last executing test programs: 10.5162768s ago: executing program 4 (id=2331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x2, 0x4, 0x6, 0xb, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x6, 0x8ac000, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x7800, 0x80, 0x651, 0x5}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008d00), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='_', 0x1}], 0x1}}], 0x2, 0x20040140) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="230629bd7000fddbdf257400000008000300", @ANYRES32=r4, @ANYBLOB="b37d127c01af0a11204f258ca9f5239bf3320f6419531f0e9a174edadebca9b344a81c58967b36034fcc236598f027d934c02908832becbc64a565bc7edd83c7d42865ceb3ccf581d6e19f88264061c62f7c14b5ff43427178180200000000000000bd5407915cf7fcc596ee1785d7588740bfed370965bf26fb4f11f5bc9c473acc9d921d5e990cc6860a1bb144"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10.291331756s ago: executing program 4 (id=2335): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x30, 0x0, 0x4, 0xfffff000}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x26c0}}, 0x4010) ioctl$FITHAW(r0, 0xc0045878) 10.113029135s ago: executing program 4 (id=2336): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0xa4, &(0x7f0000000640)={&(0x7f0000000000)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @device_a, @initial, {0x9, 0x9b}}, 0x1262, 0x1, {0x0, 0x6, @default_ap_ssid}, @val, @void}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044011}, 0x200088c4) 9.885807102s ago: executing program 4 (id=2339): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000180)="72d6c12d110f6f8c4a182fc09c24b6290c42ff704a35cfdca10868047fd66784d22935aad553137bb7d3b84a54011e662a660b2d93ddccf732a8038ee2ce41d8af737668280209126f843b436196cee4476ec5a8ffd50c2a19a5c145471cd59b31e138cb8aa8d05192cb5e997f8c8666253981796dba9be35ffd0942c9e39a99832cb60c5091", 0x86, 0x20000085, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_macvtap\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r5, 0x89fe, &(0x7f0000000000)) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0xd92b}, 0x3c) 9.054553582s ago: executing program 2 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x5, 0x8bf, 0x2, 0x0, 0x7, 0x0, [{0x5, 0x4, 0x8000000000000001, '\x00', 0x804}, {0x4, 0x5, 0x4211, '\x00', 0x1500}, {0x200, 0xa, 0x0, '\x00', 0x1104}, {0x3ff, 0x7, 0x3, '\x00', 0x2800}, {0x0, 0xfffffffffffffffc, 0x1000, '\x00', 0x1000}, {0x1, 0x6f, 0x8000000000000000, '\x00', 0x8}, {0xfff, 0xa8a, 0x0, '\x00', 0x2100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.894446601s ago: executing program 2 (id=2350): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 7.930338283s ago: executing program 2 (id=2361): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}]}, 0x3c}}, 0x20000800) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x6, 0x1}, 0x100, './file0\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000012c0)={0x2, &(0x7f0000000fc0)=[{}, {}]}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00118025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9bd700000000000000cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000000c0005000500000000000000"], 0x70}}, 0x0) 7.463425259s ago: executing program 2 (id=2363): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x1, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2cc, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\'{[[[!!${]*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xcc%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c48}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '}-\\}T+(]([-\\-($/{$!&\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "a3e577f878981792f4472a180430b3fca585302be9adcdce3791c24caa901df117f515e07780a59688d8c6f9c3a4d9584ad24a22202e333232d815a59c402a3479f3f64633909cdf309ae2d9c7ad09088626f7a4d91783de956a88e0a802c5eb74fb9c8cf885aad64fd66bee2b8581633449dc8314ccaa52340c2a83168b078ce15b92c1ed6785ad6e122bad92d7da597433083010089049afc54a93f4f23add184c0e6b91af2c385b225b4137920a2cc6810c9918e2a65be7f59dc5cd9eb18e187e0b6ca8c8aa253348a3c9de1ae6d6c71f2019a7f4eb6300bcddbcef"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "813f449bbd8f96fac5caf0f3240f60c328df568be2e3818ced8d5b0c59d2901a36a0f723698803"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xef=]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x559}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet(r2, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@getlink={0x4c, 0x12, 0x35216c00a4afb67, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x82, 0x80270}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_VFINFO_LIST={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) 5.043803453s ago: executing program 4 (id=2373): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (fail_nth: 6) 4.108526421s ago: executing program 4 (id=2376): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5f, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000140)=0xffff7e27, 0x4) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "9d0bc89d05100000"}}}}}}}, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x3d01, 0x10}, &(0x7f0000000240)=0xc) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x4) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x1, 0x4000080) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x3ff, @private1, 0x8}, 0x1c) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_ifindex, @broadcast}, 0x10) 3.570888689s ago: executing program 3 (id=2378): socketpair(0x29, 0x3, 0xa, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x800, 0x7607) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000400)=[{r6}], 0x1, &(0x7f00000006c0), 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020001030900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001480)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000280)=""/158, 0x9e}, 0x2}, {{&(0x7f0000000340), 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/32, 0x20}], 0x6, &(0x7f0000000740)=""/159, 0x9f}, 0x8000}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000880)=""/242, 0xf2}], 0x2, &(0x7f00000009c0)=""/190, 0xbe}, 0x4}, {{&(0x7f0000000a80)=@x25={0x9, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/252, 0xfc}, {&(0x7f0000000c00)=""/41, 0x29}, {&(0x7f0000000c40)=""/143, 0x8f}], 0x3, &(0x7f0000000d40)=""/169, 0xa9}, 0x9}, {{&(0x7f0000000e00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/209, 0xd1}], 0x1, &(0x7f0000001040)=""/90, 0x5a}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/101, 0x65}, {&(0x7f0000001140)=""/198, 0xc6}, {&(0x7f0000001700)=""/181, 0xb5}, {&(0x7f0000001300)=""/225, 0xe1}], 0x4, &(0x7f0000001440)=""/63, 0x3f}, 0x4}], 0x6, 0x10040, &(0x7f0000001640)={r7, r8+60000000}) 3.292240069s ago: executing program 3 (id=2381): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xe) sendmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000200)="83b7da51db842d1f5a", 0x9}, {&(0x7f0000000680)="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", 0x7ec}], 0x2}}], 0x1, 0x40) 2.535305122s ago: executing program 0 (id=2385): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000180)={0xa, 0x0, 0xff000000, @empty}, 0x1c, 0x0}}], 0x1, 0xff00) 2.517272806s ago: executing program 0 (id=2386): unshare(0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080)=0x64f, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x2, 0x88, 0x9c4}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={0x0}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/cgroup\x00') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x55d9b000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) 2.359709929s ago: executing program 0 (id=2388): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002840)={0x30, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x200000, 0x0, 0xff, 0x1, 0xf277}, 0x20) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x2000c851, 0x0, 0x0) 2.330458763s ago: executing program 3 (id=2389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (fail_nth: 9) 2.184891319s ago: executing program 0 (id=2391): socketpair(0x29, 0x3, 0xa, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x800, 0x7607) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000400)=[{r6}], 0x1, &(0x7f00000006c0), 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020001030900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001480)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000280)=""/158, 0x9e}, 0x2}, {{&(0x7f0000000340), 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/32, 0x20}], 0x6, &(0x7f0000000740)=""/159, 0x9f}, 0x8000}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000880)=""/242, 0xf2}], 0x2, &(0x7f00000009c0)=""/190, 0xbe}, 0x4}, {{&(0x7f0000000a80)=@x25={0x9, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/252, 0xfc}, {&(0x7f0000000c00)=""/41, 0x29}, {&(0x7f0000000c40)=""/143, 0x8f}], 0x3, &(0x7f0000000d40)=""/169, 0xa9}, 0x9}, {{&(0x7f0000000e00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/209, 0xd1}], 0x1, &(0x7f0000001040)=""/90, 0x5a}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/101, 0x65}, {&(0x7f0000001140)=""/198, 0xc6}, {&(0x7f0000001700)=""/181, 0xb5}, {&(0x7f0000001300)=""/225, 0xe1}], 0x4, &(0x7f0000001440)=""/63, 0x3f}, 0x4}], 0x6, 0x10040, &(0x7f0000001640)={r7, r8+60000000}) 1.981683076s ago: executing program 3 (id=2392): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac33225659"], 0x50}}], 0x1, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x1}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x0, 0x1}]}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7, 0x2, 0x101, 0x4, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xe}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000001a40)=[{&(0x7f0000000a40)="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", 0x1000}], 0x1) tee(r2, r4, 0x8f5, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9d66, 0x0, r1}, 0x50) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000c1409042cbd7000ffdbdf2508003d000400000008000100"], 0x28}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000006609010000000000060000000b000000180100002020722500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000200000056000000060000002c93000000000000b503000000f097008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000000)={r9, r7}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r10, 0x1) getsockopt$bt_hci(r10, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 1.83771102s ago: executing program 1 (id=2393): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x4, 0x2}, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000062940d58000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000000000095000000000000002d6a0100000000003f91000000000000b7020000ffffffff8500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.659914325s ago: executing program 0 (id=2394): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x41aa, 0x3b40, 0x0, 0x8, 0x90, 0x8}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/67, 0x43}], 0x1}, 0x40000000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x2, 0x0, 0x8, 0x0, 0xff, 0x8, 0x26e, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={r3, 0x10}, 0x8) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffff0000000000000000000000000000000000000000004e2107944e230020020000003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000feffffffffffffffff7f0000000000001f00000000000000fe0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x2, 0x6, 0xf7, 0x2104a, 0x1, 0x53, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xb}, 0x50) 1.623614781s ago: executing program 1 (id=2395): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2a000200010078", 0x7) 1.501383972s ago: executing program 1 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0xc040480) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) 1.375640902s ago: executing program 3 (id=2397): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a200fffffff5000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1.365994321s ago: executing program 2 (id=2398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x700bd23f6006e224}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x313f523a}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4050) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080000000000df250100000006000a004e21000006000a004e2000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in6=@dev}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x200, 0x70bd2a, 0x25dfdbfa, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5524}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a000000000000791048000000000061043c000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.317579464s ago: executing program 1 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0xffffffc3}, 0x0) 1.223541835s ago: executing program 3 (id=2400): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000200000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006d6f64b40000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x60}}, 0x200400c4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x48000) ioctl$SIOCSIFHWADDR(r3, 0x8922, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.223299238s ago: executing program 2 (id=2401): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x0, 0x8, 0x2008, r1, 0x5, '\x00', 0x0, r2, 0x2, 0x200004, 0x1, 0x1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000171401"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x0, 0x8, 0x2008, r1, 0x5, '\x00', 0x0, r2, 0x2, 0x200004, 0x1, 0x1}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) (async) shutdown(r5, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000171401"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) 1.12272039s ago: executing program 1 (id=2402): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d3f2007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 738.566355ms ago: executing program 0 (id=2403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a01080000000000000000020000000900010073797a30000000ed0c000240000000000000000104000480080007006e617400140000001100010000000000000000000000000a"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000380)={&(0x7f0000000280)=[{0x3, 0x0, 0x0, {0x11af, 0x4d2a46d9, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x4, 0xffb, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0xfffffffd}}, {0x9276, 0x0, 0x0, {0x1, 0xffff0001}}, {0x1df7, 0x0, 0x0, {0x2, 0x3ff}}, {0x7fff, 0x2, 0x0, {0x5, 0x1, 0x2}}, {0x6, 0x1, 0x0, {0x0, 0x400, 0x2}}], 0x7, 0x20, 0x1, 0x64}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0xcb, 0x4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) socket(0x23, 0x80000, 0x5ca5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2d, 0x2, 0x0) 0s ago: executing program 1 (id=2404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x93c4236b2e598d63, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES8=r3, @ANYRESHEX=r2], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800640000009e4966409e00"/21], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffa3, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {}, {0xfff2, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @remote}) close(0x4) kernel