last executing test programs: 25.165741807s ago: executing program 0 (id=17315): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x2140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYBLOB="d2f615268322ff3d8f16dfacb8d1903afe93ddc8bec484cd6cc4328004c2d4d44e74988360327bce901c4f68f18485385317cf1e415f77acca91ef76c03e90c94bd6ac217697f41313abefdf58e789374bae034bc4ed893c0ebff4252ffdce4f8a3514385e7c01e03121371655b25d0346b72f08299f81da26cdff76c8e0ec02e5c468d6b5ec9af2f23c2016ebe6e29e64fbc9176543b085d7587d883d80d012e13010538692fac18aa3fe740f70f98eb85392fe591b64", @ANYRESHEX=0x0], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newnexthop={0x50, 0x68, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x2a}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_GROUP={0x14, 0x2, [{0x0, 0x3}, {0x0, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x80) 25.003929931s ago: executing program 0 (id=17320): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4c00, 0x0) write$tun(r2, &(0x7f0000000200)={@void, @void, @mpls={[{}], @ipv4=@icmp={{0x18, 0x4, 0x1, 0x2, 0x68, 0x65, 0x0, 0x1, 0x1, 0x0, @multicast1, @multicast2, {[@noop, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x6, 0x11, "7917379cd4ff52598c6234ef131d44"}, {0x2, 0xe, "24799a8725eb0cdc025353f6"}, {0x1, 0x4, "0dca"}]}, @lsrr={0x83, 0xb, 0xf4, [@dev={0xac, 0x14, 0x14, 0x25}, @remote]}, @timestamp={0x44, 0x14, 0x47, 0x0, 0x7, [0x11cc, 0x1, 0xcc, 0x2]}]}}, @info_request={0xf, 0x0, 0x0, 0x4, 0x7}}}}, 0x6c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001400000002801b212a83", 0x2e}], 0x1}, 0x0) (rerun: 32) 24.263137337s ago: executing program 0 (id=17333): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 23.937080414s ago: executing program 0 (id=17336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xc1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000480)={'macvlan0\x00', @remote}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x7, 0x0, {{0x29, 0x4, 0x1, 0xb, 0xa4, 0x66, 0x0, 0xeb, 0x701e0a1465e26b77, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x38, 0x3, 0x2, [{@remote, 0x9}, {@multicast2, 0xffffffff}, {@local, 0xfffffffe}, {@rand_addr=0x64010101, 0xd9d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfffffff3}, {@broadcast, 0x9}]}, @rr={0x7, 0x13, 0xb9, [@remote, @local, @remote, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x3, [{@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x1}]}, @rr={0x7, 0x17, 0xc0, [@broadcast, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100]}, @lsrr={0x83, 0xf, 0x27, [@dev={0xac, 0x14, 0x14, 0x3c}, @remote, @private=0xa010100]}, @lsrr={0x83, 0x7, 0x46, [@private=0xa010106]}]}}}}}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000001"], 0x26}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x4}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @ptr={0xb, 0x0, 0x0, 0x2, 0x1}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x30, 0x71, 0x61, 0x2e, 0x30]}}, &(0x7f0000000280)=""/206, 0x5b, 0xce, 0x0, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xa6, 0x2, 0x2, 0x4000, r1, 0x92, '\x00', r2, r4, 0x5, 0x5, 0x5, 0x8}, 0x50) 23.710450628s ago: executing program 0 (id=17337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}]}, &(0x7f0000000240)=0x10) 23.542551109s ago: executing program 0 (id=17339): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x2140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB="9df543514ac20b80c669a0258654909769367af2ee2aeb1a1e7bfe602e458beff703c2ec80ca7c105963899bf00b3a938223e42034f2e2e58dab578c1c2d5799f76b871588d78efb23d8d19ba4790cf0446efe1b18559f32613baaade3dbbdff3419b205169e93fb94a3d7708cd62b03049e7c061627326ca0e9d31aab8bbf7cf7c415f2d602c546070182e152aaf2bbf8f5475ffd32b911fcb029767db6e5d6a3dc0a2633893e5ca52e34b315914c57d53e27a296b837ba4bf105f1b0873eac528dddbb558cd36974dfae89076c03a836dc76eb749f008c95e0d3002e3fef00a79ab4ecfe40a4863a146f18f6aa3e6354dd99e1f0b6c27118e9", @ANYRES8=0x0, @ANYBLOB="d2f615268322ff3d8f16dfacb8d1903afe93ddc8bec484cd6cc4328004c2d4d44e74988360327bce901c4f68f18485385317cf1e415f77acca91ef76c03e90c94bd6ac217697f41313abefdf58e789374bae034bc4ed893c0ebff4252ffdce4f8a3514385e7c01e03121371655b25d0346b72f08299f81da26cdff76c8e0ec02e5c468d6b5ec9af2f23c2016ebe6e29e64fbc9176543b085d7587d883d80d012e13010538692fac18aa3fe740f70f98eb85392fe591b64", @ANYRESHEX=0x0], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newnexthop={0x50, 0x68, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x2a}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_GROUP={0x14, 0x2, [{0x0, 0x3}, {0x0, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x80) 16.888420578s ago: executing program 2 (id=17453): r0 = socket$inet(0x2, 0x3, 0x4008) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 16.887839167s ago: executing program 4 (id=17454): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x10) (fail_nth: 17) 16.411565365s ago: executing program 2 (id=17456): syz_emit_ethernet(0xa56, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 16.386051509s ago: executing program 4 (id=17457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xffffffffffffff40, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 16.374095483s ago: executing program 2 (id=17458): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x3}, 0x4) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x48) 16.271893757s ago: executing program 4 (id=17459): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000001c0000000000000072013b000000000095000000000000e5443b91c64a90c5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 16.138829744s ago: executing program 4 (id=17460): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.066113406s ago: executing program 2 (id=17463): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000041190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 15.98160744s ago: executing program 4 (id=17465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000040000000800000002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r2, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002d80)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast1}}, &(0x7f0000002e80)=0xe8) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r9}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003080)={0x0}, &(0x7f00000030c0)=0xc) r11 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003200)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000003300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003340)={0x0, 0x0, 0x0}, &(0x7f0000003380)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000003140)=[{&(0x7f00000004c0)={0x11f0, 0x38, 0x4, 0x70bd29, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0x46, 0x0, 0x0, @u32=0x7ff}, @generic="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", @nested={0x8, 0x26, 0x0, 0x1, [@nested={0x4, 0x16}]}, @generic="401e7dfcf437a43e19138027321c7fa4a6274cd8d33b0a5a3270be123fac3c19bf514916c9df06067631f64375a63c2e28756ed2e72081300fc6842720b9bfa9ab18881351cdc2874e9b2f13ef74a753824e858c683f18605be44842e4fa332b02290187d58ebb3e0a0e6ba2d9c72d014d9536223792ecb0b20919d8dad3c36b62fa27e119ae054d5e0208537b05ddf61a815f38b25d1254fa554a42510054f5d3548c5f5850c41b0ce84dcbaa791756e9af2ed0", @generic="a59e23a869d1f60ca538091cc9a8ecb8b71aeff86457562b0a3e173945a2f16945e4"]}, 0x11f0}, {&(0x7f00000000c0)={0xa0, 0x24, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@generic="2d3bb7d2814adfdd3b2ab8528f68d2d388ba76bed8b318af5e8e403570ded21c5dcbc8e38dc1485692dd14c7d5a25783c6dbfc4ee3b2ba83e99a4f676b8929ffb96bd0047c7e6e69e1a985d4a318e058e8c0948976a5bcfd0d3d2530b5bde3822fdfb501e8560a91539f5639b3e86b1617ff02059a335850b6f0da9759debc4ac68e2f3384b09b7c4879474b7c"]}, 0xa0}, {&(0x7f00000002c0)={0x188, 0x23, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@generic="29e21f3aa2b89ebb6bf0405e3c09398184bc09f76d928a2bea188948746de9ecd90939b9afa10aaa8933d775fd6eb4de6ca758b3d38112e85eba4024a06e32985fb26a5efba9a329613170ababe82196e95b2bc7bc4592e4746acfd972881632b46e30ab6202804c017997014f28b05afeb6c6de80411231fb91d877b1d0c08eed", @typed={0x5, 0x106, 0x0, 0x0, @str='\x00'}, @typed={0x35, 0x0, 0x0, 0x0, @binary="02e3e9773283fb040765bc8599b96123e4f06aaf017b82984cd7b2d82ae5db7a0a325cd4f3d6f7025711d2818cfd31de2c"}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@local}, @generic="5f54ed400a04d66fb2d810eb1b6067ccacf11e3aae8fafd6d609c01e39e02725bce26b6bfdcfa8569c6f3863574ff24811dd0e2b611e9cebc9bd94f2c733cac4778b9328abd135bf8c79804fac800759999ee32212938364760c845bb98eab74013c6fb0ac2ed85f0803df1978d7fd808692b4fcadaffbfd98fcb5becf04fbac3da2d2a8f672365ce8cd24989fb593aabcd0d717997c590f25850b9561", @typed={0x8, 0x4d, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r1}]}, 0x188}, {&(0x7f00000016c0)={0x100, 0x28, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@generic="59110e8054de1cb9ba70ef047fad", @generic="ce38055593d317fd436a95e4093f124a21ffb7ff602ec2d8b99002dbb427f40e2e66b8cf43197485cc5f8da981c1522157df56e55b08c2f996f7fce9b24f26531829c0e10c0b3212b51cc33f443d264fe45b77c549e6cec6cca8877faa69b2ef9e654eb768893d14fad83d7d31faabca1689fc614701576d0d0d9e7f84c60a91c73a870399595d8092d05e1a4d0fcea182ac47bfcbd7b0376c8c4d3b9ab7de67e4f5beb8a7512f4724b908cb00279652040b1b30538d0af6d42a9bd8ec3bef5c99bd5a3308dd0ef7db04e7dad0379ce2bd4f1de06182b2bc1b8b0031286971"]}, 0x100}, {&(0x7f0000000180)={0x20, 0x17, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@generic="3f409eaada9e06fb2f9d27b68110"]}, 0x20}, {&(0x7f00000017c0)={0x13f0, 0x39, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x16f, 0x5a, 0x0, 0x1, [@nested={0x4, 0xe8}, @generic="d189d4e3c80097ebcc2a6cf2dc418022b0a9241e8db2143482492615bef1985db994130d3b511875fd7b0548c59db408c422579b4b4888dac85003ed1466371e68e81c244a9ffd0f1db4160f3e445f57bdc07acf5a0b50c2aaf0290f690dd4ce4fb48b17e0f357b55d0ffe4b2066466ed3d08cc53a6803fe7725a9ab68d558a8c45289d9f2cd80b914736fa018e54e4fbee7c61795bc3a50744dd0d6bec605a53152bd60d0d228bb926a30d5325a687c7082ef47e3f2ae96f7b60a63cc0a791778f91eefa5d4f89104cc1cd52aad1fdbff6cab3266e7010a7fd908", @nested={0x4, 0x64}, @typed={0x8, 0xd2, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x4d, 0x0, 0x0, @pid=r3}, @typed={0x5, 0x11, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xbd}, @typed={0x67, 0x109, 0x0, 0x0, @binary="418013c76b76778f80fcd1fa9aded8f0794ae85f1e13966eed651ca962e8fb2f230611143856344b0f58200fd117cdc486a89c55d143e9f4e249b5bae1ad14d0469abb82cfcb6ada05da266fe00aa5ddece1680af81af07f72b09abf141116676580b1"}, @nested={0x4, 0x2}]}, @nested={0x1170, 0xf3, 0x0, 0x1, [@nested={0x4, 0x115}, @typed={0x6, 0xca, 0x0, 0x0, @str='\xb2\x00'}, @nested={0x4, 0x125}, @generic="efd6aca5fe5745925bbc868cb634417c994ace1dfc617f6ae6f07e6bdc81fef9886fd7ada208f00f869b17428e083e10afd7d4a789e1050cf403d19acd35be3f45a7eccd79e916ee769d29a85387869a338ccbb036f3032a930df88e633aab9a02823f186a88603f22f15992603695a2600f830c345be4668bc39422d0e01edd50ef30fa0462df0031f54e87c93fe97b58673dfafd24b95b16f0aaaf26599741ab483d2527ea80bf03bccc326f1454e2dc13df9a277b0b7e0beb3da1e5c1dd04edd2013ec97da28ef732739370f24f", @generic="9d3573d2b714b7f666f00ee4ade5ccef5f36ea6a302fca89504d850a29ee2888f70d90dc41fd53f7a8fe09ec1b18989c1e30f69160d91fbe4f7bfdfb6b7fbdd11efcf59b238aa40a177173910f10ab2d608580f84f4a32a50363ed7f65cd284789c8d812e18960e0eb67a1de8df41aa073a952dd8d4fbba6173a3808c81b1e7671567b481e7f6d355f24f8d323", @generic="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"]}, @generic="bf2bc42e27cfa6f3e59cff6a43d0dc82260156f3ea6826670797f357cf67a9de75e644706a04d26ad2e4856430e5c347f0b966ca00ca57417e602cd2114c4f3ad294d5f68c316dc10888fa0ecca097956ab44110358bc9a4a8dbbd9de97995d2c09c0d31734d999cf077a8b2bad15a8da7146213ca628c1064320e4de4642d86371b35d4cf37e42b3478ca2512bc5c1f092d018b4d8bc4bcbaaf0f18df94ca2d1c1874a383e1b8768add425666e846aaf501899bf2ef8d4a1900051b755588506bbe2fa09146e75257f51565c98c1b0315f9bdbd387b18fbf6a2edf7157fa0f99a53ebd6038a934bcde67df7c548ebbf224900f2702d5fbb", @typed={0x5, 0x58, 0x0, 0x0, @str='\x00'}]}, 0x13f0}, {&(0x7f0000002bc0)={0x168, 0x2c, 0x400, 0x70bd28, 0x25dfdbfc, "", [@typed={0x14, 0xab, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x71, 0x0, 0x0, @u32=0xff}, @typed={0x1e, 0xec, 0x0, 0x0, @binary="6654895194b32287e0bc2bb1279144e48da26a1e87345be96644"}, @generic="2a0804a7d0bd6cf2ed46478418802c3d5b52dd483ee6d9a19c12148b25b24f2476", @generic="07fff4032b7c2c2ef6a60c0e26a8885e3545f18eef074edab79bd9e798857af5b95daf88f3852fb537bf", @nested={0xd0, 0xd6, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x8e}, @typed={0x8, 0x126, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x14a}, @generic="af43c5a8d1dee3eca74fad0e8820fb1eeecdd1a6", @generic="ca24dc5bf159e243fa4980e66ce3fb9978f829550248544cb8178f78b1bf9eb7411627804e75333ebfa9c4c5cfb02b6da68a74ef80f1dcd4f076ab924b4be4fa430afbe7a73bc8044e98d406f6404eda34a252fde520bce9bd287a58420bac7b534ba73b05de3ee63640e37f4a69a9d6e2e1dfaa37bef481aceb8373e79dc418e902db53c852f661576daf75531d2e7e", @nested={0x4, 0xf5}, @nested={0x4, 0x143}]}]}, 0x168}, {&(0x7f0000002d40)={0x34, 0x22, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc, 0x118, 0x0, 0x1, [@nested={0x4, 0x70}, @nested={0x4, 0x65}]}, @generic="36faeb4c67f8863ab57715695de566214c70beff7be9b5"]}, 0x34}, {&(0x7f0000002ec0)={0x1a4, 0x29, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x189, 0x115, 0x0, 0x1, [@nested={0x4, 0x59}, @typed={0x8, 0x34, 0x0, 0x0, @uid=r7}, @typed={0x7, 0x7a, 0x0, 0x0, @str='[\'\x00'}, @typed={0x8, 0x13b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xef}, @generic="46200a1dc694c8741ac614951cb6bbd631eee32b6857b96d75676ce6b1717d09db04feeba55acd0ef32840d1573f51568abdcfc6018f3e482b3c1f364e0a1f92719b07eafca01d45dfa11f1f3bc11d21aaadf522dd152ad6a34d6adfebb17cdaa4dec41160ec0183d558b270fb8b07f32848969ef9eb046fc405436fc9de581b8f9ab7bb9ee5cfd299268983ac5e4c1bf6cf4e973a", @nested={0x4, 0xcf}, @nested={0x4, 0x2f}, @generic="9b5c331c27f1adbb0c1449cc516f10628235af335b8c7a6ccabca88179911d1a8b18e922e7bfaad50de7e5cada24168eef689f858c63b55ec1bfe9f3bdd0f835269767d7a9fd4e4a2205b789994732d4c6393d35746f1b32950f27fb20bdfa34cf1af427d00e2458b69b9bbeb468a048386eb3a1f6eed7a053e3b0fc7821e3c03158ac83e719ea352b88d917789cfe22b237e988147f3e7cb2850226e5ef550838295ee8e567fd5f57ab1670630e1f42d4335cc3f374df8d33c1582e26c30a177631b14708fa6a7d"]}, @typed={0x8, 0xe3, 0x0, 0x0, @uid=r9}]}, 0x1a4}, {&(0x7f0000003100)={0x18, 0x11, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x60, 0x0, 0x0, @pid=r10}]}, 0x18}], 0xa, &(0x7f00000033c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x1}, 0x20000080) 15.971167461s ago: executing program 2 (id=17466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414280000"], 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3c}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 15.92673982s ago: executing program 3 (id=17467): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 15.894570786s ago: executing program 4 (id=17469): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r3], 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r6, 0xb1, 0x10}, 0xc) 15.830815904s ago: executing program 2 (id=17470): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 15.801688155s ago: executing program 3 (id=17472): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0xa6ffffff, 0x0, 0x20000000}, 0x2400c840) 15.698824511s ago: executing program 3 (id=17474): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.69005107s ago: executing program 1 (id=17475): socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x8000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x44094) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.657157425s ago: executing program 3 (id=17476): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x24, 0x22, 0x601, 0x70bd2a, 0xfffffffc, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) socketpair(0x8, 0x6, 0x4, &(0x7f0000000080)) 15.590847684s ago: executing program 1 (id=17477): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1c, 0x4, 0x4, 0x6}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) 15.590440218s ago: executing program 3 (id=17478): socket(0x10, 0x3, 0x0) r0 = gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc40}, 0x0) 15.576792205s ago: executing program 1 (id=17479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newnexthop={0x38, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8000}]}]}, 0x38}, 0x1, 0x0, 0xa00000000000000}, 0x4000) 15.534091718s ago: executing program 1 (id=17480): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) 15.499421738s ago: executing program 3 (id=17481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="41000000000201010000000000a51d4a9970873a01deeebc92000000020000402400028014000180080001000000000008000200ac1e00010c00028005000100018000"/76], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20088800}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {0xf}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) read(r2, 0x0, 0x0) read(r2, 0x0, 0x0) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) r12 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r12, 0x0, 0x20, 0x0, 0x4) 15.439785961s ago: executing program 1 (id=17482): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 15.438591449s ago: executing program 1 (id=17483): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@delchain={0x24, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x650}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a40)={0x1e, 0x6, {0x81, @struct={0x4, 0xa721}, 0x0, 0x3800000000000, 0x1, 0xf63, 0x9, 0xde1, 0x488, @usage=0x8, 0x0, 0x9, [0x6e, 0x9, 0x5, 0x3, 0x6, 0xdd46]}, {0x7, @usage=0x1, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x3, 0x4, 0x4, @struct={0x2}, 0x6, 0x6, [0x55, 0x0, 0x7fffffff, 0x8, 0x6, 0xffffffffffffff09]}, {0xd, @usage=0x7, 0x0, 0x6, 0x2, 0xffffffff, 0x9, 0x4, 0x10, @usage=0xfffffffffffff800, 0x0, 0x2, [0xd, 0x8, 0xffffffff, 0x46, 0x0, 0x6]}, {0x9, 0x80000000, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000e40)={r13, 0xdd54, 0x1, [0x73, 0x3, 0x8, 0x1, 0x1], [0xfff, 0x7f, 0x8000000000000000, 0x4, 0x0, 0x1, 0x6, 0x4, 0x4, 0x1, 0x0, 0x9, 0xc, 0x5d, 0x9, 0x7, 0x6, 0x80000001, 0x0, 0x8001, 0x7, 0x400, 0x1, 0xa, 0x3, 0xf1, 0x8000, 0x4, 0x5, 0x795, 0x8000000000000000, 0x7, 0x9, 0x1c7a, 0x800, 0x9, 0x7, 0x2903, 0xfffffffffffffff9, 0x5, 0xe, 0x6, 0x3718, 0x791e, 0x7, 0x2, 0x8, 0x4, 0x7, 0x5, 0x6, 0x7, 0x0, 0xfff0000000000000, 0x4c, 0x9b, 0x3, 0x3, 0x9f42, 0x8000, 0x7fff, 0x100000000, 0x5, 0x2, 0x1000, 0x1, 0x3, 0x7, 0xa02, 0x8000000000000000, 0x97, 0x100000000, 0x10000, 0xffffffffffffff01, 0x0, 0x63dd, 0x1, 0x101, 0xffffffff, 0x5, 0x1, 0x10c, 0x3f, 0x1, 0x2, 0x2bd6a591, 0x1, 0x7ff, 0x7, 0x0, 0x5, 0x87, 0x200, 0x8, 0x4, 0x8, 0x10a, 0x5457, 0x2, 0xc98, 0x4000000000000008, 0x200, 0x1, 0x5, 0xebb, 0x9, 0x28, 0xfffffffffffffffe, 0xf0, 0x7, 0x2, 0x6, 0x1, 0x3, 0x1, 0xfffffffffffffff9, 0x101, 0xe3, 0x2800000000, 0x8, 0x4]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 8.033716153s ago: executing program 32 (id=17339): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x2140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB="9df543514ac20b80c669a0258654909769367af2ee2aeb1a1e7bfe602e458beff703c2ec80ca7c105963899bf00b3a938223e42034f2e2e58dab578c1c2d5799f76b871588d78efb23d8d19ba4790cf0446efe1b18559f32613baaade3dbbdff3419b205169e93fb94a3d7708cd62b03049e7c061627326ca0e9d31aab8bbf7cf7c415f2d602c546070182e152aaf2bbf8f5475ffd32b911fcb029767db6e5d6a3dc0a2633893e5ca52e34b315914c57d53e27a296b837ba4bf105f1b0873eac528dddbb558cd36974dfae89076c03a836dc76eb749f008c95e0d3002e3fef00a79ab4ecfe40a4863a146f18f6aa3e6354dd99e1f0b6c27118e9", @ANYRES8=0x0, @ANYBLOB="d2f615268322ff3d8f16dfacb8d1903afe93ddc8bec484cd6cc4328004c2d4d44e74988360327bce901c4f68f18485385317cf1e415f77acca91ef76c03e90c94bd6ac217697f41313abefdf58e789374bae034bc4ed893c0ebff4252ffdce4f8a3514385e7c01e03121371655b25d0346b72f08299f81da26cdff76c8e0ec02e5c468d6b5ec9af2f23c2016ebe6e29e64fbc9176543b085d7587d883d80d012e13010538692fac18aa3fe740f70f98eb85392fe591b64", @ANYRESHEX=0x0], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newnexthop={0x50, 0x68, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x2a}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_GROUP={0x14, 0x2, [{0x0, 0x3}, {0x0, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x80) 523.245975ms ago: executing