last executing test programs: 5.12226291s ago: executing program 3 (id=773): unshare(0x22020400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) (fail_nth: 1) 4.295772984s ago: executing program 2 (id=777): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x2, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 4.221852667s ago: executing program 3 (id=779): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x124, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x75, 0x8, 0x7, 0x2, 0x21, 0xbb, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0x3e, 0x0, 0x7, 0x0, 0x7, 0x2f2, 0x3}}, {0xa, 0x2, [0x7fff, 0x10, 0x4]}}, {{0x1c, 0x1, {0x1, 0x80, 0xf, 0x1, 0x2, 0x6, 0xe, 0x9}}, {0x16, 0x2, [0xf8c, 0x5, 0x7, 0x0, 0x3, 0x0, 0x2, 0x3, 0xd]}}, {{0x1c, 0x1, {0x0, 0xfa, 0x6, 0x9, 0x1, 0x7ff, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0x2]}}, {{0x1c, 0x1, {0x81, 0x6, 0x1, 0x9, 0x2, 0x1, 0x10000, 0x8}}, {0x14, 0x2, [0x7, 0xd, 0x3b5, 0x0, 0x7f, 0x5, 0x1, 0x0]}}, {{0x1c, 0x1, {0x0, 0x2, 0x4, 0x3, 0x0, 0x2, 0x1, 0x4}}, {0xc, 0x2, [0x85, 0x9, 0x3, 0x6]}}]}]}, 0x124}}, 0x18000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000200000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x0) ioctl$FITHAW(r2, 0xc0045878) 3.799839296s ago: executing program 3 (id=781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 3.348270246s ago: executing program 3 (id=784): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x138, 0x98, 0x138, 0x138, 0x98, 0x3b0, 0x2e0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 3.184017912s ago: executing program 3 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x140b, 0x20, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008808) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) 2.999155664s ago: executing program 3 (id=787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffff, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x5, 0x8, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0xd8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ppoll(&(0x7f00000001c0)=[{r2, 0x200}], 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000400)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="3d83207b1d9e989570662f9c2e26f23666209d79d431a5d25575bcaf6559dd75914ebfa027af148b813d", 0x2a}, {&(0x7f0000000480)="ab6eedbda7fd156c2e4405197c7eb26d745d3f362d245db8470a1834c7bf440a3a15ff53123de6c857ebe207736ca8b1382d9f3e5f790eb7999ac5819f934f1d7f2c57ce947d195443cfc1b8613bac29bda15b0fd0e4a4884710fbc83e9e420c0dc1f045b0bd5fc9f23a42a9308884099ad830e235110f9466863e5de084fa4b31d7", 0x82}], 0x2, &(0x7f0000000b40)="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", 0xe40, 0x188d0}, 0x20000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0xfe, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xc8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x14, "002b228078c8e10a87cf10a0e37bbe3522e2a0d5812008b645088f2672636368285a5538b713f5ab1d5b71e89a6c3f0890a2bdec87949dbe3e6283e5dee7833bd36cf9eb41d293a9dbc1a8096375d96f244eda9dd1b1435ac7241701e58e05d46b50b0a12c58673757640be944806693a698a9bba6018624eefa98f28e3cfee5d951fcf227c6c8d55d58fcee8d57c51500dfdc5ec9179e731fd90ef87a45"}]}}}}}}, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfa0}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES8=r6, @ANYRESOCT, @ANYRES8], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 2.604805426s ago: executing program 0 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="42db000000080000b7080000000052007b0af9ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040049d795f89d724a7800330000f394"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r3 = socket(0x2a, 0xa, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x28000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000480)={'veth0_to_bond\x00', @multicast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000608002940000000000900020073797a32000000000900010073797a30"], 0x88}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@getqdisc={0x34, 0x26, 0x400, 0x70bd2d, 0x65dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0xffff}, {0xb, 0xd}, {0x7, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008011}, 0x8090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) 2.484620062s ago: executing program 4 (id=793): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.364449956s ago: executing program 0 (id=794): unshare(0x800) unshare(0x2a020480) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 2.363772626s ago: executing program 2 (id=795): socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1, 0x5, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x100000000000003) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000080000000a000000000000030000000008001e0001"], 0x24}}, 0x0) 2.360990022s ago: executing program 4 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 2.231797378s ago: executing program 0 (id=797): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0x28, 0x0, &(0x7f00000002c0)="52e1119c000000002bf0543786dd", 0x0, 0x4007, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) unshare(0x26020480) socket$pppoe(0x18, 0x1, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x200012, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket(0xa, 0x5, 0x0) getsockopt$inet_int(r7, 0x0, 0x16, 0x0, &(0x7f0000000140)) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, 0x0, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119eed40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x10, 0x80002, 0x0) 2.159240253s ago: executing program 2 (id=799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0xff, 0x2}, 0xff}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES8=r4], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 1.963016528s ago: executing program 2 (id=801): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$kcm(0xa, 0x3, 0x3a) socket$rds(0x15, 0x5, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x1ad, 0x805, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0}], 0x4}, 0x2}], 0x2, 0x40010142, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @private}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x12, 0x23, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x13c0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0xb, 0xff, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0xc}, {0x2, 0x4, 0x3, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x4, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x2, 0x4}, {0x3, 0x4, 0x5, 0x4}, {0x2, 0x1, 0x7, 0x1}, {0x5, 0x1, 0x10, 0xc}], 0x10, 0x200}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.843537756s ago: executing program 1 (id=802): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000008000000000047000000270000000112000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x7}) 1.777961713s ago: executing program 0 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010b00000000010000000e000000040003"], 0x1c}}, 0x2000c000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) syz_emit_ethernet(0x38, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @remote}, @echo={0x8, 0x0, 0x0, 0x10, 0x200, "40fe5d101d16d9aeb0c480c0f8d4"}}}}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r7, 0x20) poll(&(0x7f0000000080)=[{r7, 0x6102}, {r7, 0xc33c}], 0x2, 0x11fb) shutdown(r7, 0x0) unshare(0x2c020400) unshare(0x12000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x9, 0x42, 0x8}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r8}, 0xc) 1.679758977s ago: executing program 1 (id=804): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf2513000000100007800c000400ff01007e83031f59cac09c6f910000000000440003800800030022000000080003000001000008000300517fff040000000000000000080001000200a57fb28c20588769c07fee701cac00000800030008000000080001008000000008000300040000001d337ba472b889049ced299ae84bb3d5cf9921a6ee6d63"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107000000000000000000000000000000006e6c2b3032313100"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r5, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) recvmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(0xffffffffffffffff, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r8, 0x0, 0xffffffff004) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x20000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001580)={0x0, 0x7, 0x7, 0x1, 0x5, 0x2, 0x6, 0x37, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0xb7, 0x6, 0x8}}, &(0x7f0000001640)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001680)={r9, @in={{0x2, 0x4e22, @multicast2}}, 0x8, 0x5, 0x0, 0xb, 0x9, 0xfffffffd, 0x81}, &(0x7f0000001740)=0x9c) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r7) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) sendmsg$nl_generic(r4, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000002a00)={0x574, 0x42, 0x100, 0x70bd2a, 0x25dfdbfd, {0x9}, [@typed={0x4, 0x19}, @nested={0x1f0, 0x20, 0x0, 0x1, [@nested={0x4, 0xc0}, @generic="fde28df2e0a99c0dbc4b68e3ef205430f197cfbeea7bae50d0da2aaebd161750f1a8e1f9c4f479a48b0e5bf920cd724a684dc5551ceadf75b994971e6cbba759754d5fc0b3fec855271a82e7041019219d13b5936f5b76a89869cde7cdf05f7756c01dc2d46b6b7eb79fc4a10588ff485e541e35813c5c7b01ed0825be31520ff7d9224bf27b5d09afdb7ade998c7ce0c79a92b81d3df37ae11d23c27d588c04c9ef5a4f6b3b0fe6fbb1cf393b3100503239533f0f35d41bfa05f943ccf658de354c594b9ad8804b592d08c3abcaae0340867c3c7cb9c014e58f5028be6a3d646d02fc9daafd", @nested={0x4, 0x6f}, @generic="4553013506aabe1b8d528fe3d18b13c70789c72ad27936bbf4f0a5aecdb13608ed98688038f97845087e4705d1746838d12f7ac7c251ab6a90c905054003ec6586ad50665e1059f39fb4648225c907e726f89f9acb9aa823e1468b7d94d75f2574bacf4396b936935fce7ec0f8bac65601f13f7e76e255d837505d3f44380625c5644fa694c3352d720200c0681f4a9f0b3ca063a30b987cddbe3898877f3249c3c5926e5c16026d89ff1ccf02eaa429b30eee093571831696945154d191907e4ac80b8e06fd72d7b905cc2f8d5c85ba85e8b3e8a37f68f5fd36679d4829c3d7b00ce304946f9fb0171e505f312d44776bf1241cc4ab8aa7f6f746a4a8b3"]}, @nested={0x214, 0x9, 0x0, 0x1, [@generic="d01f9f00f1a164bf02b0e85124bdc90c9d8eb3b728146f7ee53cd8d69d30b2ad224bdd5f1ab726e27bf3c2d11d2dc321b4d3ceb19ed164f05613c6f489a9b9b8402271a66bc0226516a9497f5e24", @generic, @generic="11a6644d80375a8ed2df8d482c637c52af0b6ab8bddf18361ccb916f3de9da57941a581cad57719d5a8a15d10648c869580f6ec4bee202aa12ecbf1b95c4e41308cea54605e6ad19e157b274b982525afc10f84e0ae4de8132e457703079761efdb06ec31e72dba551510935a99aa51a38ca2296169b27a7f0351706204e2dbf87dcea06d512b69f485fe68cf2b1eb280b26e7f4cd159d1daab86fb492e75d27f27b4ade257d6d9ccfdf28c7314b15358376", @nested={0x4, 0x97}, @typed={0xfb, 0x2d, 0x0, 0x0, @binary="82b96cf70079834ef4645234ae57f9cf370fee6f5675b25e447d0e46a2a9fac3ca35923307333f60645b559278bedc2a567241b178e5fb910d2146cd39454c4f534423912acafecf92d8eafe93b62ba9319e2611a16edd042667873957a8a9d96978f5c12d9a92631459fbf255cb65026a540a9500ff738eb935c97cd5fa7c1b37d111bfae3d060be9cc0819f402c0de3219fa5f3729de1355b1944922abb5649a74e8420b0ef4e397b865888dfd1c9e36e71351fe692b8be4ff985cbeafc3ddd4703e7357c0409aee9b824cdfc3273b29ca57860d1fd37428628a94900619eefecec3c994a702ae0e52a3ad5da5eecbac381c3a2dd7d7"}, @typed={0x8, 0x41, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x70, 0x0, 0x0, @u32=0xae1}]}, @generic="da1c3c920412492412c73d6c5fadc41c175ee5cc7f9a65e3d072b327e61d264d1bb797560daf0a1c3314efc3b5d1fcefd18768140949cb59b12fb6229fcad3133045d06d9de62e2c363eab64fb92da437d0b8fe9bfdbc8c789c42d4df528f2c3d055a2548b202697ecd38f080b95954c0f439496d135caca65ed3c25a2834f3fd626671091ee2903e31812eea57faf7da90dd8f049c601426eaa6edf739955517b256687a0d449", @typed={0x83, 0x2e, 0x0, 0x0, @binary="0c410bc7755d891f7844e2c64515c5cd802e48ffafae237447dd3773f7f96ec75cea2fbbe89d7e1c34413bd60a7668fb65c15904c21906a3d8e4ccd4a8f907aa25596f130b65ab31aa5786f05aebbad40952f9690ba8b7aceae94e2b518defcb7cccc3fb818e76e88d4bc472368916d9d26d7169cb6a35e1531526c79e058b"}, @generic="e427d2a440526483e6ac91188f6e03acf2815731feda466fa635c8f378a7eb126901d73c445228789c9d0a06"]}, 0x574}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="600030800500020000000000140004"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.649604949s ago: executing program 2 (id=805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="6f8077414b66966af2a6fd66576ce5173a0c3fb6658f0399cec5ec3f5c81e8a9e26d4e8762841001aee00e288e870f21c1ae61eafb6c3ebf0c1e948986cc5ade06b202239858473a74fcef19b18ef0a2d94ca3e25f00327af184442ba7f4f72251eb22487bb988c13f0e232d30da6d110267645ab161c1dc0f1be8507aa14b15c9df8e60770b8964faa5aa9666bd44a9e8eb19a8a397181c6cd5f03eb423df897d7968e1248b2b96800bd62776c6a1ebd728e958a1421c97759e508765c8b47f2e576b3c29d2457e1f20697e18d0edf6a1588ea51b6b8b25bfd8b651e223d188", 0xe0}, {&(0x7f0000000280)="78aea30b597681b910c31bb9a8df2d9d55e577f84601cefb6ac86a", 0x1b}], 0x2, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x7fffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x48, 0xae8a5059199c026f}, 0x4088800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x300, 0x0) ppoll(&(0x7f0000000440)=[{r4, 0x1000}, {r3, 0x21c}, {r3}], 0x3, &(0x7f0000000480), &(0x7f00000004c0)={[0x2]}, 0x8) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000500)=0x5) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x80}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x72}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2044) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000680)=0x62) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000006c0)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000780)={0x9, 0x0, 0x7, 0x2, 0x4, 0x3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000007c0)={'batadv0\x00', 0x1000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x10040094}, 0x0) accept4(r7, 0x0, &(0x7f0000000940), 0x80000) ioctl$sock_ifreq(r3, 0x8913, &(0x7f0000000980)={'syzkaller0\x00', @ifru_names='veth0_virt_wifi\x00'}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r8, &(0x7f00000009c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000a00)=0x1c) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) recvmmsg$unix(r2, &(0x7f0000004000)=[{{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000b40)=""/135, 0x87}, {&(0x7f0000000c00)=""/199, 0xc7}, {&(0x7f0000000d00)=""/145, 0x91}, {&(0x7f0000000dc0)=""/82, 0x52}, {&(0x7f0000000e40)=""/231, 0xe7}, {&(0x7f0000000f40)=""/160, 0xa0}], 0x6, &(0x7f0000001080)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/164, 0xa4}], 0x1, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001480)=""/251, 0xfb}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/175, 0xaf}], 0x3, &(0x7f0000002680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000003900)=[{&(0x7f0000002740)=""/131, 0x83}, {&(0x7f0000002800)=""/209, 0xd1}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x3, &(0x7f0000003940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003ac0)=""/82, 0x52}, {&(0x7f0000003b40)=""/79, 0x4f}, {&(0x7f0000003bc0)=""/125, 0x7d}, {&(0x7f0000003c40)=""/151, 0x97}, {&(0x7f0000003d00)=""/39, 0x27}, {&(0x7f0000003d40)=""/50, 0x32}, {&(0x7f0000003d80)=""/218, 0xda}], 0x7, &(0x7f0000003f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x5, 0x0, &(0x7f0000004140)) sendmsg$AUDIT_TRIM(r12, &(0x7f0000004240)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x10, 0x3f6, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x4040094) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004280)={@map=0x1, 0xffffffffffffffff, 0x19, 0x2000, r10, @value=r15}, 0x20) setsockopt$packet_tx_ring(r14, 0x107, 0xd, &(0x7f00000042c0)=@req3={0x7, 0x4, 0x8, 0x800, 0x6, 0x1, 0x413b}, 0x1c) sendmsg$kcm(r11, &(0x7f00000044c0)={&(0x7f0000004300)=@generic={0x21, "8907966d89c757f083f4f5e5af19acf7255dda2480d5cd30cfd0792dc16da8f90e2ad0e96c0e2e9dbba6c9ef0d83b86a2ece4af029fffe83ef417e1730ca85c6a505a24e7e594402939089473b832dfd41e281622a6a6dbb4dafb4f73153b0e7fd543a2085f65e34da193d228419a4d13608e257d8d2575acde45c4bb6bc"}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004380)="129288af05d9972421731cad31f242e984c7b6b8d45edbea0eeca701de451a9c70bb64e11f618c1709d19ea128a9ad386b7039445775a102b90091da0a676c4a236d500b5725c69e45125ef133a66bce9762d7e27c8548db3f2e344cf74b8bdb5981663b1e098f183ca7735dd2dfbc719232d258deaf40bcf96bb4c0e694f5079fd14f914a2cb19d67604ae1d003d8d976a49b5be4b211e300e38f5f6063d7b57946a3383a15ae48c89b75bf03ab5e66cd67518ac51b6ecd54853f636345d40751e4fa8ec7be4e6e7f5d847eb5e5755d95c4511bcbd6009e1317a77800221cc3f3baa17bc3cad69392acb422e88df067097abf52d9", 0xf5}], 0x1}, 0x4044080) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000004500)={'ipvlan0\x00'}) 1.633029794s ago: executing program 4 (id=806): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.483446539s ago: executing program 0 (id=807): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0x28, 0x0, &(0x7f00000002c0)="52e1119c000000002bf0543786dd", 0x0, 0x4007, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) unshare(0x26020480) socket$pppoe(0x18, 0x1, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x200012, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket(0xa, 0x5, 0x0) getsockopt$inet_int(r7, 0x0, 0x16, 0x0, &(0x7f0000000140)) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, 0x0, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)}}], 0x1, 0x931766f6119eed40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x10, 0x80002, 0x0) 1.428188568s ago: executing program 4 (id=808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e640000000c000380"], 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x48, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x1b, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e6782507e230d548"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) socket(0x9, 0x1, 0xfffffffe) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x3, 0x7f, {{0x5, 0x4, 0x2, 0x3e, 0x14, 0x65, 0x0, 0x18, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}}}}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{0x0}], 