console output (not intermixed with test programs): [ 318.365427][T11607] ? __nla_parse+0x40/0x60 [ 318.365455][T11607] tcf_action_init+0x30e/0xb10 [ 318.365498][T11607] ? __pfx_tcf_action_init+0x10/0x10 [ 318.365560][T11607] ? __pfx___nla_validate_parse+0x10/0x10 [ 318.365586][T11607] ? rcu_is_watching+0x15/0xb0 [ 318.365647][T11607] tc_ctl_action+0x43b/0xc70 [ 318.365691][T11607] ? __pfx_tc_ctl_action+0x10/0x10 [ 318.365731][T11607] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.365802][T11607] ? __pfx_tc_ctl_action+0x10/0x10 [ 318.365834][T11607] rtnetlink_rcv_msg+0x7b9/0xc00 [ 318.365866][T11607] ? kasan_save_track+0x3e/0x80 [ 318.365899][T11607] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 318.365932][T11607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.365968][T11607] ? __lock_acquire+0x683/0x2cd0 [ 318.366006][T11607] netlink_rcv_skb+0x226/0x4a0 [ 318.366032][T11607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.366067][T11607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.366106][T11607] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.366129][T11607] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.366159][T11607] netlink_unicast+0x7bb/0x940 [ 318.366214][T11607] netlink_sendmsg+0x813/0xb40 [ 318.366250][T11607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.366279][T11607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.366313][T11607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.366342][T11607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.366368][T11607] ____sys_sendmsg+0x9b9/0xa20 [ 318.366401][T11607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.366434][T11607] ? import_iovec+0x73/0xa0 [ 318.366463][T11607] ___sys_sendmsg+0x2a5/0x360 [ 318.366485][T11607] ? __lock_acquire+0x683/0x2cd0 [ 318.366512][T11607] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.366577][T11607] ? __fget_files+0x2a/0x420 [ 318.366603][T11607] ? __fget_files+0x3a2/0x420 [ 318.366641][T11607] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.366668][T11607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.366703][T11607] ? __pfx_ksys_write+0x10/0x10 [ 318.366744][T11607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.366769][T11607] do_syscall_64+0x174/0x580 [ 318.366793][T11607] ? trace_irq_disable+0x3b/0x140 [ 318.366826][T11607] ? clear_bhb_loop+0x40/0x90 [ 318.366853][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.366876][T11607] RIP: 0033:0x7f919599ce59 [ 318.366896][T11607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.366914][T11607] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.366937][T11607] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 318.366953][T11607] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 318.366966][T11607] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 318.366979][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.366991][T11607] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 318.367027][T11607] [ 318.905240][T11613] block nbd3: not configured, cannot reconfigure [ 319.081934][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1761'. [ 319.083627][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 319.104520][T11624] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 319.112125][T11622] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1759'. [ 319.344347][T11635] syzkaller1: entered promiscuous mode [ 319.350605][T11635] syzkaller1: entered allmulticast mode [ 319.987629][T11660] FAULT_INJECTION: forcing a failure. [ 319.987629][T11660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.012945][T11660] CPU: 1 UID: 0 PID: 11660 Comm: syz.3.1773 Not tainted syzkaller #0 PREEMPT(full) [ 320.012975][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.012988][T11660] Call Trace: [ 320.012997][T11660] [ 320.013006][T11660] dump_stack_lvl+0xe8/0x150 [ 320.013036][T11660] should_fail_ex+0x40c/0x560 [ 320.013076][T11660] _copy_to_user+0x31/0xb0 [ 320.013104][T11660] simple_read_from_buffer+0xe1/0x170 [ 320.013137][T11660] proc_fail_nth_read+0x1bb/0x230 [ 320.013170][T11660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.013211][T11660] ? rw_verify_area+0x24a/0x4c0 [ 320.013244][T11660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.013271][T11660] vfs_read+0x213/0xa80 [ 320.013308][T11660] ? __pfx___mutex_lock+0x10/0x10 [ 320.013335][T11660] ? __pfx_vfs_read+0x10/0x10 [ 320.013367][T11660] ? __fget_files+0x2a/0x420 [ 320.013400][T11660] ? __fget_files+0x3a2/0x420 [ 320.013424][T11660] ? __fget_files+0x2a/0x420 [ 320.013461][T11660] ksys_read+0x150/0x270 [ 320.013495][T11660] ? __pfx_ksys_read+0x10/0x10 [ 320.013537][T11660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.013561][T11660] do_syscall_64+0x174/0x580 [ 320.013585][T11660] ? trace_irq_disable+0x3b/0x140 [ 320.013617][T11660] ? clear_bhb_loop+0x40/0x90 [ 320.013645][T11660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.013666][T11660] RIP: 0033:0x7f919595d68e [ 320.013687][T11660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.013707][T11660] RSP: 002b:00007f919680bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.013730][T11660] RAX: ffffffffffffffda RBX: 00007f919680c6c0 RCX: 00007f919595d68e [ 320.013746][T11660] RDX: 000000000000000f RSI: 00007f919680c0a0 RDI: 0000000000000004 [ 320.013759][T11660] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 320.013772][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.013784][T11660] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 320.013819][T11660] [ 320.348407][T11668] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 320.583266][T11678] sctp: [Deprecated]: syz.2.1780 (pid 11678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.583266][T11678] Use struct sctp_sack_info instead [ 320.625904][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 320.737384][T11681] macvlan0: entered promiscuous mode [ 320.745172][T11681] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 320.984268][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 321.056273][T11691] bond3: (slave .`): Releasing backup interface [ 321.088954][T11691] bridge_slave_0: left allmulticast mode [ 321.110194][T11691] bridge_slave_0: left promiscuous mode [ 321.118532][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.132545][T11691] bridge_slave_1: left allmulticast mode [ 321.138553][T11691] bridge_slave_1: left promiscuous mode [ 321.145670][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.158319][T11691] .`: (slave bond_slave_0): Releasing backup interface [ 321.172415][T11691] .`: (slave bond_slave_1): Releasing backup interface [ 321.184185][T11691] team0: Port device team_slave_0 removed [ 321.193286][T11691] team0: Port device team_slave_1 removed [ 321.199607][T11691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.208272][T11691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.227470][T11691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.559820][T11709] __nla_validate_parse: 1 callbacks suppressed [ 321.559840][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1791'. [ 321.721082][T11715] FAULT_INJECTION: forcing a failure. [ 321.721082][T11715] name failslab, interval 1, probability 0, space 0, times 0 [ 321.737050][T11715] CPU: 0 UID: 0 PID: 11715 Comm: syz.3.1793 Not tainted syzkaller #0 PREEMPT(full) [ 321.737092][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.737106][T11715] Call Trace: [ 321.737115][T11715] [ 321.737124][T11715] dump_stack_lvl+0xe8/0x150 [ 321.737155][T11715] should_fail_ex+0x40c/0x560 [ 321.737197][T11715] should_failslab+0xa8/0x100 [ 321.737235][T11715] __kmalloc_cache_node_noprof+0x8c/0x690 [ 321.737269][T11715] ? page_pool_create_percpu+0x73/0xc70 [ 321.737298][T11715] ? __kvmalloc_node_noprof+0x53d/0x890 [ 321.737336][T11715] page_pool_create_percpu+0x73/0xc70 [ 321.737364][T11715] ? page_pool_create+0xd/0x20 [ 321.737395][T11715] bpf_test_run_xdp_live+0x23a/0x1c20 [ 321.737425][T11715] ? bpf_dispatcher_change_prog+0xc4a/0xf20 [ 321.737455][T11715] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 321.737490][T11715] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.737521][T11715] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 321.737570][T11715] ? 0xffffffffa0205110 [ 321.737621][T11715] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 321.737660][T11715] ? _copy_from_user+0x94/0xb0 [ 321.737685][T11715] ? bpf_test_init+0x113/0x150 [ 321.737706][T11715] ? xdp_convert_md_to_buff+0x5b/0x330 [ 321.737734][T11715] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 321.737777][T11715] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 321.737807][T11715] ? __fget_files+0x2a/0x420 [ 321.737840][T11715] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 321.737870][T11715] bpf_prog_test_run+0x2c5/0x340 [ 321.737896][T11715] __sys_bpf+0x643/0x950 [ 321.737931][T11715] ? __pfx___sys_bpf+0x10/0x10 [ 321.737981][T11715] ? ksys_write+0x242/0x270 [ 321.738016][T11715] ? __pfx_ksys_write+0x10/0x10 [ 321.738053][T11715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.738085][T11715] __x64_sys_bpf+0x7c/0x90 [ 321.738117][T11715] do_syscall_64+0x174/0x580 [ 321.738141][T11715] ? trace_irq_disable+0x3b/0x140 [ 321.738173][T11715] ? clear_bhb_loop+0x40/0x90 [ 321.738201][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.738222][T11715] RIP: 0033:0x7f919599ce59 [ 321.738241][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.738260][T11715] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 321.738282][T11715] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 321.738297][T11715] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 321.738351][T11715] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 321.738365][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.738377][T11715] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 321.738425][T11715] [ 322.141216][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 322.183829][T11719] tap0: tun_chr_ioctl cmd 1074025672 [ 322.194971][T11719] tap0: ignored: set checksum disabled [ 322.203796][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 322.682335][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 322.695370][T11755] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1806'. [ 322.990828][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 325.483498][T11738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.711413][T11787] openvswitch: netlink: Missing key (keys=40, expected=80) [ 326.069792][T11803] syzkaller1: entered promiscuous mode [ 326.084381][T11803] syzkaller1: entered allmulticast mode [ 326.116524][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 326.158888][T11814] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1822'. [ 326.349090][T11825] FAULT_INJECTION: forcing a failure. [ 326.349090][T11825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.367123][T11825] CPU: 0 UID: 0 PID: 11825 Comm: syz.1.1827 Not tainted syzkaller #0 PREEMPT(full) [ 326.367151][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.367164][T11825] Call Trace: [ 326.367172][T11825] [ 326.367181][T11825] dump_stack_lvl+0xe8/0x150 [ 326.367211][T11825] should_fail_ex+0x40c/0x560 [ 326.367253][T11825] _copy_to_user+0x31/0xb0 [ 326.367281][T11825] simple_read_from_buffer+0xe1/0x170 [ 326.367314][T11825] proc_fail_nth_read+0x1bb/0x230 [ 326.367346][T11825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.367379][T11825] ? rw_verify_area+0x24a/0x4c0 [ 326.367411][T11825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.367439][T11825] vfs_read+0x213/0xa80 [ 326.367476][T11825] ? __pfx___mutex_lock+0x10/0x10 [ 326.367504][T11825] ? __pfx_vfs_read+0x10/0x10 [ 326.367547][T11825] ? __fget_files+0x2a/0x420 [ 326.367579][T11825] ? __fget_files+0x3a2/0x420 [ 326.367615][T11825] ? __fget_files+0x2a/0x420 [ 326.367650][T11825] ksys_read+0x150/0x270 [ 326.367701][T11825] ? __pfx_ksys_read+0x10/0x10 [ 326.367741][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.367765][T11825] do_syscall_64+0x174/0x580 [ 326.367789][T11825] ? trace_irq_disable+0x3b/0x140 [ 326.367820][T11825] ? clear_bhb_loop+0x40/0x90 [ 326.367848][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.367869][T11825] RIP: 0033:0x7f25f075d68e [ 326.367890][T11825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.367910][T11825] RSP: 002b:00007f25ee9edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.367933][T11825] RAX: ffffffffffffffda RBX: 00007f25ee9ee6c0 RCX: 00007f25f075d68e [ 326.367948][T11825] RDX: 000000000000000f RSI: 00007f25ee9ee0a0 RDI: 0000000000000004 [ 326.367962][T11825] RBP: 00007f25ee9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 326.367975][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.367987][T11825] R13: 00007f25f0a16038 R14: 00007f25f0a15fa0 R15: 00007ffcf8246e58 [ 326.368022][T11825] [ 326.638380][T11824] syzkaller0: entered promiscuous mode [ 326.644205][T11824] syzkaller0: entered allmulticast mode [ 326.666959][T11824] tipc: Started in network mode [ 326.675020][T11824] tipc: Node identity de5abc812244, cluster identity 4711 [ 326.692274][T11824] tipc: Enabled bearer , priority 0 [ 326.715552][T11822] tipc: Resetting bearer [ 326.740652][T11822] tipc: Disabling bearer [ 327.388001][T11852] mac80211_hwsim hwsim10 syzkaller1: entered promiscuous mode [ 327.410750][T11852] mac80211_hwsim hwsim10 syzkaller1: entered allmulticast mode [ 327.473160][T11858] syzkaller0: entered promiscuous mode [ 327.493250][T11858] syzkaller0: entered allmulticast mode [ 327.601078][T11858] FAULT_INJECTION: forcing a failure. [ 327.601078][T11858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.680117][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.4.1838 Not tainted syzkaller #0 PREEMPT(full) [ 327.680150][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.680163][T11858] Call Trace: [ 327.680172][T11858] [ 327.680182][T11858] dump_stack_lvl+0xe8/0x150 [ 327.680213][T11858] should_fail_ex+0x40c/0x560 [ 327.680252][T11858] _copy_from_iter+0x1d3/0x1660 [ 327.680277][T11858] ? rcu_is_watching+0x15/0xb0 [ 327.680307][T11858] ? __pfx__copy_from_iter+0x10/0x10 [ 327.680325][T11858] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 327.680361][T11858] ? netlink_sendmsg+0x650/0xb40 [ 327.680383][T11858] ? skb_put+0x112/0x210 [ 327.680424][T11858] netlink_sendmsg+0x6c0/0xb40 [ 327.680456][T11858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.680481][T11858] ? aa_sock_msg_perm+0xf1/0x1b0 [ 327.680512][T11858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.680538][T11858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.680561][T11858] ____sys_sendmsg+0x9b9/0xa20 [ 327.680581][T11858] ? __might_fault+0xaf/0x130 [ 327.680611][T11858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.680640][T11858] ? import_iovec+0x73/0xa0 [ 327.680666][T11858] ___sys_sendmsg+0x2a5/0x360 [ 327.680686][T11858] ? __lock_acquire+0x683/0x2cd0 [ 327.680711][T11858] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.680763][T11858] ? __fget_files+0x2a/0x420 [ 