program 33 (id=17470): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 478.895993ms ago: executing program 34 (id=17469): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r3], 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r6, 0xb1, 0x10}, 0xc) 22.849637ms ago: executing program 35 (id=17483): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@delchain={0x24, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78010000160a00000000000000000000000000090401038068000380140001006970365f7674693000000000000000001400010076657468315f746f5f687372000000001400010076657468305f766c616e0000000000001400010076657468315f746f5f627269646765001400010064766d72703000000000000000000000080002400000000490000380140001006261746164765f736c6176655f310000140001006272696467655f736c6176655f300000140001006e6574706369300000000000000000001400010076657468305f746f5f7465616d0000001400010076657468315f6d6163767461700000001400010070696d72656730000000000000000000140001006261746164765f736c6176655f31000008000740000000010900010073797a31000000000900010073797a31000000001c0003800800014000000000080002400000010108000140000000000900020073797a31000000000900020073797a31000000000900010073797a31000000007c000000140a010800000000000000000a0000030900020073797a31000000000c00064000000000000000030800034000000003636320d375727db8103871a49553868ad0610c07344686e1f3b063000900020073797a310000000008000340000000050900020073797a30000000000c000640000000000000000324000000050a01020000000000000000000000000c00024000000000000000020400088028000000050a010200000000000000000100000408000b40000000030900010073797a310000000074010000090a01040000000000000000030000050c000b400000000000000009c4000980080001400000000398000280540001800800014000000fff08000140000000020800014000007fff080001400000000008000140000000080800014000000e800800014000000d0d08000140000000060800014000000e5108000140ffffffff040001803c000180080001400000000708000140ffff12f408000140000000020800014000000008080001400000000208000140ef261eef08000140fffffff80800014000007fff080001400000000c080001400000009a0800014000000ff30400098008000c40000000077c0011800b00010064796e73657400006c0002800800024000000002080004400000000d0c000640fffffffffffffff108000940000000010900010073797a31000000002c0007800b0001006c6f6f6b757000001c0002800800034000000015080005400000000008000440000000030c000640000000000020000008000c40000000034c010000090a010100000000000000000000000308000640000000000c0010400000000000000001100011800b00010072656a65637400000800074000000020f40009809400028014000180080001400000000008000140000000000c00018008000140000000041c00018008000140000000080800014000000005080001400000000034000180080001400000040008000140000000030800014000000000080001400000000308000140000000020800014000000b8b0c000180080001400000000514000180080001400000000008000140000007ff5c0002802400018008000140fffffff30800014000000009080001400000000408000140000001bf3400018008000140000004dc08000140000007ff08000140000000050800014000010001080001400000000708000140000000060800084000000000100011800b00010072656a656374000028010000160a010400000000000000000100000208000740000000010900010073797a3000000000f4000380a400038014000100776c616e310000000000000000000000140001006272696467653000000000000000000014000100766972745f7769666930000000000000140001006261746164765f736c6176655f310000140001006d6163766c616e31000000000000000014000100766c616e30000000000000000000000014000100626174616476300000000000000000001400010067656e657665310000000000000000000800024000005f6e2c000380140001006261746164765f736c6176655f310000140001006970766c616e3000000000000000000018000380140001006d6163767461703000000000000000000c0005400000000000000004140000001100010000000000000000000100000a"], 0x650}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a40)={0x1e, 0x6, {0x81, @struct={0x4, 0xa721}, 0x0, 0x3800000000000, 0x1, 0xf63, 0x9, 0xde1, 0x488, @usage=0x8, 0x0, 0x9, [0x6e, 0x9, 0x5, 0x3, 0x6, 0xdd46]}, {0x7, @usage=0x1, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x3, 0x4, 0x4, @struct={0x2}, 0x6, 0x6, [0x55, 0x0, 0x7fffffff, 0x8, 0x6, 0xffffffffffffff09]}, {0xd, @usage=0x7, 0x0, 0x6, 0x2, 0xffffffff, 0x9, 0x4, 0x10, @usage=0xfffffffffffff800, 0x0, 0x2, [0xd, 0x8, 0xffffffff, 0x46, 0x0, 0x6]}, {0x9, 0x80000000, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000e40)={r13, 0xdd54, 0x1, [0x73, 0x3, 0x8, 0x1, 0x1], [0xfff, 0x7f, 0x8000000000000000, 0x4, 0x0, 0x1, 0x6, 0x4, 0x4, 0x1, 0x0, 0x9, 0xc, 0x5d, 0x9, 0x7, 0x6, 0x80000001, 0x0, 0x8001, 0x7, 0x400, 0x1, 0xa, 0x3, 0xf1, 0x8000, 0x4, 0x5, 0x795, 0x8000000000000000, 0x7, 0x9, 0x1c7a, 0x800, 0x9, 0x7, 0x2903, 0xfffffffffffffff9, 0x5, 0xe, 0x6, 0x3718, 0x791e, 0x7, 0x2, 0x8, 0x4, 0x7, 0x5, 0x6, 0x7, 0x0, 0xfff0000000000000, 0x4c, 0x9b, 0x3, 0x3, 0x9f42, 0x8000, 0x7fff, 0x100000000, 0x5, 0x2, 0x1000, 0x1, 0x3, 0x7, 0xa02, 0x8000000000000000, 0x97, 0x100000000, 0x10000, 0xffffffffffffff01, 0x0, 0x63dd, 0x1, 0x101, 0xffffffff, 0x5, 0x1, 0x10c, 0x3f, 0x1, 0x2, 0x2bd6a591, 0x1, 0x7ff, 0x7, 0x0, 0x5, 0x87, 0x200, 0x8, 0x4, 0x8, 0x10a, 0x5457, 0x2, 0xc98, 0x4000000000000008, 0x200, 0x1, 0x5, 0xebb, 0x9, 0x28, 0xfffffffffffffffe, 0xf0, 0x7, 0x2, 0x6, 0x1, 0x3, 0x1, 0xfffffffffffffff9, 0x101, 0xe3, 0x2800000000, 0x8, 0x4]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 0s ago: executing program 36 (id=17481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="41000000000201010000000000a51d4a9970873a01deeebc92000000020000402400028014000180080001000000000008000200ac1e00010c00028005000100018000"/76], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20088800}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {0xf}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) read(r2, 0x0, 0x0) read(r2, 0x0, 0x0) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) r12 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r12, 0x0, 0x20, 0x0, 0x4) kernel console output (not intermixed with test programs): 48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.422440][T14321] RSP: 002b:00007fcfb55f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.422460][T14321] RAX: ffffffffffffffda RBX: 00007fcfb75e5fa0 RCX: 00007fcfb738f749 [ 858.422474][T14321] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 858.422487][T14321] RBP: 00007fcfb55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 858.422498][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.422510][T14321] R13: 00007fcfb75e6038 R14: 00007fcfb75e5fa0 R15: 00007ffdefe2f2c8 [ 858.422543][T14321] [ 858.422552][T14321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 858.512114][T14328] netlink: 'syz.2.16177': attribute type 1 has an invalid length. [ 858.798016][T14339] netlink: 'syz.4.16178': attribute type 1 has an invalid length. [ 858.883138][T14330] 8021q: adding VLAN 0 to HW filter on device bond41 [ 858.972923][T14350] FAULT_INJECTION: forcing a failure. [ 858.972923][T14350] name failslab, interval 1, probability 0, space 0, times 0 [ 858.986642][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.1.16184 Not tainted syzkaller #0 PREEMPT(full) [ 858.986668][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 858.986679][T14350] Call Trace: [ 858.986687][T14350] [ 858.986696][T14350] dump_stack_lvl+0x189/0x250 [ 858.986721][T14350] ? __pfx____ratelimit+0x10/0x10 [ 858.986740][T14350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.986760][T14350] ? __pfx__printk+0x10/0x10 [ 858.986789][T14350] ? __pfx___might_resched+0x10/0x10 [ 858.986814][T14350] should_fail_ex+0x414/0x560 [ 858.986844][T14350] should_failslab+0xa8/0x100 [ 858.986868][T14350] __kmalloc_noprof+0xdf/0x800 [ 858.986886][T14350] ? rtm_new_nexthop+0x1b77/0x8130 [ 858.986911][T14350] rtm_new_nexthop+0x1b77/0x8130 [ 858.986938][T14350] ? __lock_acquire+0x6b6/0x2cf0 [ 858.986960][T14350] ? __lock_acquire+0x6b6/0x2cf0 [ 858.986981][T14350] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 858.987035][T14350] ? is_bpf_text_address+0x26/0x2b0 [ 858.987065][T14350] ? is_bpf_text_address+0x292/0x2b0 [ 858.987087][T14350] ? is_bpf_text_address+0x26/0x2b0 [ 858.987110][T14350] ? __lock_acquire+0x6b6/0x2cf0 [ 858.987181][T14350] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 858.987199][T14350] rtnetlink_rcv_msg+0x7cf/0xb70 [ 858.987223][T14350] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 858.987241][T14350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 858.987259][T14350] ? __lock_acquire+0x6b6/0x2cf0 [ 858.987290][T14350] netlink_rcv_skb+0x208/0x470 [ 858.987313][T14350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 858.987333][T14350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.987364][T14350] ? netlink_deliver_tap+0x2e/0x1b0 [ 858.987393][T14350] netlink_unicast+0x82f/0x9e0 [ 858.987423][T14350] ? __pfx_netlink_unicast+0x10/0x10 [ 858.987444][T14350] ? netlink_sendmsg+0x642/0xb30 [ 858.987463][T14350] ? skb_put+0x11b/0x210 [ 858.987486][T14350] netlink_sendmsg+0x805/0xb30 [ 858.987518][T14350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.987542][T14350] ? aa_sock_msg_perm+0xf1/0x1b0 [ 858.987566][T14350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 858.987582][T14350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.987603][T14350] __sock_sendmsg+0x21c/0x270 [ 858.987629][T14350] ____sys_sendmsg+0x505/0x820 [ 858.987655][T14350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.987684][T14350] ? import_iovec+0x74/0xa0 [ 858.987707][T14350] ___sys_sendmsg+0x21f/0x2a0 [ 858.987729][T14350] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.987755][T14350] ? rcu_read_lock_any_held+0xb3/0x120 [ 858.987803][T14350] ? __fget_files+0x2a/0x420 [ 858.987822][T14350] ? __fget_files+0x3a0/0x420 [ 858.987852][T14350] __x64_sys_sendmsg+0x19b/0x260 [ 858.987875][T14350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 858.987904][T14350] ? __pfx_ksys_write+0x10/0x10 [ 858.987925][T14350] ? do_syscall_64+0xbe/0xf80 [ 858.987947][T14350] do_syscall_64+0xfa/0xf80 [ 858.987965][T14350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.987981][T14350] ? clear_bhb_loop+0x60/0xb0 [ 858.988002][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.988018][T14350] RIP: 0033:0x7fb5e598f749 [ 858.988034][T14350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.988049][T14350] RSP: 002b:00007fb5e6798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.988067][T14350] RAX: ffffffffffffffda RBX: 00007fb5e5be5fa0 RCX: 00007fb5e598f749 [ 858.988080][T14350] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 858.988091][T14350] RBP: 00007fb5e6798090 R08: 0000000000000000 R09: 0000000000000000 [ 858.988102][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.988112][T14350] R13: 00007fb5e5be6038 R14: 00007fb5e5be5fa0 R15: 00007fffffe2b0c8 [ 858.988149][T14350] [ 859.011112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 859.362027][ C1] lec:lec_tx_timeout: lec0 [ 859.368304][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 859.387641][T14368] netlink: 'syz.0.16191': attribute type 21 has an invalid length. [ 859.730355][T14388] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 860.043291][T14413] FAULT_INJECTION: forcing a failure. [ 860.043291][T14413] name failslab, interval 1, probability 0, space 0, times 0 [ 860.068751][T14413] CPU: 1 UID: 0 PID: 14413 Comm: syz.1.16205 Not tainted syzkaller #0 PREEMPT(full) [ 860.068779][T14413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.068789][T14413] Call Trace: [ 860.068797][T14413] [ 860.068806][T14413] dump_stack_lvl+0x189/0x250 [ 860.068833][T14413] ? __pfx____ratelimit+0x10/0x10 [ 860.068852][T14413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.068872][T14413] ? __pfx__printk+0x10/0x10 [ 860.068904][T14413] ? __pfx___might_resched+0x10/0x10 [ 860.068929][T14413] should_fail_ex+0x414/0x560 [ 860.068961][T14413] should_failslab+0xa8/0x100 [ 860.068983][T14413] __kmalloc_cache_noprof+0x84/0x700 [ 860.069004][T14413] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 860.069034][T14413] alloc_netdev_mqs+0xbf8/0x11b0 [ 860.069064][T14413] rtnl_create_link+0x31f/0xcf0 [ 860.069095][T14413] rtnl_newlink_create+0x25c/0xb00 [ 860.069130][T14413] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 860.069152][T14413] ? __pfx___mutex_lock+0x10/0x10 [ 860.069181][T14413] ? ns_capable+0x8a/0xf0 [ 860.069202][T14413] rtnl_newlink+0x16e7/0x1c90 [ 860.069243][T14413] ? __pfx_rtnl_newlink+0x10/0x10 [ 860.069262][T14413] ? __lock_acquire+0x6b6/0x2cf0 [ 860.069282][T14413] ? __lock_acquire+0x6b6/0x2cf0 [ 860.069339][T14413] ? is_bpf_text_address+0x26/0x2b0 [ 860.069369][T14413] ? is_bpf_text_address+0x292/0x2b0 [ 860.069391][T14413] ? is_bpf_text_address+0x26/0x2b0 [ 860.069418][T14413] ? __lock_acquire+0x6b6/0x2cf0 [ 860.069440][T14413] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.069465][T14413] ? arch_stack_walk+0xfc/0x150 [ 860.069520][T14413] ? __pfx_rtnl_newlink+0x10/0x10 [ 860.069538][T14413] rtnetlink_rcv_msg+0x7cf/0xb70 [ 860.069561][T14413] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 860.069580][T14413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 860.069598][T14413] ? __lock_acquire+0x6b6/0x2cf0 [ 860.069632][T14413] netlink_rcv_skb+0x208/0x470 [ 860.069656][T14413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 860.069677][T14413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.069710][T14413] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.069740][T14413] netlink_unicast+0x82f/0x9e0 [ 860.069771][T14413] ? __pfx_netlink_unicast+0x10/0x10 [ 860.069790][T14413] ? netlink_sendmsg+0x642/0xb30 [ 860.069809][T14413] ? skb_put+0x11b/0x210 [ 860.069831][T14413] netlink_sendmsg+0x805/0xb30 [ 860.069863][T14413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.069889][T14413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.069913][T14413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.069931][T14413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.069954][T14413] __sock_sendmsg+0x21c/0x270 [ 860.069981][T14413] ____sys_sendmsg+0x505/0x820 [ 860.070009][T14413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.070040][T14413] ? import_iovec+0x74/0xa0 [ 860.070066][T14413] ___sys_sendmsg+0x21f/0x2a0 [ 860.070090][T14413] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.070119][T14413] ? rcu_read_lock_any_held+0xb3/0x120 [ 860.070170][T14413] ? __fget_files+0x2a/0x420 [ 860.070191][T14413] ? __fget_files+0x3a0/0x420 [ 860.070232][T14413] __x64_sys_sendmsg+0x19b/0x260 [ 860.070257][T14413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.070289][T14413] ? __pfx_ksys_write+0x10/0x10 [ 860.070311][T14413] ? do_syscall_64+0xbe/0xf80 [ 860.070335][T14413] do_syscall_64+0xfa/0xf80 [ 860.070354][T14413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.070373][T14413] ? clear_bhb_loop+0x60/0xb0 [ 860.070395][T14413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.070411][T14413] RIP: 0033:0x7fb5e598f749 [ 860.070429][T14413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.070444][T14413] RSP: 002b:00007fb5e6798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.070464][T14413] RAX: ffffffffffffffda RBX: 00007fb5e5be5fa0 RCX: 00007fb5e598f749 [ 860.070477][T14413] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 860.070489][T14413] RBP: 00007fb5e6798090 R08: 0000000000000000 R09: 0000000000000000 [ 860.070501][T14413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.070512][T14413] R13: 00007fb5e5be6038 R14: 00007fb5e5be5fa0 R15: 00007fffffe2b0c8 [ 860.070547][T14413] [ 860.665479][T14424] netlink: 'syz.3.16206': attribute type 21 has an invalid length. [ 860.681232][T14424] __nla_validate_parse: 10 callbacks suppressed [ 860.681253][T14424] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16206'. [ 860.716950][T14424] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16206'. [ 860.738748][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16211'. [ 860.745066][T14428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.857676][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16211'. [ 861.164787][T14459] ip_vti0: entered promiscuous mode [ 861.661504][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16226'. [ 861.672432][T14479] validate_nla: 1 callbacks suppressed [ 861.672451][T14479] netlink: 'syz.2.16226': attribute type 1 has an invalid length. [ 861.691290][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16225'. [ 861.848639][T14483] netlink: 'syz.2.16228': attribute type 1 has an invalid length. [ 861.910006][T14483] macvlan0: entered promiscuous mode [ 861.918122][T14483] macvlan0: entered allmulticast mode [ 861.927773][T14483] bond28: entered promiscuous mode [ 861.951785][T14483] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 861.977700][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16231'. [ 861.998925][T14483] bond28: left promiscuous mode [ 862.075096][T14493] wg1: entered promiscuous mode [ 862.081225][T14493] wg1: entered allmulticast mode [ 862.283099][T14501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16235'. [ 862.393556][T14508] FAULT_INJECTION: forcing a failure. [ 862.393556][T14508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.407630][T14508] CPU: 1 UID: 0 PID: 14508 Comm: syz.3.16238 Not tainted syzkaller #0 PREEMPT(full) [ 862.407656][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.407668][T14508] Call Trace: [ 862.407676][T14508] [ 862.407684][T14508] dump_stack_lvl+0x189/0x250 [ 862.407711][T14508] ? __pfx____ratelimit+0x10/0x10 [ 862.407730][T14508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.407751][T14508] ? __pfx__printk+0x10/0x10 [ 862.407790][T14508] should_fail_ex+0x414/0x560 [ 862.407821][T14508] _copy_to_user+0x31/0xb0 [ 862.407844][T14508] simple_read_from_buffer+0xe1/0x170 [ 862.407872][T14508] proc_fail_nth_read+0x1b3/0x220 [ 862.407895][T14508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.407918][T14508] ? rw_verify_area+0x2a6/0x4d0 [ 862.407935][T14508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.407956][T14508] vfs_read+0x200/0xa30 [ 862.407973][T14508] ? fdget_pos+0x247/0x320 [ 862.408006][T14508] ? __pfx___mutex_lock+0x10/0x10 [ 862.408026][T14508] ? __pfx_vfs_read+0x10/0x10 [ 862.408046][T14508] ? __fget_files+0x2a/0x420 [ 862.408073][T14508] ? __fget_files+0x3a0/0x420 [ 862.408092][T14508] ? __fget_files+0x2a/0x420 [ 862.408123][T14508] ksys_read+0x145/0x250 [ 862.408143][T14508] ? __pfx_ksys_read+0x10/0x10 [ 862.408165][T14508] ? do_syscall_64+0xbe/0xf80 [ 862.408190][T14508] do_syscall_64+0xfa/0xf80 [ 862.408209][T14508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.408227][T14508] ? clear_bhb_loop+0x60/0xb0 [ 862.408250][T14508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.408267][T14508] RIP: 0033:0x7f97a4f8e15c [ 862.408284][T14508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 862.408300][T14508] RSP: 002b:00007f97a5e09030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.408320][T14508] RAX: ffffffffffffffda RBX: 00007f97a51e5fa0 RCX: 00007f97a4f8e15c [ 862.408334][T14508] RDX: 000000000000000f RSI: 00007f97a5e090a0 RDI: 0000000000000007 [ 862.408346][T14508] RBP: 00007f97a5e09090 R08: 0000000000000000 R09: 0000000000000000 [ 862.408358][T14508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.408369][T14508] R13: 00007f97a51e6038 R14: 00007f97a51e5fa0 R15: 00007ffe49873a48 [ 862.408403][T14508] [ 862.704457][T14518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16243'. [ 862.716980][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16243'. [ 862.830893][T14524] wg1: entered promiscuous mode [ 862.836107][T14524] wg1: entered allmulticast mode [ 863.006655][T14533] FAULT_INJECTION: forcing a failure. [ 863.006655][T14533] name failslab, interval 1, probability 0, space 0, times 0 [ 863.038040][T14533] CPU: 1 UID: 0 PID: 14533 Comm: syz.0.16249 Not tainted syzkaller #0 PREEMPT(full) [ 863.038066][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.038077][T14533] Call Trace: [ 863.038086][T14533] [ 863.038094][T14533] dump_stack_lvl+0x189/0x250 [ 863.038119][T14533] ? __pfx____ratelimit+0x10/0x10 [ 863.038139][T14533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.038161][T14533] ? __pfx__printk+0x10/0x10 [ 863.038192][T14533] ? __pfx___might_resched+0x10/0x10 [ 863.038211][T14533] ? fs_reclaim_acquire+0x7d/0x100 [ 863.038236][T14533] should_fail_ex+0x414/0x560 [ 863.038267][T14533] should_failslab+0xa8/0x100 [ 863.038291][T14533] __kvmalloc_node_noprof+0x175/0x920 [ 863.038314][T14533] ? alloc_netdev_mqs+0xc89/0x11b0 [ 863.038336][T14533] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 863.038365][T14533] alloc_netdev_mqs+0xc89/0x11b0 [ 863.038396][T14533] rtnl_create_link+0x31f/0xcf0 [ 863.038429][T14533] rtnl_newlink_create+0x25c/0xb00 [ 863.038465][T14533] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 863.038489][T14533] ? __pfx___mutex_lock+0x10/0x10 [ 863.038520][T14533] ? ns_capable+0x8a/0xf0 [ 863.038542][T14533] rtnl_newlink+0x16e7/0x1c90 [ 863.038580][T14533] ? __pfx_rtnl_newlink+0x10/0x10 [ 863.038599][T14533] ? __lock_acquire+0x6b6/0x2cf0 [ 863.038621][T14533] ? __lock_acquire+0x6b6/0x2cf0 [ 863.038683][T14533] ? is_bpf_text_address+0x26/0x2b0 [ 863.038713][T14533] ? is_bpf_text_address+0x292/0x2b0 [ 863.038738][T14533] ? is_bpf_text_address+0x26/0x2b0 [ 863.038766][T14533] ? __lock_acquire+0x6b6/0x2cf0 [ 863.038788][T14533] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 863.038814][T14533] ? arch_stack_walk+0xfc/0x150 [ 863.038874][T14533] ? __pfx_rtnl_newlink+0x10/0x10 [ 863.038893][T14533] rtnetlink_rcv_msg+0x7cf/0xb70 [ 863.038917][T14533] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 863.038936][T14533] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.038955][T14533] ? __lock_acquire+0x6b6/0x2cf0 [ 863.038996][T14533] netlink_rcv_skb+0x208/0x470 [ 863.039020][T14533] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.039042][T14533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.039077][T14533] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.039108][T14533] netlink_unicast+0x82f/0x9e0 [ 863.039139][T14533] ? __pfx_netlink_unicast+0x10/0x10 [ 863.039161][T14533] ? netlink_sendmsg+0x642/0xb30 [ 863.039181][T14533] ? skb_put+0x11b/0x210 [ 863.039206][T14533] netlink_sendmsg+0x805/0xb30 [ 863.039240][T14533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.039266][T14533] ? aa_sock_msg_perm+0xf1/0x1b0 [ 863.039291][T14533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 863.039309][T14533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.039333][T14533] __sock_sendmsg+0x21c/0x270 [ 863.039362][T14533] ____sys_sendmsg+0x505/0x820 [ 863.039391][T14533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.039423][T14533] ? import_iovec+0x74/0xa0 [ 863.039450][T14533] ___sys_sendmsg+0x21f/0x2a0 [ 863.039474][T14533] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.039503][T14533] ? rcu_read_lock_any_held+0xb3/0x120 [ 863.039556][T14533] ? __fget_files+0x2a/0x420 [ 863.039577][T14533] ? __fget_files+0x3a0/0x420 [ 863.039610][T14533] __x64_sys_sendmsg+0x19b/0x260 [ 863.039635][T14533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.039668][T14533] ? __pfx_ksys_write+0x10/0x10 [ 863.039691][T14533] ? do_syscall_64+0xbe/0xf80 [ 863.039714][T14533] do_syscall_64+0xfa/0xf80 [ 863.039734][T14533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.039753][T14533] ? clear_bhb_loop+0x60/0xb0 [ 863.039775][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.039793][T14533] RIP: 0033:0x7f8e9af8f749 [ 863.039810][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.039825][T14533] RSP: 002b:00007f8e9bee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.039844][T14533] RAX: ffffffffffffffda RBX: 00007f8e9b1e5fa0 RCX: 00007f8e9af8f749 [ 863.039858][T14533] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 863.039870][T14533] RBP: 00007f8e9bee3090 R08: 0000000000000000 R09: 0000000000000000 [ 863.039882][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.039893][T14533] R13: 00007f8e9b1e6038 R14: 00007f8e9b1e5fa0 R15: 00007fffbd74d338 [ 863.039927][T14533] [ 863.485096][T14538] netlink: 'syz.2.16251': attribute type 1 has an invalid length. [ 863.560782][T14538] 8021q: adding VLAN 0 to HW filter on device bond29 [ 863.606215][T14539] bond29: entered allmulticast mode [ 863.647796][T14540] bond29: (slave ip6gretap1): making interface the new active one [ 863.656868][T14540] ip6gretap1: entered allmulticast mode [ 863.673515][T14540] bond29: (slave ip6gretap1): Enslaving as an active interface with an up link [ 863.770838][T14555] wg1: entered promiscuous mode [ 863.787035][T14555] wg1: entered allmulticast mode [ 863.851208][T14563] netlink: 'syz.3.16260': attribute type 5 has an invalid length. [ 863.900243][T14567] FAULT_INJECTION: forcing a failure. [ 863.900243][T14567] name failslab, interval 1, probability 0, space 0, times 0 [ 863.940262][T14567] CPU: 0 UID: 0 PID: 14567 Comm: syz.0.16262 Not tainted syzkaller #0 PREEMPT(full) [ 863.940288][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.940299][T14567] Call Trace: [ 863.940306][T14567] [ 863.940314][T14567] dump_stack_lvl+0x189/0x250 [ 863.940339][T14567] ? __pfx____ratelimit+0x10/0x10 [ 863.940355][T14567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.940370][T14567] ? __pfx__printk+0x10/0x10 [ 863.940393][T14567] ? __pfx___might_resched+0x10/0x10 [ 863.940412][T14567] should_fail_ex+0x414/0x560 [ 863.940436][T14567] should_failslab+0xa8/0x100 [ 863.940454][T14567] __kmalloc_noprof+0xdf/0x800 [ 863.940468][T14567] ? rtm_new_nexthop+0x1b26/0x8130 [ 863.940488][T14567] rtm_new_nexthop+0x1b26/0x8130 [ 863.940510][T14567] ? __lock_acquire+0x6b6/0x2cf0 [ 863.940526][T14567] ? __lock_acquire+0x6b6/0x2cf0 [ 863.940541][T14567] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 863.940558][T14567] ? rcu_is_watching+0x15/0xb0 [ 863.940576][T14567] ? rcu_read_unlock_special+0x3d8/0x520 [ 863.940609][T14567] ? is_bpf_text_address+0x26/0x2b0 [ 863.940703][T14567] ? is_bpf_text_address+0x292/0x2b0 [ 863.940721][T14567] ? is_bpf_text_address+0x26/0x2b0 [ 863.940742][T14567] ? __lock_acquire+0x6b6/0x2cf0 [ 863.940788][T14567] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 863.940802][T14567] rtnetlink_rcv_msg+0x7cf/0xb70 [ 863.940822][T14567] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 863.940836][T14567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.940850][T14567] ? __lock_acquire+0x6b6/0x2cf0 [ 863.940876][T14567] netlink_rcv_skb+0x208/0x470 [ 863.940895][T14567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.940912][T14567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.940942][T14567] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.940968][T14567] netlink_unicast+0x82f/0x9e0 [ 863.940993][T14567] ? __pfx_netlink_unicast+0x10/0x10 [ 863.941012][T14567] ? netlink_sendmsg+0x642/0xb30 [ 863.941030][T14567] ? skb_put+0x11b/0x210 [ 863.941052][T14567] netlink_sendmsg+0x805/0xb30 [ 863.941095][T14567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.941118][T14567] ? aa_sock_msg_perm+0xf1/0x1b0 [ 863.941139][T14567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 863.941155][T14567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.941176][T14567] __sock_sendmsg+0x21c/0x270 [ 863.941205][T14567] ____sys_sendmsg+0x505/0x820 [ 863.941230][T14567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.941255][T14567] ? import_iovec+0x74/0xa0 [ 863.941278][T14567] ___sys_sendmsg+0x21f/0x2a0 [ 863.941300][T14567] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.941329][T14567] ? rcu_read_lock_any_held+0xb3/0x120 [ 863.941368][T14567] ? __fget_files+0x2a/0x420 [ 863.941385][T14567] ? __fget_files+0x3a0/0x420 [ 863.941410][T14567] __x64_sys_sendmsg+0x19b/0x260 [ 863.941428][T14567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.941452][T14567] ? __pfx_ksys_write+0x10/0x10 [ 863.941468][T14567] ? do_syscall_64+0xbe/0xf80 [ 863.941486][T14567] do_syscall_64+0xfa/0xf80 [ 863.941507][T14567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.941521][T14567] ? clear_bhb_loop+0x60/0xb0 [ 863.941538][T14567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.941551][T14567] RIP: 0033:0x7f8e9af8f749 [ 863.941565][T14567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.941577][T14567] RSP: 002b:00007f8e9bee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.941592][T14567] RAX: ffffffffffffffda RBX: 00007f8e9b1e5fa0 RCX: 00007f8e9af8f749 [ 863.941602][T14567] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 863.941611][T14567] RBP: 00007f8e9bee3090 R08: 0000000000000000 R09: 0000000000000000 [ 863.941620][T14567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.941634][T14567] R13: 00007f8e9b1e6038 R14: 00007f8e9b1e5fa0 R15: 00007fffbd74d338 [ 863.941658][T14567] [ 864.472314][T14578] netlink: 'syz.0.16270': attribute type 13 has an invalid length. [ 864.554745][T14589] FAULT_INJECTION: forcing a failure. [ 864.554745][T14589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.589771][T14589] CPU: 1 UID: 0 PID: 14589 Comm: syz.3.16271 Not tainted syzkaller #0 PREEMPT(full) [ 864.589797][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 864.589809][T14589] Call Trace: [ 864.589817][T14589] [ 864.589825][T14589] dump_stack_lvl+0x189/0x250 [ 864.589852][T14589] ? __pfx____ratelimit+0x10/0x10 [ 864.589871][T14589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.589891][T14589] ? __pfx__printk+0x10/0x10 [ 864.589916][T14589] ? __might_fault+0xb0/0x130 [ 864.589952][T14589] should_fail_ex+0x414/0x560 [ 864.589983][T14589] _copy_from_user+0x2d/0xb0 [ 864.590006][T14589] ethtool_get_stats+0x18a/0x3a0 [ 864.590029][T14589] ? __pfx_ethtool_get_stats+0x10/0x10 [ 864.590047][T14589] ? __pm_runtime_resume+0x9d/0x180 [ 864.590075][T14589] dev_ethtool+0xb4a/0x19c0 [ 864.590112][T14589] ? __pfx_dev_ethtool+0x10/0x10 [ 864.590155][T14589] ? dev_load+0x21/0x1f0 [ 864.590177][T14589] dev_ioctl+0x392/0x1150 [ 864.590201][T14589] sock_do_ioctl+0x22c/0x300 [ 864.590229][T14589] ? __pfx_sock_do_ioctl+0x10/0x10 [ 864.590270][T14589] sock_ioctl+0x576/0x790 [ 864.590294][T14589] ? __pfx_sock_ioctl+0x10/0x10 [ 864.590319][T14589] ? __fget_files+0x3a0/0x420 [ 864.590339][T14589] ? __fget_files+0x2a/0x420 [ 864.590362][T14589] ? bpf_lsm_file_ioctl+0x9/0x20 [ 864.590380][T14589] ? __pfx_sock_ioctl+0x10/0x10 [ 864.590402][T14589] __se_sys_ioctl+0xfc/0x170 [ 864.590422][T14589] do_syscall_64+0xfa/0xf80 [ 864.590443][T14589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.590461][T14589] ? clear_bhb_loop+0x60/0xb0 [ 864.590483][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.590500][T14589] RIP: 0033:0x7f97a4f8f749 [ 864.590517][T14589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.590532][T14589] RSP: 002b:00007f97a5e09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.590551][T14589] RAX: ffffffffffffffda RBX: 00007f97a51e5fa0 RCX: 00007f97a4f8f749 [ 864.590565][T14589] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 864.590577][T14589] RBP: 00007f97a5e09090 R08: 0000000000000000 R09: 0000000000000000 [ 864.590589][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.590601][T14589] R13: 00007f97a51e6038 R14: 00007f97a51e5fa0 R15: 00007ffe49873a48 [ 864.590635][T14589] [ 864.860996][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 864.869079][ C1] lec:lec_tx_timeout: lec0 [ 864.875338][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 865.173657][T14613] FAULT_INJECTION: forcing a failure. [ 865.173657][T14613] name failslab, interval 1, probability 0, space 0, times 0 [ 865.208864][T14613] CPU: 0 UID: 0 PID: 14613 Comm: syz.4.16278 Not tainted syzkaller #0 PREEMPT(full) [ 865.208891][T14613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.208902][T14613] Call Trace: [ 865.208911][T14613] [ 865.208919][T14613] dump_stack_lvl+0x189/0x250 [ 865.208946][T14613] ? __pfx____ratelimit+0x10/0x10 [ 865.208965][T14613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.208986][T14613] ? __pfx__printk+0x10/0x10 [ 865.209016][T14613] ? __pfx___might_resched+0x10/0x10 [ 865.209042][T14613] should_fail_ex+0x414/0x560 [ 865.209073][T14613] should_failslab+0xa8/0x100 [ 865.209096][T14613] __kmalloc_noprof+0xdf/0x800 [ 865.209115][T14613] ? rtm_new_nexthop+0x1b26/0x8130 [ 865.209141][T14613] rtm_new_nexthop+0x1b26/0x8130 [ 865.209171][T14613] ? __lock_acquire+0x6b6/0x2cf0 [ 865.209193][T14613] ? __lock_acquire+0x6b6/0x2cf0 [ 865.209214][T14613] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 865.209271][T14613] ? is_bpf_text_address+0x26/0x2b0 [ 865.209301][T14613] ? is_bpf_text_address+0x292/0x2b0 [ 865.209325][T14613] ? is_bpf_text_address+0x26/0x2b0 [ 865.209353][T14613] ? __lock_acquire+0x6b6/0x2cf0 [ 865.209418][T14613] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 865.209438][T14613] rtnetlink_rcv_msg+0x7cf/0xb70 [ 865.209463][T14613] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 865.209481][T14613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 865.209500][T14613] ? __lock_acquire+0x6b6/0x2cf0 [ 865.209535][T14613] netlink_rcv_skb+0x208/0x470 [ 865.209566][T14613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 865.209586][T14613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 865.209619][T14613] ? netlink_deliver_tap+0x2e/0x1b0 [ 865.209649][T14613] netlink_unicast+0x82f/0x9e0 [ 865.209679][T14613] ? __pfx_netlink_unicast+0x10/0x10 [ 865.209701][T14613] ? netlink_sendmsg+0x642/0xb30 [ 865.209721][T14613] ? skb_put+0x11b/0x210 [ 865.209745][T14613] netlink_sendmsg+0x805/0xb30 [ 865.209778][T14613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.209803][T14613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 865.209828][T14613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.209845][T14613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.209868][T14613] __sock_sendmsg+0x21c/0x270 [ 865.209897][T14613] ____sys_sendmsg+0x505/0x820 [ 865.209925][T14613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.209957][T14613] ? import_iovec+0x74/0xa0 [ 865.209982][T14613] ___sys_sendmsg+0x21f/0x2a0 [ 865.210006][T14613] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.210041][T14613] ? rcu_read_lock_any_held+0xb3/0x120 [ 865.210092][T14613] ? __fget_files+0x2a/0x420 [ 865.210113][T14613] ? __fget_files+0x3a0/0x420 [ 865.210143][T14613] __x64_sys_sendmsg+0x19b/0x260 [ 865.210168][T14613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 865.210200][T14613] ? __pfx_ksys_write+0x10/0x10 [ 865.210223][T14613] ? do_syscall_64+0xbe/0xf80 [ 865.210246][T14613] do_syscall_64+0xfa/0xf80 [ 865.210266][T14613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.210285][T14613] ? clear_bhb_loop+0x60/0xb0 [ 865.210307][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.210325][T14613] RIP: 0033:0x7fcfb738f749 [ 865.210343][T14613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.210358][T14613] RSP: 002b:00007fcfb55f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.210378][T14613] RAX: ffffffffffffffda RBX: 00007fcfb75e5fa0 RCX: 00007fcfb738f749 [ 865.210392][T14613] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 865.210404][T14613] RBP: 00007fcfb55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 865.210416][T14613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.210427][T14613] R13: 00007fcfb75e6038 R14: 00007fcfb75e5fa0 R15: 00007ffdefe2f2c8 [ 865.210461][T14613] [ 865.440590][T14602] lo speed is unknown, defaulting to 1000 [ 865.572696][T14621] FAULT_INJECTION: forcing a failure. [ 865.572696][T14621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.597620][T14621] CPU: 0 UID: 0 PID: 14621 Comm: syz.0.16284 Not tainted syzkaller #0 PREEMPT(full) [ 865.597644][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.597659][T14621] Call Trace: [ 865.597667][T14621] [ 865.597675][T14621] dump_stack_lvl+0x189/0x250 [ 865.597700][T14621] ? __pfx____ratelimit+0x10/0x10 [ 865.597717][T14621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.597734][T14621] ? __pfx__printk+0x10/0x10 [ 865.597772][T14621] should_fail_ex+0x414/0x560 [ 865.597801][T14621] _copy_to_user+0x31/0xb0 [ 865.597823][T14621] simple_read_from_buffer+0xe1/0x170 [ 865.597848][T14621] proc_fail_nth_read+0x1b3/0x220 [ 865.597870][T14621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 865.597892][T14621] ? rw_verify_area+0x2a6/0x4d0 [ 865.597907][T14621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 865.597927][T14621] vfs_read+0x200/0xa30 [ 865.597942][T14621] ? fdget_pos+0x247/0x320 [ 865.597965][T14621] ? __pfx___mutex_lock+0x10/0x10 [ 865.597984][T14621] ? __pfx_vfs_read+0x10/0x10 [ 865.598003][T14621] ? __fget_files+0x2a/0x420 [ 865.598026][T14621] ? __fget_files+0x3a0/0x420 [ 865.598043][T14621] ? __fget_files+0x2a/0x420 [ 865.598071][T14621] ksys_read+0x145/0x250 [ 865.598089][T14621] ? __pfx_ksys_read+0x10/0x10 [ 865.598109][T14621] ? do_syscall_64+0xbe/0xf80 [ 865.598132][T14621] do_syscall_64+0xfa/0xf80 [ 865.598151][T14621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.598169][T14621] ? clear_bhb_loop+0x60/0xb0 [ 865.598189][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.598206][T14621] RIP: 0033:0x7f8e9af8e15c [ 865.598223][T14621] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 865.598237][T14621] RSP: 002b:00007f8e9bee3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 865.598256][T14621] RAX: ffffffffffffffda RBX: 00007f8e9b1e5fa0 RCX: 00007f8e9af8e15c [ 865.598269][T14621] RDX: 000000000000000f RSI: 00007f8e9bee30a0 RDI: 0000000000000004 [ 865.598281][T14621] RBP: 00007f8e9bee3090 R08: 0000000000000000 R09: 0000000000000000 [ 865.598292][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.598304][T14621] R13: 00007f8e9b1e6038 R14: 00007f8e9b1e5fa0 R15: 00007fffbd74d338 [ 865.598337][T14621] [ 865.599710][T14622] FAULT_INJECTION: forcing a failure. [ 865.599710][T14622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.644712][T14625] netlink: 'syz.0.16285': attribute type 10 has an invalid length. [ 865.679069][T14623] syzkaller1: entered promiscuous mode [ 865.732268][T14622] CPU: 0 UID: 0 PID: 14622 Comm: syz.4.16283 Not tainted syzkaller #0 PREEMPT(full) [ 865.732293][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.732305][T14622] Call Trace: [ 865.732313][T14622] [ 865.732321][T14622] dump_stack_lvl+0x189/0x250 [ 865.732347][T14622] ? __pfx____ratelimit+0x10/0x10 [ 865.732365][T14622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.732385][T14622] ? __pfx__printk+0x10/0x10 [ 865.732409][T14622] ? __might_fault+0xb0/0x130 [ 865.732446][T14622] should_fail_ex+0x414/0x560 [ 865.732477][T14622] _copy_from_user+0x2d/0xb0 [ 865.732498][T14622] kstrtouint_from_user+0xc4/0x170 [ 865.732519][T14622] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 865.732555][T14622] proc_fail_nth_write+0x88/0x200 [ 865.732574][T14622] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 865.732598][T14622] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 865.732619][T14622] vfs_write+0x27e/0xb30 [ 865.732646][T14622] ? __pfx_vfs_write+0x10/0x10 [ 865.732665][T14622] ? __fget_files+0x2a/0x420 [ 865.732690][T14622] ? __fget_files+0x3a0/0x420 [ 865.732710][T14622] ? __fget_files+0x2a/0x420 [ 865.732739][T14622] ksys_write+0x145/0x250 [ 865.732760][T14622] ? __pfx_ksys_write+0x10/0x10 [ 865.732787][T14622] ? do_syscall_64+0xbe/0xf80 [ 865.732810][T14622] do_syscall_64+0xfa/0xf80 [ 865.732828][T14622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.732846][T14622] ? clear_bhb_loop+0x60/0xb0 [ 865.732867][T14622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.732884][T14622] RIP: 0033:0x7fcfb738e1ff [ 865.732900][T14622] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 865.732915][T14622] RSP: 002b:00007fcfb55f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 865.732934][T14622] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcfb738e1ff [ 865.732947][T14622] RDX: 0000000000000001 RSI: 00007fcfb55f60a0 RDI: 0000000000000006 [ 865.732958][T14622] RBP: 00007fcfb55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 865.732969][T14622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 865.732979][T14622] R13: 00007fcfb75e6038 R14: 00007fcfb75e5fa0 R15: 00007ffdefe2f2c8 [ 865.733012][T14622] [ 865.983535][T14635] __nla_validate_parse: 12 callbacks suppressed [ 865.983553][T14635] netlink: 256 bytes leftover after parsing attributes in process `syz.4.16286'. [ 865.993231][T14623] syzkaller1: entered allmulticast mode [ 866.116068][T14628] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 866.133099][T14638] netlink: 'syz.1.16288': attribute type 32 has an invalid length. [ 866.156453][T14628] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 