last executing test programs: 7.226215436s ago: executing program 3 (id=3928): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008880}, 0xc0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0xae7, @local}}, 0x2, 0x40000007, 0x2, 0x4, 0x100}, &(0x7f0000000900)=0x98) 4.489394342s ago: executing program 3 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x42000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 4.065565388s ago: executing program 3 (id=3973): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000400)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 3.913466998s ago: executing program 3 (id=3975): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008880}, 0xc0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0xae7, @local}}, 0x2, 0x40000007, 0x2, 0x4, 0x100}, &(0x7f0000000900)=0x98) 1.642996138s ago: executing program 4 (id=4007): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip6gre0\x00', {0x4}, 0xffff}) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r4, 0xa11c}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e20, 0x1, @empty, 0x9}}, 0x9, 0xfc71, 0x0, 0x1, 0x28, 0x9, 0x2}, &(0x7f0000000040)=0x9c) r5 = socket$inet6(0xa, 0x3, 0xfa) sendto$inet6(r5, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000037c00000400f6000c000180063a060086dd"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r7) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4020000}, 0x85) 1.501360812s ago: executing program 0 (id=4009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000005000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f00000002c0)="214d547f38c14f4884b58f5481690dc0e9cfbbcaf17b39", 0x17) syz_emit_ethernet(0x83, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.465450017s ago: executing program 2 (id=4010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000400000000000a5800fff5060a0b040000000000000100020000002c0004802800018011000100666c6f775f6f66666c6f6164009a7900100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.389823764s ago: executing program 1 (id=4011): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0xaea2}, {{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x40000, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4111, 0x100f}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/94, 0x5e}, {&(0x7f0000000640)=""/91, 0x5b}], 0x6}, 0x8101}], 0x4, 0x40010020, 0x0) 1.289431141s ago: executing program 2 (id=4012): ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x5, 'vlan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 1.100637875s ago: executing program 4 (id=4013): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket(0xa, 0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a2072776d00ca237ffdaf72e2a5061ad4ac618ee178f2cf3d3adf9ce5e28f691918da2f6e05169d9a0d751f8dda8b80d07c594bd14c23b1a2c73373c56e174bae4f2b4ea83f3a5b866e3cb2fd87b8e6f0d5ae6870ae39b297f89f98057d4a8ed2d82d0a8b3126d3f63739b6d386499acf29cea4bc55b6b2e183723918e518f8bcc4d47e2a2b2753b023e6bde11ef5f590ef825dd162c1198667ad618d723c9c15080479ea47c36a9ede8d695afee449bc90698798"], 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) 1.099765885s ago: executing program 0 (id=4014): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/224, 0xe0}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000000c0)=""/252, 0xfc}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6, 0x0, 0x2000}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x7}], 0x9, 0x4022, 0x0) 1.099676036s ago: executing program 1 (id=4015): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0xff00, 0x20044080, &(0x7f0000000040)={0xa, 0x4e22, 0x7fffff7c, @private1, 0xd}, 0x1c) 1.098633048s ago: executing program 4 (id=4016): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) (async) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f0000000c80)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a0d0000442ffffc000000000000000000000000000000fe8000000000000000000000000000aa042088be0000000000000800000086dd080088be00000000100000020100000000000000080022eb00000000203200000200000000000000000000000800655800000000c65773ad375ac782026c604ab9406a8305ca00d881342c34007e458eed4152b381fd0e1adbf7a7527dc1e2687c728ba18db609094deb276879dd8054640cab4c08963608aac7f0edd54d399096883c21d80fa185b474ec75162f3cce4b0e894356d2d707fd3a23"], 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYRESDEC=r0], 0x34}}, 0x1) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r7, 0x104, 0x1, 0x0, &(0x7f00000001c0)) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x80000001}, {0x6, 0x40}]}, 0x10) (async) sendto(r10, 0x0, 0x0, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000c40)={0x0, 0x3, [0x8001, 0x4d99, 0x9, 0xce, 0x8, 0x1]}) recvmmsg(r9, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xaf3}, {{0x0, 0x0, 0x0}, 0x2041}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000004100)=""/4086, 0xff6}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0xff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000002a40)=""/4050, 0xfd2}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000000)=""/54, 0x36}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000000010104000000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200fc0000010c00028005000100000000000800074000"/108], 0x6c}}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fffffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000c00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd8, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_REPLY={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x4, @mcast2}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004000}, 0x94) 1.098034812s ago: executing program 2 (id=4017): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 1.094912444s ago: executing program 0 (id=4018): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}, {&(0x7f0000000d00)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000a00)=""/213, 0xd5}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000180)=""/173, 0xad}], 0x8}, 0x10182) 1.03909568s ago: executing program 1 (id=4019): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x52, @mcast2, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='0x0, 0x49, "b9b424680e9cf42564f15ec90d8d050f02440c6a291f4553541065a6636713467ff8afb9d3ea339a972f424fc4de413a961f3163b02ee84a5a5ef109e33dd730ed492ad2c086e6cf37"}, &(0x7f00000000c0)=0x51) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000280)={r5, 0x40}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r5, &(0x7f0000000240)=0x4) 986.675486ms ago: executing program 3 (id=4020): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0x600}}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20044000) (async) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xaf0}, {{0x0, 0x0, 0x0}, 0x2041}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/213, 0xd5}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000004100)=""/4086, 0xff6}], 0x3}, 0x200ff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000c00)=""/229, 0xe5}, {&(0x7f0000002a40)=""/4109, 0x100d}, {&(0x7f0000005100)=""/4065, 0xfe1}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) 909.278444ms ago: executing program 4 (id=4021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "8b1cae48"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) 885.260986ms ago: executing program 0 (id=4022): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) (async, rerun: 64) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) (rerun: 64) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x3, 0x512, [0x0, 0x200000000580, 0x2000000006be, 0x200000000a32], 0x0, &(0x7f0000000180), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x24, 0x6558, 'veth0_virt_wifi\x00', 'veth1_to_bond\x00', 'hsr0\x00', 'geneve0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0x0, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@owner={{'owner\x00', 0x0, 0x18}, {{r4, r5, r6, r7, 0x5, 0x4}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x1}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x11, 0x4d, 0x6001, 'virt_wifi0\x00', 'veth0\x00', 'veth1_to_hsr\x00', 'pim6reg\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x1ee, 0x21e, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7e, 'system_u:object_r:null_device_t:s0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffffffff, 'syz0\x00', {0x4}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}, {0x5, 0x30, 0x2, '\x00', 'wg2\x00', 'wlan1\x00', 'batadv_slave_0\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0xd6, 0x126, [@state={{'state\x00', 0x0, 0x8}, {{0x3}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xffffffff}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x58a) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) (async) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="35a5ee768e4374bfe67ed1600bb69e135063a8f8409fd78ed40f98aa301b8ed9c5245028c46a05fa45389c1e257d084b9030743df9d7406e527b653e023ef3d5c63080db73a6c5fb7e1ec2d761717744986fa4851d90b5cc726071fd2550c03b5bc9dbb763fec7b22c54aa72f647f2d10d20b9618c81159d02d1d03eaeacb3f54c493487dbdb63fa26fcaa6ae1f2976721d4e84c05bfdaf73764424529ea418d15325e66fafa7a41b8e4", 0xaa}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="9630f8da4cafebe184f4f8d5060a66c06b54b42e3a08123314a0ed17da8404e919a3c85f1b30fa866c68d132904c00be93087c46bda31d7cdaae25747a974ba90c6ff0f34d82db8ceca1d3477335b0e6a31e9482bee2238673f9ecfa6f67cbdb7cf3240c3e217ee85e440f0c6f96ab4092c09efb594f191508f17ac746", 0x7d}], 0x3}, 0x4000000) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 842.59002ms ago: executing program 1 (id=4023): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3fc, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x31182babd83504f1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xd, 0x3, 0x0, 0x8421, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xf}, 0x50) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r4, 0xb4ea}, 0x8) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000340)={0x1, 'wg2\x00', {}, 0x5}) (async, rerun: 32) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711022000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000a52ff6cffe660e1ae531056d179e00b70200fc0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018290000", @ANYRES32=r5, @ANYBLOB="000000000c0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x2}, 0x94) 764.402029ms ago: executing program 2 (id=4024): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip6gre0\x00', {0x4}, 0xffff}) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r4, 0xa11c}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e20, 0x1, @empty, 0x9}}, 0x9, 0xfc71, 0x0, 0x1, 0x28, 0x9, 0x2}, &(0x7f0000000040)=0x9c) r5 = socket$inet6(0xa, 0x3, 0xfa) sendto$inet6(r5, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000037c00000400f6000c0001800641060086dd"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r7) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4020000}, 0x85) 464.908515ms ago: executing program 2 (id=4025): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='cubic\x00', 0x6) write$tcp_congestion(r0, &(0x7f0000000080)='westwood\x00', 0x9) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/45, 0x2d}], 0x2, 0xd, 0x7) write$tcp_congestion(r0, &(0x7f0000000200)='reno\x00', 0x5) write$tcp_congestion(r0, &(0x7f0000000240)='hybla\x00', 0x6) write$tcp_congestion(r0, &(0x7f0000000280)='reno\x00', 0x5) ioctl$FIOCLEX(r0, 0x5451) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="8d2c1ac8d1837086718a39dcfce8305c941f0bf1efc5ab52b543ea847d555d033c33ad4cdf36b6f0f97df38ee82038d777948e91c54be90978f93ea46a6bf357abacd9a2f12df91c2461b9650f30558acbb6ea1908138d85d3c8e7ebb37b9544b034815066e58dbacc878d5de680c9fb44ee45fb56052520760e1b7cb41838ba8f4fd1e39d2d8c55ff53e1f0ecd5835cb34768068dc9223811bad493f8f7e99c44fbdb69ff0332e8e737593b5b3f7788bd21368b962bcc278810925ff744cc80c5b7cd8850aab8976808f023e18c1cebfa98d0b25c06ae95dfccbd4774cfbb82baef159b381ad80a2fd3935e7490144e0900", 0xf2}], 0x1) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000400)=@name, &(0x7f0000000440)=0x10, 0x80800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000480)={0x43, 0x1, 0x2}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x218000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000500)={'caif0\x00', @multicast}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000540)="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", 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x40000, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000001580)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'wg1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x214000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000016c0)={'bridge_slave_0\x00', @remote}) sendmsg$tipc(r3, &(0x7f0000001980)={&(0x7f0000001700)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}, 0x2}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001740)="40c8af4ce5eb0cdd34d30895f583bc4a0ca4419c798df3b037d0231a12ecc541276167626711529be12d3098a64cf7b7358f57892edcf6c10661c875512cc3208660a7ba2a4c65956afbf6bb6748f405d5dcf1ef7f64426b19d50ba5e6dbda0ad075bcbbaec6b4de8e7780db795aac4fbe6f45d804ac22a792276f8f156df95cb69b0b46f1d76b50295b9666200fb7f6f1bec858e42ad721d726be391b5a8a8e6090dac1cb7d073b91fe23aa2ef93afc0920646a20c70f71639db68d604e8870f03a06c976910125bc4b4357b84b3cb284ae33d1a69577f4f667", 0xda}, {&(0x7f0000001840)="61597d9777c449dbc33c634f6b123903124748c5", 0x14}], 0x2, &(0x7f00000018c0)="8016a9c274571e6feb8118ad6b24f1d71746f5b092f8d74cee90ec2cb3542550ba2c03d60741ab25779cb32ba482a18620cb44fbcfbf879535d16d2bba188c19dacb91dbbfd5074e741819fd86ffb0aa711dd34fb86f2dc31a285d1e7d52ac3b56e8e12fc721deaf1fb421f552917ffc1c61fd39ddce01cae6220124ac2470d672a577aefdd7d2c7376758ef0f87286e4d5f3b4ac5d31d976f759fd791518070e431c094dfbb6b72096b1b7896f4c8c936b3dd65bf7ee2", 0xb7, 0x4008080}, 0x0) write$tcp_congestion(r0, &(0x7f00000019c0)='lp\x00', 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000001ec0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001a40)={0x434, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x104, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x100, 0x2, "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"}]}, @NL80211_ATTR_PROBE_RESP={0xd7, 0x91, "cf4e0c00e6e6d79370324b28614217f6f4418166d61cf09fd326198643f9c915de37ddecf56afa0157dbed95b190275523af008b7f4e74e35707ccb63aff51c20bef12635e68ed7efbe6c4abf4381a6584d1c982e4e14d0260584c9636201c7af31af1c54b0b24f7e3828dfe1f946548d8752cd834c9688de48e16bffd54047b1828664cbae94579e5e4f237d7ec23e6f7442823385e1e0c40fd3f72b8ae79522c87d2b5b7a963dd694a416888039389e983908e0adbaa81722f4ae03a783c71b8c3f192c9734117639c297e5c1b443fece48e"}, @NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@erp={0x2a, 0x1, {0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfa, 0xa1, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x225, 0x7f, [@peer_mgmt={0x75, 0x8, {0x0, 0x3, @val=0xa94c, @val=0x18, @void}}, @sec_chan_ofs={0x3e, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x6a}, 0xfd, 0x4, @device_a, 0x200, 0x4, 0x4}}, @peer_mgmt={0x75, 0x6, {0x0, 0xac, @void, @val=0x29, @void}}, @challenge={0x10, 0x1, 0x93}, @random={0x4, 0xfa, "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"}, @fast_bss_trans={0x37, 0xf4, {0xde, 0x5, "c670b46718d50592e985b3127955e93e", "ba4ff7f8062c20c83b74b360c1a218bbb4b5007f04ee62b6163c2c454683b8db", "596f5e7c891a12f764c44281cad53f8f9613f7c0cfa72790651d307a1fbcc72f", [{0x3, 0xc, "bc87ba33043e2b59211e1482"}, {0x1, 0x1a, "1a089d6913a2b54accf04e745fdea62f429e09b5d32e6555975d"}, {0x4, 0x24, "fa5cf9b2e3b15c8a6343b6721bf2ec2ed84f441a4934bd7659234ce4492efc2209c6cee6"}, {0x2, 0x28, "209936d4cc82adea9e911538adefea38cff2738ecd623870df59c95ac9815af817e80845f1e055fd"}, {0x2, 0x26, "b40902ea418f90eba143c28461c12d19a9842373ae4fde88a217e2800aff890a6b5f79efda26"}]}}]}]}, 0x434}, 0x1, 0x0, 0x0, 0x100000c0}, 0x10000000) r6 = socket$inet6_sctp(0xa, 0xf, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001f00)=@assoc_value, 0x8) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f80), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x70, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f00000020c0)={'TPROXY\x00'}, &(0x7f0000002100)=0x1e) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000021c0)={0x8, 0x208, 0x8, 0x1}, &(0x7f0000002200)=0x10) 462.557957ms ago: executing program 1 (id=4026): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000140)) (async) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000020000000c0000000000000002"], 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) (async) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) sendmsg$802154_dgram(r7, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e9ff00010500030000000000080002400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYRESDEC=r0, @ANYRES64=r10], 0x20) 430.253696ms ago: executing program 4 (id=4027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0xaea2}, {{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4111, 0xd04}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/94, 0x5e}, {&(0x7f0000000640)=""/91, 0x5b}], 0x6}, 0x8101}], 0x4, 0x40010020, 0x0) 198.082499ms ago: executing program 1 (id=4028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141607089f034d2f87e5890c6aab845013f2325f1a39019403178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r6, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0x10}, {0xb}, {0x3, 0xd}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 125.299929ms ago: executing program 0 (id=4029): unshare(0x22020400) (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01", @ANYRESOCT=r1, @ANYRES32=r0], 0x7c}}, 0x0) (async, rerun: 64) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x14, 0x0, 0x8d61ddcfedb48df, 0x70bd26}, 0x14}}, 0x20000005) 125.036699ms ago: executing program 4 (id=4030): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008880}, 0xc0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000900)) 124.8052ms ago: executing program 2 (id=4031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x2000000, 0x800}, 0x0) 6.575288ms ago: executing program 0 (id=4032): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}, {&(0x7f0000000d00)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000a00)=""/213, 0xd5}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000180)=""/173, 0xad}], 0x8}, 0x10182) 0s ago: executing program 3 (id=4033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000340)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000600)={@void, @val={0x3, 0x0, 0x2, 0x3, 0x6, 0xfff8}, @ipv6=@tcp={0x1, 0x6, "b58ea3", 0x26e, 0x6, 0xff, @local, @loopback, {[@dstopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd4}, @pad1, @generic={0x4, 