327.680787][T11858] ? __fget_files+0x3a2/0x420 [ 327.680820][T11858] __x64_sys_sendmsg+0x1bd/0x2a0 [ 327.680844][T11858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.680874][T11858] ? __pfx_ksys_write+0x10/0x10 [ 327.680913][T11858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.680935][T11858] do_syscall_64+0x174/0x580 [ 327.680957][T11858] ? trace_irq_disable+0x3b/0x140 [ 327.680987][T11858] ? clear_bhb_loop+0x40/0x90 [ 327.681011][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.681031][T11858] RIP: 0033:0x7f88a939ce59 [ 327.681049][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.681066][T11858] RSP: 002b:00007f88aa1bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.681091][T11858] RAX: ffffffffffffffda RBX: 00007f88a9615fa0 RCX: 00007f88a939ce59 [ 327.681106][T11858] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 327.681119][T11858] RBP: 00007f88aa1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 327.681130][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.681142][T11858] R13: 00007f88a9616038 R14: 00007f88a9615fa0 R15: 00007ffc220b4678 [ 327.681172][T11858] [ 328.233762][T11877] sctp: [Deprecated]: syz.2.1844 (pid 11877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.233762][T11877] Use struct sctp_sack_info instead [ 328.286508][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 328.309692][T11878] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1843'. [ 328.344848][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 328.359490][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 328.373354][T11880] FAULT_INJECTION: forcing a failure. [ 328.373354][T11880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.406327][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.3.1845 Not tainted syzkaller #0 PREEMPT(full) [ 328.406358][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.406371][T11880] Call Trace: [ 328.406380][T11880] [ 328.406389][T11880] dump_stack_lvl+0xe8/0x150 [ 328.406420][T11880] should_fail_ex+0x40c/0x560 [ 328.406461][T11880] _copy_from_user+0x2d/0xb0 [ 328.406487][T11880] ___sys_sendmsg+0x1c6/0x360 [ 328.406510][T11880] ? __lock_acquire+0x683/0x2cd0 [ 328.406539][T11880] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.406599][T11880] ? __fget_files+0x2a/0x420 [ 328.406624][T11880] ? __fget_files+0x3a2/0x420 [ 328.406662][T11880] __x64_sys_sendmsg+0x1bd/0x2a0 [ 328.406689][T11880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.406724][T11880] ? __pfx_ksys_write+0x10/0x10 [ 328.406763][T11880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.406786][T11880] do_syscall_64+0x174/0x580 [ 328.406809][T11880] ? trace_irq_disable+0x3b/0x140 [ 328.406840][T11880] ? clear_bhb_loop+0x40/0x90 [ 328.406867][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.406888][T11880] RIP: 0033:0x7f919599ce59 [ 328.406918][T11880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.406937][T11880] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.406960][T11880] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 328.406976][T11880] RDX: 0000000020008848 RSI: 0000200000000000 RDI: 0000000000000004 [ 328.406990][T11880] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 328.407002][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.407014][T11880] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 328.407049][T11880] [ 328.702992][T11883] netlink: 'syz.3.1846': attribute type 21 has an invalid length. [ 328.728945][T11883] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1846'. [ 329.204138][T11896] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1851'. [ 329.416942][T11903] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 329.488371][T11903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.562751][T11912] netlink: 'syz.2.1856': attribute type 2 has an invalid length. [ 329.572088][T11912] netlink: 'syz.2.1856': attribute type 1 has an invalid length. [ 330.142859][T11912] lo speed is unknown, defaulting to 1000 [ 330.584657][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 330.610480][T11936] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1862'. [ 331.756969][T11942] lo speed is unknown, defaulting to 1000 [ 332.309758][T11959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1868'. [ 332.846591][T11950] lo speed is unknown, defaulting to 1000 [ 333.711575][T11982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1875'. [ 333.745994][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 333.760556][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 333.884556][T11986] tap0: tun_chr_ioctl cmd 1074025672 [ 333.890128][T11986] tap0: ignored: set checksum disabled [ 333.898500][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 334.915875][T12018] tap0: tun_chr_ioctl cmd 1074025672 [ 334.928870][T12018] tap0: ignored: set checksum disabled [ 334.947259][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 335.316628][T12036] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 335.506419][T12038] FAULT_INJECTION: forcing a failure. [ 335.506419][T12038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.543381][T12038] CPU: 1 UID: 0 PID: 12038 Comm: syz.3.1898 Not tainted syzkaller #0 PREEMPT(full) [ 335.543413][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.543427][T12038] Call Trace: [ 335.543435][T12038] [ 335.543444][T12038] dump_stack_lvl+0xe8/0x150 [ 335.543475][T12038] should_fail_ex+0x40c/0x560 [ 335.543516][T12038] _copy_from_iter+0x1d3/0x1660 [ 335.543544][T12038] ? rcu_is_watching+0x15/0xb0 [ 335.543575][T12038] ? __pfx__copy_from_iter+0x10/0x10 [ 335.543595][T12038] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 335.543635][T12038] ? netlink_sendmsg+0x650/0xb40 [ 335.543660][T12038] ? skb_put+0x112/0x210 [ 335.543684][T12038] netlink_sendmsg+0x6c0/0xb40 [ 335.543718][T12038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.543746][T12038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 335.543782][T12038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.543810][T12038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.543836][T12038] ____sys_sendmsg+0x9b9/0xa20 [ 335.543859][T12038] ? __might_fault+0xaf/0x130 [ 335.543892][T12038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.543924][T12038] ? import_iovec+0x73/0xa0 [ 335.543952][T12038] ___sys_sendmsg+0x2a5/0x360 [ 335.543974][T12038] ? __lock_acquire+0x683/0x2cd0 [ 335.544000][T12038] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.544059][T12038] ? __fget_files+0x2a/0x420 [ 335.544085][T12038] ? __fget_files+0x3a2/0x420 [ 335.544129][T12038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 335.544155][T12038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.544188][T12038] ? __pfx_ksys_write+0x10/0x10 [ 335.544231][T12038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.544256][T12038] do_syscall_64+0x174/0x580 [ 335.544290][T12038] ? trace_irq_disable+0x3b/0x140 [ 335.544323][T12038] ? clear_bhb_loop+0x40/0x90 [ 335.544349][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.544372][T12038] RIP: 0033:0x7f919599ce59 [ 335.544392][T12038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.544411][T12038] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.544435][T12038] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 335.544451][T12038] RDX: 0000000004000010 RSI: 0000200000000280 RDI: 0000000000000006 [ 335.544466][T12038] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 335.544479][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.544492][T12038] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 335.544527][T12038] [ 335.865522][T12049] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1902'. [ 335.936387][T12048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1901'. [ 335.952838][T12051] tap0: tun_chr_ioctl cmd 1074025672 [ 335.960596][T12051] tap0: ignored: set checksum disabled [ 335.969013][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 335.992038][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 336.048129][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 336.321653][T12062] syzkaller0: entered promiscuous mode [ 336.328694][T12062] syzkaller0: entered allmulticast mode [ 337.106638][T12064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.115947][T12075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 337.124351][T12075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 338.259086][T12066] bond_slave_0: entered promiscuous mode [ 338.267620][T12066] bond_slave_0: entered allmulticast mode [ 338.371385][T12087] 8021q: VLANs not supported on ip6gre0 [ 338.679329][T12094] tap0: tun_chr_ioctl cmd 1074025672 [ 338.697903][T12094] tap0: ignored: set checksum disabled [ 338.718505][T12096] syzkaller0: entered promiscuous mode [ 338.728060][T12094] __nla_validate_parse: 4 callbacks suppressed [ 338.728083][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 338.739599][T12096] syzkaller0: entered allmulticast mode [ 339.144392][T12120] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 339.261425][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1926'. [ 339.407932][T12135] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1929'. [ 339.438270][T12137] syzkaller0: entered promiscuous mode [ 339.445071][T12137] syzkaller0: entered allmulticast mode [ 339.502403][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1931'. [ 339.779278][T12148] tipc: Enabled bearer , priority 0 [ 339.786818][T12149] tap0: tun_chr_ioctl cmd 1074025672 [ 339.793895][T12149] tap0: ignored: set checksum disabled [ 339.804145][T12148] syzkaller0: entered promiscuous mode [ 339.812836][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 339.821926][T12148] syzkaller0: entered allmulticast mode [ 339.884616][T12148] tipc: Resetting bearer [ 339.905724][T12145] tipc: Resetting bearer [ 339.953064][T12145] tipc: Disabling bearer [ 340.307821][T12168] siw: device registration error -23 [ 340.365248][T12173] FAULT_INJECTION: forcing a failure. [ 340.365248][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.388163][T12173] CPU: 1 UID: 0 PID: 12173 Comm: syz.1.1941 Not tainted syzkaller #0 PREEMPT(full) [ 340.388195][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.388209][T12173] Call Trace: [ 340.388218][T12173] [ 340.388227][T12173] dump_stack_lvl+0xe8/0x150 [ 340.388270][T12173] should_fail_ex+0x40c/0x560 [ 340.388312][T12173] _copy_to_user+0x31/0xb0 [ 340.388340][T12173] simple_read_from_buffer+0xe1/0x170 [ 340.388372][T12173] proc_fail_nth_read+0x1bb/0x230 [ 340.388404][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.388436][T12173] ? rw_verify_area+0x24a/0x4c0 [ 340.388469][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.388497][T12173] vfs_read+0x213/0xa80 [ 340.388542][T12173] ? __pfx___mutex_lock+0x10/0x10 [ 340.388570][T12173] ? __pfx_vfs_read+0x10/0x10 [ 340.388603][T12173] ? __fget_files+0x2a/0x420 [ 340.388635][T12173] ? __fget_files+0x3a2/0x420 [ 340.388661][T12173] ? __fget_files+0x2a/0x420 [ 340.388697][T12173] ksys_read+0x150/0x270 [ 340.388735][T12173] ? __pfx_ksys_read+0x10/0x10 [ 340.388774][T12173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.388798][T12173] do_syscall_64+0x174/0x580 [ 340.388822][T12173] ? trace_irq_disable+0x3b/0x140 [ 340.388853][T12173] ? clear_bhb_loop+0x40/0x90 [ 340.388881][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.388902][T12173] RIP: 0033:0x7f25f075d68e [ 340.388922][T12173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.388940][T12173] RSP: 002b:00007f25ee9edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.388963][T12173] RAX: ffffffffffffffda RBX: 00007f25ee9ee6c0 RCX: 00007f25f075d68e [ 340.388979][T12173] RDX: 000000000000000f RSI: 00007f25ee9ee0a0 RDI: 0000000000000003 [ 340.388992][T12173] RBP: 00007f25ee9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 340.389005][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.389017][T12173] R13: 00007f25f0a16038 R14: 00007f25f0a15fa0 R15: 00007ffcf8246e58 [ 340.389052][T12173] [ 340.676235][T12184] FAULT_INJECTION: forcing a failure. [ 340.676235][T12184] name failslab, interval 1, probability 0, space 0, times 0 [ 340.795352][T12184] CPU: 0 UID: 0 PID: 12184 Comm: syz.3.1944 Not tainted syzkaller #0 PREEMPT(full) [ 340.795386][T12184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.795401][T12184] Call Trace: [ 340.795411][T12184] [ 340.795421][T12184] dump_stack_lvl+0xe8/0x150 [ 340.795456][T12184] should_fail_ex+0x40c/0x560 [ 340.795505][T12184] should_failslab+0xa8/0x100 [ 340.795546][T12184] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 340.795583][T12184] ? __alloc_skb+0x189/0x7a0 [ 340.795620][T12184] ? __alloc_skb+0x1d7/0x7a0 [ 340.795654][T12184] ? __local_bh_enable_ip+0xd0/0x130 [ 340.795686][T12184] __alloc_skb+0x1d7/0x7a0 [ 340.795729][T12184] netlink_sendmsg+0x5d4/0xb40 [ 340.795769][T12184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.795801][T12184] ? aa_sock_msg_perm+0xf1/0x1b0 [ 340.795840][T12184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.795872][T12184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.795902][T12184] ____sys_sendmsg+0x9b9/0xa20 [ 340.795928][T12184] ? __might_fault+0xaf/0x130 [ 340.795976][T12184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.796014][T12184] ? import_iovec+0x73/0xa0 [ 340.796046][T12184] ___sys_sendmsg+0x2a5/0x360 [ 340.796070][T12184] ? __lock_acquire+0x683/0x2cd0 [ 340.796101][T12184] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.796170][T12184] ? __fget_files+0x2a/0x420 [ 340.796200][T12184] ? __fget_files+0x3a2/0x420 [ 340.796242][T12184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 340.796273][T12184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.796311][T12184] ? __pfx_ksys_write+0x10/0x10 [ 340.796358][T12184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.796385][T12184] do_syscall_64+0x174/0x580 [ 340.796422][T12184] ? clear_bhb_loop+0x40/0x90 [ 340.796454][T12184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.796479][T12184] RIP: 0033:0x7f919599ce59 [ 340.796501][T12184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.796522][T12184] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.796547][T12184] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 340.796565][T12184] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 340.796580][T12184] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 340.796594][T12184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.796609][T12184] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 340.796647][T12184] [ 341.169498][T12194] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1947'. [ 341.229669][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 341.499421][T12196] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.545887][T12220] netlink: 'syz.4.1950': attribute type 10 has an invalid length. [ 341.561043][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 341.586097][T12201] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 341.603967][T12217] tap0: tun_chr_ioctl cmd 1074025672 [ 341.611229][T12217] tap0: ignored: set checksum disabled [ 342.007746][T12235] sctp: [Deprecated]: syz.2.1954 (pid 