866.170930][T14640] veth0_to_hsr: mtu less than device minimum [ 866.182600][T14638] wg1: left promiscuous mode [ 866.187221][T14638] wg1: left allmulticast mode [ 866.200106][T14638] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 866.207515][T14638] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 866.215368][T14638] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 866.231923][T14623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16282'. [ 866.243908][T14602] wlan0 speed is unknown, defaulting to 1000 [ 866.298959][T14643] netlink: 'syz.0.16289': attribute type 1 has an invalid length. [ 866.374527][T14646] bridge0: port 1(veth0_to_bridge) entered blocking state [ 866.382310][T14646] bridge0: port 1(veth0_to_bridge) entered disabled state [ 866.389733][T14646] veth0_to_bridge: entered allmulticast mode [ 866.397913][T14646] veth0_to_bridge: entered promiscuous mode [ 866.438585][T14643] macvlan2: entered promiscuous mode [ 866.447897][T14643] macvlan2: entered allmulticast mode [ 866.455157][T14643] bond23: entered promiscuous mode [ 866.461840][T14643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 866.474106][T14643] bond23: left promiscuous mode [ 866.518808][T14654] netlink: 'syz.1.16293': attribute type 3 has an invalid length. [ 866.594310][T14656] FAULT_INJECTION: forcing a failure. [ 866.594310][T14656] name failslab, interval 1, probability 0, space 0, times 0 [ 866.613249][T14656] CPU: 1 UID: 0 PID: 14656 Comm: syz.1.16294 Not tainted syzkaller #0 PREEMPT(full) [ 866.613277][T14656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.613288][T14656] Call Trace: [ 866.613297][T14656] [ 866.613307][T14656] dump_stack_lvl+0x189/0x250 [ 866.613332][T14656] ? __pfx____ratelimit+0x10/0x10 [ 866.613352][T14656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.613373][T14656] ? __pfx__printk+0x10/0x10 [ 866.613404][T14656] ? __pfx___might_resched+0x10/0x10 [ 866.613430][T14656] should_fail_ex+0x414/0x560 [ 866.613462][T14656] should_failslab+0xa8/0x100 [ 866.613491][T14656] __kmalloc_noprof+0xdf/0x800 [ 866.613510][T14656] ? rtm_new_nexthop+0x1b77/0x8130 [ 866.613537][T14656] rtm_new_nexthop+0x1b77/0x8130 [ 866.613567][T14656] ? __lock_acquire+0x6b6/0x2cf0 [ 866.613589][T14656] ? __lock_acquire+0x6b6/0x2cf0 [ 866.613609][T14656] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 866.613665][T14656] ? is_bpf_text_address+0x26/0x2b0 [ 866.613695][T14656] ? is_bpf_text_address+0x292/0x2b0 [ 866.613717][T14656] ? is_bpf_text_address+0x26/0x2b0 [ 866.613744][T14656] ? __lock_acquire+0x6b6/0x2cf0 [ 866.613811][T14656] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 866.613830][T14656] rtnetlink_rcv_msg+0x7cf/0xb70 [ 866.613855][T14656] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 866.613874][T14656] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.613893][T14656] ? __lock_acquire+0x6b6/0x2cf0 [ 866.613927][T14656] netlink_rcv_skb+0x208/0x470 [ 866.613951][T14656] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.613973][T14656] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 866.614007][T14656] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.614038][T14656] netlink_unicast+0x82f/0x9e0 [ 866.614068][T14656] ? __pfx_netlink_unicast+0x10/0x10 [ 866.614091][T14656] ? netlink_sendmsg+0x642/0xb30 [ 866.614111][T14656] ? skb_put+0x11b/0x210 [ 866.614136][T14656] netlink_sendmsg+0x805/0xb30 [ 866.614168][T14656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.614195][T14656] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.614218][T14656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.614235][T14656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.614259][T14656] __sock_sendmsg+0x21c/0x270 [ 866.614288][T14656] ____sys_sendmsg+0x505/0x820 [ 866.614317][T14656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.614348][T14656] ? import_iovec+0x74/0xa0 [ 866.614374][T14656] ___sys_sendmsg+0x21f/0x2a0 [ 866.614398][T14656] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.614427][T14656] ? rcu_read_lock_any_held+0xb3/0x120 [ 866.614507][T14656] ? __fget_files+0x2a/0x420 [ 866.614528][T14656] ? __fget_files+0x3a0/0x420 [ 866.614562][T14656] __x64_sys_sendmsg+0x19b/0x260 [ 866.614587][T14656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.614619][T14656] ? __pfx_ksys_write+0x10/0x10 [ 866.614642][T14656] ? do_syscall_64+0xbe/0xf80 [ 866.614666][T14656] do_syscall_64+0xfa/0xf80 [ 866.614686][T14656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.614705][T14656] ? clear_bhb_loop+0x60/0xb0 [ 866.614727][T14656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.614744][T14656] RIP: 0033:0x7fb5e598f749 [ 866.614761][T14656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.614776][T14656] RSP: 002b:00007fb5e6798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.614796][T14656] RAX: ffffffffffffffda RBX: 00007fb5e5be5fa0 RCX: 00007fb5e598f749 [ 866.614809][T14656] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 866.614822][T14656] RBP: 00007fb5e6798090 R08: 0000000000000000 R09: 0000000000000000 [ 866.614834][T14656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.614846][T14656] R13: 00007fb5e5be6038 R14: 00007fb5e5be5fa0 R15: 00007fffffe2b0c8 [ 866.614879][T14656] [ 866.652183][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16296'. [ 866.879864][T14665] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16295'. [ 867.017372][T14665] netlink: 43 bytes leftover after parsing attributes in process `syz.0.16295'. [ 867.053229][T14665] netlink: 'syz.0.16295': attribute type 5 has an invalid length. [ 867.081293][T14665] netlink: 43 bytes leftover after parsing attributes in process `syz.0.16295'. [ 867.395815][T14685] netlink: 'syz.2.16306': attribute type 1 has an invalid length. [ 867.590397][T14687] macvlan0: entered promiscuous mode [ 867.596256][T14687] macvlan0: entered allmulticast mode [ 867.616788][T14687] bond30: entered promiscuous mode [ 867.640770][T14687] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 867.687964][T14687] bond30: left promiscuous mode [ 867.735375][T14690] bond0: (slave rose0): Error: Device can not be enslaved while up [ 867.767949][T14693] netlink: 'syz.0.16309': attribute type 1 has an invalid length. [ 867.776040][T14693] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16309'. [ 867.788528][T14694] netlink: 'syz.0.16309': attribute type 1 has an invalid length. [ 867.798097][T14694] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16309'. [ 868.232837][T14717] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 868.247074][T14717] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 868.491455][T14747] wg1: entered promiscuous mode [ 868.496353][T14747] wg1: entered allmulticast mode [ 869.046417][T14788] xt_policy: output policy not valid in PREROUTING and INPUT [ 869.169744][T14797] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16340'. [ 869.208733][T14797] nbd: must specify at least one socket [ 869.482131][T14814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.514792][T14814] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 869.627878][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16346'. [ 869.879528][T14845] xt_hashlimit: overflow, try lower: 3/0 [ 869.901009][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 869.909070][ C1] lec:lec_tx_timeout: lec0 [ 869.914276][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 870.431875][T14885] netlink: 'syz.3.16371': attribute type 1 has an invalid length. [ 870.523904][T14897] macvlan3: entered promiscuous mode [ 870.549849][T14897] macvlan3: entered allmulticast mode [ 870.581248][T14897] bond16: entered promiscuous mode [ 870.583695][T14901] netlink: 'syz.0.16375': attribute type 5 has an invalid length. [ 870.596427][T14897] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 870.637348][T14897] bond16: left promiscuous mode [ 870.811303][T14906] netlink: 'syz.0.16377': attribute type 10 has an invalid length. [ 871.039100][T14912] __nla_validate_parse: 3 callbacks suppressed [ 871.039125][T14912] netlink: 256 bytes leftover after parsing attributes in process `syz.4.16378'. [ 871.129623][T14930] macsec0: entered promiscuous mode [ 871.157608][T14930] macsec0: entered allmulticast mode [ 871.197954][T14934] netlink: 'syz.3.16386': attribute type 5 has an invalid length. [ 871.211529][T14934] FAULT_INJECTION: forcing a failure. [ 871.211529][T14934] name failslab, interval 1, probability 0, space 0, times 0 [ 871.252443][T14934] CPU: 0 UID: 0 PID: 14934 Comm: syz.3.16386 Not tainted syzkaller #0 PREEMPT(full) [ 871.252470][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.252481][T14934] Call Trace: [ 871.252490][T14934] [ 871.252498][T14934] dump_stack_lvl+0x189/0x250 [ 871.252525][T14934] ? __pfx____ratelimit+0x10/0x10 [ 871.252544][T14934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.252564][T14934] ? __pfx__printk+0x10/0x10 [ 871.252592][T14934] ? __pfx___might_resched+0x10/0x10 [ 871.252613][T14934] ? fs_reclaim_acquire+0x7d/0x100 [ 871.252636][T14934] should_fail_ex+0x414/0x560 [ 871.252666][T14934] should_failslab+0xa8/0x100 [ 871.252686][T14934] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 871.252712][T14934] ? __alloc_skb+0x255/0x430 [ 871.252729][T14934] ? napi_skb_cache_get+0x4a5/0x780 [ 871.252746][T14934] ? napi_skb_cache_get+0x151/0x780 [ 871.252768][T14934] __alloc_skb+0x255/0x430 [ 871.252789][T14934] ? __pfx___alloc_skb+0x10/0x10 [ 871.252814][T14934] ? netlink_ack_tlv_len+0x6c/0x210 [ 871.252839][T14934] netlink_ack+0x146/0xa50 [ 871.252857][T14934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 871.252894][T14934] netlink_rcv_skb+0x28c/0x470 [ 871.252917][T14934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 871.252937][T14934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.252970][T14934] ? netlink_deliver_tap+0x2e/0x1b0 [ 871.253000][T14934] netlink_unicast+0x82f/0x9e0 [ 871.253030][T14934] ? __pfx_netlink_unicast+0x10/0x10 [ 871.253051][T14934] ? netlink_sendmsg+0x642/0xb30 [ 871.253071][T14934] ? skb_put+0x11b/0x210 [ 871.253093][T14934] netlink_sendmsg+0x805/0xb30 [ 871.253124][T14934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.253149][T14934] ? aa_sock_msg_perm+0xf1/0x1b0 [ 871.253173][T14934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.253190][T14934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.253213][T14934] __sock_sendmsg+0x21c/0x270 [ 871.253241][T14934] ____sys_sendmsg+0x505/0x820 [ 871.253269][T14934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.253294][T14934] ? import_iovec+0x74/0xa0 [ 871.253313][T14934] ___sys_sendmsg+0x21f/0x2a0 [ 871.253330][T14934] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.253358][T14934] ? rcu_read_lock_any_held+0xb3/0x120 [ 871.253394][T14934] ? __fget_files+0x2a/0x420 [ 871.253410][T14934] ? __fget_files+0x3a0/0x420 [ 871.253434][T14934] __x64_sys_sendmsg+0x19b/0x260 [ 871.253452][T14934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 871.253478][T14934] ? __pfx_ksys_write+0x10/0x10 [ 871.253495][T14934] ? do_syscall_64+0xbe/0xf80 [ 871.253512][T14934] do_syscall_64+0xfa/0xf80 [ 871.253526][T14934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.253540][T14934] ? clear_bhb_loop+0x60/0xb0 [ 871.253557][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.253570][T14934] RIP: 0033:0x7f97a4f8f749 [ 871.253583][T14934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.253594][T14934] RSP: 002b:00007f97a5e09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.253609][T14934] RAX: ffffffffffffffda RBX: 00007f97a51e5fa0 RCX: 00007f97a4f8f749 [ 871.253620][T14934] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 871.253628][T14934] RBP: 00007f97a5e09090 R08: 0000000000000000 R09: 0000000000000000 [ 871.253637][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.253645][T14934] R13: 00007f97a51e6038 R14: 00007f97a51e5fa0 R15: 00007ffe49873a48 [ 871.253669][T14934] [ 871.668841][T14947] netlink: 'syz.4.16390': attribute type 3 has an invalid length. [ 871.679989][T14947] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16390'. [ 871.718587][T14947] bond42: option miimon: invalid value (18446744073709551585) [ 871.731382][T14947] bond42: option miimon: allowed values 0 - 2147483647 [ 871.740389][T14947] bond42 (unregistering): Released all slaves [ 871.740924][T14951] netlink: 'syz.2.16392': attribute type 1 has an invalid length. [ 872.056377][T14957] macvlan0: entered promiscuous mode [ 872.072299][T14957] macvlan0: entered allmulticast mode [ 872.082387][T14957] bond31: entered promiscuous mode [ 872.097518][T14957] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 872.108212][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16395'. [ 872.121813][T14957] bond31: left promiscuous mode [ 872.179227][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16395'. [ 872.214447][T14973] netlink: 100 bytes leftover after parsing attributes in process `syz.4.16395'. [ 872.267233][T14961] macvlan4: entered promiscuous mode [ 872.274358][T14961] macvlan4: entered allmulticast mode [ 872.280900][T14961] bond29: entered promiscuous mode [ 872.291761][T14961] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 872.323562][T14961] bond29: left promiscuous mode [ 872.703072][T15006] validate_nla: 1 callbacks suppressed [ 872.703091][T15006] netlink: 'syz.1.16402': attribute type 9 has an invalid length. [ 872.767149][T15008] bridge0: port 2(batadv2) entered blocking state [ 872.822694][T15008] bridge0: port 2(batadv2) entered disabled state [ 872.829350][T15008] batadv2: entered allmulticast mode [ 872.855266][T15008] batadv2: entered promiscuous mode [ 872.900173][T15021] netlink: 'syz.4.16407': attribute type 5 has an invalid length. [ 873.251538][ T4696] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 873.260834][ T4696] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 873.391900][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16412'. [ 873.624780][T15062] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16419'. [ 873.662118][T15060] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16419'. [ 873.697010][T15060] syzkaller1: entered promiscuous mode [ 873.706638][T15060] syzkaller1: entered allmulticast mode [ 873.860624][T15082] netlink: 'syz.1.16425': attribute type 5 has an invalid length. [ 874.148809][T15102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16431'. [ 874.161683][T15102] block nbd0: not configured, cannot reconfigure [ 874.413747][T15118] netlink: 596 bytes leftover after parsing attributes in process `syz.4.16439'. [ 874.671868][T15141] macsec0: entered promiscuous mode [ 874.691066][T15141] veth1_macvtap: entered promiscuous mode [ 874.697043][T15141] macsec0: entered allmulticast mode [ 874.762894][T15141] veth1_macvtap: entered allmulticast mode [ 874.921296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 874.929375][ C1] lec:lec_tx_timeout: lec0 [ 874.934869][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 875.215168][T15173] netlink: 'syz.2.16452': attribute type 4 has an invalid length. [ 875.398395][T15177] tipc: Enabled bearer , priority 0 [ 875.411797][T15177] syzkaller0: entered promiscuous mode [ 875.421679][T15177] syzkaller0: entered allmulticast mode [ 875.590875][T15174] tipc: Resetting bearer [ 875.665487][T15174] tipc: Disabling bearer [ 875.994809][T31252] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.018874][T31252] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.066662][T31252] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.087913][T31252] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.123292][T15218] __nla_validate_parse: 10 callbacks suppressed [ 876.123311][T15218] netlink: 596 bytes leftover after parsing attributes in process `syz.3.16470'. [ 876.195678][T15222] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.217042][T15222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.350281][T15236] netlink: 'syz.2.16478': attribute type 1 has an invalid length. [ 876.462306][T15243] macvlan0: entered promiscuous mode [ 876.490191][T15243] macvlan0: entered allmulticast mode [ 876.516130][T15243] bond32: entered promiscuous mode [ 876.537885][T15243] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 876.550266][T15243] bond32: left promiscuous mode [ 877.003487][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16483'. [ 877.023812][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16484'. [ 877.033811][T15257] openvswitch: netlink: Flow actions attr not present in new flow. [ 877.050827][T15255] netlink: 260 bytes leftover after parsing attributes in process `syz.0.16480'. [ 877.072454][T15259] netlink: 596 bytes leftover after parsing attributes in process `syz.2.16485'. [ 877.553030][T15292] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 877.581330][T15292] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 877.601342][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16497'. [ 878.047618][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16505'. [ 878.203416][T15335] netlink: 'syz.3.16511': attribute type 2 has an invalid length. [ 878.220481][T15335] netlink: 'syz.3.16511': attribute type 1 has an invalid length. [ 878.413429][T15350] netlink: 288 bytes leftover after parsing attributes in process `syz.4.16513'. [ 878.612930][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16520'. [ 878.631626][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16520'. [ 879.669520][T15434] tc_dump_action: action bad kind [ 879.940989][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 879.949031][ C1] lec:lec_tx_timeout: lec0 [ 879.955368][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 880.077819][T15467] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 880.317806][T15464] veth9: entered promiscuous mode [ 880.338818][T15464] veth9: entered allmulticast mode [ 880.963763][T15509] tipc: Enabled bearer , priority 2 [ 881.436647][T15524] __nla_validate_parse: 6 callbacks suppressed [ 881.436664][T15524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16583'. [ 881.454144][T15524] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 881.463552][T15524] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 881.473095][T15524] tipc: Enabling of bearer rejected, already enabled [ 881.483737][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16583'. [ 881.492875][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16583'. [ 881.960563][T15574] netlink: 'syz.1.16597': attribute type 1 has an invalid length. [ 882.010536][T15574] bond30: entered promiscuous mode [ 882.017049][T15574] 8021q: adding VLAN 0 to HW filter on device bond30 [ 882.032579][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16597'. [ 882.051311][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16597'. [ 882.141832][T15580] netlink: 'syz.1.16597': attribute type 21 has an invalid length. [ 882.149770][T15580] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16597'. [ 882.199416][T15581] netlink: 'syz.1.16597': attribute type 21 has an invalid length. [ 882.208208][T15581] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16597'. [ 882.280115][T15574] bond30: (slave bridge12): making interface the new active one [ 882.291410][T15574] bridge12: entered promiscuous mode [ 882.299475][T15574] bond30: (slave bridge12): Enslaving as an active interface with an up link [ 882.321091][T15580] netlink: 'syz.1.16597': attribute type 4 has an invalid length. [ 882.328932][T15580] netlink: 'syz.1.16597': attribute type 5 has an invalid length. [ 882.351271][T15580] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16597'. [ 882.362317][T15581] netlink: 'syz.1.16597': attribute type 4 has an invalid length. [ 882.371573][T15581] netlink: 'syz.1.16597': attribute type 5 has an invalid length. [ 882.379579][T15581] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16597'. [ 882.825460][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16606'. [ 882.835827][T15603] netlink: 'syz.3.16606': attribute type 7 has an invalid length. [ 882.930540][T15609] openvswitch: netlink: Multiple metadata blocks provided [ 882.952047][T15608] wg1: entered promiscuous mode [ 882.958652][T15608] wg1: entered allmulticast mode [ 