16785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3525'. [ 439.265372][T16787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3526'. [ 439.323197][T16788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.382414][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3527'. [ 439.424533][T16791] tipc: Started in network mode [ 439.430515][T16791] tipc: Node identity 66b62b245f3f, cluster identity 4711 [ 439.440599][T16791] tipc: Enabled bearer , priority 0 [ 439.512700][T16791] syzkaller0: entered promiscuous mode [ 439.518453][T16791] syzkaller0: entered allmulticast mode [ 439.526122][T16791] tipc: Resetting bearer [ 439.556807][T16789] tipc: Resetting bearer [ 441.199622][T16789] tipc: Disabling bearer [ 441.224576][ T5898] tipc: Node number set to 965290788 [ 441.301682][T16824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.439141][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 441.446961][T16828] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 441.631611][T16845] vcan0: entered allmulticast mode [ 441.716177][T16838] nbd33: detected capacity change from 0 to 127 [ 441.735357][T16828] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3538'. [ 441.745881][T16828] nbd: socks must be embedded in a SOCK_ITEM attr [ 441.758404][T16855] netlink: 'syz.4.3546': attribute type 3 has an invalid length. [ 441.763105][ T5844] block nbd33: Receive control failed (result -32) [ 441.791907][T16855] netlink: 'syz.4.3546': attribute type 25 has an invalid length. [ 441.998288][T16869] nbd: must specify at least one socket [ 442.006735][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3550'. [ 442.417262][T16886] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 442.426170][T16886] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 442.501788][T16890] netlink: 'syz.4.3558': attribute type 10 has an invalid length. [ 442.878235][T16908] netlink: 'syz.4.3565': attribute type 1 has an invalid length. [ 442.887912][T16908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3565'. [ 443.492672][T16935] xt_CT: No such helper "syz1" [ 444.483392][T17009] __nla_validate_parse: 1 callbacks suppressed [ 444.483415][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3597'. [ 444.554779][T17011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3596'. [ 444.743707][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3598'. [ 444.912928][T17030] netlink: 'syz.4.3602': attribute type 1 has an invalid length. [ 444.994293][T17030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.030633][T17040] netlink: 'syz.0.3607': attribute type 29 has an invalid length. [ 445.053682][T17030] veth5: entered promiscuous mode [ 445.063296][T17030] bond1: (slave veth5): Enslaving as an active interface with an up link [ 445.072839][T17040] netlink: 'syz.0.3607': attribute type 29 has an invalid length. [ 445.083760][T17040] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3607'. [ 445.158927][T17042] netlink: 'syz.0.3608': attribute type 1 has an invalid length. [ 445.171850][T17042] netlink: 'syz.0.3608': attribute type 1 has an invalid length. [ 445.182705][T17042] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.3608'. [ 445.281999][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 445.311224][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.715071][T17058] nbd34: detected capacity change from 0 to 127 [ 445.729631][T17068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3615'. [ 445.755084][ T5844] block nbd34: Receive control failed (result -32) [ 445.900839][T17081] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3620'. [ 445.916651][T17081] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3620'. [ 445.928363][T17081] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3620'. [ 446.028363][T17081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.073090][T17089] bond2: (slave geneve2): making interface the new active one [ 446.083327][T17089] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 446.096426][T13749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.121298][T13749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.149123][T13749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.162358][T13749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.271797][T17100] ieee802154 phy0 wpan0: encryption failed: -126 [ 446.689258][T17111] validate_nla: 6 callbacks suppressed [ 446.689279][T17111] netlink: 'syz.1.3630': attribute type 1 has an invalid length. [ 446.815643][T17111] nbd35: detected capacity change from 0 to 127 [ 446.830591][ T5844] block nbd35: Receive control failed (result -32) [ 447.031059][T17136] FAULT_INJECTION: forcing a failure. [ 447.031059][T17136] name failslab, interval 1, probability 0, space 0, times 0 [ 447.043885][T17136] CPU: 1 UID: 0 PID: 17136 Comm: syz.4.3636 Not tainted syzkaller #0 PREEMPT(full) [ 447.043916][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.043930][T17136] Call Trace: [ 447.043939][T17136] [ 447.043949][T17136] dump_stack_lvl+0x189/0x250 [ 447.043985][T17136] ? __pfx____ratelimit+0x10/0x10 [ 447.044016][T17136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.044046][T17136] ? __pfx__printk+0x10/0x10 [ 447.044074][T17136] ? __pfx___might_resched+0x10/0x10 [ 447.044099][T17136] ? fs_reclaim_acquire+0x7d/0x100 [ 447.044138][T17136] should_fail_ex+0x414/0x560 [ 447.044177][T17136] should_failslab+0xa8/0x100 [ 447.044202][T17136] __kvmalloc_node_noprof+0x158/0x910 [ 447.044239][T17136] ? rhashtable_init_noprof+0x4f3/0xbc0 [ 447.044264][T17136] ? rhashtable_init_noprof+0x145/0xbc0 [ 447.044296][T17136] rhashtable_init_noprof+0x4f3/0xbc0 [ 447.044330][T17136] nft_rhash_init+0x10b/0x3a0 [ 447.044357][T17136] ? __pfx_nft_rhash_init+0x10/0x10 [ 447.044378][T17136] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.044419][T17136] ? __pfx_nft_rhash_key+0x10/0x10 [ 447.044441][T17136] ? __pfx_nft_rhash_obj+0x10/0x10 [ 447.044463][T17136] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 447.044488][T17136] ? nf_tables_newset+0x139b/0x2540 [ 447.044515][T17136] ? kfree+0x19a/0x6d0 [ 447.044568][T17136] nf_tables_newset+0x1c0c/0x2540 [ 447.044612][T17136] ? __pfx_nf_tables_newset+0x10/0x10 [ 447.044666][T17136] ? __nla_parse+0x40/0x60 [ 447.044697][T17136] nfnetlink_rcv+0x11d9/0x2590 [ 447.044773][T17136] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 447.044873][T17136] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.044920][T17136] netlink_unicast+0x82f/0x9e0 [ 447.044962][T17136] ? __pfx_netlink_unicast+0x10/0x10 [ 447.044994][T17136] ? netlink_sendmsg+0x642/0xb30 [ 447.045013][T17136] ? skb_put+0x11b/0x210 [ 447.045039][T17136] netlink_sendmsg+0x805/0xb30 [ 447.045072][T17136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.045099][T17136] ? aa_sock_msg_perm+0xf1/0x1d0 [ 447.045133][T17136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.045154][T17136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.045177][T17136] __sock_sendmsg+0x21c/0x270 [ 447.045212][T17136] ____sys_sendmsg+0x505/0x830 [ 447.045242][T17136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.045277][T17136] ? import_iovec+0x74/0xa0 [ 447.045309][T17136] ___sys_sendmsg+0x21f/0x2a0 [ 447.045335][T17136] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.045407][T17136] ? __fget_files+0x2a/0x420 [ 447.045427][T17136] ? __fget_files+0x3a0/0x420 [ 447.045459][T17136] __x64_sys_sendmsg+0x19b/0x260 [ 447.045487][T17136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.045523][T17136] ? __pfx_ksys_write+0x10/0x10 [ 447.045559][T17136] ? do_syscall_64+0xbe/0xfa0 [ 447.045596][T17136] do_syscall_64+0xfa/0xfa0 [ 447.045626][T17136] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.045657][T17136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.045679][T17136] ? clear_bhb_loop+0x60/0xb0 [ 447.045705][T17136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.045726][T17136] RIP: 0033:0x7fbecc38f749 [ 447.045746][T17136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.045764][T17136] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.045787][T17136] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 447.045802][T17136] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 447.045817][T17136] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 447.045830][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.045843][T17136] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 447.045880][T17136] [ 447.609995][T17146] netlink: 'syz.1.3640': attribute type 8 has an invalid length. [ 447.758737][T17155] netlink: 'syz.1.3644': attribute type 10 has an invalid length. [ 447.769571][T17160] netlink: 'syz.0.3641': attribute type 6 has an invalid length. [ 447.780809][T17158] netlink: 'syz.2.3645': attribute type 1 has an invalid length. [ 447.879225][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.887993][T17155] bridge_slave_1: left allmulticast mode [ 447.894234][T17155] bridge_slave_1: left promiscuous mode [ 447.900803][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.914556][T17155] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 447.924174][T17158] nbd36: detected capacity change from 0 to 127 [ 448.410514][T17183] FAULT_INJECTION: forcing a failure. [ 448.410514][T17183] name failslab, interval 1, probability 0, space 0, times 0 [ 448.426962][T17183] CPU: 0 UID: 0 PID: 17183 Comm: syz.4.3652 Not tainted syzkaller #0 PREEMPT(full) [ 448.426991][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.427004][T17183] Call Trace: [ 448.427012][T17183] [ 448.427020][T17183] dump_stack_lvl+0x189/0x250 [ 448.427052][T17183] ? __pfx____ratelimit+0x10/0x10 [ 448.427098][T17183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.427126][T17183] ? __pfx__printk+0x10/0x10 [ 448.427153][T17183] ? __pfx___might_resched+0x10/0x10 [ 448.427180][T17183] should_fail_ex+0x414/0x560 [ 448.427217][T17183] should_failslab+0xa8/0x100 [ 448.427240][T17183] __kmalloc_noprof+0xcb/0x7f0 [ 448.427269][T17183] ? nft_set_elem_expr_alloc+0x16f/0x590 [ 448.427307][T17183] nft_set_elem_expr_alloc+0x16f/0x590 [ 448.427342][T17183] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 448.427387][T17183] ? nft_rhash_init+0x2b3/0x3a0 [ 448.427411][T17183] ? __pfx_nft_rhash_init+0x10/0x10 [ 448.427429][T17183] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.427459][T17183] ? __pfx_nft_rhash_key+0x10/0x10 [ 448.427479][T17183] ? __pfx_nft_rhash_obj+0x10/0x10 [ 448.427500][T17183] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 448.427527][T17183] nft_set_expr_alloc+0x397/0x760 [ 448.427575][T17183] nf_tables_newset+0x1c4c/0x2540 [ 448.427615][T17183] ? __pfx_nf_tables_newset+0x10/0x10 [ 448.427664][T17183] ? __nla_parse+0x40/0x60 [ 448.427691][T17183] nfnetlink_rcv+0x11d9/0x2590 [ 448.427759][T17183] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 448.427842][T17183] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.427883][T17183] netlink_unicast+0x82f/0x9e0 [ 448.427923][T17183] ? __pfx_netlink_unicast+0x10/0x10 [ 448.427974][T17183] ? netlink_sendmsg+0x642/0xb30 [ 448.427992][T17183] ? skb_put+0x11b/0x210 [ 448.428017][T17183] netlink_sendmsg+0x805/0xb30 [ 448.428049][T17183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.428073][T17183] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.428107][T17183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.428127][T17183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.428149][T17183] __sock_sendmsg+0x21c/0x270 [ 448.428181][T17183] ____sys_sendmsg+0x505/0x830 [ 448.428210][T17183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.428244][T17183] ? import_iovec+0x74/0xa0 [ 448.428273][T17183] ___sys_sendmsg+0x21f/0x2a0 [ 448.428300][T17183] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.428363][T17183] ? __fget_files+0x2a/0x420 [ 448.428382][T17183] ? __fget_files+0x3a0/0x420 [ 448.428413][T17183] __x64_sys_sendmsg+0x19b/0x260 [ 448.428440][T17183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.428474][T17183] ? __pfx_ksys_write+0x10/0x10 [ 448.428508][T17183] ? do_syscall_64+0xbe/0xfa0 [ 448.428550][T17183] do_syscall_64+0xfa/0xfa0 [ 448.428579][T17183] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.428608][T17183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.428629][T17183] ? clear_bhb_loop+0x60/0xb0 [ 448.428654][T17183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.428674][T17183] RIP: 0033:0x7fbecc38f749 [ 448.428693][T17183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.428712][T17183] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.428733][T17183] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 448.428749][T17183] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 448.428763][T17183] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 448.428776][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.428788][T17183] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 448.428823][T17183] [ 448.829171][ T5844] block nbd36: Receive control failed (result -32) [ 450.194348][T17205] netlink: 'syz.4.3660': attribute type 21 has an invalid length. [ 450.213709][T17205] __nla_validate_parse: 7 callbacks suppressed [ 450.213729][T17205] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3660'. [ 450.236830][T17206] syzkaller0: entered promiscuous mode [ 450.243963][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3661'. [ 450.244146][T17206] syzkaller0: entered allmulticast mode [ 450.287123][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3659'. [ 450.402675][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3662'. [ 450.549478][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3665'. [ 450.562916][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'. [ 450.573219][T17225] FAULT_INJECTION: forcing a failure. [ 450.573219][T17225] name failslab, interval 1, probability 0, space 0, times 0 [ 450.594395][T17225] CPU: 1 UID: 0 PID: 17225 Comm: syz.1.3667 Not tainted syzkaller #0 PREEMPT(full) [ 450.594427][T17225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.594442][T17225] Call Trace: [ 450.594452][T17225] [ 450.594462][T17225] dump_stack_lvl+0x189/0x250 [ 450.594500][T17225] ? __pfx____ratelimit+0x10/0x10 [ 450.594532][T17225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.594563][T17225] ? __pfx__printk+0x10/0x10 [ 450.594591][T17225] ? __pfx___might_resched+0x10/0x10 [ 450.594616][T17225] ? fs_reclaim_acquire+0x7d/0x100 [ 450.594657][T17225] should_fail_ex+0x414/0x560 [ 450.594698][T17225] should_failslab+0xa8/0x100 [ 450.594724][T17225] __kmalloc_cache_noprof+0x6f/0x6f0 [ 450.594758][T17225] ? nft_connlimit_do_init+0x11b/0x2e0 [ 450.594781][T17225] ? rcu_is_watching+0x15/0xb0 [ 450.594814][T17225] nft_connlimit_do_init+0x11b/0x2e0 [ 450.594837][T17225] ? nft_connlimit_init+0x17/0x30 [ 450.594864][T17225] nft_set_elem_expr_alloc+0x1db/0x590 [ 450.594907][T17225] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 450.594955][T17225] ? nft_rhash_init+0x2b3/0x3a0 [ 450.594982][T17225] ? __pfx_nft_rhash_init+0x10/0x10 [ 450.595002][T17225] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.595054][T17225] ? __pfx_nft_rhash_key+0x10/0x10 [ 450.595077][T17225] ? __pfx_nft_rhash_obj+0x10/0x10 [ 450.595100][T17225] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 450.595130][T17225] nft_set_expr_alloc+0x397/0x760 [ 450.595173][T17225] nf_tables_newset+0x1c4c/0x2540 [ 450.595217][T17225] ? __pfx_nf_tables_newset+0x10/0x10 [ 450.595272][T17225] ? __nla_parse+0x40/0x60 [ 450.595302][T17225] nfnetlink_rcv+0x11d9/0x2590 [ 450.595377][T17225] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 450.595427][T17225] ? ref_tracker_free+0x63a/0x7d0 [ 450.595484][T17225] ? __netlink_deliver_tap+0x807/0x850 [ 450.595507][T17225] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.595551][T17225] netlink_unicast+0x82f/0x9e0 [ 450.595596][T17225] ? __pfx_netlink_unicast+0x10/0x10 [ 450.595632][T17225] ? netlink_sendmsg+0x642/0xb30 [ 450.595652][T17225] ? skb_put+0x11b/0x210 [ 450.595679][T17225] netlink_sendmsg+0x805/0xb30 [ 450.595714][T17225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.595742][T17225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 450.595779][T17225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.595801][T17225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.595827][T17225] __sock_sendmsg+0x21c/0x270 [ 450.595862][T17225] ____sys_sendmsg+0x505/0x830 [ 450.595894][T17225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.595931][T17225] ? import_iovec+0x74/0xa0 [ 450.595964][T17225] ___sys_sendmsg+0x21f/0x2a0 [ 450.595992][T17225] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.596068][T17225] ? __fget_files+0x2a/0x420 [ 450.596089][T17225] ? __fget_files+0x3a0/0x420 [ 450.596124][T17225] __x64_sys_sendmsg+0x19b/0x260 [ 450.596153][T17225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.596191][T17225] ? __pfx_ksys_write+0x10/0x10 [ 450.596228][T17225] ? do_syscall_64+0xbe/0xfa0 [ 450.596277][T17225] do_syscall_64+0xfa/0xfa0 [ 450.596307][T17225] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.596338][T17225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.596359][T17225] ? clear_bhb_loop+0x60/0xb0 [ 450.596386][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.596407][T17225] RIP: 0033:0x7f460398f749 [ 450.596427][T17225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.596446][T17225] RSP: 002b:00007f460482f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.596469][T17225] RAX: ffffffffffffffda RBX: 00007f4603be5fa0 RCX: 00007f460398f749 [ 450.596486][T17225] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 450.596501][T17225] RBP: 00007f460482f090 R08: 0000000000000000 R09: 0000000000000000 [ 450.596515][T17225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.596528][T17225] R13: 00007f4603be6038 R14: 00007f4603be5fa0 R15: 00007fff7eb16de8 [ 450.596566][T17225] [ 451.136004][T17233] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 451.144612][T17233] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 451.241386][T17242] tap0: tun_chr_ioctl cmd 1074025672 [ 451.246908][T17242] tap0: ignored: set checksum disabled [ 451.252582][T17243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 451.363762][T17246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3674'. [ 451.748168][ T30] audit: type=1800 audit(1763855415.973:3): pid=17247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3672" name="memory.events" dev="tmpfs" ino=698 res=0 errno=0 [ 451.816473][T17264] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 451.824432][T17266] sctp: [Deprecated]: syz.2.3680 (pid 17266) Use of int in max_burst socket option. [ 451.824432][T17266] Use struct sctp_assoc_value instead [ 452.005433][T17274] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 452.056691][T17275] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 452.085961][T17278] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 452.212868][T17286] bond5: (slave bridge4): making interface the new active one [ 452.221698][T17286] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 452.324348][T17291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3689'. [ 452.335498][T17292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.347365][T17293] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3689'. [ 452.457407][T17302] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 452.466451][T17302] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 452.472437][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3691'. [ 452.565199][T17296] tipc: Started in network mode [ 452.570227][T17296] tipc: Node identity 4, cluster identity 4711 [ 452.575899][T17303] x_tables: duplicate underflow at hook 2 [ 452.586470][T17296] tipc: Node number set to 4 [ 452.719213][T17315] sctp: [Deprecated]: syz.4.3698 (pid 17315) Use of int in max_burst socket option deprecated. [ 452.719213][T17315] Use struct sctp_assoc_value instead [ 453.303460][T17350] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 453.348986][T17350] bond3 (unregistering): Released all slaves [ 453.513875][T17370] netlink: 'syz.1.3714': attribute type 1 has an invalid length. [ 453.578641][T17370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.643226][T17376] bond1: (slave geneve2): making interface the new active one [ 453.675328][T17376] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 453.844118][T17389] netlink: 'syz.3.3719': attribute type 10 has an invalid length. [ 453.896639][T17389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.918635][T17389] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 454.328827][T17416] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 454.510388][T17433] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 454.520529][T17433] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 454.649538][T17434] netlink: 'syz.3.3736': attribute type 13 has an invalid length. [ 455.084151][T17449] netlink: zone id is out of range [ 455.090271][T17449] netlink: zone id is out of range [ 455.096488][T17449] netlink: zone id is out of range [ 455.101782][T17449] netlink: get zone limit has 4 unknown bytes [ 455.243077][T17453] netlink: 'syz.1.3747': attribute type 3 has an invalid length. [ 455.438779][T17460] netlink: 'syz.4.3750': attribute type 4 has an invalid length. [ 455.489195][T17463] dvmrp0: entered allmulticast mode [ 455.647915][T17472] __nla_validate_parse: 4 callbacks suppressed [ 455.647939][T17472] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3756'. [ 456.084753][T17487] netlink: 'syz.3.3763': attribute type 10 has an invalid length. [ 456.260668][T17498] netlink: 'syz.4.3767': attribute type 11 has an invalid length. [ 456.383586][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3768'. [ 456.395481][T17505] FAULT_INJECTION: forcing a failure. [ 456.395481][T17505] name failslab, interval 1, probability 0, space 0, times 0 [ 456.417418][T17505] CPU: 1 UID: 0 PID: 17505 Comm: syz.1.3768 Not tainted syzkaller #0 PREEMPT(full) [ 456.417450][T17505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.417464][T17505] Call Trace: [ 456.417473][T17505] [ 456.417483][T17505] dump_stack_lvl+0x189/0x250 [ 456.417519][T17505] ? __pfx____ratelimit+0x10/0x10 [ 456.417550][T17505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.417587][T17505] ? __pfx__printk+0x10/0x10 [ 456.417614][T17505] ? __pfx___might_resched+0x10/0x10 [ 456.417638][T17505] ? fs_reclaim_acquire+0x7d/0x100 [ 456.417678][T17505] should_fail_ex+0x414/0x560 [ 456.417717][T17505] should_failslab+0xa8/0x100 [ 456.417742][T17505] __kvmalloc_node_noprof+0x158/0x910 [ 456.417774][T17505] ? __nf_register_net_hook+0x232/0x930 [ 456.417798][T17505] ? nf_hook_entries_grow+0x281/0x720 [ 456.417831][T17505] nf_hook_entries_grow+0x281/0x720 [ 456.417871][T17505] __nf_register_net_hook+0x2c9/0x930 [ 