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff04) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r10, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) sendto$inet6(r9, &(0x7f0000000080)="b2", 0x1, 0x24008811, &(0x7f0000000040)={0xa, 0x1, 0x41, @private2, 0xfffffffe}, 0x1c) 1.375880892s ago: executing program 2 (id=809): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x4, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f0002ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x48000) 1.11852981s ago: executing program 0 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc841}, 0x24008015) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x85, 0x6, @broadcast}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001500)={'batadv_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x3], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x6, 0x4, {{0x1f, 0x4, 0x2, 0x4, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x5, [{@multicast2, 0x9}, {@rand_addr=0x64010102, 0x4}]}, @cipso={0x86, 0x53, 0x1, [{0x7, 0xe, "872d7ddddf6528293a8a8c77"}, {0x5, 0xe, "bcbc37ca11976866725786a3"}, {0x7, 0x5, "22e3f5"}, {0x7, 0x4, 'f)'}, {0x7, 0x7, "ce48c9358d"}, {0x1, 0xb, "c2dd0d6898040efb87"}, {0x5, 0xe, "f645b60c6823d9ad3f1b0a59"}, {0x5, 0x6, "4e3dc20e"}, {0x7, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x80, 0x8, 0x3, 0x3, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @remote, {[@end, @lsrr={0x83, 0xb, 0xa1, [@empty, @loopback]}, @lsrr={0x83, 0xf, 0xa, [@broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x10, 0x83, 0x0, 0x4, [0x3ff, 0xfffff801, 0xf]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0xf, 0xd}, {0xfff2}, {0xfff3, 0xfff1}}}, 0x24}}, 0x40084) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x720, 0x700, 0x605, 0x80, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x68, 0x7, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0x1b, 0x8e, [@multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, @loopback, @broadcast, @local]}, @lsrr={0x83, 0x1f, 0x27, [@loopback, @empty, @local, @empty, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x6c}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) 881.138999ms ago: executing program 4 (id=811): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1800}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x40}}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 784.489409ms ago: executing program 1 (id=812): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}, 0x4000803) shutdown(r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) getsockopt$inet6_opts(r2, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) r3 = socket(0xa, 0x3, 0x37) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x80000) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) 700.026147ms ago: executing program 4 (id=813): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffea}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x800}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000280000038000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff25ed5860000a898988a800", 0x2e}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x110}}], 0x18, 0x4c00}, 0x810) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) 169.410178ms ago: executing program 1 (id=814): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005009c00000000002400028014000180080001000000000008000200ac1e8609f7b4e8bf3d02010c000280050001000000000010000e800c000280050001003a000000"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32=r0, @ANYBLOB="000017000000000008000a00", @ANYRES8=0x0], 0x2c}}, 0x40c0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800004, 0x10010, r2, 0x6c789000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x3, {{0xa, 0x4e22, 0xfffffffd, @mcast2, 0x4b0}}, {{0xa, 0x4e22, 0x400, @mcast1, 0xe}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 100.970078ms ago: executing program 1 (id=815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) unshare(0x22020600) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, 0xff, 0xffffffff, 0x9, 0x6, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x7, 0x9, 0x3, 0x3, 0xfeff, 'macsec0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x1a4}, 0xc0, 0x110, 0x0, {0x40000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x76a0}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfecd) 0s ago: executing program 1 (id=816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) unshare(0x22020600) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x6f8e1ebea8b38322) socket$netlink(0x10, 0x3, 0x15) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000052cb3a49925fb68699c441cb5cbc83d2b2f59048cfe27198443077b1476c342641e01dc8f1562065dd390d2bbf36ebf3e0295f10d6709c38f56d5359d2463cf6714162291ee9f0b9efbf0a56471f62cbdaf3070000009ef46b86de303c94e42cae6ce4d01542eeadd9e81054ac9a79b6daf764ca00497c00dd2dbbf14eb0f1237e1c65712fe62708a91aa3af90e6ec748398e90c2b", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf250100000008000700ac1414aa0e0001006e65742f6c3263617000000008000200030000000800080000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000080) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) kernel console output (not intermixed with test programs): x420 [ 107.239306][ T6246] ksys_read+0x145/0x250 [ 107.239337][ T6246] ? __pfx_ksys_read+0x10/0x10 [ 107.239369][ T6246] ? do_syscall_64+0xbe/0xfa0 [ 107.239404][ T6246] do_syscall_64+0xfa/0xfa0 [ 107.239433][ T6246] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.239462][ T6246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.239493][ T6246] ? clear_bhb_loop+0x60/0xb0 [ 107.239517][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.239537][ T6246] RIP: 0033:0x7f0c5558e0dc [ 107.239556][ T6246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.239572][ T6246] RSP: 002b:00007f0c5648c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.239594][ T6246] RAX: ffffffffffffffda RBX: 00007f0c557e5fa0 RCX: 00007f0c5558e0dc [ 107.239608][ T6246] RDX: 000000000000000f RSI: 00007f0c5648c0a0 RDI: 0000000000000005 [ 107.239620][ T6246] RBP: 00007f0c5648c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.239633][ T6246] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 107.239645][ T6246] R13: 00007f0c557e6038 R14: 00007f0c557e5fa0 R15: 00007ffc14a55e68 [ 107.239680][ T6246] [ 107.693777][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 107.704196][ T6253] veth0_to_bridge: entered promiscuous mode [ 107.823103][ T6261] IPVS: set_ctl: invalid protocol: 44 172.20.20.9:20001 [ 107.824167][ T6254] vlan2: entered promiscuous mode [ 107.843627][ T6254] batadv0: entered promiscuous mode [ 107.851793][ T6263] IPVS: set_ctl: invalid protocol: 44 172.20.20.9:20001 [ 107.891777][ T6251] veth0_to_bridge: left promiscuous mode [ 108.091029][ T6266] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 108.123976][ T6266] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 108.435325][ T6278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 108.513880][ T6283] netlink: 14 bytes leftover after parsing attributes in process `syz.3.110'. [ 108.600918][ T6277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.630716][ T6277] bond0: (slave bond1): Enslaving as an active interface with an up link [ 108.796129][ T6292] netlink: 92 bytes leftover after parsing attributes in process `syz.2.112'. [ 108.841933][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.860849][ T6283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.881196][ T6283] bond0 (unregistering): (slave bond1): Releasing backup interface [ 108.895008][ T6283] bond0 (unregistering): Released all slaves [ 109.075712][ T6295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.111'. [ 109.474875][ T6306] FAULT_INJECTION: forcing a failure. [ 109.474875][ T6306] name failslab, interval 1, probability 0, space 0, times 0 [ 109.488910][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 109.488937][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.488950][ T6306] Call Trace: [ 109.488957][ T6306] [ 109.488966][ T6306] dump_stack_lvl+0x189/0x250 [ 109.488999][ T6306] ? __pfx____ratelimit+0x10/0x10 [ 109.489030][ T6306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.489057][ T6306] ? __pfx__printk+0x10/0x10 [ 109.489085][ T6306] ? __pfx___might_resched+0x10/0x10 [ 109.489114][ T6306] should_fail_ex+0x414/0x560 [ 109.489153][ T6306] should_failslab+0xa8/0x100 [ 109.489176][ T6306] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 109.489216][ T6306] ? ethnl_default_set_doit+0x3d6/0x890 [ 109.489249][ T6306] kmemdup_noprof+0x2b/0x70 [ 109.489275][ T6306] ethnl_default_set_doit+0x3d6/0x890 [ 109.489312][ T6306] genl_family_rcv_msg_doit+0x215/0x300 [ 109.489349][ T6306] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 109.489392][ T6306] ? bpf_lsm_capable+0x9/0x20 [ 109.489418][ T6306] ? security_capable+0x7e/0x2e0 [ 109.489454][ T6306] genl_rcv_msg+0x60e/0x790 [ 109.489489][ T6306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.489516][ T6306] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 109.489543][ T6306] ? __asan_memcpy+0x40/0x70 [ 109.489570][ T6306] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.489599][ T6306] netlink_rcv_skb+0x208/0x470 [ 109.489618][ T6306] ? __lock_acquire+0xab9/0xd20 [ 109.489639][ T6306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.489668][ T6306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.489711][ T6306] ? down_read+0x1ad/0x2e0 [ 109.489736][ T6306] genl_rcv+0x28/0x40 [ 109.489760][ T6306] netlink_unicast+0x82f/0x9e0 [ 109.489803][ T6306] ? __pfx_netlink_unicast+0x10/0x10 [ 109.489836][ T6306] ? netlink_sendmsg+0x642/0xb30 [ 109.489855][ T6306] ? skb_put+0x11b/0x210 [ 109.489880][ T6306] netlink_sendmsg+0x805/0xb30 [ 109.489913][ T6306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.489940][ T6306] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.489973][ T6306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.489993][ T6306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.490015][ T6306] __sock_sendmsg+0x21c/0x270 [ 109.490048][ T6306] ____sys_sendmsg+0x505/0x830 [ 109.490078][ T6306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.490113][ T6306] ? import_iovec+0x74/0xa0 [ 109.490144][ T6306] ___sys_sendmsg+0x21f/0x2a0 [ 109.490169][ T6306] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.490243][ T6306] ? __fget_files+0x2a/0x420 [ 109.490262][ T6306] ? __fget_files+0x3a0/0x420 [ 109.490293][ T6306] __x64_sys_sendmsg+0x19b/0x260 [ 109.490321][ T6306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.490372][ T6306] do_syscall_64+0xfa/0xfa0 [ 109.490403][ T6306] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.490432][ T6306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.490453][ T6306] ? clear_bhb_loop+0x60/0xb0 [ 109.490479][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.490499][ T6306] RIP: 0033:0x7efcfd38f6c9 [ 109.490518][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.490535][ T6306] RSP: 002b:00007efcfe18f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.490556][ T6306] RAX: ffffffffffffffda RBX: 00007efcfd5e6090 RCX: 00007efcfd38f6c9 [ 109.490570][ T6306] RDX: 0000000000008090 RSI: 0000200000001540 RDI: 0000000000000006 [ 109.490583][ T6306] RBP: 00007efcfe18f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.490595][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.490607][ T6306] R13: 00007efcfd5e6128 R14: 00007efcfd5e6090 R15: 00007fff6c9f4b08 [ 109.490643][ T6306] [ 110.412112][ T6315] bridge_slave_0: left allmulticast mode [ 110.418999][ T6315] bridge_slave_0: left promiscuous mode [ 110.425970][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.445984][ T6329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 110.464893][ T6315] bridge_slave_1: left allmulticast mode [ 110.476421][ T6315] bridge_slave_1: left promiscuous mode [ 110.484939][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.579283][ T6315] bond0: (slave bond_slave_0): Releasing backup interface [ 110.630011][ T6315] bond0: (slave bond_slave_1): Releasing backup interface [ 110.729496][ T6315] team0: Port device team_slave_0 removed [ 110.760375][ T6315] team0: Port device team_slave_1 removed [ 110.781083][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.801460][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.838188][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.870374][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.905245][ T6315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.227641][ T6354] netlink: 14 bytes leftover after parsing attributes in process `syz.4.129'. [ 111.233082][ T6346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.245620][ T6346] bond0: (slave bond1): Enslaving as an active interface with an up link [ 111.326536][ T6355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.127'. [ 112.293740][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.363179][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.397773][ T6354] bond0 (unregistering): (slave bond1): Releasing backup interface [ 112.433135][ T6354] bond0 (unregistering): Released all slaves [ 112.890406][ T6380] netlink: 14 bytes leftover after parsing attributes in process `syz.0.135'. [ 112.893361][ T6377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.933374][ T6377] bond0: (slave bond1): Enslaving as an active interface with an up link [ 113.131767][ T6380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.178149][ T6380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.200709][ T6380] bond0 (unregistering): (slave bond1): Releasing backup interface [ 113.213990][ T6380] bond0 (unregistering): Released all slaves [ 113.498843][ T6393] geneve2: entered promiscuous mode [ 113.808638][ T6405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.141'. [ 113.812556][ T6404] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 113.924368][ T6404] bond0: entered promiscuous mode [ 113.941403][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.031951][ T6409] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.067690][ T6409] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 114.097220][ T6409] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 114.538256][ T6423] netlink: 14 bytes leftover after parsing attributes in process `syz.3.148'. [ 114.641534][ T6421] bond0 (unregistering): Released all slaves [ 114.726853][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 115.007173][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 115.057125][ T6435] netlink: 'syz.3.153': attribute type 2 has an invalid length. [ 115.070419][ T6439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 115.081768][ T6435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 115.229956][ T6444] macvlan2: entered promiscuous mode [ 115.821803][ T6464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.161'. [ 115.902464][ T6468] netlink: 'syz.3.163': attribute type 2 has an invalid length. [ 115.953445][ T6468] netlink: 'syz.3.163': attribute type 2 has an invalid length. [ 116.388128][ T6476] netlink: 'syz.2.166': attribute type 7 has an invalid length. [ 117.006618][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 117.180558][ T6500] FAULT_INJECTION: forcing a failure. [ 117.180558][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.245119][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.3.174 Not tainted syzkaller #0 PREEMPT(full) [ 117.245147][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.245160][ T6500] Call Trace: [ 117.245168][ T6500] [ 117.245182][ T6500] dump_stack_lvl+0x189/0x250 [ 117.245215][ T6500] ? __pfx____ratelimit+0x10/0x10 [ 117.245244][ T6500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.245272][ T6500] ? __pfx__printk+0x10/0x10 [ 117.245294][ T6500] ? __might_fault+0xb0/0x130 [ 117.245335][ T6500] should_fail_ex+0x414/0x560 [ 117.245372][ T6500] _copy_from_user+0x2d/0xb0 [ 117.245400][ T6500] get_timespec64+0x8e/0x1a0 [ 117.245419][ T6500] ? __pfx_get_timespec64+0x10/0x10 [ 117.245439][ T6500] ? __pfx_bpf_trace_run2+0x10/0x10 [ 117.245478][ T6500] __x64_sys_nanosleep+0xc5/0x290 [ 117.245507][ T6500] ? __pfx___x64_sys_nanosleep+0x10/0x10 [ 117.245542][ T6500] do_syscall_64+0xfa/0xfa0 [ 117.245577][ T6500] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.245607][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.245627][ T6500] ? clear_bhb_loop+0x60/0xb0 [ 117.245652][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.245670][ T6500] RIP: 0033:0x7efcfd38f6c9 [ 117.245688][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.245709][ T6500] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 117.245731][ T6500] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 117.245746][ T6500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000bc0 [ 117.245758][ T6500] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 117.245770][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.245786][ T6500] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 117.245820][ T6500] [ 117.652987][ T6508] warning: `syz.4.