883.095134][T15615] macvlan0: entered promiscuous mode [ 883.100483][T15615] macvlan0: entered allmulticast mode [ 883.130360][T15615] bond33: entered promiscuous mode [ 883.169635][T15615] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 883.191865][T15615] bond33: left promiscuous mode [ 883.441342][T15646] veth0: entered promiscuous mode [ 883.456014][T15651] xt_l2tp: v2 doesn't support IP mode [ 883.466073][T15651] xt_l2tp: v2 doesn't support IP mode [ 883.779391][T15674] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 884.154712][T15694] bond24: option min_links: invalid value (18446744073709551614) [ 884.175319][T15694] bond24: option min_links: allowed values 0 - 2147483647 [ 884.197694][T15694] bond24 (unregistering): Released all slaves [ 884.228103][T15643] veth0: left promiscuous mode [ 884.547496][T15712] validate_nla: 3 callbacks suppressed [ 884.547515][T15712] netlink: 'syz.4.16642': attribute type 5 has an invalid length. [ 884.875283][T15742] netlink: 'syz.3.16654': attribute type 1 has an invalid length. [ 884.891613][T15742] netlink: 'syz.3.16654': attribute type 3 has an invalid length. [ 884.971286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 884.979370][ C1] lec:lec_tx_timeout: lec0 [ 884.983989][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 885.602321][T15805] lo: Caught tx_queue_len zero misconfig [ 885.678439][T15811] syzkaller1: entered promiscuous mode [ 885.709895][T15811] syzkaller1: entered allmulticast mode [ 885.981914][T15834] netlink: 'syz.3.16689': attribute type 11 has an invalid length. [ 886.396331][T15869] netlink: 'syz.1.16699': attribute type 2 has an invalid length. [ 886.495169][T15874] netlink: 'syz.2.16701': attribute type 5 has an invalid length. [ 886.508528][T15880] __nla_validate_parse: 17 callbacks suppressed [ 886.508546][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16703'. [ 886.705787][T15892] netlink: 312 bytes leftover after parsing attributes in process `syz.2.16708'. [ 886.735627][T15897] xt_socket: unknown flags 0x50 [ 886.754245][T15897] netlink: 212152 bytes leftover after parsing attributes in process `syz.1.16709'. [ 886.830225][T15902] wg1: entered promiscuous mode [ 886.835438][T15902] wg1: entered allmulticast mode [ 887.265078][T15931] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16716'. [ 887.283107][T15931] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16716'. [ 887.393929][T15935] netlink: 'syz.0.16717': attribute type 5 has an invalid length. [ 887.767556][T15958] netlink: 'syz.4.16728': attribute type 21 has an invalid length. [ 887.787556][T15962] netlink: 'syz.3.16729': attribute type 1 has an invalid length. [ 887.806303][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16730'. [ 887.834071][T15958] netlink: 'syz.4.16728': attribute type 1 has an invalid length. [ 887.935445][T15967] macvlan3: entered promiscuous mode [ 887.941380][T15967] macvlan3: entered allmulticast mode [ 887.947682][T15967] bond17: entered promiscuous mode [ 887.957068][T15967] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 887.969921][T15967] bond17: left promiscuous mode [ 888.027937][T15978] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16735'. [ 888.167710][T15988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.507656][T16010] netlink: 'syz.1.16747': attribute type 1 has an invalid length. [ 888.628234][T16015] macvlan4: entered promiscuous mode [ 888.634077][T16015] macvlan4: entered allmulticast mode [ 888.644922][T16015] bond31: entered promiscuous mode [ 888.650901][T16015] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 888.668320][T16015] bond31: left promiscuous mode [ 888.720456][T16021] : renamed from bond_slave_0 [ 889.084092][T16048] openvswitch: netlink: Missing key (keys=40, expected=100) [ 889.184548][T16052] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16763'. [ 889.350229][T16059] macvlan3: entered promiscuous mode [ 889.368725][T16059] macvlan3: entered allmulticast mode [ 889.398638][T16059] bond42: entered promiscuous mode [ 889.429510][T16059] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 889.456917][T16059] bond42: left promiscuous mode [ 889.514976][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16756'. [ 889.543399][T16034] bond24: option coupled_control: invalid value (52) [ 889.555958][T16034] bond24 (unregistering): Released all slaves [ 889.759958][T16088] validate_nla: 5 callbacks suppressed [ 889.759977][T16088] netlink: 'syz.4.16779': attribute type 5 has an invalid length. [ 889.939304][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16783'. [ 889.991012][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 889.999092][ C1] lec:lec_tx_timeout: lec0 [ 890.003948][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 890.431951][T16112] netlink: 'syz.0.16787': attribute type 11 has an invalid length. [ 890.503732][T16120] netlink: 'syz.1.16792': attribute type 5 has an invalid length. [ 890.631810][T16117] sctp: [Deprecated]: syz.2.16788 (pid 16117) Use of int in max_burst socket option. [ 890.631810][T16117] Use struct sctp_assoc_value instead [ 890.969719][T16159] syzkaller0: entered promiscuous mode [ 890.977594][T16159] syzkaller0: entered allmulticast mode [ 891.040673][T16165] sctp: [Deprecated]: syz.0.16806 (pid 16165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.040673][T16165] Use struct sctp_sack_info instead [ 891.454576][T16191] bond34: Removing last arp target with arp_interval on [ 891.586802][T16204] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 891.874913][T16226] __nla_validate_parse: 4 callbacks suppressed [ 891.874932][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16831'. [ 891.911247][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16831'. [ 892.061167][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16832'. [ 892.450913][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16842'. [ 892.480053][T16265] can: request_module (can-proto-0) failed. [ 892.596338][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16846'. [ 892.923843][T16300] FAULT_INJECTION: forcing a failure. [ 892.923843][T16300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.945423][T16300] CPU: 1 UID: 0 PID: 16300 Comm: syz.0.16851 Not tainted syzkaller #0 PREEMPT(full) [ 892.945451][T16300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 892.945463][T16300] Call Trace: [ 892.945471][T16300] [ 892.945480][T16300] dump_stack_lvl+0x189/0x250 [ 892.945506][T16300] ? __pfx____ratelimit+0x10/0x10 [ 892.945525][T16300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.945543][T16300] ? __pfx__printk+0x10/0x10 [ 892.945565][T16300] ? __might_fault+0xb0/0x130 [ 892.945597][T16300] should_fail_ex+0x414/0x560 [ 892.945625][T16300] _copy_from_user+0x2d/0xb0 [ 892.945646][T16300] ___sys_sendmsg+0x158/0x2a0 [ 892.945669][T16300] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.945696][T16300] ? rcu_read_lock_any_held+0xb3/0x120 [ 892.945744][T16300] ? __fget_files+0x2a/0x420 [ 892.945764][T16300] ? __fget_files+0x3a0/0x420 [ 892.945793][T16300] __x64_sys_sendmsg+0x19b/0x260 [ 892.945816][T16300] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 892.945844][T16300] ? __pfx_ksys_write+0x10/0x10 [ 892.945866][T16300] ? do_syscall_64+0xbe/0xf80 [ 892.945886][T16300] do_syscall_64+0xfa/0xf80 [ 892.945904][T16300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.945920][T16300] ? clear_bhb_loop+0x60/0xb0 [ 892.945940][T16300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.945957][T16300] RIP: 0033:0x7f8e9af8f749 [ 892.945973][T16300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.945989][T16300] RSP: 002b:00007f8e9bee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.946007][T16300] RAX: ffffffffffffffda RBX: 00007f8e9b1e5fa0 RCX: 00007f8e9af8f749 [ 892.946019][T16300] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 892.946031][T16300] RBP: 00007f8e9bee3090 R08: 0000000000000000 R09: 0000000000000000 [ 892.946041][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.946052][T16300] R13: 00007f8e9b1e6038 R14: 00007f8e9b1e5fa0 R15: 00007fffbd74d338 [ 892.946082][T16300] [ 893.301910][T16305] block nbd0: not configured, cannot reconfigure [ 893.414504][T16316] netlink: 'syz.4.16858': attribute type 1 has an invalid length. [ 893.420380][T16319] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16859'. [ 893.422415][T16316] netlink: 'syz.4.16858': attribute type 11 has an invalid length. [ 893.461071][T16316] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16858'. [ 893.752665][T16341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.787624][T16342] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 893.788347][T16347] tipc: Failed to remove unknown binding: 66,1,1/134418688:2604641026/2604641028 [ 893.958400][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16874'. [ 893.968511][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16874'. [ 893.978056][T16358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16874'. [ 894.796193][T16415] netlink: zone id is out of range [ 894.823400][T16415] netlink: zone id is out of range [ 894.828572][T16415] netlink: zone id is out of range [ 895.011001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 895.019086][ C1] lec:lec_tx_timeout: lec0 [ 895.025156][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 895.298462][T16457] netlink: 'syz.4.16906': attribute type 6 has an invalid length. [ 895.343766][T16459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.448795][T16465] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 895.902900][T16494] netlink: 'syz.4.16919': attribute type 1 has an invalid length. [ 895.990834][T16497] FAULT_INJECTION: forcing a failure. [ 895.990834][T16497] name failslab, interval 1, probability 0, space 0, times 0 [ 896.019818][T16497] CPU: 0 UID: 0 PID: 16497 Comm: syz.0.16920 Not tainted syzkaller #0 PREEMPT(full) [ 896.019843][T16497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 896.019853][T16497] Call Trace: [ 896.019860][T16497] [ 896.019869][T16497] dump_stack_lvl+0x189/0x250 [ 896.019894][T16497] ? __pfx____ratelimit+0x10/0x10 [ 896.019911][T16497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.019932][T16497] ? __pfx__printk+0x10/0x10 [ 896.019957][T16497] ? __pfx___might_resched+0x10/0x10 [ 896.019976][T16497] ? fs_reclaim_acquire+0x7d/0x100 [ 896.020000][T16497] should_fail_ex+0x414/0x560 [ 896.020030][T16497] should_failslab+0xa8/0x100 [ 896.020052][T16497] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 896.020076][T16497] ? __alloc_skb+0x255/0x430 [ 896.020093][T16497] ? napi_skb_cache_get+0x4a5/0x780 [ 896.020109][T16497] ? napi_skb_cache_get+0x151/0x780 [ 896.020131][T16497] __alloc_skb+0x255/0x430 [ 896.020152][T16497] ? __pfx___alloc_skb+0x10/0x10 [ 896.020176][T16497] ? netlink_ack_tlv_len+0x6c/0x210 [ 896.020200][T16497] netlink_ack+0x146/0xa50 [ 896.020217][T16497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 896.020254][T16497] netlink_rcv_skb+0x28c/0x470 [ 896.020276][T16497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 896.020297][T16497] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 896.020338][T16497] ? netlink_deliver_tap+0x2e/0x1b0 [ 896.020367][T16497] netlink_unicast+0x82f/0x9e0 [ 896.020396][T16497] ? __pfx_netlink_unicast+0x10/0x10 [ 896.020418][T16497] ? netlink_sendmsg+0x642/0xb30 [ 896.020437][T16497] ? skb_put+0x11b/0x210 [ 896.020460][T16497] netlink_sendmsg+0x805/0xb30 [ 896.020492][T16497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.020517][T16497] ? aa_sock_msg_perm+0xf1/0x1b0 [ 896.020542][T16497] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 896.020560][T16497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.020581][T16497] __sock_sendmsg+0x21c/0x270 [ 896.020609][T16497] ____sys_sendmsg+0x505/0x820 [ 896.020636][T16497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.020666][T16497] ? import_iovec+0x74/0xa0 [ 896.020691][T16497] ___sys_sendmsg+0x21f/0x2a0 [ 896.020715][T16497] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.020743][T16497] ? rcu_read_lock_any_held+0xb3/0x120 [ 896.020793][T16497] ? __fget_files+0x2a/0x420 [ 896.020814][T16497] ? __fget_files+0x3a0/0x420 [ 896.020846][T16497] __x64_sys_sendmsg+0x19b/0x260 [ 896.020869][T16497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 896.020901][T16497] ? __pfx_ksys_write+0x10/0x10 [ 896.020922][T16497] ? do_syscall_64+0xbe/0xf80 [ 896.020967][T16497] do_syscall_64+0xfa/0xf80 [ 896.020983][T16497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.020999][T16497] ? clear_bhb_loop+0x60/0xb0 [ 896.021018][T16497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.021036][T16497] RIP: 0033:0x7f8e9af8f749 [ 896.021053][T16497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.021069][T16497] RSP: 002b:00007f8e9bee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.021089][T16497] RAX: ffffffffffffffda RBX: 00007f8e9b1e5fa0 RCX: 00007f8e9af8f749 [ 896.021104][T16497] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 896.021116][T16497] RBP: 00007f8e9bee3090 R08: 0000000000000000 R09: 0000000000000000 [ 896.021128][T16497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.021139][T16497] R13: 00007f8e9b1e6038 R14: 00007f8e9b1e5fa0 R15: 00007fffbd74d338 [ 896.021172][T16497] [ 896.382046][T16502] syzkaller1: entered promiscuous mode [ 896.401345][T16502] syzkaller1: entered allmulticast mode [ 896.623549][T16520] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 896.700106][T16531] netlink: 'syz.0.16932': attribute type 11 has an invalid length. [ 896.713706][T16519] netlink: 'syz.1.16928': attribute type 1 has an invalid length. [ 896.721815][T16519] netlink: 'syz.1.16928': attribute type 4 has an invalid length. [ 896.839953][T16539] FAULT_INJECTION: forcing a failure. [ 896.839953][T16539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.853226][T16539] CPU: 1 UID: 0 PID: 16539 Comm: syz.0.16935 Not tainted syzkaller #0 PREEMPT(full) [ 896.853251][T16539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 896.853263][T16539] Call Trace: [ 896.853270][T16539] [ 896.853279][T16539] dump_stack_lvl+0x189/0x250 [ 896.853305][T16539] ? __pfx____ratelimit+0x10/0x10 [ 896.853325][T16539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.853345][T16539] ? __pfx__printk+0x10/0x10 [ 896.853375][T16539] ? __might_fault+0xb0/0x130 [ 896.853410][T16539] should_fail_ex+0x414/0x560 [ 896.853440][T16539] _copy_from_user+0x2d/0xb0 [ 896.853461][T16539] kstrtouint_from_user+0xc4/0x170 [ 896.853481][T16539] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 896.853517][T16539] proc_fail_nth_write+0x88/0x200 [ 896.853536][T16539] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 896.853560][T16539] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 896.853580][T16539] vfs_write+0x27e/0xb30 [ 896.853607][T16539] ? __pfx_vfs_write+0x10/0x10 [ 896.853625][T16539] ? __fget_files+0x2a/0x420 [ 896.853650][T16539] ? __fget_files+0x3a0/0x420 [ 896.853670][T16539] ? __fget_files+0x2a/0x420 [ 896.853701][T16539] ksys_write+0x145/0x250 [ 896.853721][T16539] ? __pfx_ksys_write+0x10/0x10 [ 896.853740][T16539] ? do_syscall_64+0xbe/0xf80 [ 896.853762][T16539] do_syscall_64+0xfa/0xf80 [ 896.853781][T16539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.853798][T16539] ? clear_bhb_loop+0x60/0xb0 [ 896.853818][T16539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.853836][T16539] RIP: 0033:0x7f8e9af8e1ff [ 896.853853][T16539] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 896.853868][T16539] RSP: 002b:00007f8e9bee3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 896.853889][T16539] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e9af8e1ff [ 896.853901][T16539] RDX: 0000000000000001 RSI: 00007f8e9bee30a0 RDI: 0000000000000004 [ 896.853913][T16539] RBP: 00007f8e9bee3090 R08: 0000000000000000 R09: 0000000000000000 [ 896.853924][T16539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 896.853935][T16539] R13: 00007f8e9b1e6038 R14: 00007f8e9b1e5fa0 R15: 00007fffbd74d338 [ 896.853969][T16539] [ 897.364020][T16555] __nla_validate_parse: 8 callbacks suppressed [ 897.364042][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16943'. [ 897.380533][T16553] netlink: 'syz.4.16940': attribute type 1 has an invalid length. [ 897.582048][T16567] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16946'. [ 897.958426][T16598] netlink: 'syz.4.16959': attribute type 1 has an invalid length. [ 898.037837][T16601] macvlan3: entered promiscuous mode [ 898.053571][T16601] macvlan3: entered allmulticast mode [ 898.060184][T16601] bond43: entered promiscuous mode [ 898.073836][T16601] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 898.085447][T16601] bond43: left promiscuous mode [ 898.133673][T16612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.757878][T16651] netlink: 'syz.0.16974': attribute type 1 has an invalid length. [ 898.837903][T16654] xt_ecn: cannot match TCP bits for non-tcp packets [ 898.863773][T16656] macvlan2: entered promiscuous mode [ 898.869156][T16656] macvlan2: entered allmulticast mode [ 898.876237][T16656] bond24: entered promiscuous mode [ 898.882197][T16656] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 898.893885][T16656] bond24: left promiscuous mode [ 899.045084][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16979'. [ 899.230885][T16675] ipvlan0: entered promiscuous mode [ 899.466971][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16986'. [ 900.041627][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 900.049713][ C1] lec:lec_tx_timeout: lec0 [ 900.054777][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 900.122486][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17002'. [ 900.305835][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17005'. [ 900.317927][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17005'. [ 900.355899][T16755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17008'. [ 900.581588][T16760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17011'. [ 900.860364][T16781] siw: device registration error -23 [ 901.305941][T16797] pim6reg: entered allmulticast mode [ 901.405128][T16808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17027'. [ 901.780698][T16830] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 902.314121][T16852] xt_ecn: cannot match TCP bits for non-tcp packets [ 902.376776][T16848] __nla_validate_parse: 5 callbacks suppressed [ 902.376793][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17040'. [ 902.451197][T16848] team0: left allmulticast mode [ 902.456645][T16848] team0: left promiscuous mode [ 902.493341][T16848] bridge0: port 1(team0) entered disabled state [ 902.542717][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17040'. [ 902.839360][T16869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.880918][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17046'. [ 902.962136][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17046'. [ 903.034361][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17049'. [ 903.549229][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17055'. [ 903.813259][T16916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17061'. [ 903.994072][T16925] netlink: 'syz.1.17062': attribute type 1 has an invalid length. [ 904.107292][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17065'. [ 904.502142][T16946] netlink: 'syz.3.17072': attribute type 1 has an invalid length. [ 904.674785][T16951] macvlan3: entered promiscuous mode [ 904.680103][T16951] macvlan3: entered allmulticast mode [ 904.712143][T16951] bond18: entered promiscuous mode [ 904.717993][T16951] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 904.808187][T16951] bond18: left promiscuous mode [ 904.912074][T16962] netlink: 'syz.1.17078': attribute type 1 has an invalid length. [ 905.060981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 905.069015][ C1] lec:lec_tx_timeout: lec0 [ 905.073608][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 905.119815][T16964] bond32: (slave gretap5): making interface the new active one [ 905.149468][T16964] bond32: (slave gretap5): Enslaving as an active interface with an up link [ 905.213823][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17079'. [ 