0x5, "39fcbaee67"}]}, @dstopts={0x32, 0x2, '\x00', [@ra={0x5, 0x2, 0x1f}, @jumbo={0xc2, 0x4, 0x800}, @jumbo={0xc2, 0x4, 0x9}]}, @hopopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xa, 0x6}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x51, 0x0, [0x2, 0x0, 0x0, 0xdb4, 0x5, 0x3]}}]}, @hopopts={0x0, 0x5, '\x00', [@ra={0x5, 0x2, 0x98d}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x9}]}, @dstopts={0x3a, 0x28, '\x00', [@generic={0xf, 0xc7, "be979f023a1543c1a403aa6bfeeb0c6e3896e16e6791060d19f6ce9a00ffbf4266cdc3e6ae9ea8c6ec7b027ac754d952fc57ed41ac4110896c92fcad03a799895a6a90d3e7c03d41b829fe458a0aed33caa28e61fcd82eae594ff00330b283a04b7b60713a60a1857319e097ee3d42e64af39865b9cc95cdd796494db6531ca591377774c3d814cd48b958366392ae7c64a1b7f33480a0c32aed968dff7682185b84b6dea313a796a20ac6abaf8e2fd89a6d568c8ad8a3d27600f3192de1ecf19d39994f5b4886"}, @enc_lim, @generic={0x10, 0x76, "e3b6e88472b8719dd9af54ced3c2f951b9ee29ddfb1374558e0eeee03774bfab77d9080e0b215d90aef376413231a2e05c187c1fc5efce3277b24d0ebd0962e7c6ede2cc7a5314f56e7f62a0e9126aa0a14f1f1f4a4f5bf93cdf3c2d587c7177c60e3602b3df720105143ac7d272cbf4cb746308ce4c"}]}, @srh={0x45, 0x2, 0x4, 0x1, 0x8, 0x30, 0xff80, [@mcast2]}], {{0x4e22, 0x4e22, r1, r2, 0x1, 0x0, 0xa, 0x1, 0x0, 0x0, 0x9, {[@md5sig={0x13, 0x12, "96cb0757426f5cfc025969bf8391fda4"}]}}, {"61565163c71d00cffe2d58d2bb764148cb18c6291bf7"}}}}}, 0x2a0) (async) write$tun(r0, &(0x7f0000000600)={@void, @val={0x3, 0x0, 0x2, 0x3, 0x6, 0xfff8}, @ipv6=@tcp={0x1, 0x6, "b58ea3", 0x26e, 0x6, 0xff, @local, @loopback, {[@dstopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd4}, @pad1, @generic={0x4, 0x5, "39fcbaee67"}]}, @dstopts={0x32, 0x2, '\x00', [@ra={0x5, 0x2, 0x1f}, @jumbo={0xc2, 0x4, 0x800}, @jumbo={0xc2, 0x4, 0x9}]}, @hopopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xa, 0x6}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x51, 0x0, [0x2, 0x0, 0x0, 0xdb4, 0x5, 0x3]}}]}, @hopopts={0x0, 0x5, '\x00', [@ra={0x5, 0x2, 0x98d}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x9}]}, @dstopts={0x3a, 0x28, '\x00', [@generic={0xf, 0xc7, "be979f023a1543c1a403aa6bfeeb0c6e3896e16e6791060d19f6ce9a00ffbf4266cdc3e6ae9ea8c6ec7b027ac754d952fc57ed41ac4110896c92fcad03a799895a6a90d3e7c03d41b829fe458a0aed33caa28e61fcd82eae594ff00330b283a04b7b60713a60a1857319e097ee3d42e64af39865b9cc95cdd796494db6531ca591377774c3d814cd48b958366392ae7c64a1b7f33480a0c32aed968dff7682185b84b6dea313a796a20ac6abaf8e2fd89a6d568c8ad8a3d27600f3192de1ecf19d39994f5b4886"}, @enc_lim, @generic={0x10, 0x76, "e3b6e88472b8719dd9af54ced3c2f951b9ee29ddfb1374558e0eeee03774bfab77d9080e0b215d90aef376413231a2e05c187c1fc5efce3277b24d0ebd0962e7c6ede2cc7a5314f56e7f62a0e9126aa0a14f1f1f4a4f5bf93cdf3c2d587c7177c60e3602b3df720105143ac7d272cbf4cb746308ce4c"}]}, @srh={0x45, 0x2, 0x4, 0x1, 0x8, 0x30, 0xff80, [@mcast2]}], {{0x4e22, 0x4e22, r1, r2, 0x1, 0x0, 0xa, 0x1, 0x0, 0x0, 0x9, {[@md5sig={0x13, 0x12, "96cb0757426f5cfc025969bf8391fda4"}]}}, {"61565163c71d00cffe2d58d2bb764148cb18c6291bf7"}}}}}, 0x2a0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e21, r1, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) socket$netlink(0x10, 0x3, 0x12) kernel console output (not intermixed with test programs): `syz.2.2735'. [ 308.730446][T14576] openvswitch: netlink: Missing key (keys=40, expected=100) [ 308.780355][T14574] 8021q: VLANs not supported on ip6gre0 [ 308.844483][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2740'. [ 308.860883][T14585] netlink: 'syz.0.2739': attribute type 1 has an invalid length. [ 308.952039][T14587] tipc: Enabled bearer , priority 0 [ 308.984787][T14587] syzkaller0: entered promiscuous mode [ 308.990708][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 309.003257][T14587] syzkaller0: entered allmulticast mode [ 309.009546][T14593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2739'. [ 309.093329][T14586] tipc: Resetting bearer [ 309.214868][T14586] tipc: Disabling bearer [ 309.363246][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2750'. [ 309.557189][T14623] netlink: 'syz.4.2753': attribute type 21 has an invalid length. [ 309.570141][T14624] 8021q: VLANs not supported on ip6gre0 [ 309.598555][T14624] openvswitch: netlink: Missing key (keys=40, expected=100) [ 309.817843][T14639] Cannot find set identified by id 3 to match [ 309.987643][T14649] FAULT_INJECTION: forcing a failure. [ 309.987643][T14649] name failslab, interval 1, probability 0, space 0, times 0 [ 310.056461][T14656] netlink: 'syz.0.2765': attribute type 12 has an invalid length. [ 310.065424][T14649] CPU: 1 UID: 0 PID: 14649 Comm: syz.3.2763 Not tainted syzkaller #0 PREEMPT(full) [ 310.065453][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.065465][T14649] Call Trace: [ 310.065473][T14649] [ 310.065483][T14649] dump_stack_lvl+0x189/0x250 [ 310.065510][T14649] ? __pfx____ratelimit+0x10/0x10 [ 310.065542][T14649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.065562][T14649] ? __pfx__printk+0x10/0x10 [ 310.065591][T14649] ? __pfx___might_resched+0x10/0x10 [ 310.065618][T14649] ? fs_reclaim_acquire+0x7d/0x100 [ 310.065647][T14649] should_fail_ex+0x414/0x560 [ 310.065684][T14649] should_failslab+0xa8/0x100 [ 310.065712][T14649] __kvmalloc_node_noprof+0x158/0x910 [ 310.065738][T14649] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 310.065771][T14649] alloc_netdev_mqs+0xa4b/0x11b0 [ 310.065802][T14649] rtnl_create_link+0x31f/0xd10 [ 310.065832][T14649] rtnl_newlink_create+0x25c/0xb00 [ 310.065867][T14649] ? __lock_acquire+0xab9/0xd20 [ 310.065897][T14649] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 310.065929][T14649] ? __pfx___mutex_lock+0x10/0x10 [ 310.065961][T14649] ? ns_capable+0x8a/0xf0 [ 310.065992][T14649] rtnl_newlink+0x16e4/0x1c80 [ 310.066034][T14649] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.066066][T14649] ? is_bpf_text_address+0x26/0x2b0 [ 310.066100][T14649] ? is_bpf_text_address+0x292/0x2b0 [ 310.066125][T14649] ? is_bpf_text_address+0x26/0x2b0 [ 310.066156][T14649] ? __lock_acquire+0xab9/0xd20 [ 310.066197][T14649] ? __lock_acquire+0xab9/0xd20 [ 310.066247][T14649] ? is_bpf_text_address+0x26/0x2b0 [ 310.066298][T14649] ? is_bpf_text_address+0x292/0x2b0 [ 310.066324][T14649] ? is_bpf_text_address+0x26/0x2b0 [ 310.066360][T14649] ? __lock_acquire+0xab9/0xd20 [ 310.066414][T14649] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.066440][T14649] rtnetlink_rcv_msg+0x7cf/0xb70 [ 310.066465][T14649] ? __lock_acquire+0xab9/0xd20 [ 310.066491][T14649] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 310.066516][T14649] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.066563][T14649] netlink_rcv_skb+0x208/0x470 [ 310.066589][T14649] ? __lock_acquire+0xab9/0xd20 [ 310.066614][T14649] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.066643][T14649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.066684][T14649] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.066723][T14649] netlink_unicast+0x82f/0x9e0 [ 310.066761][T14649] ? __pfx_netlink_unicast+0x10/0x10 [ 310.066789][T14649] ? netlink_sendmsg+0x642/0xb30 [ 310.066815][T14649] ? skb_put+0x11b/0x210 [ 310.066849][T14649] netlink_sendmsg+0x805/0xb30 [ 310.066888][T14649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.066920][T14649] ? aa_sock_msg_perm+0xf1/0x1d0 [ 310.066945][T14649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.066970][T14649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.066998][T14649] __sock_sendmsg+0x21c/0x270 [ 310.067025][T14649] ____sys_sendmsg+0x505/0x830 [ 310.067061][T14649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.067101][T14649] ? import_iovec+0x74/0xa0 [ 310.067130][T14649] ___sys_sendmsg+0x21f/0x2a0 [ 310.067151][T14649] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.067216][T14649] ? __fget_files+0x2a/0x420 [ 310.067239][T14649] ? __fget_files+0x3a0/0x420 [ 310.067284][T14649] __x64_sys_sendmsg+0x19b/0x260 [ 310.067306][T14649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.067338][T14649] ? __pfx_ksys_write+0x10/0x10 [ 310.067364][T14649] ? do_syscall_64+0xbe/0xfa0 [ 310.067388][T14649] do_syscall_64+0xfa/0xfa0 [ 310.067406][T14649] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.067425][T14649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.067445][T14649] ? clear_bhb_loop+0x60/0xb0 [ 310.067469][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.067488][T14649] RIP: 0033:0x7f1b4638efc9 [ 310.067506][T14649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.067523][T14649] RSP: 002b:00007f1b472ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.067545][T14649] RAX: ffffffffffffffda RBX: 00007f1b465e5fa0 RCX: 00007f1b4638efc9 [ 310.067559][T14649] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 310.067572][T14649] RBP: 00007f1b472ab090 R08: 0000000000000000 R09: 0000000000000000 [ 310.067584][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.067597][T14649] R13: 00007f1b465e6038 R14: 00007f1b465e5fa0 R15: 00007ffcf30a0428 [ 310.067633][T14649] [ 310.697562][T14656] bond23: option primary_reselect: invalid value (255) [ 310.735218][T14656] bond23 (unregistering): Released all slaves [ 310.772557][T14672] 8021q: VLANs not supported on ip6gre0 [ 310.850826][T14672] __nla_validate_parse: 1 callbacks suppressed [ 310.850848][T14672] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2767'. [ 310.894647][T14677] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 310.920970][T14672] openvswitch: netlink: Missing key (keys=40, expected=100) [ 310.925251][T14677] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 311.040785][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2771'. [ 311.064548][ T13] wlan1: Trigger new scan to find an IBSS to join [ 311.167537][T14694] Cannot find set identified by id 3 to match [ 311.535382][T14710] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 311.559764][T14710] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 311.815967][T14727] FAULT_INJECTION: forcing a failure. [ 311.815967][T14727] name failslab, interval 1, probability 0, space 0, times 0 [ 311.848067][T14727] CPU: 0 UID: 0 PID: 14727 Comm: syz.2.2787 Not tainted syzkaller #0 PREEMPT(full) [ 311.848097][T14727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.848110][T14727] Call Trace: [ 311.848118][T14727] [ 311.848127][T14727] dump_stack_lvl+0x189/0x250 [ 311.848163][T14727] ? __pfx____ratelimit+0x10/0x10 [ 311.848194][T14727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.848216][T14727] ? __pfx__printk+0x10/0x10 [ 311.848244][T14727] ? __pfx___might_resched+0x10/0x10 [ 311.848279][T14727] ? fs_reclaim_acquire+0x7d/0x100 [ 311.848309][T14727] should_fail_ex+0x414/0x560 [ 311.848345][T14727] should_failslab+0xa8/0x100 [ 311.848372][T14727] kmem_cache_alloc_node_noprof+0x77/0x710 [ 311.848395][T14727] ? __alloc_skb+0x112/0x2d0 [ 311.848430][T14727] __alloc_skb+0x112/0x2d0 [ 311.848462][T14727] netlink_sendmsg+0x5c6/0xb30 [ 311.848502][T14727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.848534][T14727] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.848558][T14727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.848583][T14727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.848613][T14727] __sock_sendmsg+0x21c/0x270 [ 311.848640][T14727] ____sys_sendmsg+0x505/0x830 [ 311.848678][T14727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.848719][T14727] ? import_iovec+0x74/0xa0 [ 311.848749][T14727] ___sys_sendmsg+0x21f/0x2a0 [ 311.848772][T14727] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.848834][T14727] ? __fget_files+0x2a/0x420 [ 311.848858][T14727] ? __fget_files+0x3a0/0x420 [ 311.848894][T14727] __x64_sys_sendmsg+0x19b/0x260 [ 311.848917][T14727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.848948][T14727] ? __pfx_ksys_write+0x10/0x10 [ 311.848988][T14727] ? do_syscall_64+0xbe/0xfa0 [ 311.849017][T14727] do_syscall_64+0xfa/0xfa0 [ 311.849035][T14727] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.849056][T14727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.849075][T14727] ? clear_bhb_loop+0x60/0xb0 [ 311.849100][T14727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.849118][T14727] RIP: 0033:0x7f72f438efc9 [ 311.849137][T14727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.849154][T14727] RSP: 002b:00007f72f513e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.849177][T14727] RAX: ffffffffffffffda RBX: 00007f72f45e5fa0 RCX: 00007f72f438efc9 [ 311.849192][T14727] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 311.849205][T14727] RBP: 00007f72f513e090 R08: 0000000000000000 R09: 0000000000000000 [ 311.849218][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.849230][T14727] R13: 00007f72f45e6038 R14: 00007f72f45e5fa0 R15: 00007ffdda983828 [ 311.849272][T14727] [ 312.166375][T14735] tipc: Enabling of bearer rejected, already enabled [ 312.181202][T14735] tipc: Resetting bearer [ 312.333353][T14734] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2788'. [ 312.343552][T14740] FAULT_INJECTION: forcing a failure. [ 312.343552][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.357840][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.3.2793 Not tainted syzkaller #0 PREEMPT(full) [ 312.357866][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.357877][T14740] Call Trace: [ 312.357885][T14740] [ 312.357892][T14740] dump_stack_lvl+0x189/0x250 [ 312.357918][T14740] ? __pfx____ratelimit+0x10/0x10 [ 312.357947][T14740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.357967][T14740] ? __pfx__printk+0x10/0x10 [ 312.357986][T14740] ? __might_fault+0xb0/0x130 [ 312.358018][T14740] should_fail_ex+0x414/0x560 [ 312.358052][T14740] _copy_from_user+0x2d/0xb0 [ 312.358078][T14740] do_sock_getsockopt+0x17d/0x450 [ 312.358110][T14740] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 312.358137][T14740] ? do_syscall_64+0xa0/0xfa0 [ 312.358161][T14740] ? __fget_files+0x2a/0x420 [ 312.358183][T14740] ? __fget_files+0x3a0/0x420 [ 312.358205][T14740] ? __fget_files+0x2a/0x420 [ 312.358236][T14740] __x64_sys_getsockopt+0x1a5/0x250 [ 312.358264][T14740] ? do_syscall_64+0xa0/0xfa0 [ 312.358295][T14740] ? do_syscall_64+0xa0/0xfa0 [ 312.358318][T14740] do_syscall_64+0xfa/0xfa0 [ 312.358336][T14740] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.358354][T14740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.358374][T14740] ? clear_bhb_loop+0x60/0xb0 [ 312.358398][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.358416][T14740] RIP: 0033:0x7f1b4638efc9 [ 312.358436][T14740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.358453][T14740] RSP: 002b:00007f1b472ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 312.358473][T14740] RAX: ffffffffffffffda RBX: 00007f1b465e5fa0 RCX: 00007f1b4638efc9 [ 312.358488][T14740] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 312.358499][T14740] RBP: 00007f1b472ab090 R08: 0000200000000000 R09: 0000000000000000 [ 312.358510][T14740] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 312.358522][T14740] R13: 00007f1b465e6038 R14: 00007f1b465e5fa0 R15: 00007ffcf30a0428 [ 312.358555][T14740] [ 312.399723][T14745] netlink: 'syz.0.2788': attribute type 1 has an invalid length. [ 312.516010][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2792'. [ 312.561568][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'. [ 312.607887][T14750] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2789'. [ 312.730966][T14750] bond19 (unregistering): Released all slaves [ 312.835765][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2792'. [ 312.883545][T14760] syzkaller1: entered promiscuous mode [ 312.905967][T14760] syzkaller1: entered allmulticast mode [ 312.946614][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 313.196538][T14774] bridge0: port 2(ipvlan2) entered blocking state [ 313.209240][T14774] bridge0: port 2(ipvlan2) entered disabled state [ 313.216437][T14774] ipvlan2: entered allmulticast mode [ 313.221895][T14774] bridge0: entered allmulticast mode [ 313.234154][T14774] ipvlan2: left allmulticast mode [ 313.239555][T14774] bridge0: left allmulticast mode [ 313.419572][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 313.503955][T14787] macvlan3: entered promiscuous mode [ 313.509332][T14787] macvlan3: entered allmulticast mode [ 313.516517][T14787] bond19: (slave macvlan3): Opening slave failed [ 313.611040][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'. [ 314.164801][T14819] syzkaller1: entered promiscuous mode [ 314.170341][T14819] syzkaller1: entered allmulticast mode [ 314.845797][T14860] tipc: New replicast peer: 0.0.0.0 [ 314.851543][T14860] tipc: Enabled bearer , priority 10 [ 314.880079][T14852] macvlan2: entered promiscuous mode [ 314.885841][T14852] macvlan2: entered allmulticast mode [ 314.892580][T14852] bond15: (slave macvlan2): Opening slave failed [ 315.225887][T14883] netlink: 'syz.2.2837': attribute type 1 has an invalid length. [ 315.641182][T14906] 8021q: VLANs not supported on ip6gre0 [ 315.655362][T14906] openvswitch: netlink: Missing key (keys=40, expected=100) [ 315.668552][T14904] veth0_vlan: left promiscuous mode [ 315.949095][T14917] netlink: 'syz.0.2846': attribute type 9 has an invalid length. [ 315.964051][ T9116] tipc: Node number set to 2424589560 [ 316.063944][T14923] syzkaller1: entered promiscuous mode [ 316.080451][T14923] syzkaller1: entered allmulticast mode [ 316.187128][T14926] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 316.248902][T14926] bond20: entered promiscuous mode [ 316.254799][T14926] 8021q: adding VLAN 0 to HW filter on device bond20 [ 316.327321][T14933] bond20: (slave bridge9): making interface the new active one [ 316.350321][T14941] __nla_validate_parse: 10 callbacks suppressed [ 316.350346][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 316.370680][T14933] bridge9: entered promiscuous mode [ 316.384098][T14933] bond20: (slave bridge9): Enslaving as an active interface with an up link [ 316.620156][T14951] FAULT_INJECTION: forcing a failure. [ 316.620156][T14951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.661803][T14951] CPU: 0 UID: 0 PID: 14951 Comm: syz.0.2860 Not tainted syzkaller #0 PREEMPT(full) [ 316.661833][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.661844][T14951] Call Trace: [ 316.661853][T14951] [ 316.661862][T14951] dump_stack_lvl+0x189/0x250 [ 316.661891][T14951] ? __pfx____ratelimit+0x10/0x10 [ 316.661923][T14951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.661945][T14951] ? __pfx__printk+0x10/0x10 [ 316.661966][T14951] ? __might_fault+0xb0/0x130 [ 316.662000][T14951] should_fail_ex+0x414/0x560 [ 316.662036][T14951] _copy_from_user+0x2d/0xb0 [ 316.662064][T14951] ___sys_sendmsg+0x158/0x2a0 [ 