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.913045][ T6513] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.074120][ T6522] xt_hashlimit: size too large, truncated to 1048576 [ 118.118582][ T6524] netlink: 64 bytes leftover after parsing attributes in process `syz.4.178'. [ 118.130827][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 118.188190][ T6528] tipc: Started in network mode [ 118.193342][ T6528] tipc: Node identity ac14142f, cluster identity 4711 [ 118.200976][ T6528] tipc: New replicast peer: 0.0.0.0 [ 118.208344][ T6528] tipc: Enabled bearer , priority 10 [ 118.221965][ T6528] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 118.684929][ T6537] FAULT_INJECTION: forcing a failure. [ 118.684929][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 118.702438][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz.3.184 Not tainted syzkaller #0 PREEMPT(full) [ 118.702464][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.702477][ T6537] Call Trace: [ 118.702485][ T6537] [ 118.702494][ T6537] dump_stack_lvl+0x189/0x250 [ 118.702527][ T6537] ? __pfx____ratelimit+0x10/0x10 [ 118.702558][ T6537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.702651][ T6537] ? __pfx__printk+0x10/0x10 [ 118.702680][ T6537] ? __pfx___might_resched+0x10/0x10 [ 118.702703][ T6537] ? fs_reclaim_acquire+0x7d/0x100 [ 118.702741][ T6537] should_fail_ex+0x414/0x560 [ 118.702778][ T6537] should_failslab+0xa8/0x100 [ 118.702800][ T6537] __kmalloc_cache_noprof+0x6f/0x6f0 [ 118.702831][ T6537] ? mrp_init_applicant+0x191/0x4f0 [ 118.702868][ T6537] mrp_init_applicant+0x191/0x4f0 [ 118.702902][ T6537] register_vlan_dev+0x210/0x820 [ 118.702933][ T6537] vlan_newlink+0x4b2/0x610 [ 118.702960][ T6537] ? __pfx_vlan_newlink+0x10/0x10 [ 118.702994][ T6537] rtnl_newlink_create+0x310/0xb00 [ 118.703024][ T6537] ? __lock_acquire+0xab9/0xd20 [ 118.703051][ T6537] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 118.703077][ T6537] ? __pfx___mutex_lock+0x10/0x10 [ 118.703108][ T6537] ? ns_capable+0x8a/0xf0 [ 118.703135][ T6537] rtnl_newlink+0x16e4/0x1c80 [ 118.703157][ T6537] ? ____sys_sendmsg+0x505/0x830 [ 118.703192][ T6537] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.703236][ T6537] ? kasan_quarantine_put+0xdd/0x220 [ 118.703265][ T6537] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.703301][ T6537] ? nlmon_xmit+0xb0/0x100 [ 118.703329][ T6537] ? kmem_cache_free+0x19b/0x690 [ 118.703369][ T6537] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.703391][ T6537] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.703422][ T6537] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.703443][ T6537] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 118.703468][ T6537] ? __dev_queue_xmit+0x284/0x3740 [ 118.703496][ T6537] ? __dev_queue_xmit+0x284/0x3740 [ 118.703520][ T6537] ? __dev_queue_xmit+0x1bfb/0x3740 [ 118.703555][ T6537] ? __lock_acquire+0xab9/0xd20 [ 118.703609][ T6537] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.703628][ T6537] rtnetlink_rcv_msg+0x7cf/0xb70 [ 118.703665][ T6537] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 118.703695][ T6537] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.703734][ T6537] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 118.703776][ T6537] netlink_rcv_skb+0x208/0x470 [ 118.703795][ T6537] ? rcu_is_watching+0x15/0xb0 [ 118.703820][ T6537] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.703852][ T6537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.703886][ T6537] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.703916][ T6537] netlink_unicast+0x82f/0x9e0 [ 118.703957][ T6537] ? __pfx_netlink_unicast+0x10/0x10 [ 118.703989][ T6537] ? netlink_sendmsg+0x642/0xb30 [ 118.704008][ T6537] ? skb_put+0x11b/0x210 [ 118.704033][ T6537] netlink_sendmsg+0x805/0xb30 [ 118.704065][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.704090][ T6537] ? aa_sock_msg_perm+0xf1/0x1d0 [ 118.704122][ T6537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.704141][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.704164][ T6537] __sock_sendmsg+0x21c/0x270 [ 118.704196][ T6537] ____sys_sendmsg+0x505/0x830 [ 118.704225][ T6537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.704259][ T6537] ? import_iovec+0x74/0xa0 [ 118.704288][ T6537] ___sys_sendmsg+0x21f/0x2a0 [ 118.704313][ T6537] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.704374][ T6537] ? __fget_files+0x2a/0x420 [ 118.704393][ T6537] ? __fget_files+0x3a0/0x420 [ 118.704425][ T6537] __x64_sys_sendmsg+0x19b/0x260 [ 118.704452][ T6537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.704486][ T6537] ? __pfx_ksys_write+0x10/0x10 [ 118.704519][ T6537] ? do_syscall_64+0xbe/0xfa0 [ 118.704553][ T6537] do_syscall_64+0xfa/0xfa0 [ 118.704581][ T6537] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.704618][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.704638][ T6537] ? clear_bhb_loop+0x60/0xb0 [ 118.704664][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.704691][ T6537] RIP: 0033:0x7efcfd38f6c9 [ 118.704710][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.704727][ T6537] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.704749][ T6537] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 118.704764][ T6537] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011 [ 118.704777][ T6537] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 118.704789][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.704800][ T6537] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 118.704834][ T6537] [ 119.217324][ T5911] tipc: Node number set to 2886997039 [ 119.491402][ T6547] netlink: 'syz.3.189': attribute type 2 has an invalid length. [ 119.511159][ T6547] netlink: 'syz.3.189': attribute type 2 has an invalid length. [ 119.949759][ T6565] netlink: 'syz.2.191': attribute type 27 has an invalid length. [ 119.996371][ T6565] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 120.041299][ T6565] bridge0: port 1(bridge_slave_0) entered learning state [ 120.887352][ T6581] netlink: 'syz.3.195': attribute type 2 has an invalid length. [ 120.913029][ T6580] FAULT_INJECTION: forcing a failure. [ 120.913029][ T6580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.949896][ T6575] netlink: 'syz.3.195': attribute type 2 has an invalid length. [ 120.955263][ T6580] CPU: 1 UID: 0 PID: 6580 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(full) [ 120.955295][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.955309][ T6580] Call Trace: [ 120.955318][ T6580] [ 120.955328][ T6580] dump_stack_lvl+0x189/0x250 [ 120.955365][ T6580] ? __pfx____ratelimit+0x10/0x10 [ 120.955400][ T6580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.955431][ T6580] ? __pfx__printk+0x10/0x10 [ 120.955456][ T6580] ? __might_fault+0xb0/0x130 [ 120.955502][ T6580] should_fail_ex+0x414/0x560 [ 120.955543][ T6580] _copy_from_user+0x2d/0xb0 [ 120.955576][ T6580] ___sys_sendmsg+0x158/0x2a0 [ 120.955606][ T6580] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.955679][ T6580] ? __fget_files+0x2a/0x420 [ 120.955700][ T6580] ? __fget_files+0x3a0/0x420 [ 120.955734][ T6580] __sys_sendmmsg+0x227/0x430 [ 120.955768][ T6580] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.955805][ T6580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.955862][ T6580] ? ksys_write+0x22a/0x250 [ 120.955898][ T6580] ? __pfx_ksys_write+0x10/0x10 [ 120.955937][ T6580] __x64_sys_sendmmsg+0xa0/0xc0 [ 120.955967][ T6580] do_syscall_64+0xfa/0xfa0 [ 120.955998][ T6580] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.956032][ T6580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.956055][ T6580] ? clear_bhb_loop+0x60/0xb0 [ 120.956083][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.956106][ T6580] RIP: 0033:0x7f0c5558f6c9 [ 120.956126][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.956144][ T6580] RSP: 002b:00007f0c5648c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.956177][ T6580] RAX: ffffffffffffffda RBX: 00007f0c557e5fa0 RCX: 00007f0c5558f6c9 [ 120.956194][ T6580] RDX: 0000000000000001 RSI: 0000200000001180 RDI: 0000000000000003 [ 120.956213][ T6580] RBP: 00007f0c5648c090 R08: 0000000000000000 R09: 0000000000000000 [ 120.956226][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.956240][ T6580] R13: 00007f0c557e6038 R14: 00007f0c557e5fa0 R15: 00007ffc14a55e68 [ 120.956279][ T6580] [ 121.608377][ T6603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.748865][ T6606] syzkaller1: entered promiscuous mode [ 121.754485][ T6606] syzkaller1: entered allmulticast mode [ 121.823308][ T6605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.906338][ T6610] netlink: 'syz.2.205': attribute type 2 has an invalid length. [ 122.593210][ T6633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.212'. [ 122.633823][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 122.857622][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.999141][ T6648] netlink: 52 bytes leftover after parsing attributes in process `syz.1.217'. [ 123.682685][ T6680] xfrm1: entered allmulticast mode [ 123.775299][ T6685] FAULT_INJECTION: forcing a failure. [ 123.775299][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 123.789365][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT(full) [ 123.789392][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.789404][ T6685] Call Trace: [ 123.789412][ T6685] [ 123.789421][ T6685] dump_stack_lvl+0x189/0x250 [ 123.789454][ T6685] ? __pfx____ratelimit+0x10/0x10 [ 123.789483][ T6685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.789512][ T6685] ? __pfx__printk+0x10/0x10 [ 123.789539][ T6685] ? __pfx___might_resched+0x10/0x10 [ 123.789567][ T6685] should_fail_ex+0x414/0x560 [ 123.789604][ T6685] should_failslab+0xa8/0x100 [ 123.789627][ T6685] kmem_cache_alloc_node_noprof+0x77/0x710 [ 123.789657][ T6685] ? __alloc_skb+0x112/0x2d0 [ 123.789684][ T6685] __alloc_skb+0x112/0x2d0 [ 123.789708][ T6685] netlink_ack+0x146/0xa50 [ 123.789726][ T6685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.789752][ T6685] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 123.789776][ T6685] ? __pfx_nl80211_post_doit+0x10/0x10 [ 123.789816][ T6685] netlink_rcv_skb+0x28c/0x470 [ 123.789834][ T6685] ? __lock_acquire+0xab9/0xd20 [ 123.789854][ T6685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.789881][ T6685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.789929][ T6685] ? down_read+0x1ad/0x2e0 [ 123.789952][ T6685] genl_rcv+0x28/0x40 [ 123.789975][ T6685] netlink_unicast+0x82f/0x9e0 [ 123.790015][ T6685] ? __pfx_netlink_unicast+0x10/0x10 [ 123.790046][ T6685] ? netlink_sendmsg+0x642/0xb30 [ 123.790065][ T6685] ? skb_put+0x11b/0x210 [ 123.790090][ T6685] netlink_sendmsg+0x805/0xb30 [ 123.790122][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.790148][ T6685] ? aa_sock_msg_perm+0xf1/0x1d0 [ 123.790182][ T6685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.790202][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.790225][ T6685] __sock_sendmsg+0x21c/0x270 [ 123.790256][ T6685] ____sys_sendmsg+0x505/0x830 [ 123.790289][ T6685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.790322][ T6685] ? import_iovec+0x74/0xa0 [ 123.790351][ T6685] ___sys_sendmsg+0x21f/0x2a0 [ 123.790377][ T6685] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.790440][ T6685] ? __fget_files+0x2a/0x420 [ 123.790458][ T6685] ? __fget_files+0x3a0/0x420 [ 123.790488][ T6685] __x64_sys_sendmsg+0x19b/0x260 [ 123.790513][ T6685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.790546][ T6685] ? __pfx_ksys_write+0x10/0x10 [ 123.790580][ T6685] ? do_syscall_64+0xbe/0xfa0 [ 123.790615][ T6685] do_syscall_64+0xfa/0xfa0 [ 123.790644][ T6685] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.790673][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.790693][ T6685] ? clear_bhb_loop+0x60/0xb0 [ 123.790717][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.790737][ T6685] RIP: 0033:0x7efcfd38f6c9 [ 123.790754][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.790769][ T6685] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.790790][ T6685] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 123.790804][ T6685] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 123.790817][ T6685] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 123.790829][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.790840][ T6685] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 123.790876][ T6685] [ 124.252585][ T6691] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 124.761886][ T6707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 124.803979][ T6711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.235'. [ 125.105143][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'. [ 125.216069][ T6725] syzkaller1: entered promiscuous mode [ 125.237863][ T6725] syzkaller1: entered allmulticast mode [ 125.529172][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 125.886645][ T6755] netlink: 51 bytes leftover after parsing attributes in process `syz.1.250'. [ 125.898793][ T6755] raw_sendmsg: syz.1.250 forgot to set AF_INET. Fix it! [ 126.031663][ T6762] tipc: Started in network mode [ 126.038158][ T6762] tipc: Node identity c654c8b276be, cluster identity 4711 [ 126.045581][ T6762] tipc: Enabled bearer , priority 0 [ 126.054306][ T6762] syzkaller0: entered promiscuous mode [ 126.059988][ T6762] syzkaller0: entered allmulticast mode [ 126.071490][ T6762] FAULT_INJECTION: forcing a failure. [ 126.071490][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 126.084430][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 126.084457][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.084470][ T6762] Call Trace: [ 126.084480][ T6762] [ 126.084490][ T6762] dump_stack_lvl+0x189/0x250 [ 126.084523][ T6762] ? __pfx____ratelimit+0x10/0x10 [ 126.084561][ T6762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.084583][ T6762] ? __pfx__printk+0x10/0x10 [ 126.084609][ T6762] should_fail_ex+0x414/0x560 [ 126.084637][ T6762] should_failslab+0xa8/0x100 [ 126.084654][ T6762] __kmalloc_cache_noprof+0x6f/0x6f0 [ 126.084676][ T6762] ? nsim_fib_event_nb+0x187/0x1080 [ 126.084696][ T6762] ? __lock_acquire+0xab9/0xd20 [ 126.084783][ T6762] nsim_fib_event_nb+0x187/0x1080 [ 126.084805][ T6762] ? atomic_notifier_call_chain+0x26/0x180 [ 126.084843][ T6762] notifier_call_chain+0x1b6/0x3e0 [ 126.084870][ T6762] ? atomic_notifier_call_chain+0x26/0x180 [ 126.084896][ T6762] atomic_notifier_call_chain+0xda/0x180 [ 126.084924][ T6762] call_fib_notifiers+0x31/0x60 [ 126.084947][ T6762] fib6_del+0x104d/0x1550 [ 126.084980][ T6762] ? fib6_del+0x601/0x1550 [ 126.085026][ T6762] ? __pfx_fib6_del+0x10/0x10 [ 126.085064][ T6762] fib6_clean_node+0x29f/0x590 [ 126.085089][ T6762] ? __pfx_fib6_clean_node+0x10/0x10 [ 126.085109][ T6762] ? __lock_acquire+0xab9/0xd20 [ 126.085129][ T6762] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.085150][ T6762] fib6_walk_continue+0x67b/0x910 [ 126.085184][ T6762] fib6_walk+0x149/0x290 [ 126.085207][ T6762] __fib6_clean_all+0x234/0x380 [ 126.085228][ T6762] ? __fib6_clean_all+0x9b/0x380 [ 126.085249][ T6762] ? __pfx_fib6_ifdown+0x10/0x10 [ 126.085272][ T6762] ? __pfx___fib6_clean_all+0x10/0x10 [ 126.085297][ T6762] ? __pfx_fib6_clean_node+0x10/0x10 [ 126.085319][ T6762] ? __pfx_fib6_ifdown+0x10/0x10 [ 126.085347][ T6762] ? __mutex_trylock_common+0x153/0x260 [ 126.085369][ T6762] rt6_disable_ip+0x120/0x720 [ 126.085385][ T6762] ? rcu_is_watching+0x15/0xb0 [ 126.085403][ T6762] ? trace_contention_end+0x39/0x120 [ 126.085421][ T6762] ? __pfx_rt6_disable_ip+0x10/0x10 [ 126.085457][ T6762] addrconf_ifdown+0x15d/0x1880 [ 126.085488][ T6762] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 126.085526][ T6762] ? tls_dev_event+0x717/0xec0 [ 126.085545][ T6762] ? __pfx_addrconf_ifdown+0x10/0x10 [ 126.085589][ T6762] addrconf_notify+0x1bc/0x1010 [ 126.085625][ T6762] notifier_call_chain+0x1b6/0x3e0 [ 126.085659][ T6762] netif_set_mtu_ext+0x594/0x7d0 [ 126.085688][ T6762] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 126.085706][ T6762] ? __mutex_trylock_common+0x153/0x260 [ 126.085744][ T6762] ? __pfx___mutex_trylock_common+0x10/0x10 [ 126.085773][ T6762] ? rcu_is_watching+0x15/0xb0 [ 126.085796][ T6762] ? trace_contention_end+0x39/0x120 [ 126.085831][ T6762] netif_set_mtu+0xa4/0x150 [ 126.085848][ T6762] ? __pfx_netif_set_mtu+0x10/0x10 [ 126.085861][ T6762] ? __lock_acquire+0xab9/0xd20 [ 126.085886][ T6762] ? netdev_name_node_lookup+0xdf/0x120 [ 126.085912][ T6762] dev_set_mtu+0x126/0x260 [ 126.085931][ T6762] dev_ioctl+0x7b4/0x1150 [ 126.085949][ T6762] sock_do_ioctl+0x22c/0x300 [ 126.085973][ T6762] ? __pfx_sock_do_ioctl+0x10/0x10 [ 126.086032][ T6762] sock_ioctl+0x576/0x790 [ 126.086060][ T6762] ? __pfx_sock_ioctl+0x10/0x10 [ 126.086091][ T6762] ? __fget_files+0x3a0/0x420 [ 126.086109][ T6762] ? __fget_files+0x2a/0x420 [ 126.086132][ T6762] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.086153][ T6762] ? __pfx_sock_ioctl+0x10/0x10 [ 126.086179][ T6762] __se_sys_ioctl+0xfc/0x170 [ 126.086214][ T6762] do_syscall_64+0xfa/0xfa0 [ 126.086242][ T6762] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.086270][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.086289][ T6762] ? clear_bhb_loop+0x60/0xb0 [ 126.086313][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.086343][ T6762] RIP: 0033:0x7efcfd38f6c9 [ 126.086361][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.086377][ T6762] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.086398][ T6762] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 126.086412][ T6762] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 126.086424][ T6762] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 126.086436][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.086447][ T6762] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 126.086483][ T6762] [ 126.592424][ T6762] tipc: Resetting bearer [ 126.620247][ T6761] tipc: Resetting bearer [ 126.649444][ T6761] tipc: Disabling bearer [ 126.671798][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 126.843345][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 126.947429][ T6769] tipc: Started in network mode [ 126.952410][ T6769] tipc: Node identity ac14142f, cluster identity 4711 [ 126.962273][ T6769] tipc: New replicast peer: 0.0.0.0 [ 126.968175][ T6769] tipc: Enabled bearer , priority 10 [ 126.974564][ T6772] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 126.987783][ T6780] netlink: 14 bytes leftover after parsing attributes in process `syz.2.257'. [ 127.019898][ T6771] vlan2: entered promiscuous mode [ 127.189746][ T6776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.199249][ T6776] bond0: (slave bond1): Enslaving as an active interface with an up link [ 127.377813][ T6780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.405373][ T6780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.421604][ T6780] bond0 (unregistering): (slave bond1): Releasing backup interface [ 127.446527][ T6780] bond0 (unregistering): Released all slaves [ 127.583060][ T6789] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.750870][ T6791] syz.0.260 (6791) used greatest stack depth: 16624 bytes left [ 127.799916][ T6789] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.840024][ T6809] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 127.935930][ T6809] bond0: entered promiscuous mode [ 127.942964][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.036388][ T6789] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.059687][ T6817] tipc: Enabling of bearer rejected, already enabled [ 128.088759][ T24] tipc: Node number set to 2886997039 [ 128.151767][ T6789] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.380011][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.400412][ T6822] sctp: [Deprecated]: syz.3.272 (pid 6822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.400412][ T6822] Use struct sctp_sack_info instead [ 128.459751][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.486877][ T6829] netlink: 'syz.2.274': attribute type 8 has an invalid length. [ 128.573113][ T3551] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.588140][ T3551] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.835365][ T6837] __nla_validate_parse: 1 callbacks suppressed [ 128.835384][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 128.854337][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 128.881868][ T6837] netlink: 'syz.3.275': attribute type 18 has an invalid length. [ 128.976362][ T6851] xt_time: unknown flags 0xf4 [ 129.255140][ T6861] FAULT_INJECTION: forcing a failure. [ 129.255140][ T6861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.269180][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 129.269206][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.269218][ T6861] Call Trace: [ 129.269226][ T6861] [ 129.269235][ T6861] dump_stack_lvl+0x189/0x250 [ 129.269269][ T6861] ? __pfx____ratelimit+0x10/0x10 [ 129.269298][ T6861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.269326][ T6861] ? __pfx__printk+0x10/0x10 [ 129.269346][ T6861] ? __might_fault+0xb0/0x130 [ 129.269385][ T6861] should_fail_ex+0x414/0x560 [ 129.269421][ T6861] _copy_from_iter+0x404/0x1790 [ 129.269457][ T6861] ? policy_nodemask+0x27c/0x720 [ 129.269484][ T6861] ? __pfx__copy_from_iter+0x10/0x10 [ 129.269515][ T6861] ? set_page_refcounted+0xa0/0x1e0 [ 129.269542][ T6861] af_alg_sendmsg+0x1562/0x2440 [ 129.269592][ T6861] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 129.269616][ T6861] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.269642][ T6861] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 129.269681][ T6861] ? aa_sock_msg_perm+0xf1/0x1d0 [ 129.269712][ T6861] ? skcipher_sendmsg+0x26/0xf0 [ 129.269738][ T6861] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 129.269766][ T6861] __sock_sendmsg+0x21c/0x270 [ 129.269799][ T6861] ____sys_sendmsg+0x52d/0x830 [ 129.269828][ T6861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.269861][ T6861] ? import_iovec+0x74/0xa0 [ 129.269890][ T6861] ___sys_sendmsg+0x21f/0x2a0 [ 129.269915][ T6861] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.269978][ T6861] ? __fget_files+0x2a/0x420 [ 129.269996][ T6861] ? __fget_files+0x3a0/0x420 [ 129.270027][ T6861] __sys_sendmmsg+0x227/0x430 [ 129.270057][ T6861] ? __pfx___sys_sendmmsg+0x10/0x10 [ 129.270091][ T6861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.270144][ T6861] ? ksys_write+0x22a/0x250 [ 129.270175][ T6861] ? __pfx_ksys_write+0x10/0x10 [ 129.270209][ T6861] __x64_sys_sendmmsg+0xa0/0xc0 [ 129.270234][ T6861] do_syscall_64+0xfa/0xfa0 [ 129.270261][ T6861] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.270285][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.270302][ T6861] ? clear_bhb_loop+0x60/0xb0 [ 129.270326][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.270346][ T6861] RIP: 0033:0x7f0c5558f6c9 [ 129.270364][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.270381][ T6861] RSP: 002b:00007f0c5648c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.270402][ T6861] RAX: ffffffffffffffda RBX: 00007f0c557e5fa0 RCX: 00007f0c5558f6c9 [ 129.270417][ T6861] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 129.270430][ T6861] RBP: 00007f0c5648c090 R08: 0000000000000000 R09: 0000000000000000 [ 129.270441][ T6861] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 129.270452][ T6861] R13: 00007f0c557e6038 R14: 00007f0c557e5fa0 R15: 00007ffc14a55e68 [ 129.270491][ T6861] [ 129.821532][ T6872] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 130.001227][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.022601][ T6880] bond0: (slave geneve2): making interface the new active one [ 130.033164][ T6880] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 130.318853][ T6898] netlink: 'syz.0.291': attribute type 30 has an invalid length. [ 131.154875][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 131.197436][ T6925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.300'. [ 131.395401][ T6934] veth1: entered promiscuous mode [ 131.421614][ T6934] veth1: entered allmulticast mode [ 131.490917][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 131.781079][ T6942] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 131.837978][ T6940] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 133.144177][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.311'. [ 133.172587][ T6980] vlan2: entered promiscuous mode [ 133.276087][ T6987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 133.391166][ T6994] FAULT_INJECTION: forcing a failure. [ 133.391166][ T6994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.484026][ T6998] FAULT_INJECTION: forcing a failure. [ 133.484026][ T6998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.501179][ T6994] CPU: 0 UID: 0 PID: 6994 Comm: syz.4.317 Not tainted syzkaller #0 PREEMPT(full) [ 133.501206][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.501217][ T6994] Call Trace: [ 133.501225][ T6994] [ 133.501233][ T6994] dump_stack_lvl+0x189/0x250 [ 133.501266][ T6994] ? __pfx____ratelimit+0x10/0x10 [ 133.501296][ T6994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.501323][ T6994] ? __pfx__printk+0x10/0x10 [ 133.501343][ T6994] ? __might_fault+0xb0/0x130 [ 133.501382][ T6994] should_fail_ex+0x414/0x560 [ 133.501418][ T6994] _copy_from_user+0x2d/0xb0 [ 133.501444][ T6994] ___sys_sendmsg+0x158/0x2a0 [ 133.501470][ T6994] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.501531][ T6994] ? __fget_files+0x2a/0x420 [ 133.501548][ T6994] ? __fget_files+0x3a0/0x420 [ 133.501578][ T6994] __x64_sys_sendmsg+0x19b/0x260 [ 133.501604][ T6994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.501637][ T6994] ? __pfx_ksys_write+0x10/0x10 [ 133.501669][ T6994] ? do_syscall_64+0xbe/0xfa0 [ 133.501701][ T6994] do_syscall_64+0xfa/0xfa0 [ 133.501729][ T6994] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.501757][ T6994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.501776][ T6994] ? clear_bhb_loop+0x60/0xb0 [ 133.501800][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.501818][ T6994] RIP: 0033:0x7f711318f6c9 [ 133.501835][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.501851][ T6994] RSP: 002b:00007f7113fb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.501871][ T6994] RAX: ffffffffffffffda RBX: 00007f71133e5fa0 RCX: 00007f711318f6c9 [ 133.501885][ T6994] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 133.501897][ T6994] RBP: 00007f7113fb2090 R08: 0000000000000000 R09: 0000000000000000 [ 133.501909][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.501920][ T6994] R13: 00007f71133e6038 R14: 00007f71133e5fa0 R15: 00007fff6921add8 [ 133.501953][ T6994] [ 133.709554][ T6998] CPU: 1 UID: 0 PID: 6998 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) [ 133.709583][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.709595][ T6998] Call Trace: [ 133.709604][ T6998] [ 133.709613][ T6998] dump_stack_lvl+0x189/0x250 [ 133.709646][ T6998] ? __pfx____ratelimit+0x10/0x10 [ 133.709676][ T6998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.709704][ T6998] ? __pfx__printk+0x10/0x10 [ 133.709725][ T6998] ? __might_fault+0xb0/0x130 [ 133.709767][ T6998] should_fail_ex+0x414/0x560 [ 133.709802][ T6998] _copy_from_user+0x2d/0xb0 [ 133.709829][ T6998] btf_new_fd+0x33f/0xc90 [ 133.709848][ T6998] ? apparmor_capable+0x137/0x1b0 [ 133.709880][ T6998] ? __pfx_btf_new_fd+0x10/0x10 [ 133.709901][ T6998] ? bpf_token_put+0x143/0x160 [ 133.709925][ T6998] ? bpf_btf_load+0x126/0x190 [ 133.709949][ T6998] __sys_bpf+0x3ed/0x860 [ 133.709972][ T6998] ? __pfx___sys_bpf+0x10/0x10 [ 133.710019][ T6998] ? ksys_write+0x22a/0x250 [ 133.710050][ T6998] ? __pfx_ksys_write+0x10/0x10 [ 133.710085][ T6998] __x64_sys_bpf+0x7c/0x90 [ 133.710115][ T6998] do_syscall_64+0xfa/0xfa0 [ 133.710142][ T6998] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.710172][ T6998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.710191][ T6998] ? clear_bhb_loop+0x60/0xb0 [ 133.710216][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.710234][ T6998] RIP: 0033:0x7f824a58f6c9 [ 133.710252][ T6998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.710268][ T6998] RSP: 002b:00007f824b4a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.710288][ T6998] RAX: ffffffffffffffda RBX: 00007f824a7e5fa0 RCX: 00007f824a58f6c9 [ 133.710303][ T6998] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 133.710315][ T6998] RBP: 00007f824b4a4090 R08: 0000000000000000 R09: 0000000000000000 [ 133.710327][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.710338][ T6998] R13: 00007f824a7e6038 R14: 00007f824a7e5fa0 R15: 00007ffda4fb5fd8 [ 133.710372][ T6998] [ 134.222361][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 134.255694][ T7013] FAULT_INJECTION: forcing a failure. [ 134.255694][ T7013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.289690][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.0.323 Not tainted syzkaller #0 PREEMPT(full) [ 134.289718][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.289729][ T7013] Call Trace: [ 134.289737][ T7013] [ 134.289746][ T7013] dump_stack_lvl+0x189/0x250 [ 134.289780][ T7013] ? __pfx____ratelimit+0x10/0x10 [ 134.289810][ T7013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.289838][ T7013] ? __pfx__printk+0x10/0x10 [ 134.289859][ T7013] ? __might_fault+0xb0/0x130 [ 134.289899][ T7013] should_fail_ex+0x414/0x560 [ 134.289935][ T7013] _copy_from_user+0x2d/0xb0 [ 134.289964][ T7013] ___sys_sendmsg+0x158/0x2a0 [ 134.289990][ T7013] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.290052][ T7013] ? __fget_files+0x2a/0x420 [ 134.290071][ T7013] ? __fget_files+0x3a0/0x420 [ 134.290102][ T7013] __x64_sys_sendmsg+0x19b/0x260 [ 134.290128][ T7013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.290161][ T7013] ? __pfx_ksys_write+0x10/0x10 [ 134.290200][ T7013] ? do_syscall_64+0xbe/0xfa0 [ 134.290233][ T7013] do_syscall_64+0xfa/0xfa0 [ 134.290261][ T7013] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.290291][ T7013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.290311][ T7013] ? clear_bhb_loop+0x60/0xb0 [ 134.290336][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.290356][ T7013] RIP: 0033:0x7f0c5558f6c9 [ 134.290374][ T7013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.290390][ T7013] RSP: 002b:00007f0c5648c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.290412][ T7013] RAX: ffffffffffffffda RBX: 00007f0c557e5fa0 RCX: 00007f0c5558f6c9 [ 134.290426][ T7013] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.290439][ T7013] RBP: 00007f0c5648c090 R08: 0000000000000000 R09: 0000000000000000 [ 134.290450][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.290461][ T7013] R13: 00007f0c557e6038 R14: 00007f0c557e5fa0 R15: 00007ffc14a55e68 [ 134.290495][ T7013] [ 134.674468][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 135.080261][ T7040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 135.580464][ T7069] FAULT_INJECTION: forcing a failure. [ 135.580464][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.594137][ T7069] CPU: 0 UID: 0 PID: 7069 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 135.594165][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.594178][ T7069] Call Trace: [ 135.594186][ T7069] [ 135.594195][ T7069] dump_stack_lvl+0x189/0x250 [ 135.594227][ T7069] ? __pfx____ratelimit+0x10/0x10 [ 135.594257][ T7069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.594285][ T7069] ? __pfx__printk+0x10/0x10 [ 135.594306][ T7069] ? __might_fault+0xb0/0x130 [ 135.594345][ T7069] should_fail_ex+0x414/0x560 [ 135.594381][ T7069] _copy_from_user+0x2d/0xb0 [ 135.594408][ T7069] ___sys_sendmsg+0x158/0x2a0 [ 135.594435][ T7069] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.594506][ T7069] ? __might_fault+0xb0/0x130 [ 135.594539][ T7069] __sys_sendmmsg+0x227/0x430 [ 135.594568][ T7069] ? __pfx___sys_sendmmsg+0x10/0x10 [ 135.594601][ T7069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.594653][ T7069] ? ksys_write+0x22a/0x250 [ 135.594685][ T7069] ? __pfx_ksys_write+0x10/0x10 [ 135.594720][ T7069] __x64_sys_sendmmsg+0xa0/0xc0 [ 135.594746][ T7069] do_syscall_64+0xfa/0xfa0 [ 135.594775][ T7069] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.594805][ T7069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.594833][ T7069] ? clear_bhb_loop+0x60/0xb0 [ 135.594858][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.594877][ T7069] RIP: 0033:0x7f0c5558f6c9 [ 135.594896][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.594912][ T7069] RSP: 002b:00007f0c5648c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 135.594934][ T7069] RAX: ffffffffffffffda RBX: 00007f0c557e5fa0 RCX: 00007f0c5558f6c9 [ 135.594949][ T7069] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 135.594962][ T7069] RBP: 00007f0c5648c090 R08: 0000000000000000 R09: 0000000000000000 [ 135.594979][ T7069] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 135.594991][ T7069] R13: 00007f0c557e6038 R14: 00007f0c557e5fa0 R15: 00007ffc14a55e68 [ 135.595025][ T7069] [ 135.840902][ T7072] netlink: 'syz.3.345': attribute type 2 has an invalid length. [ 135.902171][ T7074] netlink: 'syz.0.346': attribute type 2 has an invalid length. [ 136.483398][ T7087] veth3: entered promiscuous mode [ 136.548066][ T7090] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 136.693684][ T7090] bond0: entered promiscuous mode [ 136.704336][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.819148][ T7103] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 136.849811][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 136.858977][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 136.891793][ T7103] bond2: entered promiscuous mode [ 136.899363][ T7103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.225422][ T7117] ip6tnl1: entered allmulticast mode [ 137.375220][ T7120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 137.426169][ T7122] tipc: Enabled bearer , priority 0 [ 137.481295][ T7122] syzkaller0: entered promiscuous mode [ 137.486995][ T7122] syzkaller0: entered allmulticast mode [ 137.518417][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 137.947466][ T7141] netlink: 14 bytes leftover after parsing attributes in process `syz.0.366'. [ 138.176167][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.183079][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.537473][ T10] tipc: Node number set to 2968176818 [ 138.683040][ T7128] tipc: Resetting bearer [ 138.778529][ T7140] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 138.787164][ T7121] tipc: Resetting bearer [ 138.897017][ T7121] tipc: Disabling bearer [ 138.907806][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 138.963883][ T7164] ip6tnl1: entered allmulticast mode [ 139.870039][ T7178] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 139.925156][ T7182] FAULT_INJECTION: forcing a failure. [ 139.925156][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 139.968725][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.3.379 Not tainted syzkaller #0 PREEMPT(full) [ 139.968758][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.968771][ T7182] Call Trace: [ 139.968779][ T7182] [ 139.968788][ T7182] dump_stack_lvl+0x189/0x250 [ 139.968823][ T7182] ? __pfx____ratelimit+0x10/0x10 [ 139.968852][ T7182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.968879][ T7182] ? __pfx__printk+0x10/0x10 [ 139.968903][ T7182] ? __pfx___might_resched+0x10/0x10 [ 139.968926][ T7182] ? fs_reclaim_acquire+0x7d/0x100 [ 139.968963][ T7182] should_fail_ex+0x414/0x560 [ 139.969000][ T7182] should_failslab+0xa8/0x100 [ 139.969023][ T7182] __kmalloc_cache_noprof+0x6f/0x6f0 [ 139.969052][ T7182] ? nf_tables_newchain+0x1b68/0x2750 [ 139.969077][ T7182] ? nf_tables_newchain+0x1ce8/0x2750 [ 139.969109][ T7182] nf_tables_newchain+0x1ce8/0x2750 [ 139.969153][ T7182] ? __pfx_nf_tables_newchain+0x10/0x10 [ 139.969217][ T7182] ? nfnl_pernet+0x23/0x240 [ 139.969259][ T7182] ? __nla_parse+0x40/0x60 [ 139.969286][ T7182] nfnetlink_rcv+0x11d9/0x2590 [ 139.969353][ T7182] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.969403][ T7182] ? ref_tracker_free+0x63a/0x7d0 [ 139.969454][ T7182] ? __netlink_deliver_tap+0x807/0x850 [ 139.969476][ T7182] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.969516][ T7182] netlink_unicast+0x82f/0x9e0 [ 139.969558][ T7182] ? __pfx_netlink_unicast+0x10/0x10 [ 139.969589][ T7182] ? netlink_sendmsg+0x642/0xb30 [ 139.969608][ T7182] ? skb_put+0x11b/0x210 [ 139.969633][ T7182] netlink_sendmsg+0x805/0xb30 [ 139.969666][ T7182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.969691][ T7182] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.969729][ T7182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.969749][ T7182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.969771][ T7182] __sock_sendmsg+0x21c/0x270 [ 139.969803][ T7182] ____sys_sendmsg+0x505/0x830 [ 139.969827][ T7182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.969853][ T7182] ? import_iovec+0x74/0xa0 [ 139.969878][ T7182] ___sys_sendmsg+0x21f/0x2a0 [ 139.969898][ T7182] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.969947][ T7182] ? __fget_files+0x2a/0x420 [ 139.969961][ T7182] ? __fget_files+0x3a0/0x420 [ 139.969985][ T7182] __x64_sys_sendmsg+0x19b/0x260 [ 139.970006][ T7182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.970033][ T7182] ? __pfx_ksys_write+0x10/0x10 [ 139.970060][ T7182] ? do_syscall_64+0xbe/0xfa0 [ 139.970088][ T7182] do_syscall_64+0xfa/0xfa0 [ 139.970111][ T7182] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.970136][ T7182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.970152][ T7182] ? clear_bhb_loop+0x60/0xb0 [ 139.970172][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.970187][ T7182] RIP: 0033:0x7efcfd38f6c9 [ 139.970202][ T7182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.970215][ T7182] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.970233][ T7182] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 139.970245][ T7182] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.970255][ T7182] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 139.970265][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.970274][ T7182] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 139.970301][ T7182] [ 140.797760][ T7196] netlink: 100 bytes leftover after parsing attributes in process `syz.4.383'. [ 141.910306][ T7212] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 141.952895][ T7212] team0: Failed to send options change via netlink (err -105) [ 141.977774][ T7212] team0: Port device dummy0 added [ 142.414105][ T7224] batadv_slave_1: entered promiscuous mode [ 142.454279][ T7223] batadv_slave_1: left promiscuous mode [ 143.017446][ T7236] netlink: 14 bytes leftover after parsing attributes in process `syz.4.398'. [ 143.108355][ T7240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.135900][ T7240] bond0: (slave bond2): making interface the new active one [ 143.155030][ T7240] bond2: entered promiscuous mode [ 143.172906][ T7240] bond0: (slave bond2): Enslaving as an active interface with an up link [ 143.318721][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 143.826279][ T7271] netlink: 'syz.2.407': attribute type 4 has an invalid length. [ 143.938483][ T7276] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 144.119816][ T7276] bond3: entered promiscuous mode [ 144.138796][ T7276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.567956][ T7324] FAULT_INJECTION: forcing a failure. [ 145.567956][ T7324] name failslab, interval 1, probability 0, space 0, times 0 [ 145.588150][ T7327] netlink: 'syz.2.420': attribute type 2 has an invalid length. [ 145.596689][ T7324] CPU: 1 UID: 0 PID: 7324 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) [ 145.596716][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.596729][ T7324] Call Trace: [ 145.596737][ T7324] [ 145.596746][ T7324] dump_stack_lvl+0x189/0x250 [ 145.596780][ T7324] ? __pfx____ratelimit+0x10/0x10 [ 145.596811][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.596839][ T7324] ? __pfx__printk+0x10/0x10 [ 145.596877][ T7324] should_fail_ex+0x414/0x560 [ 145.596927][ T7324] should_failslab+0xa8/0x100 [ 145.596951][ T7324] __kmalloc_cache_noprof+0x6f/0x6f0 [ 145.596980][ T7324] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 145.597010][ T7324] ? sctp_add_bind_addr+0x8c/0x370 [ 145.597046][ T7324] sctp_add_bind_addr+0x8c/0x370 [ 145.597081][ T7324] sctp_copy_local_addr_list+0x30b/0x4e0 [ 145.597115][ T7324] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 145.597144][ T7324] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 145.597171][ T7324] ? sctp_association_new+0x18b3/0x25f0 [ 145.597199][ T7324] ? sctp_v4_is_any+0x35/0x60 [ 145.597228][ T7324] ? sctp_copy_one_addr+0x93/0x360 [ 145.597262][ T7324] sctp_bind_addr_copy+0xb3/0x3c0 [ 145.597293][ T7324] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 145.597323][ T7324] sctp_connect_new_asoc+0x2e0/0x690 [ 145.597349][ T7324] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 145.597372][ T7324] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 145.597394][ T7324] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 145.597415][ T7324] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 145.597437][ T7324] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 145.597459][ T7324] ? security_sctp_bind_connect+0x7e/0x2e0 [ 145.597492][ T7324] sctp_sendmsg+0x155c/0x2810 [ 145.597528][ T7324] ? __pfx_sctp_sendmsg+0x10/0x10 [ 145.597553][ T7324] ? aa_sk_perm+0x81e/0x950 [ 145.597588][ T7324] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.597620][ T7324] ? sock_rps_record_flow+0x19/0x410 [ 145.597644][ T7324] ? inet_sendmsg+0x2f4/0x370 [ 145.597663][ T7324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.597687][ T7324] __sock_sendmsg+0x19c/0x270 [ 145.597720][ T7324] __sys_sendto+0x3bd/0x520 [ 145.597744][ T7324] ? __pfx___sys_sendto+0x10/0x10 [ 145.597761][ T7324] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 145.597809][ T7324] ? __fget_files+0x3a0/0x420 [ 145.597842][ T7324] ? ksys_write+0x22a/0x250 [ 145.597874][ T7324] ? __pfx_ksys_write+0x10/0x10 [ 145.597913][ T7324] __x64_sys_sendto+0xde/0x100 [ 145.597939][ T7324] do_syscall_64+0xfa/0xfa0 [ 145.597968][ T7324] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.597998][ T7324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.598018][ T7324] ? clear_bhb_loop+0x60/0xb0 [ 145.598044][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.598064][ T7324] RIP: 0033:0x7f0c5558f6c9 [ 145.598083][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.598099][ T7324] RSP: 002b:00007f0c5648c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 145.598121][ T7324] RAX: ffffffffffffffda RBX: 00007f0c557e5fa0 RCX: 00007f0c5558f6c9 [ 145.598136][ T7324] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 145.598148][ T7324] RBP: 00007f0c5648c090 R08: 0000200000000240 R09: 000000000000001c [ 145.598163][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.598174][ T7324] R13: 00007f0c557e6038 R14: 00007f0c557e5fa0 R15: 00007ffc14a55e68 [ 145.598211][ T7324] [ 145.618227][ T7327] netlink: 'syz.2.420': attribute type 2 has an invalid length. [ 146.227550][ T7338] netlink: 64 bytes leftover after parsing attributes in process `syz.0.421'. [ 146.525609][ T7352] ip6tnl1: entered allmulticast mode [ 146.800476][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 146.838392][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 146.851519][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 146.883756][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 146.927318][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 146.958085][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 146.973177][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.013882][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.052991][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.069341][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.089692][ T7360] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.148168][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.433'. [ 147.661659][ T7369] gretap0: entered promiscuous mode [ 147.667538][ T7369] vlan2: entered promiscuous mode [ 147.960397][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 148.015714][ T7389] netlink: 'syz.3.436': attribute type 6 has an invalid length. [ 148.047500][ T7389] netlink: 176 bytes leftover after parsing attributes in process `syz.3.436'. [ 148.085221][ T24] IPVS: starting estimator thread 0... [ 148.108328][ T7397] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:8188 [ 148.192201][ T7398] IPVS: using max 24 ests per chain, 57600 per kthread [ 149.075006][ T7431] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 149.101782][ T7431] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 149.346918][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 149.513391][ T7449] netlink: 200 bytes leftover after parsing attributes in process `syz.1.455'. [ 150.084002][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 150.093266][ T7473] netlink: 'syz.2.459': attribute type 5 has an invalid length. [ 150.130747][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.459'. [ 150.201086][ T7476] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 150.213124][ T7473] geneve2: entered promiscuous mode [ 150.218631][ T7473] geneve2: entered allmulticast mode [ 150.246595][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 150.311823][ T7482] netlink: 'syz.0.463': attribute type 10 has an invalid length. [ 150.325812][ T7476] bond1: entered promiscuous mode [ 150.333869][ T7476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.342136][ T7482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.463'. [ 150.352976][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 150.365529][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 150.403087][ T7482] team0: Port device dummy0 removed [ 150.409494][ T7482] bridge0: port 3(dummy0) entered blocking state [ 150.426643][ T7482] bridge0: port 3(dummy0) entered disabled state [ 150.437535][ T7482] dummy0: entered allmulticast mode [ 150.461272][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 150.807322][ T7494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.961224][ T7494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.076140][ T7502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.085771][ T7502] bond0: (slave bond2): making interface the new active one [ 151.093986][ T7502] bond2: entered promiscuous mode [ 151.100628][ T7502] bond0: (slave bond2): Enslaving as an active interface with an up link [ 151.378796][ T7512] __nla_validate_parse: 2 callbacks suppressed [ 151.378815][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 151.396883][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 151.415431][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.474'. [ 151.476739][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.495674][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.546792][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.555040][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.629307][ T7524] tipc: Enabling not permitted [ 151.659641][ T7524] tipc: Enabling of bearer rejected, failed to enable media [ 152.651196][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 152.673666][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.830797][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.944144][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 153.017211][ T7565] netlink: 56 bytes leftover after parsing attributes in process `syz.3.491'. [ 153.057262][ T7565] netlink: 136 bytes leftover after parsing attributes in process `syz.3.491'. [ 153.074274][ T7561] macvlan3: entered promiscuous mode [ 153.101680][ T7561] vlan0: entered promiscuous mode [ 153.311008][ T7568] vlan0 (unregistering): left promiscuous mode [ 153.719181][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.727210][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.017982][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.263111][ T7601] FAULT_INJECTION: forcing a failure. [ 154.263111][ T7601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.286377][ T7601] CPU: 1 UID: 0 PID: 7601 Comm: syz.2.495 Not tainted syzkaller #0 PREEMPT(full) [ 154.286406][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.286430][ T7601] Call Trace: [ 154.286438][ T7601] [ 154.286446][ T7601] dump_stack_lvl+0x189/0x250 [ 154.286478][ T7601] ? __pfx____ratelimit+0x10/0x10 [ 154.286507][ T7601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.286533][ T7601] ? __pfx__printk+0x10/0x10 [ 154.286554][ T7601] ? __might_fault+0xb0/0x130 [ 154.286593][ T7601] should_fail_ex+0x414/0x560 [ 154.286629][ T7601] _copy_from_iter+0x1de/0x1790 [ 154.286658][ T7601] ? rcu_is_watching+0x15/0xb0 [ 154.286684][ T7601] ? kmalloc_reserve+0xbd/0x290 [ 154.286703][ T7601] ? __pfx__copy_from_iter+0x10/0x10 [ 154.286727][ T7601] ? __build_skb_around+0x262/0x3f0 [ 154.286749][ T7601] ? netlink_sendmsg+0x642/0xb30 [ 154.286767][ T7601] ? skb_put+0x11b/0x210 [ 154.286790][ T7601] netlink_sendmsg+0x6b2/0xb30 [ 154.286821][ T7601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.286845][ T7601] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.286875][ T7601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.286895][ T7601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.286935][ T7601] __sock_sendmsg+0x21c/0x270 [ 154.286966][ T7601] ____sys_sendmsg+0x505/0x830 [ 154.286994][ T7601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.287037][ T7601] ? import_iovec+0x74/0xa0 [ 154.287065][ T7601] ___sys_sendmsg+0x21f/0x2a0 [ 154.287089][ T7601] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.287156][ T7601] ? __fget_files+0x2a/0x420 [ 154.287174][ T7601] ? __fget_files+0x3a0/0x420 [ 154.287202][ T7601] __x64_sys_sendmsg+0x19b/0x260 [ 154.287227][ T7601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.287258][ T7601] ? __pfx_ksys_write+0x10/0x10 [ 154.287290][ T7601] ? do_syscall_64+0xbe/0xfa0 [ 154.287324][ T7601] do_syscall_64+0xfa/0xfa0 [ 154.287351][ T7601] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.287379][ T7601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.287399][ T7601] ? clear_bhb_loop+0x60/0xb0 [ 154.287423][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.287441][ T7601] RIP: 0033:0x7ff013f8f6c9 [ 154.287459][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.287475][ T7601] RSP: 002b:00007ff014d6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.287496][ T7601] RAX: ffffffffffffffda RBX: 00007ff0141e5fa0 RCX: 00007ff013f8f6c9 [ 154.287509][ T7601] RDX: 0000000000000080 RSI: 0000200000000cc0 RDI: 0000000000000004 [ 154.287519][ T7601] RBP: 00007ff014d6a090 R08: 0000000000000000 R09: 0000000000000000 [ 154.287529][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.287538][ T7601] R13: 00007ff0141e6038 R14: 00007ff0141e5fa0 R15: 00007ffe2baf7598 [ 154.287567][ T7601] [ 154.299152][ T7574] bond0: left promiscuous mode [ 154.547585][ T7606] FAULT_INJECTION: forcing a failure. [ 154.547585][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 154.576430][ T7574] bond2: left promiscuous mode [ 154.611634][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: syz.2.497 Not tainted syzkaller #0 PREEMPT(full) [ 154.611665][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.611678][ T7606] Call Trace: [ 154.611687][ T7606] [ 154.611697][ T7606] dump_stack_lvl+0x189/0x250 [ 154.611732][ T7606] ? __pfx____ratelimit+0x10/0x10 [ 154.611763][ T7606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.611791][ T7606] ? __pfx__printk+0x10/0x10 [ 154.611819][ T7606] ? __lock_acquire+0xab9/0xd20 [ 154.611848][ T7606] should_fail_ex+0x414/0x560 [ 154.611886][ T7606] should_failslab+0xa8/0x100 [ 154.611909][ T7606] kmem_cache_alloc_noprof+0x74/0x6e0 [ 154.611939][ T7606] ? skb_clone+0x212/0x3a0 [ 154.611970][ T7606] skb_clone+0x212/0x3a0 [ 154.611998][ T7606] __netlink_deliver_tap+0x404/0x850 [ 154.612034][ T7606] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.612057][ T7606] netlink_deliver_tap+0x19c/0x1b0 [ 154.612080][ T7606] netlink_unicast+0x7fa/0x9e0 [ 154.612130][ T7606] ? __pfx_netlink_unicast+0x10/0x10 [ 154.612164][ T7606] ? netlink_sendmsg+0x642/0xb30 [ 154.612184][ T7606] ? skb_put+0x11b/0x210 [ 154.612213][ T7606] netlink_sendmsg+0x805/0xb30 [ 154.612245][ T7606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.612271][ T7606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.612304][ T7606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.612324][ T7606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.612347][ T7606] __sock_sendmsg+0x21c/0x270 [ 154.612379][ T7606] ____sys_sendmsg+0x505/0x830 [ 154.612409][ T7606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.612443][ T7606] ? import_iovec+0x74/0xa0 [ 154.612474][ T7606] ___sys_sendmsg+0x21f/0x2a0 [ 154.612499][ T7606] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.612564][ T7606] ? __fget_files+0x2a/0x420 [ 154.612582][ T7606] ? __fget_files+0x3a0/0x420 [ 154.612613][ T7606] __x64_sys_sendmsg+0x19b/0x260 [ 154.612639][ T7606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.612674][ T7606] ? __pfx_ksys_write+0x10/0x10 [ 154.612708][ T7606] ? do_syscall_64+0xbe/0xfa0 [ 154.612742][ T7606] do_syscall_64+0xfa/0xfa0 [ 154.612771][ T7606] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.612801][ T7606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.612830][ T7606] ? clear_bhb_loop+0x60/0xb0 [ 154.612855][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.612875][ T7606] RIP: 0033:0x7ff013f8f6c9 [ 154.612893][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.612911][ T7606] RSP: 002b:00007ff014d6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.612933][ T7606] RAX: ffffffffffffffda RBX: 00007ff0141e5fa0 RCX: 00007ff013f8f6c9 [ 154.612947][ T7606] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 154.612960][ T7606] RBP: 00007ff014d6a090 R08: 0000000000000000 R09: 0000000000000000 [ 154.612971][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.612982][ T7606] R13: 00007ff0141e6038 R14: 00007ff0141e5fa0 R15: 00007ffe2baf7598 [ 154.613018][ T7606] [ 154.915510][ T7574] vlan2: left promiscuous mode [ 154.925094][ T7574] bond3: left promiscuous