905.531599][T16998] netlink: 'syz.1.17087': attribute type 2 has an invalid length. [ 905.640387][T17009] netlink: 'syz.2.17090': attribute type 1 has an invalid length. [ 905.706992][T17009] macvlan0: entered promiscuous mode [ 905.713069][T17009] macvlan0: entered allmulticast mode [ 905.719932][T17009] bond35: entered promiscuous mode [ 905.731717][T17009] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 905.762266][T17009] bond35: left promiscuous mode [ 906.237300][T17046] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17106'. [ 906.251270][T17046] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 906.260574][T17046] netlink: 'syz.1.17106': attribute type 23 has an invalid length. [ 909.046218][T17057] __nla_validate_parse: 1 callbacks suppressed [ 909.046238][T17057] netlink: 284 bytes leftover after parsing attributes in process `syz.3.17110'. [ 909.249979][T17074] netlink: 'syz.4.17115': attribute type 2 has an invalid length. [ 909.667177][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17121'. [ 909.676639][T17094] batadv2: left allmulticast mode [ 909.681973][T17094] batadv2: left promiscuous mode [ 909.687229][T17094] bridge0: port 2(batadv2) entered disabled state [ 909.696695][T17094] veth0_to_bridge: left allmulticast mode [ 909.711664][T17094] veth0_to_bridge: left promiscuous mode [ 909.717942][T17094] bridge0: port 1(veth0_to_bridge) entered disabled state [ 909.811660][T17099] netlink: 'syz.3.17124': attribute type 5 has an invalid length. [ 909.977540][T17115] netlink: 'syz.1.17128': attribute type 1 has an invalid length. [ 910.081011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 910.087144][T17121] macvlan4: entered promiscuous mode [ 910.089097][ C1] lec:lec_tx_timeout: lec0 [ 910.095476][T17121] macvlan4: entered allmulticast mode [ 910.099649][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 910.118615][T17121] bond34: entered promiscuous mode [ 910.157228][T17121] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 910.173462][T17121] bond34: left promiscuous mode [ 910.646985][T17157] tipc: Enabled bearer , priority 0 [ 910.676000][T17157] syzkaller0: entered promiscuous mode [ 910.686828][T17157] syzkaller0: entered allmulticast mode [ 910.698543][T17165] netem: incorrect ge model size [ 910.721358][T17165] netem: change failed [ 910.845673][T17157] tipc: Resetting bearer [ 910.855208][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17138'. [ 910.923077][T17180] netlink: 'syz.1.17146': attribute type 5 has an invalid length. [ 910.933418][T17151] tipc: Resetting bearer [ 910.975359][T17151] tipc: Disabling bearer [ 910.993112][T17184] sctp: [Deprecated]: syz.0.17147 (pid 17184) Use of int in maxseg socket option. [ 910.993112][T17184] Use struct sctp_assoc_value instead [ 911.176404][T17199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.247603][T17199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.340858][T17199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.343934][T17205] Cannot find del_set index 3 as target [ 911.434022][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17155'. [ 911.467524][T17199] batman_adv: batadv0: Removing interface: netdevsim0 [ 911.476116][T17199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.503538][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17155'. [ 911.504090][T17211] : entered promiscuous mode [ 911.574744][ T516] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.584806][T17215] netlink: 'syz.0.17156': attribute type 1 has an invalid length. [ 911.596666][ T516] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.628495][ T516] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.641929][T17215] macvlan2: entered promiscuous mode [ 911.647273][T17215] macvlan2: entered allmulticast mode [ 911.653860][T17215] bond25: entered promiscuous mode [ 911.659513][T17215] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 911.670886][T17215] bond25: left promiscuous mode [ 911.735953][ T4696] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.909148][T17226] x_tables: duplicate underflow at hook 3 [ 911.910043][T17225] netlink: 'syz.3.17161': attribute type 1 has an invalid length. [ 911.963873][T17228] tipc: Enabling of bearer rejected, already enabled [ 912.127544][T17240] netlink: 'syz.3.17168': attribute type 1 has an invalid length. [ 912.155569][T17246] netlink: 'syz.2.17169': attribute type 39 has an invalid length. [ 912.243299][T17240] macvlan3: entered promiscuous mode [ 912.248860][T17240] macvlan3: entered allmulticast mode [ 912.257412][T17240] bond19: entered promiscuous mode [ 912.264090][T17240] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 912.278377][T17240] bond19: left promiscuous mode [ 912.741543][T17290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17183'. [ 913.011134][T17305] sctp: [Deprecated]: syz.2.17185 (pid 17305) Use of int in max_burst socket option. [ 913.011134][T17305] Use struct sctp_assoc_value instead [ 913.172580][T17316] netlink: 'syz.4.17187': attribute type 1 has an invalid length. [ 913.182122][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17188'. [ 913.355907][T17321] macvlan3: entered promiscuous mode [ 913.399853][T17321] macvlan3: entered allmulticast mode [ 913.415641][T17321] bond44: entered promiscuous mode [ 913.422082][T17321] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 913.454393][T17321] bond44: left promiscuous mode [ 913.502788][T17325] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 913.579928][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17190'. [ 913.636768][T17341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17193'. [ 913.717000][T17336] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 913.993441][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17200'. [ 914.397533][T17394] netlink: 'syz.3.17210': attribute type 6 has an invalid length. [ 914.615770][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17215'. [ 914.807530][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17218'. [ 914.862712][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17220'. [ 914.995130][T17420] FAULT_INJECTION: forcing a failure. [ 914.995130][T17420] name failslab, interval 1, probability 0, space 0, times 0 [ 915.025970][T17420] CPU: 1 UID: 0 PID: 17420 Comm: syz.0.17220 Not tainted syzkaller #0 PREEMPT(full) [ 915.025995][T17420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 915.026005][T17420] Call Trace: [ 915.026012][T17420] [ 915.026021][T17420] dump_stack_lvl+0x189/0x250 [ 915.026047][T17420] ? __pfx____ratelimit+0x10/0x10 [ 915.026064][T17420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 915.026082][T17420] ? __pfx__printk+0x10/0x10 [ 915.026107][T17420] ? __pfx___might_resched+0x10/0x10 [ 915.026126][T17420] ? fs_reclaim_acquire+0x7d/0x100 [ 915.026150][T17420] should_fail_ex+0x414/0x560 [ 915.026181][T17420] should_failslab+0xa8/0x100 [ 915.026204][T17420] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 915.026231][T17420] ? __alloc_skb+0x255/0x430 [ 915.026250][T17420] ? napi_skb_cache_get+0x4a5/0x780 [ 915.026266][T17420] ? napi_skb_cache_get+0x151/0x780 [ 915.026288][T17420] __alloc_skb+0x255/0x430 [ 915.026309][T17420] ? __pfx___alloc_skb+0x10/0x10 [ 915.026336][T17420] alloc_skb_with_frags+0xca/0x890 [ 915.026356][T17420] ? __might_fault+0xb0/0x130 [ 915.026392][T17420] sock_alloc_send_pskb+0x84d/0x980 [ 915.026445][T17420] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 915.026470][T17420] ? packet_cached_dev_get+0x1c/0x2b0 [ 915.026485][T17420] ? packet_cached_dev_get+0x1c/0x2b0 [ 915.026507][T17420] packet_sendmsg+0x33a0/0x5080 [ 915.026543][T17420] ? aa_label_match+0xcb0/0x1be0 [ 915.026570][T17420] ? __lock_acquire+0x6b6/0x2cf0 [ 915.026591][T17420] ? __pfx___might_resched+0x10/0x10 [ 915.026614][T17420] ? kstrtouint+0x6e/0xe0 [ 915.026641][T17420] ? aa_sk_perm+0x15f/0x920 [ 915.026661][T17420] ? __pfx_packet_sendmsg+0x10/0x10 [ 915.026681][T17420] ? aa_sk_perm+0x7ee/0x920 [ 915.026707][T17420] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 915.026734][T17420] ? __fget_files+0x2a/0x420 [ 915.026754][T17420] ? aa_sock_msg_perm+0xf1/0x1b0 [ 915.026777][T17420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 915.026793][T17420] ? __pfx_packet_sendmsg+0x10/0x10 [ 915.026813][T17420] __sock_sendmsg+0x21c/0x270 [ 915.026848][T17420] __sys_sendto+0x3bd/0x520 [ 915.026871][T17420] ? __pfx___sys_sendto+0x10/0x10 [ 915.026887][T17420] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 915.026920][T17420] ? __fget_files+0x3a0/0x420 [ 915.026952][T17420] ? ksys_write+0x22a/0x250 [ 915.026972][T17420] ? __pfx_ksys_write+0x10/0x10 [ 915.026992][T17420] __x64_sys_sendto+0xde/0x100 [ 915.027015][T17420] do_syscall_64+0xfa/0xf80 [ 915.027035][T17420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.027053][T17420] ? clear_bhb_loop+0x60/0xb0 [ 915.027071][T17420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.027088][T17420] RIP: 0033:0x7f8e9af8f749 [ 915.027104][T17420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.027118][T17420] RSP: 002b:00007f8e9bee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 915.027137][T17420] RAX: ffffffffffffffda RBX: 00007f8e9b1e5fa0 RCX: 00007f8e9af8f749 [ 915.027149][T17420] RDX: 000000000000fc13 RSI: 0000200000000800 RDI: 0000000000000003 [ 915.027161][T17420] RBP: 00007f8e9bee3090 R08: 0000000000000000 R09: fffffffffffffef0 [ 915.027172][T17420] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 915.027184][T17420] R13: 00007f8e9b1e6038 R14: 00007f8e9b1e5fa0 R15: 00007fffbd74d338 [ 915.027216][T17420] [ 915.526491][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17227'. [ 915.725445][T17456] netlink: 'syz.4.17234': attribute type 29 has an invalid length. [ 915.748159][T17455] netlink: 'syz.1.17237': attribute type 2 has an invalid length. [ 915.762801][T17456] netlink: 'syz.4.17234': attribute type 29 has an invalid length. [ 915.796923][T17458] openvswitch: netlink: Missing key (keys=40, expected=80) [ 915.802707][T17456] netlink: 500 bytes leftover after parsing attributes in process `syz.4.17234'. [ 916.040380][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17245'. [ 916.085243][T17484] netlink: 'syz.0.17247': attribute type 11 has an invalid length. [ 916.105117][T17484] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17247'. [ 916.119412][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17248'. [ 916.214327][T17490] netlink: 'syz.1.17250': attribute type 27 has an invalid length. [ 916.222350][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6120 ms [ 916.222381][ C1] lec:lec_tx_timeout: lec0 [ 916.231085][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 916.244363][T17490] netlink: 'syz.1.17250': attribute type 4 has an invalid length. [ 916.252586][T17490] netlink: 144 bytes leftover after parsing attributes in process `syz.1.17250'. [ 916.295905][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17252'. [ 916.354945][T17503] vlan0: entered promiscuous mode [ 916.364621][T17503] gretap0: entered promiscuous mode [ 917.092997][T17528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.544272][T17575] Cannot find add_set index 2 as target [ 917.763047][T17585] tun0: tun_chr_ioctl cmd 1074025675 [ 917.768395][T17585] tun0: persist disabled [ 917.775263][T17585] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 917.806160][T17591] netlink: 'syz.0.17285': attribute type 1 has an invalid length. [ 918.325920][T17616] netlink: 'syz.4.17296': attribute type 1 has an invalid length. [ 918.335706][T17619] FAULT_INJECTION: forcing a failure. [ 918.335706][T17619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.363431][T17619] CPU: 0 UID: 0 PID: 17619 Comm: syz.3.17297 Not tainted syzkaller #0 PREEMPT(full) [ 918.363458][T17619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 918.363470][T17619] Call Trace: [ 918.363478][T17619] [ 918.363487][T17619] dump_stack_lvl+0x189/0x250 [ 918.363515][T17619] ? __pfx____ratelimit+0x10/0x10 [ 918.363532][T17619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.363553][T17619] ? __pfx__printk+0x10/0x10 [ 918.363578][T17619] ? __might_fault+0xb0/0x130 [ 918.363614][T17619] should_fail_ex+0x414/0x560 [ 918.363646][T17619] _copy_from_user+0x2d/0xb0 [ 918.363666][T17619] ___sys_sendmsg+0x158/0x2a0 [ 918.363692][T17619] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.363721][T17619] ? rcu_read_lock_any_held+0xb3/0x120 [ 918.363772][T17619] ? __fget_files+0x2a/0x420 [ 918.363792][T17619] ? __fget_files+0x3a0/0x420 [ 918.363825][T17619] __x64_sys_sendmsg+0x19b/0x260 [ 918.363848][T17619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.363880][T17619] ? __pfx_ksys_write+0x10/0x10 [ 918.363902][T17619] ? do_syscall_64+0xbe/0xf80 [ 918.363925][T17619] do_syscall_64+0xfa/0xf80 [ 918.363945][T17619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.363963][T17619] ? clear_bhb_loop+0x60/0xb0 [ 918.363985][T17619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.364002][T17619] RIP: 0033:0x7f97a4f8f749 [ 918.364019][T17619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.364034][T17619] RSP: 002b:00007f97a5e09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.364054][T17619] RAX: ffffffffffffffda RBX: 00007f97a51e5fa0 RCX: 00007f97a4f8f749 [ 918.364068][T17619] RDX: 000000002400c840 RSI: 0000200000000040 RDI: 0000000000000004 [ 918.364081][T17619] RBP: 00007f97a5e09090 R08: 0000000000000000 R09: 0000000000000000 [ 918.364093][T17619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.364104][T17619] R13: 00007f97a51e6038 R14: 00007f97a51e5fa0 R15: 00007ffe49873a48 [ 918.364137][T17619] [ 918.391492][T17621] bond45: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 918.592309][T17621] bond45 (unregistering): Released all slaves [ 919.478426][T17684] sock: sock_timestamping_bind_phc: sock not bind to device [ 919.560329][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.598518][T17693] netlink: 'syz.2.17323': attribute type 5 has an invalid length. [ 919.766049][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.822068][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.832182][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.840495][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.860815][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.890049][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.900184][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 919.962342][T17702] bond36: option mode: invalid value (133) [ 919.993968][T17702] bond36 (unregistering): Released all slaves [ 920.050827][T17691] netlink: 'syz.0.17320': attribute type 10 has an invalid length. [ 920.054172][T17714] __nla_validate_parse: 16 callbacks suppressed [ 920.054188][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17330'. [ 920.070724][T17715] Unsupported ieee802154 address type: 0 [ 920.184668][T17714] FAULT_INJECTION: forcing a failure. [ 920.184668][T17714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.201530][T17714] CPU: 0 UID: 0 PID: 17714 Comm: syz.3.17330 Not tainted syzkaller #0 PREEMPT(full) [ 920.201557][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.201568][T17714] Call Trace: [ 920.201576][T17714] [ 920.201584][T17714] dump_stack_lvl+0x189/0x250 [ 920.201609][T17714] ? __pfx____ratelimit+0x10/0x10 [ 920.201627][T17714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.201647][T17714] ? __pfx__printk+0x10/0x10 [ 920.201669][T17714] ? __might_fault+0xb0/0x130 [ 920.201703][T17714] should_fail_ex+0x414/0x560 [ 920.201732][T17714] _copy_from_user+0x2d/0xb0 [ 920.201754][T17714] ___sys_sendmsg+0x158/0x2a0 [ 920.201778][T17714] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.201805][T17714] ? rcu_read_lock_any_held+0xb3/0x120 [ 920.201852][T17714] ? __fget_files+0x2a/0x420 [ 920.201872][T17714] ? __fget_files+0x3a0/0x420 [ 920.201900][T17714] __x64_sys_sendmsg+0x19b/0x260 [ 920.201922][T17714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.201952][T17714] ? __pfx_ksys_write+0x10/0x10 [ 920.201974][T17714] ? do_syscall_64+0xbe/0xf80 [ 920.201996][T17714] do_syscall_64+0xfa/0xf80 [ 920.202013][T17714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.202031][T17714] ? clear_bhb_loop+0x60/0xb0 [ 920.202053][T17714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.202070][T17714] RIP: 0033:0x7f97a4f8f749 [ 920.202087][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.202102][T17714] RSP: 002b:00007f97a5e09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.202122][T17714] RAX: ffffffffffffffda RBX: 00007f97a51e5fa0 RCX: 00007f97a4f8f749 [ 920.202135][T17714] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 920.202147][T17714] RBP: 00007f97a5e09090 R08: 0000000000000000 R09: 0000000000000000 [ 920.202159][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.202170][T17714] R13: 00007f97a51e6038 R14: 00007f97a51e5fa0 R15: 00007ffe49873a48 [ 920.202201][T17714] [ 920.460522][T17725] FAULT_INJECTION: forcing a failure. [ 920.460522][T17725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.524074][T17725] CPU: 1 UID: 0 PID: 17725 Comm: syz.4.17332 Not tainted syzkaller #0 PREEMPT(full) [ 920.524100][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.524112][T17725] Call Trace: [ 920.524120][T17725] [ 920.524129][T17725] dump_stack_lvl+0x189/0x250 [ 920.524156][T17725] ? __pfx____ratelimit+0x10/0x10 [ 920.524175][T17725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.524196][T17725] ? __pfx__printk+0x10/0x10 [ 920.524219][T17725] ? __might_fault+0xb0/0x130 [ 920.524256][T17725] should_fail_ex+0x414/0x560 [ 920.524288][T17725] _copy_from_user+0x2d/0xb0 [ 920.524310][T17725] ___sys_sendmsg+0x158/0x2a0 [ 920.524335][T17725] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.524360][T17725] ? rcu_read_lock_any_held+0xb3/0x120 [ 920.524408][T17725] ? __fget_files+0x2a/0x420 [ 920.524428][T17725] ? __fget_files+0x3a0/0x420 [ 920.524456][T17725] __x64_sys_sendmsg+0x19b/0x260 [ 920.524485][T17725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.524514][T17725] ? __pfx_ksys_write+0x10/0x10 [ 920.524536][T17725] ? do_syscall_64+0xbe/0xf80 [ 920.524558][T17725] do_syscall_64+0xfa/0xf80 [ 920.524576][T17725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.524593][T17725] ? clear_bhb_loop+0x60/0xb0 [ 920.524611][T17725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.524627][T17725] RIP: 0033:0x7fcfb738f749 [ 920.524641][T17725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.524655][T17725] RSP: 002b:00007fcfb55f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.524674][T17725] RAX: ffffffffffffffda RBX: 00007fcfb75e5fa0 RCX: 00007fcfb738f749 [ 920.524687][T17725] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 920.524697][T17725] RBP: 00007fcfb55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 920.524707][T17725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.524718][T17725] R13: 00007fcfb75e6038 R14: 00007fcfb75e5fa0 R15: 00007ffdefe2f2c8 [ 920.524747][T17725] [ 920.795489][T17723] macvlan4: entered promiscuous mode [ 920.821412][T17723] macvlan4: entered allmulticast mode [ 920.828158][T17723] bond35: entered promiscuous mode [ 920.846058][T17723] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 920.910533][T17723] bond35: left promiscuous mode [ 921.024702][T17754] FAULT_INJECTION: forcing a failure. [ 921.024702][T17754] name failslab, interval 1, probability 0, space 0, times 0 [ 921.041369][T17754] CPU: 0 UID: 0 PID: 17754 Comm: syz.2.17343 Not tainted syzkaller #0 PREEMPT(full) [ 921.041393][T17754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 921.041420][T17754] Call Trace: [ 921.041427][T17754] [ 921.041433][T17754] dump_stack_lvl+0x189/0x250 [ 921.041451][T17754] ? __pfx____ratelimit+0x10/0x10 [ 921.041461][T17754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.041473][T17754] ? __pfx__printk+0x10/0x10 [ 921.041487][T17754] ? __lock_acquire+0x6b6/0x2cf0 [ 921.041504][T17754] should_fail_ex+0x414/0x560 [ 921.041521][T17754] should_failslab+0xa8/0x100 [ 921.041535][T17754] kmem_cache_alloc_noprof+0x88/0x710 [ 921.041549][T17754] ? __netlink_lookup+0xbd/0x8a0 [ 921.041562][T17754] ? skb_clone+0x212/0x3a0 [ 921.041577][T17754] skb_clone+0x212/0x3a0 [ 921.041590][T17754] __netlink_deliver_tap+0x404/0x850 [ 921.041610][T17754] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.041623][T17754] netlink_deliver_tap+0x19c/0x1b0 [ 921.041635][T17754] netlink_unicast+0x7fa/0x9e0 [ 921.041652][T17754] ? __pfx_netlink_unicast+0x10/0x10 [ 921.041664][T17754] ? netlink_sendmsg+0x642/0xb30 [ 921.041675][T17754] ? skb_put+0x11b/0x210 [ 921.041687][T17754] netlink_sendmsg+0x805/0xb30 [ 921.041705][T17754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.041719][T17754] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.041733][T17754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.041743][T17754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.041755][T17754] __sock_sendmsg+0x21c/0x270 [ 921.041771][T17754] ____sys_sendmsg+0x505/0x820 [ 921.041787][T17754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.041804][T17754] ? import_iovec+0x74/0xa0 [ 921.041818][T17754] ___sys_sendmsg+0x21f/0x2a0 [ 921.041831][T17754] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.041846][T17754] ? rcu_read_lock_any_held+0xb3/0x120 [ 921.041878][T17754] ? __fget_files+0x2a/0x420 [ 921.041890][T17754] ? __fget_files+0x3a0/0x420 [ 921.041907][T17754] __x64_sys_sendmsg+0x19b/0x260 [ 921.041921][T17754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.041938][T17754] ? __pfx_ksys_write+0x10/0x10 [ 921.041953][T17754] ? do_syscall_64+0xbe/0xf80 [ 921.041966][T17754] do_syscall_64+0xfa/0xf80 [ 921.041976][T17754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.041987][T17754] ? clear_bhb_loop+0x60/0xb0 [ 921.041999][T17754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.042009][T17754] RIP: 0033:0x7fca4158f749 [ 921.042020][T17754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.042029][T17754] RSP: 002b:00007fca424ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.042041][T17754] RAX: ffffffffffffffda RBX: 00007fca417e5fa0 RCX: 00007fca4158f749 [ 921.042049][T17754] RDX: 000000002400c840 RSI: 0000200000000040 RDI: 0000000000000004 [ 921.042056][T17754] RBP: 00007fca424ac090 R08: 0000000000000000 R09: 0000000000000000 [ 921.042062][T17754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.042068][T17754] R13: 00007fca417e6038 R14: 00007fca417e5fa0 R15: 00007ffd0fd84778 [ 921.042088][T17754] [ 921.542894][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17347'. [ 921.770030][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17351'. [ 921.774155][T17785] Cannot find add_set index 2 as target [ 921.809031][T17782] gtp1: entered promiscuous mode [ 921.815984][T17782] gtp1: entered allmulticast mode [ 921.941250][T17794] FAULT_INJECTION: forcing a failure. [ 921.941250][T17794] name failslab, interval 1, probability 0, space 0, times 0 [ 921.959428][T17794] CPU: 1 UID: 0 PID: 17794 Comm: syz.4.17359 Not tainted syzkaller #0 PREEMPT(full) [ 921.959455][T17794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 921.959466][T17794] Call Trace: [ 921.959473][T17794] [ 921.959480][T17794] dump_stack_lvl+0x189/0x250 [ 921.959505][T17794] ? __pfx____ratelimit+0x10/0x10 [ 921.959524][T17794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.959544][T17794] ? __pfx__printk+0x10/0x10 [ 921.959573][T17794] ? __pfx___might_resched+0x10/0x10 [ 921.959592][T17794] ? fs_reclaim_acquire+0x7d/0x100 [ 921.959616][T17794] should_fail_ex+0x414/0x560 [ 921.959645][T17794] should_failslab+0xa8/0x100 [ 921.959668][T17794] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 921.959689][T17794] ? hwsim_del_radio_nl+0x3c1/0x1000 [ 921.959711][T17794] kstrndup+0x80/0x160 [ 921.959732][T17794] hwsim_del_radio_nl+0x3c1/0x1000 [ 921.959750][T17794] ? rcu_is_watching+0x15/0xb0 [ 921.959774][T17794] ? __nla_parse+0x40/0x60 [ 921.959793][T17794] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 921.959811][T17794] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 921.959839][T17794] genl_family_rcv_msg_doit+0x215/0x300 [ 921.959863][T17794] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 921.959895][T17794] ? bpf_lsm_capable+0x9/0x20 [ 921.959914][T17794] ? security_capable+0x7e/0x2e0 [ 921.959941][T17794] genl_rcv_msg+0x60e/0x790 [ 921.959964][T17794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.959980][T17794] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 921.960012][T17794] netlink_rcv_skb+0x208/0x470 [ 921.960035][T17794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.960053][T17794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.960105][T17794] ? down_read+0x274/0x2e0 [ 921.960123][T17794] ? genl_rcv+0xd/0x40 [ 921.960142][T17794] genl_rcv+0x28/0x40 [ 921.960157][T17794] netlink_unicast+0x82f/0x9e0 [ 921.960187][T17794] ? __pfx_netlink_unicast+0x10/0x10 [ 921.960209][T17794] ? netlink_sendmsg+0x642/0xb30 [ 921.960229][T17794] ? skb_put+0x11b/0x210 [ 921.960252][T17794] netlink_sendmsg+0x805/0xb30 [ 921.960285][T17794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.960311][T17794] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.960335][T17794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.960351][T17794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.960372][T17794] __sock_sendmsg+0x21c/0x270 [ 921.960399][T17794] ____sys_sendmsg+0x505/0x820 [ 921.960426][T17794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.960457][T17794] ? import_iovec+0x74/0xa0 [ 921.960483][T17794] ___sys_sendmsg+0x21f/0x2a0 [ 921.960506][T17794] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.960535][T17794] ? rcu_read_lock_any_held+0xb3/0x120 [ 921.960588][T17794] ? __fget_files+0x2a/0x420 [ 921.960608][T17794] ? __fget_files+0x3a0/0x420 [ 921.960641][T17794] __x64_sys_sendmsg+0x19b/0x260 [ 921.960666][T17794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.960698][T17794] ? __pfx_ksys_write+0x10/0x10 [ 921.960721][T17794] ? do_syscall_64+0xbe/0xf80 [ 921.960744][T17794] do_syscall_64+0xfa/0xf80 [ 921.960763][T17794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.960781][T17794] ? clear_bhb_loop+0x60/0xb0 [ 921.960804][T17794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.960821][T17794] RIP: 0033:0x7fcfb738f749 [ 921.960838][T17794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.960853][T17794] RSP: 002b:00007fcfb55f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.960874][T17794] RAX: ffffffffffffffda RBX: 00007fcfb75e5fa0 RCX: 00007fcfb738f749 [ 921.960887][T17794] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 921.960900][T17794] RBP: 00007fcfb55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 921.960915][T17794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.960925][T17794] R13: 00007fcfb75e6038 R14: 00007fcfb75e5fa0 R15: 00007ffdefe2f2c8 [ 921.960955][T17794] [ 922.335355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6100 ms [ 922.343406][ C1] lec:lec_tx_timeout: lec0 [ 922.349431][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 922.771024][T17802] lo speed is unknown, defaulting to 1000 [ 922.926202][T17828] Cannot find del_set index 3 as target [ 922.953323][T17830] netlink: 172 bytes leftover after parsing attributes in process `syz.2.17368'. [ 922.998674][T17830] NCSI netlink: No device for ifindex 813332851 [ 923.080539][T17802] wlan0 speed is unknown, defaulting to 1000 [ 923.415817][T17853] macvlan4: entered promiscuous mode [ 923.441452][T17853] macvlan4: entered allmulticast mode [ 923.449391][T17853] bond36: entered promiscuous mode [ 923.457281][T17853] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 923.477662][T17853] bond36: left promiscuous mode [ 923.517089][T17863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17379'. [ 923.536098][T17866] Cannot find del_set index 3 as target [ 923.863080][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17385'. [ 924.171808][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17390'. [ 924.425585][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17397'. [ 924.466348][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17398'. [ 924.676264][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17400'. [ 924.973329][T17946] bridge18: entered promiscuous mode [ 924.978802][T17946] bridge18: entered allmulticast mode [ 925.066329][T17955] validate_nla: 30 callbacks suppressed [ 925.066349][T17955] netlink: 'syz.1.17410': attribute type 29 has an invalid length. [ 925.080107][T17955] __nla_validate_parse: 4 callbacks suppressed [ 925.080117][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17410'. [ 925.159055][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17409'. [ 925.459238][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17413'. [ 925.496153][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17414'. [ 925.572848][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17414'. [ 925.573714][T17973] netlink: 'syz.4.17415': attribute type 10 has an invalid length. [ 925.590289][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17415'. [ 925.604310][T17973] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 925.785837][T17988] FAULT_INJECTION: forcing a failure. [ 925.785837][T17988] name failslab, interval 1, probability 0, space 0, times 0 [ 925.828475][T17988] CPU: 0 UID: 0 PID: 17988 Comm: syz.1.17421 Not tainted syzkaller #0 PREEMPT(full) [ 925.828502][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 925.828513][T17988] Call Trace: [ 925.828521][T17988] [ 925.828531][T17988] dump_stack_lvl+0x189/0x250 [ 925.828556][T17988] ? __pfx____ratelimit+0x10/0x10 [ 925.828574][T17988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.828595][T17988] ? __pfx__printk+0x10/0x10 [ 925.828635][T17988] should_fail_ex+0x414/0x560 [ 925.828667][T17988] should_failslab+0xa8/0x100 [ 925.828690][T17988] __kmalloc_cache_noprof+0x84/0x700 [ 925.828710][T17988] ? sctp_add_bind_addr+0x8c/0x370 [ 925.828748][T17988] sctp_add_bind_addr+0x8c/0x370 [ 925.828777][T17988] sctp_copy_local_addr_list+0x30b/0x4e0 [ 925.828804][T17988] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 925.828828][T17988] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 925.828854][T17988] ? sctp_v6_is_any+0x64/0x80 [ 925.828879][T17988] ? sctp_copy_one_addr+0x93/0x360 [ 925.828903][T17988] sctp_bind_addr_copy+0xb3/0x3c0 [ 925.828925][T17988] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 925.828951][T17988] sctp_connect_new_asoc+0x2e0/0x690 [ 925.828974][T17988] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 925.828999][T17988] ? sctp_get_af_specific+0x29/0x80 [ 925.829019][T17988] ? sctp_inet6_send_verify+0x80/0x300 [ 925.829040][T17988] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 925.829063][T17988] __sctp_connect+0x5b5/0xda0 [ 925.829095][T17988] ? __pfx___sctp_connect+0x10/0x10 [ 925.829113][T17988] ? security_sctp_bind_connect+0x7e/0x2e0 [ 925.829135][T17988] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 925.829161][T17988] sctp_getsockopt_connectx3+0x1fa/0x320 [ 925.829189][T17988] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 925.829214][T17988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 925.829234][T17988] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 925.829265][T17988] sctp_getsockopt+0x984/0xb90 [ 925.829282][T17988] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 925.829311][T17988] do_sock_getsockopt+0x2b4/0x3d0 [ 925.829336][T17988] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 925.829355][T17988] ? do_syscall_64+0x80/0xf80 [ 925.829373][T17988] ? __fget_files+0x2a/0x420 [ 925.829393][T17988] ? __fget_files+0x3a0/0x420 [ 925.829413][T17988] ? __fget_files+0x2a/0x420 [ 925.829443][T17988] __x64_sys_getsockopt+0x1a5/0x250 [ 925.829463][T17988] ? do_syscall_64+0x80/0xf80 [ 925.829483][T17988] ? do_syscall_64+0x80/0xf80 [ 925.829506][T17988] do_syscall_64+0xfa/0xf80 [ 925.829525][T17988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.829543][T17988] ? clear_bhb_loop+0x60/0xb0 [ 925.829563][T17988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.829580][T17988] RIP: 0033:0x7fb5e598f749 [ 925.829595][T17988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.829610][T17988] RSP: 002b:00007fb5e6798038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 925.829629][T17988] RAX: ffffffffffffffda RBX: 00007fb5e5be5fa0 RCX: 00007fb5e598f749 [ 925.829642][T17988] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 925.829654][T17988] RBP: 00007fb5e6798090 R08: 0000200000000240 R09: 0000000000000000 [ 925.829664][T17988] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 925.829676][T17988] R13: 00007fb5e5be6038 R14: 00007fb5e5be5fa0 R15: 00007fffffe2b0c8 [ 925.829708][T17988] [ 926.166236][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17422'. [ 926.270387][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17423'. [ 926.329432][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17427'. [ 926.473752][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17427'. [ 926.768077][T18034] FAULT_INJECTION: forcing a failure. [ 926.768077][T18034] name failslab, interval 1, probability 0, space 0, times 0 [ 926.817949][T18034] CPU: 1 UID: 0 PID: 18034 Comm: syz.2.17437 Not tainted syzkaller #0 PREEMPT(full) [ 926.817977][T18034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.817988][T18034] Call Trace: [ 926.817996][T18034] [ 926.818005][T18034] dump_stack_lvl+0x189/0x250 [ 926.818030][T18034] ? __pfx____ratelimit+0x10/0x10 [ 926.818049][T18034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.818069][T18034] ? __pfx__printk+0x10/0x10 [ 926.818100][T18034] ? __pfx___might_resched+0x10/0x10 [ 926.818125][T18034] should_fail_ex+0x414/0x560 [ 926.818156][T18034] should_failslab+0xa8/0x100 [ 926.818179][T18034] __kmalloc_noprof+0xdf/0x800 [ 926.818195][T18034] ? kfree+0x4d/0x660 [ 926.818212][T18034] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 926.818237][T18034] tomoyo_realpath_from_path+0xe3/0x5d0 [ 926.818261][T18034] ? tomoyo_domain+0xd8/0x130 [ 926.818290][T18034] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 926.818309][T18034] tomoyo_path_number_perm+0x1e8/0x5a0 [ 926.818328][T18034] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 926.818364][T18034] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 926.818402][T18034] ? __fget_files+0x2a/0x420 [ 926.818428][T18034] ? __fget_files+0x3a0/0x420 [ 926.818446][T18034] ? __fget_files+0x2a/0x420 [ 926.818490][T18034] security_file_ioctl+0xcb/0x2d0 [ 926.818511][T18034] __se_sys_ioctl+0x47/0x170 [ 926.818532][T18034] do_syscall_64+0xfa/0xf80 [ 926.818550][T18034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.818566][T18034] ? clear_bhb_loop+0x60/0xb0 [ 926.818586][T18034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.818602][T18034] RIP: 0033:0x7fca4158f749 [ 926.818619][T18034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.818634][T18034] RSP: 002b:00007fca424ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.818653][T18034] RAX: ffffffffffffffda RBX: 00007fca417e5fa0 RCX: 00007fca4158f749 [ 926.818673][T18034] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 926.818684][T18034] RBP: 00007fca424ac090 R08: 0000000000000000 R09: 0000000000000000 [ 926.818695][T18034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.818706][T18034] R13: 00007fca417e6038 R14: 00007fca417e5fa0 R15: 00007ffd0fd84778 [ 926.818739][T18034] [ 926.818747][T18034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 927.479481][T18064] syzkaller1: entered promiscuous mode [ 927.487101][T18064] syzkaller1: entered allmulticast mode [ 927.499521][T18073] netlink: 'syz.1.17450': attribute type 4 has an invalid length. [ 927.598080][T18079] FAULT_INJECTION: forcing a failure. [ 927.598080][T18079] name failslab, interval 1, probability 0, space 0, times 0 [ 927.616945][T18079] CPU: 1 UID: 0 PID: 18079 Comm: syz.4.17454 Not tainted syzkaller #0 PREEMPT(full) [ 927.616969][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.616978][T18079] Call Trace: [ 927.616986][T18079] [ 927.616994][T18079] dump_stack_lvl+0x189/0x250 [ 927.617021][T18079] ? __pfx____ratelimit+0x10/0x10 [ 927.617039][T18079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.617059][T18079] ? __pfx__printk+0x10/0x10 [ 927.617098][T18079] should_fail_ex+0x414/0x560 [ 927.617129][T18079] should_failslab+0xa8/0x100 [ 927.617152][T18079] __kmalloc_cache_noprof+0x84/0x700 [ 927.617172][T18079] ? sctp_add_bind_addr+0x8c/0x370 [ 927.617200][T18079] sctp_add_bind_addr+0x8c/0x370 [ 927.617227][T18079] sctp_copy_local_addr_list+0x30b/0x4e0 [ 927.617255][T18079] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 927.617277][T18079] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 927.617298][T18079] ? sctp_v6_is_any+0x64/0x80 [ 927.617323][T18079] ? sctp_copy_one_addr+0x93/0x360 [ 927.617349][T18079] sctp_bind_addr_copy+0xb3/0x3c0 [ 927.617371][T18079] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 927.617396][T18079] sctp_connect_new_asoc+0x2e0/0x690 [ 927.617418][T18079] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 927.617442][T18079] ? sctp_get_af_specific+0x29/0x80 [ 927.617462][T18079] ? sctp_inet6_send_verify+0x80/0x300 [ 927.617482][T18079] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 927.617504][T18079] __sctp_connect+0x5b5/0xda0 [ 927.617535][T18079] ? __pfx___sctp_connect+0x10/0x10 [ 927.617553][T18079] ? security_sctp_bind_connect+0x7e/0x2e0 [ 927.617573][T18079] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 927.617597][T18079] sctp_getsockopt_connectx3+0x1fa/0x320 [ 927.617623][T18079] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 927.617645][T18079] ? __local_bh_enable_ip+0x12d/0x1c0 [ 927.617663][T18079] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 927.617694][T18079] sctp_getsockopt+0x984/0xb90 [ 927.617710][T18079] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 927.617738][T18079] do_sock_getsockopt+0x2b4/0x3d0 [ 927.617760][T18079] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 927.617783][T18079] ? do_syscall_64+0x80/0xf80 [ 927.617801][T18079] ? __fget_files+0x2a/0x420 [ 927.617821][T18079] ? __fget_files+0x3a0/0x420 [ 927.617841][T18079] ? __fget_files+0x2a/0x420 [ 927.617877][T18079] __x64_sys_getsockopt+0x1a5/0x250 [ 927.617897][T18079] ? do_syscall_64+0x80/0xf80 [ 927.617917][T18079] ? do_syscall_64+0x80/0xf80 [ 927.617939][T18079] do_syscall_64+0xfa/0xf80 [ 927.617958][T18079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.617976][T18079] ? clear_bhb_loop+0x60/0xb0 [ 927.617999][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.618016][T18079] RIP: 0033:0x7fcfb738f749 [ 927.618032][T18079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.618048][T18079] RSP: 002b:00007fcfb55f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 927.618068][T18079] RAX: ffffffffffffffda RBX: 00007fcfb75e5fa0 RCX: 00007fcfb738f749 [ 927.618080][T18079] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 927.618092][T18079] RBP: 00007fcfb55f6090 R08: 0000200000000240 R09: 0000000000000000 [ 927.618103][T18079] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 927.618114][T18079] R13: 00007fcfb75e6038 R14: 00007fcfb75e5fa0 R15: 00007ffdefe2f2c8 [ 927.618145][T18079] [ 928.034704][T18086] bond20: option all_slaves_active: invalid value (222) [ 928.048294][T18086] bond20 (unregistering): Released all slaves [ 928.381005][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6030 ms [ 928.389043][ C1] lec:lec_tx_timeout: lec0 [ 928.394112][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 934.141030][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 934.149097][ C1] lec:lec_tx_timeout: lec0 [ 934.153977][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 939.901010][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 939.909079][ C1] lec:lec_tx_timeout: lec0 [ 939.914066][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 944.921295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 944.929311][ C1] lec:lec_tx_timeout: lec0 [ 944.933937][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 949.941040][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 949.949076][ C1] lec:lec_tx_timeout: lec0 [ 949.953675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 954.961064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 954.969089][ C1] lec:lec_tx_timeout: lec0 [ 954.973714][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 