316.662087][T14951] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.662149][T14951] ? __fget_files+0x2a/0x420 [ 316.662171][T14951] ? __fget_files+0x3a0/0x420 [ 316.662207][T14951] __x64_sys_sendmsg+0x19b/0x260 [ 316.662231][T14951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.662269][T14951] ? __pfx_ksys_write+0x10/0x10 [ 316.662294][T14951] ? do_syscall_64+0xbe/0xfa0 [ 316.662318][T14951] do_syscall_64+0xfa/0xfa0 [ 316.662336][T14951] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.662356][T14951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.662375][T14951] ? clear_bhb_loop+0x60/0xb0 [ 316.662400][T14951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.662419][T14951] RIP: 0033:0x7fb53138efc9 [ 316.662437][T14951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.662454][T14951] RSP: 002b:00007fb5321b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.662475][T14951] RAX: ffffffffffffffda RBX: 00007fb5315e5fa0 RCX: 00007fb53138efc9 [ 316.662490][T14951] RDX: 0000000020000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 316.662503][T14951] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 0000000000000000 [ 316.662515][T14951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.662527][T14951] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 316.662562][T14951] [ 317.017842][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 317.150620][T14975] netlink: 'syz.1.2870': attribute type 9 has an invalid length. [ 317.308523][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.325393][T14984] FAULT_INJECTION: forcing a failure. [ 317.325393][T14984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.357772][T14984] CPU: 0 UID: 0 PID: 14984 Comm: syz.4.2873 Not tainted syzkaller #0 PREEMPT(full) [ 317.357803][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.357815][T14984] Call Trace: [ 317.357824][T14984] [ 317.357833][T14984] dump_stack_lvl+0x189/0x250 [ 317.357862][T14984] ? __pfx____ratelimit+0x10/0x10 [ 317.357892][T14984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.357913][T14984] ? __pfx__printk+0x10/0x10 [ 317.357947][T14984] should_fail_ex+0x414/0x560 [ 317.357984][T14984] _copy_to_user+0x31/0xb0 [ 317.358012][T14984] simple_read_from_buffer+0xe1/0x170 [ 317.358042][T14984] proc_fail_nth_read+0x1b3/0x220 [ 317.358077][T14984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.358111][T14984] ? rw_verify_area+0x2a6/0x4d0 [ 317.358131][T14984] ? __lock_acquire+0xab9/0xd20 [ 317.358161][T14984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.358193][T14984] vfs_read+0x200/0xa30 [ 317.358212][T14984] ? fdget_pos+0x247/0x320 [ 317.358240][T14984] ? __pfx___mutex_lock+0x10/0x10 [ 317.358271][T14984] ? __pfx_vfs_read+0x10/0x10 [ 317.358294][T14984] ? __fget_files+0x2a/0x420 [ 317.358322][T14984] ? __fget_files+0x3a0/0x420 [ 317.358344][T14984] ? __fget_files+0x2a/0x420 [ 317.358378][T14984] ksys_read+0x145/0x250 [ 317.358404][T14984] ? __pfx_ksys_read+0x10/0x10 [ 317.358429][T14984] ? do_syscall_64+0xbe/0xfa0 [ 317.358454][T14984] do_syscall_64+0xfa/0xfa0 [ 317.358472][T14984] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.358492][T14984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.358512][T14984] ? clear_bhb_loop+0x60/0xb0 [ 317.358537][T14984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.358555][T14984] RIP: 0033:0x7f6b3ed8d9dc [ 317.358573][T14984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.358591][T14984] RSP: 002b:00007f6b3fd11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.358614][T14984] RAX: ffffffffffffffda RBX: 00007f6b3efe5fa0 RCX: 00007f6b3ed8d9dc [ 317.358629][T14984] RDX: 000000000000000f RSI: 00007f6b3fd110a0 RDI: 0000000000000004 [ 317.358641][T14984] RBP: 00007f6b3fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 317.358653][T14984] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 317.358666][T14984] R13: 00007f6b3efe6038 R14: 00007f6b3efe5fa0 R15: 00007fff54967b18 [ 317.358701][T14984] [ 317.822966][T14996] FAULT_INJECTION: forcing a failure. [ 317.822966][T14996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.893847][T14996] CPU: 0 UID: 0 PID: 14996 Comm: syz.1.2877 Not tainted syzkaller #0 PREEMPT(full) [ 317.893876][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.893888][T14996] Call Trace: [ 317.893897][T14996] [ 317.893906][T14996] dump_stack_lvl+0x189/0x250 [ 317.893934][T14996] ? __pfx____ratelimit+0x10/0x10 [ 317.893963][T14996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.893983][T14996] ? __pfx__printk+0x10/0x10 [ 317.894003][T14996] ? __might_fault+0xb0/0x130 [ 317.894035][T14996] should_fail_ex+0x414/0x560 [ 317.894071][T14996] _copy_from_user+0x2d/0xb0 [ 317.894097][T14996] ___sys_sendmsg+0x158/0x2a0 [ 317.894119][T14996] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.894177][T14996] ? __fget_files+0x2a/0x420 [ 317.894200][T14996] ? __fget_files+0x3a0/0x420 [ 317.894235][T14996] __x64_sys_sendmsg+0x19b/0x260 [ 317.894258][T14996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.894289][T14996] ? __pfx_ksys_write+0x10/0x10 [ 317.894326][T14996] ? do_syscall_64+0xbe/0xfa0 [ 317.894351][T14996] do_syscall_64+0xfa/0xfa0 [ 317.894369][T14996] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.894389][T14996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.894409][T14996] ? clear_bhb_loop+0x60/0xb0 [ 317.894434][T14996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.894453][T14996] RIP: 0033:0x7f9a0258efc9 [ 317.894472][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.894489][T14996] RSP: 002b:00007f9a03461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.894511][T14996] RAX: ffffffffffffffda RBX: 00007f9a027e5fa0 RCX: 00007f9a0258efc9 [ 317.894526][T14996] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000005 [ 317.894539][T14996] RBP: 00007f9a03461090 R08: 0000000000000000 R09: 0000000000000000 [ 317.894551][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.894563][T14996] R13: 00007f9a027e6038 R14: 00007f9a027e5fa0 R15: 00007fff080fe1d8 [ 317.894598][T14996] [ 317.896146][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'. [ 317.933342][T14998] Cannot find set identified by id 3 to match [ 317.954387][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2878'. [ 318.461864][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 318.471584][T15026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.517378][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2888'. [ 318.531055][T15026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.581523][T15033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 318.672176][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2889'. [ 318.688610][T15041] netlink: 'syz.3.2893': attribute type 10 has an invalid length. [ 318.700506][T15038] tipc: Enabled bearer , priority 0 [ 318.708600][T15038] syzkaller0: entered promiscuous mode [ 318.714130][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 318.714443][T15038] syzkaller0: entered allmulticast mode [ 318.747123][T15038] netlink: 'syz.2.2892': attribute type 4 has an invalid length. [ 318.874186][T15046] macvlan2: entered promiscuous mode [ 318.879700][T15046] macvlan2: entered allmulticast mode [ 318.886387][T15046] bond16: (slave macvlan2): Opening slave failed [ 318.913321][T15037] tipc: Resetting bearer [ 318.935851][T15037] tipc: Disabling bearer [ 319.216366][T15064] 8021q: VLANs not supported on ip6gre0 [ 319.257381][T15064] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2901'. [ 319.298646][T15064] openvswitch: netlink: Missing key (keys=40, expected=100) [ 319.344873][T15076] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 319.500980][T15083] veth0: entered promiscuous mode [ 319.513685][T15085] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 319.556013][T15085] bond21: entered promiscuous mode [ 319.561562][T15085] 8021q: adding VLAN 0 to HW filter on device bond21 [ 319.575614][T15082] veth0: left promiscuous mode [ 319.597683][T15090] bond21: (slave bridge10): making interface the new active one [ 319.605653][T15090] bridge10: entered promiscuous mode [ 319.611983][T15090] bond21: (slave bridge10): Enslaving as an active interface with an up link [ 319.636587][T15085] netlink: 'syz.3.2909': attribute type 4 has an invalid length. [ 319.763753][T15095] netlink: 'syz.0.2912': attribute type 10 has an invalid length. [ 319.899820][T15099] macvlan2: entered promiscuous mode [ 319.905676][T15099] macvlan2: entered allmulticast mode [ 319.912489][T15099] bond17: (slave macvlan2): Opening slave failed [ 319.968007][T15110] FAULT_INJECTION: forcing a failure. [ 319.968007][T15110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.982069][T15110] CPU: 0 UID: 0 PID: 15110 Comm: syz.0.2917 Not tainted syzkaller #0 PREEMPT(full) [ 319.982098][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.982110][T15110] Call Trace: [ 319.982118][T15110] [ 319.982127][T15110] dump_stack_lvl+0x189/0x250 [ 319.982154][T15110] ? __pfx____ratelimit+0x10/0x10 [ 319.982184][T15110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.982204][T15110] ? __pfx__printk+0x10/0x10 [ 319.982235][T15110] ? __might_fault+0xb0/0x130 [ 319.982270][T15110] should_fail_ex+0x414/0x560 [ 319.982307][T15110] _copy_from_user+0x2d/0xb0 [ 319.982334][T15110] ___sys_sendmsg+0x158/0x2a0 [ 319.982359][T15110] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.982419][T15110] ? __fget_files+0x2a/0x420 [ 319.982443][T15110] ? __fget_files+0x3a0/0x420 [ 319.982480][T15110] __x64_sys_sendmsg+0x19b/0x260 [ 319.982510][T15110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.982540][T15110] ? __pfx_ksys_write+0x10/0x10 [ 319.982567][T15110] ? do_syscall_64+0xbe/0xfa0 [ 319.982591][T15110] do_syscall_64+0xfa/0xfa0 [ 319.982609][T15110] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.982629][T15110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.982649][T15110] ? clear_bhb_loop+0x60/0xb0 [ 319.982674][T15110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.982692][T15110] RIP: 0033:0x7fb53138efc9 [ 319.982711][T15110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.982728][T15110] RSP: 002b:00007fb5321b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.982752][T15110] RAX: ffffffffffffffda RBX: 00007fb5315e5fa0 RCX: 00007fb53138efc9 [ 319.982767][T15110] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 319.982781][T15110] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 0000000000000000 [ 319.982793][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.982806][T15110] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 319.982843][T15110] [ 320.398703][T15121] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 320.483603][T15124] Cannot find set identified by id 3 to match [ 321.045551][T15164] 8021q: VLANs not supported on ip6gre0 [ 321.069055][T15164] openvswitch: netlink: Missing key (keys=40, expected=100) [ 321.186103][T15170] FAULT_INJECTION: forcing a failure. [ 321.186103][T15170] name failslab, interval 1, probability 0, space 0, times 0 [ 321.199310][T15170] CPU: 1 UID: 0 PID: 15170 Comm: syz.3.2940 Not tainted syzkaller #0 PREEMPT(full) [ 321.199338][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.199349][T15170] Call Trace: [ 321.199357][T15170] [ 321.199366][T15170] dump_stack_lvl+0x189/0x250 [ 321.199394][T15170] ? __pfx____ratelimit+0x10/0x10 [ 321.199425][T15170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.199446][T15170] ? __pfx__printk+0x10/0x10 [ 321.199472][T15170] ? __pfx___might_resched+0x10/0x10 [ 321.199499][T15170] ? fs_reclaim_acquire+0x7d/0x100 [ 321.199529][T15170] should_fail_ex+0x414/0x560 [ 321.199565][T15170] should_failslab+0xa8/0x100 [ 321.199592][T15170] kmem_cache_alloc_node_noprof+0x77/0x710 [ 321.199613][T15170] ? __alloc_skb+0x112/0x2d0 [ 321.199648][T15170] __alloc_skb+0x112/0x2d0 [ 321.199680][T15170] netlink_sendmsg+0x5c6/0xb30 [ 321.199719][T15170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.199752][T15170] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.199777][T15170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.199802][T15170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.199831][T15170] __sock_sendmsg+0x21c/0x270 [ 321.199860][T15170] ____sys_sendmsg+0x505/0x830 [ 321.199898][T15170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.199938][T15170] ? import_iovec+0x74/0xa0 [ 321.199978][T15170] ___sys_sendmsg+0x21f/0x2a0 [ 321.199999][T15170] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.200059][T15170] ? __fget_files+0x2a/0x420 [ 321.200083][T15170] ? __fget_files+0x3a0/0x420 [ 321.200119][T15170] __x64_sys_sendmsg+0x19b/0x260 [ 321.200141][T15170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.200173][T15170] ? __pfx_ksys_write+0x10/0x10 [ 321.200199][T15170] ? do_syscall_64+0xbe/0xfa0 [ 321.200224][T15170] do_syscall_64+0xfa/0xfa0 [ 321.200239][T15170] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.200257][T15170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.200276][T15170] ? clear_bhb_loop+0x60/0xb0 [ 321.200300][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.200318][T15170] RIP: 0033:0x7f1b4638efc9 [ 321.200336][T15170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.200354][T15170] RSP: 002b:00007f1b472ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.200377][T15170] RAX: ffffffffffffffda RBX: 00007f1b465e5fa0 RCX: 00007f1b4638efc9 [ 321.200392][T15170] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 321.200404][T15170] RBP: 00007f1b472ab090 R08: 0000000000000000 R09: 0000000000000000 [ 321.200416][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.200428][T15170] R13: 00007f1b465e6038 R14: 00007f1b465e5fa0 R15: 00007ffcf30a0428 [ 321.200464][T15170] [ 321.535204][T15171] __nla_validate_parse: 6 callbacks suppressed [ 321.535226][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2941'. [ 321.745684][T15181] syzkaller1: entered promiscuous mode [ 321.782006][T15181] syzkaller1: entered allmulticast mode [ 321.926577][T15198] netlink: 'syz.3.2950': attribute type 11 has an invalid length. [ 322.032959][T15203] Cannot find set identified by id 3 to match [ 322.042246][T15204] tipc: Enabling of bearer rejected, already enabled [ 322.065005][T15204] syzkaller0: mtu greater than device maximum [ 322.242486][T15213] FAULT_INJECTION: forcing a failure. [ 322.242486][T15213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.258820][T15216] netlink: 'syz.4.2958': attribute type 9 has an invalid length. [ 322.282441][T15213] CPU: 0 UID: 0 PID: 15213 Comm: syz.0.2956 Not tainted syzkaller #0 PREEMPT(full) [ 322.282473][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.282485][T15213] Call Trace: [ 322.282493][T15213] [ 322.282503][T15213] dump_stack_lvl+0x189/0x250 [ 322.282529][T15213] ? __pfx____ratelimit+0x10/0x10 [ 322.282561][T15213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.282582][T15213] ? __pfx__printk+0x10/0x10 [ 322.282603][T15213] ? __might_fault+0xb0/0x130 [ 322.282638][T15213] should_fail_ex+0x414/0x560 [ 322.282676][T15213] _copy_from_iter+0x1de/0x1790 [ 322.282707][T15213] ? rcu_is_watching+0x15/0xb0 [ 322.282741][T15213] ? kmalloc_reserve+0xbd/0x290 [ 322.282768][T15213] ? __pfx__copy_from_iter+0x10/0x10 [ 322.282795][T15213] ? __build_skb_around+0x262/0x3f0 [ 322.282827][T15213] ? netlink_sendmsg+0x642/0xb30 [ 322.282852][T15213] ? skb_put+0x11b/0x210 [ 322.282885][T15213] netlink_sendmsg+0x6b2/0xb30 [ 322.282924][T15213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.282957][T15213] ? aa_sock_msg_perm+0xf1/0x1d0 [ 322.282981][T15213] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.283012][T15213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.283040][T15213] __sock_sendmsg+0x21c/0x270 [ 322.283068][T15213] ____sys_sendmsg+0x505/0x830 [ 322.283105][T15213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.283146][T15213] ? import_iovec+0x74/0xa0 [ 322.283176][T15213] ___sys_sendmsg+0x21f/0x2a0 [ 322.283199][T15213] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.283269][T15213] ? __fget_files+0x2a/0x420 [ 322.283293][T15213] ? __fget_files+0x3a0/0x420 [ 322.283328][T15213] __x64_sys_sendmsg+0x19b/0x260 [ 322.283351][T15213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.283381][T15213] ? __pfx_ksys_write+0x10/0x10 [ 322.283408][T15213] ? do_syscall_64+0xbe/0xfa0 [ 322.283433][T15213] do_syscall_64+0xfa/0xfa0 [ 322.283451][T15213] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.283470][T15213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.283490][T15213] ? clear_bhb_loop+0x60/0xb0 [ 322.283514][T15213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.283533][T15213] RIP: 0033:0x7fb53138efc9 [ 322.283551][T15213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.283569][T15213] RSP: 002b:00007fb5321b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.283592][T15213] RAX: ffffffffffffffda RBX: 00007fb5315e5fa0 RCX: 00007fb53138efc9 [ 322.283607][T15213] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000005 [ 322.283621][T15213] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 0000000000000000 [ 322.283634][T15213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.283646][T15213] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 322.283683][T15213] [ 322.686176][T15221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2961'. [ 322.710800][ T2139] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 322.733090][ T2139] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 322.794794][ T2139] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 322.919722][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 322.954321][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2969'. [ 322.964137][T15235] bridge0: port 3(ipvlan2) entered blocking state [ 322.971025][T15235] bridge0: port 3(ipvlan2) entered disabled state [ 322.984744][T15235] ipvlan2: entered allmulticast mode [ 322.990610][T15235] bridge0: entered allmulticast mode [ 323.001539][T15235] ipvlan2: left allmulticast mode [ 323.008986][T15235] bridge0: left allmulticast mode [ 323.025153][ T2139] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 323.180314][T15251] FAULT_INJECTION: forcing a failure. [ 323.180314][T15251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.225366][T15251] CPU: 0 UID: 0 PID: 15251 Comm: syz.4.2972 Not tainted syzkaller #0 PREEMPT(full) [ 323.225396][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.225408][T15251] Call Trace: [ 323.225415][T15251] [ 323.225424][T15251] dump_stack_lvl+0x189/0x250 [ 323.225449][T15251] ? __pfx____ratelimit+0x10/0x10 [ 323.225479][T15251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.225499][T15251] ? __pfx__printk+0x10/0x10 [ 