12235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.007746][T12235] Use struct sctp_sack_info instead [ 342.073832][T12245] sctp: [Deprecated]: syz.1.1957 (pid 12245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.073832][T12245] Use struct sctp_sack_info instead [ 342.153418][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 342.251630][T12252] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1958'. [ 342.940421][T12280] netlink: 'syz.0.1963': attribute type 1 has an invalid length. [ 343.244740][T12238] lo speed is unknown, defaulting to 1000 [ 343.251647][T12289] syzkaller0: entered promiscuous mode [ 343.262227][T12289] syzkaller0: entered allmulticast mode [ 343.677430][T12300] sctp: [Deprecated]: syz.1.1968 (pid 12300) Use of int in max_burst socket option deprecated. [ 343.677430][T12300] Use struct sctp_assoc_value instead [ 343.938325][T12306] sctp: [Deprecated]: syz.3.1970 (pid 12306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.938325][T12306] Use struct sctp_sack_info instead [ 344.455460][T12330] __nla_validate_parse: 1 callbacks suppressed [ 344.455481][T12330] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1978'. [ 344.895937][T12345] FAULT_INJECTION: forcing a failure. [ 344.895937][T12345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.950565][T12345] CPU: 1 UID: 0 PID: 12345 Comm: syz.3.1980 Not tainted syzkaller #0 PREEMPT(full) [ 344.950596][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.950609][T12345] Call Trace: [ 344.950618][T12345] [ 344.950627][T12345] dump_stack_lvl+0xe8/0x150 [ 344.950657][T12345] should_fail_ex+0x40c/0x560 [ 344.950698][T12345] _copy_from_user+0x2d/0xb0 [ 344.950724][T12345] kstrtouint_from_user+0xd6/0x180 [ 344.950761][T12345] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 344.950814][T12345] proc_fail_nth_write+0x8e/0x210 [ 344.950844][T12345] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 344.950882][T12345] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 344.950911][T12345] vfs_write+0x296/0xba0 [ 344.950953][T12345] ? __pfx_vfs_write+0x10/0x10 [ 344.950987][T12345] ? __fget_files+0x2a/0x420 [ 344.951019][T12345] ? __fget_files+0x3a2/0x420 [ 344.951044][T12345] ? __fget_files+0x2a/0x420 [ 344.951079][T12345] ksys_write+0x150/0x270 [ 344.951114][T12345] ? __pfx_ksys_write+0x10/0x10 [ 344.951169][T12345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.951194][T12345] do_syscall_64+0x174/0x580 [ 344.951218][T12345] ? trace_irq_disable+0x3b/0x140 [ 344.951256][T12345] ? clear_bhb_loop+0x40/0x90 [ 344.951283][T12345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.951305][T12345] RIP: 0033:0x7f919595d68e [ 344.951325][T12345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 344.951344][T12345] RSP: 002b:00007f919680bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.951367][T12345] RAX: ffffffffffffffda RBX: 00007f919680c6c0 RCX: 00007f919595d68e [ 344.951383][T12345] RDX: 0000000000000001 RSI: 00007f919680c0a0 RDI: 0000000000000004 [ 344.951396][T12345] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 344.951409][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.951422][T12345] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 344.951456][T12345] [ 345.609829][T12368] sctp: [Deprecated]: syz.3.1986 (pid 12368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.609829][T12368] Use struct sctp_sack_info instead [ 346.568155][T12402] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1997'. [ 348.647403][T12430] sctp: [Deprecated]: syz.2.2002 (pid 12430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.647403][T12430] Use struct sctp_sack_info instead [ 350.102862][T12452] macvlan1: entered allmulticast mode [ 350.121906][T12452] veth1_vlan: entered allmulticast mode [ 350.162002][T12452] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 350.220428][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2010'. [ 350.287538][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'. [ 350.389264][T12467] sctp: [Deprecated]: syz.4.2013 (pid 12467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.389264][T12467] Use struct sctp_sack_info instead [ 351.121389][T12502] bond4: (slave veth0_to_bond): Releasing backup interface [ 351.163878][T12502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.247448][T12506] team0: Port device xfrm0 added [ 351.299467][T12502] tipc: Enabled bearer , priority 0 [ 351.315596][T12500] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 351.448185][T12500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.494822][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 351.520818][T12516] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2025'. [ 351.705202][T12528] sctp: [Deprecated]: syz.1.2028 (pid 12528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.705202][T12528] Use struct sctp_sack_info instead [ 352.078301][T12503] lo speed is unknown, defaulting to 1000 [ 352.351515][ T5761] tipc: Node number set to 828051473 [ 352.571995][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 352.672533][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 352.705199][T12553] team1: entered promiscuous mode [ 352.713219][T12553] team1: entered allmulticast mode [ 352.719241][T12553] 8021q: adding VLAN 0 to HW filter on device team1 [ 352.738430][T12555] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 352.878404][T12555] team2: entered promiscuous mode [ 352.884920][T12555] team2: entered allmulticast mode [ 352.892181][T12555] 8021q: adding VLAN 0 to HW filter on device team2 [ 353.295851][T12581] FAULT_INJECTION: forcing a failure. [ 353.295851][T12581] name failslab, interval 1, probability 0, space 0, times 0 [ 353.323298][T12581] CPU: 1 UID: 0 PID: 12581 Comm: syz.2.2040 Not tainted syzkaller #0 PREEMPT(full) [ 353.323341][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.323357][T12581] Call Trace: [ 353.323434][T12581] [ 353.323505][T12581] dump_stack_lvl+0xe8/0x150 [ 353.323674][T12581] should_fail_ex+0x40c/0x560 [ 353.323780][T12581] should_failslab+0xa8/0x100 [ 353.323857][T12581] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 353.323901][T12581] ? __alloc_skb+0x1d7/0x7a0 [ 353.324060][T12581] ? __local_bh_enable_ip+0xd0/0x130 [ 353.324113][T12581] __alloc_skb+0x1d7/0x7a0 [ 353.324155][T12581] netlink_ack+0x136/0xb30 [ 353.324230][T12581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.324294][T12581] ? __pfx_nl80211_post_doit+0x10/0x10 [ 353.324414][T12581] ? __pfx_ref_tracker_free+0x10/0x10 [ 353.324492][T12581] netlink_rcv_skb+0x2a4/0x4a0 [ 353.324519][T12581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.324554][T12581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.324600][T12581] ? down_read+0x270/0x2e0 [ 353.324679][T12581] ? genl_rcv+0xd/0x40 [ 353.324713][T12581] genl_rcv+0x28/0x40 [ 353.324744][T12581] netlink_unicast+0x7bb/0x940 [ 353.324795][T12581] netlink_sendmsg+0x813/0xb40 [ 353.324835][T12581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.324866][T12581] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.325017][T12581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.325065][T12581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.325095][T12581] ____sys_sendmsg+0x9b9/0xa20 [ 353.325120][T12581] ? __might_fault+0xaf/0x130 [ 353.325166][T12581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.325204][T12581] ? import_iovec+0x73/0xa0 [ 353.325264][T12581] ___sys_sendmsg+0x2a5/0x360 [ 353.325289][T12581] ? __lock_acquire+0x683/0x2cd0 [ 353.325344][T12581] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.325415][T12581] ? __fget_files+0x2a/0x420 [ 353.325460][T12581] ? __fget_files+0x3a2/0x420 [ 353.325503][T12581] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.325533][T12581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.325572][T12581] ? __pfx_ksys_write+0x10/0x10 [ 353.325624][T12581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.325702][T12581] do_syscall_64+0x174/0x580 [ 353.325772][T12581] ? trace_irq_disable+0x3b/0x140 [ 353.325825][T12581] ? clear_bhb_loop+0x40/0x90 [ 353.325856][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.325881][T12581] RIP: 0033:0x7eff6179ce59 [ 353.325929][T12581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.325978][T12581] RSP: 002b:00007eff6265c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.326032][T12581] RAX: ffffffffffffffda RBX: 00007eff61a15fa0 RCX: 00007eff6179ce59 [ 353.326051][T12581] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 353.326067][T12581] RBP: 00007eff6265c090 R08: 0000000000000000 R09: 0000000000000000 [ 353.326081][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.326096][T12581] R13: 00007eff61a16038 R14: 00007eff61a15fa0 R15: 00007ffea6f76438 [ 353.326136][T12581] [ 353.702872][T12584] FAULT_INJECTION: forcing a failure. [ 353.702872][T12584] name failslab, interval 1, probability 0, space 0, times 0 [ 353.716281][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.2.2041 Not tainted syzkaller #0 PREEMPT(full) [ 353.716309][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.716322][T12584] Call Trace: [ 353.716331][T12584] [ 353.716341][T12584] dump_stack_lvl+0xe8/0x150 [ 353.716372][T12584] should_fail_ex+0x40c/0x560 [ 353.716415][T12584] should_failslab+0xa8/0x100 [ 353.716450][T12584] ? skb_clone+0x212/0x3a0 [ 353.716484][T12584] kmem_cache_alloc_noprof+0x87/0x650 [ 353.716525][T12584] skb_clone+0x212/0x3a0 [ 353.716554][T12584] __netlink_deliver_tap+0x413/0x860 [ 353.716592][T12584] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.716619][T12584] netlink_deliver_tap+0x19c/0x1b0 [ 353.716645][T12584] netlink_sendskb+0x68/0x140 [ 353.716682][T12584] netlink_rcv_skb+0x2a4/0x4a0 [ 353.716708][T12584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.716740][T12584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.716782][T12584] ? down_read+0x270/0x2e0 [ 353.716809][T12584] ? genl_rcv+0xd/0x40 [ 353.716840][T12584] genl_rcv+0x28/0x40 [ 353.716868][T12584] netlink_unicast+0x7bb/0x940 [ 353.716913][T12584] netlink_sendmsg+0x813/0xb40 [ 353.716946][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.716975][T12584] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.717009][T12584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.717038][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.717065][T12584] ____sys_sendmsg+0x9b9/0xa20 [ 353.717088][T12584] ? __might_fault+0xaf/0x130 [ 353.717123][T12584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.717159][T12584] ? import_iovec+0x73/0xa0 [ 353.717188][T12584] ___sys_sendmsg+0x2a5/0x360 [ 353.717211][T12584] ? __lock_acquire+0x683/0x2cd0 [ 353.717240][T12584] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.717299][T12584] ? __fget_files+0x2a/0x420 [ 353.717324][T12584] ? __fget_files+0x3a2/0x420 [ 353.717363][T12584] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.717391][T12584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.717426][T12584] ? __pfx_ksys_write+0x10/0x10 [ 353.717467][T12584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.717520][T12584] do_syscall_64+0x174/0x580 [ 353.717543][T12584] ? trace_irq_disable+0x3b/0x140 [ 353.717573][T12584] ? clear_bhb_loop+0x40/0x90 [ 353.717597][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.717617][T12584] RIP: 0033:0x7eff6179ce59 [ 353.717636][T12584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.717654][T12584] RSP: 002b:00007eff6265c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.717675][T12584] RAX: ffffffffffffffda RBX: 00007eff61a15fa0 RCX: 00007eff6179ce59 [ 353.717689][T12584] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 353.717702][T12584] RBP: 00007eff6265c090 R08: 0000000000000000 R09: 0000000000000000 [ 353.717714][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.717726][T12584] R13: 00007eff61a16038 R14: 00007eff61a15fa0 R15: 00007ffea6f76438 [ 353.717759][T12584] [ 356.643045][T12616] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 356.821292][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 356.862275][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 356.922600][T12637] FAULT_INJECTION: forcing a failure. [ 356.922600][T12637] name failslab, interval 1, probability 0, space 0, times 0 [ 357.036167][T12637] CPU: 1 UID: 0 PID: 12637 Comm: syz.1.2052 Not tainted syzkaller #0 PREEMPT(full) [ 357.036197][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.036210][T12637] Call Trace: [ 357.036219][T12637] [ 357.036228][T12637] dump_stack_lvl+0xe8/0x150 [ 357.036259][T12637] should_fail_ex+0x40c/0x560 [ 357.036301][T12637] should_failslab+0xa8/0x100 [ 357.036339][T12637] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 357.036370][T12637] ? __alloc_skb+0x189/0x7a0 [ 357.036402][T12637] ? __alloc_skb+0x1d7/0x7a0 [ 357.036433][T12637] ? __local_bh_enable_ip+0xd0/0x130 [ 357.036460][T12637] __alloc_skb+0x1d7/0x7a0 [ 357.036498][T12637] netlink_sendmsg+0x5d4/0xb40 [ 357.036533][T12637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.036562][T12637] ? aa_sock_msg_perm+0xf1/0x1b0 [ 357.036596][T12637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.036624][T12637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.036651][T12637] ____sys_sendmsg+0x9b9/0xa20 [ 357.036675][T12637] ? __might_fault+0xaf/0x130 [ 357.036710][T12637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.036743][T12637] ? import_iovec+0x73/0xa0 [ 357.036773][T12637] ___sys_sendmsg+0x2a5/0x360 [ 357.036795][T12637] ? __lock_acquire+0x683/0x2cd0 [ 357.036823][T12637] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.036884][T12637] ? __fget_files+0x2a/0x420 [ 357.036910][T12637] ? __fget_files+0x3a2/0x420 [ 357.036948][T12637] __x64_sys_sendmsg+0x1bd/0x2a0 [ 357.036975][T12637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.037009][T12637] ? __pfx_ksys_write+0x10/0x10 [ 357.037051][T12637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.037085][T12637] do_syscall_64+0x174/0x580 [ 357.037109][T12637] ? trace_irq_disable+0x3b/0x140 [ 357.037143][T12637] ? clear_bhb_loop+0x40/0x90 [ 357.037170][T12637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.037192][T12637] RIP: 0033:0x7f25f079ce59 [ 357.037212][T12637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.037231][T12637] RSP: 002b:00007f25ee9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.037254][T12637] RAX: ffffffffffffffda RBX: 00007f25f0a16090 RCX: 00007f25f079ce59 [ 357.037270][T12637] RDX: 0000000020008848 RSI: 0000200000000000 RDI: 0000000000000004 [ 357.037284][T12637] RBP: 00007f25ee9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 357.037297][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.037309][T12637] R13: 00007f25f0a16128 R14: 00007f25f0a16090 R15: 00007ffcf8246e58 [ 357.037343][T12637] [ 357.300419][T12643] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2056'. [ 357.600403][T12658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2061'. [ 357.787971][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 357.926880][T12673] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 358.223304][T12686] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2071'. [ 