last executing test programs: 3.838024086s ago: executing program 4 (id=2863): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fedbdf2530000000b97d8884006136002d713af0087f74dab0c2d4b680186d9458a3b1185f3b775986051447e9df7a332109395cc8a1e12b85c14814956b43fbcf29204132e555d5a00fe773c206418bbe38006cb2b00550f54128a1dae1089097442d5d998c64cc964bbdba0b8fead95f43f5a479a83c4df7549c004fd4dfee7895488e08ad6853804207632b9eb9e834b99ede0908ab4672d4afd600"/175], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg$inet(r10, 0x0, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) write$tun(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="08006007070307000200140000004510002800000000082f9078ac1e0001ffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2058a2306e456fcb8ac183c03c8b893b9126742f40fe25e898c4799fc4a066d8549f9648c3daedb35892f490faad029836bb57e8dbea58080c801e24795cb7818730ef79316a26be2b27e51503bc16f99b37a5ab66f21dd237938a84afd7f3a70752e943cc79acfd9ae544fc56505aadce8b42f1881e7a1de92abfb5fe2786143d5efbef8867ae4983e6f7a2bb93bbd475b9e4849bf1cc08a636030b3217f72ddf46fe404f3522e70420c8cb37a562767564ea18f0081af585b829d0e5d3fd"], 0x36) 3.341412786s ago: executing program 0 (id=2866): unshare(0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') unshare(0x10000600) (async) ioctl$NS_GET_NSTYPE(r0, 0x8004b707, 0x0) 3.205601004s ago: executing program 0 (id=2868): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0x40, 0x8, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x44000) write$cgroup_subtree(r2, 0x0, 0xfffffe5a) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x73, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @empty}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xb, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x34, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x5b}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x3a40, 0x16, 0x0, 0x1a, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x64}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0x29) 3.161021145s ago: executing program 4 (id=2869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0x40, 0x8, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x44000) socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x73, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @empty}}}}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0x29) 2.882145035s ago: executing program 0 (id=2872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x48001) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = socket(0x1e, 0x80000, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0xfff, 0x400, 0x5, 0x7, 0x0, 0x5, 0x0, 0x200, 0x1000}}}}]}, 0x58}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000005c0)={0x1, [0x0]}, &(0x7f0000000840)=0x6) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x18, 0x800}], 0x1, 0x4008080) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r11, 0xf00, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000004}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x48800}, 0x4040040) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3a3549d6257a9adc27e96218a70303dd9d60742e7917419a314436b006fe428319a90cc8f3e450311d6594eeeebbc6f7c6de56217b68c9582c999e96254c7a5bb46577e0178d86d4411c096e0fbaabd528e66ed29b422c6957c864466150b908a1115b", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf25010000000000000001410000001800170000000e0000009e6574683a6970366772653000"], 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) 2.783456633s ago: executing program 1 (id=2874): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1) unshare(0x22020400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x40000000, 'streebog256\x00'}, 0x58) 2.705830497s ago: executing program 2 (id=2875): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 2.703939444s ago: executing program 4 (id=2876): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 2.592749875s ago: executing program 3 (id=2877): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a000307180000c00e00000004"], 0x14}}, 0x4008800) 2.535147137s ago: executing program 1 (id=2878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x3, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000340)='\x00', 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000180)="8be7ee177cdad9b4b47380e588cafd4371f8fb16063b45b29ec0b5366dcc00f042fe6d886a4f9f5af688724d3bc8df", 0x2f}], 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000100)=0xffffffff, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48000400}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x17c, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa541}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xac6d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2d2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x230}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcda}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8686}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000003}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000440)=0x80, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x4004095) 2.513452158s ago: executing program 4 (id=2879): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fedbdf2530000000b97d8884006136002d713af0087f74dab0c2d4b680186d9458a3b1185f3b775986051447e9df7a332109395cc8a1e12b85c14814956b43fbcf29204132e555d5a00fe773c206418bbe38006cb2b00550f54128a1dae1089097442d5d998c64cc964bbdba0b8fead95f43f5a479a83c4df7549c004fd4dfee7895488e08ad6853804207632b9eb9e834b99ede0908ab4672d4afd600"/175], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg$inet(r10, 0x0, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) write$tun(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="08006007070307000200140000004510002800000000082f9078ac1e0001ffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2058a2306e456fcb8ac183c03c8b893b9126742f40fe25e898c4799fc4a066d8549f9648c3daedb35892f490faad029836bb57e8dbea58080c801e24795cb7818730ef79316a26be2b27e51503bc16f99b37a5ab66f21dd237938a84afd7f3a70752e943cc79acfd9ae544fc56505aadce8b42f1881e7a1de92abfb5fe2786143d5efbef8867ae4983e6f7a2bb93bbd475b9e4849bf1cc08a636030b3217f72ddf46fe404f3522e70420c8cb37a562767564ea18f0081af585b829d0e5d3fd"], 0x36) 2.513118152s ago: executing program 2 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x18, 0x2e, 0x9, 0x70bd27, 0x3, {0x4, 0x0, 0xe4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) 2.422762351s ago: executing program 3 (id=2881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000200000087000013"], 0x0, 0x2a, 0x0, 0x1, 0x4b}, 0x28) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="caaaaaaaaaaaaaaaaaaaaa3a080045a00028400000001d06907800000000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5019000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x9b) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 2.365450091s ago: executing program 0 (id=2882): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0x40, 0x8, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x44000) write$cgroup_subtree(r2, 0x0, 0xfffffe5a) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x73, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @empty}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xb, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x34, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x5b}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x3a40, 0x16, 0x0, 0x1a, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x64}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0x29) 2.29050617s ago: executing program 3 (id=2883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0800080007000000000014000000456f0fc000660000401190780a010102ac1414124e204e200fac9078e1070001e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73ea"], 0xfce) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103800, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000180)={'hsr0\x00'}) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f0000000080)=""/86, 0x56}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000001580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f0000000500)={0x30, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x844) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000240000000020900010073797a31000000002c000000030a0101000000000000a243565c00070900010073797a31000000000900030073797a320040000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x223b4c35793de7b5}, 0x200440c0) 2.235433717s ago: executing program 2 (id=2884): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9c5054a5af2f81d706d451f728eeeb", 0xf}, {0x0}, {&(0x7f0000000340)="c046641ca8108ae11f406a3f6dd523a4b312f92777b24ad78aab6c826de6", 0x1e}, {&(0x7f00000006c0)="9416acfde1a73a7a1efd2d18429095ae9d31dc914cd671a059a0f0db651179fbae4aa18c50c09f8700572e6a6cda96af26365f9744b5201fa08a9e16d0469506f1db7026f3a7d358c5749daf2cdc46a1693a54bb8d20ced0d7d3bd01b7cac380c2d91ef243c4b3dbfa64310ffed013954d4640f6965ae4f7d46e5e7127ad4104b8fc819e6fc5c56d2b938e8a86074b05865b21921c1c8c1e1578bcbad5ccea0e1b857ab2cd86ccad22afda7a7a9dd6c9e589e3debe39ca7999bf906911642c404cd3a1d767cfd007bfc250c8bd7a57e1531f01546ba6f19ec41850a427f994c92e36e4b47883341c819a88411e0324783507d778b49d1ae87b2d2e28ce7569378369e4b6fd78fc7c166d9dbd67f7a704e31962c543f3d1d3c2516f4b24f295311bd0c7ce0add3eb2ef21fd62c048a8be7ae52cda2a209d70592c3d996f34484e4f2d3cd04eb0b09a349fcbd8d243441f6cdd5c693c684abff434d0544a5089283a13b639d274a12d8ab9d32307778e00f35fe7d5820dd4502b4e0ae13f7fa8196a9e3e69e5828edea978c553faa85212c0ed08d0ce4e56c9471eb00328ace3d88336ef4cbcfbcf0fe6466d6937f8e8c28615966993fedd2e4e2684484829fe95553f85c273a17cdbe69b35de969d5c40ec4c15d1d259de60da0d8881f6503c48527efc5b618246dbd95e950798cc6aade069126ad392d831c4801ce645dcafd29579825f247197196407a4d410e9785ee3418b2a0186d190b4d03111ca42c845795478cd30a802a7f479ce646101e6b9303f1006d2458a2a494552794cdf09ef22968e3d650b3fdeda989a12bd14e85b4876a4ef1a253b5c07b70db2a8daedd93618db3d1177e368bc214c13e5dfff275a16a5030f4415fbcd7b95393480733c4b95ec38962194d4a75ab876bbd62fcf50ca35831e05a12f69488f959990ae43ed3114fb77a1a71c3ee4cedde06f4e4d12d7f17c6d8acba7e3a4472534fa78aa9ca507d92d47d9d792803683195cbe4bdc95361c1c5898514a440c5c8cd7a1153d6eea859798c60af468980e894156c3a374111878eea05b5395196bd383db85325b1bdff1a040fae19ffb97841ca5955b78584199eeea31d8f471b6383d2ac5328419f3f9d18d90530598ee8c22241b647aa8e3732146c6c0451df55ef5ca14f014f3888907610cc5d186717d71573ff7fa0f42da7ff4bb0c08c16888274b6bc42c2da16717a151c9a47574a950ded1f298de1e30e24aa6ba2c6d71057a111af722e5afe04ef6041dcbdd5581dc3fed22776f17583491ed01e5f427ab03247efc8c9a8433cea0d6ce342062d9deaf1b20499a5064c2609c510e38182e69988861c811c4f00eb75560b7c74e9cc2fb6c0a837a89e7029705259d617503c17629ea1aff1c9eab3642c90f980705dee96202453eb9d4ee620e29a46cc1bb6d19d9f992c0cd1347fe87a2c0ff5163bb45619ac9c4afddcece8e2165e744c082b1fbd4e13bcce215cad1cd0dd30753947d16114856eb4dd832679ddc878e3fc86a769a60d60a66b9fc1f25554cb5c2c8a2ab7e027ec71b6239268ce1b8cc4d2d43ecb9795a33b3729859c2b0dcd25101852ead50562e2738a85621fab640b7719658256b650ec6338a3f1f8890ce72eb3441590828b8f56a783f496f442a348bcc6184b0b5d42398126b869bf8b13b935e6cf5a07cb5a96f2ba78edbe6c93cc7b7e634fc87acc8482b1dbd9e211df82d90f29e06cc2008050a85d0f5f0fbcf10ff4601f6bc11ab7bd63e5fdd131c4b3290c6f3209e1d2240daa08a59a53298b322d7931641b65b7b0ba0f3f7824c3009ba2bb1ea0e2d58dfeee12beae6334cdb66e206a2a2f2f7b7a5610e58e901a17ecd8e910bfd58247b661415da6a60dff4a9ba85fccdee8414e226d036ea10cf968b0deaac794ef906154fb53ec020389e4dd5069ae270675b5d1ac688793ce8f2c29f6511baf3229ea3704d3466150f7bc6b8b3c6434f00b4c8fb5bb9e94262db8dfad2ce4fd82f0df94a853c7eeec33dff24554d90b2c057773d11d0e0c29b8ccac35c93f3905417531e74480480d887ff23992341e3cc4bc0f44c045090191b98a97e121ab78e12eee5492a0f27980948881584b6ac6eff0a2751ae4b72d80efe22be710d14453d69d8245305be2070b18c538da4d1ecc217a9d4abbb7f1047ce42202e67a678bb175caf2c0fb0b6c8921bf4c2afff3c10344f98f33882f647487066812b8af48ebdcafe70ceecc217a8b8a990279c045abe3024aee16f3ec856ac00c4b6a1dde6220bcb3cf7a67de97085a0ab798c95f78db810b48f23dc7effe89fcb4ac03e35ea7f80aecd39be9aee9680a0dd9d09ec6f717e213bb9aa8c92d8000ab29128331c66d7e247290acc51285ba9d9b5922b2d1ea0d1f241b766e97d27d414ab15f97e031fc99c2eefdf78833cb6c7a702ed7016ce511a55815eb5ac73ef52691b74a2e2ef02440802b073be15e420e1eb19510e6ddaf98212cc4aa2903d3cac17e73f549796d980fda47082d2744530ac58a8f0731c0540517fdda62dcf434e41176aa585bb75f846c72e023ea7da2feea3d9d5fad14907dd46bb3022c0e3b7054795054589ee0893f58e49672292d706cbcd1da8128d1a1e52de9bd847ad4adcdffa4989cae0792360a0eac3427a111de88715024d8927b037152170afd8d16b84d8b9a2f6e8dbff4360068a42bd4178e397f9d769af6eb88c287fa27ef801197001854be8811bae544718d4cef836a50a59ec9cc2f217bf96da3cd4d5f7d2bca87be25d60f22bdf043cf01809447b077214448c98068420b17edd94f7aae946a65ebe4a356629d147166973b73f531ee470fd9cd944a6e38fab468d65bd4feee463d64becc9bdc012f09fef21f0fc038e2450247858750dc868cc16c6049a4800771d38779cddc851a376ca6fb20f99020cb6a9d54b8f13df71ad14595f6942dd8823000af8e21026cfd0b5d96d52b70f6fe7b491fcc71691184dba7537d8146fa3f170add1ad8acfdf32297c199a0cf389cff44549f0c1f1a3c0182ae8f3cd3445364112fe3ff042530ae41fae15e1a0d371acdb79de2347b4c788b6ccb1cf35ae9569a65671856044d20fca1afd5cd7a026332c57c0e4050047dc8a70d61dc7162529936970012f1c7be74e618cc949608c97ec84cfa9dfeddbbb62c982b1f1f195f259d2c41e0e48fe7e7295b4d6b517dcdf86ef10b5641f1774264867863a4a47e0e3024f7335b806ef661a507b1b0303a83e2d8023aa90177403cd05f68192441ac1a64754854ba583dd6e0787b916466e53cd1d3c7dfd17651cd8ce843be4fbb9eedd4e3f869e8691353a4a8294ebf6fdf98c0bae5bc85f0ef1858439f664067d8d11fa6c8613ebc100a6e331bd60170d76ee232d67760c016cca5ab177990e8b6a3d90b7f0f4e268f25ad797a60a3f078b19dc86ac7375cac8d7b45c77a618fb9ae30cd4b2911be91b8ed27d9c5256a8f6c074c463fc1c19bd14f7dc57202af013a67a2184efc38a569c8dbea4dd1973b3bb19a716518c2ac020cd10a20203837fc884120ae5781d78a3426648ebc9ffa1c88a50478eeb7c7774ae24d73b62c461a19d64fd7cf4e66c5ced72e027e70ad3fbc2e64e718cdce638d6f8f7fe60649b690c85609aa821b87ed4770bc61edc2046c7f9d263e09c2ec7b4aee678617bd57c9f6553e771cfa56ff6b2f43980d4fd95c1ddeacd2beb4f84292fe56b37e2c7b64d1d9efab780ffee89125e47887ed5031fc2d4532ab1c69aeee4a9da998ea954b674d1de407bb47c645cbd2d43e4d7f9516f299d093cc85c9cb420ca0a4aff6d2a02557d284e381a8ec3cb5e5baaf762f99eecff4b9120f3a242208dc30479a44b44a3952599335721eb6527156f3904686cc44407ee724a69c203da1f2b71f2ac5bfb2135abd9d5016ee414aedefc5eebccc6d26e2fea2a727714de546f55124deb951a9db59774d086c5fd6e8f1c2185a26544587f564279b58805507b7343fcf102ca59db3e7302205983954ce96a13eb733c550aeb3b30c669a1b878aee465d642d1e15232e29d69c5c258e76ae53203856a5b97170cf531fd3c1964d74d08f696f0bc92069f004532e914751047daf7aeb66fba4d04e50ba5a26149241d57a40d79d6081fce22a8faef48ec5cc7903472e8445d5383009f41b9e631c22538d80db02f3e7713de30a016c703d70a1c85cab58c1ad4bc548527d2dbe9bcf1ce80b1d7c14c3704255fa2379b39f39cd2b3bbaf9792648e08988474b27fadcabc5861a7adfa484ae110cd43e1ab444d7958cf71ecfd838d327915fd0f49c109329d5de2bc89bdbca70fca6b864b2fcad7b1e7b2335ac98e5128a6efee82369742099129cfaf1ce4011e93a17803378ceb13428ef419fb0b84a4225c0615156d7d1ed1eb59cdad2da278b133a059403935ac642d4e58c7e00675a42887b989084a30807a50c8f4057fd658e546ed609933576822cca3cbdd98f743924eafde1ccd3a9157d72839227cf1d1c47f818fec162907ed1604d0d37c09205c6b1d69fb2ce41ce3b7e9cc4a36f4d9c28ee4c6830322a5399c7ec3a042c49cd8f98fba2428bb8082358b085dcfb2ccb050b1ecdbb3a2d3dc8988e725e8ce3a3bc6448eaa11a391fb2b4c0ec9ebc6c6c8588979fe39e5f66ae37556e5ff01dad78de1196f4fced6f7c024181151fdd870a707abbba71f9da973dc7d60fec89d8d7000ef7a0f7a470c4b67b1ea79b74fbc5f28869f04074e991741fa85a705f8b2cce9f6e3e8e734783aceeefd7a68b8d13b0374013943f03f1b44f820a4b65706a3f66c8e24cac602e2e5cc9766cb7213b8a4da0eaab074d9f9a70b6ebb07dba961b9315d8b3621c1fe0a16cdfdf27ad9df371af2084077e661c26369e8e592893d2e66f4c258fbe94048e76d3d42cb7844d6039cffb14e777bcff6c27b3331f3276632cf7a991361cca21ec3e674adb04d09d6941cd771ef3c838fee6975552dfa75ce437fc11caae5a9560acde3be8228220c1ede838bd5587fcf0e692c80adf91aafb1d6479525a95b883516a018a2db64ec35f41983621294e06c9779d0b45963f9793b59f75ff5aae1a2bfa1ff38c7639dc12dca2ade9fb0f5ba83fe2b023c0cf242f865aefb94608cdb957449d95d11376f3cb8582076bd5c21769066c81afc0ca79f9625acc8d8009f2f6e22dd51d2c0433f0b7cfa5cab741ec00dbb6195ef3b1c183cd94489168b0c8c4ea954ad98461d70cec416dbf9169a72204f81eff4a49710da2bd0b40fef06e29a1933e37e679ba1268649410729ede2e26b5332cdde4ecc7f2c9f4070d57598d31977e087ff6627e3bce004977fb6ba2907fb5f2c26a4cfae2e491776a50be03a39d4af8a61e56d87ae32afb57dd313ee4029a0921e3803fa6743bf25c9060342ef0e92c09eb2d37c8131a46cfccaf9b2781231968914f0749bb9ed1bf2b01e632a2165453eac1c0f3580e7ddcfca71faddc67d550dae65bfc6562bad79e08149c6848bb50b2b27eecf9271eb468bdd704cd6bb7680863e12b018448ecfae1e4f000dcfc6b7b4c63c4098894538ff67ccfc92de414dd0be8618c8610e96edd50fca1a891b8e402367d6f185839b33128401753ea37b2f04a547ffe5c9f691032bf18a8463f5dedb00194715ac3094bd39a1bc294f0c8c666828682e0e9f90b955f623f80cdc89fe415926474bde917d747d7a3112e48b9c49a5baeb1b657ca93503e6337a1e2ee44695900b7be08ef172c47603157f243e6870ee7b", 0x1000}], 0x4}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x800, @mcast2, 0x3}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000480)="184be7dd4dd3c22fe23fa762c51b082ba5eb6264d83c7d095b25749124973489be6d38ba1b2a3ee79dae2f7d05e98974ec32f0951ed5fabce20d01f6c09e3b67e273bd1479eefa205c2bf612283ba7ac74a0c174c2ad25fb6627ef035a71c840f30dbe9b35426be8f8a06705c3f67b037b9ae965b77956c919ec011207267b5e87a5d2636a52125f31a85b5e5f877513", 0x90}, {&(0x7f0000000540)="c5bdbc41ea6d216af30c86900a947500ace21f154c5f02df17f28fea934c97e2638514a22c5f9e74b68b123429f5c5d885e23cd3586be026c82a12772f5559616080b302b6", 0x45}, {&(0x7f00000016c0)="c4b2b2f6a484059d81339951def3fb9d16f1b253e82c801953ac169d742ab8fc08c7e2e55379ea0b46a3c2f242acfa541aab7c4fe289e9965e4940aff91af6451c", 0x41}, {&(0x7f00000005c0)="c277e799335444", 0x7}, {&(0x7f0000001740)="25fc1088813ded3a5ef4eeb8e5eac5190fa30844bec5bb9ce93c7b62dd9fd51aca5210699faf755d02433f8212123559f27d2e8218042a683b603f9065f3374a62b3859dbc32a686757565d455989d3da1f43219d507fc52ca97750a4c8bef09bc2277c3d33e44d0d1b59936285814b42cff72f534ddba51d3b0abc494aa90026f688e40a7a1744d5c9bc90b66d7066aefe19c07ce8ea633faa060454aaa93b9028e833a55d0b6ed2e22572cf6d08f3ffccac7cff601f71689732ce0c195343e", 0xc0}, {&(0x7f0000001800)="2ba52e68f13cf73c38fe3179aaf496cddd288200c601a1c2b2fd4ad023200e2dd63d10709141e9aab7f730717b5c5ad54c552f1d585fb60be701f26227daf37259c2c625adc95a7c460b2be43af55b12854c125539213c42c27b15cc04c07169244ce96ba7ff4d15b7dfe7fbfb8e5c77a79e286de396bd5e69c1fab0e4896f83170c8df15c58d07f158b21d6444c597324d923141a438aee53ce76f4c833b41c6ec1827c9c", 0xa5}], 0x6, &(0x7f0000001f00)=ANY=[@ANYBLOB="1400000000000000290000ff2207310d38003400"/30], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@dstopts={{0x30, 0x29, 0x37, {0x16, 0x3, '\x00', [@enc_lim, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x84, 0x6, 0x2, 0x6, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x73}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd257}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @tclass={{0x14}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x16, 0xc, '\x00', [@generic={0x3b, 0x44, "58642afd28dbec2a49f99b36ff0d2a406423e56d2b63d1ec132e4b58f8e93518a12ab21c866d4fa4153c150e0c622c7534bb64883c65c971962686464b261afdd57aafc6"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x44fe}, @ra={0x5, 0x2, 0x6f}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0xfff}]}}}], 0x180}}], 0x3, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) socket(0x18, 0x80805, 0x0) 2.098066109s ago: executing program 0 (id=2885): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf25000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 