323.225534][T15251] should_fail_ex+0x414/0x560 [ 323.225570][T15251] _copy_to_user+0x31/0xb0 [ 323.225599][T15251] simple_read_from_buffer+0xe1/0x170 [ 323.225630][T15251] proc_fail_nth_read+0x1b3/0x220 [ 323.225663][T15251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.225694][T15251] ? rw_verify_area+0x2a6/0x4d0 [ 323.225713][T15251] ? __lock_acquire+0xab9/0xd20 [ 323.225735][T15251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.225766][T15251] vfs_read+0x200/0xa30 [ 323.225786][T15251] ? fdget_pos+0x247/0x320 [ 323.225816][T15251] ? __pfx___mutex_lock+0x10/0x10 [ 323.225838][T15251] ? __pfx_vfs_read+0x10/0x10 [ 323.225861][T15251] ? __fget_files+0x2a/0x420 [ 323.225889][T15251] ? __fget_files+0x3a0/0x420 [ 323.225911][T15251] ? __fget_files+0x2a/0x420 [ 323.225945][T15251] ksys_read+0x145/0x250 [ 323.225968][T15251] ? __pfx_ksys_read+0x10/0x10 [ 323.225994][T15251] ? do_syscall_64+0xbe/0xfa0 [ 323.226018][T15251] do_syscall_64+0xfa/0xfa0 [ 323.226036][T15251] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.226055][T15251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.226075][T15251] ? clear_bhb_loop+0x60/0xb0 [ 323.226099][T15251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.226118][T15251] RIP: 0033:0x7f6b3ed8d9dc [ 323.226137][T15251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.226154][T15251] RSP: 002b:00007f6b3fd11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.226176][T15251] RAX: ffffffffffffffda RBX: 00007f6b3efe5fa0 RCX: 00007f6b3ed8d9dc [ 323.226191][T15251] RDX: 000000000000000f RSI: 00007f6b3fd110a0 RDI: 0000000000000005 [ 323.226212][T15251] RBP: 00007f6b3fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 323.226225][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.226236][T15251] R13: 00007f6b3efe6038 R14: 00007f6b3efe5fa0 R15: 00007fff54967b18 [ 323.226271][T15251] [ 323.494415][T15257] vlan0: left promiscuous mode [ 323.517222][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2974'. [ 323.574479][T15261] netlink: 'syz.0.2975': attribute type 10 has an invalid length. [ 323.608837][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2976'. [ 323.621942][T15268] tipc: Enabling of bearer rejected, already enabled [ 324.578924][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2991'. [ 324.712667][T15311] macvlan2: entered promiscuous mode [ 324.726326][T15311] macvlan2: entered allmulticast mode [ 324.743705][T15311] bond22: (slave macvlan2): Opening slave failed [ 324.921479][T15329] netlink: 'syz.2.2998': attribute type 12 has an invalid length. [ 325.034833][T15329] bond8: option primary_reselect: invalid value (255) [ 325.045564][T15329] bond8 (unregistering): Released all slaves [ 325.092172][T15337] tipc: Enabling of bearer rejected, already enabled [ 325.111268][T15337] syzkaller0: mtu less than device minimum [ 325.318636][T15347] FAULT_INJECTION: forcing a failure. [ 325.318636][T15347] name failslab, interval 1, probability 0, space 0, times 0 [ 325.345159][T15347] CPU: 0 UID: 0 PID: 15347 Comm: syz.2.3005 Not tainted syzkaller #0 PREEMPT(full) [ 325.345198][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.345210][T15347] Call Trace: [ 325.345218][T15347] [ 325.345227][T15347] dump_stack_lvl+0x189/0x250 [ 325.345254][T15347] ? __pfx____ratelimit+0x10/0x10 [ 325.345284][T15347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.345305][T15347] ? __pfx__printk+0x10/0x10 [ 325.345334][T15347] ? __pfx___might_resched+0x10/0x10 [ 325.345359][T15347] ? fs_reclaim_acquire+0x7d/0x100 [ 325.345389][T15347] should_fail_ex+0x414/0x560 [ 325.345425][T15347] should_failslab+0xa8/0x100 [ 325.345451][T15347] __kmalloc_noprof+0xcb/0x7f0 [ 325.345471][T15347] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 325.345493][T15347] ? rcu_is_watching+0x15/0xb0 [ 325.345528][T15347] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 325.345559][T15347] genl_family_rcv_msg_doit+0xb8/0x300 [ 325.345589][T15347] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 325.345617][T15347] ? __pfx_genl_get_cmd+0x10/0x10 [ 325.345634][T15347] ? __pfx_ieee802154_list_phy+0x10/0x10 [ 325.345662][T15347] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 325.345693][T15347] ? stack_trace_save+0x9c/0xe0 [ 325.345719][T15347] genl_rcv_msg+0x60e/0x790 [ 325.345748][T15347] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.345768][T15347] ? __pfx_ieee802154_list_phy+0x10/0x10 [ 325.345813][T15347] netlink_rcv_skb+0x208/0x470 [ 325.345838][T15347] ? __lock_acquire+0xab9/0xd20 [ 325.345863][T15347] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.345887][T15347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.345936][T15347] ? down_read+0x1ad/0x2e0 [ 325.345961][T15347] genl_rcv+0x28/0x40 [ 325.345980][T15347] netlink_unicast+0x82f/0x9e0 [ 325.346017][T15347] ? __pfx_netlink_unicast+0x10/0x10 [ 325.346045][T15347] ? netlink_sendmsg+0x642/0xb30 [ 325.346070][T15347] ? skb_put+0x11b/0x210 [ 325.346103][T15347] netlink_sendmsg+0x805/0xb30 [ 325.346148][T15347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.346180][T15347] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.346213][T15347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.346238][T15347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.346267][T15347] __sock_sendmsg+0x21c/0x270 [ 325.346295][T15347] ____sys_sendmsg+0x505/0x830 [ 325.346333][T15347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.346375][T15347] ? import_iovec+0x74/0xa0 [ 325.346407][T15347] ___sys_sendmsg+0x21f/0x2a0 [ 325.346428][T15347] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.346492][T15347] ? __fget_files+0x2a/0x420 [ 325.346517][T15347] ? __fget_files+0x3a0/0x420 [ 325.346553][T15347] __x64_sys_sendmsg+0x19b/0x260 [ 325.346576][T15347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.346607][T15347] ? __pfx_ksys_write+0x10/0x10 [ 325.346634][T15347] ? do_syscall_64+0xbe/0xfa0 [ 325.346659][T15347] do_syscall_64+0xfa/0xfa0 [ 325.346677][T15347] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.346696][T15347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.346716][T15347] ? clear_bhb_loop+0x60/0xb0 [ 325.346742][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.346761][T15347] RIP: 0033:0x7f72f438efc9 [ 325.346780][T15347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.346796][T15347] RSP: 002b:00007f72f513e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.346818][T15347] RAX: ffffffffffffffda RBX: 00007f72f45e5fa0 RCX: 00007f72f438efc9 [ 325.346833][T15347] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 325.346846][T15347] RBP: 00007f72f513e090 R08: 0000000000000000 R09: 0000000000000000 [ 325.346858][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.346870][T15347] R13: 00007f72f45e6038 R14: 00007f72f45e5fa0 R15: 00007ffdda983828 [ 325.346908][T15347] [ 325.951651][T15356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3008'. [ 325.962591][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3008'. [ 326.000342][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3011'. [ 326.161270][T15366] macvlan4: entered promiscuous mode [ 326.221960][T15366] macvlan4: entered allmulticast mode [ 326.244440][T15366] bond23: (slave macvlan4): Opening slave failed [ 326.293430][T15374] IPVS: Error connecting to the multicast addr [ 326.707312][T15395] Cannot find set identified by id 3 to match [ 327.026029][T15398] veth1_to_hsr: entered allmulticast mode [ 327.111078][T15417] __nla_validate_parse: 1 callbacks suppressed [ 327.111098][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3029'. [ 327.121558][T15419] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 327.206749][T15422] netlink: 'syz.2.3030': attribute type 9 has an invalid length. [ 327.384012][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 327.482267][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'. [ 327.536303][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'. [ 327.567945][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'. [ 327.620158][T15445] Cannot find set identified by id 3 to match [ 328.034054][T15466] netlink: 'syz.4.3047': attribute type 9 has an invalid length. [ 328.129273][T15474] FAULT_INJECTION: forcing a failure. [ 328.129273][T15474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.146437][T15474] CPU: 0 UID: 0 PID: 15474 Comm: syz.0.3052 Not tainted syzkaller #0 PREEMPT(full) [ 328.146466][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.146479][T15474] Call Trace: [ 328.146488][T15474] [ 328.146496][T15474] dump_stack_lvl+0x189/0x250 [ 328.146523][T15474] ? __pfx____ratelimit+0x10/0x10 [ 328.146556][T15474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.146576][T15474] ? __pfx__printk+0x10/0x10 [ 328.146596][T15474] ? __might_fault+0xb0/0x130 [ 328.146634][T15474] should_fail_ex+0x414/0x560 [ 328.146670][T15474] _copy_from_user+0x2d/0xb0 [ 328.146698][T15474] kstrtouint_from_user+0xc4/0x170 [ 328.146722][T15474] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 328.146762][T15474] proc_fail_nth_write+0x88/0x200 [ 328.146793][T15474] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.146829][T15474] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.146860][T15474] vfs_write+0x27e/0xb30 [ 328.146893][T15474] ? __pfx_vfs_write+0x10/0x10 [ 328.146917][T15474] ? __fget_files+0x2a/0x420 [ 328.146944][T15474] ? __fget_files+0x3a0/0x420 [ 328.146967][T15474] ? __fget_files+0x2a/0x420 [ 328.147002][T15474] ksys_write+0x145/0x250 [ 328.147028][T15474] ? __pfx_ksys_write+0x10/0x10 [ 328.147053][T15474] ? do_syscall_64+0xbe/0xfa0 [ 328.147079][T15474] do_syscall_64+0xfa/0xfa0 [ 328.147097][T15474] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.147117][T15474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.147135][T15474] ? clear_bhb_loop+0x60/0xb0 [ 328.147158][T15474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.147176][T15474] RIP: 0033:0x7fb53138da7f [ 328.147206][T15474] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 328.147222][T15474] RSP: 002b:00007fb5321b5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 328.147245][T15474] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb53138da7f [ 328.147259][T15474] RDX: 0000000000000001 RSI: 00007fb5321b50a0 RDI: 0000000000000006 [ 328.147271][T15474] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 0000000000000000 [ 328.147283][T15474] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 328.147294][T15474] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 328.147330][T15474] [ 328.968032][T15505] veth1: default FDB implementation only supports local addresses [ 329.000044][T15509] netlink: 'syz.4.3064': attribute type 12 has an invalid length. [ 329.029184][T15508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3063'. [ 329.044057][T15508] netlink: 'syz.2.3063': attribute type 7 has an invalid length. [ 329.052005][T15508] netlink: 'syz.2.3063': attribute type 8 has an invalid length. [ 329.061055][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 329.074359][T15509] bond18: option primary_reselect: invalid value (255) [ 329.089710][T15509] bond18 (unregistering): Released all slaves [ 329.129802][T15508] ip6gretap0: entered promiscuous mode [ 329.139308][T15508] syz_tun: entered promiscuous mode [ 329.170545][T15508] erspan0: entered promiscuous mode [ 329.187994][T15508] debugfs: 'hsr1' already exists in 'hsr' [ 329.195294][T15508] Cannot create hsr debugfs directory [ 329.201021][T15508] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 329.212017][T15508] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 329.223511][T15508] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 329.243814][T15521] netlink: 'syz.4.3068': attribute type 9 has an invalid length. [ 329.504458][T15530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3075'. [ 329.521871][T15530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3075'. [ 329.522396][T15531] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3072'. [ 331.194799][T15586] netlink: 'syz.2.3094': attribute type 9 has an invalid length. [ 331.587259][T15606] bridge0: port 2(ipvlan2) entered blocking state [ 331.613667][T15606] bridge0: port 2(ipvlan2) entered disabled state [ 331.621314][T15606] ipvlan2: entered allmulticast mode [ 331.639760][T15606] bridge0: entered allmulticast mode [ 331.661717][T15606] ipvlan2: left allmulticast mode [ 331.670044][T15606] bridge0: left allmulticast mode [ 331.679318][T15611] netlink: 'syz.0.3104': attribute type 1 has an invalid length. [ 331.953915][T15627] tipc: Enabling of bearer rejected, already enabled [ 331.966023][T15627] syzkaller0: mtu less than device minimum [ 332.017820][T15630] netlink: 'syz.2.3110': attribute type 8 has an invalid length. [ 332.032482][T15631] netlink: 'syz.3.3111': attribute type 32 has an invalid length. [ 332.185773][T15638] 8021q: VLANs not supported on ip6gre0 [ 332.218396][T15638] __nla_validate_parse: 9 callbacks suppressed [ 332.218420][T15638] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.3113'. [ 332.227405][T15643] FAULT_INJECTION: forcing a failure. [ 332.227405][T15643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.247818][T15638] openvswitch: netlink: Missing key (keys=40, expected=100) [ 332.273530][T15643] CPU: 0 UID: 0 PID: 15643 Comm: syz.0.3117 Not tainted syzkaller #0 PREEMPT(full) [ 332.273560][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.273572][T15643] Call Trace: [ 332.273581][T15643] [ 332.273592][T15643] dump_stack_lvl+0x189/0x250 [ 332.273622][T15643] ? __pfx____ratelimit+0x10/0x10 [ 332.273654][T15643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.273677][T15643] ? __pfx__printk+0x10/0x10 [ 332.273699][T15643] ? __might_fault+0xb0/0x130 [ 332.273737][T15643] should_fail_ex+0x414/0x560 [ 332.273776][T15643] _copy_from_user+0x2d/0xb0 [ 332.273805][T15643] kstrtouint_from_user+0xc4/0x170 [ 332.273833][T15643] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 332.273879][T15643] proc_fail_nth_write+0x88/0x200 [ 332.273911][T15643] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.273950][T15643] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.273984][T15643] vfs_write+0x27e/0xb30 [ 332.274019][T15643] ? __pfx_vfs_write+0x10/0x10 [ 332.274044][T15643] ? __fget_files+0x2a/0x420 [ 332.274077][T15643] ? __fget_files+0x3a0/0x420 [ 332.274100][T15643] ? __fget_files+0x2a/0x420 [ 332.274137][T15643] ksys_write+0x145/0x250 [ 332.274163][T15643] ? __pfx_ksys_write+0x10/0x10 [ 332.274192][T15643] ? do_syscall_64+0xbe/0xfa0 [ 332.274228][T15643] do_syscall_64+0xfa/0xfa0 [ 332.274247][T15643] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.274268][T15643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.274290][T15643] ? clear_bhb_loop+0x60/0xb0 [ 332.274316][T15643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.274337][T15643] RIP: 0033:0x7fb53138da7f [ 332.274356][T15643] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 332.274375][T15643] RSP: 002b:00007fb5321b5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 332.274398][T15643] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb53138da7f [ 332.274413][T15643] RDX: 0000000000000001 RSI: 00007fb5321b50a0 RDI: 0000000000000005 [ 332.274426][T15643] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 0000000000000000 [ 332.274440][T15643] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 332.274452][T15643] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 332.274492][T15643] [ 332.691602][T15659] netlink: 'syz.2.3121': attribute type 10 has an invalid length. [ 332.998849][T15670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.202629][T15680] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3127'. [ 333.776248][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'. [ 334.141344][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3141'. [ 334.151617][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'. [ 334.327739][ T5842] Bluetooth: hci4: link tx timeout [ 334.334690][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.345817][ T5840] Bluetooth: hci4: link tx timeout [ 334.351064][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.481022][ T5840] Bluetooth: hci4: link tx timeout [ 334.486353][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.510414][ T5840] Bluetooth: hci4: link tx timeout [ 334.516091][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.593868][ T5840] Bluetooth: hci4: link tx timeout [ 334.599067][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.639751][T15744] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 334.679081][T15744] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 334.728523][T15752] Cannot find set identified by id 3 to match [ 334.909723][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'. [ 334.953298][T15765] 0ªî{X¹¦: left allmulticast mode [ 335.057855][T15765] tipc: Resetting bearer [ 335.163934][T15765] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 335.185569][T15765] mac80211_hwsim hwsim16 syzkaller0: left allmulticast mode [ 335.385062][ T5840] Bluetooth: hci4: link tx timeout [ 335.390321][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 335.461164][T15798] Cannot find set identified by id 3 to match [ 335.631614][T15807] IPVS: set_ctl: invalid protocol: 50 172.20.20.38:20002 [ 335.648928][T15806] IPVS: set_ctl: invalid protocol: 28 172.30.0.3:20001 [ 335.766420][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3168'. [ 335.881738][T15820] macvlan4: entered promiscuous mode [ 335.896023][T15820] macvlan4: entered allmulticast mode [ 335.907985][T15820] bond24: (slave macvlan4): Opening slave failed [ 336.121607][ T5840] Bluetooth: hci4: link tx timeout [ 336.128670][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 336.359374][T15842] netlink: 'syz.4.3175': attribute type 3 has an invalid length. [ 336.393809][T15842] netlink: 'syz.4.3175': attribute type 7 has an invalid length. [ 336.412054][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 336.425794][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 336.432058][ T5840] Bluetooth: hci4: link tx timeout [ 336.600732][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3180'. [ 336.916473][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3185'. [ 337.165742][T15866] netlink: 'syz.4.3188': attribute type 21 has an invalid length. [ 337.329549][T15875] netlink: 'syz.0.3191': attribute type 3 has an invalid length. [ 337.340110][T15875] __nla_validate_parse: 1 callbacks suppressed [ 337.340132][T15875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3191'. [ 337.395778][T15875] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 337.416784][T15875] netlink: 'syz.0.3191': attribute type 1 has an