358.261653][T12680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.275332][T12686] af_packet: tpacket_rcv: packet too big, clamped from 14572 to 3952. macoff=96 [ 358.277298][T12688] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 358.369994][T12688] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.383381][T12695] uyz0: rxe_newlink: already configured on bridge_slave_1 [ 358.401825][T12688] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.525329][T12688] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.547204][T12688] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.597984][T12688] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.608298][T12688] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.723194][T12688] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.743484][T12688] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.887055][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.919136][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.952617][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2079'. [ 358.975300][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.988418][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.073119][T12714] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2081'. [ 359.095376][ T151] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.117032][ T151] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.192306][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.213854][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.263856][T12720] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 359.377102][T12724] FAULT_INJECTION: forcing a failure. [ 359.377102][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 359.397434][T12724] CPU: 0 UID: 0 PID: 12724 Comm: syz.3.2086 Not tainted syzkaller #0 PREEMPT(full) [ 359.397464][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.397484][T12724] Call Trace: [ 359.397492][T12724] [ 359.397506][T12724] dump_stack_lvl+0xe8/0x150 [ 359.397538][T12724] should_fail_ex+0x40c/0x560 [ 359.397577][T12724] ? __d_alloc+0x37/0x6e0 [ 359.397607][T12724] should_failslab+0xa8/0x100 [ 359.397644][T12724] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 359.397676][T12724] ? __d_lookup+0x66/0x790 [ 359.397713][T12724] __d_alloc+0x37/0x6e0 [ 359.397748][T12724] d_alloc+0x4b/0x190 [ 359.397775][T12724] ? lookup_one_qstr_excl+0xc4/0x360 [ 359.397808][T12724] lookup_one_qstr_excl+0xd8/0x360 [ 359.397846][T12724] ? lookup_noperm_common+0x245/0x430 [ 359.397878][T12724] start_dirop+0x5c/0x90 [ 359.397905][T12724] simple_start_creating+0xcc/0x110 [ 359.397937][T12724] ? __pfx_simple_start_creating+0x10/0x10 [ 359.397969][T12724] ? do_raw_spin_unlock+0xf5/0x210 [ 359.398000][T12724] ? mntput+0x65/0xc0 [ 359.398027][T12724] debugfs_start_creating+0xdb/0x1a0 [ 359.398149][T12724] __debugfs_create_file+0x6f/0x400 [ 359.398179][T12724] debugfs_create_file_full+0x3f/0x60 [ 359.398210][T12724] ref_tracker_dir_debugfs+0x197/0x360 [ 359.398235][T12724] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 359.398290][T12724] ? __kvmalloc_node_noprof+0x53d/0x890 [ 359.398323][T12724] ? alloc_netdev_mqs+0xa9/0x1220 [ 359.398417][T12724] ? __raw_spin_lock_init+0x45/0x100 [ 359.398451][T12724] alloc_netdev_mqs+0x275/0x1220 [ 359.398476][T12724] ? __pfx_snprintf+0x10/0x10 [ 359.398536][T12724] ? __pfx_br_dev_setup+0x10/0x10 [ 359.398614][T12724] rtnl_create_link+0x321/0xd70 [ 359.398696][T12724] rtnl_newlink_create+0x25f/0xb00 [ 359.398731][T12724] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 359.398758][T12724] ? __pfx___mutex_lock+0x10/0x10 [ 359.398794][T12724] ? ns_capable+0x89/0xe0 [ 359.398820][T12724] rtnl_newlink+0x167f/0x1bd0 [ 359.398881][T12724] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.398920][T12724] ? __lock_acquire+0x683/0x2cd0 [ 359.398951][T12724] ? __lock_acquire+0x683/0x2cd0 [ 359.398978][T12724] ? arch_stack_walk+0xfb/0x150 [ 359.399032][T12724] ? unwind_next_frame+0x8f/0x2550 [ 359.399077][T12724] ? is_bpf_text_address+0x26/0x2b0 [ 359.399116][T12724] ? __lock_acquire+0x683/0x2cd0 [ 359.399143][T12724] ? kernel_text_address+0xa5/0xe0 [ 359.399180][T12724] ? __kernel_text_address+0xd/0x30 [ 359.399207][T12724] ? unwind_get_return_address+0x4d/0x90 [ 359.399230][T12724] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.399271][T12724] ? arch_stack_walk+0xfb/0x150 [ 359.399303][T12724] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 359.399352][T12724] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.399382][T12724] rtnetlink_rcv_msg+0x802/0xc00 [ 359.399411][T12724] ? kasan_save_track+0x3e/0x80 [ 359.399443][T12724] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 359.399475][T12724] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.399507][T12724] ? __lock_acquire+0x683/0x2cd0 [ 359.399543][T12724] netlink_rcv_skb+0x226/0x4a0 [ 359.399568][T12724] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.399603][T12724] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.399642][T12724] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.399663][T12724] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.399691][T12724] netlink_unicast+0x7bb/0x940 [ 359.399735][T12724] netlink_sendmsg+0x813/0xb40 [ 359.399770][T12724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.399797][T12724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.399840][T12724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.399868][T12724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.399895][T12724] ____sys_sendmsg+0x9b9/0xa20 [ 359.399918][T12724] ? __might_fault+0xaf/0x130 [ 359.399954][T12724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.399988][T12724] ? import_iovec+0x73/0xa0 [ 359.400017][T12724] ___sys_sendmsg+0x2a5/0x360 [ 359.400040][T12724] ? __lock_acquire+0x683/0x2cd0 [ 359.400067][T12724] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.400131][T12724] ? __fget_files+0x2a/0x420 [ 359.400157][T12724] ? __fget_files+0x3a2/0x420 [ 359.400196][T12724] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.400222][T12724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.400257][T12724] ? __pfx_ksys_write+0x10/0x10 [ 359.400299][T12724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.400323][T12724] do_syscall_64+0x174/0x580 [ 359.400348][T12724] ? trace_irq_disable+0x3b/0x140 [ 359.400379][T12724] ? clear_bhb_loop+0x40/0x90 [ 359.400407][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.400428][T12724] RIP: 0033:0x7f919599ce59 [ 359.400449][T12724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.400468][T12724] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.400492][T12724] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 359.400508][T12724] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 359.400522][T12724] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 359.400535][T12724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.400548][T12724] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 359.400584][T12724] [ 360.159790][T12741] sctp: [Deprecated]: syz.3.2092 (pid 12741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.159790][T12741] Use struct sctp_sack_info instead [ 360.187766][T12742] FAULT_INJECTION: forcing a failure. [ 360.187766][T12742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.212441][T12742] CPU: 0 UID: 0 PID: 12742 Comm: syz.1.2090 Not tainted syzkaller #0 PREEMPT(full) [ 360.212469][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.212481][T12742] Call Trace: [ 360.212490][T12742] [ 360.212498][T12742] dump_stack_lvl+0xe8/0x150 [ 360.212529][T12742] should_fail_ex+0x40c/0x560 [ 360.212570][T12742] _copy_to_user+0x31/0xb0 [ 360.212673][T12742] simple_read_from_buffer+0xe1/0x170 [ 360.212705][T12742] proc_fail_nth_read+0x1bb/0x230 [ 360.212756][T12742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.212788][T12742] ? rw_verify_area+0x24a/0x4c0 [ 360.212821][T12742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.212848][T12742] vfs_read+0x213/0xa80 [ 360.212884][T12742] ? __pfx___mutex_lock+0x10/0x10 [ 360.212912][T12742] ? __pfx_vfs_read+0x10/0x10 [ 360.212944][T12742] ? __fget_files+0x2a/0x420 [ 360.212975][T12742] ? __fget_files+0x3a2/0x420 [ 360.213000][T12742] ? __fget_files+0x2a/0x420 [ 360.213035][T12742] ksys_read+0x150/0x270 [ 360.213068][T12742] ? __pfx_ksys_read+0x10/0x10 [ 360.213108][T12742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.213132][T12742] do_syscall_64+0x174/0x580 [ 360.213155][T12742] ? trace_irq_disable+0x3b/0x140 [ 360.213188][T12742] ? clear_bhb_loop+0x40/0x90 [ 360.213216][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.213237][T12742] RIP: 0033:0x7f25f075d68e [ 360.213257][T12742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.213287][T12742] RSP: 002b:00007f25ee9ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.213310][T12742] RAX: ffffffffffffffda RBX: 00007f25ee9cd6c0 RCX: 00007f25f075d68e [ 360.213326][T12742] RDX: 000000000000000f RSI: 00007f25ee9cd0a0 RDI: 0000000000000005 [ 360.213340][T12742] RBP: 00007f25ee9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 360.213353][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.213365][T12742] R13: 00007f25f0a16128 R14: 00007f25f0a16090 R15: 00007ffcf8246e58 [ 360.213397][T12742] [ 360.552652][T12747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2094'. [ 360.601881][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 360.722138][T12760] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 363.647932][T12755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.874005][T12805] sctp: [Deprecated]: syz.1.2107 (pid 12805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.874005][T12805] Use struct sctp_sack_info instead [ 363.918006][T12808] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 363.956831][T12808] bond4: entered promiscuous mode [ 363.962217][T12808] bond4: entered allmulticast mode [ 363.967966][T12808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.026964][T12808] erspan2: entered allmulticast mode [ 364.049223][T12808] bond4: (slave erspan2): making interface the new active one [ 364.056938][T12808] erspan2: entered promiscuous mode [ 364.066228][T12808] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 364.191414][T12817] __nla_validate_parse: 1 callbacks suppressed [ 364.191500][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 364.215827][T12817] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2109'. [ 364.357881][T12825] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2114'. [ 364.369529][T12825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.421581][T12829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.536902][T12835] syzkaller1: tun_chr_ioctl cmd 35108 [ 364.598927][T12830] syzkaller1: entered promiscuous mode [ 364.628182][T12830] syzkaller1: entered allmulticast mode [ 364.912960][T12848] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 365.069187][T12848] bond4: entered promiscuous mode [ 365.084056][T12848] bond4: entered allmulticast mode [ 365.090469][T12848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.156899][T12854] erspan1: entered allmulticast mode [ 365.168054][T12854] bond4: (slave erspan1): making interface the new active one [ 365.176976][T12854] erspan1: entered promiscuous mode [ 365.195943][T12854] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 365.204378][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2125'. [ 365.456542][T12866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2126'. [ 365.492075][T12870] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.797972][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2129'. [ 365.866478][T12879] tap0: tun_chr_ioctl cmd 1074025672 [ 365.886226][T12879] tap0: ignored: set checksum disabled [ 365.951392][T12885] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 365.969607][T12885] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2132'. [ 366.129976][T12890] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 366.164115][T12890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.276035][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'. [ 366.296655][T12897] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2134'. [ 366.857172][T12907] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 366.893324][T12907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.004084][T12884] lo speed is unknown, defaulting to 1000 [ 368.296756][ T30] audit: type=1804 audit(1781543020.818:2): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2139" name="/newroot/387/memory.events" dev="tmpfs" ino=1991 res=1 errno=0 [ 368.341069][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2141'. [ 368.359091][ T30] audit: type=1800 audit(1781543020.848:3): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2139" name="memory.events" dev="tmpfs" ino=1991 res=0 errno=0 [ 368.408808][ T30] audit: type=1804 audit(1781543020.848:4): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2139" name="/newroot/387/memory.events" dev="tmpfs" ino=1991 res=1 errno=0 [ 368.557998][T12905] lo speed is unknown, defaulting to 1000 [ 369.234048][T12970] tap0: tun_chr_ioctl cmd 1074025672 [ 369.255349][T12970] tap0: ignored: set checksum disabled [ 369.607264][T12982] __nla_validate_parse: 1 callbacks suppressed [ 369.607284][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 369.661832][T12982] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2148'. [ 369.981530][T12998] syzkaller0: entered promiscuous mode [ 369.988641][T12994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.999136][T12998] syzkaller0: entered allmulticast mode [ 370.048541][T12998] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2153'. [ 370.077229][T13000] xt_TPROXY: Can be used only with -p tcp or -p udp [ 370.119422][T12998] nbd0: detected capacity change from 0 to 4 [ 370.159595][ T5632] block nbd0: Receive control failed (result -104) [ 370.192338][T13005] FAULT_INJECTION: forcing a failure. [ 370.192338][T13005] name failslab, interval 1, probability 0, space 0, times 0 [ 370.206767][T13005] CPU: 1 UID: 0 PID: 13005 Comm: syz.0.2155 Not tainted syzkaller #0 PREEMPT(full) [ 370.206796][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.206810][T13005] Call Trace: [ 370.206819][T13005] [ 370.206828][T13005] dump_stack_lvl+0xe8/0x150 [ 370.206859][T13005] should_fail_ex+0x40c/0x560 [ 370.206901][T13005] should_failslab+0xa8/0x100 [ 370.206939][T13005] __kmalloc_noprof+0xe8/0x750 [ 370.206971][T13005] ? tcf_idr_create+0x5d/0x6b0 [ 370.207073][T13005] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 370.207108][T13005] tcf_idr_create+0x5d/0x6b0 [ 370.207136][T13005] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 370.207172][T13005] tcf_idr_create_from_flags+0x60/0x80 [ 370.207209][T13005] tcf_vlan_init+0x504/0xe60 [ 370.207280][T13005] ? __pfx_tcf_vlan_init+0x10/0x10 [ 370.207323][T13005] ? __kasan_kmalloc+0x93/0xb0 [ 370.207354][T13005] ? nla_memcpy+0x5b/0xc0 [ 370.207393][T13005] tcf_action_init_1+0x4ba/0x740 [ 370.207432][T13005] ? __pfx_tcf_action_init_1+0x10/0x10 [ 370.207462][T13005] ? _raw_read_unlock+0x28/0x50 [ 