456.417908][T17505] nf_register_net_hook+0xb2/0x190 [ 456.417935][T17505] nf_register_net_hooks+0x44/0x1b0 [ 456.417963][T17505] nf_ct_netns_do_get+0x363/0x5a0 [ 456.417992][T17505] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 456.418027][T17505] ? __raw_spin_lock_init+0x45/0x100 [ 456.418062][T17505] nf_ct_netns_get+0x44/0xb0 [ 456.418086][T17505] nft_connlimit_do_init+0x1de/0x2e0 [ 456.418117][T17505] nft_set_elem_expr_alloc+0x1db/0x590 [ 456.418155][T17505] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 456.418205][T17505] ? nft_rhash_init+0x2b3/0x3a0 [ 456.418231][T17505] ? __pfx_nft_rhash_init+0x10/0x10 [ 456.418251][T17505] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.418284][T17505] ? __pfx_nft_rhash_key+0x10/0x10 [ 456.418306][T17505] ? __pfx_nft_rhash_obj+0x10/0x10 [ 456.418328][T17505] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 456.418376][T17505] nft_set_expr_alloc+0x397/0x760 [ 456.418419][T17505] nf_tables_newset+0x1c4c/0x2540 [ 456.418464][T17505] ? __pfx_nf_tables_newset+0x10/0x10 [ 456.418519][T17505] ? __nla_parse+0x40/0x60 [ 456.418549][T17505] nfnetlink_rcv+0x11d9/0x2590 [ 456.418630][T17505] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 456.418683][T17505] ? ref_tracker_free+0x63a/0x7d0 [ 456.418750][T17505] ? __netlink_deliver_tap+0x807/0x850 [ 456.418773][T17505] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.418816][T17505] netlink_unicast+0x82f/0x9e0 [ 456.418860][T17505] ? __pfx_netlink_unicast+0x10/0x10 [ 456.418914][T17505] ? netlink_sendmsg+0x642/0xb30 [ 456.418934][T17505] ? skb_put+0x11b/0x210 [ 456.418962][T17505] netlink_sendmsg+0x805/0xb30 [ 456.418998][T17505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.419026][T17505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.419062][T17505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.419085][T17505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.419109][T17505] __sock_sendmsg+0x21c/0x270 [ 456.419145][T17505] ____sys_sendmsg+0x505/0x830 [ 456.419179][T17505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.419217][T17505] ? import_iovec+0x74/0xa0 [ 456.419251][T17505] ___sys_sendmsg+0x21f/0x2a0 [ 456.419280][T17505] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.419350][T17505] ? __fget_files+0x2a/0x420 [ 456.419371][T17505] ? __fget_files+0x3a0/0x420 [ 456.419407][T17505] __x64_sys_sendmsg+0x19b/0x260 [ 456.419436][T17505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.419475][T17505] ? __pfx_ksys_write+0x10/0x10 [ 456.419513][T17505] ? do_syscall_64+0xbe/0xfa0 [ 456.419551][T17505] do_syscall_64+0xfa/0xfa0 [ 456.419589][T17505] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.419621][T17505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.419645][T17505] ? clear_bhb_loop+0x60/0xb0 [ 456.419673][T17505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.419696][T17505] RIP: 0033:0x7f460398f749 [ 456.419717][T17505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.419738][T17505] RSP: 002b:00007f460482f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.419764][T17505] RAX: ffffffffffffffda RBX: 00007f4603be5fa0 RCX: 00007f460398f749 [ 456.419781][T17505] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 456.419797][T17505] RBP: 00007f460482f090 R08: 0000000000000000 R09: 0000000000000000 [ 456.419810][T17505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.419825][T17505] R13: 00007f4603be6038 R14: 00007f4603be5fa0 R15: 00007fff7eb16de8 [ 456.419864][T17505] [ 456.950631][T17514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.957120][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'. [ 456.967109][T17515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.972076][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'. [ 457.054501][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 457.080542][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 457.085652][T17519] nbd37: detected capacity change from 0 to 127 [ 457.089616][T17522] validate_nla: 2 callbacks suppressed [ 457.089636][T17522] netlink: 'syz.1.3775': attribute type 5 has an invalid length. [ 457.109852][T17522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3775'. [ 457.126915][T17522] geneve3: entered promiscuous mode [ 457.132202][T17522] geneve3: entered allmulticast mode [ 457.139556][T13755] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 457.163202][T17525] syzkaller0: entered promiscuous mode [ 457.182189][T17525] syzkaller0: entered allmulticast mode [ 457.198190][T13755] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 457.230339][T13755] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 457.262038][T13755] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 457.356409][T17536] netlink: 'syz.3.3777': attribute type 4 has an invalid length. [ 457.361962][ T5844] block nbd37: Receive control failed (result -32) [ 457.670964][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 457.689223][T17556] FAULT_INJECTION: forcing a failure. [ 457.689223][T17556] name failslab, interval 1, probability 0, space 0, times 0 [ 457.702197][T17556] CPU: 1 UID: 0 PID: 17556 Comm: syz.4.3783 Not tainted syzkaller #0 PREEMPT(full) [ 457.702228][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.702243][T17556] Call Trace: [ 457.702253][T17556] [ 457.702263][T17556] dump_stack_lvl+0x189/0x250 [ 457.702301][T17556] ? __pfx____ratelimit+0x10/0x10 [ 457.702333][T17556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.702365][T17556] ? __pfx__printk+0x10/0x10 [ 457.702392][T17556] ? __pfx___might_resched+0x10/0x10 [ 457.702427][T17556] ? fs_reclaim_acquire+0x7d/0x100 [ 457.702469][T17556] should_fail_ex+0x414/0x560 [ 457.702511][T17556] should_failslab+0xa8/0x100 [ 457.702537][T17556] __kvmalloc_node_noprof+0x158/0x910 [ 457.702571][T17556] ? __nf_register_net_hook+0x232/0x930 [ 457.702597][T17556] ? nf_hook_entries_grow+0x281/0x720 [ 457.702630][T17556] nf_hook_entries_grow+0x281/0x720 [ 457.702673][T17556] __nf_register_net_hook+0x2c9/0x930 [ 457.702705][T17556] ? nf_register_net_hook+0xc8/0x190 [ 457.702734][T17556] nf_register_net_hook+0xb2/0x190 [ 457.702761][T17556] nf_register_net_hooks+0x44/0x1b0 [ 457.702791][T17556] nf_ct_netns_do_get+0x212/0x5a0 [ 457.702815][T17556] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 457.702844][T17556] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 457.702868][T17556] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 457.702897][T17556] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 457.702934][T17556] nf_ct_netns_inet_get+0x3b/0x150 [ 457.702964][T17556] nf_ct_netns_get+0x5b/0xb0 [ 457.702988][T17556] nft_connlimit_do_init+0x1de/0x2e0 [ 457.703020][T17556] nft_set_elem_expr_alloc+0x1db/0x590 [ 457.703060][T17556] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 457.703112][T17556] ? nft_rhash_init+0x2b3/0x3a0 [ 457.703140][T17556] ? __pfx_nft_rhash_init+0x10/0x10 [ 457.703162][T17556] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.703195][T17556] ? __pfx_nft_rhash_key+0x10/0x10 [ 457.703219][T17556] ? __pfx_nft_rhash_obj+0x10/0x10 [ 457.703242][T17556] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 457.703272][T17556] nft_set_expr_alloc+0x397/0x760 [ 457.703316][T17556] nf_tables_newset+0x1c4c/0x2540 [ 457.703362][T17556] ? __pfx_nf_tables_newset+0x10/0x10 [ 457.703426][T17556] ? __nla_parse+0x40/0x60 [ 457.703457][T17556] nfnetlink_rcv+0x11d9/0x2590 [ 457.703534][T17556] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 457.703629][T17556] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.703675][T17556] netlink_unicast+0x82f/0x9e0 [ 457.703721][T17556] ? __pfx_netlink_unicast+0x10/0x10 [ 457.703758][T17556] ? netlink_sendmsg+0x642/0xb30 [ 457.703779][T17556] ? skb_put+0x11b/0x210 [ 457.703808][T17556] netlink_sendmsg+0x805/0xb30 [ 457.703844][T17556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.703873][T17556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 457.703910][T17556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.703932][T17556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.703958][T17556] __sock_sendmsg+0x21c/0x270 [ 457.703994][T17556] ____sys_sendmsg+0x505/0x830 [ 457.704027][T17556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.704065][T17556] ? import_iovec+0x74/0xa0 [ 457.704099][T17556] ___sys_sendmsg+0x21f/0x2a0 [ 457.704128][T17556] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.704201][T17556] ? __fget_files+0x2a/0x420 [ 457.704222][T17556] ? __fget_files+0x3a0/0x420 [ 457.704258][T17556] __x64_sys_sendmsg+0x19b/0x260 [ 457.704288][T17556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.704326][T17556] ? __pfx_ksys_write+0x10/0x10 [ 457.704364][T17556] ? do_syscall_64+0xbe/0xfa0 [ 457.704411][T17556] do_syscall_64+0xfa/0xfa0 [ 457.704442][T17556] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.704475][T17556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.704498][T17556] ? clear_bhb_loop+0x60/0xb0 [ 457.704527][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.704550][T17556] RIP: 0033:0x7fbecc38f749 [ 457.704571][T17556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.704592][T17556] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.704616][T17556] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 457.704633][T17556] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 457.704649][T17556] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 457.704664][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.704678][T17556] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 457.704719][T17556] [ 458.270411][T17565] netlink: 'syz.1.3785': attribute type 10 has an invalid length. [ 458.293024][T17551] netdevsim netdevsim0 v: renamed from netdevsim0 [ 458.331771][T17569] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3788'. [ 458.370536][T17573] netlink: 'syz.3.3789': attribute type 1 has an invalid length. [ 458.445300][T17573] nbd38: detected capacity change from 0 to 127 [ 458.472390][T17571] bond3: option all_slaves_active: invalid value (222) [ 458.482323][T17571] bond3 (unregistering): Released all slaves [ 458.508687][T17581] bridge0: port 3(team0) entered blocking state [ 458.515857][T17581] bridge0: port 3(team0) entered disabled state [ 458.522499][T17581] team0: entered allmulticast mode [ 458.527772][T17581] team_slave_0: entered allmulticast mode [ 458.527853][ T5844] block nbd38: Receive control failed (result -32) [ 458.533808][T17581] team_slave_1: entered allmulticast mode [ 458.564807][T17581] team0: entered promiscuous mode [ 458.570100][T17581] team_slave_0: entered promiscuous mode [ 458.576169][T17581] team_slave_1: entered promiscuous mode [ 458.582711][T17581] bridge0: port 3(team0) entered blocking state [ 458.589194][T17581] bridge0: port 3(team0) entered forwarding state [ 458.609827][T17579] bridge1: entered promiscuous mode [ 458.615442][T17579] bridge1: entered allmulticast mode [ 458.626719][T17579] team0: Port device bridge1 added [ 458.737370][T17589] netlink: 'syz.4.3793': attribute type 83 has an invalid length. [ 458.773981][T17592] netlink: 'syz.2.3794': attribute type 4 has an invalid length. [ 458.782430][T17593] netlink: 'syz.3.3792': attribute type 17 has an invalid length. [ 458.782456][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3792'. [ 458.939743][T17602] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 458.954666][T17602] bond6 (unregistering): Released all