624.306617ms ago: executing program 2 (id=2886): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c040000000000000a000a001c0004"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x82, 0x4, 0x93}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmmsg$sock(r3, &(0x7f0000003180)=[{{&(0x7f0000000240)=@hci={0x1d, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) shutdown(r1, 0x1) 564.876907ms ago: executing program 0 (id=2887): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x3c4c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 552.22171ms ago: executing program 1 (id=2888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xa, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x2}, @generic={0x99, 0x2, 0xe, 0x6, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @exit], &(0x7f0000000340)='GPL\x00', 0x4, 0xe6, &(0x7f0000000380)=""/230, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x2, 0x240, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x2, 0x2, 0x10, 0x5}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback, 0x35, 0x1, 0x10001, &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r4}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r2, r0, 0xf, 0x20, 0x0, @void, @void, @void, @value=r4, r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000240)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 539.297656ms ago: executing program 3 (id=2889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3a8, 0xa, 0x1, 0xfffffff0, 0x200, 0xa, 0x6, 0x1, 0x40, 0x1, 0x140, 0xfff, 0x4, 0x6, 0x7000, 0x8, 0x7569, 0x9, 0x779e8886, 0xc00, 0x1, 0x2, 0xff, 0x0, 0x3, 0xffffffde, 0x3ff, 0x3, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x4, 0xbd, 0x8, 0x9cc3, 0xce4b, 0xb, 0x1, 0x5, 0xf, 0x401, 0x8, 0x401, 0x1000, 0xf391, 0xadd, 0xb7, 0x97e, 0x8001, 0x401, 0x9, 0xa6d, 0xfff, 0x3, 0xfff, 0x0, 0x9f, 0xa1, 0x7fff, 0xfffffff4, 0x603b654e, 0x101, 0x10000, 0x2, 0x8, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x2, 0x1, 0x80000001, 0xec, 0x9, 0xe76, 0x3, 0x4, 0x400000, 0x9de1, 0xfff, 0xb41, 0x1ff, 0x3, 0x1000, 0x8, 0x7, 0x0, 0x4, 0x38, 0xb, 0x101, 0xdd0, 0x4aaa, 0x6, 0x5, 0x2, 0x4, 0x3, 0x5, 0x8b3, 0x3, 0x1, 0x5, 0x80000001, 0x5, 0x7, 0xb5, 0x7, 0xff, 0x3, 0x4, 0x7, 0x9, 0x8, 0x8, 0x0, 0xcc1a, 0x4, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x200, 0x2, 0x7, 0x3, 0xd5e, 0x3ff, 0xc87b, 0x2f, 0x1, 0x1, 0xffffff83, 0x4d0, 0x2000000, 0x1000, 0x3, 0x0, 0x7f, 0x7, 0x1, 0x7ff, 0x1, 0xe6, 0x2, 0x4, 0xfff, 0x3, 0xfffffffd, 0x4, 0xfffffffe, 0xfffffff8, 0x3d, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x100000, 0x7, 0x6, 0x2, 0x5, 0x4, 0x200, 0xffff, 0x3, 0x5, 0x5, 0xfffffff9, 0x6, 0x4, 0x2, 0xb291, 0xc, 0x0, 0x7ff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3ff, 0x9, 0x5, 0x9, 0x8, 0x4, 0xe, 0x0, 0x7, 0x1, 0x0, 0x2e04, 0xe0bf, 0x80000001, 0xfffffff9, 0x9, 0x3, 0x4, 0x8, 0xf, 0x6, 0x5, 0x8, 0x2, 0x8000, 0x3, 0xb8000000, 0x1649445e, 0x8, 0xffffffd4, 0x7ff, 0x6, 0x65d, 0xb, 0x3, 0x80000000, 0x4242, 0x8, 0x0, 0x9, 0x6, 0x8, 0xffff, 0xffffffff, 0x894, 0xd, 0x4e3c, 0x5, 0x0, 0xfffffff9, 0x8, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x3, 0x7, 0x7f, 0xa, 0x4, 0x7, 0xafd9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 467.947211ms ago: executing program 4 (id=2890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000038000103eabd700bfcffbff704000000", @ANYRESDEC=r1, @ANYBLOB="22bb2c1b146d9ca2c8a0bd043187b840", @ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES64, @ANYRES16=r2, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0) 341.728803ms ago: executing program 3 (id=2891): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x18, 0x2e, 0x9, 0x70bd27, 0x3, {0x4, 0x0, 0x97}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) 309.736998ms ago: executing program 4 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x48001) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = socket(0x1e, 0x80000, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0xfff, 0x400, 0x5, 0x7, 0x0, 0x5, 0x0, 0x200, 0x1000}}}}]}, 0x58}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000005c0)={0x1, [0x0]}, &(0x7f0000000840)=0x6) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x18, 0x800}], 0x1, 0x4008080) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r11, 0xf00, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000004}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x48800}, 0x4040040) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3a3549d6257a9adc27e96218a70303dd9d60742e7917419a314436b006fe428319a90cc8f3e450311d6594eeeebbc6f7c6de56217b68c9582c999e96254c7a5bb46577e0178d86d4411c096e0fbaabd528e66ed29b422c6957c864466150b908a1115b", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf25010000000000000001410000001800170000000e0000009e6574683a6970366772653000"], 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) 265.920309ms ago: executing program 1 (id=2893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000001280), 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000200000087000013"], 0x0, 0x2a, 0x0, 0x1, 0x4b}, 0x28) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="caaaaaaaaaaaaaaaaaaaaa3a080045a00028400000001d06907800000000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5019000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x9b) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 264.924937ms ago: executing program 2 (id=2894): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="3f80000000000000004588000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x16}, 0x50) 157.459485ms ago: executing program 1 (id=2895): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x578, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x567, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7ffffffe}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="5caea6b5632cbdaeb803efb9c9e1daf5c4b73ad69ccfec1417b90e4f5754149da8393b98f8718558afcc", @typed={0xc, 0x96, 0x0, 0x0, @u64=0x4}, @nested={0x2dc, 0xab, 0x0, 0x1, [@typed={0x12, 0x9d, 0x0, 0x0, @str='./cgroup/syz0\x00'}, @nested={0x2b9, 0x137, 0x0, 0x1, [@generic="200e2805f3ca3c8e2b3f91ed64d1ba244e8659ccd6ce01b7548da9e915f46d9b50855a", @generic="6079327b8b55c7fefe291392ab10287835ed5676b9e9637642ac8557d5c06a2768f6d95b11dc3969d69bcebcf7a8bbd574a69e71aa072ea8d700f51a8bfdc3e361d99e57a329721e51543712d60dbc8ebf89c787c1556ecb75056870ce21bbd9fb0e60288fb877c1b358a1ee774db04aa4fe1cfdbce1620b0d87b28140487c31d4c5addcb38a58812bfabe8a67d902a72e2596b10bb4738ff3082c", @typed={0x4, 0x6b0}, @generic="7a4c1d2a20023c5203309605826dbe8f4175229108c7471aa43286c0c55950ce53663b77ba475fe7ad7ccd656f1bac79d9cc633765ab52050a1da13195486b60d0c68d57f2f08c14cc", @typed={0x6a, 0x79, 0x0, 0x0, @binary="f056f335bef5a8e0bd6fba39177e3db13fc05cfdc330d0cdd0193a38268c06a036f899a91a33fb9485f439f549a3a28d701ae3408f7788da6f2c54bbf816a147f7e9231ccd324f273aceaf801ddf023ddab6bfe6d1e16eb10aac2978aefa04db93d5bbe007cb"}, @generic="4a5c60886b1b4652c2d2fa849088848efdb2690e04b5dab6ca69c33db7c77d3fe60e3a6974093c270eb3a7ce7e90c272351e2f8efded1b3fdf39008d3592ae6587d24389f8", @nested={0x4, 0x10e}, @generic="a92c2305f8dc6c005f719ae0262cda829425cf2b8f67eb021172d100110d5da13acd658f298bf83722ab3186b6f41b012719df362d5807b253a9fbb9a4e37368e8a583b56c351b8928bee8ce925f83fa1236d7b1160a7649d5aaca3554e5446bf98b56e7fc261998fcca174dccb01b1cbab84339ef5fc1826435db91075f2b3f31c7e8435fa871e3a849a2ffb63b648474a2289196c29b48e1fca834ca3bd8dfd3787cf1962a40997fef68e36752d6824038dd8bae4823c8d77a572696ca5e07ea034a6a8dd0f83726f53905e111e504aaf441c72da79f9065d5e30f8159bac9414efd1b6f358e075849348a8cfa030355", @nested={0x4, 0xcd}]}, @typed={0x8, 0x10d, 0x0, 0x0, @pid}]}]}]}, 0x578}], 0x1}, 0x0) 27.747182ms ago: executing program 2 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3fe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "1eedc78106a0e743", "eba9f36855546014e24d7e30b50b3fde57008c99592d00", "8e8ec580", "3c3c23fff2050cf6"}, 0x38) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) socket(0x11, 0x1, 0xfffff801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = epoll_create1(0x0) epoll_pwait(r8, &(0x7f0000000100)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) close(r4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0xc, 0xd6, 0x1000}, 0x20) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r10) ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, &(0x7f0000000440)={r10, &(0x7f0000000280)='\xff\xff', 0x10a00, &(0x7f0000000540)={@_ha_fsid={[0x6, 0x1000]}, {0x101, 0x2, 0x3, 0x1}}, 0x56b480, &(0x7f0000000340), &(0x7f00000003c0)=0x7}) setsockopt$inet6_buf(r10, 0x29, 0x51, &(0x7f0000000480)="3be6719e5c2e556a2c0aeb993cff2a95ba0af2a3d150ead45b9ab157d82a592ba38e72639ebd83c0ce5787e3478285e93d8e41637fdd4e0f55c4aa6ecdf2d843de7049a01a60dab333aead30d959644c532ee14ef9c4109e929653ad9ced06f31fc171ea", 0x64) accept4(r9, 0x0, &(0x7f0000000000), 0x80000) 11.114844ms ago: executing program 1 (id=2897): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf25000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 0s ago: executing program 3 (id=2898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0xf00}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): attribute type 6 has an invalid length. [ 393.965294][T15253] netlink: 'syz.0.2089': attribute type 7 has an invalid length. [ 393.977386][T15253] netlink: 'syz.0.2089': attribute type 8 has an invalid length. [ 394.106147][T15263] IPVS: Scheduler module ip_vs_sip not found [ 394.285984][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 394.313613][T15281] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 394.385850][T15279] 8021q: adding VLAN 0 to HW filter on device bond60 [ 394.414812][T15274] "syz.3.2092" (15274) uses obsolete ecb(arc4) skcipher [ 394.450427][T15289] IPVS: Scheduler module ip_vs_sip not found [ 394.507964][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 394.598372][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 394.734529][T15297] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 394.763337][T15299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.817560][T15305] FAULT_INJECTION: forcing a failure. [ 394.817560][T15305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.844810][T15305] CPU: 0 UID: 0 PID: 15305 Comm: syz.0.2100 Not tainted syzkaller #0 PREEMPT(full) [ 394.844835][T15305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.844845][T15305] Call Trace: [ 394.844852][T15305] [ 394.844860][T15305] dump_stack_lvl+0xe8/0x150 [ 394.844896][T15305] should_fail_ex+0x412/0x560 [ 394.844926][T15305] _copy_from_iter+0x1d3/0x1670 [ 394.844946][T15305] ? rcu_is_watching+0x15/0xb0 [ 394.844974][T15305] ? __pfx__copy_from_iter+0x10/0x10 [ 394.845000][T15305] ? netlink_sendmsg+0x650/0xb40 [ 394.845019][T15305] ? skb_put+0x11b/0x210 [ 394.845043][T15305] netlink_sendmsg+0x6c0/0xb40 [ 394.845076][T15305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.845097][T15305] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.845126][T15305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.845149][T15305] ____sys_sendmsg+0x972/0x9f0 [ 394.845180][T15305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.845211][T15305] ? import_iovec+0x73/0xa0 [ 394.845235][T15305] ___sys_sendmsg+0x2a5/0x360 [ 394.845268][T15305] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.845325][T15305] ? __fget_files+0x2a/0x420 [ 394.845340][T15305] ? __fget_files+0x3a0/0x420 [ 394.845365][T15305] __x64_sys_sendmsg+0x1bd/0x2a0 [ 394.845391][T15305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.845423][T15305] ? __pfx_ksys_write+0x10/0x10 [ 394.845452][T15305] do_syscall_64+0x14d/0xf80 [ 394.845473][T15305] ? trace_irq_disable+0x3b/0x150 [ 394.845488][T15305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.845504][T15305] ? clear_bhb_loop+0x40/0x90 [ 394.845525][T15305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.845540][T15305] RIP: 0033:0x7f118c79c819 [ 394.845557][T15305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.845571][T15305] RSP: 002b:00007f118d580028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.845591][T15305] RAX: ffffffffffffffda RBX: 00007f118ca15fa0 RCX: 00007f118c79c819 [ 394.845602][T15305] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 394.845613][T15305] RBP: 00007f118d580090 R08: 0000000000000000 R09: 0000000000000000 [ 394.845623][T15305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.845633][T15305] R13: 00007f118ca16038 R14: 00007f118ca15fa0 R15: 00007ffc79eeb138 [ 394.845661][T15305] [ 395.312880][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 395.346540][T15315] IPVS: Scheduler module ip_vs_sip not found [ 395.518999][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 395.568120][T15331] 8021q: adding VLAN 0 to HW filter on device bond66 [ 395.623523][T15336] xt_l2tp: v2 tid > 0xffff: 37482740 [ 396.307860][T15361] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 396.498967][T15363] FAULT_INJECTION: forcing a failure. [ 396.498967][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 396.551022][T15363] CPU: 1 UID: 0 PID: 15363 Comm: syz.4.2118 Not tainted syzkaller #0 PREEMPT(full) [ 396.551046][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.551056][T15363] Call Trace: [ 396.551063][T15363] [ 396.551070][T15363] dump_stack_lvl+0xe8/0x150 [ 396.551100][T15363] should_fail_ex+0x412/0x560 [ 396.551131][T15363] should_failslab+0xa8/0x100 [ 396.551156][T15363] __kmalloc_cache_noprof+0x88/0x660 [ 396.551178][T15363] ? sctp_association_new+0x89/0x25e0 [ 396.551201][T15363] sctp_association_new+0x89/0x25e0 [ 396.551218][T15363] ? sctp_do_bind+0x661/0x9d0 [ 396.551246][T15363] sctp_connect_new_asoc+0x2e4/0x6b0 [ 396.551267][T15363] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 396.551290][T15363] ? __local_bh_enable_ip+0xd0/0x130 [ 396.551312][T15363] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 396.551333][T15363] ? security_sctp_bind_connect+0x7e/0x2c0 [ 396.551359][T15363] sctp_sendmsg+0x1528/0x2c10 [ 396.551400][T15363] ? __pfx_sctp_sendmsg+0x10/0x10 [ 396.551428][T15363] ? aa_sk_perm+0x6d5/0x900 [ 396.551461][T15363] ? __pfx_aa_sk_perm+0x10/0x10 [ 396.551488][T15363] ? sock_rps_record_flow+0x19/0x350 [ 396.551512][T15363] ? inet_sendmsg+0x2f4/0x370 [ 396.551536][T15363] ____sys_sendmsg+0x80a/0x9f0 [ 396.551569][T15363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.551607][T15363] ? import_iovec+0x73/0xa0 [ 396.551632][T15363] ___sys_sendmsg+0x2a5/0x360 [ 396.551661][T15363] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.551719][T15363] ? __fget_files+0x2a/0x420 [ 396.551734][T15363] ? __fget_files+0x3a0/0x420 [ 396.551761][T15363] __x64_sys_sendmsg+0x1bd/0x2a0 [ 396.551787][T15363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.551820][T15363] ? __pfx_ksys_write+0x10/0x10 [ 396.551850][T15363] do_syscall_64+0x14d/0xf80 [ 396.551871][T15363] ? trace_irq_disable+0x3b/0x150 [ 396.551886][T15363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.551904][T15363] ? clear_bhb_loop+0x40/0x90 [ 396.551926][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.551943][T15363] RIP: 0033:0x7f2bad79c819 [ 396.551958][T15363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.551973][T15363] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.551991][T15363] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 396.552004][T15363] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 396.552015][T15363] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 396.552025][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.552036][T15363] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 396.552068][T15363] [ 397.247030][T15378] validate_nla: 5 callbacks suppressed [ 397.247050][T15378] netlink: 'syz.0.2122': attribute type 7 has an invalid length. [ 397.386924][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 397.464220][T15382] 8021q: adding VLAN 0 to HW filter on device bond67 [ 397.691729][T15399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.658791][T15413] FAULT_INJECTION: forcing a failure. [ 398.658791][T15413] name failslab, interval 1, probability 0, space 0, times 0 [ 398.728291][T15413] CPU: 0 UID: 0 PID: 15413 Comm: syz.4.2131 Not tainted syzkaller #0 PREEMPT(full) [ 398.728317][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 398.728329][T15413] Call Trace: [ 398.728336][T15413] [ 398.728343][T15413] dump_stack_lvl+0xe8/0x150 [ 398.728375][T15413] should_fail_ex+0x412/0x560 [ 398.728406][T15413] should_failslab+0xa8/0x100 [ 398.728436][T15413] ? __kernfs_new_node+0xe9/0x8e0 [ 398.728453][T15413] kmem_cache_alloc_noprof+0x87/0x650 [ 398.728474][T15413] ? kernfs_add_one+0x477/0x5c0 [ 398.728496][T15413] __kernfs_new_node+0xe9/0x8e0 [ 398.728519][T15413] ? __pfx___kernfs_new_node+0x10/0x10 [ 398.728536][T15413] ? kernfs_root+0x1c/0x230 [ 398.728567][T15413] ? kernfs_root+0x1c/0x230 [ 398.728591][T15413] ? kernfs_root+0x1c/0x230 [ 398.728613][T15413] ? kernfs_root+0x1c/0x230 [ 398.728642][T15413] kernfs_new_node+0x102/0x210 [ 398.728674][T15413] __kernfs_create_file+0x4b/0x2e0 [ 398.728697][T15413] sysfs_add_file_mode_ns+0x238/0x300 [ 398.728728][T15413] sysfs_create_file_ns+0x12b/0x1b0 [ 398.728753][T15413] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 398.728779][T15413] ? __dev_fwnode+0x50/0x80 [ 398.728802][T15413] ? device_create_file+0xf4/0x1b0 [ 398.728826][T15413] device_add+0x440/0xb70 [ 398.728854][T15413] device_create+0x269/0x300 [ 398.728881][T15413] ? timer_init_key+0x161/0x2f0 [ 398.728903][T15413] ? __pfx_device_create+0x10/0x10 [ 398.728929][T15413] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 398.728963][T15413] mac80211_hwsim_new_radio+0x427/0x5ba0 [ 398.729000][T15413] ? stack_trace_save+0xa9/0x100 [ 398.729019][T15413] ? __pfx_stack_trace_save+0x10/0x10 [ 398.729040][T15413] ? stack_depot_save_flags+0x33/0x810 [ 398.729073][T15413] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 398.729108][T15413] hwsim_new_radio_nl+0xf6a/0x1c00 [ 398.729155][T15413] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 398.729188][T15413] ? rcu_is_watching+0x15/0xb0 [ 398.729213][T15413] ? trace_kmalloc+0x2a/0x110 [ 398.729239][T15413] ? __nla_parse+0x40/0x60 [ 398.729262][T15413] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 398.729287][T15413] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 398.729323][T15413] genl_family_rcv_msg_doit+0x22a/0x330 [ 398.729353][T15413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.729390][T15413] ? bpf_lsm_capable+0x9/0x20 [ 398.729413][T15413] ? security_capable+0x7e/0x2c0 [ 398.729478][T15413] genl_rcv_msg+0x61c/0x7a0 [ 398.729508][T15413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.729531][T15413] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 398.729556][T15413] ? __lock_acquire+0x6b5/0x2cf0 [ 398.729590][T15413] netlink_rcv_skb+0x232/0x4b0 [ 398.729611][T15413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.729636][T15413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.729672][T15413] ? down_read+0x272/0x2e0 [ 398.729694][T15413] ? genl_rcv+0xd/0x40 [ 398.729717][T15413] genl_rcv+0x28/0x40 [ 398.729739][T15413] netlink_unicast+0x80f/0x9b0 [ 398.729765][T15413] ? __pfx_netlink_unicast+0x10/0x10 [ 398.729784][T15413] ? netlink_sendmsg+0x650/0xb40 [ 398.729802][T15413] ? skb_put+0x11b/0x210 [ 398.729828][T15413] netlink_sendmsg+0x813/0xb40 [ 398.729857][T15413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.729880][T15413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.729909][T15413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.729933][T15413] ____sys_sendmsg+0x972/0x9f0 [ 398.729965][T15413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.729998][T15413] ? import_iovec+0x73/0xa0 [ 398.730023][T15413] ___sys_sendmsg+0x2a5/0x360 [ 398.730053][T15413] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.730111][T15413] ? __fget_files+0x2a/0x420 [ 398.730127][T15413] ? __fget_files+0x3a0/0x420 [ 398.730153][T15413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.730178][T15413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.730205][T15413] ? __pfx_ksys_write+0x10/0x10 [ 398.730233][T15413] do_syscall_64+0x14d/0xf80 [ 398.730255][T15413] ? trace_irq_disable+0x3b/0x150 [ 398.730271][T15413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.730295][T15413] ? clear_bhb_loop+0x40/0x90 [ 398.730316][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.730334][T15413] RIP: 0033:0x7f2bad79c819 [ 398.730351][T15413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.730365][T15413] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.730384][T15413] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 398.730397][T15413] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 398.730408][T15413] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 398.730419][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.730435][T15413] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 398.730464][T15413] [ 398.754626][T15416] netlink: 'syz.0.2133': attribute type 3 has an invalid length. [ 398.987150][T15422] vlan8: entered promiscuous mode [ 399.035072][T15424] rdma_op ffff88807b8d41f0 conn xmit_rdma 0000000000000000 [ 399.065037][T15422] bridge0: entered promiscuous mode [ 399.336823][T15416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.572128][T15449] __nla_validate_parse: 2 callbacks suppressed [ 399.572146][T15449] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2142'. [ 399.624114][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2142'. [ 399.927690][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 400.256005][T15487] FAULT_INJECTION: forcing a failure. [ 400.256005][T15487] name failslab, interval 1, probability 0, space 0, times 0 [ 400.271595][T15487] CPU: 1 UID: 0 PID: 15487 Comm: syz.3.2153 Not tainted syzkaller #0 PREEMPT(full) [ 400.271621][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 400.271632][T15487] Call Trace: [ 400.271639][T15487] [ 400.271647][T15487] dump_stack_lvl+0xe8/0x150 [ 400.271676][T15487] should_fail_ex+0x412/0x560 [ 400.271708][T15487] should_failslab+0xa8/0x100 [ 400.271729][T15487] ? skb_clone+0x212/0x3a0 [ 400.271753][T15487] kmem_cache_alloc_noprof+0x87/0x650 [ 400.271772][T15487] ? __netlink_lookup+0xc6/0x8b0 [ 400.271799][T15487] skb_clone+0x212/0x3a0 [ 400.271826][T15487] __netlink_deliver_tap+0x404/0x850 [ 400.271856][T15487] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.271876][T15487] netlink_deliver_tap+0x19c/0x1b0 [ 400.271897][T15487] netlink_unicast+0x7e3/0x9b0 [ 400.271922][T15487] ? __pfx_netlink_unicast+0x10/0x10 [ 400.271941][T15487] ? netlink_sendmsg+0x650/0xb40 [ 400.271958][T15487] ? skb_put+0x11b/0x210 [ 400.271983][T15487] netlink_sendmsg+0x813/0xb40 [ 400.272011][T15487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.272034][T15487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.272063][T15487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.272087][T15487] ____sys_sendmsg+0x972/0x9f0 [ 400.272119][T15487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.272150][T15487] ? import_iovec+0x73/0xa0 [ 400.272174][T15487] ___sys_sendmsg+0x2a5/0x360 [ 400.272203][T15487] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.272254][T15487] ? __fget_files+0x2a/0x420 [ 400.272269][T15487] ? __fget_files+0x3a0/0x420 [ 400.272292][T15487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.272316][T15487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.272344][T15487] ? __pfx_ksys_write+0x10/0x10 [ 400.272377][T15487] do_syscall_64+0x14d/0xf80 [ 400.272398][T15487] ? trace_irq_disable+0x3b/0x150 [ 400.272412][T15487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.272429][T15487] ? clear_bhb_loop+0x40/0x90 [ 400.272449][T15487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.272465][T15487] RIP: 0033:0x7fc752d9c819 [ 400.272482][T15487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.272495][T15487] RSP: 002b:00007fc753c09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.272513][T15487] RAX: ffffffffffffffda RBX: 00007fc753015fa0 RCX: 00007fc752d9c819 [ 400.272525][T15487] RDX: 0000000004008800 RSI: 0000200000000000 RDI: 0000000000000003 [ 400.272536][T15487] RBP: 00007fc753c09090 R08: 0000000000000000 R09: 0000000000000000 [ 400.272544][T15487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.272553][T15487] R13: 00007fc753016038 R14: 00007fc753015fa0 R15: 00007fff9ec5bf38 [ 400.272581][T15487] [ 400.611296][T15474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.684152][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 400.757716][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 400.966874][T15504] FAULT_INJECTION: forcing a failure. [ 400.966874][T15504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.989751][T15504] CPU: 0 UID: 0 PID: 15504 Comm: syz.4.2158 Not tainted syzkaller #0 PREEMPT(full) [ 400.989774][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 400.989782][T15504] Call Trace: [ 400.989788][T15504] [ 400.989794][T15504] dump_stack_lvl+0xe8/0x150 [ 400.989818][T15504] should_fail_ex+0x412/0x560 [ 400.989843][T15504] _copy_from_iter+0x1d3/0x1670 [ 400.989861][T15504] ? rcu_is_watching+0x15/0xb0 [ 400.989883][T15504] ? __pfx__copy_from_iter+0x10/0x10 [ 400.989904][T15504] ? netlink_sendmsg+0x650/0xb40 [ 400.989919][T15504] ? skb_put+0x11b/0x210 [ 400.989942][T15504] netlink_sendmsg+0x6c0/0xb40 [ 400.989965][T15504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.989985][T15504] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.990009][T15504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.990030][T15504] ____sys_sendmsg+0x972/0x9f0 [ 400.990057][T15504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.990078][T15504] ? import_iovec+0x73/0xa0 [ 400.990099][T15504] ___sys_sendmsg+0x2a5/0x360 [ 400.990123][T15504] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.990179][T15504] ? __fget_files+0x2a/0x420 [ 400.990193][T15504] ? __fget_files+0x3a0/0x420 [ 400.990214][T15504] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.990239][T15504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.990268][T15504] ? __pfx_ksys_write+0x10/0x10 [ 400.990298][T15504] do_syscall_64+0x14d/0xf80 [ 400.990329][T15504] ? trace_irq_disable+0x3b/0x150 [ 400.990343][T15504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.990359][T15504] ? clear_bhb_loop+0x40/0x90 [ 400.990379][T15504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.990395][T15504] RIP: 0033:0x7f2bad79c819 [ 400.990411][T15504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.990425][T15504] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.990441][T15504] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 400.990453][T15504] RDX: 0000000024040884 RSI: 00002000000001c0 RDI: 0000000000000003 [ 400.990463][T15504] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 400.990473][T15504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.990483][T15504] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 400.990511][T15504] [ 401.297642][T15509] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2159'. [ 401.518118][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2163'. [ 401.527788][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2163'. [ 401.538015][T15519] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 401.832913][T15514] netlink: 'syz.2.2161': attribute type 6 has an invalid length. [ 401.860307][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 402.368107][T15556] FAULT_INJECTION: forcing a failure. [ 402.368107][T15556] name failslab, interval 1, probability 0, space 0, times 0 [ 402.383944][T15556] CPU: 0 UID: 0 PID: 15556 Comm: syz.3.2175 Not tainted syzkaller #0 PREEMPT(full) [ 402.383970][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.383981][T15556] Call Trace: [ 402.383988][T15556] [ 402.383995][T15556] dump_stack_lvl+0xe8/0x150 [ 402.384025][T15556] should_fail_ex+0x412/0x560 [ 402.384057][T15556] should_failslab+0xa8/0x100 [ 402.384081][T15556] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 402.384101][T15556] ? __alloc_skb+0x186/0x7d0 [ 402.384121][T15556] ? __alloc_skb+0x1d0/0x7d0 [ 402.384139][T15556] ? __local_bh_enable_ip+0xd0/0x130 [ 402.384166][T15556] __alloc_skb+0x1d0/0x7d0 [ 402.384191][T15556] netlink_sendmsg+0x5d4/0xb40 [ 402.384220][T15556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.384242][T15556] ? aa_sock_msg_perm+0xf1/0x1b0 [ 402.384270][T15556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.384294][T15556] ____sys_sendmsg+0x972/0x9f0 [ 402.384326][T15556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.384358][T15556] ? import_iovec+0x73/0xa0 [ 402.384382][T15556] ___sys_sendmsg+0x2a5/0x360 [ 402.384410][T15556] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.384465][T15556] ? __fget_files+0x2a/0x420 [ 402.384479][T15556] ? __fget_files+0x3a0/0x420 [ 402.384508][T15556] __x64_sys_sendmsg+0x1bd/0x2a0 [ 402.384531][T15556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.384558][T15556] ? __pfx_ksys_write+0x10/0x10 [ 402.384590][T15556] do_syscall_64+0x14d/0xf80 [ 402.384614][T15556] ? trace_irq_disable+0x3b/0x150 [ 402.384642][T15556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.384659][T15556] ? clear_bhb_loop+0x40/0x90 [ 402.384678][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.384693][T15556] RIP: 0033:0x7fc752d9c819 [ 402.384709][T15556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.384721][T15556] RSP: 002b:00007fc753c09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.384739][T15556] RAX: ffffffffffffffda RBX: 00007fc753015fa0 RCX: 00007fc752d9c819 [ 402.384750][T15556] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 402.384760][T15556] RBP: 00007fc753c09090 R08: 0000000000000000 R09: 0000000000000000 [ 402.384769][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.384778][T15556] R13: 00007fc753016038 R14: 00007fc753015fa0 R15: 00007fff9ec5bf38 [ 402.384803][T15556] [ 402.752726][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 403.158834][T15573] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 403.459963][T15585] xt_l2tp: v2 tid > 0xffff: 37482740 [ 403.490626][T15585] netlink: 'syz.3.2183': attribute type 9 has an invalid length. [ 403.520961][T15585] netlink: 'syz.3.2183': attribute type 6 has an invalid length. [ 403.528728][T15585] netlink: 'syz.3.2183': attribute type 7 has an invalid length. [ 403.563170][T15585] netlink: 'syz.3.2183': attribute type 8 has an invalid length. [ 404.089712][T15605] syzkaller0: entered promiscuous mode [ 404.096404][T15605] syzkaller0: entered allmulticast mode [ 404.255156][T15624] netlink: 'syz.0.2196': attribute type 29 has an invalid length. [ 404.270355][T15624] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 404.409433][T15633] FAULT_INJECTION: forcing a failure. [ 404.409433][T15633] name failslab, interval 1, probability 0, space 0, times 0 [ 404.424721][T15633] CPU: 0 UID: 0 PID: 15633 Comm: syz.3.2200 Not tainted syzkaller #0 PREEMPT(full) [ 404.424745][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.424755][T15633] Call Trace: [ 404.424762][T15633] [ 404.424769][T15633] dump_stack_lvl+0xe8/0x150 [ 404.424798][T15633] should_fail_ex+0x412/0x560 [ 404.424830][T15633] should_failslab+0xa8/0x100 [ 404.424852][T15633] ? __kernfs_new_node+0xe9/0x8e0 [ 404.424866][T15633] kmem_cache_alloc_noprof+0x87/0x650 [ 404.424881][T15633] __kernfs_new_node+0xe9/0x8e0 [ 404.424894][T15633] ? __pfx___kernfs_new_node+0x10/0x10 [ 404.424902][T15633] ? kernfs_root+0x1c/0x230 [ 404.424920][T15633] ? kernfs_root+0x1c/0x230 [ 404.424933][T15633] ? kernfs_root+0x1c/0x230 [ 404.424949][T15633] kernfs_new_node+0x102/0x210 [ 404.424966][T15633] kernfs_create_link+0xa7/0x200 [ 404.424979][T15633] sysfs_do_create_link_sd+0x83/0x110 [ 404.424995][T15633] device_add_class_symlinks+0xb6/0x240 [ 404.425010][T15633] device_add+0x475/0xb70 [ 404.425025][T15633] device_create+0x269/0x300 [ 404.425040][T15633] ? timer_init_key+0x161/0x2f0 [ 404.425055][T15633] ? __pfx_device_create+0x10/0x10 [ 404.425069][T15633] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 404.425088][T15633] mac80211_hwsim_new_radio+0x427/0x5ba0 [ 404.425108][T15633] ? stack_trace_save+0xa9/0x100 [ 404.425119][T15633] ? __pfx_stack_trace_save+0x10/0x10 [ 404.425138][T15633] ? stack_depot_save_flags+0x33/0x810 [ 404.425156][T15633] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 404.425175][T15633] hwsim_new_radio_nl+0xf6a/0x1c00 [ 404.425200][T15633] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 404.425218][T15633] ? rcu_is_watching+0x15/0xb0 [ 404.425232][T15633] ? trace_kmalloc+0x2a/0x110 [ 404.425246][T15633] ? __nla_parse+0x40/0x60 [ 404.425258][T15633] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 404.425272][T15633] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 404.425289][T15633] genl_family_rcv_msg_doit+0x22a/0x330 [ 404.425307][T15633] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 404.425326][T15633] ? bpf_lsm_capable+0x9/0x20 [ 404.425340][T15633] ? security_capable+0x7e/0x2c0 [ 404.425358][T15633] genl_rcv_msg+0x61c/0x7a0 [ 404.425374][T15633] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.425388][T15633] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 404.425402][T15633] ? __lock_acquire+0x6b5/0x2cf0 [ 404.425420][T15633] netlink_rcv_skb+0x232/0x4b0 [ 404.425432][T15633] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.425445][T15633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.425465][T15633] ? down_read+0x272/0x2e0 [ 404.425478][T15633] ? genl_rcv+0xd/0x40 [ 404.425491][T15633] genl_rcv+0x28/0x40 [ 404.425503][T15633] netlink_unicast+0x80f/0x9b0 [ 404.425517][T15633] ? __pfx_netlink_unicast+0x10/0x10 [ 404.425527][T15633] ? netlink_sendmsg+0x650/0xb40 [ 404.425537][T15633] ? skb_put+0x11b/0x210 [ 404.425551][T15633] netlink_sendmsg+0x813/0xb40 [ 404.425566][T15633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.425579][T15633] ? aa_sock_msg_perm+0xf1/0x1b0 [ 404.425595][T15633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.425608][T15633] ____sys_sendmsg+0x972/0x9f0 [ 404.425626][T15633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.425651][T15633] ? import_iovec+0x73/0xa0 [ 404.425673][T15633] ___sys_sendmsg+0x2a5/0x360 [ 404.425700][T15633] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.425751][T15633] ? __fget_files+0x2a/0x420 [ 404.425762][T15633] ? __fget_files+0x3a0/0x420 [ 404.425776][T15633] __x64_sys_sendmsg+0x1bd/0x2a0 [ 404.425790][T15633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.425808][T15633] ? __pfx_ksys_write+0x10/0x10 [ 404.425825][T15633] do_syscall_64+0x14d/0xf80 [ 404.425837][T15633] ? trace_irq_disable+0x3b/0x150 [ 404.425846][T15633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.425855][T15633] ? clear_bhb_loop+0x40/0x90 [ 404.425867][T15633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.425877][T15633] RIP: 0033:0x7fc752d9c819 [ 404.425888][T15633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.425896][T15633] RSP: 002b:00007fc753c09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.425908][T15633] RAX: ffffffffffffffda RBX: 00007fc753015fa0 RCX: 00007fc752d9c819 [ 404.425915][T15633] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 404.425921][T15633] RBP: 00007fc753c09090 R08: 0000000000000000 R09: 0000000000000000 [ 404.425927][T15633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.425932][T15633] R13: 00007fc753016038 R14: 00007fc753015fa0 R15: 00007fff9ec5bf38 [ 404.425948][T15633] [ 404.801948][T15642] __nla_validate_parse: 5 callbacks suppressed [ 404.801966][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 404.825650][T15643] netlink: 'syz.4.2198': attribute type 1 has an invalid length. [ 405.314557][T15651] FAULT_INJECTION: forcing a failure. [ 405.314557][T15651] name failslab, interval 1, probability 0, space 0, times 0 [ 405.346408][T15651] CPU: 1 UID: 0 PID: 15651 Comm: syz.0.2203 Not tainted syzkaller #0 PREEMPT(full) [ 405.346432][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.346442][T15651] Call Trace: [ 405.346448][T15651] [ 405.346455][T15651] dump_stack_lvl+0xe8/0x150 [ 405.346482][T15651] should_fail_ex+0x412/0x560 [ 405.346511][T15651] should_failslab+0xa8/0x100 [ 405.346535][T15651] __kmalloc_cache_noprof+0x88/0x660 [ 405.346555][T15651] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 405.346578][T15651] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 405.346602][T15651] ? genl_start+0x1c9/0x6c0 [ 405.346629][T15651] genl_start+0x1c9/0x6c0 [ 405.346650][T15651] ? netlink_lookup+0x30/0x200 [ 405.346673][T15651] __netlink_dump_start+0x469/0x7e0 [ 405.346699][T15651] genl_family_rcv_msg_dumpit+0x213/0x310 [ 405.346725][T15651] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 405.346749][T15651] ? genl_get_cmd+0x6cb/0x960 [ 405.346773][T15651] ? __pfx___mutex_lock+0x10/0x10 [ 405.346796][T15651] ? __pfx_genl_start+0x10/0x10 [ 405.346815][T15651] ? __pfx_genl_dumpit+0x10/0x10 [ 405.346835][T15651] ? __pfx_genl_done+0x10/0x10 [ 405.346871][T15651] ? __dev_queue_xmit+0x28b/0x3870 [ 405.346903][T15651] genl_rcv_msg+0x5e8/0x7a0 [ 405.346939][T15651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.346962][T15651] ? __pfx_smcd_nl_get_lgr+0x10/0x10 [ 405.346979][T15651] ? __lock_acquire+0x6b5/0x2cf0 [ 405.347005][T15651] netlink_rcv_skb+0x232/0x4b0 [ 405.347019][T15651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.347043][T15651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.347067][T15651] ? down_read+0x272/0x2e0 [ 405.347083][T15651] ? genl_rcv+0xd/0x40 [ 405.347106][T15651] genl_rcv+0x28/0x40 [ 405.347127][T15651] netlink_unicast+0x80f/0x9b0 [ 405.347153][T15651] ? __pfx_netlink_unicast+0x10/0x10 [ 405.347172][T15651] ? netlink_sendmsg+0x650/0xb40 [ 405.347187][T15651] ? skb_put+0x11b/0x210 [ 405.347210][T15651] netlink_sendmsg+0x813/0xb40 [ 405.347236][T15651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.347258][T15651] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.347282][T15651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.347304][T15651] ____sys_sendmsg+0x972/0x9f0 [ 405.347328][T15651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.347353][T15651] ? import_iovec+0x73/0xa0 [ 405.347373][T15651] ___sys_sendmsg+0x2a5/0x360 [ 405.347394][T15651] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.347443][T15651] ? __fget_files+0x2a/0x420 [ 405.347457][T15651] ? __fget_files+0x3a0/0x420 [ 405.347481][T15651] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.347504][T15651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.347532][T15651] ? __pfx_ksys_write+0x10/0x10 [ 405.347560][T15651] do_syscall_64+0x14d/0xf80 [ 405.347580][T15651] ? trace_irq_disable+0x3b/0x150 [ 405.347595][T15651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.347611][T15651] ? clear_bhb_loop+0x40/0x90 [ 405.347630][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.347647][T15651] RIP: 0033:0x7f118c79c819 [ 405.347663][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.347676][T15651] RSP: 