370.207516][T13005] ? tc_action_load_ops+0x247/0x540 [ 370.207570][T13005] ? __nla_parse+0x40/0x60 [ 370.207606][T13005] tcf_action_init+0x30e/0xb10 [ 370.207650][T13005] ? __pfx_tcf_action_init+0x10/0x10 [ 370.207712][T13005] ? __pfx___nla_validate_parse+0x10/0x10 [ 370.207746][T13005] ? rcu_is_watching+0x15/0xb0 [ 370.207809][T13005] tc_ctl_action+0x43b/0xc70 [ 370.207856][T13005] ? __pfx_tc_ctl_action+0x10/0x10 [ 370.207896][T13005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 370.207967][T13005] ? __pfx_tc_ctl_action+0x10/0x10 [ 370.207998][T13005] rtnetlink_rcv_msg+0x7b9/0xc00 [ 370.208037][T13005] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 370.208070][T13005] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.208102][T13005] ? ref_tracker_free+0x689/0x830 [ 370.208130][T13005] ? __pfx_ref_tracker_free+0x10/0x10 [ 370.208165][T13005] netlink_rcv_skb+0x226/0x4a0 [ 370.208191][T13005] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.208227][T13005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.208266][T13005] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.208289][T13005] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.208320][T13005] netlink_unicast+0x7bb/0x940 [ 370.208367][T13005] netlink_sendmsg+0x813/0xb40 [ 370.208402][T13005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.208431][T13005] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.208466][T13005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.208494][T13005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.208521][T13005] ____sys_sendmsg+0x9b9/0xa20 [ 370.208555][T13005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.208589][T13005] ? import_iovec+0x73/0xa0 [ 370.208628][T13005] ___sys_sendmsg+0x2a5/0x360 [ 370.208650][T13005] ? __lock_acquire+0x683/0x2cd0 [ 370.208678][T13005] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.208738][T13005] ? __fget_files+0x2a/0x420 [ 370.208764][T13005] ? __fget_files+0x3a2/0x420 [ 370.208801][T13005] __x64_sys_sendmsg+0x1bd/0x2a0 [ 370.208828][T13005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.208862][T13005] ? __pfx_ksys_write+0x10/0x10 [ 370.208904][T13005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.208928][T13005] do_syscall_64+0x174/0x580 [ 370.208951][T13005] ? trace_irq_disable+0x3b/0x140 [ 370.208982][T13005] ? clear_bhb_loop+0x40/0x90 [ 370.209010][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.209031][T13005] RIP: 0033:0x7f2c0c19ce59 [ 370.209052][T13005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.209070][T13005] RSP: 002b:00007f2c0d10e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.209093][T13005] RAX: ffffffffffffffda RBX: 00007f2c0c415fa0 RCX: 00007f2c0c19ce59 [ 370.209109][T13005] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 370.209123][T13005] RBP: 00007f2c0d10e090 R08: 0000000000000000 R09: 0000000000000000 [ 370.209136][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.209148][T13005] R13: 00007f2c0c416038 R14: 00007f2c0c415fa0 R15: 00007ffd1c1296a8 [ 370.209183][T13005] [ 371.162719][T13034] syzkaller0: entered promiscuous mode [ 371.180320][T13034] syzkaller0: entered allmulticast mode [ 371.418859][T13045] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 371.798017][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 371.824948][T13060] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2168'. [ 371.867744][T13064] netlink: 'syz.0.2170': attribute type 8 has an invalid length. [ 371.887397][T13064] sch_fq: defrate 0 ignored. [ 372.007642][T13073] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 372.168192][T13074] bond1: (slave bridge7): Enslaving as a backup interface with an up link [ 372.211660][T13073] bond1: (slave bridge8): Enslaving as a backup interface with a down link [ 372.275802][T13084] syzkaller0: entered promiscuous mode [ 372.304876][T13084] syzkaller0: entered allmulticast mode [ 372.530961][ T30] audit: type=1107 audit(1781543025.058:5): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 372.728599][T13108] syzkaller1: entered promiscuous mode [ 372.749932][T13108] syzkaller1: entered allmulticast mode [ 372.778326][T13108] FAULT_INJECTION: forcing a failure. [ 372.778326][T13108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.826041][T13108] CPU: 1 UID: 0 PID: 13108 Comm: syz.4.2185 Not tainted syzkaller #0 PREEMPT(full) [ 372.826073][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.826086][T13108] Call Trace: [ 372.826095][T13108] [ 372.826104][T13108] dump_stack_lvl+0xe8/0x150 [ 372.826136][T13108] should_fail_ex+0x40c/0x560 [ 372.826177][T13108] _copy_from_iter+0x1d3/0x1660 [ 372.826205][T13108] ? _copy_from_iter+0x21b/0x1660 [ 372.826229][T13108] ? __pfx__copy_from_iter+0x10/0x10 [ 372.826257][T13108] ? __pfx__copy_from_iter+0x10/0x10 [ 372.826287][T13108] copy_page_from_iter+0x219/0x2d0 [ 372.826314][T13108] skb_copy_datagram_from_iter+0x2f4/0x720 [ 372.826428][T13108] tun_get_user+0xc71/0x4350 [ 372.826529][T13108] ? aa_file_perm+0x18b/0x15f0 [ 372.826588][T13108] ? aa_file_perm+0x4ed/0x15f0 [ 372.826607][T13108] ? __pfx_tun_get_user+0x10/0x10 [ 372.826631][T13108] ? __lock_acquire+0x683/0x2cd0 [ 372.826657][T13108] ? kstrtoull+0x12f/0x1d0 [ 372.826723][T13108] ? ref_tracker_alloc+0x341/0x4b0 [ 372.826745][T13108] ? get_pid_task+0x20/0x1f0 [ 372.826789][T13108] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 372.826814][T13108] ? tun_get+0x1c/0x2f0 [ 372.826835][T13108] ? tun_get+0x1c/0x2f0 [ 372.826861][T13108] ? tun_get+0x1c/0x2f0 [ 372.826880][T13108] ? tun_get+0x1c/0x2f0 [ 372.826904][T13108] tun_chr_write_iter+0x113/0x200 [ 372.826940][T13108] vfs_write+0x612/0xba0 [ 372.826981][T13108] ? __pfx_vfs_write+0x10/0x10 [ 372.827023][T13108] ? __fget_files+0x2a/0x420 [ 372.827060][T13108] ksys_write+0x150/0x270 [ 372.827094][T13108] ? __pfx_ksys_write+0x10/0x10 [ 372.827134][T13108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.827158][T13108] do_syscall_64+0x174/0x580 [ 372.827183][T13108] ? trace_irq_disable+0x3b/0x140 [ 372.827215][T13108] ? clear_bhb_loop+0x40/0x90 [ 372.827242][T13108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.827264][T13108] RIP: 0033:0x7f88a939ce59 [ 372.827348][T13108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.827367][T13108] RSP: 002b:00007f88aa1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.827391][T13108] RAX: ffffffffffffffda RBX: 00007f88a9615fa0 RCX: 00007f88a939ce59 [ 372.827407][T13108] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000004 [ 372.827422][T13108] RBP: 00007f88aa1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 372.827435][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.827448][T13108] R13: 00007f88a9616038 R14: 00007f88a9615fa0 R15: 00007ffc220b4678 [ 372.827484][T13108] [ 373.285799][T13124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2189'. [ 373.437498][T13129] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 373.475312][T13129] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2190'. [ 373.551766][T13133] FAULT_INJECTION: forcing a failure. [ 373.551766][T13133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.567041][T13137] syzkaller0: entered promiscuous mode [ 373.573494][T13137] syzkaller0: entered allmulticast mode [ 373.579774][T13133] CPU: 0 UID: 0 PID: 13133 Comm: syz.4.2193 Not tainted syzkaller #0 PREEMPT(full) [ 373.579802][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.579815][T13133] Call Trace: [ 373.579823][T13133] [ 373.579833][T13133] dump_stack_lvl+0xe8/0x150 [ 373.579864][T13133] should_fail_ex+0x40c/0x560 [ 373.579906][T13133] _copy_from_iter+0x1d3/0x1660 [ 373.579927][T13133] ? skb_set_owner_w+0x263/0x3d0 [ 373.579964][T13133] ? __pfx__copy_from_iter+0x10/0x10 [ 373.579996][T13133] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 373.580026][T13133] skb_copy_datagram_from_iter+0xe6/0x720 [ 373.580055][T13133] ? dev_get_by_index+0x22/0x2d0 [ 373.580153][T13133] ? skb_put+0x112/0x210 [ 373.580178][T13133] packet_sendmsg+0x36ab/0x5040 [ 373.580245][T13133] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 373.580278][T13133] ? __lock_acquire+0x683/0x2cd0 [ 373.580316][T13133] ? unwind_next_frame+0x8f/0x2550 [ 373.580369][T13133] ? __pfx_packet_sendmsg+0x10/0x10 [ 373.580393][T13133] ? aa_sk_perm+0x6d5/0x900 [ 373.580431][T13133] ? __pfx_aa_sk_perm+0x10/0x10 [ 373.580460][T13133] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 373.580556][T13133] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.580592][T13133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.580621][T13133] ? __pfx_packet_sendmsg+0x10/0x10 [ 373.580649][T13133] ____sys_sendmsg+0x9b9/0xa20 [ 373.580683][T13133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.580717][T13133] ? import_iovec+0x73/0xa0 [ 373.580745][T13133] ___sys_sendmsg+0x2a5/0x360 [ 373.580767][T13133] ? __lock_acquire+0x683/0x2cd0 [ 373.580793][T13133] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.580853][T13133] ? __fget_files+0x2a/0x420 [ 373.580880][T13133] ? __fget_files+0x3a2/0x420 [ 373.580918][T13133] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.580945][T13133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.580980][T13133] ? __pfx_ksys_write+0x10/0x10 [ 373.581020][T13133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.581045][T13133] do_syscall_64+0x174/0x580 [ 373.581071][T13133] ? trace_irq_disable+0x3b/0x140 [ 373.581104][T13133] ? clear_bhb_loop+0x40/0x90 [ 373.581132][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.581155][T13133] RIP: 0033:0x7f88a939ce59 [ 373.581176][T13133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.581196][T13133] RSP: 002b:00007f88aa1bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.581219][T13133] RAX: ffffffffffffffda RBX: 00007f88a9615fa0 RCX: 00007f88a939ce59 [ 373.581235][T13133] RDX: 0000000004000880 RSI: 0000200000002900 RDI: 0000000000000008 [ 373.581250][T13133] RBP: 00007f88aa1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 373.581264][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.581278][T13133] R13: 00007f88a9616038 R14: 00007f88a9615fa0 R15: 00007ffc220b4678 [ 373.581312][T13133] [ 373.944027][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 373.953215][T13142] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2195'. [ 374.340964][T13154] sctp: [Deprecated]: syz.4.2200 (pid 13154) Use of int in max_burst socket option deprecated. [ 374.340964][T13154] Use struct sctp_assoc_value instead [ 374.386647][T13154] netlink: 'syz.4.2200': attribute type 30 has an invalid length. [ 374.424121][T13154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2200'. [ 374.463582][T13154] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 374.478514][T13154] bond5 (unregistering): Released all slaves [ 374.585187][T13144] syzkaller1: entered promiscuous mode [ 374.606188][T13144] syzkaller1: entered allmulticast mode [ 374.912141][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 374.937900][T13164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2203'. [ 375.143718][T13174] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2206'. [ 375.244656][T13181] syzkaller0: entered promiscuous mode [ 375.250708][T13181] syzkaller0: entered allmulticast mode [ 375.356117][T13186] FAULT_INJECTION: forcing a failure. [ 375.356117][T13186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.373022][T13186] CPU: 1 UID: 0 PID: 13186 Comm: syz.3.2211 Not tainted syzkaller #0 PREEMPT(full) [ 375.373062][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.373076][T13186] Call Trace: [ 375.373086][T13186] [ 375.373103][T13186] dump_stack_lvl+0xe8/0x150 [ 375.373137][T13186] should_fail_ex+0x40c/0x560 [ 375.373179][T13186] _copy_to_user+0x31/0xb0 [ 375.373209][T13186] simple_read_from_buffer+0xe1/0x170 [ 375.373244][T13186] proc_fail_nth_read+0x1bb/0x230 [ 375.373277][T13186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.373311][T13186] ? rw_verify_area+0x24a/0x4c0 [ 375.373344][T13186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.373372][T13186] vfs_read+0x213/0xa80 [ 375.373409][T13186] ? __pfx___mutex_lock+0x10/0x10 [ 375.373438][T13186] ? __pfx_vfs_read+0x10/0x10 [ 375.373471][T13186] ? __fget_files+0x2a/0x420 [ 375.373502][T13186] ? __fget_files+0x3a2/0x420 [ 375.373528][T13186] ? __fget_files+0x2a/0x420 [ 375.373564][T13186] ksys_read+0x150/0x270 [ 375.373599][T13186] ? __pfx_ksys_read+0x10/0x10 [ 375.373640][T13186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.373665][T13186] do_syscall_64+0x174/0x580 [ 375.373689][T13186] ? trace_irq_disable+0x3b/0x140 [ 375.373723][T13186] ? clear_bhb_loop+0x40/0x90 [ 375.373752][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.373774][T13186] RIP: 0033:0x7f919595d68e [ 375.373796][T13186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.373816][T13186] RSP: 002b:00007f919680bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.373840][T13186] RAX: ffffffffffffffda RBX: 00007f919680c6c0 RCX: 00007f919595d68e [ 375.373857][T13186] RDX: 000000000000000f RSI: 00007f919680c0a0 RDI: 0000000000000004 [ 375.373871][T13186] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 375.373885][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.373898][T13186] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 375.373938][T13186] [ 375.683336][T13188] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2214'. [ 375.693647][T13188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'. [ 375.827401][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2212'. [ 375.875402][T13196] gre1: entered allmulticast mode [ 376.092428][T13206] sctp: [Deprecated]: syz.4.2220 (pid 13206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.092428][T13206] Use struct sctp_sack_info instead [ 376.193025][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2221'. [ 376.211312][T13209] veth0_to_hsr: entered promiscuous mode [ 376.218507][T13209] batadv_slave_0: entered promiscuous mode [ 376.386376][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 376.441777][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 376.486061][T13221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2224'. [ 376.550085][T13230] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 376.791042][T13238] FAULT_INJECTION: forcing a failure. [ 376.791042][T13238] name failslab, interval 1, probability 0, space 0, times 0 [ 376.812148][T13238] CPU: 1 UID: 0 PID: 13238 Comm: syz.3.2227 Not tainted syzkaller #0 PREEMPT(full) [ 376.812180][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.812195][T13238] Call Trace: [ 376.812204][T13238] [ 376.812214][T13238] dump_stack_lvl+0xe8/0x150 [ 376.812246][T13238] should_fail_ex+0x40c/0x560 [ 376.812288][T13238] should_failslab+0xa8/0x100 [ 376.812325][T13238] __kmalloc_cache_noprof+0x88/0x660 [ 376.812358][T13238] ? call_usermodehelper_setup+0x8e/0x270 [ 376.812399][T13238] call_usermodehelper_setup+0x8e/0x270 [ 376.812443][T13238] ? __pfx_free_modprobe_argv+0x10/0x10 [ 376.812475][T13238] __request_module+0x3ba/0x630 [ 376.812506][T13238] ? rtnl_link_ops_get+0x23/0x250 [ 376.812532][T13238] ? __pfx___request_module+0x10/0x10 [ 