slaves [ 459.002761][T17605] FAULT_INJECTION: forcing a failure. [ 459.002761][T17605] name failslab, interval 1, probability 0, space 0, times 0 [ 459.029222][T17605] CPU: 0 UID: 0 PID: 17605 Comm: syz.4.3799 Not tainted syzkaller #0 PREEMPT(full) [ 459.029254][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.029269][T17605] Call Trace: [ 459.029278][T17605] [ 459.029289][T17605] dump_stack_lvl+0x189/0x250 [ 459.029327][T17605] ? __pfx____ratelimit+0x10/0x10 [ 459.029359][T17605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.029391][T17605] ? __pfx__printk+0x10/0x10 [ 459.029418][T17605] ? __pfx___might_resched+0x10/0x10 [ 459.029444][T17605] ? fs_reclaim_acquire+0x7d/0x100 [ 459.029487][T17605] should_fail_ex+0x414/0x560 [ 459.029536][T17605] should_failslab+0xa8/0x100 [ 459.029562][T17605] __kvmalloc_node_noprof+0x158/0x910 [ 459.029596][T17605] ? __nf_register_net_hook+0x232/0x930 [ 459.029622][T17605] ? nf_hook_entries_grow+0x281/0x720 [ 459.029655][T17605] nf_hook_entries_grow+0x281/0x720 [ 459.029698][T17605] __nf_register_net_hook+0x2c9/0x930 [ 459.029737][T17605] nf_register_net_hook+0xb2/0x190 [ 459.029764][T17605] nf_register_net_hooks+0x44/0x1b0 [ 459.029792][T17605] nf_ct_netns_do_get+0x3bf/0x5a0 [ 459.029816][T17605] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 459.029844][T17605] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 459.029866][T17605] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 459.029892][T17605] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 459.029928][T17605] nf_ct_netns_inet_get+0x1f/0x150 [ 459.029959][T17605] nf_ct_netns_get+0x5b/0xb0 [ 459.029983][T17605] nft_connlimit_do_init+0x1de/0x2e0 [ 459.030014][T17605] nft_set_elem_expr_alloc+0x1db/0x590 [ 459.030052][T17605] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 459.030101][T17605] ? nft_rhash_init+0x2b3/0x3a0 [ 459.030129][T17605] ? __pfx_nft_rhash_init+0x10/0x10 [ 459.030149][T17605] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.030182][T17605] ? __pfx_nft_rhash_key+0x10/0x10 [ 459.030205][T17605] ? __pfx_nft_rhash_obj+0x10/0x10 [ 459.030228][T17605] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 459.030258][T17605] nft_set_expr_alloc+0x397/0x760 [ 459.030300][T17605] nf_tables_newset+0x1c4c/0x2540 [ 459.030345][T17605] ? __pfx_nf_tables_newset+0x10/0x10 [ 459.030401][T17605] ? __nla_parse+0x40/0x60 [ 459.030432][T17605] nfnetlink_rcv+0x11d9/0x2590 [ 459.030508][T17605] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 459.030612][T17605] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.030660][T17605] netlink_unicast+0x82f/0x9e0 [ 459.030705][T17605] ? __pfx_netlink_unicast+0x10/0x10 [ 459.030742][T17605] ? netlink_sendmsg+0x642/0xb30 [ 459.030764][T17605] ? skb_put+0x11b/0x210 [ 459.030791][T17605] netlink_sendmsg+0x805/0xb30 [ 459.030828][T17605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.030856][T17605] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.030894][T17605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.030917][T17605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.030942][T17605] __sock_sendmsg+0x21c/0x270 [ 459.030976][T17605] ____sys_sendmsg+0x505/0x830 [ 459.031007][T17605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.031045][T17605] ? import_iovec+0x74/0xa0 [ 459.031086][T17605] ___sys_sendmsg+0x21f/0x2a0 [ 459.031115][T17605] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.031187][T17605] ? __fget_files+0x2a/0x420 [ 459.031209][T17605] ? __fget_files+0x3a0/0x420 [ 459.031245][T17605] __x64_sys_sendmsg+0x19b/0x260 [ 459.031274][T17605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.031313][T17605] ? __pfx_ksys_write+0x10/0x10 [ 459.031352][T17605] ? do_syscall_64+0xbe/0xfa0 [ 459.031390][T17605] do_syscall_64+0xfa/0xfa0 [ 459.031422][T17605] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.031454][T17605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.031477][T17605] ? clear_bhb_loop+0x60/0xb0 [ 459.031505][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.031535][T17605] RIP: 0033:0x7fbecc38f749 [ 459.031556][T17605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.031576][T17605] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.031602][T17605] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 459.031619][T17605] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 459.031635][T17605] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 459.031650][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.031664][T17605] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 459.031704][T17605] [ 459.519210][T17610] netlink: 'syz.3.3801': attribute type 13 has an invalid length. [ 459.530815][T17611] netlink: 'syz.4.3802': attribute type 1 has an invalid length. [ 459.615793][T17610] veth0_macvtap: left promiscuous mode [ 459.621494][T17610] macvtap0: entered allmulticast mode [ 459.634250][T17610] macvtap0: refused to change device tx_queue_len [ 459.695921][T17611] nbd39: detected capacity change from 0 to 127 [ 459.705405][ T5844] block nbd39: Receive control failed (result -32) [ 459.793469][T17623] syzkaller0: entered promiscuous mode [ 459.801390][T17623] syzkaller0: entered allmulticast mode [ 460.683971][T17637] __nla_validate_parse: 6 callbacks suppressed [ 460.683991][T17637] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3810'. [ 461.370471][T17641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3811'. [ 461.417704][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3812'. [ 461.427787][T17645] FAULT_INJECTION: forcing a failure. [ 461.427787][T17645] name failslab, interval 1, probability 0, space 0, times 0 [ 461.440792][T17645] CPU: 1 UID: 0 PID: 17645 Comm: syz.0.3812 Not tainted syzkaller #0 PREEMPT(full) [ 461.440824][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.440840][T17645] Call Trace: [ 461.440849][T17645] [ 461.440859][T17645] dump_stack_lvl+0x189/0x250 [ 461.440897][T17645] ? __pfx____ratelimit+0x10/0x10 [ 461.440929][T17645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.440961][T17645] ? __pfx__printk+0x10/0x10 [ 461.440989][T17645] ? __pfx___might_resched+0x10/0x10 [ 461.441014][T17645] ? fs_reclaim_acquire+0x7d/0x100 [ 461.441063][T17645] should_fail_ex+0x414/0x560 [ 461.441103][T17645] should_failslab+0xa8/0x100 [ 461.441128][T17645] __kvmalloc_node_noprof+0x158/0x910 [ 461.441162][T17645] ? __nf_register_net_hook+0x232/0x930 [ 461.441187][T17645] ? nf_hook_entries_grow+0x281/0x720 [ 461.441221][T17645] nf_hook_entries_grow+0x281/0x720 [ 461.441262][T17645] __nf_register_net_hook+0x2c9/0x930 [ 461.441298][T17645] nf_register_net_hook+0xb2/0x190 [ 461.441326][T17645] nf_register_net_hooks+0x44/0x1b0 [ 461.441363][T17645] nf_ct_netns_do_get+0x3bf/0x5a0 [ 461.441388][T17645] ? nf_ct_iterate_cleanup_net+0x9f/0xd0 [ 461.441421][T17645] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 461.441445][T17645] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 461.441475][T17645] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 461.441512][T17645] nf_ct_netns_inet_get+0x1f/0x150 [ 461.441542][T17645] nf_ct_netns_get+0x5b/0xb0 [ 461.441566][T17645] nft_connlimit_do_init+0x1de/0x2e0 [ 461.441597][T17645] nft_set_elem_expr_alloc+0x1db/0x590 [ 461.441637][T17645] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 461.441690][T17645] ? nft_rhash_init+0x2b3/0x3a0 [ 461.441717][T17645] ? __pfx_nft_rhash_init+0x10/0x10 [ 461.441739][T17645] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.441772][T17645] ? __pfx_nft_rhash_key+0x10/0x10 [ 461.441801][T17645] ? __pfx_nft_rhash_obj+0x10/0x10 [ 461.441824][T17645] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 461.441854][T17645] nft_set_expr_alloc+0x397/0x760 [ 461.441898][T17645] nf_tables_newset+0x1c4c/0x2540 [ 461.441944][T17645] ? __pfx_nf_tables_newset+0x10/0x10 [ 461.442001][T17645] ? __nla_parse+0x40/0x60 [ 461.442032][T17645] nfnetlink_rcv+0x11d9/0x2590 [ 461.442110][T17645] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 461.442165][T17645] ? ref_tracker_free+0x63a/0x7d0 [ 461.442224][T17645] ? __netlink_deliver_tap+0x807/0x850 [ 461.442247][T17645] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.442294][T17645] netlink_unicast+0x82f/0x9e0 [ 461.442344][T17645] ? __pfx_netlink_unicast+0x10/0x10 [ 461.442381][T17645] ? netlink_sendmsg+0x642/0xb30 [ 461.442402][T17645] ? skb_put+0x11b/0x210 [ 461.442430][T17645] netlink_sendmsg+0x805/0xb30 [ 461.442465][T17645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.442493][T17645] ? aa_sock_msg_perm+0xf1/0x1d0 [ 461.442531][T17645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.442553][T17645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.442578][T17645] __sock_sendmsg+0x21c/0x270 [ 461.442614][T17645] ____sys_sendmsg+0x505/0x830 [ 461.442647][T17645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.442685][T17645] ? import_iovec+0x74/0xa0 [ 461.442719][T17645] ___sys_sendmsg+0x21f/0x2a0 [ 461.442748][T17645] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.442820][T17645] ? __fget_files+0x2a/0x420 [ 461.442841][T17645] ? __fget_files+0x3a0/0x420 [ 461.442877][T17645] __x64_sys_sendmsg+0x19b/0x260 [ 461.442906][T17645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.442945][T17645] ? __pfx_ksys_write+0x10/0x10 [ 461.442983][T17645] ? do_syscall_64+0xbe/0xfa0 [ 461.443022][T17645] do_syscall_64+0xfa/0xfa0 [ 461.443053][T17645] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.443086][T17645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.443110][T17645] ? clear_bhb_loop+0x60/0xb0 [ 461.443138][T17645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.443161][T17645] RIP: 0033:0x7f6a4bd8f749 [ 461.443181][T17645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.443203][T17645] RSP: 002b:00007f6a4cb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.443228][T17645] RAX: ffffffffffffffda RBX: 00007f6a4bfe5fa0 RCX: 00007f6a4bd8f749 [ 461.443246][T17645] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 461.443261][T17645] RBP: 00007f6a4cb3f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.443276][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.443291][T17645] R13: 00007f6a4bfe6038 R14: 00007f6a4bfe5fa0 R15: 00007ffda825c078 [ 461.443331][T17645] [ 461.995218][T17651] netlink: 'syz.4.3816': attribute type 3 has an invalid length. [ 462.137427][T17658] validate_nla: 2 callbacks suppressed [ 462.137450][T17658] netlink: 'syz.3.3817': attribute type 1 has an invalid length. [ 462.390976][T17669] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 462.485473][T17658] nbd40: detected capacity change from 0 to 127 [ 462.632670][ T5844] block nbd40: Receive control failed (result -32) [ 462.732314][T13740] lo speed is unknown, defaulting to 1000 [ 462.744468][T13740] sz1: Port: 1 Link DOWN [ 462.761667][T17667] syzkaller1: entered promiscuous mode [ 462.789361][T17667] syzkaller1: entered allmulticast mode [ 462.847939][ T9] lo speed is unknown, defaulting to 1000 [ 462.975766][T17681] syzkaller0: entered promiscuous mode [ 462.991587][T17681] syzkaller0: entered allmulticast mode [ 463.015059][T17684] team0: Device ip6gre1 is of different type [ 463.072061][T17688] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3826'. [ 463.300668][T17697] netlink: 'syz.3.3830': attribute type 1 has an invalid length. [ 463.515388][T17697] nbd41: detected capacity change from 0 to 127 [ 463.537110][ T5844] block