002b:00007f118d580028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.347694][T15651] RAX: ffffffffffffffda RBX: 00007f118ca15fa0 RCX: 00007f118c79c819 [ 405.347706][T15651] RDX: 0000000004008800 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.347718][T15651] RBP: 00007f118d580090 R08: 0000000000000000 R09: 0000000000000000 [ 405.347727][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.347737][T15651] R13: 00007f118ca16038 R14: 00007f118ca15fa0 R15: 00007ffc79eeb138 [ 405.347762][T15651] [ 405.422165][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 405.723967][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 405.733001][T15653] erspan0: left allmulticast mode [ 405.738053][T15653] erspan0: left promiscuous mode [ 405.744539][T15653] bridge9: port 1(erspan0) entered disabled state [ 405.809533][T15659] gretap1: entered promiscuous mode [ 405.920756][T15667] netlink: 'syz.4.2208': attribute type 7 has an invalid length. [ 405.928698][T15667] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.2208'. [ 405.975434][T15671] netlink: 'syz.2.2209': attribute type 29 has an invalid length. [ 405.983646][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2209'. [ 405.993308][T15671] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 406.221409][T15681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2207'. [ 406.280102][T15681] openvswitch: netlink: Flow key attr not present in new flow. [ 406.962729][T15691] syzkaller0: entered promiscuous mode [ 407.020436][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 407.040833][T15691] syzkaller0: entered allmulticast mode [ 407.082559][T15695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2216'. [ 407.189588][T15696] erspan0: left allmulticast mode [ 407.196787][T15696] erspan0: left promiscuous mode [ 407.206247][T15696] bridge6: port 1(erspan0) entered disabled state [ 407.217894][T15696] bridge7: port 1(erspan0) entered blocking state [ 407.236045][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'. [ 407.256174][T15696] bridge7: port 1(erspan0) entered disabled state [ 407.263562][T15696] erspan0: entered allmulticast mode [ 407.270550][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'. [ 407.297826][T15696] erspan0: entered promiscuous mode [ 407.306425][T15696] bridge7: port 1(erspan0) entered blocking state [ 407.313048][T15696] bridge7: port 1(erspan0) entered forwarding state [ 407.383388][T15695] bridge7: port 2(bond51) entered blocking state [ 407.390332][T15695] bridge7: port 2(bond51) entered disabled state [ 407.397022][T15695] bond51: entered allmulticast mode [ 407.405840][T15695] bond51: entered promiscuous mode [ 407.447934][T15701] 8021q: adding VLAN 0 to HW filter on device bond68 [ 407.565794][T15713] 8021q: adding VLAN 0 to HW filter on device bond58 [ 407.791908][T15713] tipc: Resetting bearer [ 407.953410][T15727] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 408.034129][T15734] bridge11: entered promiscuous mode [ 408.064094][T15734] bridge11: entered allmulticast mode [ 408.082579][T15735] bridge10: port 1(erspan0) entered disabled state [ 408.103225][T15735] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 408.206126][T15745] netlink: 'syz.2.2226': attribute type 3 has an invalid length. [ 408.337084][T15750] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 408.491933][T15741] FAULT_INJECTION: forcing a failure. [ 408.491933][T15741] name failslab, interval 1, probability 0, space 0, times 0 [ 408.505488][T15741] CPU: 1 UID: 0 PID: 15741 Comm: syz.3.2225 Not tainted syzkaller #0 PREEMPT(full) [ 408.505512][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.505522][T15741] Call Trace: [ 408.505529][T15741] [ 408.505536][T15741] dump_stack_lvl+0xe8/0x150 [ 408.505565][T15741] should_fail_ex+0x412/0x560 [ 408.505597][T15741] should_failslab+0xa8/0x100 [ 408.505620][T15741] __kmalloc_cache_noprof+0x88/0x660 [ 408.505641][T15741] ? sctp_add_bind_addr+0x8c/0x370 [ 408.505668][T15741] sctp_add_bind_addr+0x8c/0x370 [ 408.505693][T15741] sctp_copy_local_addr_list+0x314/0x4f0 [ 408.505719][T15741] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 408.505742][T15741] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 408.505913][T15741] ? sctp_v4_is_any+0x35/0x60 [ 408.505946][T15741] ? sctp_copy_one_addr+0x93/0x360 [ 408.505973][T15741] sctp_bind_addr_copy+0x189/0x3c0 [ 408.506004][T15741] sctp_connect_new_asoc+0x2ff/0x6b0 [ 408.506026][T15741] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 408.506050][T15741] ? __local_bh_enable_ip+0xd0/0x130 [ 408.506071][T15741] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 408.506094][T15741] ? security_sctp_bind_connect+0x7e/0x2c0 [ 408.506120][T15741] sctp_sendmsg+0x1528/0x2c10 [ 408.506165][T15741] ? __pfx_sctp_sendmsg+0x10/0x10 [ 408.506193][T15741] ? aa_sk_perm+0x6d5/0x900 [ 408.506226][T15741] ? __pfx_aa_sk_perm+0x10/0x10 [ 408.506255][T15741] ? sock_rps_record_flow+0x19/0x350 [ 408.506281][T15741] ? inet_sendmsg+0x2f4/0x370 [ 408.506306][T15741] ____sys_sendmsg+0x80a/0x9f0 [ 408.506340][T15741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.506370][T15741] ? import_iovec+0x73/0xa0 [ 408.506395][T15741] ___sys_sendmsg+0x2a5/0x360 [ 408.506424][T15741] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.506487][T15741] ? __fget_files+0x2a/0x420 [ 408.506503][T15741] ? __fget_files+0x3a0/0x420 [ 408.506527][T15741] __x64_sys_sendmsg+0x1bd/0x2a0 [ 408.506554][T15741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.506588][T15741] ? __pfx_ksys_write+0x10/0x10 [ 408.506631][T15741] do_syscall_64+0x14d/0xf80 [ 408.506655][T15741] ? trace_irq_disable+0x3b/0x150 [ 408.506672][T15741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.506690][T15741] ? clear_bhb_loop+0x40/0x90 [ 408.506712][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.506729][T15741] RIP: 0033:0x7fc752d9c819 [ 408.506747][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.506761][T15741] RSP: 002b:00007fc753c09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.506781][T15741] RAX: ffffffffffffffda RBX: 00007fc753015fa0 RCX: 00007fc752d9c819 [ 408.506794][T15741] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 408.506806][T15741] RBP: 00007fc753c09090 R08: 0000000000000000 R09: 0000000000000000 [ 408.506816][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.506827][T15741] R13: 00007fc753016038 R14: 00007fc753015fa0 R15: 00007fff9ec5bf38 [ 408.506857][T15741] [ 409.056580][T15768] 8021q: adding VLAN 0 to HW filter on device bond52 [ 409.438078][T15788] FAULT_INJECTION: forcing a failure. [ 409.438078][T15788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.460124][T15786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.472663][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.1.2239 Not tainted syzkaller #0 PREEMPT(full) [ 409.472689][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 409.472698][T15788] Call Trace: [ 409.472705][T15788] [ 409.472711][T15788] dump_stack_lvl+0xe8/0x150 [ 409.472738][T15788] should_fail_ex+0x412/0x560 [ 409.472766][T15788] _copy_to_user+0x31/0xb0 [ 409.472786][T15788] simple_read_from_buffer+0xe1/0x170 [ 409.472815][T15788] proc_fail_nth_read+0x1bb/0x230 [ 409.472844][T15788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.472879][T15788] ? rw_verify_area+0x2a6/0x4d0 [ 409.472899][T15788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.472924][T15788] vfs_read+0x20c/0xa70 [ 409.472941][T15788] ? fdget_pos+0x246/0x320 [ 409.472959][T15788] ? __pfx___mutex_lock+0x10/0x10 [ 409.472982][T15788] ? __pfx_vfs_read+0x10/0x10 [ 409.473002][T15788] ? __fget_files+0x2a/0x420 [ 409.473022][T15788] ? __fget_files+0x3a0/0x420 [ 409.473036][T15788] ? __fget_files+0x2a/0x420 [ 409.473059][T15788] ksys_read+0x150/0x270 [ 409.473081][T15788] ? __pfx_ksys_read+0x10/0x10 [ 409.473109][T15788] do_syscall_64+0x14d/0xf80 [ 409.473131][T15788] ? trace_irq_disable+0x3b/0x150 [ 409.473146][T15788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.473163][T15788] ? clear_bhb_loop+0x40/0x90 [ 409.473184][T15788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.473201][T15788] RIP: 0033:0x7f99b9b5d04e [ 409.473218][T15788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 409.473232][T15788] RSP: 002b:00007f99baaa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.473250][T15788] RAX: ffffffffffffffda RBX: 00007f99baaa86c0 RCX: 00007f99b9b5d04e [ 409.473263][T15788] RDX: 000000000000000f RSI: 00007f99baaa80a0 RDI: 0000000000000004 [ 409.473274][T15788] RBP: 00007f99baaa8090 R08: 0000000000000000 R09: 0000000000000000 [ 409.473284][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.473294][T15788] R13: 00007f99b9e16038 R14: 00007f99b9e15fa0 R15: 00007fff03e0cda8 [ 409.473322][T15788] [ 409.710575][T15793] sctp: [Deprecated]: syz.3.2241 (pid 15793) Use of int in max_burst socket option. [ 409.710575][T15793] Use struct sctp_assoc_value instead [ 409.863907][T15796] __nla_validate_parse: 10 callbacks suppressed [ 409.863926][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 410.014627][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'. [ 410.091463][T15809] x_tables: duplicate underflow at hook 2 [ 410.105989][T15807] ipvlan2: entered allmulticast mode [ 410.131133][T15807] syz_tun: entered allmulticast mode [ 410.223999][T15815] dummy0: entered promiscuous mode [ 410.229284][T15815] macsec1: entered promiscuous mode [ 410.242254][T15815] dummy0: left promiscuous mode [ 410.333836][T15820] syzkaller0: entered promiscuous mode [ 410.339437][T15820] syzkaller0: entered allmulticast mode [ 410.394928][T15828] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2252'. [ 410.472234][T15831] veth1: mtu less than device minimum [ 410.684935][T15845] block nbd2: not configured, cannot reconfigure [ 410.693319][T15845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2259'. [ 410.786540][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 410.800517][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 410.941430][T15851] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 411.087766][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 411.591229][T15874] tc_dump_action: action bad kind [ 411.820731][T15885] IPVS: Scheduler module ip_vs_sip not found [ 411.985518][T15897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2279'. [ 412.087126][T15901] bond61 (unregistering): Released all slaves [ 412.103062][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2281'. [ 412.133928][T15904] 8021q: adding VLAN 0 to HW filter on device bond53 [ 412.335962][T15911] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 412.409190][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2284'. [ 412.444925][T15914] 8021q: adding VLAN 0 to HW filter on device bond61 [ 412.515920][T15918] 8021q: adding VLAN 0 to HW filter on device bond54 [ 412.535728][T15923] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.297597][T15943] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 413.348876][T15945] IPVS: Scheduler module ip_vs_sip not found [ 413.387932][T15942] dummy0: entered promiscuous mode [ 413.417088][T15942] macsec1: entered promiscuous mode [ 413.468601][T15942] dummy0: left promiscuous mode [ 413.876134][T15963] 8021q: adding VLAN 0 to HW filter on device bond55 [ 414.138579][T15980] macsec1: entered promiscuous mode [ 414.251528][T15980] dummy0: entered promiscuous mode [ 414.310805][T15980] dummy0: left promiscuous mode [ 414.983458][T15989] 8021q: adding VLAN 0 to HW filter on device bond59 [ 415.048029][T15992] tipc: Resetting bearer [ 415.203634][T15999] __nla_validate_parse: 5 callbacks suppressed [ 415.203651][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 415.780505][T16014] IPVS: Scheduler module ip_vs_sip not found [ 415.864776][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 415.912289][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'. [ 415.946736][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 415.981259][T16036] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2309'. [ 416.012484][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 416.022256][T16031] erspan0: left allmulticast mode [ 416.027307][T16031] erspan0: left promiscuous mode [ 416.048272][T16031] bridge7: port 1(erspan0) entered disabled state [ 416.060126][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2312'. [ 416.072505][T16031] bridge8: port 1(erspan0) entered blocking state [ 416.079556][T16031] bridge8: port 1(erspan0) entered disabled state [ 416.087199][T16031] erspan0: entered allmulticast mode [ 416.095011][T16031] erspan0: entered promiscuous mode [ 416.101947][T16031] bridge8: port 1(erspan0) entered blocking state [ 416.108514][T16031] bridge8: port 1(erspan0) entered forwarding state [ 416.117811][T16037] bond0: Unable to set up delay as MII monitoring is disabled [ 416.167103][T16034] 8021q: adding VLAN 0 to HW filter on device bond62 [ 416.277437][T16039] 8021q: adding VLAN 0 to HW filter on device bond60 [ 416.308460][T16036] bridge8: port 2(bond56) entered blocking state [ 416.336437][T16036] bridge8: port 2(bond56) entered disabled state [ 416.343960][T16036] bond56: entered allmulticast mode [ 416.373190][T16036] bond56: entered promiscuous mode [ 416.398187][T16054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2314'. [ 416.573245][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2315'. [ 416.754392][T16050] tipc: Resetting bearer [ 416.999024][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 417.013244][T16070] FAULT_INJECTION: forcing a failure. [ 417.013244][T16070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.057357][T16070] CPU: 0 UID: 0 PID: 16070 Comm: syz.1.2320 Not tainted syzkaller #0 PREEMPT(full) [ 417.057382][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.057392][T16070] Call Trace: [ 417.057408][T16070] [ 417.057417][T16070] dump_stack_lvl+0xe8/0x150 [ 417.057447][T16070] should_fail_ex+0x412/0x560 [ 417.057479][T16070] _copy_to_user+0x31/0xb0 [ 417.057502][T16070] simple_read_from_buffer+0xe1/0x170 [ 417.057532][T16070] proc_fail_nth_read+0x1bb/0x230 [ 417.057561][T16070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.057589][T16070] ? rw_verify_area+0x2a6/0x4d0 [ 417.057608][T16070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.057634][T16070] vfs_read+0x20c/0xa70 [ 417.057650][T16070] ? fdget_pos+0x246/0x320 [ 417.057671][T16070] ? __pfx___mutex_lock+0x10/0x10 [ 417.057695][T16070] ? __pfx_vfs_read+0x10/0x10 [ 417.057716][T16070] ? __fget_files+0x2a/0x420 [ 417.057736][T16070] ? __fget_files+0x3a0/0x420 [ 417.057750][T16070] ? __fget_files+0x2a/0x420 [ 417.057775][T16070] ksys_read+0x150/0x270 [ 417.057797][T16070] ? __pfx_ksys_read+0x10/0x10 [ 417.057827][T16070] do_syscall_64+0x14d/0xf80 [ 417.057848][T16070] ? trace_irq_disable+0x3b/0x150 [ 417.057863][T16070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.057880][T16070] ? clear_bhb_loop+0x40/0x90 [ 417.057902][T16070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.057919][T16070] RIP: 0033:0x7f99b9b5d04e [ 417.057935][T16070] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.057950][T16070] RSP: 002b:00007f99baaa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.057969][T16070] RAX: ffffffffffffffda RBX: 00007f99baaa86c0 RCX: 00007f99b9b5d04e [ 417.057981][T16070] RDX: 000000000000000f RSI: 00007f99baaa80a0 RDI: 0000000000000005 [ 417.057992][T16070] RBP: 00007f99baaa8090 R08: 0000000000000000 R09: 0000000000000000 [ 417.058003][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.058013][T16070] R13: 00007f99b9e16038 R14: 00007f99b9e15fa0 R15: 00007fff03e0cda8 [ 417.058042][T16070] [ 417.297657][T16076] syzkaller0: entered promiscuous mode [ 417.304158][T16076] syzkaller0: entered allmulticast mode [ 417.690518][T16095] 8021q: adding VLAN 0 to HW filter on device bond43 [ 417.754459][T16088] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 417.789789][T16092] netlink: 'syz.1.2328': attribute type 1 has an invalid length. [ 417.994092][T16101] 8021q: adding VLAN 0 to HW filter on device bond63 [ 418.577390][T16117] syzkaller1: entered promiscuous mode [ 418.583127][T16117] syzkaller1: entered allmulticast mode [ 419.492456][T16157] 8021q: adding VLAN 0 to HW filter on device bond69 [ 419.893239][T16177] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 419.967358][T16172] 8021q: adding VLAN 0 to HW filter on device bond61 [ 420.019681][T16178] tipc: Resetting bearer [ 420.073534][T16182] openvswitch: netlink: Missing key (keys=40, expected=80) [ 420.346102][T16184] 8021q: adding VLAN 0 to HW filter on device bond64 [ 420.455766][T16199] __nla_validate_parse: 14 callbacks suppressed [ 420.455787][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 420.683579][T16208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'. [ 420.879126][T16199] 8021q: adding VLAN 0 to HW filter on device bond70 [ 421.185850][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2364'. [ 421.343176][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2365'. [ 421.533391][T16243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2366'. [ 421.905390][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 421.958891][T16226] 8021q: adding VLAN 0 to HW filter on device bond44 [ 421.989973][T16234] 8021q: adding VLAN 0 to HW filter on device bond65 [ 422.103389][T16261] bond0: Unable to set up delay as MII monitoring is disabled [ 422.223345][T16265] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2370'. [ 422.245610][T16265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.463667][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2376'. [ 422.500292][T16279] vlan0: entered allmulticast mode [ 422.506161][T16279] bridge6: entered allmulticast mode [ 422.549352][T16283] xt_bpf: check failed: parse error [ 422.566986][T16279] bridge6: port 1(bond45) entered blocking state [ 422.615747][T16279] bridge6: port 1(bond45) entered disabled state [ 422.638606][T16286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.647721][T16279] bond45: entered allmulticast mode [ 422.666737][T16279] bond45: entered promiscuous mode [ 422.956977][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2381'. [ 423.024318][T16298] 8021q: adding VLAN 0 to HW filter on device bond62 [ 423.143623][T16298] tipc: Resetting bearer [ 423.394355][T16313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2385'. [ 423.551783][T16317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.563205][T16319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.317876][T16332] syzkaller0: entered promiscuous mode [ 424.331287][T16332] syzkaller0: entered allmulticast mode [ 425.547692][T16360] __nla_validate_parse: 4 callbacks suppressed [ 425.547711][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 425.584078][T16359] block nbd0: not configured, cannot reconfigure [ 425.715296][T16364] netlink: 'syz.1.2400': attribute type 29 has an invalid length. [ 425.725854][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 425.739129][T16364] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 425.788855][T16367] FAULT_INJECTION: forcing a failure. [ 425.788855][T16367] name failslab, interval 1, probability 0, space 0, times 0 [ 425.882470][T16367] CPU: 1 UID: 0 PID: 16367 Comm: syz.4.2402 Not tainted syzkaller #0 PREEMPT(full) [ 425.882494][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 425.882505][T16367] Call Trace: [ 425.882512][T16367] [ 425.882520][T16367] dump_stack_lvl+0xe8/0x150 [ 425.882548][T16367] should_fail_ex+0x412/0x560 [ 425.882580][T16367] should_failslab+0xa8/0x100 [ 425.882605][T16367] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 425.882628][T16367] ? __get_vm_area_node+0x13f/0x300 [ 425.882651][T16367] __get_vm_area_node+0x13f/0x300 [ 425.882667][T16367] ? unwind_next_frame+0xa5/0x23c0 [ 425.882697][T16367] __vmalloc_node_range_noprof+0x372/0x1730 [ 425.882717][T16367] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 425.882748][T16367] ? __lock_acquire+0x6b5/0x2cf0 [ 425.882784][T16367] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.882805][T16367] ? aa_file_perm+0x192/0x15e0 [ 425.882834][T16367] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 425.882851][T16367] __vmalloc_noprof+0xd2/0x120 [ 425.882870][T16367] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 425.882890][T16367] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 425.882911][T16367] bpf_prog_alloc+0x3c/0x1a0 [ 425.882929][T16367] bpf_prog_load+0x7ba/0x1ae0 [ 425.882961][T16367] ? __pfx_bpf_prog_load+0x10/0x10 [ 425.882998][T16367] ? bpf_lsm_bpf+0x9/0x20 [ 425.883020][T16367] ? security_bpf+0x7e/0x2d0 [ 425.883046][T16367] __sys_bpf+0x618/0x950 [ 425.883065][T16367] ? __pfx___sys_bpf+0x10/0x10 [ 425.883097][T16367] ? ksys_write+0x242/0x270 [ 425.883119][T16367] ? __pfx_ksys_write+0x10/0x10 [ 425.883146][T16367] __x64_sys_bpf+0x7c/0x90 [ 425.883178][T16367] do_syscall_64+0x14d/0xf80 [ 425.883200][T16367] ? trace_irq_disable+0x3b/0x150 [ 425.883215][T16367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.883233][T16367] ? clear_bhb_loop+0x40/0x90 [ 425.883255][T16367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.883272][T16367] RIP: 0033:0x7f2bad79c819 [ 425.883288][T16367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.883303][T16367] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.883322][T16367] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 425.883335][T16367] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 425.883346][T16367] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 425.883357][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.883367][T16367] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 425.883396][T16367] [ 425.883609][T16367] syz.4.2402: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 425.899157][T16373] netlink: 'syz.1.2404': attribute type 6 has an invalid length. [ 425.940277][T16367] ,cpuset= [ 426.136743][T16377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.161906][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 426.187449][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 426.302323][T16367] /,mems_allowed=0-1 [ 426.310547][T16367] CPU: 1 UID: 0 PID: 16367 Comm: syz.4.2402 Not tainted syzkaller #0 PREEMPT(full) [ 426.310567][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 426.310576][T16367] Call Trace: [ 426.310583][T16367] [ 426.310589][T16367] dump_stack_lvl+0xe8/0x150 [ 426.310617][T16367] warn_alloc+0x249/0x340 [ 426.310643][T16367] ? __pfx_warn_alloc+0x10/0x10 [ 426.310665][T16367] ? __get_vm_area_node+0x13f/0x300 [ 426.310687][T16367] ? __get_vm_area_node+0x2b5/0x300 [ 426.310701][T16367] ? unwind_next_frame+0xa5/0x23c0 [ 426.310728][T16367] __vmalloc_node_range_noprof+0x397/0x1730 [ 426.310757][T16367] ? __lock_acquire+0x6b5/0x2cf0 [ 426.310791][T16367] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 426.310811][T16367] ? aa_file_perm+0x192/0x15e0 [ 426.310839][T16367] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 426.310855][T16367] __vmalloc_noprof+0xd2/0x120 [ 426.310872][T16367] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 426.310891][T16367] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 426.310911][T16367] bpf_prog_alloc+0x3c/0x1a0 [ 426.310930][T16367] bpf_prog_load+0x7ba/0x1ae0 [ 426.310961][T16367] ? __pfx_bpf_prog_load+0x10/0x10 [ 426.310998][T16367] ? bpf_lsm_bpf+0x9/0x20 [ 426.311020][T16367] ? security_bpf+0x7e/0x2d0 [ 426.311046][T16367] __sys_bpf+0x618/0x950 [ 426.311065][T16367] ? __pfx___sys_bpf+0x10/0x10 [ 426.311096][T16367] ? ksys_write+0x242/0x270 [ 426.311118][T16367] ? __pfx_ksys_write+0x10/0x10 [ 426.311144][T16367] __x64_sys_bpf+0x7c/0x90 [ 426.311176][T16367] do_syscall_64+0x14d/0xf80 [ 426.311199][T16367] ? trace_irq_disable+0x3b/0x150 [ 426.311214][T16367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.311231][T16367] ? clear_bhb_loop+0x40/0x90 [ 426.311252][T16367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.311270][T16367] RIP: 0033:0x7f2bad79c819 [ 426.311287][T16367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.311301][T16367] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.311321][T16367] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 426.311334][T16367] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 426.311345][T16367] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 426.311355][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.311365][T16367] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 426.311393][T16367] [ 426.311409][T16367] Mem-Info: [ 426.539717][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'. [ 426.545475][T16367] active_anon:9838 inactive_anon:0 isolated_anon:0 [ 426.545475][T16367] active_file:3899 inactive_file:40077 isolated_file:0 [ 426.545475][T16367] unevictable:768 dirty:391 writeback:0 [ 426.545475][T16367] slab_reclaimable:12052 slab_unreclaimable:124464 [ 426.545475][T16367] mapped:34071 shmem:1369 pagetables:1373 [ 426.545475][T16367] sec_pagetables:0 bounce:0 [ 426.545475][T16367] kernel_misc_reclaimable:0 [ 426.545475][T16367] free:1292390 free_pcp:7379 free_cma:0 [ 426.732378][T16367] Node 0 active_anon:30852kB inactive_anon:0kB active_file:15596kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136284kB dirty:1564kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22620kB pagetables:5212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.772306][T16367] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.810853][T16367] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.859603][T16367] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 426.866084][T16367] Node 0 DMA32 free:1210224kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29012kB inactive_anon:0kB active_file:15596kB inactive_file:160104kB unevictable:1536kB writepending:1524kB zspages:0kB present:3129332kB managed:2552320kB mlocked:0kB bounce:0kB free_pcp:30256kB local_pcp:9220kB free_cma:0kB [ 426.962248][T16367] lowmem_reserve[]: 0 0 0 0 0 [ 426.967092][T16367] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.004359][T16393] FAULT_INJECTION: forcing a failure. [ 427.004359][T16393] name failslab, interval 1, probability 0, space 0, times 0 [ 427.022721][T16367] lowmem_reserve[]: 0 0 0 0 0 [ 427.027754][T16367] Node 1 Normal free:3953280kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1000kB local_pcp:248kB free_cma:0kB [ 427.042918][T16393] CPU: 1 UID: 0 PID: 16393 Comm: syz.3.2409 Not tainted syzkaller #0 PREEMPT(full) [ 427.042944][T16393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.042955][T16393] Call Trace: [ 427.042962][T16393] [ 427.042969][T16393] dump_stack_lvl+0xe8/0x150 [ 427.042997][T16393] should_fail_ex+0x412/0x560 [ 427.043028][T16393] should_failslab+0xa8/0x100 [ 427.043052][T16393] __kmalloc_cache_noprof+0x88/0x660 [ 427.043072][T16393] ? nft_pernet+0x23/0x240 [ 427.043094][T16393] ? nf_tables_newtable+0x435/0x1910 [ 427.043120][T16393] nf_tables_newtable+0x435/0x1910 [ 427.043141][T16393] ? nfnetlink_subsys_unregister+0x1a2/0x1b0 [ 427.043182][T16393] nfnetlink_rcv+0x1240/0x27b0 [ 427.043230][T16393] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 427.043261][T16393] ? ref_tracker_free+0x693/0x840 [ 427.043302][T16393] ? __netlink_deliver_tap+0x807/0x850 [ 427.043322][T16393] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.043355][T16393] netlink_unicast+0x80f/0x9b0 [ 427.043379][T16393] ? __pfx_netlink_unicast+0x10/0x10 [ 427.043397][T16393] ? netlink_sendmsg+0x650/0xb40 [ 427.043414][T16393] ? skb_put+0x11b/0x210 [ 427.043438][T16393] netlink_sendmsg+0x813/0xb40 [ 427.043465][T16393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.043486][T16393] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.043512][T16393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.043534][T16393] ____sys_sendmsg+0x972/0x9f0 [ 427.043565][T16393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.043595][T16393] ? import_iovec+0x73/0xa0 [ 427.043617][T16393] ___sys_sendmsg+0x2a5/0x360 [ 427.043645][T16393] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.043699][T16393] ? __fget_files+0x2a/0x420 [ 427.043713][T16393] ? __fget_files+0x3a0/0x420 [ 427.043737][T16393] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.043762][T16393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.043793][T16393] ? __pfx_ksys_write+0x10/0x10 [ 427.043821][T16393] do_syscall_64+0x14d/0xf80 [ 427.043843][T16393] ? trace_irq_disable+0x3b/0x150 [ 427.043857][T16393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.043881][T16393] ? clear_bhb_loop+0x40/0x90 [ 427.043904][T16393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.043921][T16393] RIP: 0033:0x7fc752d9c819 [ 427.043936][T16393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.043950][T16393] RSP: 002b:00007fc753c09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.043969][T16393] RAX: ffffffffffffffda RBX: 00007fc753015fa0 RCX: 00007fc752d9c819 [ 427.043981][T16393] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 427.043991][T16393] RBP: 00007fc753c09090 R08: 0000000000000000 R09: 0000000000000000 [ 427.044001][T16393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.044010][T16393] R13: 00007fc753016038 R14: 00007fc753015fa0 R15: 00007fff9ec5bf38 [ 427.044038][T16393] [ 427.167180][T16396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.199494][T16367] lowmem_reserve[]: 0 0 0 0 0 [ 427.373203][T16367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 427.388127][T16367] Node 0 DMA32: 5262*4kB (UM) 3613*8kB (UM) 1281*16kB (UM) 172*32kB (UME) 138*64kB (UM) 146*128kB (UM) 80*256kB (UM) 41*512kB (UM) 38*1024kB (UME) 18*2048kB (UME) 242*4096kB (UM) = 1211952kB [ 427.389244][T16400] netlink: 'syz.3.2411': attribute type 1 has an invalid length. [ 427.412226][T16367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 427.428051][T16367] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 4*16kB (UM) 3*32kB (UM) 9*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 964*4096kB (UM) = 3953280kB [ 427.451098][T16367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.461302][T16367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.471340][T16367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.481130][T16367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.491658][T16367] 45341 total pagecache pages [ 427.496365][T16367] 0 pages in swap cache [ 427.509219][T16367] Free swap = 124996kB [ 427.515182][T16367] Total swap = 124996kB [ 427.519481][T16367] 2097051 pages RAM [ 427.523399][T16367] 0 pages HighMem/MovableOnly [ 427.528297][T16367] 427137 pages reserved [ 427.532514][T16367] 0 pages cma reserved [ 427.588306][T16403] netlink: 'syz.3.2411': attribute type 1 has an invalid length. [ 427.657128][T16406] netlink: 'syz.4.2414': attribute type 29 has an invalid length. [ 427.667856][T16415] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 427.681902][T16416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2415'. [ 427.687895][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 427.691585][T16414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2415'. [ 427.710106][T16400] 8021q: adding VLAN 0 to HW filter on device bond57 [ 427.757497][T16403] bond57: (slave batadv5): Opening slave failed [ 427.777802][T16417] netlink: 'syz.2.2413': attribute type 39 has an invalid length. [ 427.878207][T16415] 8021q: adding VLAN 0 to HW filter on device bond71 [ 427.888471][T16409] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 427.889717][T16406] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 427.945929][T16409] bond71: (slave batadv4): Opening slave failed [ 428.161335][T16435] xt_l2tp: v2 tid > 0xffff: 37482740 [ 428.178650][T16435] netlink: 'syz.3.2419': attribute type 9 has an invalid length. [ 428.189012][T16435] netlink: 'syz.3.2419': attribute type 6 has an invalid length. [ 428.209615][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2417'. [ 428.633028][T16460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.652816][T16461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.812507][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'. [ 429.472783][T16472] FAULT_INJECTION: forcing a failure. [ 429.472783][T16472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.593462][T16472] CPU: 1 UID: 0 PID: 16472 Comm: syz.4.2423 Not tainted syzkaller #0 PREEMPT(full) [ 429.593489][T16472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.593499][T16472] Call Trace: [ 429.593507][T16472] [ 429.593514][T16472] dump_stack_lvl+0xe8/0x150 [ 429.593546][T16472] should_fail_ex+0x412/0x560 [ 429.593577][T16472] _copy_to_user+0x31/0xb0 [ 429.593601][T16472] simple_read_from_buffer+0xe1/0x170 [ 429.593631][T16472] proc_fail_nth_read+0x1bb/0x230 [ 429.593659][T16472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.593688][T16472] ? rw_verify_area+0x2a6/0x4d0 [ 429.593707][T16472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.593733][T16472] vfs_read+0x20c/0xa70 [ 429.593751][T16472] ? fdget_pos+0x246/0x320 [ 429.593772][T16472] ? __pfx___mutex_lock+0x10/0x10 [ 429.593796][T16472] ? __pfx_vfs_read+0x10/0x10 [ 429.593818][T16472] ? __fget_files+0x2a/0x420 [ 429.593838][T16472] ? __fget_files+0x3a0/0x420 [ 429.593853][T16472] ? __fget_files+0x2a/0x420 [ 429.593878][T16472] ksys_read+0x150/0x270 [ 429.593900][T16472] ? __pfx_ksys_read+0x10/0x10 [ 429.593930][T16472] do_syscall_64+0x14d/0xf80 [ 429.593951][T16472] ? trace_irq_disable+0x3b/0x150 [ 429.593965][T16472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.593988][T16472] ? clear_bhb_loop+0x40/0x90 [ 429.594010][T16472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.594028][T16472] RIP: 0033:0x7f2bad75d04e [ 429.594044][T16472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 429.594058][T16472] RSP: 002b:00007f2bae6a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 429.594078][T16472] RAX: ffffffffffffffda RBX: 00007f2bae6a36c0 RCX: 00007f2bad75d04e [ 429.594090][T16472] RDX: 000000000000000f RSI: 00007f2bae6a30a0 RDI: 0000000000000005 [ 429.594101][T16472] RBP: 00007f2bae6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 429.594112][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.594123][T16472] R13: 00007f2bada16218 R14: 00007f2bada16180 R15: 00007fffb225ea68 [ 429.594152][T16472] [ 430.284155][T16486] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 430.540048][T16490] 8021q: adding VLAN 0 to HW filter on device bond46 [ 430.644149][T16490] bond46: (slave batadv2): Opening slave failed [ 430.682864][T16502] __nla_validate_parse: 4 callbacks suppressed [ 430.682884][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'. [ 430.773393][T16502] vlan0: entered allmulticast mode [ 430.778693][T16502] bridge12: entered allmulticast mode [ 430.796249][T16502] erspan0: left allmulticast mode [ 430.802471][T16502] erspan0: left promiscuous mode [ 430.807865][T16502] bridge10: port 1(erspan0) entered disabled state [ 430.849907][T16502] bridge12: port 1(bond72) entered blocking state [ 430.858081][T16502] bridge12: port 1(bond72) entered disabled state [ 430.864978][T16502] bond72: entered allmulticast mode [ 430.872982][T16502] bond72: entered promiscuous mode [ 430.994742][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 431.011985][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'. [ 431.050421][T16510] openvswitch: netlink: Missing key (keys=40, expected=80) [ 431.123000][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'. [ 431.132286][T16515] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 431.386486][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 431.433017][T16528] 8021q: adding VLAN 0 to HW filter on device bond58 [ 431.509252][T16533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.675389][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2438'. [ 432.487237][T16555] validate_nla: 5 callbacks suppressed [ 432.487255][T16555] netlink: 'syz.3.2445': attribute type 3 has an invalid length. [ 432.550066][T16550] syzkaller0: entered promiscuous mode [ 432.627740][T16550] syzkaller0: entered allmulticast mode [ 432.647819][T16555] siw: device registration error -23 [ 432.858409][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 432.894280][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 432.949406][T16567] openvswitch: netlink: Missing key (keys=40, expected=80) [ 433.016345][T16572] rdma_rxe: rxe_newlink: failed to add wg1 [ 433.039595][T16563] 8021q: adding VLAN 0 to HW filter on device bond59 [ 433.090956][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 433.366330][T16587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.425623][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'. [ 433.438686][T16591] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 433.910148][T16616] nbd: must specify at least one socket [ 433.944038][T16620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.969241][T16615] vlan1: entered allmulticast mode [ 433.987925][T16615] bridge9: entered allmulticast mode [ 434.289782][T16619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.409816][T16610] erspan0: left allmulticast mode [ 434.415582][T16610] erspan0: left promiscuous mode [ 434.421289][T16610] bridge8: port 1(erspan0) entered disabled state [ 434.648044][T16625] workqueue: Failed to create a rescuer kthread for wq "bond60": -EINTR [ 435.391982][T16653] 8021q: adding VLAN 0 to HW filter on device bond63 [ 435.567163][T16663] tipc: Resetting bearer [ 435.882477][T16668] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 435.894880][T16682] FAULT_INJECTION: forcing a failure. [ 435.894880][T16682] name failslab, interval 1, probability 0, space 0, times 0 [ 435.897448][T16668] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 435.950420][T16682] CPU: 0 UID: 0 PID: 16682 Comm: syz.2.2473 Not tainted syzkaller #0 PREEMPT(full) [ 435.950444][T16682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 435.950454][T16682] Call Trace: [ 435.950462][T16682] [ 435.950470][T16682] dump_stack_lvl+0xe8/0x150 [ 435.950500][T16682] should_fail_ex+0x412/0x560 [ 435.950532][T16682] should_failslab+0xa8/0x100 [ 435.950555][T16682] ? skb_clone+0x212/0x3a0 [ 435.950579][T16682] kmem_cache_alloc_noprof+0x87/0x650 [ 435.950597][T16682] ? __netlink_lookup+0xc6/0x8b0 [ 435.950625][T16682] skb_clone+0x212/0x3a0 [ 435.950652][T16682] __netlink_deliver_tap+0x404/0x850 [ 435.950692][T16682] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.950713][T16682] netlink_deliver_tap+0x19c/0x1b0 [ 435.950733][T16682] netlink_unicast+0x7e3/0x9b0 [ 435.950759][T16682] ? __pfx_netlink_unicast+0x10/0x10 [ 435.950779][T16682] ? netlink_sendmsg+0x650/0xb40 [ 435.950797][T16682] ? skb_put+0x11b/0x210 [ 435.950821][T16682] netlink_sendmsg+0x813/0xb40 [ 435.950851][T16682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.950874][T16682] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.950903][T16682] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.950928][T16682] ____sys_sendmsg+0x972/0x9f0 [ 