invalid length. [ 337.448873][T15875] netlink: 'syz.0.3191': attribute type 4 has an invalid length. [ 337.475815][T15875] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3191'. [ 337.479456][T15880] veth1_to_bridge: entered promiscuous mode [ 337.493804][T15880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3191'. [ 337.960115][T15892] netlink: 'syz.1.3195': attribute type 16 has an invalid length. [ 337.973602][T15892] netlink: 'syz.1.3195': attribute type 17 has an invalid length. [ 338.042735][T15892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.052092][T15892] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.076144][T15892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.123273][T15905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3197'. [ 338.259221][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3201'. [ 338.661427][T15923] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 338.682503][T15923] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 338.700466][T15923] tipc: Resetting bearer [ 338.855906][T15933] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3209'. [ 339.325597][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3215'. [ 339.337749][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3216'. [ 339.458032][T15949] macvlan2: entered promiscuous mode [ 339.474091][T15949] macvlan2: entered allmulticast mode [ 339.490408][T15949] bond23: (slave macvlan2): Opening slave failed [ 339.712700][T15974] 8021q: VLANs not supported on ip6gre0 [ 339.745731][T15974] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.3222'. [ 339.766979][T15974] openvswitch: netlink: Missing key (keys=40, expected=100) [ 340.238976][T16008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3237'. [ 340.333406][T16009] macvlan2: entered promiscuous mode [ 340.338774][T16009] macvlan2: entered allmulticast mode [ 340.356733][T16009] bond18: (slave macvlan2): Opening slave failed [ 340.408220][T16012] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 340.422478][T16012] bond8: entered promiscuous mode [ 340.432926][T16012] bond8: entered allmulticast mode [ 340.439307][T16012] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.447183][T16014] netlink: 'syz.1.3239': attribute type 1 has an invalid length. [ 340.628637][T16028] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 341.223184][T16061] FAULT_INJECTION: forcing a failure. [ 341.223184][T16061] name failslab, interval 1, probability 0, space 0, times 0 [ 341.243961][T16061] CPU: 1 UID: 0 PID: 16061 Comm: syz.4.3260 Not tainted syzkaller #0 PREEMPT(full) [ 341.243991][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.244004][T16061] Call Trace: [ 341.244013][T16061] [ 341.244021][T16061] dump_stack_lvl+0x189/0x250 [ 341.244049][T16061] ? __pfx____ratelimit+0x10/0x10 [ 341.244081][T16061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.244102][T16061] ? __pfx__printk+0x10/0x10 [ 341.244150][T16061] should_fail_ex+0x414/0x560 [ 341.244188][T16061] should_failslab+0xa8/0x100 [ 341.244225][T16061] kmem_cache_alloc_noprof+0x74/0x6e0 [ 341.244248][T16061] ? skb_clone+0x212/0x3a0 [ 341.244276][T16061] skb_clone+0x212/0x3a0 [ 341.244294][T16061] ? pfkey_broadcast_one+0x7d/0x360 [ 341.244326][T16061] pfkey_broadcast_one+0x9b/0x360 [ 341.244351][T16061] ? pfkey_broadcast+0x39c/0x3e0 [ 341.244381][T16061] pfkey_broadcast+0x3a9/0x3e0 [ 341.244409][T16061] ? pfkey_broadcast+0x48/0x3e0 [ 341.244441][T16061] pfkey_flush+0x14d/0x340 [ 341.244465][T16061] ? __pfx_pfkey_flush+0x10/0x10 [ 341.244502][T16061] pfkey_sendmsg+0xbfe/0x1090 [ 341.244540][T16061] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 341.244591][T16061] ? aa_sock_msg_perm+0xf1/0x1d0 [ 341.244617][T16061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.244642][T16061] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 341.244663][T16061] __sock_sendmsg+0x21c/0x270 [ 341.244693][T16061] ____sys_sendmsg+0x505/0x830 [ 341.244731][T16061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.244773][T16061] ? import_iovec+0x74/0xa0 [ 341.244804][T16061] ___sys_sendmsg+0x21f/0x2a0 [ 341.244828][T16061] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.244893][T16061] ? __fget_files+0x2a/0x420 [ 341.244918][T16061] ? __fget_files+0x3a0/0x420 [ 341.244955][T16061] __x64_sys_sendmsg+0x19b/0x260 [ 341.244976][T16061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.245008][T16061] ? __pfx_ksys_write+0x10/0x10 [ 341.245036][T16061] ? do_syscall_64+0xbe/0xfa0 [ 341.245061][T16061] do_syscall_64+0xfa/0xfa0 [ 341.245080][T16061] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.245100][T16061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.245120][T16061] ? clear_bhb_loop+0x60/0xb0 [ 341.245146][T16061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.245166][T16061] RIP: 0033:0x7f6b3ed8efc9 [ 341.245186][T16061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.245204][T16061] RSP: 002b:00007f6b3fd11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.245237][T16061] RAX: ffffffffffffffda RBX: 00007f6b3efe5fa0 RCX: 00007f6b3ed8efc9 [ 341.245253][T16061] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 341.245267][T16061] RBP: 00007f6b3fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 341.245279][T16061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.245291][T16061] R13: 00007f6b3efe6038 R14: 00007f6b3efe5fa0 R15: 00007fff54967b18 [ 341.245329][T16061] [ 341.695335][T16070] netlink: 'syz.1.3263': attribute type 1 has an invalid length. [ 342.021852][T16088] veth3: left promiscuous mode [ 342.039034][T16088] veth5: left promiscuous mode [ 342.055818][T16088] macvtap0: left promiscuous mode [ 342.226135][T16106] FAULT_INJECTION: forcing a failure. [ 342.226135][T16106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.241196][T16106] CPU: 0 UID: 0 PID: 16106 Comm: syz.1.3276 Not tainted syzkaller #0 PREEMPT(full) [ 342.241225][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.241237][T16106] Call Trace: [ 342.241247][T16106] [ 342.241256][T16106] dump_stack_lvl+0x189/0x250 [ 342.241285][T16106] ? __pfx____ratelimit+0x10/0x10 [ 342.241316][T16106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.241338][T16106] ? __pfx__printk+0x10/0x10 [ 342.241375][T16106] should_fail_ex+0x414/0x560 [ 342.241414][T16106] _copy_to_user+0x31/0xb0 [ 342.241444][T16106] simple_read_from_buffer+0xe1/0x170 [ 342.241476][T16106] proc_fail_nth_read+0x1b3/0x220 [ 342.241511][T16106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.241547][T16106] ? rw_verify_area+0x2a6/0x4d0 [ 342.241578][T16106] ? __lock_acquire+0xab9/0xd20 [ 342.241601][T16106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.241634][T16106] vfs_read+0x200/0xa30 [ 342.241654][T16106] ? fdget_pos+0x247/0x320 [ 342.241684][T16106] ? __pfx___mutex_lock+0x10/0x10 [ 342.241707][T16106] ? __pfx_vfs_read+0x10/0x10 [ 342.241731][T16106] ? __fget_files+0x2a/0x420 [ 342.241761][T16106] ? __fget_files+0x3a0/0x420 [ 342.241784][T16106] ? __fget_files+0x2a/0x420 [ 342.241818][T16106] ksys_read+0x145/0x250 [ 342.241842][T16106] ? __pfx_ksys_read+0x10/0x10 [ 342.241870][T16106] ? do_syscall_64+0xbe/0xfa0 [ 342.241895][T16106] do_syscall_64+0xfa/0xfa0 [ 342.241912][T16106] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.241933][T16106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.241954][T16106] ? clear_bhb_loop+0x60/0xb0 [ 342.241980][T16106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.242000][T16106] RIP: 0033:0x7f9a0258d9dc [ 342.242020][T16106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 342.242039][T16106] RSP: 002b:00007f9a03461030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.242064][T16106] RAX: ffffffffffffffda RBX: 00007f9a027e5fa0 RCX: 00007f9a0258d9dc [ 342.242080][T16106] RDX: 000000000000000f RSI: 00007f9a034610a0 RDI: 0000000000000004 [ 342.242093][T16106] RBP: 00007f9a03461090 R08: 0000000000000000 R09: 0000000000000000 [ 342.242106][T16106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.242119][T16106] R13: 00007f9a027e6038 R14: 00007f9a027e5fa0 R15: 00007fff080fe1d8 [ 342.242166][T16106] [ 342.624037][T16117] __nla_validate_parse: 9 callbacks suppressed [ 342.624061][T16117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 342.753894][T16123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3282'. [ 342.763846][T16123] openvswitch: netlink: Flow key attr not present in new flow. [ 343.914066][T16178] netlink: 'syz.1.3305': attribute type 9 has an invalid length. [ 343.928274][T16181] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 343.938750][T16181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3306'. [ 343.995325][T16181] bridge5: entered promiscuous mode [ 344.000780][T16181] bridge5: entered allmulticast mode [ 344.255716][T16193] netlink: 'syz.0.3311': attribute type 32 has an invalid length. [ 344.293401][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 344.314962][T16199] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3313'. [ 344.354223][T16193] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 344.510045][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3316'. [ 344.658679][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 344.673412][T16221] netlink: 'syz.0.3319': attribute type 9 has an invalid length. [ 344.790683][T16226] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 344.839405][T16220] netlink: 'syz.1.3320': attribute type 7 has an invalid length. [ 344.862023][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 344.998989][T16241] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3328'. [ 345.213452][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'. [ 345.290821][T16254] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 345.533944][T16264] 8021q: VLANs not supported on ip6gre0 [ 345.547117][T16264] openvswitch: netlink: Missing key (keys=40, expected=100) [ 345.783991][T16273] macvlan3: entered promiscuous mode [ 345.789541][T16273] macvlan3: entered allmulticast mode [ 345.798201][T16273] bond9: (slave macvlan3): Opening slave failed [ 346.438252][T16321] openvswitch: netlink: Flow key attr not present in new flow. [ 346.516804][T16320] bridge0: port 3(ipvlan3) entered blocking state [ 346.557547][T16320] bridge0: port 3(ipvlan3) entered disabled state [ 346.567773][T16327] sctp: [Deprecated]: syz.1.3358 (pid 16327) Use of int in max_burst socket option. [ 346.567773][T16327] Use struct sctp_assoc_value instead [ 346.586296][T16320] ipvlan3: entered allmulticast mode [ 346.591655][T16320] bridge0: entered allmulticast mode [ 346.600407][T16320] ipvlan3: left allmulticast mode [ 346.606005][T16320] bridge0: left allmulticast mode [ 346.631352][T16311] macvlan4: entered promiscuous mode [ 346.637570][T16311] macvlan4: entered allmulticast mode [ 346.644760][T16311] bond25: (slave macvlan4): Opening slave failed [ 346.665837][T16327] sctp: [Deprecated]: syz.1.3358 (pid 16327) Use of int in max_burst socket option. [ 346.665837][T16327] Use struct sctp_assoc_value instead [ 346.882667][T16340] netlink: 'syz.3.3361': attribute type 9 has an invalid length. [ 347.173766][T16355] sock: sock_timestamping_bind_phc: sock not bind to device [ 347.186659][T16360] openvswitch: netlink: Flow key attr not present in new flow. [ 347.427484][T16371] netlink: 'syz.2.3365': attribute type 10 has an invalid length. [ 347.511941][T16371] geneve1: entered promiscuous mode [ 347.561761][T16371] geneve1: entered allmulticast mode [ 347.589107][T16371] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 347.620577][ T2139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.631376][ T2139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.684165][ T2139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.692437][ T2139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.962105][T16396] __nla_validate_parse: 12 callbacks suppressed [ 347.962129][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'. [ 348.067804][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 348.109589][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 348.147554][T16406] macvlan2: entered promiscuous mode [ 348.162536][T16406] macvlan2: entered allmulticast mode [ 348.169849][T16406] bond24: (slave macvlan2): Opening slave failed [ 348.358343][T16415] FAULT_INJECTION: forcing a failure. [ 348.358343][T16415] name failslab, interval 1, probability 0, space 0, times 0 [ 348.396553][T16415] CPU: 1 UID: 0 PID: 16415 Comm: syz.4.3380 Not tainted syzkaller #0 PREEMPT(full) [ 348.396583][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.396596][T16415] Call Trace: [ 348.396604][T16415] [ 348.396613][T16415] dump_stack_lvl+0x189/0x250 [ 348.396640][T16415] ? __pfx____ratelimit+0x10/0x10 [ 348.396670][T16415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.396691][T16415] ? __pfx__printk+0x10/0x10 [ 348.396708][T16415] ? trace_contention_end+0x39/0x120 [ 348.396738][T16415] ? __mutex_lock+0x335/0x1350 [ 348.396762][T16415] ? __netlink_lookup+0xbd/0x8a0 [ 348.396798][T16415] should_fail_ex+0x414/0x560 [ 348.396835][T16415] should_failslab+0xa8/0x100 [ 348.396882][T16415] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 348.396905][T16415] ? nf_tables_dump_set_start+0x49/0x80 [ 348.396948][T16415] kmemdup_noprof+0x2b/0x70 [ 348.396978][T16415] nf_tables_dump_set_start+0x49/0x80 [ 348.397008][T16415] __netlink_dump_start+0x469/0x7e0 [ 348.397042][T16415] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 348.397067][T16415] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 348.397095][T16415] nf_tables_getsetelem+0x272/0x580 [ 348.397120][T16415] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 348.397152][T16415] ? nfnl_pernet+0x23/0x240 [ 348.397173][T16415] ? __pfx_nf_tables_dump_set_start+0x10/0x10 [ 348.397198][T16415] ? __pfx_nf_tables_dump_set+0x10/0x10 [ 348.397223][T16415] ? __pfx_nf_tables_dump_set_done+0x10/0x10 [ 348.397260][T16415] ? __nla_parse+0x40/0x60 [ 348.397282][T16415] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 348.397305][T16415] nfnetlink_rcv_msg+0x80e/0x1130 [ 348.397328][T16415] ? __lock_acquire+0xab9/0xd20 [ 348.397353][T16415] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 348.397399][T16415] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 348.397457][T16415] ? is_bpf_text_address+0x26/0x2b0 [ 348.397492][T16415] ? is_bpf_text_address+0x26/0x2b0 [ 348.397531][T16415] netlink_rcv_skb+0x208/0x470 [ 348.397559][T16415] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 348.397586][T16415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.397627][T16415] ? bpf_lsm_capable+0x9/0x20 [ 348.397644][T16415] ? security_capable+0x7e/0x2e0 [ 348.397673][T16415] nfnetlink_rcv+0x282/0x2590 [ 348.397701][T16415] ? is_bpf_text_address+0x26/0x2b0 [ 348.397735][T16415] ? __kernel_text_address+0xd/0x40 [ 348.397756][T16415] ? unwind_get_return_address+0x4d/0x90 [ 348.397785][T16415] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 348.397806][T16415] ? arch_stack_walk+0xfc/0x150 [ 348.397850][T16415] ? stack_trace_save+0x9c/0xe0 [ 348.397869][T16415] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 348.397894][T16415] ? stack_depot_save_flags+0x40/0x860 [ 348.397927][T16415] ? __lock_acquire+0xab9/0xd20 [ 348.397981][T16415] ? __lock_acquire+0xab9/0xd20 [ 348.398018][T16415] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.398052][T16415] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.398086][T16415] netlink_unicast+0x82f/0x9e0 [ 348.398122][T16415] ? __pfx_netlink_unicast+0x10/0x10 [ 348.398148][T16415] ? netlink_sendmsg+0x642/0xb30 [ 348.398173][T16415] ? skb_put+0x11b/0x210 [ 348.398206][T16415] netlink_sendmsg+0x805/0xb30 [ 348.398245][T16415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.398277][T16415] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.398302][T16415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.398326][T16415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.398356][T16415] __sock_sendmsg+0x21c/0x270 [ 348.398383][T16415] ____sys_sendmsg+0x505/0x830 [ 348.398419][T16415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.398461][T16415] ? import_iovec+0x74/0xa0 [ 348.398491][T16415] ___sys_sendmsg+0x21f/0x2a0 [ 348.398513][T16415] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.398576][T16415] ? __fget_files+0x2a/0x420 [ 348.398599][T16415] ? __fget_files+0x3a0/0x420 [ 348.398636][T16415] __x64_sys_sendmsg+0x19b/0x260 [ 348.398659][T16415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.398690][T16415] ? __pfx_ksys_write+0x10/0x10 [ 348.398717][T16415] ? do_syscall_64+0xbe/0xfa0 [ 348.398742][T16415] do_syscall_64+0xfa/0xfa0 [ 348.398759][T16415] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.398778][T16415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.398798][T16415] ? clear_bhb_loop+0x60/0xb0 [ 348.398823][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.398842][T16415] RIP: 0033:0x7f6b3ed8efc9 [ 348.398861][T16415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.398880][T16415] RSP: 002b:00007f6b3fd11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.398902][T16415] RAX: ffffffffffffffda RBX: 00007f6b3efe5fa0 RCX: 00007f6b3ed8efc9 [ 348.398924][T16415] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 348.398937][T16415] RBP: 00007f6b3fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 348.398950][T16415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.398962][T16415] R13: 00007f6b3efe6038 R14: 00007f6b3efe5fa0 R15: 00007fff54967b18 [ 348.398998][T16415] [ 349.390855][T16466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3393'. [ 349.396445][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3394'. [ 349.417935][T16461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 349.448135][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3394'. [ 349.473302][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 349.482599][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'. [ 349.526266][T16461] macvlan3: entered promiscuous mode [ 349.531772][T16461] macvlan3: entered allmulticast mode [ 349.538864][T16461] bond10: (slave macvlan3): Opening slave failed [ 349.775624][T16487] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 350.111515][T16501] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3407'. [ 350.262801][T16507] team0: Device vti0 is up. Set it down before adding it as a team port [ 350.322121][T16513] tipc: Enabling of bearer rejected, already enabled [ 350.459433][T16510] macvlan3: entered promiscuous mode [ 350.475990][T16510] macvlan3: entered allmulticast mode [ 350.502833][T16510] bond11: (slave macvlan3): Opening slave failed [ 350.558410][T16513] tipc: Resetting bearer [ 350.613442][T16526] sit0: entered promiscuous mode [ 350.618763][T16526] netlink: 'syz.0.3416': attribute type 1 has an invalid length. [ 350.879158][T16542] netlink: 'syz.2.3422': attribute type 4 has an invalid length. [ 350.889316][T16542] netlink: 'syz.2.3422': attribute type 2 has an invalid length. [ 350.982362][T16548] netlink: 'syz.3.3425': attribute type 12 has an invalid length. [ 351.049339][T16553] FAULT_INJECTION: forcing a failure. [ 351.049339][T16553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.058511][T16548] bond25: option primary_reselect: invalid value (255) [ 351.063373][T16553] CPU: 1 UID: 0 PID: 16553 Comm: syz.4.3427 Not tainted syzkaller #0 PREEMPT(full) [ 351.063402][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.063414][T16553] Call Trace: [ 351.063423][T16553] [ 351.063431][T16553] dump_stack_lvl+0x189/0x250 [ 351.063457][T16553] ? __pfx____ratelimit+0x10/0x10 [ 351.063486][T16553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.063506][T16553] ? __pfx__printk+0x10/0x10 [ 351.063538][T16553] should_fail_ex+0x414/0x560 [ 351.063572][T16553] _copy_to_user+0x31/0xb0 [ 351.063598][T16553] simple_read_from_buffer+0xe1/0x170 [ 351.063626][T16553] proc_fail_nth_read+0x1b3/0x220 [ 351.063657][T16553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.063688][T16553] ? rw_verify_area+0x2a6/0x4d0 [ 351.063706][T16553] ? __lock_acquire+0xab9/0xd20 [ 351.063729][T16553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.063759][T16553] vfs_read+0x200/0xa30 [ 351.063777][T16553] ? fdget_pos+0x247/0x320 [ 351.063804][T16553] ? __pfx___mutex_lock+0x10/0x10 [ 351.063825][T16553] ? __pfx_vfs_read+0x10/0x10 [ 351.063847][T16553] ? __fget_files+0x2a/0x420 [ 351.063873][T16553] ? __fget_files+0x3a0/0x420 [ 351.063894][T16553] ? __fget_files+0x2a/0x420 [ 351.063925][T16553] ksys_read+0x145/0x250 [ 351.063947][T16553] ? __pfx_ksys_read+0x10/0x10 [ 351.063971][T16553] ? do_syscall_64+0xbe/0xfa0 [ 351.064006][T16553] do_syscall_64+0xfa/0xfa0 [ 351.064023][T16553] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.064041][T16553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.064059][T16553] ? clear_bhb_loop+0x60/0xb0 [ 351.064082][T16553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.064100][T16553] RIP: 0033:0x7f6b3ed8d9dc [ 351.064118][T16553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 351.064135][T16553] RSP: 002b:00007f6b3fd11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.064156][T16553] RAX: ffffffffffffffda RBX: 00007f6b3efe5fa0 RCX: 00007f6b3ed8d9dc [ 351.064170][T16553] RDX: 000000000000000f RSI: 00007f6b3fd110a0 RDI: 0000000000000005 [ 351.064183][T16553] RBP: 00007f6b3fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 351.064194][T16553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.064206][T16553] R13: 00007f6b3efe6038 R14: 00007f6b3efe5fa0 R15: 00007fff54967b18 [ 351.064246][T16553] [ 351.310458][T16548] bond25 (unregistering): Released all slaves [ 351.724665][T16569] macvlan3: entered promiscuous mode [ 351.730289][T16569] macvlan3: entered allmulticast mode [ 351.744759][T16569] bond12: (slave macvlan3): Opening slave failed [ 352.331894][T16613] openvswitch: netlink: Flow key attr not present in new flow. [ 352.627352][T16622] macvlan3: entered promiscuous mode [ 352.632850][T16622] macvlan3: entered allmulticast mode [ 352.639565][T16622] bond21: (slave macvlan3): Opening slave failed [ 352.975979][T16638] __nla_validate_parse: 13 callbacks suppressed [ 352.976004][T16638] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3459'. [ 353.086744][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3460'. [ 353.148761][T16644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3461'. [ 353.171492][T16644] openvswitch: netlink: Flow key attr not present in new flow. [ 353.219000][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3460'. [ 353.317965][T16653] netlink: 'syz.0.3463': attribute type 12 has an invalid length. [ 353.395200][T16653] bond26: option primary_reselect: invalid value (255) [ 353.409302][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3460'. [ 353.412271][T16653] bond26 (unregistering): Released all slaves [ 353.457846][T16659] netlink: 'syz.4.3465': attribute type 10 has an invalid length. [ 353.728963][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 354.620989][T16714] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3485'. [ 354.663349][T16714] netlink: 6464 bytes leftover after parsing attributes in process `syz.3.3485'. [ 354.687749][T16715] netlink: 'syz.3.3485': attribute type 5 has an invalid length. [ 354.854783][T16725] netlink: 'syz.2.3486': attribute type 1 has an invalid length. [ 354.862719][T16725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3486'. [ 354.872591][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 355.861337][T16760] netlink: 'syz.1.3503': attribute type 1 has an invalid length. [ 355.985809][T16760] 8021q: adding VLAN 0 to HW filter on device bond22 [ 356.124349][T16773] No such timeout policy "syz0" [ 356.132509][T16771] netlink: 'syz.1.3507': attribute type 12 has an invalid length. [ 356.388202][T16771] bond23: option primary_reselect: invalid value (255) [ 356.410401][T16771] bond23 (unregistering): Released all slaves [ 357.109883][T16807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.218235][T16809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.219647][T16836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.310619][T16835] netlink: 'syz.4.3528': attribute type 1 has an invalid length. [ 358.572280][T16852] __nla_validate_parse: 5 callbacks suppressed [ 358.572302][T16852] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3535'. [ 358.591898][T16852] netem: invalid attributes len -24 [ 358.598387][T16852] netem: change failed [ 358.603716][T16854] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3536'. [ 358.651418][T16854] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3536'. [ 358.947070][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3544'. [ 359.204688][T16885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3548'. [ 359.253469][T16885] openvswitch: netlink: Flow key attr not present in new flow. [ 359.283799][T16891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3550'. [ 359.313750][T16891] openvswitch: netlink: Flow key attr not present in new flow. [ 359.330781][T16891] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3550'. [ 359.522865][T16898] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3553'. [ 359.660530][T16902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3555'. [ 359.686631][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3556'. [ 359.690663][T16902] openvswitch: netlink: Flow key attr not present in new flow. [ 359.874054][T16910] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 359.956649][T16910] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 360.149028][T16925] openvswitch: netlink: Flow key attr not present in new flow. [ 360.505245][T16934] netlink: 'syz.3.3569': attribute type 7 has an invalid length. [ 360.594343][T16938] netlink: 'syz.0.3568': attribute type 12 has an invalid length. [ 360.829972][T16938] bond26: option primary_reselect: invalid value (255) [ 360.880396][T16938] bond26 (unregistering): Released all slaves [ 361.434342][T16981] netlink: 'syz.0.3585': attribute type 1 has an invalid length. [ 361.529230][T16985] openvswitch: netlink: Flow key attr not present in new flow. [ 362.164193][T17011] syzkaller0: entered promiscuous mode [ 362.169955][T17011] syzkaller0: entered allmulticast mode [ 362.186506][T17024] openvswitch: netlink: Flow key attr not present in new flow. [ 364.107305][T17042] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 364.111409][T17050] __nla_validate_parse: 11 callbacks suppressed [ 364.111433][T17050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3613'. [ 364.268911][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'. [ 364.281226][T17067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.459595][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3623'. [ 364.502605][T17079] openvswitch: netlink: Flow key attr not present in new flow. [ 364.748034][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3629'. [ 364.807503][T17101] netlink: 'syz.2.3631': attribute type 12 has an invalid length. [ 364.829550][T17095] macvlan2: entered promiscuous mode [ 364.835380][T17095] macvlan2: entered allmulticast mode [ 364.841799][T17095] bond25: (slave macvlan2): Opening slave failed [ 364.869804][T17101] bond13: option primary_reselect: invalid value (255) [ 364.879857][T17101] bond13 (unregistering): Released all slaves [ 365.104326][T17110] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3634'. [ 365.211557][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 365.506007][T17123] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3640'. [ 365.518273][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3640'. [ 365.606016][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3642'. [ 365.668031][T17123] 8021q: adding VLAN 0 to HW filter on device bond13 [ 365.718829][T17130] macvlan2: entered promiscuous mode [ 365.724566][T17130] macvlan2: entered allmulticast mode [ 365.731090][T17130] bond26: (slave macvlan2): Opening slave failed [ 365.767177][T17134] 8021q: adding VLAN 0 to HW filter on device bond13 [ 365.776183][T17134] bond13: (slave vxcan9): The slave device specified does not support setting the MAC address [ 365.789054][T17134] bond13: (slave vxcan9): Error -95 calling set_mac_address [ 365.793737][T17140] sctp: [Deprecated]: syz.0.3645 (pid 17140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.793737][T17140] Use struct sctp_sack_info instead [ 365.969620][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3647'. [ 366.050502][T17153] netlink: 'syz.2.3649': attribute type 12 has an invalid length. [ 366.130056][T17153] bond14: option primary_reselect: invalid value (255) [ 366.187158][T17153] bond14 (unregistering): Released all slaves [ 366.466359][T17168] FAULT_INJECTION: forcing a failure. [ 366.466359][T17168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.491371][T17168] CPU: 1 UID: 0 PID: 17168 Comm: syz.0.3656 Not tainted syzkaller #0 PREEMPT(full) [ 366.491403][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.491416][T17168] Call Trace: [ 366.491424][T17168] [ 366.491434][T17168] dump_stack_lvl+0x189/0x250 [ 366.491462][T17168] ? __pfx____ratelimit+0x10/0x10 [ 366.491494][T17168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.491517][T17168] ? __pfx__printk+0x10/0x10 [ 366.491539][T17168] ? __might_fault+0xb0/0x130 [ 366.491575][T17168] should_fail_ex+0x414/0x560 [ 366.491613][T17168] _copy_from_user+0x2d/0xb0 [ 366.491642][T17168] __sys_bpf+0x1e3/0x860 [ 366.491671][T17168] ? __pfx___sys_bpf+0x10/0x10 [ 366.491741][T17168] ? ksys_write+0x22a/0x250 [ 366.491768][T17168] ? __pfx_ksys_write+0x10/0x10 [ 366.491797][T17168] __x64_sys_bpf+0x7c/0x90 [ 366.491822][T17168] do_syscall_64+0xfa/0xfa0 [ 366.491853][T17168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.491873][T17168] ? asm_sysvec_call_function_single+0x1a/0x20 [ 366.491893][T17168] ? clear_bhb_loop+0x60/0xb0 [ 366.491919][T17168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.491938][T17168] RIP: 0033:0x7fb53138efc9 [ 366.491958][T17168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.491977][T17168] RSP: 002b:00007fb5321b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.492001][T17168] RAX: ffffffffffffffda RBX: 00007fb5315e5fa0 RCX: 00007fb53138efc9 [ 366.492017][T17168] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 366.492031][T17168] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 0000000000000000 [ 366.492044][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.492056][T17168] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 366.492092][T17168] [ 366.680051][T17174] openvswitch: netlink: Flow key attr not present in new flow. [ 366.958324][T17187] macvtap1: entered promiscuous mode [ 366.985711][T17187] vlan0: entered promiscuous mode [ 366.992555][T17187] macvtap1: entered allmulticast mode [ 367.032721][T17193] macvtap2: entered promiscuous mode [ 367.053855][T17193] macvtap2: entered allmulticast mode [ 367.317267][T17213] netlink: 'syz.1.3671': attribute type 12 has an invalid length. [ 367.400274][T17213] bond23: option primary_reselect: invalid value (255) [ 367.409114][T17213] bond23 (unregistering): Released all slaves [ 367.430647][T17220] netlink: 'syz.2.3673': attribute type 20 has an invalid length. [ 367.449266][ T1165] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.449352][T17220] netlink: 'syz.2.3673': attribute type 20 has an invalid length. [ 367.479955][ T1165] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.511950][ T1165] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.532054][ T1165] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.632654][T17229] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 367.825575][T17238] xt_policy: output policy not valid in PREROUTING and INPUT [ 367.843692][T17238] netlink: 'syz.2.3681': attribute type 21 has an invalid length. [ 367.880121][T17238] bond14: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 367.892470][T17238] bond14 (unregistering): Released all slaves [ 368.309186][T17268] netlink: 'syz.3.3693': attribute type 12 has an invalid length. [ 368.366921][T17268] bond27: option primary_reselect: invalid value (255) [ 368.377022][T17268] bond27 (unregistering): Released all slaves [ 368.378058][T17274] FAULT_INJECTION: forcing a failure. [ 368.378058][T17274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.396828][T17274] CPU: 0 UID: 0 PID: 17274 Comm: syz.4.3695 Not tainted syzkaller #0 PREEMPT(full) [ 368.396856][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.396870][T17274] Call Trace: [ 368.396941][T17274] [ 368.396951][T17274] dump_stack_lvl+0x189/0x250 [ 368.396980][T17274] ? __pfx____ratelimit+0x10/0x10 [ 368.397011][T17274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.397034][T17274] ? __pfx__printk+0x10/0x10 [ 368.397070][T17274] should_fail_ex+0x414/0x560 [ 368.397107][T17274] _copy_from_user+0x2d/0xb0 [ 368.397135][T17274] bpf_test_init+0xd8/0x150 [ 368.397168][T17274] bpf_prog_test_run_skb+0x206/0x1550 [ 368.397195][T17274] ? __fget_files+0x2a/0x420 [ 368.397228][T17274] ? __fget_files+0x2a/0x420 [ 368.397259][T17274] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 368.397288][T17274] bpf_prog_test_run+0x2c7/0x340 [ 368.397321][T17274] __sys_bpf+0x562/0x860 [ 368.397349][T17274] ? __pfx___sys_bpf+0x10/0x10 [ 368.397394][T17274] ? ksys_write+0x22a/0x250 [ 368.397420][T17274] ? __pfx_ksys_write+0x10/0x10 [ 368.397449][T17274] __x64_sys_bpf+0x7c/0x90 [ 368.397474][T17274] do_syscall_64+0xfa/0xfa0 [ 368.397493][T17274] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.397513][T17274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.397534][T17274] ? clear_bhb_loop+0x60/0xb0 [ 368.397559][T17274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.397578][T17274] RIP: 0033:0x7f6b3ed8efc9 [ 368.397599][T17274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.397616][T17274] RSP: 002b:00007f6b3fd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.397639][T17274] RAX: ffffffffffffffda RBX: 00007f6b3efe5fa0 RCX: 00007f6b3ed8efc9 [ 368.397655][T17274] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 368.397669][T17274] RBP: 00007f6b3fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 368.397682][T17274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.397695][T17274] R13: 00007f6b3efe6038 R14: 00007f6b3efe5fa0 R15: 00007fff54967b18 [ 368.397732][T17274] [ 369.107765][T17303] bridge0: port 3(ipvlan2) entered blocking state [ 369.133334][T17303] bridge0: port 3(ipvlan2) entered disabled state [ 369.140485][T17303] ipvlan2: entered allmulticast mode [ 369.163670][T17303] bridge0: entered allmulticast mode [ 369.194855][T17303] ipvlan2: left allmulticast mode [ 369.223454][T17303] bridge0: left allmulticast mode [ 369.227987][T17312] __nla_validate_parse: 21 callbacks suppressed [ 369.228010][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3706'. [ 369.556176][T17322] netlink: 'syz.1.3709': attribute type 7 has an invalid length. [ 369.647311][T17332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3714'. [ 369.694393][T17332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3714'. [ 369.776212][T17338] netlink: 'syz.0.3715': attribute type 1 has an invalid length. [ 369.786966][T17339] FAULT_INJECTION: forcing a failure. [ 369.786966][T17339] name failslab, interval 1, probability 0, space 0, times 0 [ 369.787535][T17338] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3715'. [ 369.814796][T17341] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3718'. [ 369.815533][T17339] CPU: 0 UID: 0 PID: 17339 Comm: syz.4.3717 Not tainted syzkaller #0 PREEMPT(full) [ 369.815558][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.815570][T17339] Call Trace: [ 369.815578][T17339] [ 369.815587][T17339] dump_stack_lvl+0x189/0x250 [ 369.815612][T17339] ? __pfx____ratelimit+0x10/0x10 [ 369.815641][T17339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.815660][T17339] ? __pfx__printk+0x10/0x10 [ 369.815686][T17339] ? __pfx___might_resched+0x10/0x10 [ 369.815717][T17339] should_fail_ex+0x414/0x560 [ 369.815758][T17339] should_failslab+0xa8/0x100 [ 369.815784][T17339] __kmalloc_noprof+0xcb/0x7f0 [ 369.815802][T17339] ? kfree+0x4d/0x6d0 [ 369.815816][T17339] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 369.815846][T17339] tomoyo_realpath_from_path+0xe3/0x5d0 [ 369.815869][T17339] ? tomoyo_domain+0xd9/0x130 [ 369.815896][T17339] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 369.815924][T17339] tomoyo_path_number_perm+0x1e8/0x5a0 [ 369.815954][T17339] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.816023][T17339] ? __fget_files+0x2a/0x420 [ 369.816050][T17339] ? __fget_files+0x3a0/0x420 [ 369.816071][T17339] ? __fget_files+0x2a/0x420 [ 369.816097][T17339] security_file_ioctl+0xcb/0x2d0 [ 369.816134][T17339] __se_sys_ioctl+0x47/0x170 [ 369.816157][T17339] do_syscall_64+0xfa/0xfa0 [ 369.816174][T17339] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.816192][T17339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.816210][T17339] ? clear_bhb_loop+0x60/0xb0 [ 369.816234][T17339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.816251][T17339] RIP: 0033:0x7f6b3ed8efc9 [ 369.816269][T17339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.816285][T17339] RSP: 002b:00007f6b3fd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.816307][T17339] RAX: ffffffffffffffda RBX: 00007f6b3efe5fa0 RCX: 