mode [ 154.980115][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 155.067230][ T7611] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 155.107038][ T3569] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.118898][ T7610] netlink: 148 bytes leftover after parsing attributes in process `syz.0.498'. [ 155.119199][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 155.169580][ T7609] : entered promiscuous mode [ 155.318962][ T7611] bond3: entered promiscuous mode [ 155.354409][ T7611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.394608][ T3569] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.410178][ T3569] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.419568][ T3569] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.115811][ T7652] FAULT_INJECTION: forcing a failure. [ 156.115811][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 156.144421][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 156.144450][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.144462][ T7652] Call Trace: [ 156.144471][ T7652] [ 156.144479][ T7652] dump_stack_lvl+0x189/0x250 [ 156.144516][ T7652] ? __pfx____ratelimit+0x10/0x10 [ 156.144546][ T7652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.144575][ T7652] ? __pfx__printk+0x10/0x10 [ 156.144610][ T7652] should_fail_ex+0x414/0x560 [ 156.144648][ T7652] should_failslab+0xa8/0x100 [ 156.144671][ T7652] kmem_cache_alloc_noprof+0x74/0x6e0 [ 156.144700][ T7652] ? skb_clone+0x212/0x3a0 [ 156.144730][ T7652] skb_clone+0x212/0x3a0 [ 156.144759][ T7652] __netlink_deliver_tap+0x404/0x850 [ 156.144796][ T7652] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.144819][ T7652] netlink_deliver_tap+0x19c/0x1b0 [ 156.144841][ T7652] netlink_sendskb+0x68/0x140 [ 156.144874][ T7652] netlink_unicast+0x397/0x9e0 [ 156.144915][ T7652] ? __pfx_netlink_unicast+0x10/0x10 [ 156.144947][ T7652] ? tipc_nl_compat_dumpit+0x5e7/0x7b0 [ 156.144975][ T7652] ? tipc_nl_compat_recv+0x92f/0xbe0 [ 156.145008][ T7652] tipc_nl_compat_recv+0x9cf/0xbe0 [ 156.145039][ T7652] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 156.145072][ T7652] ? __mutex_trylock_common+0x153/0x260 [ 156.145097][ T7652] ? __pfx_tipc_nl_net_dump+0x10/0x10 [ 156.145121][ T7652] ? __pfx_tipc_nl_compat_net_dump+0x10/0x10 [ 156.145151][ T7652] ? __pfx___mutex_trylock_common+0x10/0x10 [ 156.145184][ T7652] ? trace_contention_end+0x39/0x120 [ 156.145221][ T7652] genl_family_rcv_msg_doit+0x215/0x300 [ 156.145257][ T7652] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 156.145312][ T7652] genl_rcv_msg+0x60e/0x790 [ 156.145348][ T7652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.145373][ T7652] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 156.145403][ T7652] ? __asan_memcpy+0x40/0x70 [ 156.145430][ T7652] ? __pfx_ref_tracker_free+0x10/0x10 [ 156.145458][ T7652] netlink_rcv_skb+0x208/0x470 [ 156.145477][ T7652] ? __lock_acquire+0xab9/0xd20 [ 156.145498][ T7652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.145527][ T7652] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.145569][ T7652] ? down_read+0x1ad/0x2e0 [ 156.145593][ T7652] genl_rcv+0x28/0x40 [ 156.145617][ T7652] netlink_unicast+0x82f/0x9e0 [ 156.145659][ T7652] ? __pfx_netlink_unicast+0x10/0x10 [ 156.145692][ T7652] ? netlink_sendmsg+0x642/0xb30 [ 156.145711][ T7652] ? skb_put+0x11b/0x210 [ 156.145737][ T7652] netlink_sendmsg+0x805/0xb30 [ 156.145770][ T7652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.145796][ T7652] ? aa_sock_msg_perm+0xf1/0x1d0 [ 156.145830][ T7652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.145851][ T7652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.145874][ T7652] __sock_sendmsg+0x21c/0x270 [ 156.145907][ T7652] ____sys_sendmsg+0x505/0x830 [ 156.145936][ T7652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.145970][ T7652] ? import_iovec+0x74/0xa0 [ 156.146000][ T7652] ___sys_sendmsg+0x21f/0x2a0 [ 156.146027][ T7652] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.146101][ T7652] ? __fget_files+0x2a/0x420 [ 156.146120][ T7652] ? __fget_files+0x3a0/0x420 [ 156.146152][ T7652] __x64_sys_sendmsg+0x19b/0x260 [ 156.146179][ T7652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.146216][ T7652] ? __pfx_ksys_write+0x10/0x10 [ 156.146249][ T7652] ? do_syscall_64+0xbe/0xfa0 [ 156.146283][ T7652] do_syscall_64+0xfa/0xfa0 [ 156.146311][ T7652] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.146340][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.146359][ T7652] ? clear_bhb_loop+0x60/0xb0 [ 156.146384][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.146403][ T7652] RIP: 0033:0x7efcfd38f6c9 [ 156.146422][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.146438][ T7652] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.146459][ T7652] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 156.146474][ T7652] RDX: 0000000020040810 RSI: 00002000000022c0 RDI: 0000000000000003 [ 156.146486][ T7652] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 156.146498][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.146509][ T7652] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 156.146544][ T7652] [ 156.749501][ T7659] __nla_validate_parse: 4 callbacks suppressed [ 156.749524][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 157.249505][ T7679] FAULT_INJECTION: forcing a failure. [ 157.249505][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 157.276486][ T7679] CPU: 1 UID: 0 PID: 7679 Comm: syz.4.520 Not tainted syzkaller #0 PREEMPT(full) [ 157.276514][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.276526][ T7679] Call Trace: [ 157.276534][ T7679] [ 157.276543][ T7679] dump_stack_lvl+0x189/0x250 [ 157.276577][ T7679] ? __pfx____ratelimit+0x10/0x10 [ 157.276607][ T7679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.276634][ T7679] ? __pfx__printk+0x10/0x10 [ 157.276661][ T7679] ? __pfx___might_resched+0x10/0x10 [ 157.276682][ T7679] ? fs_reclaim_acquire+0x7d/0x100 [ 157.276718][ T7679] should_fail_ex+0x414/0x560 [ 157.276754][ T7679] should_failslab+0xa8/0x100 [ 157.276777][ T7679] __kmalloc_cache_noprof+0x6f/0x6f0 [ 157.276807][ T7679] ? call_usermodehelper_setup+0x8e/0x270 [ 157.276826][ T7679] ? trace_kmalloc+0x1f/0xd0 [ 157.276850][ T7679] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 157.276887][ T7679] call_usermodehelper_setup+0x8e/0x270 [ 157.276906][ T7679] ? __pfx_free_modprobe_argv+0x10/0x10 [ 157.276932][ T7679] __request_module+0x39f/0x5e0 [ 157.276959][ T7679] ? __pfx___request_module+0x10/0x10 [ 157.276982][ T7679] ? rcu_read_lock_any_held+0x89/0x120 [ 157.277019][ T7679] ? __flush_work+0xd2/0xbc0 [ 157.277051][ T7679] physdev_mt_check+0x173/0x220 [ 157.277078][ T7679] xt_check_match+0x3d1/0xab0 [ 157.277104][ T7679] ? __pfx___flush_work+0x10/0x10 [ 157.277134][ T7679] ? __pfx_xt_check_match+0x10/0x10 [ 157.277163][ T7679] ? __pfx___might_resched+0x10/0x10 [ 157.277193][ T7679] ? nft_pernet+0x23/0x240 [ 157.277229][ T7679] ? nft_pernet+0x23/0x240 [ 157.277254][ T7679] ? nft_pernet+0x23/0x240 [ 157.277289][ T7679] __nft_match_init+0x63a/0x840 [ 157.277319][ T7679] ? __pfx___nft_match_init+0x10/0x10 [ 157.277378][ T7679] ? rcu_is_watching+0x15/0xb0 [ 157.277403][ T7679] ? trace_kmalloc+0x1f/0xd0 [ 157.277428][ T7679] ? __kmalloc_noprof+0x432/0x7f0 [ 157.277464][ T7679] nf_tables_newrule+0x1794/0x28a0 [ 157.277509][ T7679] ? __pfx_nf_tables_newrule+0x10/0x10 [ 157.277539][ T7679] ? nfnl_pernet+0x23/0x240 [ 157.277580][ T7679] ? __nla_parse+0x40/0x60 [ 157.277608][ T7679] nfnetlink_rcv+0x11d9/0x2590 [ 157.277678][ T7679] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 157.277765][ T7679] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.277806][ T7679] netlink_unicast+0x82f/0x9e0 [ 157.277847][ T7679] ? __pfx_netlink_unicast+0x10/0x10 [ 157.277879][ T7679] ? netlink_sendmsg+0x642/0xb30 [ 157.277898][ T7679] ? skb_put+0x11b/0x210 [ 157.277922][ T7679] netlink_sendmsg+0x805/0xb30 [ 157.277952][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.277977][ T7679] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.278009][ T7679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.278028][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.278050][ T7679] __sock_sendmsg+0x21c/0x270 [ 157.278082][ T7679] ____sys_sendmsg+0x505/0x830 [ 157.278111][ T7679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.278143][ T7679] ? import_iovec+0x74/0xa0 [ 157.278173][ T7679] ___sys_sendmsg+0x21f/0x2a0 [ 157.278199][ T7679] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.278269][ T7679] ? __fget_files+0x2a/0x420 [ 157.278288][ T7679] ? __fget_files+0x3a0/0x420 [ 157.278319][ T7679] __x64_sys_sendmsg+0x19b/0x260 [ 157.278346][ T7679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.278380][ T7679] ? __pfx_ksys_write+0x10/0x10 [ 157.278414][ T7679] ? do_syscall_64+0xbe/0xfa0 [ 157.278449][ T7679] do_syscall_64+0xfa/0xfa0 [ 157.278478][ T7679] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.278508][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.278528][ T7679] ? clear_bhb_loop+0x60/0xb0 [ 157.278552][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.278572][ T7679] RIP: 0033:0x7f711318f6c9 [ 157.278591][ T7679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.278607][ T7679] RSP: 002b:00007f7113fb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.278629][ T7679] RAX: ffffffffffffffda RBX: 00007f71133e5fa0 RCX: 00007f711318f6c9 [ 157.278644][ T7679] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.278657][ T7679] RBP: 00007f7113fb2090 R08: 0000000000000000 R09: 0000000000000000 [ 157.278669][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.278680][ T7679] R13: 00007f71133e6038 R14: 00007f71133e5fa0 R15: 00007fff6921add8 [ 157.278715][ T7679] [ 157.942815][ T7686] netlink: 324 bytes leftover after parsing attributes in process `syz.2.523'. [ 157.945029][ T7689] netlink: 'syz.3.526': attribute type 8 has an invalid length. [ 157.984659][ T7691] syzkaller0: entered promiscuous mode [ 157.992937][ T7691] syzkaller0: entered allmulticast mode [ 158.011070][ T7686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.523'. [ 158.056392][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 158.287299][ T7697] nbd2: detected capacity change from 0 to 63 [ 158.292082][ T7705] netlink: 148 bytes leftover after parsing attributes in process `syz.4.528'. [ 158.314093][ T7702] block nbd2: NBD_DISCONNECT [ 158.337662][ T7702] block nbd2: Disconnected due to user request. [ 158.344565][ T7702] block nbd2: shutting down sockets [ 158.377702][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 158.427442][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.436805][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 158.444648][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.453799][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 158.461638][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.463464][ T7708] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.470759][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 158.470840][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.470865][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 158.504737][ T5890] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.517441][ T7686] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 158.518228][ T5890] Buffer I/O error on dev nbd2, logical block 0, async page read [ 158.545117][ T7686] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 158.545272][ T5890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.562211][ T5890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 158.570523][ T5890] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.579902][ T5890] Buffer I/O error on dev nbd2, logical block 2, async page read [ 158.587928][ T5890] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.597305][ T5890] Buffer I/O error on dev nbd2, logical block 3, async page read [ 158.605395][ T5890] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.614967][ T5890] Buffer I/O error on dev nbd2, logical block 0, async page read [ 158.623085][ T5890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.632602][ T5890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 158.645326][ T5890] ldm_validate_partition_table(): Disk read failed. [ 158.647052][ T7686] bond4: entered promiscuous mode [ 158.656172][ T5890] Dev nbd2: unable to read RDB block 0 [ 158.665319][ T5890] nbd2: unable to read partition table [ 158.687959][ T7686] bond4: entered allmulticast mode [ 158.688207][ T5890] ldm_validate_partition_table(): Disk read failed. [ 158.703008][ T7686] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.718509][ T5890] Dev nbd2: unable to read RDB block 0 [ 158.736823][ T5890] nbd2: unable to read partition table [ 158.791402][ T7717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.530'. [ 159.033450][ T7726] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 159.043400][ T7726] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 159.053604][ T7727] veth0_to_bridge: entered promiscuous mode [ 159.074236][ T7725] veth0_to_bridge: left promiscuous mode [ 159.225831][ T7735] netlink: 'syz.2.538': attribute type 2 has an invalid length. [ 159.385992][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056af0400: rx timeout, send abort [ 159.395964][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056af0400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.833657][ T7760] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 159.852561][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.546'. [ 160.161715][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 160.487160][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 160.540584][ T7786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.612558][ T7786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.922866][ T7802] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 161.311898][ T7819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.353066][ T7819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.676073][ T7827] netlink: 'syz.2.568': attribute type 9 has an invalid length. [ 161.688258][ T7827] netlink: 'syz.2.568': attribute type 6 has an invalid length. [ 161.702841][ T7832] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 161.725692][ T7832] IPv6: Can't replace route, no match found [ 161.736831][ T7831] tipc: Enabling of bearer rejected, failed to enable media [ 162.231116][ T7841] __nla_validate_parse: 3 callbacks suppressed [ 162.231133][ T7841] netlink: 76 bytes leftover after parsing attributes in process `syz.1.573'. [ 162.500291][ T7846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.576'. [ 162.529381][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 163.237512][ T7868] FAULT_INJECTION: forcing a failure. [ 163.237512][ T7868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.295476][ T7868] CPU: 0 UID: 0 PID: 7868 Comm: syz.2.582 Not tainted syzkaller #0 PREEMPT(full) [ 163.295505][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.295517][ T7868] Call Trace: [ 163.295526][ T7868] [ 163.295535][ T7868] dump_stack_lvl+0x189/0x250 [ 163.295570][ T7868] ? __pfx____ratelimit+0x10/0x10 [ 163.295600][ T7868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.295628][ T7868] ? __pfx__printk+0x10/0x10 [ 163.295650][ T7868] ? __might_fault+0xb0/0x130 [ 163.295691][ T7868] should_fail_ex+0x414/0x560 [ 163.295728][ T7868] _copy_from_user+0x2d/0xb0 [ 163.295756][ T7868] __sys_bpf+0x1e3/0x860 [ 163.295780][ T7868] ? __pfx___sys_bpf+0x10/0x10 [ 163.295817][ T7868] ? ksys_write+0x22a/0x250 [ 163.295849][ T7868] ? __pfx_ksys_write+0x10/0x10 [ 163.295885][ T7868] __x64_sys_bpf+0x7c/0x90 [ 163.295915][ T7868] do_syscall_64+0xfa/0xfa0 [ 163.295944][ T7868] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.295973][ T7868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.295993][ T7868] ? clear_bhb_loop+0x60/0xb0 [ 163.296018][ T7868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.296037][ T7868] RIP: 0033:0x7ff013f8f6c9 [ 163.296056][ T7868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.296073][ T7868] RSP: 002b:00007ff014d6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.296094][ T7868] RAX: ffffffffffffffda RBX: 00007ff0141e5fa0 RCX: 00007ff013f8f6c9 [ 163.296109][ T7868] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 163.296122][ T7868] RBP: 00007ff014d6a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.296134][ T7868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.296145][ T7868] R13: 00007ff0141e6038 R14: 00007ff0141e5fa0 R15: 00007ffe2baf7598 [ 163.296185][ T7868] [ 163.628435][ T7874] FAULT_INJECTION: forcing a failure. [ 163.628435][ T7874] name failslab, interval 1, probability 0, space 0, times 0 [ 163.671474][ T7874] CPU: 0 UID: 0 PID: 7874 Comm: syz.4.585 Not tainted syzkaller #0 PREEMPT(full) [ 163.671502][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.671514][ T7874] Call Trace: [ 163.671522][ T7874] [ 163.671531][ T7874] dump_stack_lvl+0x189/0x250 [ 163.671567][ T7874] ? __pfx____ratelimit+0x10/0x10 [ 163.671604][ T7874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.671632][ T7874] ? __pfx__printk+0x10/0x10 [ 163.671660][ T7874] ? __pfx___might_resched+0x10/0x10 [ 163.671682][ T7874] ? fs_reclaim_acquire+0x7d/0x100 [ 163.671718][ T7874] should_fail_ex+0x414/0x560 [ 163.671755][ T7874] should_failslab+0xa8/0x100 [ 163.671778][ T7874] __kvmalloc_node_noprof+0x158/0x910 [ 163.671811][ T7874] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 163.671846][ T7874] alloc_netdev_mqs+0xa4b/0x11b0 [ 163.671881][ T7874] rtnl_create_link+0x31f/0xd10 [ 163.671915][ T7874] rtnl_newlink_create+0x25c/0xb00 [ 163.671944][ T7874] ? __lock_acquire+0xab9/0xd20 [ 163.671969][ T7874] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 163.671995][ T7874] ? __pfx___mutex_lock+0x10/0x10 [ 163.672026][ T7874] ? ns_capable+0x8a/0xf0 [ 163.672053][ T7874] rtnl_newlink+0x16e4/0x1c80 [ 163.672090][ T7874] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.672115][ T7874] ? is_bpf_text_address+0x26/0x2b0 [ 163.672143][ T7874] ? is_bpf_text_address+0x292/0x2b0 [ 163.672165][ T7874] ? is_bpf_text_address+0x26/0x2b0 [ 163.672192][ T7874] ? __lock_acquire+0xab9/0xd20 [ 163.672226][ T7874] ? __lock_acquire+0xab9/0xd20 [ 163.672268][ T7874] ? is_bpf_text_address+0x26/0x2b0 [ 163.672295][ T7874] ? is_bpf_text_address+0x292/0x2b0 [ 163.672316][ T7874] ? is_bpf_text_address+0x26/0x2b0 [ 163.672345][ T7874] ? __lock_acquire+0xab9/0xd20 [ 163.672385][ T7874] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.672404][ T7874] rtnetlink_rcv_msg+0x7cf/0xb70 [ 163.672435][ T7874] ? __lock_acquire+0xab9/0xd20 [ 163.672457][ T7874] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 163.672488][ T7874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.672538][ T7874] netlink_rcv_skb+0x208/0x470 [ 163.672557][ T7874] ? __lock_acquire+0xab9/0xd20 [ 163.672582][ T7874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.672616][ T7874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.672650][ T7874] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.672680][ T7874] netlink_unicast+0x82f/0x9e0 [ 163.672720][ T7874] ? __pfx_netlink_unicast+0x10/0x10 [ 163.672753][ T7874] ? netlink_sendmsg+0x642/0xb30 [ 163.672771][ T7874] ? skb_put+0x11b/0x210 [ 163.672796][ T7874] netlink_sendmsg+0x805/0xb30 [ 163.672828][ T7874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.672854][ T7874] ? aa_sock_msg_perm+0xf1/0x1d0 [ 163.672887][ T7874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.672906][ T7874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.672929][ T7874] __sock_sendmsg+0x21c/0x270 [ 163.672960][ T7874] ____sys_sendmsg+0x505/0x830 [ 163.672990][ T7874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.673023][ T7874] ? import_iovec+0x74/0xa0 [ 163.673053][ T7874] ___sys_sendmsg+0x21f/0x2a0 [ 163.673079][ T7874] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.673143][ T7874] ? __fget_files+0x2a/0x420 [ 163.673161][ T7874] ? __fget_files+0x3a0/0x420 [ 163.673192][ T7874] __x64_sys_sendmsg+0x19b/0x260 [ 163.673218][ T7874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.673252][ T7874] ? __pfx_ksys_write+0x10/0x10 [ 163.673285][ T7874] ? do_syscall_64+0xbe/0xfa0 [ 163.673319][ T7874] do_syscall_64+0xfa/0xfa0 [ 163.673347][ T7874] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.673376][ T7874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.673396][ T7874] ? clear_bhb_loop+0x60/0xb0 [ 163.673421][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.673440][ T7874] RIP: 0033:0x7f711318f6c9 [ 163.673459][ T7874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.673475][ T7874] RSP: 002b:00007f7113fb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.673497][ T7874] RAX: ffffffffffffffda RBX: 00007f71133e5fa0 RCX: 00007f711318f6c9 [ 163.673512][ T7874] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 163.673524][ T7874] RBP: 00007f7113fb2090 R08: 0000000000000000 R09: 0000000000000000 [ 163.673536][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.673548][ T7874] R13: 00007f71133e6038 R14: 00007f71133e5fa0 R15: 00007fff6921add8 [ 163.673590][ T7874] [ 164.131503][ T7876] macvlan2: entered promiscuous mode [ 164.194045][ T7880] netlink: 76 bytes leftover after parsing attributes in process `syz.3.586'. [ 164.523449][ T7896] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 164.560375][ T7892] netlink: 64 bytes leftover after parsing attributes in process `syz.3.591'. [ 164.638038][ T7897] dummy0: entered promiscuous mode [ 164.665410][ T7897] vlan3: entered promiscuous mode [ 165.436316][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 165.475237][ T7919] tipc: Enabled bearer , priority 18 [ 165.513048][ T7923] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 165.651276][ T7937] xt_hashlimit: size too large, truncated to 1048576 [ 166.233497][ T7961] net_ratelimit: 5701 callbacks suppressed [ 166.233516][ T7961] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.377767][ T7967] netlink: 428 bytes leftover after parsing attributes in process `syz.2.616'. [ 166.455658][ T7971] netlink: 14 bytes leftover after parsing attributes in process `syz.3.618'. [ 166.485952][ T7966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.534938][ T7966] bond0: (slave bond3): Enslaving as a backup interface with an up link [ 166.555112][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.616'. [ 167.922310][ T8022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.926812][ T8027] netlink: 14 bytes leftover after parsing attributes in process `syz.0.634'. [ 167.932583][ T8022] bond0: (slave bond3): Enslaving as an active interface with a down link [ 168.953106][ T8046] FAULT_INJECTION: forcing a failure. [ 168.953106][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.996477][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.1.641 Not tainted syzkaller #0 PREEMPT(full) [ 168.996507][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.996519][ T8046] Call Trace: [ 168.996528][ T8046] [ 168.996537][ T8046] dump_stack_lvl+0x189/0x250 [ 168.996570][ T8046] ? __pfx____ratelimit+0x10/0x10 [ 168.996601][ T8046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.996629][ T8046] ? __pfx__printk+0x10/0x10 [ 168.996664][ T8046] should_fail_ex+0x414/0x560 [ 168.996702][ T8046] _copy_from_user+0x2d/0xb0 [ 168.996730][ T8046] __copy_msghdr+0x3c5/0x5b0 [ 168.996758][ T8046] ___sys_sendmsg+0x1a5/0x2a0 [ 168.996784][ T8046] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.996857][ T8046] ? __fget_files+0x2a/0x420 [ 168.996877][ T8046] ? __fget_files+0x3a0/0x420 [ 168.996908][ T8046] __sys_sendmmsg+0x227/0x430 [ 168.996938][ T8046] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.996972][ T8046] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.997025][ T8046] ? ksys_write+0x22a/0x250 [ 168.997057][ T8046] ? __pfx_ksys_write+0x10/0x10 [ 168.997092][ T8046] __x64_sys_sendmmsg+0xa0/0xc0 [ 168.997118][ T8046] do_syscall_64+0xfa/0xfa0 [ 168.997147][ T8046] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.997178][ T8046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.997197][ T8046] ? clear_bhb_loop+0x60/0xb0 [ 168.997223][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.997243][ T8046] RIP: 0033:0x7f824a58f6c9 [ 168.997261][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.997280][ T8046] RSP: 002b:00007f824b4a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.997302][ T8046] RAX: ffffffffffffffda RBX: 00007f824a7e5fa0 RCX: 00007f824a58f6c9 [ 168.997317][ T8046] RDX: 0000000000000001 RSI: 0000200000001180 RDI: 0000000000000003 [ 168.997330][ T8046] RBP: 00007f824b4a4090 R08: 0000000000000000 R09: 0000000000000000 [ 168.997342][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.997352][ T8046] R13: 00007f824a7e6038 R14: 00007f824a7e5fa0 R15: 00007ffda4fb5fd8 [ 168.997386][ T8046] [ 169.368700][ T8053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 169.396442][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 169.991982][ T8089] netlink: 64 bytes leftover after parsing attributes in process `syz.2.650'. [ 170.317170][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 170.898731][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 170.919252][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 170.956794][ T8115] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 170.979880][ T8115] netlink: 666 bytes leftover after parsing attributes in process `syz.0.659'. [ 171.005888][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 171.025853][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 171.079029][ T8124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.662'. [ 171.294895][ T8135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 171.817120][ T8156] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 171.832354][ T8156] bond4 (unregistering): Released all slaves [ 172.260190][ T8173] erspan0: entered promiscuous mode [ 172.277251][ T8173] erspan0: left promiscuous mode [ 172.360466][ T8177] netlink: 'syz.3.681': attribute type 34 has an invalid length. [ 172.641426][ T8184] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.660873][ T8184] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.782582][ T8184] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.816499][ T8184] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.938988][ T8184] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.968651][ T8184] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.051443][ T8206] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 173.122548][ T8184] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.132907][ T8184] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.347093][ T8215] ieee802154 phy0 wpan0: encryption failed: -90 [ 173.384296][ T1339] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.393527][ T1339] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.529181][ T3490] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.543025][ T3490] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.616907][ T3490] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.625162][ T3490] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.673650][ T3490] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.686645][ T3490] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.023709][ T8236] __nla_validate_parse: 7 callbacks suppressed [ 174.023729][ T8236] netlink: 64 bytes leftover after parsing attributes in process `syz.2.696'. [ 174.158407][ T8244] syzkaller0: entered promiscuous mode [ 174.181473][ T8244] syzkaller0: entered allmulticast mode [ 174.617291][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.705'. [ 174.795383][ T8263] FAULT_INJECTION: forcing a failure. [ 174.795383][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 174.839801][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT(full) [ 174.839835][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.839849][ T8263] Call Trace: [ 174.839857][ T8263] [ 174.839866][ T8263] dump_stack_lvl+0x189/0x250 [ 174.839901][ T8263] ? __pfx____ratelimit+0x10/0x10 [ 174.839930][ T8263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.839960][ T8263] ? __pfx__printk+0x10/0x10 [ 174.839999][ T8263] should_fail_ex+0x414/0x560 [ 174.840037][ T8263] should_failslab+0xa8/0x100 [ 174.840061][ T8263] __kmalloc_cache_noprof+0x6f/0x6f0 [ 174.840091][ T8263] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 174.840121][ T8263] ? sctp_add_bind_addr+0x8c/0x370 [ 174.840157][ T8263] sctp_add_bind_addr+0x8c/0x370 [ 174.840192][ T8263] sctp_copy_local_addr_list+0x30b/0x4e0 [ 174.840226][ T8263] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 174.840256][ T8263] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 174.840284][ T8263] ? sctp_association_new+0x18b3/0x25f0 [ 174.840311][ T8263] ? sctp_v4_is_any+0x35/0x60 [ 174.840341][ T8263] ? sctp_copy_one_addr+0x93/0x360 [ 174.840374][ T8263] sctp_bind_addr_copy+0xb3/0x3c0 [ 174.840405][ T8263] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 174.840435][ T8263] sctp_connect_new_asoc+0x2e0/0x690 [ 174.840462][ T8263] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 174.840485][ T8263] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 174.840507][ T8263] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 174.840533][ T8263] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 174.840556][ T8263] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 174.840578][ T8263] ? security_sctp_bind_connect+0x7e/0x2e0 [ 174.840607][ T8263] sctp_sendmsg+0x155c/0x2810 [ 174.840642][ T8263] ? __pfx_sctp_sendmsg+0x10/0x10 [ 174.840667][ T8263] ? aa_sk_perm+0x81e/0x950 [ 174.840702][ T8263] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.840735][ T8263] ? sock_rps_record_flow+0x19/0x410 [ 174.840759][ T8263] ? inet_sendmsg+0x2f4/0x370 [ 174.840778][ T8263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.840801][ T8263] __sock_sendmsg+0x19c/0x270 [ 174.840833][ T8263] __sys_sendto+0x3bd/0x520 [ 174.840856][ T8263] ? __pfx___sys_sendto+0x10/0x10 [ 174.840872][ T8263] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 174.840919][ T8263] ? __fget_files+0x3a0/0x420 [ 174.840950][ T8263] ? ksys_write+0x22a/0x250 [ 174.840982][ T8263] ? __pfx_ksys_write+0x10/0x10 [ 174.841015][ T8263] __x64_sys_sendto+0xde/0x100 [ 174.841040][ T8263] do_syscall_64+0xfa/0xfa0 [ 174.841068][ T8263] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.841098][ T8263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.841119][ T8263] ? clear_bhb_loop+0x60/0xb0 [ 174.841144][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.841164][ T8263] RIP: 0033:0x7efcfd38f6c9 [ 174.841183][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.841199][ T8263] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 174.841220][ T8263] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 174.841235][ T8263] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 174.841247][ T8263] RBP: 00007efcfe1b0090 R08: 0000200000000240 R09: 000000000000001c [ 174.841260][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.841272][ T8263] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 174.841309][ T8263] [ 174.845270][ T8266] tipc: Enabled bearer , priority 0 [ 175.208061][ T8267] syzkaller0: entered promiscuous mode [ 175.213674][ T8267] syzkaller0: entered allmulticast mode [ 175.280702][ T8278] FAULT_INJECTION: forcing a failure. [ 175.280702][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.344571][ T8267] tipc: Resetting bearer [ 175.351227][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.3.714 Not tainted syzkaller #0 PREEMPT(full) [ 175.351257][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.351270][ T8278] Call Trace: [ 175.351278][ T8278] [ 175.351287][ T8278] dump_stack_lvl+0x189/0x250 [ 175.351321][ T8278] ? __pfx____ratelimit+0x10/0x10 [ 175.351351][ T8278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.351379][ T8278] ? __pfx__printk+0x10/0x10 [ 175.351401][ T8278] ? __might_fault+0xb0/0x130 [ 175.351442][ T8278] should_fail_ex+0x414/0x560 [ 175.351487][ T8278] _copy_from_iter+0x1de/0x1790 [ 175.351518][ T8278] ? rcu_is_watching+0x15/0xb0 [ 175.351546][ T8278] ? kmalloc_reserve+0xbd/0x290 [ 175.351569][ T8278] ? __pfx__copy_from_iter+0x10/0x10 [ 175.351598][ T8278] ? __build_skb_around+0x262/0x3f0 [ 175.351627][ T8278] ? netlink_sendmsg+0x642/0xb30 [ 175.351651][ T8278] ? skb_put+0x11b/0x210 [ 175.351678][ T8278] netlink_sendmsg+0x6b2/0xb30 [ 175.351716][ T8278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.351746][ T8278] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.351783][ T8278] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.351805][ T8278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.351832][ T8278] __sock_sendmsg+0x21c/0x270 [ 175.351868][ T8278] ____sys_sendmsg+0x505/0x830 [ 175.351901][ T8278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.351939][ T8278] ? import_iovec+0x74/0xa0 [ 175.351974][ T8278] ___sys_sendmsg+0x21f/0x2a0 [ 175.352003][ T8278] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.352074][ T8278] ? __fget_files+0x2a/0x420 [ 175.352095][ T8278] ? __fget_files+0x3a0/0x420 [ 175.352130][ T8278] __x64_sys_sendmsg+0x19b/0x260 [ 175.352160][ T8278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.352199][ T8278] ? __pfx_ksys_write+0x10/0x10 [ 175.352236][ T8278] ? do_syscall_64+0xbe/0xfa0 [ 175.352274][ T8278] do_syscall_64+0xfa/0xfa0 [ 175.352307][ T8278] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.352341][ T8278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.352363][ T8278] ? clear_bhb_loop+0x60/0xb0 [ 175.352392][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.352415][ T8278] RIP: 0033:0x7efcfd38f6c9 [ 175.352436][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.352456][ T8278] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.352489][ T8278] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 175.352507][ T8278] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 175.352520][ T8278] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 175.352536][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.352551][ T8278] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 175.352590][ T8278] [ 175.536360][ T8288] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 175.595404][ T8284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 175.619842][ T8287] netlink: 332 bytes leftover after parsing attributes in process `syz.4.717'. [ 175.643144][ T8288] netlink: 'syz.1.715': attribute type 7 has an invalid length. [ 175.676978][ T8287] netlink: 'syz.4.717': attribute type 9 has an invalid length. [ 175.692869][ T8287] netlink: 108 bytes leftover after parsing attributes in process `syz.4.717'. [ 175.707768][ T8288] netlink: 144 bytes leftover after parsing attributes in process `syz.1.715'. [ 175.713562][ T8287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.717'. [ 175.728021][ T8267] tipc: Disabling bearer [ 175.739863][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 175.745266][ T8291] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 176.057939][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.065831][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.081000][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 176.104255][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.111595][ T8291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.119202][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.126431][ T8291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.145187][ T8291] team0: Port device bridge0 added [ 176.201831][ T8305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.722'. [ 176.988331][ T8334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.008701][ T8334] bond0: (slave bond5): making interface the new active one [ 177.054450][ T8334] bond5: entered promiscuous mode [ 177.059262][ T8346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 177.127479][ T8334] bond0: (slave bond5): Enslaving as an active interface with an up link [ 177.543080][ T8363] FAULT_INJECTION: forcing a failure. [ 177.543080][ T8363] name failslab, interval 1, probability 0, space 0, times 0 [ 177.556379][ T8363] CPU: 0 UID: 0 PID: 8363 Comm: syz.4.736 Not tainted syzkaller #0 PREEMPT(full) [ 177.556406][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.556418][ T8363] Call Trace: [ 177.556427][ T8363] [ 177.556435][ T8363] dump_stack_lvl+0x189/0x250 [ 177.556470][ T8363] ? __pfx____ratelimit+0x10/0x10 [ 177.556500][ T8363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.556529][ T8363] ? __pfx__printk+0x10/0x10 [ 177.556557][ T8363] ? __pfx___might_resched+0x10/0x10 [ 177.556580][ T8363] ? fs_reclaim_acquire+0x7d/0x100 [ 177.556618][ T8363] should_fail_ex+0x414/0x560 [ 177.556654][ T8363] should_failslab+0xa8/0x100 [ 177.556677][ T8363] kmem_cache_alloc_node_noprof+0x77/0x710 [ 177.556707][ T8363] ? __alloc_skb+0x112/0x2d0 [ 177.556734][ T8363] __alloc_skb+0x112/0x2d0 [ 177.556758][ T8363] pfkey_sendmsg+0xca5/0x1090 [ 177.556806][ T8363] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 177.556861][ T8363] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.556894][ T8363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.556913][ T8363] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 177.556941][ T8363] __sock_sendmsg+0x21c/0x270 [ 177.556973][ T8363] ____sys_sendmsg+0x505/0x830 [ 177.557004][ T8363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.557038][ T8363] ? import_iovec+0x74/0xa0 [ 177.557077][ T8363] ___sys_sendmsg+0x21f/0x2a0 [ 177.557104][ T8363] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.557169][ T8363] ? __fget_files+0x2a/0x420 [ 177.557187][ T8363] ? __fget_files+0x3a0/0x420 [ 177.557219][ T8363] __x64_sys_sendmsg+0x19b/0x260 [ 177.557246][ T8363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.557281][ T8363] ? __pfx_ksys_write+0x10/0x10 [ 177.557316][ T8363] ? do_syscall_64+0xbe/0xfa0 [ 177.557351][ T8363] do_syscall_64+0xfa/0xfa0 [ 177.557379][ T8363] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.557413][ T8363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.557434][ T8363] ? clear_bhb_loop+0x60/0xb0 [ 177.557459][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.557479][ T8363] RIP: 0033:0x7f711318f6c9 [ 177.557497][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.557515][ T8363] RSP: 002b:00007f7113fb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.557537][ T8363] RAX: ffffffffffffffda RBX: 00007f71133e5fa0 RCX: 00007f711318f6c9 [ 177.557552][ T8363] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 177.557565][ T8363] RBP: 00007f7113fb2090 R08: 0000000000000000 R09: 0000000000000000 [ 177.557577][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.557589][ T8363] R13: 00007f71133e6038 R14: 00007f71133e5fa0 R15: 00007fff6921add8 [ 177.557625][ T8363] [ 177.981449][ T8378] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 178.074084][ T8378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.093876][ T8381] bond2: (slave geneve2): making interface the new active one [ 178.103867][ T8381] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 178.629683][ T8404] netlink: 'syz.2.749': attribute type 2 has an invalid length. [ 178.845860][ T8418] xt_hashlimit: size too large, truncated to 1048576 [ 178.954395][ T8421] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.043187][ T8428] __nla_validate_parse: 6 callbacks suppressed [ 179.043209][ T8428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.755'. [ 179.243149][ T8434] netlink: 14 bytes leftover after parsing attributes in process `syz.1.756'. [ 179.245056][ T8427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.338678][ T8427] bond0: (slave bond3): Enslaving as an active interface with an up link [ 179.998895][ T8434] bond0 (unregistering): (slave bond3): Releasing backup interface [ 180.018936][ T8434] bond0 (unregistering): Released all slaves [ 180.895632][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.766'. [ 181.185896][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 181.431004][ T8487] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 181.588030][ T8487] bond6: entered promiscuous mode [ 181.594030][ T8487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.744012][ T8499] FAULT_INJECTION: forcing a failure. [ 181.744012][ T8499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.803566][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 181.808691][ T8505] FAULT_INJECTION: forcing a failure. [ 181.808691][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 181.825865][ T8505] CPU: 1 UID: 0 PID: 8505 Comm: syz.4.775 Not tainted syzkaller #0 PREEMPT(full) [ 181.825893][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.825906][ T8505] Call Trace: [ 181.825914][ T8505] [ 181.825923][ T8505] dump_stack_lvl+0x189/0x250 [ 181.825970][ T8505] ? __pfx____ratelimit+0x10/0x10 [ 181.825998][ T8505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.826027][ T8505] ? __pfx__printk+0x10/0x10 [ 181.826055][ T8505] ? __pfx___might_resched+0x10/0x10 [ 181.826076][ T8505] ? fs_reclaim_acquire+0x7d/0x100 [ 181.826114][ T8505] should_fail_ex+0x414/0x560 [ 181.826152][ T8505] should_failslab+0xa8/0x100 [ 181.826182][ T8505] kmem_cache_alloc_node_noprof+0x77/0x710 [ 181.826210][ T8505] ? __alloc_skb+0x112/0x2d0 [ 181.826236][ T8505] __alloc_skb+0x112/0x2d0 [ 181.826260][ T8505] alloc_skb_with_frags+0xca/0x890 [ 181.826290][ T8505] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 181.826324][ T8505] sock_alloc_send_pskb+0x84d/0x980 [ 181.826371][ T8505] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 181.826400][ T8505] ? aa_file_perm+0x13a/0x1550 [ 181.826425][ T8505] ? aa_sk_perm+0x81e/0x950 [ 181.826455][ T8505] hci_sock_sendmsg+0x207/0xef0 [ 181.826485][ T8505] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 181.826506][ T8505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.826539][ T8505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.826559][ T8505] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 181.826581][ T8505] __sock_sendmsg+0x21c/0x270 [ 181.826621][ T8505] sock_write_iter+0x279/0x360 [ 181.826652][ T8505] ? __pfx_sock_write_iter+0x10/0x10 [ 181.826691][ T8505] ? bpf_lsm_file_permission+0x9/0x20 [ 181.826712][ T8505] ? security_file_permission+0x75/0x290 [ 181.826747][ T8505] vfs_write+0x5c9/0xb30 [ 181.826783][ T8505] ? __pfx_sock_write_iter+0x10/0x10 [ 181.826811][ T8505] ? __pfx_vfs_write+0x10/0x10 [ 181.826851][ T8505] ? __fget_files+0x2a/0x420 [ 181.826881][ T8505] ksys_write+0x145/0x250 [ 181.826914][ T8505] ? __pfx_ksys_write+0x10/0x10 [ 181.826948][ T8505] ? do_syscall_64+0xbe/0xfa0 [ 181.826983][ T8505] do_syscall_64+0xfa/0xfa0 [ 181.827011][ T8505] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.827042][ T8505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.827062][ T8505] ? clear_bhb_loop+0x60/0xb0 [ 181.827087][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.827107][ T8505] RIP: 0033:0x7f711318f6c9 [ 181.827145][ T8505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.827164][ T8505] RSP: 002b:00007f7113fb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.827194][ T8505] RAX: ffffffffffffffda RBX: 00007f71133e5fa0 RCX: 00007f711318f6c9 [ 181.827208][ T8505] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000004 [ 181.827221][ T8505] RBP: 00007f7113fb2090 R08: 0000000000000000 R09: 0000000000000000 [ 181.827233][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.827244][ T8505] R13: 00007f71133e6038 R14: 00007f71133e5fa0 R15: 00007fff6921add8 [ 181.827280][ T8505] [ 181.839646][ T8499] CPU: 0 UID: 0 PID: 8499 Comm: syz.3.773 Not tainted syzkaller #0 PREEMPT(full) [ 181.839676][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.839692][ T8499] Call Trace: [ 181.839702][ T8499] [ 181.839711][ T8499] dump_stack_lvl+0x189/0x250 [ 181.839749][ T8499] ? __pfx____ratelimit+0x10/0x10 [ 181.839784][ T8499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.839816][ T8499] ? __pfx__printk+0x10/0x10 [ 181.839840][ T8499] ? __might_fault+0xb0/0x130 [ 181.839895][ T8499] should_fail_ex+0x414/0x560 [ 181.839938][ T8499] _copy_from_user+0x2d/0xb0 [ 181.839970][ T8499] __sys_bind+0x199/0x3e0 [ 181.840010][ T8499] ? __pfx___sys_bind+0x10/0x10 [ 181.840059][ T8499] ? __pfx_ksys_write+0x10/0x10 [ 181.840101][ T8499] __x64_sys_bind+0x7a/0x90 [ 181.840138][ T8499] do_syscall_64+0xfa/0xfa0 [ 181.840169][ T8499] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.840204][ T8499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.840227][ T8499] ? clear_bhb_loop+0x60/0xb0 [ 181.840256][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.840278][ T8499] RIP: 0033:0x7efcfd38f6c9 [ 181.840298][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.840318][ T8499] RSP: 002b:00007efcfe1b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 181.840343][ T8499] RAX: ffffffffffffffda RBX: 00007efcfd5e5fa0 RCX: 00007efcfd38f6c9 [ 181.840361][ T8499] RDX: 0000000000000058 RSI: 0000200000000600 RDI: 0000000000000003 [ 181.840377][ T8499] RBP: 00007efcfe1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 181.840390][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.840405][ T8499] R13: 00007efcfd5e6038 R14: 00007efcfd5e5fa0 R15: 00007fff6c9f4b08 [ 181.840444][ T8499] [ 182.398995][ T8500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.430737][ T8500] bond0: (slave bond4): Enslaving as an active interface with a down link [ 182.466628][ T8508] netlink: 14 bytes leftover after parsing attributes in process `syz.0.771'. [ 182.613154][ T8518] netlink: 100 bytes leftover after parsing attributes in process `syz.3.779'. [ 182.684409][ T8519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.704817][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 182.714181][ T8519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 182.993029][ T8519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.007802][ T8519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 183.113766][ T8519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.152512][ T8519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 183.251752][ T8539] netlink: 76 bytes leftover after parsing attributes in process `syz.1.782'. [ 183.450667][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 183.669572][ T8519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.707689][ T8519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 184.157200][ T3569] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 184.168622][ T3569] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.179460][ T3569] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 184.188055][ T3569] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.244788][ T3490] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 184.264354][ T3490] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.364250][ T8581] __nla_validate_parse: 1 callbacks suppressed [ 184.364271][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.794'. [ 184.420294][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 184.440840][ T61] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.659426][ T8589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 184.782257][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'. [ 184.868075][ T8600] netlink: 14 bytes leftover after parsing attributes in process `syz.2.801'. [ 184.927167][ T8598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 184.937935][ T8598] bond0: (slave bond7): Enslaving as a backup interface with an up link [ 185.239387][ T8615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.804'. [ 185.393288][ T8621] netlink: 'syz.4.808': attribute type 2 has an invalid length. [ 185.432042][ T8622] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 185.456005][ T8621] netlink: 'syz.4.808': attribute type 2 has an invalid length. [ 185.894883][ T8636] netlink: 71 bytes leftover after parsing attributes in process `syz.4.811'. [ 186.076535][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.077989][ T8565] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 186.090112][ T8565] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 186.102464][ T8641] netlink: 10 bytes leftover after parsing attributes in process `syz.4.813'. [ 186.342866][ T8643] team0: Refused to change device type [ 186.406836][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 186.432320][ T8640] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 186.444344][ T8640] bond0 (unregistering): Released all slaves [ 186.571824][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 186.757772][ T8565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.764885][ T8565] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 186.778169][ T8565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.784141][ T8565] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 186.798368][ T8565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 186.804499][ T8565] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 186.826062][ T7982] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 186.838002][ T7982] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 186.846493][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 186.857448][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.867598][ T7982] RIP: 0010:klist_del+0x49/0x110 [ 186.872558][ T7982] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 99 90 e8 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 7b 90 e8 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 186.892276][ T7982] RSP: 0018:ffffc9001bbd7748 EFLAGS: 00010202 [ 186.898364][ T7982] RAX: 000000000000000b RBX: ffff888031d11c60 RCX: ffff888029631e40 [ 186.906354][ T7982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 186.914378][ T7982] RBP: ffffc9001bbd7870 R08: ffff8880112db3c3 R09: 1ffff1100225b678 [ 186.922355][ T7982] R10: dffffc0000000000 R11: ffffed100225b679 R12: dffffc0000000000 [ 186.930365][ T7982] R13: 1ffff110063a238c R14: 0000000000000000 R15: ffff88801bb90758 [ 186.938431][ T7982] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 186.947373][ T7982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.953971][ T7982] CR2: 0000200000001040 CR3: 0000000084ab6000 CR4: 00000000003526f0 [ 186.961956][ T7982] Call Trace: [ 186.965279][ T7982] [ 186.968318][ T7982] device_del+0x280/0x8e0 [ 186.972679][ T7982] ? _raw_spin_unlock_irq+0x2e/0x50 [ 186.977888][ T7982] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 186.983983][ T7982] ? __pfx_device_del+0x10/0x10 [ 186.988863][ T7982] ? netdev_unregister_kobject+0x344/0x450 [ 186.994772][ T7982] unregister_netdevice_many_notify+0x1df2/0x2390 [ 187.001213][ T7982] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 187.007994][ T7982] ? rtnl_net_dev_lock+0x257/0x2f0 [ 187.013123][ T7982] unregister_netdevice_queue+0x33c/0x380 [ 187.018913][ T7982] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 187.025170][ T7982] ? rtnl_net_dev_lock+0x36/0x2f0 [ 187.030206][ T7982] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 187.035329][ T7982] unregister_netdev+0x1f/0x60 [ 187.040106][ T7982] bnep_session+0x294d/0x2b40 [ 187.044788][ T7982] ? rcu_is_watching+0x15/0xb0 [ 187.049567][ T7982] ? trace_sched_exit_tp+0x36/0x110 [ 187.054789][ T7982] ? __lock_acquire+0xab9/0xd20 [ 187.059668][ T7982] ? __pfx_bnep_session+0x10/0x10 [ 187.064744][ T7982] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 187.070654][ T7982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.077006][ T7982] ? __pfx_woken_wake_function+0x10/0x10 [ 187.082660][ T7982] ? __kthread_parkme+0x7b/0x200 [ 187.087603][ T7982] ? __kthread_parkme+0x1a1/0x200 [ 187.092658][ T7982] kthread+0x711/0x8a0 [ 187.096749][ T7982] ? __pfx_bnep_session+0x10/0x10 [ 187.101779][ T7982] ? __pfx_kthread+0x10/0x10 [ 187.106381][ T7982] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.111587][ T7982] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.116794][ T7982] ? __pfx_kthread+0x10/0x10 [ 187.121397][ T7982] ret_from_fork+0x4bc/0x870 [ 187.126011][ T7982] ? __pfx_ret_from_fork+0x10/0x10 [ 187.131133][ T7982] ? __switch_to_asm+0x39/0x70 [ 187.135907][ T7982] ? __switch_to_asm+0x33/0x70 [ 187.140677][ T7982] ? __pfx_kthread+0x10/0x10 [ 187.145317][ T7982] ret_from_fork_asm+0x1a/0x30 [ 187.150102][ T7982] [ 187.153127][ T7982] Modules linked in: [ 187.158020][ T7982] ---[ end trace 0000000000000000 ]--- [ 187.165086][ T7982] RIP: 0010:klist_del+0x49/0x110 [ 187.170454][ T7982] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 99 90 e8 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 7b 90 e8 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 187.190604][ T7982] RSP: 0018:ffffc9001bbd7748 EFLAGS: 00010202 [ 187.197310][ T7982] RAX: 000000000000000b RBX: ffff888031d11c60 RCX: ffff888029631e40 [ 187.205468][ T7982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 187.213677][ T7982] RBP: ffffc9001bbd7870 R08: ffff8880112db3c3 R09: 1ffff1100225b678 [ 187.222241][ T7982] R10: dffffc0000000000 R11: ffffed100225b679 R12: dffffc0000000000 [ 187.230307][ T7982] R13: 1ffff110063a238c R14: 0000000000000000 R15: ffff88801bb90758 [ 187.238413][ T7982] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 187.247899][ T7982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.254670][ T7982] CR2: 000055556ada75c8 CR3: 00000000756e2000 CR4: 00000000003526f0 [ 187.262835][ T7982] Kernel panic - not syncing: Fatal exception [ 187.269378][ T7982] Kernel Offset: disabled [ 187.273756][ T7982] Rebooting in 86400 seconds..