959.981019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 959.989052][ C1] lec:lec_tx_timeout: lec0 [ 959.993837][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 965.001224][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 965.009342][ C1] lec:lec_tx_timeout: lec0 [ 965.013894][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 970.021020][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 970.029040][ C1] lec:lec_tx_timeout: lec0 [ 970.033552][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 975.041048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 975.049091][ C1] lec:lec_tx_timeout: lec0 [ 975.053715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 980.061011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 980.069050][ C1] lec:lec_tx_timeout: lec0 [ 980.073668][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 985.081355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 985.089378][ C1] lec:lec_tx_timeout: lec0 [ 985.093971][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 991.111048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6020 ms [ 991.119088][ C1] lec:lec_tx_timeout: lec0 [ 991.124299][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 996.861004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 996.869129][ C1] lec:lec_tx_timeout: lec0 [ 996.873960][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1001.901021][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1001.909045][ C1] lec:lec_tx_timeout: lec0 [ 1001.913705][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1006.931262][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1006.939307][ C1] lec:lec_tx_timeout: lec0 [ 1006.943849][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1011.951146][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1011.959146][ C1] lec:lec_tx_timeout: lec0 [ 1011.963788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1016.970979][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1016.979004][ C1] lec:lec_tx_timeout: lec0 [ 1016.983556][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1021.991281][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1021.999293][ C1] lec:lec_tx_timeout: lec0 [ 1022.003992][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1027.010978][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1027.019036][ C1] lec:lec_tx_timeout: lec0 [ 1027.023845][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1032.031006][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1032.039029][ C1] lec:lec_tx_timeout: lec0 [ 1032.043797][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1037.050983][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1037.059019][ C1] lec:lec_tx_timeout: lec0 [ 1037.063803][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1042.071143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1042.079177][ C1] lec:lec_tx_timeout: lec0 [ 1042.083938][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1047.901212][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 1047.909244][ C1] lec:lec_tx_timeout: lec0 [ 1047.913987][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1052.921015][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1052.929046][ C1] lec:lec_tx_timeout: lec0 [ 1052.933856][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1057.940984][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1057.949010][ C1] lec:lec_tx_timeout: lec0 [ 1057.953701][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1062.961209][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1062.969228][ C1] lec:lec_tx_timeout: lec0 [ 1062.973851][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1067.981376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1067.989407][ C1] lec:lec_tx_timeout: lec0 [ 1067.994137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1069.181589][ T31] INFO: task kworker/0:0:1242 blocked for more than 143 seconds. [ 1069.189356][ T31] Not tainted syzkaller #0 [ 1069.194392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1069.203263][ T31] task:kworker/0:0 state:D stack:22392 pid:1242 tgid:1242 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1069.215495][ T31] Workqueue: events rfkill_sync_work [ 1069.220799][ T31] Call Trace: [ 1069.224113][ T31] [ 1069.227039][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1069.231663][ T31] ? __pfx___schedule+0x10/0x10 [ 1069.236534][ T31] ? schedule+0x91/0x360 [ 1069.240811][ T31] schedule+0x165/0x360 [ 1069.245630][ T31] schedule_preempt_disabled+0x13/0x30 [ 1069.251253][ T31] __mutex_lock+0x7e6/0x1350 [ 1069.255877][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1069.271241][ T31] ? nfc_dev_down+0x3b/0x290 [ 1069.275894][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1069.301188][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1069.317181][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1069.325570][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1069.331887][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1069.337632][ T31] nfc_dev_down+0x3b/0x290 [ 1069.343194][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1069.349221][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 1069.354458][ T31] rfkill_set_block+0x1d2/0x440 [ 1069.359314][ T31] rfkill_sync_work+0x114/0x200 [ 1069.364351][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1069.370085][ T31] process_scheduled_works+0xad1/0x1770 [ 1069.375738][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1069.381786][ T31] worker_thread+0x8a0/0xda0 [ 1069.386385][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1069.392963][ T31] ? __kthread_parkme+0x7b/0x200 [ 1069.397906][ T31] kthread+0x711/0x8a0 [ 1069.402167][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1069.407307][ T31] ? __pfx_kthread+0x10/0x10 [ 1069.412029][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1069.417242][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1069.422740][ T31] ? __pfx_kthread+0x10/0x10 [ 1069.427349][ T31] ret_from_fork+0x599/0xb30 [ 1069.432096][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1069.437244][ T31] ? __switch_to_asm+0x39/0x70 [ 1069.442069][ T31] ? __switch_to_asm+0x33/0x70 [ 1069.446832][ T31] ? __pfx_kthread+0x10/0x10 [ 1069.451651][ T31] ret_from_fork_asm+0x1a/0x30 [ 1069.456431][ T31] [ 1069.459474][ T31] INFO: task kworker/0:10:8000 blocked for more than 143 seconds. [ 1069.467343][ T31] Not tainted syzkaller #0 [ 1069.472363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1069.481391][ T31] task:kworker/0:10 state:D stack:28440 pid:8000 tgid:8000 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1069.493629][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1069.500318][ T31] Call Trace: [ 1069.503638][ T31] [ 1069.506568][ T31] __schedule+0x14bc/0x5000 [ 1069.511360][ T31] ? __pfx___schedule+0x10/0x10 [ 1069.516209][ T31] ? schedule+0x91/0x360 [ 1069.520441][ T31] schedule+0x165/0x360 [ 1069.524632][ T31] schedule_preempt_disabled+0x13/0x30 [ 1069.530170][ T31] __mutex_lock+0x7e6/0x1350 [ 1069.535049][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1069.539837][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1069.546243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1069.551387][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1069.557104][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1069.562836][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1069.568895][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1069.574827][ T31] process_scheduled_works+0xad1/0x1770 [ 1069.580377][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1069.586384][ T31] worker_thread+0x8a0/0xda0 [ 1069.591175][ T31] ? __kthread_parkme+0x7b/0x200 [ 1069.596131][ T31] kthread+0x711/0x8a0 [ 1069.600194][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1069.605465][ T31] ? __pfx_kthread+0x10/0x10 [ 1069.610046][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1069.615343][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1069.620530][ T31] ? __pfx_kthread+0x10/0x10 [ 1069.625137][ T31] ret_from_fork+0x599/0xb30 [ 1069.629714][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1069.635038][ T31] ? __switch_to_asm+0x39/0x70 [ 1069.639794][ T31] ? __switch_to_asm+0x33/0x70 [ 1069.644709][ T31] ? __pfx_kthread+0x10/0x10 [ 1069.649308][ T31] ret_from_fork_asm+0x1a/0x30 [ 1069.654267][ T31] [ 1069.657364][ T31] INFO: task syz.0.17339:17740 blocked for more than 143 seconds. [ 1069.666346][ T31] Not tainted syzkaller #0 [ 1069.677357][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1069.686177][ T31] task:syz.0.17339 state:D stack:25400 pid:17740 tgid:17740 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 1069.698251][ T31] Call Trace: [ 1069.701559][ T31] [ 1069.704483][ T31] __schedule+0x14bc/0x5000 [ 1069.708982][ T31] ? lockdep_unlock+0x89/0x120 [ 1069.713784][ T31] ? stack_trace_save+0x9c/0xe0 [ 1069.718630][ T31] ? __pfx___schedule+0x10/0x10 [ 1069.723717][ T31] ? schedule+0x91/0x360 [ 1069.728065][ T31] schedule+0x165/0x360 [ 1069.732534][ T31] schedule_timeout+0x9a/0x270 [ 1069.737308][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1069.742872][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1069.748091][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1069.753842][ T31] ? wait_for_completion+0x267/0x5d0 [ 1069.759144][ T31] wait_for_completion+0x2bf/0x5d0 [ 1069.764356][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1069.770004][ T31] ? __flush_work+0xd2/0xbc0 [ 1069.774767][ T31] ? __flush_work+0xd2/0xbc0 [ 1069.779366][ T31] __flush_work+0x9b9/0xbc0 [ 1069.784014][ T31] ? __flush_work+0xd2/0xbc0 [ 1069.788681][ T31] ? __pfx___flush_work+0x10/0x10 [ 1069.793806][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1069.799090][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1069.804238][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1069.809879][ T31] ? __cancel_work_sync+0x5c/0x110 [ 1069.815210][ T31] __cancel_work_sync+0xbe/0x110 [ 1069.820144][ T31] rfkill_unregister+0x92/0x220 [ 1069.825108][ T31] nfc_unregister_device+0x96/0x300 [ 1069.830301][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1069.836258][ T31] virtual_ncidev_close+0x56/0x90 [ 1069.841469][ T31] __fput+0x44c/0xa70 [ 1069.845465][ T31] task_work_run+0x1d4/0x260 [ 1069.850060][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1069.855298][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 1069.860677][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1069.866306][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 1069.871809][ T31] ? rcu_is_watching+0x15/0xb0 [ 1069.876573][ T31] do_syscall_64+0x2d0/0xf80 [ 1069.881219][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.887307][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1069.892102][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.897989][ T31] RIP: 0033:0x7f8e9af8f749 [ 1069.902628][ T31] RSP: 002b:00007fffbd74d498 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1069.911167][ T31] RAX: 0000000000000000 RBX: 00000000000e0d23 RCX: 00007f8e9af8f749 [ 1069.919138][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1069.927258][ T31] RBP: 00007f8e9b1e7da0 R08: 0000000000000001 R09: 0000001bbd74d78f [ 1069.935461][ T31] R10: 0000001b2f920000 R11: 0000000000000246 R12: 00007f8e9b1e5fac [ 1069.943465][ T31] R13: 00007f8e9b1e5fa0 R14: ffffffffffffffff R15: 00007fffbd74d5b0 [ 1069.951613][ T31] [ 1069.954681][ T31] [ 1069.954681][ T31] Showing all locks held in the system: [ 1069.965322][ T31] 1 lock held by khungtaskd/31: [ 1069.970216][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1069.980421][ T31] 2 locks held by getty/5580: [ 1069.985233][ T31] #0: ffff88814cbd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1069.995204][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1070.005345][ T31] 4 locks held by kworker/0:0/1242: [ 1070.010529][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1070.021713][ T31] #1: ffffc9000d9dfb80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1070.034102][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1070.044206][ T31] #3: ffff88801ffbe100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 1070.053339][ T31] 3 locks held by kworker/0:10/8000: [ 1070.058610][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1070.069744][ T31] #1: ffffc90005b7fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1070.083622][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1070.095023][ T31] 1 lock held by syz.0.17339/17740: [ 1070.100224][ T31] #0: ffff88801ffbe100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 1070.110129][ T31] 3 locks held by syz.4.17469/18120: [ 1070.115569][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.124110][ T31] #1: ffff888054d0f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390 [ 1070.133702][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1070.143830][ T31] 1 lock held by syz.2.17470/18123: [ 1070.149015][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.157490][ T31] 1 lock held by syz.3.17481/18156: [ 1070.162761][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.171535][ T31] 1 lock held by syz.3.17481/18161: [ 1070.176743][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.185307][ T31] 1 lock held by syz.1.17483/18160: [ 1070.190496][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.199333][ T31] 1 lock held by syz-executor/18169: [ 1070.204834][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.213339][ T31] 1 lock held by syz-executor/18173: [ 1070.218622][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.227202][ T31] 1 lock held by syz-executor/18174: [ 1070.232638][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.241383][ T31] 1 lock held by syz-executor/18177: [ 1070.246659][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.255159][ T31] 1 lock held by syz-executor/18178: [ 1070.260439][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.269182][ T31] 1 lock held by syz-executor/18185: [ 1070.274474][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.283008][ T31] 1 lock held by syz-executor/18188: [ 1070.288279][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.296983][ T31] 1 lock held by syz-executor/18189: [ 1070.302627][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.311245][ T31] 1 lock held by syz-executor/18192: [ 1070.316532][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.325182][ T31] 1 lock held by syz-executor/18193: [ 1070.330481][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.339084][ T31] 1 lock held by syz-executor/18200: [ 1070.344452][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.353044][ T31] 1 lock held by syz-executor/18204: [ 1070.358313][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.366839][ T31] 1 lock held by syz-executor/18205: [ 1070.372142][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.380567][ T31] 1 lock held by syz-executor/18208: [ 1070.386641][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.395151][ T31] 1 lock held by syz-executor/18209: [ 1070.400422][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1070.408952][ T31] 2 locks held by dhcpcd/18210: [ 1070.414058][ T31] #0: ffff888048646260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1070.423857][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1070.434858][ T31] [ 1070.437197][ T31] ============================================= [ 1070.437197][ T31] [ 1070.446052][ T31] NMI backtrace for cpu 0 [ 1070.446071][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1070.446094][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1070.446104][ T31] Call Trace: [ 1070.446119][ T31] [ 1070.446127][ T31] dump_stack_lvl+0x189/0x250 [ 1070.446154][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.446173][ T31] ? __pfx__printk+0x10/0x10 [ 1070.446206][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1070.446230][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1070.446254][ T31] ? __pfx__printk+0x10/0x10 [ 1070.446281][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1070.446302][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1070.446322][ T31] sys_info+0x135/0x170 [ 1070.446337][ T31] watchdog+0xf95/0xfe0 [ 1070.446359][ T31] ? watchdog+0x20a/0xfe0 [ 1070.446383][ T31] kthread+0x711/0x8a0 [ 1070.446402][ T31] ? __pfx_watchdog+0x10/0x10 [ 1070.446418][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.446436][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.446455][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1070.446467][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.446484][ T31] ret_from_fork+0x599/0xb30 [ 1070.446499][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.446520][ T31] ? __switch_to_asm+0x39/0x70 [ 1070.446535][ T31] ? __switch_to_asm+0x33/0x70 [ 1070.446550][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.446567][ T31] ret_from_fork_asm+0x1a/0x30 [ 1070.446595][ T31] [ 1070.446605][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1070.596195][ C1] NMI backtrace for cpu 1 [ 1070.596215][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1070.596232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1070.596242][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1070.596264][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1070.596279][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1070.596295][ C1] RAX: 9b5df0c39ba51600 RBX: ffffffff81978fda RCX: 9b5df0c39ba51600 [ 1070.596307][ C1] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 1070.596319][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1070.596331][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 1070.596349][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 1070.596360][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 1070.596373][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1070.596385][ C1] CR2: 000055a3cf7e14b0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1070.596400][ C1] Call Trace: [ 1070.596409][ C1] [ 1070.596416][ C1] default_idle+0x13/0x20 [ 1070.596434][ C1] default_idle_call+0x73/0xb0 [ 1070.596454][ C1] do_idle+0x1ea/0x520 [ 1070.596472][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1070.596490][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1070.596507][ C1] ? __pfx_do_idle+0x10/0x10 [ 1070.596529][ C1] ? do_idle+0x4f9/0x520 [ 1070.596547][ C1] cpu_startup_entry+0x44/0x60 [ 1070.596564][ C1] start_secondary+0x101/0x110 [ 1070.596585][ C1] common_startup_64+0x13e/0x147 [ 1070.596613][ C1] [ 1070.775789][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1070.782650][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1070.791750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1070.801795][ T31] Call Trace: [ 1070.805153][ T31] [ 1070.808171][ T31] dump_stack_lvl+0x99/0x250 [ 1070.812757][ T31] ? __asan_memcpy+0x40/0x70 [ 1070.817337][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.822526][ T31] ? __pfx__printk+0x10/0x10 [ 1070.827117][ T31] vpanic+0x237/0x6d0 [ 1070.831095][ T31] ? __pfx_vpanic+0x10/0x10 [ 1070.835601][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1070.841065][ T31] panic+0xb9/0xc0 [ 1070.844778][ T31] ? __pfx_panic+0x10/0x10 [ 1070.849189][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1070.854554][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1070.860716][ T31] watchdog+0xfdf/0xfe0 [ 1070.864874][ T31] ? watchdog+0x20a/0xfe0 [ 1070.869202][ T31] kthread+0x711/0x8a0 [ 1070.873272][ T31] ? __pfx_watchdog+0x10/0x10 [ 1070.877935][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.882524][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.887719][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1070.892904][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.897485][ T31] ret_from_fork+0x599/0xb30 [ 1070.902064][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.907195][ T31] ? __switch_to_asm+0x39/0x70 [ 1070.911946][ T31] ? __switch_to_asm+0x33/0x70 [ 1070.916699][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.921279][ T31] ret_from_fork_asm+0x1a/0x30 [ 1070.926044][ T31] [ 1070.929203][ T31] Kernel Offset: disabled [ 1070.933530][ T31] Rebooting in 86400 seconds..