00007f6b3ed8efc9 [ 369.816321][T17339] RDX: 0000200000000400 RSI: 00000000000089ea RDI: 0000000000000004 [ 369.816333][T17339] RBP: 00007f6b3fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 369.816345][T17339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.816356][T17339] R13: 00007f6b3efe6038 R14: 00007f6b3efe5fa0 R15: 00007fff54967b18 [ 369.816390][T17339] [ 369.816398][T17339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.895364][T17336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3716'. [ 370.035109][T17346] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3716'. [ 370.166356][ T1165] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.175539][ T1165] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.187245][ T1165] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.204586][ T1165] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.216327][T17348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3721'. [ 370.244163][ T1165] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.254772][ T1165] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.267708][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3724'. [ 370.277212][T17350] tipc: Enabling of bearer rejected, already enabled [ 370.289723][ T1165] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.294102][T17358] Cannot find set identified by id 3 to match [ 370.298669][ T1165] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.328924][T17357] openvswitch: netlink: Flow key attr not present in new flow. [ 370.504706][T17368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3730'. [ 370.514604][T17368] openvswitch: netlink: Flow key attr not present in new flow. [ 370.644538][T17375] FAULT_INJECTION: forcing a failure. [ 370.644538][T17375] name failslab, interval 1, probability 0, space 0, times 0 [ 370.683490][T17375] CPU: 1 UID: 0 PID: 17375 Comm: syz.0.3733 Not tainted syzkaller #0 PREEMPT(full) [ 370.683522][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.683534][T17375] Call Trace: [ 370.683543][T17375] [ 370.683553][T17375] dump_stack_lvl+0x189/0x250 [ 370.683583][T17375] ? __pfx____ratelimit+0x10/0x10 [ 370.683614][T17375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.683636][T17375] ? __pfx__printk+0x10/0x10 [ 370.683666][T17375] ? __pfx___might_resched+0x10/0x10 [ 370.683693][T17375] ? fs_reclaim_acquire+0x7d/0x100 [ 370.683725][T17375] should_fail_ex+0x414/0x560 [ 370.683762][T17375] should_failslab+0xa8/0x100 [ 370.683791][T17375] __kmalloc_noprof+0xcb/0x7f0 [ 370.683812][T17375] ? security_sk_alloc+0x52/0x390 [ 370.683848][T17375] security_sk_alloc+0x52/0x390 [ 370.683877][T17375] sk_prot_alloc+0x101/0x220 [ 370.683906][T17375] ? sk_alloc+0x24/0x370 [ 370.683937][T17375] sk_alloc+0x3a/0x370 [ 370.683964][T17375] ? bpf_ctx_init+0x167/0x1d0 [ 370.683996][T17375] bpf_prog_test_run_skb+0x313/0x1550 [ 370.684034][T17375] ? __fget_files+0x2a/0x420 [ 370.684066][T17375] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 370.684095][T17375] bpf_prog_test_run+0x2c7/0x340 [ 370.684128][T17375] __sys_bpf+0x562/0x860 [ 370.684156][T17375] ? __pfx___sys_bpf+0x10/0x10 [ 370.684211][T17375] ? ksys_write+0x22a/0x250 [ 370.684236][T17375] ? __pfx_ksys_write+0x10/0x10 [ 370.684266][T17375] __x64_sys_bpf+0x7c/0x90 [ 370.684291][T17375] do_syscall_64+0xfa/0xfa0 [ 370.684310][T17375] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.684331][T17375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.684352][T17375] ? clear_bhb_loop+0x60/0xb0 [ 370.684378][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.684404][T17375] RIP: 0033:0x7fb53138efc9 [ 370.684424][T17375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.684443][T17375] RSP: 002b:00007fb5321b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.684476][T17375] RAX: ffffffffffffffda RBX: 00007fb5315e5fa0 RCX: 00007fb53138efc9 [ 370.684492][T17375] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 370.684507][T17375] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 0000000000000000 [ 370.684520][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.684533][T17375] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 370.684570][T17375] [ 371.013336][T17380] tipc: Resetting bearer [ 371.077039][T17383] netlink: 'syz.1.3735': attribute type 12 has an invalid length. [ 371.133227][T17392] openvswitch: netlink: Flow key attr not present in new flow. [ 371.335012][T17399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.398564][T17403] bridge0: port 1(ipvlan2) entered blocking state [ 371.405377][T17403] bridge0: port 1(ipvlan2) entered disabled state [ 371.412887][T17403] ipvlan2: entered allmulticast mode [ 371.418522][T17403] bridge0: entered allmulticast mode [ 371.461977][T17403] ipvlan2: left allmulticast mode [ 371.483573][T17403] bridge0: left allmulticast mode [ 371.970284][T17440] netlink: 'syz.1.3757': attribute type 10 has an invalid length. [ 371.982120][T17440] bond0: (slave wg0): The slave device specified does not support setting the MAC address [ 371.994824][T17440] bond0: (slave wg0): Error -95 calling set_mac_address [ 372.126508][T17450] FAULT_INJECTION: forcing a failure. [ 372.126508][T17450] name failslab, interval 1, probability 0, space 0, times 0 [ 372.170823][T17450] CPU: 1 UID: 0 PID: 17450 Comm: syz.1.3762 Not tainted syzkaller #0 PREEMPT(full) [ 372.170853][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.170866][T17450] Call Trace: [ 372.170875][T17450] [ 372.170884][T17450] dump_stack_lvl+0x189/0x250 [ 372.170911][T17450] ? __pfx____ratelimit+0x10/0x10 [ 372.170942][T17450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.170963][T17450] ? __pfx__printk+0x10/0x10 [ 372.170987][T17450] ? __pfx___might_resched+0x10/0x10 [ 372.171014][T17450] ? fs_reclaim_acquire+0x7d/0x100 [ 372.171045][T17450] should_fail_ex+0x414/0x560 [ 372.171082][T17450] should_failslab+0xa8/0x100 [ 372.171119][T17450] __kmalloc_cache_noprof+0x6f/0x6f0 [ 372.171142][T17450] ? dev_ethtool+0x126/0x19c0 [ 372.171169][T17450] dev_ethtool+0x126/0x19c0 [ 372.171200][T17450] ? __lock_acquire+0xab9/0xd20 [ 372.171231][T17450] ? __pfx_dev_ethtool+0x10/0x10 [ 372.171263][T17450] ? dev_load+0x21/0x1f0 [ 372.171291][T17450] ? dev_load+0x21/0x1f0 [ 372.171318][T17450] dev_ioctl+0x392/0x1150 [ 372.171349][T17450] sock_do_ioctl+0x22c/0x300 [ 372.171377][T17450] ? __pfx_sock_do_ioctl+0x10/0x10 [ 372.171421][T17450] sock_ioctl+0x576/0x790 [ 372.171448][T17450] ? __pfx_sock_ioctl+0x10/0x10 [ 372.171476][T17450] ? __fget_files+0x3a0/0x420 [ 372.171501][T17450] ? __fget_files+0x2a/0x420 [ 372.171529][T17450] ? bpf_lsm_file_ioctl+0x9/0x20 [ 372.171559][T17450] ? __pfx_sock_ioctl+0x10/0x10 [ 372.171582][T17450] __se_sys_ioctl+0xfc/0x170 [ 372.171606][T17450] do_syscall_64+0xfa/0xfa0 [ 372.171625][T17450] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.171646][T17450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.171667][T17450] ? clear_bhb_loop+0x60/0xb0 [ 372.171694][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.171738][T17450] RIP: 0033:0x7f9a0258efc9 [ 372.171757][T17450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.171775][T17450] RSP: 002b:00007f9a03461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.171799][T17450] RAX: ffffffffffffffda RBX: 00007f9a027e5fa0 RCX: 00007f9a0258efc9 [ 372.171815][T17450] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 372.171829][T17450] RBP: 00007f9a03461090 R08: 0000000000000000 R09: 0000000000000000 [ 372.171842][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.171855][T17450] R13: 00007f9a027e6038 R14: 00007f9a027e5fa0 R15: 00007fff080fe1d8 [ 372.171893][T17450] [ 372.210870][T17456] FAULT_INJECTION: forcing a failure. [ 372.210870][T17456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.446994][T17456] CPU: 0 UID: 0 PID: 17456 Comm: syz.2.3764 Not tainted syzkaller #0 PREEMPT(full) [ 372.447027][T17456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.447040][T17456] Call Trace: [ 372.447050][T17456] [ 372.447059][T17456] dump_stack_lvl+0x189/0x250 [ 372.447086][T17456] ? __pfx____ratelimit+0x10/0x10 [ 372.447117][T17456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.447140][T17456] ? __pfx__printk+0x10/0x10 [ 372.447160][T17456] ? __might_fault+0xb0/0x130 [ 372.447203][T17456] should_fail_ex+0x414/0x560 [ 372.447241][T17456] _copy_from_user+0x2d/0xb0 [ 372.447269][T17456] __sys_sendto+0x25c/0x520 [ 372.447302][T17456] ? __pfx___sys_sendto+0x10/0x10 [ 372.447327][T17456] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 372.447365][T17456] ? __fget_files+0x3a0/0x420 [ 372.447402][T17456] ? ksys_write+0x22a/0x250 [ 372.447427][T17456] ? __pfx_ksys_write+0x10/0x10 [ 372.447453][T17456] __x64_sys_sendto+0xde/0x100 [ 372.447486][T17456] do_syscall_64+0xfa/0xfa0 [ 372.447504][T17456] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.447525][T17456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.447545][T17456] ? clear_bhb_loop+0x60/0xb0 [ 372.447570][T17456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.447600][T17456] RIP: 0033:0x7f72f438efc9 [ 372.447620][T17456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.447639][T17456] RSP: 002b:00007f72f513e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.447662][T17456] RAX: ffffffffffffffda RBX: 00007f72f45e5fa0 RCX: 00007f72f438efc9 [ 372.447677][T17456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 372.447689][T17456] RBP: 00007f72f513e090 R08: 0000200000000040 R09: 000000000000001c [ 372.447703][T17456] R10: 0000000020044080 R11: 0000000000000246 R12: 0000000000000001 [ 372.447716][T17456] R13: 00007f72f45e6038 R14: 00007f72f45e5fa0 R15: 00007ffdda983828 [ 372.447752][T17456] [ 372.933919][T17476] bridge0: port 1(ipvlan2) entered blocking state [ 372.941312][T17476] bridge0: port 1(ipvlan2) entered disabled state [ 372.951670][T17476] ipvlan2: entered allmulticast mode [ 372.957291][T17476] bridge0: entered allmulticast mode [ 372.966352][T17476] ipvlan2: left allmulticast mode [ 372.993083][T17476] bridge0: left allmulticast mode [ 373.014470][T17487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.094353][T17492] Cannot find set identified by id 3 to match [ 373.277501][T17503] netlink: 'syz.1.3778': attribute type 1 has an invalid length. [ 373.451409][T17516] FAULT_INJECTION: forcing a failure. [ 373.451409][T17516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.467407][T17516] CPU: 0 UID: 0 PID: 17516 Comm: syz.0.3786 Not tainted syzkaller #0 PREEMPT(full) [ 373.467439][T17516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.467453][T17516] Call Trace: [ 373.467462][T17516] [ 373.467470][T17516] dump_stack_lvl+0x189/0x250 [ 373.467498][T17516] ? __pfx____ratelimit+0x10/0x10 [ 373.467530][T17516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.467552][T17516] ? __pfx__printk+0x10/0x10 [ 373.467589][T17516] should_fail_ex+0x414/0x560 [ 373.467627][T17516] _copy_to_user+0x31/0xb0 [ 373.467656][T17516] simple_read_from_buffer+0xe1/0x170 [ 373.467687][T17516] proc_fail_nth_read+0x1b3/0x220 [ 373.467721][T17516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.467755][T17516] ? rw_verify_area+0x2a6/0x4d0 [ 373.467774][T17516] ? __lock_acquire+0xab9/0xd20 [ 373.467798][T17516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.467830][T17516] vfs_read+0x200/0xa30 [ 373.467851][T17516] ? fdget_pos+0x247/0x320 [ 373.467881][T17516] ? __pfx___mutex_lock+0x10/0x10 [ 373.467905][T17516] ? __pfx_vfs_read+0x10/0x10 [ 373.467927][T17516] ? __fget_files+0x2a/0x420 [ 373.467958][T17516] ? __fget_files+0x3a0/0x420 [ 373.467981][T17516] ? __fget_files+0x2a/0x420 [ 373.468017][T17516] ksys_read+0x145/0x250 [ 373.468041][T17516] ? __pfx_ksys_read+0x10/0x10 [ 373.468068][T17516] ? do_syscall_64+0xbe/0xfa0 [ 373.468093][T17516] do_syscall_64+0xfa/0xfa0 [ 373.468111][T17516] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.468132][T17516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.468153][T17516] ? clear_bhb_loop+0x60/0xb0 [ 373.468195][T17516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.468215][T17516] RIP: 0033:0x7fb53138d9dc [ 373.468235][T17516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 373.468253][T17516] RSP: 002b:00007fb5321b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.468276][T17516] RAX: ffffffffffffffda RBX: 00007fb5315e5fa0 RCX: 00007fb53138d9dc [ 373.468292][T17516] RDX: 000000000000000f RSI: 00007fb5321b50a0 RDI: 0000000000000004 [ 373.468305][T17516] RBP: 00007fb5321b5090 R08: 0000000000000000 R09: 000000000000001c [ 373.468318][T17516] R10: 0000000020044080 R11: 0000000000000246 R12: 0000000000000001 [ 373.468331][T17516] R13: 00007fb5315e6038 R14: 00007fb5315e5fa0 R15: 00007ffdbe163698 [ 373.468370][T17516] [ 374.095873][T17517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.356034][T17557] netlink: 'syz.1.3801': attribute type 10 has an invalid length. [ 374.375350][T17557] bond0: (slave wg0): The slave device specified does not support setting the MAC address [ 374.386936][T17557] bond0: (slave wg0): Error -95 calling set_mac_address [ 374.390019][T17559] __nla_validate_parse: 16 callbacks suppressed [ 374.390036][T17559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3802'. [ 374.440238][T17559] openvswitch: netlink: Flow key attr not present in new flow. [ 374.784167][T17577] block nbd1: Unsupported socket: should be TCP or UNIX. [ 374.824207][T17580] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3810'. [ 374.850701][T17583] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3810'. [ 375.465271][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 375.520044][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3822'. [ 375.584715][T17623] Cannot find set identified by id 3 to match [ 375.597556][ T2139] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.610853][ T2139] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.652032][ T2139] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.680949][ T2139] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.897066][T17639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3830'. [ 375.955715][T17642] netlink: 'syz.4.3827': attribute type 1 has an invalid length. [ 375.978113][T17635] bridge0: port 2(ipvlan2) entered blocking state [ 375.990902][T17635] bridge0: port 2(ipvlan2) entered disabled state [ 375.998442][T17635] ipvlan2: entered allmulticast mode [ 376.004463][T17635] bridge0: entered allmulticast mode [ 376.014905][T17635] ipvlan2: left allmulticast mode [ 376.020301][T17635] bridge0: left allmulticast mode [ 376.092948][T17630] veth3: entered promiscuous mode [ 376.208739][T17647] bond26: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 376.972066][T17692] netlink: 'syz.3.3846': attribute type 9 has an invalid length. [ 377.083368][T17694] xt_hashlimit: overflow, rate too high: 0 [ 377.251102][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3851'. [ 377.260711][T17704] openvswitch: netlink: Flow key attr not present in new flow. [ 377.466174][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3854'. [ 377.629924][T17718] macvlan2: entered promiscuous mode [ 377.657482][T17718] macvlan2: entered allmulticast mode [ 377.687053][T17718] bond20: (slave macvlan2): Opening slave failed [ 378.748072][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.768535][T17781] Cannot find set identified by id 29 to match [ 378.817187][T17783] netlink: 'syz.2.3874': attribute type 42 has an invalid length. [ 379.144539][T17802] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3880'. [ 379.277625][T17810] netlink: 'syz.0.3885': attribute type 4 has an invalid length. [ 379.406592][T17814] Cannot find set identified by id 3 to match [ 379.440346][T17816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3888'. [ 379.731447][T17830] netlink: 'syz.4.3895': attribute type 12 has an invalid length. [ 379.772887][T17830] bond21: option primary_reselect: invalid value (255) [ 379.776798][T17833] netlink: 'syz.2.3896': attribute type 10 has an invalid length. [ 379.789804][T17830] bond21 (unregistering): Released all slaves [ 379.867348][T17838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3898'. [ 380.143951][T17853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'. [ 380.215141][T17855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3906'. [ 380.311566][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3909'. [ 380.396467][T17866] bond23: (slave geneve3): Enslaving as an active interface with an up link [ 380.405899][ T2139] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 380.419555][ T2139] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 380.445465][ T2139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 380.478976][ T2139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 380.518465][T17870] netlink: 'syz.0.3914': attribute type 5 has an invalid length. [ 380.580865][T17876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3913'. [ 380.600256][T17876] openvswitch: netlink: Flow key attr not present in new flow. [ 380.752618][T17886] veth1_to_hsr: left allmulticast mode [ 381.039355][T17901] bridge0: port 3(ipvlan3) entered blocking state [ 381.076071][T17901] bridge0: port 3(ipvlan3) entered disabled state [ 381.082902][T17901] ipvlan3: entered allmulticast mode [ 381.103232][T17901] bridge0: entered allmulticast mode [ 381.118660][T17901] ipvlan3: left allmulticast mode [ 381.163254][T17901] bridge0: left allmulticast mode [ 381.236573][T17918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3929'. [ 381.247405][T17918] openvswitch: netlink: Flow key attr not present in new flow. [ 381.424182][T17913] syzkaller1: entered promiscuous mode [ 381.430008][T17913] syzkaller1: entered allmulticast mode [ 381.865942][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3936'. [ 381.997109][T17946] netlink: 'syz.2.3940': attribute type 33 has an invalid length. [ 382.008116][T17940] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address [ 382.028134][T17946] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3940'. [ 382.053220][T17940] bond21: (slave vxcan3): Error -95 calling set_mac_address [ 382.108354][T17951] 8021q: VLANs not supported on xfrm0 [ 382.127208][T17951] netlink: 'syz.2.3940': attribute type 33 has an invalid length. [ 382.142590][T17946] 8021q: VLANs not supported on xfrm0 [ 382.161406][T17951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3940'. [ 383.268362][T17993] bond27: (slave vxcan9): The slave device specified does not support setting the MAC address [ 383.284440][T17993] bond27: (slave vxcan9): Error -95 calling set_mac_address [ 