435.950961][T16682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.950994][T16682] ? import_iovec+0x73/0xa0 [ 435.951018][T16682] ___sys_sendmsg+0x2a5/0x360 [ 435.951048][T16682] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.951102][T16682] ? __fget_files+0x2a/0x420 [ 435.951116][T16682] ? __fget_files+0x3a0/0x420 [ 435.951137][T16682] __x64_sys_sendmsg+0x1bd/0x2a0 [ 435.951163][T16682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.951196][T16682] ? __pfx_ksys_write+0x10/0x10 [ 435.951227][T16682] do_syscall_64+0x14d/0xf80 [ 435.951249][T16682] ? trace_irq_disable+0x3b/0x150 [ 435.951265][T16682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.951283][T16682] ? clear_bhb_loop+0x40/0x90 [ 435.951305][T16682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.951322][T16682] RIP: 0033:0x7fcb3f79c819 [ 435.951339][T16682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.951354][T16682] RSP: 002b:00007fcb405c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.951374][T16682] RAX: ffffffffffffffda RBX: 00007fcb3fa15fa0 RCX: 00007fcb3f79c819 [ 435.951386][T16682] RDX: 000000000400c084 RSI: 0000200000000080 RDI: 0000000000000003 [ 435.951398][T16682] RBP: 00007fcb405c3090 R08: 0000000000000000 R09: 0000000000000000 [ 435.951409][T16682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.951419][T16682] R13: 00007fcb3fa16038 R14: 00007fcb3fa15fa0 R15: 00007ffda9a6e838 [ 435.951447][T16682] [ 436.541725][T16686] __nla_validate_parse: 7 callbacks suppressed [ 436.541744][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 436.585165][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'. [ 436.863473][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 436.943053][T16719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.161208][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2479'. [ 437.676762][T16733] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 437.732556][T16733] 8021q: adding VLAN 0 to HW filter on device bond73 [ 437.880592][T16739] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 437.968637][T16746] netlink: 'syz.2.2491': attribute type 30 has an invalid length. [ 438.014773][T16733] bond73: (slave batadv4): Opening slave failed [ 438.021503][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'. [ 438.044744][T16743] netlink: 'syz.4.2489': attribute type 3 has an invalid length. [ 438.104571][T16743] block nbd4: NBD_DISCONNECT [ 438.210077][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 438.510880][T16773] netlink: 'syz.3.2500': attribute type 3 has an invalid length. [ 438.575478][T16773] block nbd3: NBD_DISCONNECT [ 438.629847][T16779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.663135][T16773] siw: device registration error -23 [ 438.849657][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'. [ 438.910816][T16789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.196924][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2501'. [ 439.483750][T16795] IPVS: Scheduler module ip_vs_sip not found [ 439.656881][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 439.995469][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.265892][T16832] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 440.503766][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 440.568540][T16844] tipc: Started in network mode [ 440.597045][T16844] tipc: Node identity ac14140f, cluster identity 4711 [ 440.616676][T16844] tipc: Enabled bearer , priority 10 [ 440.821809][T16853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 440.990465][T16867] netlink: 'syz.4.2524': attribute type 1 has an invalid length. [ 440.997604][T16861] 8021q: adding VLAN 0 to HW filter on device bond66 [ 441.032173][T16867] 8021q: adding VLAN 0 to HW filter on device bond47 [ 441.074985][T16867] veth25: entered promiscuous mode [ 441.084283][T16867] bond47: (slave veth25): Enslaving as an active interface with an up link [ 441.202378][T16872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.040097][T16880] vlan1: entered allmulticast mode [ 442.053128][T16891] __nla_validate_parse: 10 callbacks suppressed [ 442.053149][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 442.055440][T16880] bridge7: entered allmulticast mode [ 442.076615][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 442.137620][T16882] bridge7: port 1(bond48) entered blocking state [ 442.144546][T16882] bridge7: port 1(bond48) entered disabled state [ 442.152086][T16882] bond48: entered allmulticast mode [ 442.159194][T16882] bond48: entered promiscuous mode [ 442.166903][ T9] tipc: Node number set to 2886997007 [ 442.319910][T16901] openvswitch: netlink: Flow actions attr not present in new flow. [ 442.715705][T16920] syzkaller0: entered promiscuous mode [ 442.730583][T16920] syzkaller0: entered allmulticast mode [ 442.778138][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 442.800788][T16926] 8021q: adding VLAN 0 to HW filter on device bond64 [ 442.896382][T16926] tipc: Resetting bearer [ 442.972991][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'. [ 442.982186][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 443.155776][T16941] FAULT_INJECTION: forcing a failure. [ 443.155776][T16941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.198327][T16941] CPU: 0 UID: 0 PID: 16941 Comm: syz.0.2547 Not tainted syzkaller #0 PREEMPT(full) [ 443.198352][T16941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.198363][T16941] Call Trace: [ 443.198370][T16941] [ 443.198378][T16941] dump_stack_lvl+0xe8/0x150 [ 443.198407][T16941] should_fail_ex+0x412/0x560 [ 443.198438][T16941] _copy_from_iter+0x1d3/0x1670 [ 443.198462][T16941] ? rcu_is_watching+0x15/0xb0 [ 443.198491][T16941] ? __pfx__copy_from_iter+0x10/0x10 [ 443.198517][T16941] ? netlink_sendmsg+0x650/0xb40 [ 443.198536][T16941] ? skb_put+0x11b/0x210 [ 443.198559][T16941] netlink_sendmsg+0x6c0/0xb40 [ 443.198591][T16941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.198613][T16941] ? aa_sock_msg_perm+0xf1/0x1b0 [ 443.198642][T16941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.198666][T16941] ____sys_sendmsg+0x972/0x9f0 [ 443.198696][T16941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.198723][T16941] ? import_iovec+0x73/0xa0 [ 443.198746][T16941] ___sys_sendmsg+0x2a5/0x360 [ 443.198775][T16941] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.198828][T16941] ? __fget_files+0x2a/0x420 [ 443.198843][T16941] ? __fget_files+0x3a0/0x420 [ 443.198869][T16941] __x64_sys_sendmsg+0x1bd/0x2a0 [ 443.198895][T16941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.198927][T16941] ? __pfx_ksys_write+0x10/0x10 [ 443.198957][T16941] do_syscall_64+0x14d/0xf80 [ 443.198979][T16941] ? trace_irq_disable+0x3b/0x150 [ 443.198995][T16941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.199012][T16941] ? clear_bhb_loop+0x40/0x90 [ 443.199034][T16941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.199051][T16941] RIP: 0033:0x7f118c79c819 [ 443.199068][T16941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.199082][T16941] RSP: 002b:00007f118d580028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.199100][T16941] RAX: ffffffffffffffda RBX: 00007f118ca15fa0 RCX: 00007f118c79c819 [ 443.199112][T16941] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 443.199122][T16941] RBP: 00007f118d580090 R08: 0000000000000000 R09: 0000000000000000 [ 443.199131][T16941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.199139][T16941] R13: 00007f118ca16038 R14: 00007f118ca15fa0 R15: 00007ffc79eeb138 [ 443.199167][T16941] [ 443.279086][T16946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2548'. [ 443.530370][T16947] netlink: 'syz.3.2548': attribute type 4 has an invalid length. [ 443.539624][T16947] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2548'. [ 443.561243][T16954] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.649761][T16947] .`: renamed from bond0 (while UP) [ 443.706912][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 443.975962][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 443.994252][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2556'. [ 444.074042][T16972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.084398][T16978] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.178196][T16974] 8021q: adding VLAN 0 to HW filter on device bond74 [ 444.234661][T16987] netlink: 'syz.2.2559': attribute type 4 has an invalid length. [ 444.463456][T16987] .`: renamed from bond0 (while UP) [ 445.036724][T17006] dvmrp1: entered allmulticast mode [ 445.043841][T17012] dvmrp1: left allmulticast mode [ 445.062605][T17006] x_tables: duplicate underflow at hook 2 [ 446.242607][T17057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.180693][T17073] macsec1: entered promiscuous mode [ 447.207310][T17073] dummy0: entered promiscuous mode [ 447.235542][T17073] dummy0: left promiscuous mode [ 448.045499][T17111] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 448.065205][T17111] __nla_validate_parse: 3 callbacks suppressed [ 448.065284][T17111] netlink: 352 bytes leftover after parsing attributes in process `syz.0.2595'. [ 448.096555][T17111] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 448.104633][T17111] netlink: 352 bytes leftover after parsing attributes in process `syz.0.2595'. [ 448.187060][T17118] netlink: 'syz.2.2597': attribute type 9 has an invalid length. [ 448.230927][T17118] netlink: 'syz.2.2597': attribute type 6 has an invalid length. [ 448.249801][T17118] netlink: 'syz.2.2597': attribute type 7 has an invalid length. [ 448.258041][T17118] netlink: 'syz.2.2597': attribute type 8 has an invalid length. [ 448.278901][T17121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.472627][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2596'. [ 448.682409][T17136] dummy0: entered promiscuous mode [ 448.693485][T17136] macsec1: entered promiscuous mode [ 448.781144][T17136] dummy0: left promiscuous mode [ 449.069273][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2602'. [ 449.122981][T17145] vlan9: entered allmulticast mode [ 449.141331][T17145] bridge10: entered allmulticast mode [ 449.149744][T17145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2602'. [ 449.199575][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2603'. [ 449.336568][T17150] bridge10: port 1(bond0) entered blocking state [ 449.368054][T17150] bridge10: port 1(bond0) entered disabled state [ 449.396408][T17150] bond0: entered allmulticast mode [ 449.418267][T17150] bond0: entered promiscuous mode [ 449.461519][T17149] vlan6: entered allmulticast mode [ 449.467353][T17149] bridge10: entered allmulticast mode [ 449.514435][T17154] bridge10: port 1(bond60) entered blocking state [ 449.521181][T17154] bridge10: port 1(bond60) entered disabled state [ 449.528059][T17154] bond60: entered allmulticast mode [ 449.535975][T17154] bond60: entered promiscuous mode [ 449.688041][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 449.697283][T17166] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 449.712773][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 449.950628][T17176] dummy0: entered promiscuous mode [ 449.978223][T17176] macsec1: entered promiscuous mode [ 450.000883][T17176] dummy0: left promiscuous mode [ 450.252789][T17194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.440929][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 450.961200][T17216] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2622'. [ 451.172654][T17220] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 451.253695][T17222] netlink: 'syz.4.2624': attribute type 4 has an invalid length. [ 451.305667][T17225] netlink: 'syz.4.2624': attribute type 4 has an invalid length. [ 451.844613][T17234] 8021q: adding VLAN 0 to HW filter on device bond65 [ 452.042405][T17249] netlink: 'syz.2.2628': attribute type 39 has an invalid length. [ 452.071084][T17250] tipc: Resetting bearer [ 452.810993][T17292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.075697][T17297] __nla_validate_parse: 4 callbacks suppressed [ 453.075718][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2635'. [ 453.988860][T17311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2640'. [ 454.659038][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 454.701088][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 454.730721][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 454.751996][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 454.775037][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 454.813121][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 454.830755][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 455.059161][T17343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2654'. [ 455.738413][T17372] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 455.763098][T17372] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 456.001489][T17377] FAULT_INJECTION: forcing a failure. [ 456.001489][T17377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.014069][T17379] vlan7: entered allmulticast mode [ 456.021147][T17379] bridge11: entered allmulticast mode [ 456.031527][T17377] CPU: 0 UID: 0 PID: 17377 Comm: syz.0.2667 Not tainted syzkaller #0 PREEMPT(full) [ 456.031551][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 456.031561][T17377] Call Trace: [ 456.031568][T17377] [ 456.031575][T17377] dump_stack_lvl+0xe8/0x150 [ 456.031604][T17377] should_fail_ex+0x412/0x560 [ 456.031631][T17377] _copy_from_user+0x2d/0xb0 [ 456.031652][T17377] ___sys_sendmsg+0x1c6/0x360 [ 456.031680][T17377] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.031733][T17377] ? __fget_files+0x2a/0x420 [ 456.031747][T17377] ? __fget_files+0x3a0/0x420 [ 456.031771][T17377] __x64_sys_sendmsg+0x1bd/0x2a0 [ 456.031796][T17377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.031826][T17377] ? __pfx_ksys_write+0x10/0x10 [ 456.031857][T17377] do_syscall_64+0x14d/0xf80 [ 456.031878][T17377] ? trace_irq_disable+0x3b/0x150 [ 456.031893][T17377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.031910][T17377] ? clear_bhb_loop+0x40/0x90 [ 456.031931][T17377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.031947][T17377] RIP: 0033:0x7f118c79c819 [ 456.031964][T17377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.031977][T17377] RSP: 002b:00007f118d580028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.031996][T17377] RAX: ffffffffffffffda RBX: 00007f118ca15fa0 RCX: 00007f118c79c819 [ 456.032009][T17377] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 456.032019][T17377] RBP: 00007f118d580090 R08: 0000000000000000 R09: 0000000000000000 [ 456.032027][T17377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.032036][T17377] R13: 00007f118ca16038 R14: 00007f118ca15fa0 R15: 00007ffc79eeb138 [ 456.032064][T17377] [ 456.257951][T17384] openvswitch: netlink: Missing key (keys=40, expected=80) [ 456.279174][T17379] bridge11: port 1(bond61) entered blocking state [ 456.301294][T17379] bridge11: port 1(bond61) entered disabled state [ 456.316495][T17379] bond61: entered allmulticast mode [ 456.345475][T17379] bond61: entered promiscuous mode [ 456.503691][T17396] FAULT_INJECTION: forcing a failure. [ 456.503691][T17396] name failslab, interval 1, probability 0, space 0, times 0 [ 456.517144][T17396] CPU: 0 UID: 0 PID: 17396 Comm: syz.4.2675 Not tainted syzkaller #0 PREEMPT(full) [ 456.517167][T17396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 456.517177][T17396] Call Trace: [ 456.517185][T17396] [ 456.517191][T17396] dump_stack_lvl+0xe8/0x150 [ 456.517220][T17396] should_fail_ex+0x412/0x560 [ 456.517252][T17396] should_failslab+0xa8/0x100 [ 456.517276][T17396] __kmalloc_noprof+0xe8/0x760 [ 456.517304][T17396] ? kernfs_fop_write_iter+0x158/0x540 [ 456.517329][T17396] kernfs_fop_write_iter+0x158/0x540 [ 456.517354][T17396] vfs_write+0x61d/0xb90 [ 456.517380][T17396] ? __pfx_vfs_write+0x10/0x10 [ 456.517407][T17396] ? __fget_files+0x2a/0x420 [ 456.517428][T17396] ksys_write+0x150/0x270 [ 456.517445][T17396] ? __pfx_ksys_write+0x10/0x10 [ 456.517468][T17396] do_syscall_64+0x14d/0xf80 [ 456.517485][T17396] ? trace_irq_disable+0x3b/0x150 [ 456.517497][T17396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.517509][T17396] ? clear_bhb_loop+0x40/0x90 [ 456.517525][T17396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.517539][T17396] RIP: 0033:0x7f2bad79c819 [ 456.517552][T17396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.517562][T17396] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.517577][T17396] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 456.517587][T17396] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000004 [ 456.517595][T17396] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 456.517606][T17396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.517615][T17396] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 456.517639][T17396] [ 457.315004][T17418] FAULT_INJECTION: forcing a failure. [ 457.315004][T17418] name failslab, interval 1, probability 0, space 0, times 0 [ 457.328280][T17418] CPU: 1 UID: 0 PID: 17418 Comm: syz.4.2683 Not tainted syzkaller #0 PREEMPT(full) [ 457.328305][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.328316][T17418] Call Trace: [ 457.328323][T17418] [ 457.328330][T17418] dump_stack_lvl+0xe8/0x150 [ 457.328359][T17418] should_fail_ex+0x412/0x560 [ 457.328388][T17418] should_failslab+0xa8/0x100 [ 457.328413][T17418] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 457.328435][T17418] ? __alloc_skb+0x1d0/0x7d0 [ 457.328455][T17418] ? __local_bh_enable_ip+0xd0/0x130 [ 457.328482][T17418] __alloc_skb+0x1d0/0x7d0 [ 457.328516][T17418] rtmsg_ifinfo_build_skb+0x84/0x260 [ 457.328541][T17418] ? lock_acquire+0xf0/0x2e0 [ 457.328569][T17418] rtmsg_ifinfo+0x8c/0x1a0 [ 457.328592][T17418] __dev_notify_flags+0xf2/0x310 [ 457.328617][T17418] ? __pfx___dev_notify_flags+0x10/0x10 [ 457.328638][T17418] ? __dev_change_flags+0x4c6/0x690 [ 457.328665][T17418] ? __pfx___dev_change_flags+0x10/0x10 [ 457.328687][T17418] ? __skb_flow_dissect+0x423/0x6d20 [ 457.328719][T17418] netif_change_flags+0xe8/0x1a0 [ 457.328747][T17418] do_setlink+0xf82/0x4590 [ 457.328774][T17418] ? __lock_acquire+0x6b5/0x2cf0 [ 457.328802][T17418] ? __pfx_do_setlink+0x10/0x10 [ 457.328825][T17418] ? __lock_acquire+0x6b5/0x2cf0 [ 457.328867][T17418] ? __mutex_trylock_common+0x158/0x260 [ 457.328896][T17418] ? __pfx___mutex_trylock_common+0x10/0x10 [ 457.328924][T17418] ? rcu_is_watching+0x15/0xb0 [ 457.328949][T17418] ? trace_contention_end+0x3d/0x150 [ 457.328967][T17418] ? __mutex_lock+0x319/0x1300 [ 457.328990][T17418] ? __pfx___nla_validate_parse+0x10/0x10 [ 457.329018][T17418] ? rtnl_setlink+0x55e/0x940 [ 457.329042][T17418] ? __pfx___mutex_lock+0x10/0x10 [ 457.329077][T17418] ? get_net+0x13d/0x1f0 [ 457.329104][T17418] rtnl_setlink+0x635/0x940 [ 457.329130][T17418] ? __pfx_rtnl_setlink+0x10/0x10 [ 457.329242][T17418] ? __pfx_rtnl_setlink+0x10/0x10 [ 457.329261][T17418] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 457.329284][T17418] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 457.329303][T17418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.329321][T17418] ? ref_tracker_free+0x693/0x840 [ 457.329335][T17418] ? __copy_skb_header+0xa3/0x4a0 [ 457.329360][T17418] ? __pfx_ref_tracker_free+0x10/0x10 [ 457.329376][T17418] ? __skb_clone+0x63/0x7a0 [ 457.329408][T17418] netlink_rcv_skb+0x232/0x4b0 [ 457.329430][T17418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.329451][T17418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.329481][T17418] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.329513][T17418] netlink_unicast+0x80f/0x9b0 [ 457.329539][T17418] ? __pfx_netlink_unicast+0x10/0x10 [ 457.329559][T17418] ? netlink_sendmsg+0x650/0xb40 [ 457.329576][T17418] ? skb_put+0x11b/0x210 [ 457.329600][T17418] netlink_sendmsg+0x813/0xb40 [ 457.329629][T17418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.329652][T17418] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.329680][T17418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.329704][T17418] ____sys_sendmsg+0x972/0x9f0 [ 457.329736][T17418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.329769][T17418] ? import_iovec+0x73/0xa0 [ 457.329793][T17418] ___sys_sendmsg+0x2a5/0x360 [ 457.329822][T17418] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.329880][T17418] ? __fget_files+0x2a/0x420 [ 457.329895][T17418] ? __fget_files+0x3a0/0x420 [ 457.329921][T17418] __x64_sys_sendmsg+0x1bd/0x2a0 [ 457.329948][T17418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.329980][T17418] ? __pfx_ksys_write+0x10/0x10 [ 457.330011][T17418] do_syscall_64+0x14d/0xf80 [ 457.330032][T17418] ? trace_irq_disable+0x3b/0x150 [ 457.330047][T17418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.330065][T17418] ? clear_bhb_loop+0x40/0x90 [ 457.330087][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.330104][T17418] RIP: 0033:0x7f2bad79c819 [ 457.330121][T17418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.330135][T17418] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.330154][T17418] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 457.330165][T17418] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 457.330174][T17418] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 457.330183][T17418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.330192][T17418] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 457.330220][T17418] [ 458.124419][T17426] __nla_validate_parse: 10 callbacks suppressed [ 458.124440][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 458.197433][T17426] vlan8: entered allmulticast mode [ 458.203619][T17426] bridge12: entered allmulticast mode [ 458.211851][T17426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2687'. [ 458.301528][T17430] netlink: 163300 bytes leftover after parsing attributes in process `syz.1.2689'. [ 458.349818][T17426] bridge12: port 1(bond62) entered blocking state [ 458.368056][T17426] bridge12: port 1(bond62) entered disabled state [ 458.405825][T17426] bond62: entered allmulticast mode [ 458.450432][T17426] bond62: entered promiscuous mode [ 458.462452][T17451] netlink: 'syz.0.2692': attribute type 1 has an invalid length. [ 458.481844][T17452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.586574][T17450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.077168][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2694'. [ 459.266593][T17465] netlink: 'syz.0.2692': attribute type 1 has an invalid length. [ 459.282689][T17471] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 459.409800][T17471] SET target dimension over the limit! [ 459.588581][T17451] 8021q: adding VLAN 0 to HW filter on device bond75 [ 459.632209][T17468] vlan5: entered allmulticast mode [ 459.638138][T17468] bridge8: entered allmulticast mode [ 459.661862][T17465] bond75: (slave batadv4): Opening slave failed [ 459.717048][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 459.778840][T17475] bridge8: port 1(bond49) entered blocking state [ 459.794272][T17475] bridge8: port 1(bond49) entered disabled state [ 459.815470][T17475] bond49: entered allmulticast mode [ 459.835384][T17475] bond49: entered promiscuous mode [ 460.182410][T17506] netlink: 'syz.4.2704': attribute type 4 has an invalid length. [ 460.214066][T17506] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2704'. [ 460.239190][T17512] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2707'. [ 460.276923][T17512] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2707'. [ 460.296581][T17512] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2707'. [ 460.352305][T17514] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 460.387703][T17514] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 460.618648][T17523] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 460.648888][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2714'. [ 460.727334][T17526] vlan5: entered allmulticast mode [ 460.777795][T17526] bridge12: entered allmulticast mode [ 460.806331][T17534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.864528][T17531] bridge12: port 1(bond66) entered blocking state [ 460.874741][T17531] bridge12: port 1(bond66) entered disabled state [ 460.881578][T17531] bond66: entered allmulticast mode [ 460.895959][T17531] bond66: entered promiscuous mode [ 461.114179][T17544] netlink: 'syz.2.2716': attribute type 1 has an invalid length. [ 461.395205][T17550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.463648][T17538] lec:lec_atm_close: lec0: Shut down! [ 461.467044][T17551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.766999][T17567] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 461.815494][T17567] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 462.876034][T17607] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 462.906299][T17607] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 463.289245][T17627] __nla_validate_parse: 69 callbacks suppressed [ 463.289267][T17627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2740'. [ 463.319096][T17618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2738'. [ 463.485615][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 463.604672][T17647] FAULT_INJECTION: forcing a failure. [ 463.604672][T17647] name failslab, interval 1, probability 0, space 0, times 0 [ 463.645625][T17647] CPU: 0 UID: 0 PID: 17647 Comm: syz.2.2746 Not tainted syzkaller #0 PREEMPT(full) [ 463.645651][T17647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.645661][T17647] Call Trace: [ 463.645669][T17647] [ 463.645675][T17647] dump_stack_lvl+0xe8/0x150 [ 463.645702][T17647] should_fail_ex+0x412/0x560 [ 463.645730][T17647] should_failslab+0xa8/0x100 [ 463.645750][T17647] ? skb_clone+0x212/0x3a0 [ 463.645772][T17647] kmem_cache_alloc_noprof+0x87/0x650 [ 463.645789][T17647] ? __netlink_lookup+0xc6/0x8b0 [ 463.645814][T17647] skb_clone+0x212/0x3a0 [ 463.645840][T17647] __netlink_deliver_tap+0x404/0x850 [ 463.645868][T17647] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.645889][T17647] netlink_deliver_tap+0x19c/0x1b0 [ 463.645920][T17647] netlink_unicast+0x7e3/0x9b0 [ 463.645945][T17647] ? __pfx_netlink_unicast+0x10/0x10 [ 463.645962][T17647] ? netlink_sendmsg+0x650/0xb40 [ 463.645976][T17647] ? skb_put+0x11b/0x210 [ 463.646000][T17647] netlink_sendmsg+0x813/0xb40 [ 463.646028][T17647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.646050][T17647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.646084][T17647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.646107][T17647] ____sys_sendmsg+0x972/0x9f0 [ 463.646145][T17647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.646175][T17647] ? import_iovec+0x73/0xa0 [ 463.646197][T17647] ___sys_sendmsg+0x2a5/0x360 [ 463.646232][T17647] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.646283][T17647] ? __fget_files+0x2a/0x420 [ 463.646299][T17647] ? __fget_files+0x3a0/0x420 [ 463.646323][T17647] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.646349][T17647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.646379][T17647] ? __pfx_ksys_write+0x10/0x10 [ 463.646408][T17647] do_syscall_64+0x14d/0xf80 [ 463.646431][T17647] ? trace_irq_disable+0x3b/0x150 [ 463.646446][T17647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.646464][T17647] ? clear_bhb_loop+0x40/0x90 [ 463.646485][T17647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.646501][T17647] RIP: 0033:0x7fcb3f79c819 [ 463.646518][T17647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.646532][T17647] RSP: 002b:00007fcb405c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.646552][T17647] RAX: ffffffffffffffda RBX: 00007fcb3fa15fa0 RCX: 00007fcb3f79c819 [ 463.646564][T17647] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 463.646575][T17647] RBP: 00007fcb405c3090 R08: 0000000000000000 R09: 0000000000000000 [ 463.646588][T17647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.646598][T17647] R13: 00007fcb3fa16038 R14: 00007fcb3fa15fa0 R15: 00007ffda9a6e838 [ 463.646625][T17647] [ 463.806062][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 463.939088][T17655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2747'. [ 463.956884][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 464.179459][T17663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2749'. [ 464.572225][T17676] netlink: 'syz.3.2755': attribute type 39 has an invalid length. [ 464.812419][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 464.928723][T17696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2761'. [ 464.995433][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'. [ 465.223114][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2767'. [ 465.406794][T17723] FAULT_INJECTION: forcing a failure. [ 465.406794][T17723] name failslab, interval 1, probability 0, space 0, times 0 [ 465.422042][T17723] CPU: 1 UID: 0 PID: 17723 Comm: syz.4.2770 Not tainted syzkaller #0 PREEMPT(full) [ 465.422073][T17723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.422083][T17723] Call Trace: [ 465.422090][T17723] [ 465.422097][T17723] dump_stack_lvl+0xe8/0x150 [ 465.422127][T17723] should_fail_ex+0x412/0x560 [ 465.422157][T17723] should_failslab+0xa8/0x100 [ 465.422181][T17723] __kmalloc_noprof+0xe8/0x760 [ 465.422201][T17723] ? ethnl_default_set_doit+0x16a/0xad0 [ 465.422229][T17723] ethnl_default_set_doit+0x16a/0xad0 [ 465.422250][T17723] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 465.422273][T17723] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 465.422305][T17723] genl_family_rcv_msg_doit+0x22a/0x330 [ 465.422329][T17723] ? __asan_memcpy+0x40/0x70 [ 465.422349][T17723] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 465.422384][T17723] ? bpf_lsm_capable+0x9/0x20 [ 465.422407][T17723] ? security_capable+0x7e/0x2c0 [ 465.422438][T17723] genl_rcv_msg+0x61c/0x7a0 [ 465.422467][T17723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.422489][T17723] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 465.422512][T17723] ? __lock_acquire+0x6b5/0x2cf0 [ 465.422545][T17723] netlink_rcv_skb+0x232/0x4b0 [ 465.422564][T17723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.422589][T17723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.422621][T17723] ? down_read+0x272/0x2e0 [ 465.422642][T17723] ? genl_rcv+0xd/0x40 [ 465.422663][T17723] genl_rcv+0x28/0x40 [ 465.422681][T17723] netlink_unicast+0x80f/0x9b0 [ 465.422703][T17723] ? __pfx_netlink_unicast+0x10/0x10 [ 465.422721][T17723] ? netlink_sendmsg+0x650/0xb40 [ 465.422738][T17723] ? skb_put+0x11b/0x210 [ 465.422761][T17723] netlink_sendmsg+0x813/0xb40 [ 465.422787][T17723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.422805][T17723] ? aa_sock_msg_perm+0xf1/0x1b0 [ 465.422824][T17723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.422838][T17723] ____sys_sendmsg+0x972/0x9f0 [ 465.422856][T17723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.422874][T17723] ? import_iovec+0x73/0xa0 [ 465.422888][T17723] ___sys_sendmsg+0x2a5/0x360 [ 465.422904][T17723] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.422934][T17723] ? __fget_files+0x2a/0x420 [ 465.422943][T17723] ? __fget_files+0x3a0/0x420 [ 465.422957][T17723] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.422975][T17723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.422992][T17723] ? __pfx_ksys_write+0x10/0x10 [ 465.423010][T17723] do_syscall_64+0x14d/0xf80 [ 465.423022][T17723] ? trace_irq_disable+0x3b/0x150 [ 465.423031][T17723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.423040][T17723] ? clear_bhb_loop+0x40/0x90 [ 465.423076][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.423087][T17723] RIP: 0033:0x7f2bad79c819 [ 465.423098][T17723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.423109][T17723] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.423120][T17723] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 465.423127][T17723] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 465.423133][T17723] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 465.423139][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.423145][T17723] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 465.423161][T17723] [ 465.425027][T17717] bond76 (unregistering): Released all slaves [ 465.820320][T17726] vlan6: entered allmulticast mode [ 465.840123][T17726] bridge10: entered allmulticast mode [ 465.942317][T17728] bridge10: port 1(bond50) entered blocking state [ 465.959199][T17728] bridge10: port 1(bond50) entered disabled state [ 465.966997][T17728] bond50: entered allmulticast mode [ 465.977717][T17728] bond50: entered promiscuous mode [ 466.043388][T17732] netlink: Unknown conntrack attr (type=2304, max=9) [ 466.456501][T17753] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 466.533616][T17753] 8021q: adding VLAN 0 to HW filter on device bond51 [ 466.576032][T17756] netlink: 'syz.2.2781': attribute type 39 has an invalid length. [ 466.608067][T17762] bond51: (slave veth27): Enslaving as an active interface with a down link [ 466.703742][T17753] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 466.729594][T17771] netlink: 'syz.2.2784': attribute type 1 has an invalid length. [ 466.733247][T17753] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 466.744963][T17753] bond51: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 466.750005][T17771] nbd: error processing sock list [ 466.865569][T17773] vlan10: entered allmulticast mode [ 466.874261][T17773] bridge12: entered allmulticast mode [ 466.897184][T17773] bridge12: port 1(bond67) entered blocking state [ 466.905098][T17773] bridge12: port 1(bond67) entered disabled state [ 466.912459][T17773] bond67: entered allmulticast mode [ 466.920357][T17773] bond67: entered promiscuous mode [ 467.206761][T17784] IPVS: Scheduler module ip_vs_sip not found [ 467.250758][T17782] bond0: Unable to set up delay as MII monitoring is disabled [ 467.553233][T17798] openvswitch: netlink: Missing key (keys=40, expected=80) [ 467.608847][T17799] netlink: 'syz.3.2794': attribute type 3 has an invalid length. [ 467.635947][T17802] netlink: 'syz.1.2796': attribute type 1 has an invalid length. [ 467.755373][T17805] vlan11: entered allmulticast mode [ 467.770849][T17805] bridge13: entered allmulticast mode [ 467.870041][T17802] 8021q: adding VLAN 0 to HW filter on device bond67 [ 467.945796][T17802] netlink: 'syz.1.2796': attribute type 1 has an invalid length. [ 467.986184][T17810] bond67: (slave veth25): Enslaving as an active interface with a down link [ 468.064605][T17816] bridge13: port 1(bond68) entered blocking state [ 468.099446][T17816] bridge13: port 1(bond68) entered disabled state [ 468.107820][T17816] bond68: entered allmulticast mode [ 468.117435][T17816] bond68: entered promiscuous mode [ 468.137983][T17802] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 468.157956][T17802] bond67: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 468.305999][T17837] __nla_validate_parse: 16 callbacks suppressed [ 468.306021][T17837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2803'. [ 468.385609][T17838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2804'. [ 468.402698][T17837] openvswitch: netlink: Flow actions attr not present in new flow. [ 468.403225][T17838] openvswitch: netlink: Flow actions attr not present in new flow. [ 468.690538][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 468.741684][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2803'. [ 468.790519][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'. [ 468.940204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 468.948686][ C1] lec:lec_tx_timeout: lec0 [ 468.953298][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 469.134027][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'. [ 469.518117][T17864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2808'. [ 469.649547][T17869] netlink: 'syz.4.2809': attribute type 1 has an invalid length. [ 469.683849][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 469.712081][T17869] 8021q: adding VLAN 0 to HW filter on device bond52 [ 469.744338][T17871] openvswitch: netlink: Missing key (keys=40, expected=80) [ 469.789428][T17869] bond52: (slave veth29): Enslaving as an active interface with a down link [ 469.817836][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 470.010493][T17869] netlink: 'syz.4.2809': attribute type 1 has an invalid length. [ 470.020959][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 470.064984][T17869] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 470.102445][T17869] bond52: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 470.141881][T17893] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 470.163038][T17885] bond0: Unable to set up delay as MII monitoring is disabled [ 470.271148][T17893] 8021q: adding VLAN 0 to HW filter on device bond76 [ 470.315682][T17889] bond76: (slave veth41): Enslaving as an active interface with a down link [ 470.364432][T17889] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 470.380844][T17889] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 470.388136][T17889] bond76: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 470.518552][T17907] hsr_slave_0: left promiscuous mode [ 470.528509][T17907] hsr_slave_1: left promiscuous mode [ 470.567922][T17909] tipc: Started in network mode [ 470.574020][T17909] tipc: Node identity , cluster identity 4711 [ 470.582029][T17909] tipc: Failed to obtain node identity [ 470.587815][T17909] tipc: Enabling of bearer rejected, failed to enable media [ 470.794087][T17917] IPVS: Scheduler module ip_vs_sip not found [ 470.904093][T17925] IPVS: Scheduler module ip_vs_sip not found [ 470.947184][T17928] netlink: 'syz.2.2827': attribute type 4 has an invalid length. [ 470.988465][T17928] netlink: 'syz.2.2827': attribute type 4 has an invalid length. [ 471.342710][T17948] vlan6: entered allmulticast mode [ 471.348142][T17948] bridge13: entered allmulticast mode [ 471.414346][T17948] bridge13: port 1(bond68) entered blocking state [ 471.421854][T17948] bridge13: port 1(bond68) entered disabled state [ 471.428776][T17948] bond68: entered allmulticast mode [ 471.437109][T17948] bond68: entered promiscuous mode [ 471.472612][T17957] FAULT_INJECTION: forcing a failure. [ 471.472612][T17957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.488367][T17957] CPU: 1 UID: 0 PID: 17957 Comm: syz.2.2838 Not tainted syzkaller #0 PREEMPT(full) [ 471.488392][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 471.488401][T17957] Call Trace: [ 471.488407][T17957] [ 471.488414][T17957] dump_stack_lvl+0xe8/0x150 [ 471.488444][T17957] should_fail_ex+0x412/0x560 [ 471.488485][T17957] _copy_from_user+0x2d/0xb0 [ 471.488506][T17957] __sys_sendto+0x2b0/0x710 [ 471.488531][T17957] ? __pfx___sys_sendto+0x10/0x10 [ 471.488572][T17957] ? exc_page_fault+0x6a/0xc0 [ 471.488597][T17957] ? do_user_addr_fault+0xc6f/0x1340 [ 471.488623][T17957] __x64_sys_sendto+0xde/0x100 [ 471.488646][T17957] do_syscall_64+0x14d/0xf80 [ 471.488667][T17957] ? trace_irq_disable+0x3b/0x150 [ 