nbd41: Receive control failed (result -32) [ 463.692233][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 463.833442][T17728] syzkaller0: entered promiscuous mode [ 463.839551][T17728] syzkaller0: entered allmulticast mode [ 463.858334][T17732] netlink: 'syz.1.3839': attribute type 1 has an invalid length. [ 463.870439][T17733] netlink: 'syz.3.3844': attribute type 10 has an invalid length. [ 463.889132][T17730] veth7: entered promiscuous mode [ 463.894240][T17730] veth7: entered allmulticast mode [ 463.981955][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3846'. [ 464.024396][T17739] FAULT_INJECTION: forcing a failure. [ 464.024396][T17739] name failslab, interval 1, probability 0, space 0, times 0 [ 464.027563][T17732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.046724][T17739] CPU: 1 UID: 0 PID: 17739 Comm: syz.4.3846 Not tainted syzkaller #0 PREEMPT(full) [ 464.046755][T17739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.046770][T17739] Call Trace: [ 464.046778][T17739] [ 464.046788][T17739] dump_stack_lvl+0x189/0x250 [ 464.046823][T17739] ? __pfx____ratelimit+0x10/0x10 [ 464.046854][T17739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.046884][T17739] ? __pfx__printk+0x10/0x10 [ 464.046910][T17739] ? __pfx___might_resched+0x10/0x10 [ 464.046942][T17739] ? fs_reclaim_acquire+0x7d/0x100 [ 464.046981][T17739] should_fail_ex+0x414/0x560 [ 464.047022][T17739] should_failslab+0xa8/0x100 [ 464.047047][T17739] __kvmalloc_node_noprof+0x158/0x910 [ 464.047081][T17739] ? __nf_register_net_hook+0x232/0x930 [ 464.047106][T17739] ? nf_hook_entries_grow+0x281/0x720 [ 464.047140][T17739] nf_hook_entries_grow+0x281/0x720 [ 464.047181][T17739] __nf_register_net_hook+0x2c9/0x930 [ 464.047220][T17739] nf_register_net_hook+0xb2/0x190 [ 464.047248][T17739] nf_register_net_hooks+0x44/0x1b0 [ 464.047277][T17739] nf_ct_netns_do_get+0x212/0x5a0 [ 464.047302][T17739] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 464.047331][T17739] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 464.047366][T17739] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 464.047394][T17739] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 464.047430][T17739] nf_ct_netns_inet_get+0x3b/0x150 [ 464.047459][T17739] nf_ct_netns_get+0x5b/0xb0 [ 464.047483][T17739] nft_connlimit_do_init+0x1de/0x2e0 [ 464.047513][T17739] nft_set_elem_expr_alloc+0x1db/0x590 [ 464.047551][T17739] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 464.047601][T17739] ? nft_rhash_init+0x2b3/0x3a0 [ 464.047628][T17739] ? __pfx_nft_rhash_init+0x10/0x10 [ 464.047648][T17739] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.047681][T17739] ? __pfx_nft_rhash_key+0x10/0x10 [ 464.047702][T17739] ? __pfx_nft_rhash_obj+0x10/0x10 [ 464.047725][T17739] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 464.047754][T17739] nft_set_expr_alloc+0x397/0x760 [ 464.047793][T17739] nf_tables_newset+0x1c4c/0x2540 [ 464.047835][T17739] ? __pfx_nf_tables_newset+0x10/0x10 [ 464.047883][T17739] ? __nla_parse+0x40/0x60 [ 464.047907][T17739] nfnetlink_rcv+0x11d9/0x2590 [ 464.047968][T17739] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 464.048038][T17739] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.048071][T17739] netlink_unicast+0x82f/0x9e0 [ 464.048104][T17739] ? __pfx_netlink_unicast+0x10/0x10 [ 464.048132][T17739] ? netlink_sendmsg+0x642/0xb30 [ 464.048148][T17739] ? skb_put+0x11b/0x210 [ 464.048170][T17739] netlink_sendmsg+0x805/0xb30 [ 464.048197][T17739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.048218][T17739] ? aa_sock_msg_perm+0xf1/0x1d0 [ 464.048245][T17739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.048263][T17739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.048282][T17739] __sock_sendmsg+0x21c/0x270 [ 464.048309][T17739] ____sys_sendmsg+0x505/0x830 [ 464.048334][T17739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.048361][T17739] ? import_iovec+0x74/0xa0 [ 464.048387][T17739] ___sys_sendmsg+0x21f/0x2a0 [ 464.048408][T17739] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.048460][T17739] ? __fget_files+0x2a/0x420 [ 464.048476][T17739] ? __fget_files+0x3a0/0x420 [ 464.048501][T17739] __x64_sys_sendmsg+0x19b/0x260 [ 464.048523][T17739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.048552][T17739] ? __pfx_ksys_write+0x10/0x10 [ 464.048580][T17739] ? do_syscall_64+0xbe/0xfa0 [ 464.048609][T17739] do_syscall_64+0xfa/0xfa0 [ 464.048632][T17739] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.048657][T17739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.048674][T17739] ? clear_bhb_loop+0x60/0xb0 [ 464.048695][T17739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.048712][T17739] RIP: 0033:0x7fbecc38f749 [ 464.048729][T17739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.048744][T17739] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.048763][T17739] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 464.048776][T17739] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 464.048788][T17739] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 464.048799][T17739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.048809][T17739] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 464.048838][T17739] [ 464.656689][T17748] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 464.665620][T17748] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 464.900762][T17767] tipc: Enabling of bearer rejected, failed to enable media [ 464.980487][T17774] netlink: 'syz.4.3859': attribute type 10 has an invalid length. [ 464.990843][T17772] syzkaller0: entered promiscuous mode [ 464.997264][T17772] syzkaller0: entered allmulticast mode [ 465.025625][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'. [ 465.051510][T17777] FAULT_INJECTION: forcing a failure. [ 465.051510][T17777] name failslab, interval 1, probability 0, space 0, times 0 [ 465.073938][T17777] CPU: 1 UID: 0 PID: 17777 Comm: syz.1.3860 Not tainted syzkaller #0 PREEMPT(full) [ 465.073971][T17777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.073993][T17777] Call Trace: [ 465.074003][T17777] [ 465.074013][T17777] dump_stack_lvl+0x189/0x250 [ 465.074051][T17777] ? __pfx____ratelimit+0x10/0x10 [ 465.074083][T17777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.074113][T17777] ? __pfx__printk+0x10/0x10 [ 465.074145][T17777] ? __pfx___might_resched+0x10/0x10 [ 465.074176][T17777] should_fail_ex+0x414/0x560 [ 465.074215][T17777] should_failslab+0xa8/0x100 [ 465.074238][T17777] __kvmalloc_node_noprof+0x158/0x910 [ 465.074267][T17777] ? rcu_is_watching+0x15/0xb0 [ 465.074288][T17777] ? nf_hook_entries_grow+0x281/0x720 [ 465.074309][T17777] ? __pfx___mutex_lock+0x10/0x10 [ 465.074347][T17777] nf_hook_entries_grow+0x281/0x720 [ 465.074390][T17777] __nf_register_net_hook+0x2c9/0x930 [ 465.074429][T17777] nf_register_net_hook+0xb2/0x190 [ 465.074457][T17777] nf_register_net_hooks+0x44/0x1b0 [ 465.074484][T17777] nf_defrag_ipv6_enable+0x87/0x120 [ 465.074514][T17777] nf_ct_netns_do_get+0x1e7/0x5a0 [ 465.074537][T17777] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 465.074565][T17777] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 465.074586][T17777] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 465.074613][T17777] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 465.074644][T17777] nf_ct_netns_inet_get+0x3b/0x150 [ 465.074671][T17777] nf_ct_netns_get+0x5b/0xb0 [ 465.074695][T17777] nft_connlimit_do_init+0x1de/0x2e0 [ 465.074726][T17777] nft_set_elem_expr_alloc+0x1db/0x590 [ 465.074764][T17777] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 465.074815][T17777] ? nft_rhash_init+0x2b3/0x3a0 [ 465.074841][T17777] ? __pfx_nft_rhash_init+0x10/0x10 [ 465.074863][T17777] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.074900][T17777] ? __pfx_nft_rhash_key+0x10/0x10 [ 465.074920][T17777] ? __pfx_nft_rhash_obj+0x10/0x10 [ 465.074943][T17777] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 465.074971][T17777] nft_set_expr_alloc+0x397/0x760 [ 465.075022][T17777] nf_tables_newset+0x1c4c/0x2540 [ 465.075065][T17777] ? __pfx_nf_tables_newset+0x10/0x10 [ 465.075118][T17777] ? __nla_parse+0x40/0x60 [ 465.075149][T17777] nfnetlink_rcv+0x11d9/0x2590 [ 465.075224][T17777] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 465.075279][T17777] ? ref_tracker_free+0x63a/0x7d0 [ 465.075338][T17777] ? __netlink_deliver_tap+0x807/0x850 [ 465.075361][T17777] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.075404][T17777] netlink_unicast+0x82f/0x9e0 [ 465.075450][T17777] ? __pfx_netlink_unicast+0x10/0x10 [ 465.075487][T17777] ? netlink_sendmsg+0x642/0xb30 [ 465.075508][T17777] ? skb_put+0x11b/0x210 [ 465.075536][T17777] netlink_sendmsg+0x805/0xb30 [ 465.075571][T17777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.075599][T17777] ? aa_sock_msg_perm+0xf1/0x1d0 [ 465.075635][T17777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.075658][T17777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.075694][T17777] __sock_sendmsg+0x21c/0x270 [ 465.075729][T17777] ____sys_sendmsg+0x505/0x830 [ 465.075760][T17777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.075795][T17777] ? import_iovec+0x74/0xa0 [ 465.075829][T17777] ___sys_sendmsg+0x21f/0x2a0 [ 465.075857][T17777] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.075923][T17777] ? __fget_files+0x2a/0x420 [ 465.075945][T17777] ? __fget_files+0x3a0/0x420 [ 465.075979][T17777] __x64_sys_sendmsg+0x19b/0x260 [ 465.076015][T17777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.076052][T17777] ? __pfx_ksys_write+0x10/0x10 [ 465.076088][T17777] ? do_syscall_64+0xbe/0xfa0 [ 465.076125][T17777] do_syscall_64+0xfa/0xfa0 [ 465.076173][T17777] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.076205][T17777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.076228][T17777] ? clear_bhb_loop+0x60/0xb0 [ 465.076258][T17777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.076280][T17777] RIP: 0033:0x7f460398f749 [ 465.076301][T17777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.076322][T17777] RSP: 002b:00007f460482f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.076346][T17777] RAX: ffffffffffffffda RBX: 00007f4603be5fa0 RCX: 00007f460398f749 [ 465.076364][T17777] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 465.076379][T17777] RBP: 00007f460482f090 R08: 0000000000000000 R09: 0000000000000000 [ 465.076394][T17777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.076408][T17777] R13: 00007f4603be6038 R14: 00007f4603be5fa0 R15: 00007fff7eb16de8 [ 465.076448][T17777] [ 465.852114][T17801] batman_adv: batadv0: Adding interface: vlan2 [ 465.858613][T17801] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.884706][T17801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.896158][T17801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.906047][T17801] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 466.005839][T17806] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3868'. [ 466.014752][T17808] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 466.084652][T17806] bond7 (unregistering): Released all slaves [ 466.160867][T17824] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 466.170959][T17824] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 467.030100][T17858] netlink: 'syz.3.3886': attribute type 10 has an invalid length. [ 467.157617][T17862] syzkaller0: entered promiscuous mode [ 467.163166][T17862] syzkaller0: entered allmulticast mode [ 467.412531][T17877] netlink: 'syz.2.3894': attribute type 4 has an invalid length. [ 467.499229][T17885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.573964][T17891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3899'. [ 467.587167][T17892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3899'. [ 467.596171][T17891] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 467.597666][T17891] gretap1: entered promiscuous mode [ 467.612349][T17891] gretap1: entered allmulticast mode [ 467.725510][T17898] netlink: 'syz.3.3901': attribute type 10 has an invalid length. [ 468.159982][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3909'. [ 468.170942][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3909'. [ 468.184208][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'. [ 468.348651][T17929] netlink: 'syz.4.3913': attribute type 10 has an invalid length. [ 468.367780][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 468.418461][T17936] netlink: 'syz.1.3915': attribute type 4 has an invalid length. [ 468.961990][T17977] netlink: 'syz.3.3928': attribute type 10 has an invalid length. [ 469.131258][T17986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.243639][T17990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3933'. [ 469.271077][T17986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3931'. [ 469.308979][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 469.657721][T18017] netlink: 'syz.2.3942': attribute type 10 has an invalid length. [ 469.927356][T18033] netlink: 'syz.1.3945': attribute type 4 has an invalid length. [ 470.109749][T18038] syzkaller0: entered promiscuous mode [ 470.124170][T18038] syzkaller0: entered allmulticast mode [ 470.380249][T18057] netlink: 'syz.3.3955': attribute type 10 has an invalid length. [ 470.393184][T18059] FAULT_INJECTION: forcing a failure. [ 470.393184][T18059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.433056][T18059] CPU: 0 UID: 0 PID: 18059 Comm: syz.4.3954 Not tainted syzkaller #0 PREEMPT(full) [ 470.433087][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.433101][T18059] Call Trace: [ 470.433111][T18059] [ 470.433121][T18059] dump_stack_lvl+0x189/0x250 [ 470.433156][T18059] ? __pfx____ratelimit+0x10/0x10 [ 470.433187][T18059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.433216][T18059] ? __pfx__printk+0x10/0x10 [ 470.433262][T18059] ? __might_fault+0xb0/0x130 [ 470.433305][T18059] should_fail_ex+0x414/0x560 [ 470.433344][T18059] _copy_from_user+0x2d/0xb0 [ 470.433373][T18059] ___sys_sendmsg+0x158/0x2a0 [ 470.433401][T18059] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.433465][T18059] ? __fget_files+0x2a/0x420 [ 470.433486][T18059] ? __fget_files+0x3a0/0x420 [ 470.433518][T18059] __x64_sys_sendmsg+0x19b/0x260 [ 470.433552][T18059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.433606][T18059] ? __pfx_ksys_write+0x10/0x10 [ 470.433644][T18059] ? do_syscall_64+0xbe/0xfa0 [ 470.433681][T18059] do_syscall_64+0xfa/0xfa0 [ 470.433713][T18059] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.433745][T18059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.433768][T18059] ? clear_bhb_loop+0x60/0xb0 [ 470.433795][T18059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.433818][T18059] RIP: 0033:0x7fbecc38f749 [ 470.433838][T18059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.433858][T18059] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.433883][T18059] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 470.433900][T18059] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000007 [ 470.433915][T18059] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 470.433929][T18059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.433944][T18059] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 470.433982][T18059] [ 470.732255][T18069] netlink: 'syz.4.3959': attribute type 33 has an invalid length. [ 470.792583][T18069] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 470.832798][T18069] bond3 (unregistering): Released all slaves [ 470.853414][T18076] No such timeout policy "syz0" [ 470.883652][T18072] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 471.005933][T18078] syzkaller0: entered promiscuous mode [ 471.032072][T18078] syzkaller0: entered allmulticast mode [ 471.382053][T18098] nbd: illegal input index 2958377 [ 471.455519][T18103] __nla_validate_parse: 6 callbacks suppressed [ 471.455540][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'. [ 471.520448][T18108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3975'. [ 471.712712][T18114] batman_adv: batadv0: Adding interface: vlan2 [ 471.723811][T18114] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.750127][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.766498][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.794804][T18114] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 471.939745][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'. [ 471.992108][T18131] netlink: 'syz.4.3985': attribute type 1 has an invalid length. [ 472.117818][T18131] nbd42: detected capacity change from 0 to 127 [ 472.129119][ T5844] block nbd42: Receive control failed (result -32) [ 472.163372][T18143] macvlan0: entered allmulticast mode [ 472.409224][T18160] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3994'. [ 472.438237][T18160] xt_CONNSECMARK: invalid mode: 0 [ 472.560322][T18165] syzkaller0: entered promiscuous mode [ 472.575089][T18165] syzkaller0: entered allmulticast mode [ 472.633114][T18172] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 472.785107][T18172] nbd43: detected capacity change from 0 to 127 [ 472.794088][ T5844] block nbd43: Receive control failed (result -32) [ 472.859729][T18186] delete_channel: no stack [ 472.948196][T18193] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4006'. [ 473.058734][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 473.127729][T18206] Cannot find add_set index 65532 as target [ 473.133539][T18200] FAULT_INJECTION: forcing a failure. [ 473.133539][T18200] name failslab, interval 1, probability 0, space 0, times 0 [ 473.147042][T18200] CPU: 1 UID: 0 PID: 18200 Comm: syz.4.4008 Not tainted syzkaller #0 PREEMPT(full) [ 473.147074][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.147090][T18200] Call Trace: [ 473.147099][T18200] [ 473.147109][T18200] dump_stack_lvl+0x189/0x250 [ 473.147147][T18200] ? __pfx____ratelimit+0x10/0x10 [ 473.147178][T18200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.147210][T18200] ? __pfx__printk+0x10/0x10 [ 473.147241][T18200] ? __pfx___might_resched+0x10/0x10 [ 473.147265][T18200] ? fs_reclaim_acquire+0x7d/0x100 [ 473.147315][T18200] should_fail_ex+0x414/0x560 [ 473.147357][T18200] should_failslab+0xa8/0x100 [ 473.147383][T18200] __kvmalloc_node_noprof+0x158/0x910 [ 473.147431][T18200] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 473.147464][T18200] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 473.147487][T18200] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 473.147524][T18200] __nf_unregister_net_hook+0x4f6/0x700 [ 473.147554][T18200] nf_unregister_net_hooks+0xcb/0x140 [ 473.147597][T18200] nf_ct_netns_put+0x216/0x520 [ 473.147621][T18200] nft_connlimit_destroy+0x5a/0xb0 [ 473.147643][T18200] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 473.147666][T18200] nft_set_expr_alloc+0x1bb/0x760 [ 473.147702][T18200] nf_tables_newset+0x1c4c/0x2540 [ 473.147740][T18200] ? __pfx_nf_tables_newset+0x10/0x10 [ 473.147787][T18200] ? __nla_parse+0x40/0x60 [ 473.147812][T18200] nfnetlink_rcv+0x11d9/0x2590 [ 473.147876][T18200] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 473.147954][T18200] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.147992][T18200] netlink_unicast+0x82f/0x9e0 [ 473.148031][T18200] ? __pfx_netlink_unicast+0x10/0x10 [ 473.148063][T18200] ? netlink_sendmsg+0x642/0xb30 [ 473.148081][T18200] ? skb_put+0x11b/0x210 [ 473.148104][T18200] netlink_sendmsg+0x805/0xb30 [ 473.148134][T18200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.148157][T18200] ? aa_sock_msg_perm+0xf1/0x1d0 [ 473.148188][T18200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.148208][T18200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.148229][T18200] __sock_sendmsg+0x21c/0x270 [ 473.148259][T18200] ____sys_sendmsg+0x505/0x830 [ 473.148292][T18200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.148324][T18200] ? import_iovec+0x74/0xa0 [ 473.148352][T18200] ___sys_sendmsg+0x21f/0x2a0 [ 473.148376][T18200] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.148435][T18200] ? __fget_files+0x2a/0x420 [ 473.148453][T18200] ? __fget_files+0x3a0/0x420 [ 473.148482][T18200] __x64_sys_sendmsg+0x19b/0x260 [ 473.148512][T18200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.148544][T18200] ? __pfx_ksys_write+0x10/0x10 [ 473.148573][T18200] ? do_syscall_64+0xbe/0xfa0 [ 473.148604][T18200] do_syscall_64+0xfa/0xfa0 [ 473.148628][T18200] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.148654][T18200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.148671][T18200] ? clear_bhb_loop+0x60/0xb0 [ 473.148693][T18200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.148710][T18200] RIP: 0033:0x7fbecc38f749 [ 473.148727][T18200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.148742][T18200] RSP: 002b:00007fbecd2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.148762][T18200] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38f749 [ 473.148775][T18200] RDX: 0000000020050840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 473.148786][T18200] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 473.148798][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.148808][T18200] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 473.148838][T18200] [ 473.160148][T18206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.187661][T18208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4012'. [ 473.628413][T18218] netlink: 'syz.1.4015': attribute type 1 has an invalid length. [ 473.823753][T18228] syzkaller1: entered promiscuous mode [ 473.832484][T18218] nbd44: detected capacity change from 0 to 127 [ 473.839069][T18228] syzkaller1: entered allmulticast mode [ 473.850667][ T5844] block nbd44: Receive control failed (result -32) [ 473.956137][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4022'. [ 474.061007][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 474.127113][T18241] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4023'. [ 474.160594][T18251] netlink: 'syz.0.4025': attribute type 10 has an invalid length. [ 474.189706][T18251] veth7: entered promiscuous mode [ 474.254022][T18251] veth9: entered promiscuous mode [ 474.310370][T18251] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 474.354121][T18251] bond7 (unregistering): Released all slaves [ 474.571607][T18276] netlink: 'syz.0.4033': attribute type 1 has an invalid length. [ 474.629861][T18281] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 474.638869][T18281] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 474.696113][T18276] nbd45: detected capacity change from 0 to 127 [ 474.704479][ T5844] block nbd45: Receive control failed (result -32) [ 474.797111][T18286] lo: entered promiscuous mode [ 474.803245][T18286] netlink: 'syz.0.4036': attribute type 2 has an invalid length. [ 474.812956][T18286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.828555][T18288] netlink: 