383.320100][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.330017][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.362557][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.381850][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.633862][T18020] Cannot find set identified by id 3 to match [ 383.735945][T18022] bond14: entered promiscuous mode [ 383.751955][T18022] bond14: entered allmulticast mode [ 383.777211][T18022] 8021q: adding VLAN 0 to HW filter on device bond14 [ 383.913291][T18036] netlink: 'syz.3.3965': attribute type 12 has an invalid length. [ 384.029055][T18036] bond27: option primary_reselect: invalid value (255) [ 384.068613][T18036] bond27 (unregistering): Released all slaves [ 384.267836][T18050] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.316817][T18050] bond22: (slave vxcan3): Error -95 calling set_mac_address [ 384.515836][T18065] Cannot find set identified by id 3 to match [ 384.853288][T18082] netlink: 'syz.1.3984': attribute type 12 has an invalid length. [ 384.913790][T18085] __nla_validate_parse: 8 callbacks suppressed [ 384.913814][T18085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3985'. [ 384.950204][T18085] openvswitch: netlink: Flow key attr not present in new flow. [ 384.990248][T18082] bond24: option primary_reselect: invalid value (255) [ 385.035293][T18090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3987'. [ 385.044879][T18090] netlink: 'syz.4.3987': attribute type 7 has an invalid length. [ 385.052769][T18090] netlink: 'syz.4.3987': attribute type 8 has an invalid length. [ 385.061285][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 385.072518][T18082] bond24 (unregistering): Released all slaves [ 385.142849][T18090] ip6gretap0: entered promiscuous mode [ 385.183953][T18090] ip6gretap0: left promiscuous mode [ 385.212305][T18092] bridge0: port 3(ipvlan2) entered blocking state [ 385.219604][T18092] bridge0: port 3(ipvlan2) entered disabled state [ 385.227901][T18092] ipvlan2: entered allmulticast mode [ 385.233762][T18092] bridge0: entered allmulticast mode [ 385.242387][T18092] ipvlan2: left allmulticast mode [ 385.250981][T18092] bridge0: left allmulticast mode [ 385.281366][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3989'. [ 385.476669][T18095] bond28: (slave vxcan9): The slave device specified does not support setting the MAC address [ 385.490287][T18095] bond28: (slave vxcan9): Error -95 calling set_mac_address [ 385.506421][T18104] 8021q: VLANs not supported on ip6gre0 [ 385.512791][T18105] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3992'. [ 385.530246][T18104] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.3993'. [ 385.566154][T18104] openvswitch: netlink: Message has 8 unknown bytes. [ 385.593439][T18108] netlink: 'syz.2.3992': attribute type 12 has an invalid length. [ 385.705257][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 385.807061][T18124] FAULT_INJECTION: forcing a failure. [ 385.807061][T18124] name failslab, interval 1, probability 0, space 0, times 0 [ 385.820148][T18124] CPU: 1 UID: 0 PID: 18124 Comm: syz.1.3996 Not tainted syzkaller #0 PREEMPT(full) [ 385.820177][T18124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.820190][T18124] Call Trace: [ 385.820198][T18124] [ 385.820209][T18124] dump_stack_lvl+0x189/0x250 [ 385.820237][T18124] ? __pfx____ratelimit+0x10/0x10 [ 385.820269][T18124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.820291][T18124] ? __pfx__printk+0x10/0x10 [ 385.820322][T18124] ? __pfx___might_resched+0x10/0x10 [ 385.820350][T18124] ? fs_reclaim_acquire+0x7d/0x100 [ 385.820382][T18124] should_fail_ex+0x414/0x560 [ 385.820421][T18124] should_failslab+0xa8/0x100 [ 385.820449][T18124] kmem_cache_alloc_node_noprof+0x77/0x710 [ 385.820473][T18124] ? __alloc_skb+0x112/0x2d0 [ 385.820510][T18124] __alloc_skb+0x112/0x2d0 [ 385.820543][T18124] tipc_nl_compat_doit+0x15d/0x5f0 [ 385.820575][T18124] ? is_bpf_text_address+0x26/0x2b0 [ 385.820607][T18124] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 385.820646][T18124] ? apparmor_capable+0x137/0x1b0 [ 385.820677][T18124] ? bpf_lsm_capable+0x9/0x20 [ 385.820695][T18124] ? security_capable+0x7e/0x2e0 [ 385.820726][T18124] tipc_nl_compat_recv+0x83c/0xbe0 [ 385.820760][T18124] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 385.820786][T18124] ? __mutex_trylock_common+0x153/0x260 [ 385.820821][T18124] ? __pfx___mutex_trylock_common+0x10/0x10 [ 385.820850][T18124] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 385.820873][T18124] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 385.820919][T18124] ? trace_contention_end+0x39/0x120 [ 385.820962][T18124] genl_family_rcv_msg_doit+0x215/0x300 [ 385.820997][T18124] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 385.821045][T18124] ? stack_trace_save+0x9c/0xe0 [ 385.821074][T18124] genl_rcv_msg+0x60e/0x790 [ 385.821107][T18124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.821128][T18124] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 385.821176][T18124] netlink_rcv_skb+0x208/0x470 [ 385.821203][T18124] ? __lock_acquire+0xab9/0xd20 [ 385.821230][T18124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.821256][T18124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.821309][T18124] ? down_read+0x1ad/0x2e0 [ 385.821336][T18124] genl_rcv+0x28/0x40 [ 385.821356][T18124] netlink_unicast+0x82f/0x9e0 [ 385.821395][T18124] ? __pfx_netlink_unicast+0x10/0x10 [ 385.821424][T18124] ? netlink_sendmsg+0x642/0xb30 [ 385.821450][T18124] ? skb_put+0x11b/0x210 [ 385.821484][T18124] netlink_sendmsg+0x805/0xb30 [ 385.821525][T18124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.821559][T18124] ? aa_sock_msg_perm+0xf1/0x1d0 [ 385.821585][T18124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.821611][T18124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.821642][T18124] __sock_sendmsg+0x21c/0x270 [ 385.821672][T18124] ____sys_sendmsg+0x505/0x830 [ 385.821710][T18124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.821754][T18124] ? import_iovec+0x74/0xa0 [ 385.821786][T18124] ___sys_sendmsg+0x21f/0x2a0 [ 385.821811][T18124] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.821885][T18124] ? __fget_files+0x2a/0x420 [ 385.821910][T18124] ? __fget_files+0x3a0/0x420 [ 385.821949][T18124] __x64_sys_sendmsg+0x19b/0x260 [ 385.821973][T18124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.822006][T18124] ? __pfx_ksys_write+0x10/0x10 [ 385.822034][T18124] ? do_syscall_64+0xbe/0xfa0 [ 385.822060][T18124] do_syscall_64+0xfa/0xfa0 [ 385.822079][T18124] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.822099][T18124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.822120][T18124] ? clear_bhb_loop+0x60/0xb0 [ 385.822145][T18124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.822165][T18124] RIP: 0033:0x7f9a0258efc9 [ 385.822185][T18124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.822204][T18124] RSP: 002b:00007f9a03461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.822229][T18124] RAX: ffffffffffffffda RBX: 00007f9a027e5fa0 RCX: 00007f9a0258efc9 [ 385.822244][T18124] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 385.822258][T18124] RBP: 00007f9a03461090 R08: 0000000000000000 R09: 0000000000000000 [ 385.822271][T18124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.822284][T18124] R13: 00007f9a027e6038 R14: 00007f9a027e5fa0 R15: 00007fff080fe1d8 [ 385.822323][T18124] [ 386.568017][T18135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4004'. [ 386.603077][T18135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4004'. [ 386.640895][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 386.786648][T18138] bond24: (slave vxcan5): The slave device specified does not support setting the MAC address [ 386.800705][T18138] bond24: (slave vxcan5): Error -95 calling set_mac_address [ 386.835818][T18146] 8021q: VLANs not supported on ip6gre0 [ 386.904811][T18146] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.4007'. [ 386.925615][T18146] openvswitch: netlink: Message has 8 unknown bytes. [ 387.228349][T18166] rdma_rxe: rxe_newlink: failed to add lo [ 387.239004][T18166] netlink: 'syz.2.4017': attribute type 12 has an invalid length. [ 387.290875][T18166] bond15: option primary_reselect: invalid value (255) [ 387.298353][T18169] netlink: 'syz.4.4016': attribute type 5 has an invalid length. [ 387.317364][T18166] bond15 (unregistering): Released all slaves [ 387.417372][T18177] sctp: [Deprecated]: syz.1.4019 (pid 18177) Use of int in maxseg socket option. [ 387.417372][T18177] Use struct sctp_assoc_value instead [ 387.639649][T18196] openvswitch: netlink: Message has 8 unknown bytes. [ 387.650584][T18182] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address [ 387.662663][T18182] bond23: (slave vxcan3): Error -95 calling set_mac_address [ 387.687931][T18191] 8021q: VLANs not supported on ip6gre0 [ 387.997898][T18209] netlink: 'syz.1.4026': attribute type 6 has an invalid length. [ 388.343625][ T31] INFO: task kworker/0:1H:56 blocked for more than 143 seconds. [ 388.358035][ T31] Not tainted syzkaller #0 [ 388.373088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.392150][ T31] task:kworker/0:1H state:D stack:25768 pid:56 tgid:56 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 388.412073][ T31] Workqueue: kblockd blk_mq_requeue_work [ 388.418007][ T31] Call Trace: [ 388.421328][ T31] [ 388.455220][ T31] __schedule+0x1798/0x4cc0 [ 388.469067][ T31] ? __lock_acquire+0xab9/0xd20 [ 388.488070][ T31] ? __pfx___schedule+0x10/0x10 [ 388.509445][ T31] ? schedule+0x91/0x360 [ 388.524380][ T31] schedule+0x165/0x360 [ 388.535732][ T31] schedule_timeout+0x12b/0x270 [ 388.549023][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 388.561768][ T31] ? __pfx_process_timeout+0x10/0x10 [ 388.571933][ T31] ? prepare_to_wait_event+0x437/0x480 [ 388.581152][ T31] nbd_queue_rq+0x662/0xf10 [ 388.590101][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 388.595595][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 388.602219][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 388.608357][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 388.614257][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 388.620696][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 388.627420][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 388.634496][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 388.641772][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 388.647808][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 388.654439][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 388.660280][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 388.673099][ T31] blk_mq_run_hw_queues+0x33e/0x430 [ 388.685850][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 388.694275][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.699944][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.705591][ T31] blk_mq_requeue_work+0x717/0x760 [ 388.711209][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 388.717315][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.723142][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 388.729391][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 388.735838][ T31] process_scheduled_works+0xae1/0x17b0 [ 388.742087][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.755478][ T31] worker_thread+0x8a0/0xda0 [ 388.760546][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.767591][ T31] ? __kthread_parkme+0x7b/0x200 [ 388.772897][ T31] kthread+0x711/0x8a0 [ 388.777373][ T31] ? __pfx_worker_thread+0x10/0x10 [ 388.782836][ T31] ? __pfx_kthread+0x10/0x10 [ 388.787771][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.793466][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.799138][ T31] ? __pfx_kthread+0x10/0x10 [ 388.803923][ T31] ret_from_fork+0x4bc/0x870 [ 388.808558][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 388.814030][ T31] ? __switch_to_asm+0x39/0x70 [ 388.818949][ T31] ? __switch_to_asm+0x33/0x70 [ 388.823972][ T31] ? __pfx_kthread+0x10/0x10 [ 388.828648][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.833814][ T31] [ 388.837615][ T31] [ 388.837615][ T31] Showing all locks held in the system: [ 388.863046][ T31] 1 lock held by khungtaskd/31: [ 388.868108][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 388.893110][ T31] 4 locks held by kworker/0:1H/56: [ 388.898284][ T31] #0: ffff88814169c948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 388.943093][ T31] #1: ffffc9000131fba0 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 388.975512][ T31] #2: ffff888024b66190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 388.996651][ T31] #3: ffff888024ea06b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 389.008837][ T31] 2 locks held by getty/5588: [ 389.014749][ T31] #0: ffff88802fd690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.025498][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 389.036392][ T31] 1 lock held by udevd/5881: [ 389.041462][ T31] #0: ffff888024cb2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 389.052325][ T31] 5 locks held by syz.4.4030/18224: [ 389.058527][ T31] 2 locks held by sed/18244: [ 389.064022][ T31] [ 389.066528][ T31] ============================================= [ 389.066528][ T31] [ 389.078504][ T31] NMI backtrace for cpu 1 [ 389.078524][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.078546][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.078560][ T31] Call Trace: [ 389.078567][ T31] [ 389.078576][ T31] dump_stack_lvl+0x189/0x250 [ 389.078607][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.078629][ T31] ? __pfx__printk+0x10/0x10 [ 389.078663][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 389.078692][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 389.078722][ T31] ? __pfx__printk+0x10/0x10 [ 389.078747][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.078774][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.078802][ T31] watchdog+0xf60/0xfa0 [ 389.078835][ T31] ? watchdog+0x1e2/0xfa0 [ 389.078867][ T31] kthread+0x711/0x8a0 [ 389.078904][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.078928][ T31] ? __pfx_kthread+0x10/0x10 [ 389.078951][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.078980][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.078999][ T31] ? __pfx_kthread+0x10/0x10 [ 389.079021][ T31] ret_from_fork+0x4bc/0x870 [ 389.079052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.079085][ T31] ? __switch_to_asm+0x39/0x70 [ 389.079108][ T31] ? __switch_to_asm+0x33/0x70 [ 389.079129][ T31] ? __pfx_kthread+0x10/0x10 [ 389.079151][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.079191][ T31] [ 389.079200][ T31] Sending NMI from CPU 1 to CPUs 0: [ 389.234483][ C0] NMI backtrace for cpu 0 [ 389.234503][ C0] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 389.234523][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.234534][ C0] Workqueue: bat_events batadv_tt_purge [ 389.234565][ C0] RIP: 0010:__kasan_check_byte+0x2c/0x40 [ 389.234588][ C0] Code: 40 d6 41 56 53 48 89 f3 49 89 fe e8 2e 15 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 c6 03 00 00 89 d8 <5b> 41 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 [ 389.234603][ C0] RSP: 0018:ffffc9000211f908 EFLAGS: 00000202 [ 389.234618][ C0] RAX: 0000000000000001 RBX: ffffffff8b4eb616 RCX: 4f81e032f130f600 [ 389.234630][ C0] RDX: 0000000000000000 RSI: ffffffff8b4eb616 RDI: 1ffff1100a916ecb [ 389.234641][ C0] RBP: ffffffff8b1d0f1b R08: 0000000000000001 R09: 0000000000000000 [ 389.234652][ C0] R10: dffffc0000000000 R11: fffffbfff1f3c28f R12: 0000000000000000 [ 389.234663][ C0] R13: ffff8880548b7658 R14: ffff8880548b7658 R15: 0000000000000001 [ 389.234676][ C0] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 389.234690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.234702][ C0] CR2: 00007f833f810eb8 CR3: 00000000290a6000 CR4: 00000000003526f0 [ 389.234719][ C0] Call Trace: [ 389.234727][ C0] [ 389.234735][ C0] lock_acquire+0x8d/0x360 [ 389.234757][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 389.234779][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 389.234802][ C0] ? batadv_tt_purge+0x11b/0x9e0 [ 389.234824][ C0] _raw_spin_lock_bh+0x36/0x50 [ 389.234846][ C0] ? batadv_tt_purge+0x11b/0x9e0 [ 389.234868][ C0] batadv_tt_purge+0x11b/0x9e0 [ 389.234894][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 389.234916][ C0] process_scheduled_works+0xae1/0x17b0 [ 389.234950][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.234979][ C0] worker_thread+0x8a0/0xda0 [ 389.235012][ C0] kthread+0x711/0x8a0 [ 389.235030][ C0] ? __pfx_worker_thread+0x10/0x10 [ 389.235051][ C0] ? __pfx_kthread+0x10/0x10 [ 389.235068][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.235090][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.235104][ C0] ? __pfx_kthread+0x10/0x10 [ 389.235120][ C0] ret_from_fork+0x4bc/0x870 [ 389.235150][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 389.235174][ C0] ? __switch_to_asm+0x39/0x70 [ 389.235192][ C0] ? __switch_to_asm+0x33/0x70 [ 389.235209][ C0] ? __pfx_kthread+0x10/0x10 [ 389.235225][ C0] ret_from_fork_asm+0x1a/0x30 [ 389.235252][ C0] [ 389.236465][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 389.493595][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.502885][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.513319][ T31] Call Trace: [ 389.516640][ T31] [ 389.519586][ T31] dump_stack_lvl+0x99/0x250 [ 389.524276][ T31] ? __asan_memcpy+0x40/0x70 [ 389.529415][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.534620][ T31] ? __pfx__printk+0x10/0x10 [ 389.539227][ T31] vpanic+0x237/0x6d0 [ 389.543307][ T31] ? __pfx_vpanic+0x10/0x10 [ 389.547908][ T31] ? preempt_schedule_common+0x83/0xd0 [ 389.553460][ T31] panic+0xb9/0xc0 [ 389.557194][ T31] ? __pfx_panic+0x10/0x10 [ 389.561716][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 389.567101][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 389.573285][ T31] watchdog+0xf9f/0xfa0 [ 389.577465][ T31] ? watchdog+0x1e2/0xfa0 [ 389.581809][ T31] kthread+0x711/0x8a0 [ 389.585909][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.590594][ T31] ? __pfx_kthread+0x10/0x10 [ 389.595287][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.600676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.605894][ T31] ? __pfx_kthread+0x10/0x10 [ 389.610533][ T31] ret_from_fork+0x4bc/0x870 [ 389.615166][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.620342][ T31] ? __switch_to_asm+0x39/0x70 [ 389.625206][ T31] ? __switch_to_asm+0x33/0x70 [ 389.630067][ T31] ? __pfx_kthread+0x10/0x10 [ 389.634854][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.639818][ T31] [ 389.643235][ T31] Kernel Offset: disabled [ 389.647618][ T31] Rebooting in 86400 seconds..