471.488680][T17957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.488697][T17957] ? clear_bhb_loop+0x40/0x90 [ 471.488717][T17957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.488733][T17957] RIP: 0033:0x7fcb3f75d04e [ 471.488748][T17957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 471.488762][T17957] RSP: 002b:00007fcb405c1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 471.488781][T17957] RAX: ffffffffffffffda RBX: 00007fcb405c36c0 RCX: 00007fcb3f75d04e [ 471.488793][T17957] RDX: 0000000000000020 RSI: 00007fcb405c2000 RDI: 0000000000000003 [ 471.488804][T17957] RBP: 0000000000000000 R08: 00007fcb405c1f04 R09: 000000000000000c [ 471.488815][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 471.488825][T17957] R13: 00007fcb405c1f58 R14: 00007fcb405c2000 R15: 0000000000000000 [ 471.488850][T17957] [ 471.830939][T17964] vlan7: entered allmulticast mode [ 471.838217][T17964] bridge11: entered allmulticast mode [ 471.838917][T17965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.984584][T17964] bridge11: port 1(bond53) entered blocking state [ 472.005935][T17964] bridge11: port 1(bond53) entered disabled state [ 472.046991][T17972] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 472.060672][T17964] bond53: entered allmulticast mode [ 472.078644][T17964] bond53: entered promiscuous mode [ 472.204099][T17979] FAULT_INJECTION: forcing a failure. [ 472.204099][T17979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.225605][T17979] CPU: 1 UID: 0 PID: 17979 Comm: syz.4.2844 Not tainted syzkaller #0 PREEMPT(full) [ 472.225630][T17979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 472.225646][T17979] Call Trace: [ 472.225653][T17979] [ 472.225661][T17979] dump_stack_lvl+0xe8/0x150 [ 472.225691][T17979] should_fail_ex+0x412/0x560 [ 472.225730][T17979] _copy_from_user+0x2d/0xb0 [ 472.225751][T17979] ___sys_sendmsg+0x1c6/0x360 [ 472.225779][T17979] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.225831][T17979] ? __fget_files+0x2a/0x420 [ 472.225845][T17979] ? __fget_files+0x3a0/0x420 [ 472.225875][T17979] __x64_sys_sendmsg+0x1bd/0x2a0 [ 472.225900][T17979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.225931][T17979] ? __pfx_ksys_write+0x10/0x10 [ 472.225960][T17979] do_syscall_64+0x14d/0xf80 [ 472.225982][T17979] ? trace_irq_disable+0x3b/0x150 [ 472.225998][T17979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.226018][T17979] ? clear_bhb_loop+0x40/0x90 [ 472.226039][T17979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.226056][T17979] RIP: 0033:0x7f2bad79c819 [ 472.226073][T17979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.226087][T17979] RSP: 002b:00007f2bae6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.226106][T17979] RAX: ffffffffffffffda RBX: 00007f2bada15fa0 RCX: 00007f2bad79c819 [ 472.226119][T17979] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 472.226130][T17979] RBP: 00007f2bae6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 472.226142][T17979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.226152][T17979] R13: 00007f2bada16038 R14: 00007f2bada15fa0 R15: 00007fffb225ea68 [ 472.226179][T17979] [ 472.409533][T17981] openvswitch: netlink: Flow key attr not present in new flow. [ 472.575602][T17981] pim6reg1: entered allmulticast mode [ 472.896045][T17994] vlan7: entered allmulticast mode [ 472.905453][T17994] bridge14: entered allmulticast mode [ 472.912606][T17999] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 472.936755][T17994] bridge14: port 1(bond69) entered blocking state [ 472.943532][T17994] bridge14: port 1(bond69) entered disabled state [ 472.950939][T17994] bond69: entered allmulticast mode [ 472.957707][T17994] bond69: entered promiscuous mode [ 472.990580][T17992] nbd0: detected capacity change from 0 to 63 [ 473.007622][T18003] netlink: 'syz.1.2852': attribute type 6 has an invalid length. [ 473.013827][ T5836] block nbd0: Receive control failed (result -104) [ 473.023270][ T5844] block nbd0: Receive control failed (result -32) [ 473.174442][T18009] vlan8: entered allmulticast mode [ 473.179768][T18009] bridge12: entered allmulticast mode [ 473.223471][T18009] bridge12: port 1(bond54) entered blocking state [ 473.231712][T18009] bridge12: port 1(bond54) entered disabled state [ 473.238537][T18009] bond54: entered allmulticast mode [ 473.248742][T18009] bond54: entered promiscuous mode [ 473.313816][T18020] __nla_validate_parse: 16 callbacks suppressed [ 473.313835][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 473.333045][T18020] openvswitch: netlink: Missing key (keys=40, expected=80) [ 473.399070][T18023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.402571][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 473.960636][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 473.968664][ C1] lec:lec_tx_timeout: lec0 [ 473.973321][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 474.443925][T18046] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 474.499447][T18046] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 474.812900][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 475.339539][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'. [ 475.362485][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 475.381456][T18084] openvswitch: netlink: Missing key (keys=40, expected=80) [ 475.461078][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 475.645757][T18095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.728475][T18100] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2873'. [ 476.030698][T18110] tipc: Enabled bearer , priority 0 [ 476.174444][T18110] syzkaller0: entered promiscuous mode [ 476.181677][T18110] syzkaller0: entered allmulticast mode [ 476.188369][T18110] tipc: Resetting bearer [ 476.208993][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 476.239032][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 476.274420][T18108] tipc: Resetting bearer [ 476.332183][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2884'. [ 477.708477][T18108] tipc: Disabling bearer [ 477.977724][T18148] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 478.181367][T18157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.294060][T18165] netlink: 'syz.1.2895': attribute type 1 has an invalid length. [ 478.399379][T18170] [ 478.401798][T18170] ====================================================== [ 478.408825][T18170] WARNING: possible circular locking dependency detected [ 478.415865][T18170] syzkaller #0 Not tainted [ 478.420384][T18170] ------------------------------------------------------ [ 478.427500][T18170] syz.2.2896/18170 is trying to acquire lock: [ 478.433585][T18170] ffff8880345fe540 (&mm->mmap_lock){++++}-{4:4}, at: gup_fast_fallback+0x20d/0x22e0 [ 478.443023][T18170] [ 478.443023][T18170] but task is already holding lock: [ 478.450473][T18170] ffff888051ca9d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 478.459809][T18170] [ 478.459809][T18170] which lock already depends on the new lock. [ 478.459809][T18170] [ 478.470479][T18170] [ 478.470479][T18170] the existing dependency chain (in reverse order) is: [ 478.479501][T18170] [ 478.479501][T18170] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 478.487258][T18170] lock_sock_nested+0x41/0x100 [ 478.492640][T18170] inet_shutdown+0x6a/0x390 [ 478.497678][T18170] nbd_mark_nsock_dead+0x2e9/0x560 [ 478.503483][T18170] recv_work+0x1c7f/0x1d90 [ 478.508506][T18170] process_scheduled_works+0xb6e/0x18c0 [ 478.514572][T18170] worker_thread+0xa53/0xfc0 [ 478.519688][T18170] kthread+0x388/0x470 [ 478.524357][T18170] ret_from_fork+0x51e/0xb90 [ 478.529459][T18170] ret_from_fork_asm+0x1a/0x30 [ 478.534758][T18170] [ 478.534758][T18170] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 478.542483][T18170] __mutex_lock+0x19f/0x1300 [ 478.547681][T18170] nbd_queue_rq+0x37b/0x1100 [ 478.552789][T18170] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 478.558866][T18170] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 478.565705][T18170] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 478.572290][T18170] blk_mq_run_hw_queue+0x348/0x4f0 [ 478.578090][T18170] blk_mq_dispatch_list+0xd16/0xe10 [ 478.583816][T18170] blk_mq_flush_plug_list+0x48d/0x570 [ 478.589768][T18170] __blk_flush_plug+0x3ed/0x4d0 [ 478.595241][T18170] __submit_bio+0x28d/0x580 [ 478.600317][T18170] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 478.606596][T18170] block_read_full_folio+0x599/0x830 [ 478.612424][T18170] filemap_read_folio+0x137/0x3b0 [ 478.618064][T18170] do_read_cache_folio+0x358/0x590 [ 478.623699][T18170] read_part_sector+0xb6/0x2b0 [ 478.628978][T18170] adfspart_check_ICS+0xa5/0xa40 [ 478.634874][T18170] bdev_disk_changed+0x7ba/0x1550 [ 478.640605][T18170] blkdev_get_whole+0x380/0x510 [ 478.645980][T18170] bdev_open+0x31e/0xd30 [ 478.650740][T18170] blkdev_open+0x470/0x610 [ 478.655769][T18170] do_dentry_open+0x785/0x14e0 [ 478.661057][T18170] vfs_open+0x3b/0x340 [ 478.665662][T18170] path_openat+0x2e08/0x3860 [ 478.670775][T18170] do_file_open+0x23e/0x4a0 [ 478.675889][T18170] do_sys_openat2+0x113/0x200 [ 478.681082][T18170] __x64_sys_openat+0x138/0x170 [ 478.686467][T18170] do_syscall_64+0x14d/0xf80 [ 478.691573][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.697978][T18170] [ 478.697978][T18170] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 478.705187][T18170] __mutex_lock+0x19f/0x1300 [ 478.710298][T18170] nbd_queue_rq+0xc6/0x1100 [ 478.715352][T18170] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 478.721511][T18170] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 478.728493][T18170] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 478.735002][T18170] blk_mq_run_hw_queue+0x348/0x4f0 [ 478.740645][T18170] blk_mq_dispatch_list+0xd16/0xe10 [ 478.746377][T18170] blk_mq_flush_plug_list+0x48d/0x570 [ 478.752363][T18170] __blk_flush_plug+0x3ed/0x4d0 [ 478.757736][T18170] __submit_bio+0x28d/0x580 [ 478.762770][T18170] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 478.768919][T18170] block_read_full_folio+0x599/0x830 [ 478.774733][T18170] filemap_read_folio+0x137/0x3b0 [ 478.780356][T18170] do_read_cache_folio+0x358/0x590 [ 478.785983][T18170] read_part_sector+0xb6/0x2b0 [ 478.791352][T18170] adfspart_check_ICS+0xa5/0xa40 [ 478.796893][T18170] bdev_disk_changed+0x7ba/0x1550 [ 478.802450][T18170] blkdev_get_whole+0x380/0x510 [ 478.807832][T18170] bdev_open+0x31e/0xd30 [ 478.812629][T18170] blkdev_open+0x470/0x610 [ 478.817580][T18170] do_dentry_open+0x785/0x14e0 [ 478.822860][T18170] vfs_open+0x3b/0x340 [ 478.827446][T18170] path_openat+0x2e08/0x3860 [ 478.832641][T18170] do_file_open+0x23e/0x4a0 [ 478.837669][T18170] do_sys_openat2+0x113/0x200 [ 478.842873][T18170] __x64_sys_openat+0x138/0x170 [ 478.848249][T18170] do_syscall_64+0x14d/0xf80 [ 478.853357][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.859768][T18170] [ 478.859768][T18170] -> #4 (set->srcu){.+.+}-{0:0}: [ 478.867068][T18170] __synchronize_srcu+0xca/0x300 [ 478.872547][T18170] elevator_switch+0x1e8/0x7a0 [ 478.877942][T18170] elevator_change+0x2cc/0x450 [ 478.883269][T18170] elevator_set_default+0x36c/0x430 [ 478.889085][T18170] blk_register_queue+0x366/0x430 [ 478.894633][T18170] __add_disk+0x677/0xd50 [ 478.899479][T18170] add_disk_fwnode+0xfb/0x480 [ 478.904671][T18170] nbd_dev_add+0x72c/0xb50 [ 478.909622][T18170] nbd_init+0x168/0x1f0 [ 478.914286][T18170] do_one_initcall+0x250/0x8d0 [ 478.919568][T18170] do_initcall_level+0x104/0x190 [ 478.925025][T18170] do_initcalls+0x59/0xa0 [ 478.929865][T18170] kernel_init_freeable+0x2a6/0x3e0 [ 478.935584][T18170] kernel_init+0x1d/0x1d0 [ 478.940420][T18170] ret_from_fork+0x51e/0xb90 [ 478.945527][T18170] ret_from_fork_asm+0x1a/0x30 [ 478.950803][T18170] [ 478.950803][T18170] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 478.958614][T18170] __mutex_lock+0x19f/0x1300 [ 478.963729][T18170] elevator_change+0x1b3/0x450 [ 478.969116][T18170] elevator_set_none+0xb5/0x140 [ 478.974487][T18170] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 478.980806][T18170] nbd_start_device+0x17f/0xb10 [ 478.986167][T18170] nbd_genl_connect+0x165b/0x1cf0 [ 478.991721][T18170] genl_family_rcv_msg_doit+0x22a/0x330 [ 478.997785][T18170] genl_rcv_msg+0x61c/0x7a0 [ 479.002800][T18170] netlink_rcv_skb+0x232/0x4b0 [ 479.008071][T18170] genl_rcv+0x28/0x40 [ 479.012566][T18170] netlink_unicast+0x80f/0x9b0 [ 479.017835][T18170] netlink_sendmsg+0x813/0xb40 [ 479.023106][T18170] ____sys_sendmsg+0x972/0x9f0 [ 479.028382][T18170] ___sys_sendmsg+0x2a5/0x360 [ 479.033571][T18170] __x64_sys_sendmsg+0x1bd/0x2a0 [ 479.039020][T18170] do_syscall_64+0x14d/0xf80 [ 479.044122][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.050526][T18170] [ 479.050526][T18170] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 479.059129][T18170] blk_alloc_queue+0x546/0x680 [ 479.064422][T18170] __blk_mq_alloc_disk+0x197/0x390 [ 479.070063][T18170] nbd_dev_add+0x499/0xb50 [ 479.075195][T18170] nbd_init+0x168/0x1f0 [ 479.079961][T18170] do_one_initcall+0x250/0x8d0 [ 479.085240][T18170] do_initcall_level+0x104/0x190 [ 479.090697][T18170] do_initcalls+0x59/0xa0 [ 479.095544][T18170] kernel_init_freeable+0x2a6/0x3e0 [ 479.101264][T18170] kernel_init+0x1d/0x1d0 [ 479.106102][T18170] ret_from_fork+0x51e/0xb90 [ 479.111218][T18170] ret_from_fork_asm+0x1a/0x30 [ 479.116498][T18170] [ 479.116498][T18170] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 479.123796][T18170] fs_reclaim_acquire+0x71/0x100 [ 479.129246][T18170] kmem_cache_alloc_noprof+0x40/0x650 [ 479.135212][T18170] mas_alloc_nodes+0x291/0x350 [ 479.140487][T18170] mas_preallocate+0x2d6/0x640 [ 479.145760][T18170] vma_link+0x123/0x470 [ 479.150431][T18170] insert_vm_struct+0x199/0x260 [ 479.155798][T18170] create_init_stack_vma+0x304/0x670 [ 479.161688][T18170] alloc_bprm+0x495/0x5c0 [ 479.166624][T18170] kernel_execve+0x87/0x930 [ 479.171809][T18170] try_to_run_init_process+0x13/0x60 [ 479.177612][T18170] kernel_init+0xad/0x1d0 [ 479.182453][T18170] ret_from_fork+0x51e/0xb90 [ 479.187569][T18170] ret_from_fork_asm+0x1a/0x30 [ 479.192897][T18170] [ 479.192897][T18170] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 479.200540][T18170] __lock_acquire+0x15a5/0x2cf0 [ 479.205940][T18170] lock_acquire+0xf0/0x2e0 [ 479.210875][T18170] gup_fast_fallback+0x226/0x22e0 [ 479.216712][T18170] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 479.222961][T18170] iov_iter_get_pages2+0x5e/0xa0 [ 479.228589][T18170] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 479.234818][T18170] tls_sw_sendmsg+0x9da/0x2360 [ 479.240089][T18170] __sys_sendto+0x4a3/0x710 [ 479.245103][T18170] __x64_sys_sendto+0xde/0x100 [ 479.250469][T18170] do_syscall_64+0x14d/0xf80 [ 479.255567][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.261965][T18170] [ 479.261965][T18170] other info that might help us debug this: [ 479.261965][T18170] [ 479.272182][T18170] Chain exists of: [ 479.272182][T18170] &mm->mmap_lock --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 479.272182][T18170] [ 479.285215][T18170] Possible unsafe locking scenario: [ 479.285215][T18170] [ 479.292645][T18170] CPU0 CPU1 [ 479.298000][T18170] ---- ---- [ 479.303353][T18170] lock(sk_lock-AF_INET6); [ 479.307847][T18170] lock(&nsock->tx_lock); [ 479.314780][T18170] lock(sk_lock-AF_INET6); [ 479.322078][T18170] rlock(&mm->mmap_lock); [ 479.326567][T18170] [ 479.326567][T18170] *** DEADLOCK *** [ 479.326567][T18170] [ 479.334722][T18170] 2 locks held by syz.2.2896/18170: [ 479.339901][T18170] #0: ffff88805a690cf0 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x12f/0x2360 [ 479.349386][T18170] #1: ffff888051ca9d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 479.359123][T18170] [ 479.359123][T18170] stack backtrace: [ 479.364999][T18170] CPU: 1 UID: 0 PID: 18170 Comm: syz.2.2896 Not tainted syzkaller #0 PREEMPT(full) [ 479.365018][T18170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 479.365027][T18170] Call Trace: [ 479.365035][T18170] [ 479.365043][T18170] dump_stack_lvl+0xe8/0x150 [ 479.365069][T18170] print_circular_bug+0x2e1/0x300 [ 479.365095][T18170] check_noncircular+0x12e/0x150 [ 479.365121][T18170] __lock_acquire+0x15a5/0x2cf0 [ 479.365148][T18170] lock_acquire+0xf0/0x2e0 [ 479.365166][T18170] ? gup_fast_fallback+0x20d/0x22e0 [ 479.365189][T18170] ? __page_table_check_zero+0x397/0x3e0 [ 479.365206][T18170] ? __page_table_check_zero+0x6a/0x3e0 [ 479.365224][T18170] ? gup_fast_fallback+0x20d/0x22e0 [ 479.365245][T18170] gup_fast_fallback+0x226/0x22e0 [ 479.365266][T18170] ? gup_fast_fallback+0x20d/0x22e0 [ 479.365289][T18170] ? get_page_from_freelist+0x24f5/0x2580 [ 479.365317][T18170] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.365338][T18170] ? __pfx_gup_fast_fallback+0x10/0x10 [ 479.365369][T18170] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 479.365392][T18170] ? is_valid_gup_args+0x11f/0x200 [ 479.365420][T18170] ? get_user_pages_fast+0x4d/0xb0 [ 479.365449][T18170] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 479.365475][T18170] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 479.365528][T18170] iov_iter_get_pages2+0x5e/0xa0 [ 479.365552][T18170] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 479.365577][T18170] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 479.365603][T18170] tls_sw_sendmsg+0x9da/0x2360 [ 479.365632][T18170] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 479.365647][T18170] ? __pfx_aa_sk_perm+0x10/0x10 [ 479.365669][T18170] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 479.365685][T18170] ? sock_rps_record_flow+0x19/0x350 [ 479.365703][T18170] ? inet_getname+0x377/0x3c0 [ 479.365719][T18170] ? __pfx_inet6_sendmsg+0x10/0x10 [ 479.365739][T18170] ? inet6_sendmsg+0x101/0x120 [ 479.365758][T18170] ? __pfx_inet6_sendmsg+0x10/0x10 [ 479.365777][T18170] __sys_sendto+0x4a3/0x710 [ 479.365796][T18170] ? __pfx___sys_sendto+0x10/0x10 [ 479.365813][T18170] ? do_futex+0x333/0x420 [ 479.365841][T18170] ? rcu_is_watching+0x15/0xb0 [ 479.365864][T18170] __x64_sys_sendto+0xde/0x100 [ 479.365884][T18170] do_syscall_64+0x14d/0xf80 [ 479.365903][T18170] ? trace_irq_disable+0x3b/0x150 [ 479.365916][T18170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.365931][T18170] ? clear_bhb_loop+0x40/0x90 [ 479.365947][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.365962][T18170] RIP: 0033:0x7fcb3f79c819 [ 479.365977][T18170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.365990][T18170] RSP: 002b:00007fcb405c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 479.366007][T18170] RAX: ffffffffffffffda RBX: 00007fcb3fa15fa0 RCX: 00007fcb3f79c819 [ 479.366019][T18170] RDX: fffffffffffffe94 RSI: 0000200000000300 RDI: 0000000000000003 [ 479.366029][T18170] RBP: 00007fcb3f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 479.366039][T18170] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000000 [ 479.366049][T18170] R13: 00007fcb3fa16038 R14: 00007fcb3fa15fa0 R15: 00007ffda9a6e838 [ 479.366065][T18170] [ 479.681418][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 479.689426][ C1] lec:lec_tx_timeout: lec0 [ 479.695092][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.838928][T18180] __nla_validate_parse: 3 callbacks suppressed [ 479.838944][T18180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2897'. [ 479.898134][T18170] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 484.800187][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 484.808304][ C1] lec:lec_tx_timeout: lec0 [ 484.813366][ C1] lec:lec_start_xmit: lec0:No lecd attached