'syz.0.4036': attribute type 2 has an invalid length. [ 474.838132][T18288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.937916][T18290] netlink: 'syz.0.4038': attribute type 33 has an invalid length. [ 474.970695][T18290] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 474.985534][T18290] bond7 (unregistering): Released all slaves [ 475.012319][T18296] netlink: 'syz.4.4039': attribute type 4 has an invalid length. [ 475.338137][T18315] netlink: 'syz.1.4046': attribute type 1 has an invalid length. [ 475.415114][T18315] nbd46: detected capacity change from 0 to 127 [ 475.422938][ T5844] block nbd46: Receive control failed (result -32) [ 475.559905][T18324] x_tables: duplicate underflow at hook 2 [ 475.581032][T18329] netlink: 'syz.0.4051': attribute type 10 has an invalid length. [ 475.591442][T18327] bond0: (slave wlan1): Releasing backup interface [ 475.927592][T18345] nbd: illegal input index 2958377 [ 476.405441][T18362] nbd47: detected capacity change from 0 to 127 [ 476.437370][T18369] block nbd0: reconnected socket [ 476.453081][ T5836] block nbd0: Receive control failed (result -32) [ 476.460302][ T5844] block nbd47: Receive control failed (result -32) [ 476.819922][ T9] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 476.845471][ T9] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 476.892742][ T9] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 476.928003][ T9] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 476.964213][ T9] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 476.980817][ T9] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 476.992838][ T9] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 477.069853][T18415] __nla_validate_parse: 9 callbacks suppressed [ 477.069874][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4079'. [ 477.087145][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 477.096471][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 477.150590][T18422] nbd: must specify an index to disconnect [ 477.297585][T18420] nbd48: detected capacity change from 0 to 127 [ 477.310108][T18425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4081'. [ 477.323158][T18432] xt_hashlimit: invalid rate [ 477.338176][T18425] block nbd0: reconnected socket [ 477.379587][ T5836] block nbd0: Receive control failed (result -32) [ 477.387721][ T5844] block nbd48: Receive control failed (result -32) [ 477.542281][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4088'. [ 477.630077][T18446] bond7: entered promiscuous mode [ 477.643596][T18446] bond7: entered allmulticast mode [ 477.655535][T18446] 8021q: adding VLAN 0 to HW filter on device bond7 [ 477.747584][T18456] validate_nla: 4 callbacks suppressed [ 477.747616][T18456] netlink: 'syz.3.4091': attribute type 10 has an invalid length. [ 477.813041][T18460] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 477.825355][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.829828][T18460] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 477.844265][T18456] bridge_slave_1: left allmulticast mode [ 477.866597][T18456] bridge_slave_1: left promiscuous mode [ 477.879288][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.909859][T18456] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 478.284480][T18484] netlink: 'syz.4.4105': attribute type 10 has an invalid length. [ 478.342537][T16210] IPVS: starting estimator thread 0... [ 478.445070][T18489] IPVS: using max 26 ests per chain, 62400 per kthread [ 478.537806][T18506] netlink: 'syz.2.4120': attribute type 10 has an invalid length. [ 478.547634][T18506] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4120'. [ 478.574758][T18510] ieee802154 phy0 wpan0: encryption failed: -126 [ 478.583830][T18509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.593717][T18506] veth3: entered promiscuous mode [ 478.628339][T18506] veth5: entered promiscuous mode [ 478.705549][T18506] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 478.734646][T18506] bond1 (unregistering): Released all slaves [ 478.923649][T18528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4115'. [ 478.978376][T18531] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.191245][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4122'. [ 479.200747][T18544] IPVS: Unknown mcast interface: vcan0 [ 479.280071][T18550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4124'. [ 479.373895][T18553] FAULT_INJECTION: forcing a failure. [ 479.373895][T18553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.387661][T18553] CPU: 1 UID: 0 PID: 18553 Comm: syz.4.4125 Not tainted syzkaller #0 PREEMPT(full) [ 479.387692][T18553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.387706][T18553] Call Trace: [ 479.387716][T18553] [ 479.387725][T18553] dump_stack_lvl+0x189/0x250 [ 479.387768][T18553] ? __pfx____ratelimit+0x10/0x10 [ 479.387801][T18553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.387831][T18553] ? __pfx__printk+0x10/0x10 [ 479.387869][T18553] should_fail_ex+0x414/0x560 [ 479.387909][T18553] _copy_to_user+0x31/0xb0 [ 479.387940][T18553] simple_read_from_buffer+0xe1/0x170 [ 479.387981][T18553] proc_fail_nth_read+0x1b3/0x220 [ 479.388015][T18553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.388048][T18553] ? rw_verify_area+0x2a6/0x4d0 [ 479.388080][T18553] ? __lock_acquire+0xab9/0xd20 [ 479.388101][T18553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.388132][T18553] vfs_read+0x200/0xa30 [ 479.388162][T18553] ? fdget_pos+0x247/0x320 [ 479.388191][T18553] ? __pfx___mutex_lock+0x10/0x10 [ 479.388227][T18553] ? __pfx_vfs_read+0x10/0x10 [ 479.388261][T18553] ? __fget_files+0x2a/0x420 [ 479.388303][T18553] ? __fget_files+0x3a0/0x420 [ 479.388324][T18553] ? __fget_files+0x2a/0x420 [ 479.388358][T18553] ksys_read+0x145/0x250 [ 479.388393][T18553] ? __pfx_ksys_read+0x10/0x10 [ 479.388438][T18553] ? do_syscall_64+0xbe/0xfa0 [ 479.388476][T18553] do_syscall_64+0xfa/0xfa0 [ 479.388520][T18553] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.388553][T18553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.388579][T18553] ? clear_bhb_loop+0x60/0xb0 [ 479.388607][T18553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.388628][T18553] RIP: 0033:0x7fbecc38e15c [ 479.388646][T18553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 479.388666][T18553] RSP: 002b:00007fbecd2be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.388688][T18553] RAX: ffffffffffffffda RBX: 00007fbecc5e5fa0 RCX: 00007fbecc38e15c [ 479.388705][T18553] RDX: 000000000000000f RSI: 00007fbecd2be0a0 RDI: 0000000000000008 [ 479.388727][T18553] RBP: 00007fbecd2be090 R08: 0000000000000000 R09: 0000000000000000 [ 479.388742][T18553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.388755][T18553] R13: 00007fbecc5e6038 R14: 00007fbecc5e5fa0 R15: 00007ffe5e2fac48 [ 479.388805][T18553] [ 479.821493][T18570] netlink: 'syz.4.4128': attribute type 4 has an invalid length. [ 479.900607][T18577] syzkaller0: entered promiscuous mode [ 479.906424][T18577] syzkaller0: entered allmulticast mode [ 480.003769][T18579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4134'. [ 480.059538][T18588] netlink: 'syz.3.4136': attribute type 1 has an invalid length. [ 480.219008][T18599] ieee802154 phy0 wpan0: encryption failed: -126 [ 480.238796][T18596] syzkaller1: entered promiscuous mode [ 480.244554][T18596] syzkaller1: entered allmulticast mode [ 480.432628][T18606] syzkaller1: entered promiscuous mode [ 480.438507][T18606] syzkaller1: entered allmulticast mode [ 481.035645][T18612] gre0 speed is unknown, defaulting to 1000 [ 481.156020][ T5844] Bluetooth: hci3: command tx timeout [ 481.420470][T18649] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 481.574234][T18612] lo speed is unknown, defaulting to 1000 [ 481.595124][T18649] nbd49: detected capacity change from 0 to 127 [ 481.602458][T18655] block nbd0: reconnected socket [ 481.619773][ T5844] block nbd49: Receive control failed (result -32) [ 481.626911][ T5836] block nbd0: Receive control failed (result -32) [ 481.783184][T18665] tipc: Enabling of bearer rejected, failed to enable media [ 481.930585][T18671] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 482.005036][T18673] tipc: Enabled bearer , priority 0 [ 482.076559][T18673] syzkaller0: entered promiscuous mode [ 482.082161][T18673] syzkaller0: entered allmulticast mode [ 482.088730][T18673] tipc: Resetting bearer [ 482.089294][T18679] __nla_validate_parse: 7 callbacks suppressed [ 482.089313][T18679] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4170'. [ 482.102951][T18684] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4171'. [ 482.123027][T18672] tipc: Resetting bearer [ 482.131424][T18684] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4171'. [ 483.225674][ T5844] Bluetooth: hci3: command tx timeout [ 483.490042][T18672] tipc: Disabling bearer [ 483.936436][T18700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4176'. [ 484.155464][T18720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.197743][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4184'. [ 484.654644][T18740] FAULT_INJECTION: forcing a failure. [ 484.654644][T18740] name failslab, interval 1, probability 0, space 0, times 0 [ 484.678793][T18740] CPU: 1 UID: 0 PID: 18740 Comm: syz.0.4190 Not tainted syzkaller #0 PREEMPT(full) [ 484.678824][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.678839][T18740] Call Trace: [ 484.678848][T18740] [ 484.678859][T18740] dump_stack_lvl+0x189/0x250 [ 484.678892][T18740] ? __pfx____ratelimit+0x10/0x10 [ 484.678923][T18740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.678952][T18740] ? __pfx__printk+0x10/0x10 [ 484.678978][T18740] ? __pfx___might_resched+0x10/0x10 [ 484.679003][T18740] ? fs_reclaim_acquire+0x7d/0x100 [ 484.679043][T18740] should_fail_ex+0x414/0x560 [ 484.679081][T18740] ? __pfx_sock_alloc_inode+0x10/0x10 [ 484.679111][T18740] should_failslab+0xa8/0x100 [ 484.679135][T18740] ? __pfx_sock_alloc_inode+0x10/0x10 [ 484.679162][T18740] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 484.679193][T18740] ? sock_alloc_inode+0x28/0xc0 [ 484.679220][T18740] ? format_decode+0x5a3/0xe30 [ 484.679248][T18740] ? __pfx_sock_alloc_inode+0x10/0x10 [ 484.679277][T18740] sock_alloc_inode+0x28/0xc0 [ 484.679315][T18740] alloc_inode+0x6a/0x1b0 [ 484.679350][T18740] __sock_create+0x12d/0x9f0 [ 484.679391][T18740] mptcp_subflow_create_socket+0xf0/0x7d0 [ 484.679422][T18740] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 484.679451][T18740] ? tomoyo_check_inet_address+0x275/0x8c0 [ 484.679490][T18740] __mptcp_nmpc_sk+0x148/0x760 [ 484.679518][T18740] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 484.679542][T18740] ? look_up_lock_class+0x74/0x170 [ 484.679583][T18740] mptcp_connect+0x71/0x830 [ 484.679620][T18740] __inet_stream_connect+0x2ae/0xe70 [ 484.679655][T18740] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.679679][T18740] ? __pfx___inet_stream_connect+0x10/0x10 [ 484.679702][T18740] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.679726][T18740] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.679764][T18740] inet_stream_connect+0x66/0xa0 [ 484.679789][T18740] __sys_connect+0x316/0x440 [ 484.679810][T18740] ? __fget_files+0x3a0/0x420 [ 484.679832][T18740] ? __pfx___sys_connect+0x10/0x10 [ 484.679881][T18740] ? __pfx_ksys_write+0x10/0x10 [ 484.679920][T18740] __x64_sys_connect+0x7a/0x90 [ 484.679942][T18740] do_syscall_64+0xfa/0xfa0 [ 484.679973][T18740] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.680005][T18740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.680027][T18740] ? clear_bhb_loop+0x60/0xb0 [ 484.680054][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.680077][T18740] RIP: 0033:0x7f6a4bd8f749 [ 484.680097][T18740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.680117][T18740] RSP: 002b:00007f6a4cb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 484.680140][T18740] RAX: ffffffffffffffda RBX: 00007f6a4bfe5fa0 RCX: 00007f6a4bd8f749 [ 484.680157][T18740] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 484.680172][T18740] RBP: 00007f6a4cb3f090 R08: 0000000000000000 R09: 0000000000000000 [ 484.680186][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.680218][T18740] R13: 00007f6a4bfe6038 R14: 00007f6a4bfe5fa0 R15: 00007ffda825c078 [ 484.680258][T18740] [ 484.680298][T18740] socket: no more sockets [ 484.751993][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'. [ 485.176593][T18754] netlink: 'syz.0.4195': attribute type 1 has an invalid length. [ 485.186292][T18754] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4195'. [ 485.273119][T18757] netlink: 'syz.4.4196': attribute type 10 has an invalid length. [ 485.281259][T18757] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4196'. [ 485.321748][ T5844] Bluetooth: hci3: command tx timeout [ 485.863079][T18789] netlink: 'syz.1.4209': attribute type 1 has an invalid length. [ 485.874585][T18789] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4209'. [ 485.887022][T18789] FAULT_INJECTION: forcing a failure. [ 485.887022][T18789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.904673][T18789] CPU: 0 UID: 0 PID: 18789 Comm: syz.1.4209 Not tainted syzkaller #0 PREEMPT(full) [ 485.904704][T18789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.904720][T18789] Call Trace: [ 485.904730][T18789] [ 485.904739][T18789] dump_stack_lvl+0x189/0x250 [ 485.904776][T18789] ? __pfx____ratelimit+0x10/0x10 [ 485.904808][T18789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.904851][T18789] ? __pfx__printk+0x10/0x10 [ 485.904893][T18789] should_fail_ex+0x414/0x560 [ 485.904930][T18789] _copy_to_user+0x31/0xb0 [ 485.904961][T18789] simple_read_from_buffer+0xe1/0x170 [ 485.905000][T18789] proc_fail_nth_read+0x1b3/0x220 [ 485.905032][T18789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.905065][T18789] ? rw_verify_area+0x2a6/0x4d0 [ 485.905093][T18789] ? __lock_acquire+0xab9/0xd20 [ 485.905113][T18789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.905144][T18789] vfs_read+0x200/0xa30 [ 485.905172][T18789] ? fdget_pos+0x247/0x320 [ 485.905199][T18789] ? __pfx___mutex_lock+0x10/0x10 [ 485.905233][T18789] ? __pfx_vfs_read+0x10/0x10 [ 485.905265][T18789] ? __fget_files+0x2a/0x420 [ 485.905292][T18789] ? __fget_files+0x3a0/0x420 [ 485.905312][T18789] ? __fget_files+0x2a/0x420 [ 485.905344][T18789] ksys_read+0x145/0x250 [ 485.905377][T18789] ? __pfx_ksys_read+0x10/0x10 [ 485.905413][T18789] ? do_syscall_64+0xbe/0xfa0 [ 485.905449][T18789] do_syscall_64+0xfa/0xfa0 [ 485.905478][T18789] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.905508][T18789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.905531][T18789] ? clear_bhb_loop+0x60/0xb0 [ 485.905558][T18789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.905579][T18789] RIP: 0033:0x7f460398e15c [ 485.905599][T18789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 485.905618][T18789] RSP: 002b:00007f460482f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.905642][T18789] RAX: ffffffffffffffda RBX: 00007f4603be5fa0 RCX: 00007f460398e15c [ 485.905659][T18789] RDX: 000000000000000f RSI: 00007f460482f0a0 RDI: 0000000000000003 [ 485.905673][T18789] RBP: 00007f460482f090 R08: 0000000000000000 R09: 0000000000000000 [ 485.905687][T18789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.905701][T18789] R13: 00007f4603be6038 R14: 00007f4603be5fa0 R15: 00007fff7eb16de8 [ 485.905739][T18789] [ 486.388642][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4214'. [ 486.423417][T18798] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode [ 486.449420][T18798] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode [ 486.613554][T18818] [ 486.615956][T18818] ====================================================== [ 486.622987][T18818] WARNING: possible circular locking dependency detected [ 486.630043][T18818] syzkaller #0 Not tainted [ 486.634460][T18818] ------------------------------------------------------ [ 486.641651][T18818] syz.2.4218/18818 is trying to acquire lock: [ 486.647718][T18818] ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 486.657216][T18818] [ 486.657216][T18818] but task is already holding lock: [ 486.664576][T18818] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 486.674150][T18818] [ 486.674150][T18818] which lock already depends on the new lock. [ 486.674150][T18818] [ 486.684552][T18818] [ 486.684552][T18818] the existing dependency chain (in reverse order) is: [ 486.693564][T18818] [ 486.693564][T18818] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 486.701498][T18818] lock_acquire+0x120/0x360 [ 486.706544][T18818] _raw_spin_lock_bh+0x36/0x50 [ 486.711855][T18818] nr_rt_ioctl+0x390/0xd50 [ 486.716816][T18818] sock_do_ioctl+0xdc/0x300 [ 486.721858][T18818] sock_ioctl+0x576/0x790 [ 486.726803][T18818] __se_sys_ioctl+0xfc/0x170 [ 486.731927][T18818] do_syscall_64+0xfa/0xfa0 [ 486.737065][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.743483][T18818] [ 486.743483][T18818] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 486.751482][T18818] lock_acquire+0x120/0x360 [ 486.756516][T18818] _raw_spin_lock_bh+0x36/0x50 [ 486.761809][T18818] nr_rt_ioctl+0x193/0xd50 [ 486.766757][T18818] sock_do_ioctl+0xdc/0x300 [ 486.771795][T18818] sock_ioctl+0x576/0x790 [ 486.776676][T18818] __se_sys_ioctl+0xfc/0x170 [ 486.781791][T18818] do_syscall_64+0xfa/0xfa0 [ 486.786849][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.793268][T18818] [ 486.793268][T18818] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 486.801092][T18818] validate_chain+0xb9b/0x2140 [ 486.806381][T18818] __lock_acquire+0xab9/0xd20 [ 486.811581][T18818] lock_acquire+0x120/0x360 [ 486.816606][T18818] _raw_spin_lock_bh+0x36/0x50 [ 486.821899][T18818] nr_rt_device_down+0xa9/0x720 [ 486.827286][T18818] nr_device_event+0x137/0x150 [ 486.832591][T18818] notifier_call_chain+0x1b6/0x3e0 [ 486.838233][T18818] __dev_notify_flags+0x18d/0x2e0 [ 486.843777][T18818] netif_change_flags+0xe8/0x1a0 [ 486.849336][T18818] dev_change_flags+0x130/0x260 [ 486.854720][T18818] dev_ioctl+0x7b4/0x1150 [ 486.859588][T18818] sock_do_ioctl+0x22c/0x300 [ 486.864712][T18818] sock_ioctl+0x576/0x790 [ 486.869572][T18818] __se_sys_ioctl+0xfc/0x170 [ 486.874695][T18818] do_syscall_64+0xfa/0xfa0 [ 486.879728][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.886144][T18818] [ 486.886144][T18818] other info that might help us debug this: [ 486.886144][T18818] [ 486.896374][T18818] Chain exists of: [ 486.896374][T18818] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 486.896374][T18818] [ 486.910208][T18818] Possible unsafe locking scenario: [ 486.910208][T18818] [ 486.917663][T18818] CPU0 CPU1 [ 486.923025][T18818] ---- ---- [ 486.928382][T18818] lock(nr_neigh_list_lock); [ 486.933062][T18818] lock(&nr_node->node_lock); [ 486.940362][T18818] lock(nr_neigh_list_lock); [ 486.947563][T18818] lock(nr_node_list_lock); [ 486.952161][T18818] [ 486.952161][T18818] *** DEADLOCK *** [ 486.952161][T18818] [ 486.960301][T18818] 2 locks held by syz.2.4218/18818: [ 486.965495][T18818] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 486.974306][T18818] #1: ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 486.984320][T18818] [ 486.984320][T18818] stack backtrace: [ 486.990205][T18818] CPU: 0 UID: 0 PID: 18818 Comm: syz.2.4218 Not tainted syzkaller #0 PREEMPT(full) [ 486.990226][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.990238][T18818] Call Trace: [ 486.990245][T18818] [ 486.990254][T18818] dump_stack_lvl+0x189/0x250 [ 486.990283][T18818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.990307][T18818] ? __pfx__printk+0x10/0x10 [ 486.990325][T18818] ? print_lock_name+0xde/0x100 [ 486.990344][T18818] print_circular_bug+0x2ee/0x310 [ 486.990369][T18818] check_noncircular+0x134/0x160 [ 486.990394][T18818] validate_chain+0xb9b/0x2140 [ 486.990418][T18818] ? rt6_disable_ip+0x6b3/0x720 [ 486.990444][T18818] ? __queue_work+0xc56/0xfb0 [ 486.990468][T18818] ? __lock_acquire+0xab9/0xd20 [ 486.990486][T18818] __lock_acquire+0xab9/0xd20 [ 486.990506][T18818] ? nr_rt_device_down+0xa9/0x720 [ 486.990526][T18818] lock_acquire+0x120/0x360 [ 486.990542][T18818] ? nr_rt_device_down+0xa9/0x720 [ 486.990568][T18818] ? nr_rt_device_down+0xa9/0x720 [ 486.990589][T18818] _raw_spin_lock_bh+0x36/0x50 [ 486.990612][T18818] ? nr_rt_device_down+0xa9/0x720 [ 486.990633][T18818] nr_rt_device_down+0xa9/0x720 [ 486.990655][T18818] ? do_raw_spin_unlock+0x122/0x240 [ 486.990681][T18818] nr_device_event+0x137/0x150 [ 486.990701][T18818] notifier_call_chain+0x1b6/0x3e0 [ 486.990726][T18818] __dev_notify_flags+0x18d/0x2e0 [ 486.990746][T18818] ? __pfx___dev_notify_flags+0x10/0x10 [ 486.990765][T18818] ? __dev_change_flags+0x4cc/0x6d0 [ 486.990797][T18818] ? __pfx___dev_change_flags+0x10/0x10 [ 486.990815][T18818] ? full_name_hash+0x92/0xe0 [ 486.990855][T18818] netif_change_flags+0xe8/0x1a0 [ 486.990876][T18818] dev_change_flags+0x130/0x260 [ 486.990895][T18818] dev_ioctl+0x7b4/0x1150 [ 486.990924][T18818] sock_do_ioctl+0x22c/0x300 [ 486.990948][T18818] ? __pfx_sock_do_ioctl+0x10/0x10 [ 486.990979][T18818] sock_ioctl+0x576/0x790 [ 486.991008][T18818] ? __pfx_sock_ioctl+0x10/0x10 [ 486.991031][T18818] ? __fget_files+0x3a0/0x420 [ 486.991047][T18818] ? __fget_files+0x2a/0x420 [ 486.991065][T18818] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.991085][T18818] ? __pfx_sock_ioctl+0x10/0x10 [ 486.991106][T18818] __se_sys_ioctl+0xfc/0x170 [ 486.991130][T18818] do_syscall_64+0xfa/0xfa0 [ 486.991155][T18818] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.991180][T18818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.991197][T18818] ? clear_bhb_loop+0x60/0xb0 [ 486.991218][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.991234][T18818] RIP: 0033:0x7f7c4818f749 [ 486.991251][T18818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.991266][T18818] RSP: 002b:00007f7c4905b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.991284][T18818] RAX: ffffffffffffffda RBX: 00007f7c483e5fa0 RCX: 00007f7c4818f749 [ 486.991298][T18818] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 486.991310][T18818] RBP: 00007f7c48213f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.991321][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.991331][T18818] R13: 00007f7c483e6038 R14: 00007f7c483e5fa0 R15: 00007ffd3d0d5518 [ 486.991354][T18818] [ 487.358628][T18829] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4223'. [ 487.360150][T18828] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4223'. [ 487.398065][ T5844] Bluetooth: hci3: command tx timeout [ 489.475514][ T5844] Bluetooth: hci3: command tx timeout [ 491.555078][ T5844] Bluetooth: hci3: command tx timeout [ 493.625062][ T5844] Bluetooth: hci3: command tx timeout [ 495.715132][ T5844] Bluetooth: hci3: command tx timeout