376.812571][T13238] ? rtnl_link_ops_get+0x23/0x250 [ 376.812592][T13238] ? rtnl_link_ops_get+0x23/0x250 [ 376.812617][T13238] ? rtnl_link_ops_get+0x215/0x250 [ 376.812644][T13238] rtnl_newlink+0x61b/0x1bd0 [ 376.812679][T13238] ? is_bpf_text_address+0x26/0x2b0 [ 376.812713][T13238] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.812754][T13238] ? __lock_acquire+0x683/0x2cd0 [ 376.812786][T13238] ? __lock_acquire+0x683/0x2cd0 [ 376.812812][T13238] ? arch_stack_walk+0xfb/0x150 [ 376.812848][T13238] ? unwind_next_frame+0x8f/0x2550 [ 376.812882][T13238] ? is_bpf_text_address+0x26/0x2b0 [ 376.812921][T13238] ? __lock_acquire+0x683/0x2cd0 [ 376.812951][T13238] ? kernel_text_address+0xa5/0xe0 [ 376.812983][T13238] ? __kernel_text_address+0xd/0x30 [ 376.813013][T13238] ? unwind_get_return_address+0x4d/0x90 [ 376.813039][T13238] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.813072][T13238] ? arch_stack_walk+0xfb/0x150 [ 376.813106][T13238] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 376.813157][T13238] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.813190][T13238] rtnetlink_rcv_msg+0x802/0xc00 [ 376.813222][T13238] ? kasan_save_track+0x3e/0x80 [ 376.813256][T13238] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 376.813290][T13238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.813327][T13238] ? __lock_acquire+0x683/0x2cd0 [ 376.813363][T13238] netlink_rcv_skb+0x226/0x4a0 [ 376.813389][T13238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.813433][T13238] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.813471][T13238] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.813495][T13238] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.813531][T13238] netlink_unicast+0x7bb/0x940 [ 376.813577][T13238] netlink_sendmsg+0x813/0xb40 [ 376.813613][T13238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.813642][T13238] ? aa_sock_msg_perm+0xf1/0x1b0 [ 376.813676][T13238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.813704][T13238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.813730][T13238] ____sys_sendmsg+0x9b9/0xa20 [ 376.813755][T13238] ? __might_fault+0xaf/0x130 [ 376.813790][T13238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.813824][T13238] ? import_iovec+0x73/0xa0 [ 376.813853][T13238] ___sys_sendmsg+0x2a5/0x360 [ 376.813876][T13238] ? __lock_acquire+0x683/0x2cd0 [ 376.813903][T13238] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.813965][T13238] ? __fget_files+0x2a/0x420 [ 376.813992][T13238] ? __fget_files+0x3a2/0x420 [ 376.814030][T13238] __x64_sys_sendmsg+0x1bd/0x2a0 [ 376.814058][T13238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.814093][T13238] ? __pfx_ksys_write+0x10/0x10 [ 376.814134][T13238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.814159][T13238] do_syscall_64+0x174/0x580 [ 376.814185][T13238] ? trace_irq_disable+0x3b/0x140 [ 376.814219][T13238] ? clear_bhb_loop+0x40/0x90 [ 376.814247][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.814270][T13238] RIP: 0033:0x7f919599ce59 [ 376.814292][T13238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.814312][T13238] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.814335][T13238] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 376.814352][T13238] RDX: 0000000004004850 RSI: 0000200000000140 RDI: 0000000000000005 [ 376.814366][T13238] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 376.814379][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.814392][T13238] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 376.814435][T13238] [ 377.361108][T13228] veth0_vlan: left promiscuous mode [ 377.456927][ T143] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.472365][ T143] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.487672][ T143] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.496604][ T143] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.505107][ T143] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.513522][ T143] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.522796][ T143] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.531379][ T143] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.754018][T13250] FAULT_INJECTION: forcing a failure. [ 377.754018][T13250] name failslab, interval 1, probability 0, space 0, times 0 [ 377.811175][T13250] CPU: 1 UID: 0 PID: 13250 Comm: syz.1.2231 Not tainted syzkaller #0 PREEMPT(full) [ 377.811208][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.811222][T13250] Call Trace: [ 377.811232][T13250] [ 377.811242][T13250] dump_stack_lvl+0xe8/0x150 [ 377.811276][T13250] should_fail_ex+0x40c/0x560 [ 377.811319][T13250] should_failslab+0xa8/0x100 [ 377.811358][T13250] __kmalloc_noprof+0xe8/0x750 [ 377.811390][T13250] ? tun_set_link_ksettings+0x29/0x40 [ 377.811424][T13250] ? ethnl_default_notify+0x1ab/0xb00 [ 377.811559][T13250] ethnl_default_notify+0x1ab/0xb00 [ 377.811594][T13250] ? __pfx_ethnl_set_linkmodes+0x10/0x10 [ 377.811630][T13250] ? __pfx_ethnl_default_notify+0x10/0x10 [ 377.811657][T13250] ? rcu_is_watching+0x15/0xb0 [ 377.811699][T13250] ? mutex_is_locked+0x17/0x50 [ 377.811726][T13250] ? rtnl_is_locked+0x15/0x20 [ 377.811750][T13250] ? ethnl_notify+0x1a3/0x300 [ 377.811780][T13250] ethnl_default_set_doit+0xab8/0xfe0 [ 377.811821][T13250] genl_family_rcv_msg_doit+0x233/0x340 [ 377.811871][T13250] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 377.811917][T13250] ? bpf_lsm_capable+0x9/0x20 [ 377.811939][T13250] ? security_capable+0x7e/0x2c0 [ 377.812048][T13250] genl_rcv_msg+0x614/0x7a0 [ 377.812087][T13250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.812116][T13250] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 377.812162][T13250] netlink_rcv_skb+0x226/0x4a0 [ 377.812187][T13250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.812220][T13250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.812262][T13250] ? down_read+0x270/0x2e0 [ 377.812289][T13250] ? genl_rcv+0xd/0x40 [ 377.812320][T13250] genl_rcv+0x28/0x40 [ 377.812349][T13250] netlink_unicast+0x7bb/0x940 [ 377.812397][T13250] netlink_sendmsg+0x813/0xb40 [ 377.812434][T13250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.812464][T13250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 377.812500][T13250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.812528][T13250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.812556][T13250] ____sys_sendmsg+0x9b9/0xa20 [ 377.812582][T13250] ? __might_fault+0xaf/0x130 [ 377.812619][T13250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.812653][T13250] ? import_iovec+0x73/0xa0 [ 377.812683][T13250] ___sys_sendmsg+0x2a5/0x360 [ 377.812706][T13250] ? __lock_acquire+0x683/0x2cd0 [ 377.812734][T13250] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.812798][T13250] ? __fget_files+0x2a/0x420 [ 377.812826][T13250] ? __fget_files+0x3a2/0x420 [ 377.812874][T13250] __x64_sys_sendmsg+0x1bd/0x2a0 [ 377.812902][T13250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.812938][T13250] ? __pfx_ksys_write+0x10/0x10 [ 377.812982][T13250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.813007][T13250] do_syscall_64+0x174/0x580 [ 377.813032][T13250] ? trace_irq_disable+0x3b/0x140 [ 377.813066][T13250] ? clear_bhb_loop+0x40/0x90 [ 377.813094][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.813118][T13250] RIP: 0033:0x7f25f079ce59 [ 377.813139][T13250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.813158][T13250] RSP: 002b:00007f25ee9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.813181][T13250] RAX: ffffffffffffffda RBX: 00007f25f0a15fa0 RCX: 00007f25f079ce59 [ 377.813199][T13250] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 377.813213][T13250] RBP: 00007f25ee9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 377.813228][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.813241][T13250] R13: 00007f25f0a16038 R14: 00007f25f0a15fa0 R15: 00007ffcf8246e58 [ 377.813278][T13250] [ 378.571681][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.685465][T13256] syzkaller1: entered promiscuous mode [ 378.694033][T13256] syzkaller1: entered allmulticast mode [ 378.853562][T13271] netlink: 'syz.2.2233': attribute type 12 has an invalid length. [ 378.862008][T13271] netlink: 'syz.2.2233': attribute type 29 has an invalid length. [ 379.168686][T13299] syzkaller0: entered promiscuous mode [ 379.178823][T13299] syzkaller0: entered allmulticast mode [ 379.873463][T13332] bridge7: entered promiscuous mode [ 379.879074][T13332] bridge7: entered allmulticast mode [ 380.689487][T13354] FAULT_INJECTION: forcing a failure. [ 380.689487][T13354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.750271][T13354] CPU: 1 UID: 0 PID: 13354 Comm: syz.4.2246 Not tainted syzkaller #0 PREEMPT(full) [ 380.750302][T13354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.750317][T13354] Call Trace: [ 380.750326][T13354] [ 380.750336][T13354] dump_stack_lvl+0xe8/0x150 [ 380.750369][T13354] should_fail_ex+0x40c/0x560 [ 380.750411][T13354] _copy_from_user+0x2d/0xb0 [ 380.750438][T13354] ___sys_sendmsg+0x1c6/0x360 [ 380.750462][T13354] ? __lock_acquire+0x683/0x2cd0 [ 380.750491][T13354] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.750551][T13354] ? __fget_files+0x2a/0x420 [ 380.750578][T13354] ? __fget_files+0x3a2/0x420 [ 380.750616][T13354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 380.750643][T13354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.750677][T13354] ? __pfx_ksys_write+0x10/0x10 [ 380.750730][T13354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.750755][T13354] do_syscall_64+0x174/0x580 [ 380.750783][T13354] ? clear_bhb_loop+0x40/0x90 [ 380.750811][T13354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.750834][T13354] RIP: 0033:0x7f88a939ce59 [ 380.750856][T13354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.750875][T13354] RSP: 002b:00007f88aa1bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.750899][T13354] RAX: ffffffffffffffda RBX: 00007f88a9615fa0 RCX: 00007f88a939ce59 [ 380.750916][T13354] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 380.750930][T13354] RBP: 00007f88aa1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 380.750943][T13354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.750955][T13354] R13: 00007f88a9616038 R14: 00007f88a9615fa0 R15: 00007ffc220b4678 [ 380.750989][T13354] [ 381.000909][T13363] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 381.009032][T13363] __nla_validate_parse: 5 callbacks suppressed [ 381.009052][T13363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2249'. [ 381.624093][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2251'. [ 383.173793][T13389] netlink: 'syz.4.2254': attribute type 12 has an invalid length. [ 383.182251][T13389] netlink: 'syz.4.2254': attribute type 29 has an invalid length. [ 383.190338][T13389] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2254'. [ 383.199594][T13389] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2254'. [ 383.476422][T13403] tap0: tun_chr_ioctl cmd 1074025672 [ 383.554591][T13403] tap0: ignored: set checksum disabled [ 383.707220][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 384.101526][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 384.677784][T13490] netlink: 'syz.4.2262': attribute type 1 has an invalid length. [ 384.705940][T13490] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2262'. [ 384.734842][T13497] unsupported nlmsg_type 40 [ 384.779993][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2263'. [ 384.792339][T13491] netlink: 'syz.0.2261': attribute type 1 has an invalid length. [ 384.857797][T13491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.155374][T13487] lo speed is unknown, defaulting to 1000 [ 385.509951][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'. [ 385.559113][T13511] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 385.567275][T13512] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 385.718501][T13514] bond5: (slave bridge8): making interface the new active one [ 385.729291][T13514] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 385.740398][T13511] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2270'. [ 385.756038][T13511] bond5: entered promiscuous mode [ 385.761853][T13511] bridge8: entered promiscuous mode [ 385.767475][T13511] bond5: entered allmulticast mode [ 385.775157][T13511] bridge8: entered allmulticast mode [ 385.782199][T13511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.077455][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'. [ 386.115213][T13529] tap0: tun_chr_ioctl cmd 1074025672 [ 386.130175][T13529] tap0: ignored: set checksum disabled [ 386.164387][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 386.607899][T13543] FAULT_INJECTION: forcing a failure. [ 386.607899][T13543] name failslab, interval 1, probability 0, space 0, times 0 [ 386.690605][T13543] CPU: 1 UID: 0 PID: 13543 Comm: syz.1.2279 Not tainted syzkaller #0 PREEMPT(full) [ 386.690637][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.690661][T13543] Call Trace: [ 386.690670][T13543] [ 386.690680][T13543] dump_stack_lvl+0xe8/0x150 [ 386.690712][T13543] should_fail_ex+0x40c/0x560 [ 386.690753][T13543] should_failslab+0xa8/0x100 [ 386.690791][T13543] __kmalloc_noprof+0xe8/0x750 [ 386.690822][T13543] ? is_bpf_text_address+0x26/0x2b0 [ 386.690845][T13543] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 386.690885][T13543] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 386.690927][T13543] genl_family_rcv_msg_doit+0xda/0x340 [ 386.690965][T13543] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 386.691006][T13543] ? apparmor_capable+0x126/0x170 [ 386.691034][T13543] ? bpf_lsm_capable+0x9/0x20 [ 386.691055][T13543] ? security_capable+0x7e/0x2c0 [ 386.691093][T13543] genl_rcv_msg+0x614/0x7a0 [ 386.691131][T13543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.691160][T13543] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 386.691189][T13543] ? __pfx_nl80211_set_station+0x10/0x10 [ 386.691223][T13543] ? __pfx_nl80211_post_doit+0x10/0x10 [ 386.691270][T13543] netlink_rcv_skb+0x226/0x4a0 [ 386.691297][T13543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.691330][T13543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.691372][T13543] ? down_read+0x270/0x2e0 [ 386.691399][T13543] ? genl_rcv+0xd/0x40 [ 386.691429][T13543] genl_rcv+0x28/0x40 [ 386.691458][T13543] netlink_unicast+0x7bb/0x940 [ 386.691504][T13543] netlink_sendmsg+0x813/0xb40 [ 386.691540][T13543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.691568][T13543] ? aa_sock_msg_perm+0xf1/0x1b0 [ 386.691602][T13543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.691631][T13543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.691667][T13543] ____sys_sendmsg+0x9b9/0xa20 [ 386.691692][T13543] ? __might_fault+0xaf/0x130 [ 386.691727][T13543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.691760][T13543] ? import_iovec+0x73/0xa0 [ 386.691789][T13543] ___sys_sendmsg+0x2a5/0x360 [ 386.691812][T13543] ? __lock_acquire+0x683/0x2cd0 [ 386.691840][T13543] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.691902][T13543] ? __fget_files+0x2a/0x420 [ 386.691929][T13543] ? __fget_files+0x3a2/0x420 [ 386.691968][T13543] __x64_sys_sendmsg+0x1bd/0x2a0 [ 386.691996][T13543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.692034][T13543] ? __pfx_ksys_write+0x10/0x10 [ 386.692077][T13543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.692102][T13543] do_syscall_64+0x174/0x580 [ 386.692126][T13543] ? trace_irq_disable+0x3b/0x140 [ 386.692160][T13543] ? clear_bhb_loop+0x40/0x90 [ 386.692186][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.692209][T13543] RIP: 0033:0x7f25f079ce59 [ 386.692229][T13543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.692247][T13543] RSP: 002b:00007f25ee9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.692270][T13543] RAX: ffffffffffffffda RBX: 00007f25f0a15fa0 RCX: 00007f25f079ce59 [ 386.692285][T13543] RDX: 0000000000000040 RSI: 00002000000004c0 RDI: 0000000000000004 [ 386.692300][T13543] RBP: 00007f25ee9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 386.692314][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.692327][T13543] R13: 00007f25f0a16038 R14: 00007f25f0a15fa0 R15: 00007ffcf8246e58 [ 386.692362][T13543] [ 386.836330][T13545] netlink: 'syz.4.2280': attribute type 1 has an invalid length. [ 387.050933][T13545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2280'. [ 387.400054][T13560] FAULT_INJECTION: forcing a failure. [ 387.400054][T13560] name failslab, interval 1, probability 0, space 0, times 0 [ 387.413779][T13560] CPU: 1 UID: 0 PID: 13560 Comm: syz.3.2284 Not tainted syzkaller #0 PREEMPT(full) [ 387.413811][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.413825][T13560] Call Trace: [ 387.413834][T13560] [ 387.413844][T13560] dump_stack_lvl+0xe8/0x150 [ 387.413876][T13560] should_fail_ex+0x40c/0x560 [ 387.413919][T13560] should_failslab+0xa8/0x100 [ 387.413957][T13560] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 387.413991][T13560] ? __alloc_skb+0x1d7/0x7a0 [ 387.414024][T13560] ? __local_bh_enable_ip+0xd0/0x130 [ 387.414052][T13560] __alloc_skb+0x1d7/0x7a0 [ 387.414090][T13560] netlink_ack+0x136/0xb30 [ 387.414112][T13560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.414151][T13560] ? __pfx_nl80211_post_doit+0x10/0x10 [ 387.414198][T13560] netlink_rcv_skb+0x2a4/0x4a0 [ 387.414224][T13560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.414261][T13560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.414299][T13560] ? down_read+0x270/0x2e0 [ 387.414324][T13560] ? genl_rcv+0xd/0x40 [ 387.414353][T13560] genl_rcv+0x28/0x40 [ 387.414379][T13560] netlink_unicast+0x7bb/0x940 [ 387.414423][T13560] netlink_sendmsg+0x813/0xb40 [ 387.414459][T13560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.414487][T13560] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.414522][T13560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.414551][T13560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.414577][T13560] ____sys_sendmsg+0x9b9/0xa20 [ 387.414600][T13560] ? __might_fault+0xaf/0x130 [ 387.414633][T13560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.414664][T13560] ? import_iovec+0x73/0xa0 [ 387.414692][T13560] ___sys_sendmsg+0x2a5/0x360 [ 387.414714][T13560] ? __lock_acquire+0x683/0x2cd0 [ 387.414742][T13560] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.414799][T13560] ? __fget_files+0x2a/0x420 [ 387.414823][T13560] ? __fget_files+0x3a2/0x420 [ 387.414859][T13560] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.414884][T13560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.414917][T13560] ? __pfx_ksys_write+0x10/0x10 [ 387.414956][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.414979][T13560] do_syscall_64+0x174/0x580 [ 387.415004][T13560] ? trace_irq_disable+0x3b/0x140 [ 387.415036][T13560] ? clear_bhb_loop+0x40/0x90 [ 387.415064][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.415086][T13560] RIP: 0033:0x7f919599ce59 [ 387.415107][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.415137][T13560] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.415161][T13560] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 387.415178][T13560] RDX: 0000000000000010 RSI: 00002000000010c0 RDI: 0000000000000003 [ 387.415193][T13560] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 387.415208][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.415221][T13560] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 387.415254][T13560] [ 387.915876][T13568] sctp: [Deprecated]: syz.0.2288 (pid 13568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.915876][T13568] Use struct sctp_sack_info instead [ 388.038488][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 388.065098][T13570] tap0: tun_chr_ioctl cmd 1074025672 [ 388.070718][T13570] tap0: ignored: set checksum disabled [ 388.079335][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 388.092761][T13573] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2291'. [ 388.522807][T13595] FAULT_INJECTION: forcing a failure. [ 388.522807][T13595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.572201][T13598] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 388.585891][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.0.2298 Not tainted syzkaller #0 PREEMPT(full) [ 388.585922][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.585935][T13595] Call Trace: [ 388.585945][T13595] [ 388.585955][T13595] dump_stack_lvl+0xe8/0x150 [ 388.585987][T13595] should_fail_ex+0x40c/0x560 [ 388.586028][T13595] _copy_from_iter+0x1d3/0x1660 [ 388.586055][T13595] ? rcu_is_watching+0x15/0xb0 [ 388.586088][T13595] ? __pfx__copy_from_iter+0x10/0x10 [ 388.586108][T13595] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 388.586148][T13595] ? netlink_sendmsg+0x650/0xb40 [ 388.586174][T13595] ? skb_put+0x112/0x210 [ 388.586198][T13595] netlink_sendmsg+0x6c0/0xb40 [ 388.586233][T13595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.586262][T13595] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.586297][T13595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.586325][T13595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.586354][T13595] ____sys_sendmsg+0x9b9/0xa20 [ 388.586377][T13595] ? __might_fault+0xaf/0x130 [ 388.586413][T13595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.586448][T13595] ? import_iovec+0x73/0xa0 [ 388.586476][T13595] ___sys_sendmsg+0x2a5/0x360 [ 388.586499][T13595] ? __lock_acquire+0x683/0x2cd0 [ 388.586528][T13595] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.586598][T13595] ? __fget_files+0x2a/0x420 [ 388.586630][T13595] ? __fget_files+0x3a2/0x420 [ 388.586669][T13595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 388.586696][T13595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.586731][T13595] ? __pfx_ksys_write+0x10/0x10 [ 388.586772][T13595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.586798][T13595] do_syscall_64+0x174/0x580 [ 388.586823][T13595] ? trace_irq_disable+0x3b/0x140 [ 388.586857][T13595] ? clear_bhb_loop+0x40/0x90 [ 388.586885][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.586908][T13595] RIP: 0033:0x7f2c0c19ce59 [ 388.586928][T13595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.586945][T13595] RSP: 002b:00007f2c0d10e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.586967][T13595] RAX: ffffffffffffffda RBX: 00007f2c0c415fa0 RCX: 00007f2c0c19ce59 [ 388.586983][T13595] RDX: 000000002400c054 RSI: 0000200000000440 RDI: 0000000000000003 [ 388.586996][T13595] RBP: 00007f2c0d10e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.587008][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.587020][T13595] R13: 00007f2c0c416038 R14: 00007f2c0c415fa0 R15: 00007ffd1c1296a8 [ 388.587052][T13595] [ 388.587484][T13598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2300'. [ 388.982142][T13593] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.989599][T13593] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.214568][T13593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.256967][T13593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.423814][T13593] veth1_vlan: left allmulticast mode [ 389.674270][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.695687][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.723992][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.748813][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.767574][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.796125][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.838270][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.873105][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.933794][T13620] sctp: [Deprecated]: syz.2.2304 (pid 13620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.933794][T13620] Use struct sctp_sack_info instead [ 390.336272][T13635] netlink: 'syz.2.2310': attribute type 5 has an invalid length. [ 390.521465][T13642] netlink: 'syz.2.2310': attribute type 13 has an invalid length. [ 390.582025][T13646] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2314'. [ 391.567570][T13671] sctp: [Deprecated]: syz.4.2320 (pid 13671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.567570][T13671] Use struct sctp_sack_info instead [ 391.932178][T13682] FAULT_INJECTION: forcing a failure. [ 391.932178][T13682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.965871][T13682] CPU: 0 UID: 0 PID: 13682 Comm: syz.4.2323 Not tainted syzkaller #0 PREEMPT(full) [ 391.965903][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.965917][T13682] Call Trace: [ 391.965926][T13682] [ 391.965936][T13682] dump_stack_lvl+0xe8/0x150 [ 391.965968][T13682] should_fail_ex+0x40c/0x560 [ 391.966008][T13682] _copy_to_user+0x31/0xb0 [ 391.966038][T13682] simple_read_from_buffer+0xe1/0x170 [ 391.966072][T13682] proc_fail_nth_read+0x1bb/0x230 [ 391.966106][T13682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.966140][T13682] ? rw_verify_area+0x24a/0x4c0 [ 391.966174][T13682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.966213][T13682] vfs_read+0x213/0xa80 [ 391.966252][T13682] ? __pfx___mutex_lock+0x10/0x10 [ 391.966281][T13682] ? __pfx_vfs_read+0x10/0x10 [ 391.966315][T13682] ? __fget_files+0x2a/0x420 [ 391.966348][T13682] ? __fget_files+0x3a2/0x420 [ 391.966374][T13682] ? __fget_files+0x2a/0x420 [ 391.966417][T13682] ksys_read+0x150/0x270 [ 391.966451][T13682] ? __pfx_ksys_read+0x10/0x10 [ 391.966491][T13682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.966516][T13682] do_syscall_64+0x174/0x580 [ 391.966542][T13682] ? trace_irq_disable+0x3b/0x140 [ 391.966576][T13682] ? clear_bhb_loop+0x40/0x90 [ 391.966604][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.966627][T13682] RIP: 0033:0x7f88a935d68e [ 391.966649][T13682] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 391.966669][T13682] RSP: 002b:00007f88aa1bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.966693][T13682] RAX: ffffffffffffffda RBX: 00007f88aa1bc6c0 RCX: 00007f88a935d68e [ 391.966709][T13682] RDX: 000000000000000f RSI: 00007f88aa1bc0a0 RDI: 0000000000000009 [ 391.966724][T13682] RBP: 00007f88aa1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 391.966738][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.966751][T13682] R13: 00007f88a9616038 R14: 00007f88a9615fa0 R15: 00007ffc220b4678 [ 391.966787][T13682] [ 392.298240][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 392.351942][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2327'. [ 392.561272][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2329'. [ 392.864078][T13705] sctp: [Deprecated]: syz.3.2333 (pid 13705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.864078][T13705] Use struct sctp_sack_info instead [ 392.941636][T13710] netlink: 'syz.2.2334': attribute type 6 has an invalid length. [ 393.196433][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 393.206334][T13714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2337'. [ 393.437861][T13724] syzkaller1: entered promiscuous mode [ 393.461961][T13724] syzkaller1: entered allmulticast mode [ 393.663406][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2343'. [ 394.041597][T13737] syzkaller0: entered promiscuous mode [ 394.058898][T13737] syzkaller0: entered allmulticast mode [ 394.067853][T13739] sctp: [Deprecated]: syz.1.2347 (pid 13739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.067853][T13739] Use struct sctp_sack_info instead [ 394.106880][T13737] tipc: Enabled bearer , priority 0 [ 394.131183][T13735] tipc: Resetting bearer [ 394.184094][T13735] tipc: Disabling bearer [ 394.405073][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 394.561751][T13760] sock: sock_timestamping_bind_phc: sock not bind to device [ 394.670184][T13762] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2356'. [ 394.777251][T13764] vlan2: entered promiscuous mode [ 394.784132][T13764] bridge0: entered promiscuous mode [ 395.475851][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 395.509019][T13776] netlink: 'syz.1.2360': attribute type 1 has an invalid length. [ 395.542770][T13776] netlink: 380 bytes leftover after parsing attributes in process `syz.1.2360'. [ 395.712137][T13793] sctp: [Deprecated]: syz.0.2362 (pid 13793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.712137][T13793] Use struct sctp_sack_info instead [ 395.956555][T13798] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 395.998041][T13798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.355253][T13803] syzkaller0: entered promiscuous mode [ 396.369071][T13803] syzkaller0: entered allmulticast mode [ 396.779507][T13812] Bluetooth: MGMT ver 1.23 [ 398.088449][T13825] __nla_validate_parse: 3 callbacks suppressed [ 398.088469][T13825] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2373'. [ 398.922860][T13796] lo speed is unknown, defaulting to 1000 [ 399.093293][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 399.104038][T13830] FAULT_INJECTION: forcing a failure. [ 399.104038][T13830] name failslab, interval 1, probability 0, space 0, times 0 [ 399.120743][T13830] CPU: 1 UID: 0 PID: 13830 Comm: syz.3.2374 Not tainted syzkaller #0 PREEMPT(full) [ 399.120772][T13830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.120787][T13830] Call Trace: [ 399.120797][T13830] [ 399.120806][T13830] dump_stack_lvl+0xe8/0x150 [ 399.120839][T13830] should_fail_ex+0x40c/0x560 [ 399.120881][T13830] should_failslab+0xa8/0x100 [ 399.120919][T13830] __kmalloc_cache_noprof+0x88/0x660 [ 399.120951][T13830] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 399.121078][T13830] ? sctp_add_bind_addr+0x8c/0x370 [ 399.121149][T13830] sctp_add_bind_addr+0x8c/0x370 [ 399.121189][T13830] sctp_copy_local_addr_list+0x31a/0x4e0 [ 399.121226][T13830] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 399.121260][T13830] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 399.121296][T13830] ? sctp_v6_is_any+0x64/0x80 [ 399.121352][T13830] ? sctp_copy_one_addr+0x93/0x360 [ 399.121401][T13830] sctp_bind_addr_copy+0xb3/0x3c0 [ 399.121436][T13830] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 399.121495][T13830] sctp_connect_new_asoc+0x2ff/0x6b0 [ 399.121555][T13830] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 399.121590][T13830] ? __local_bh_enable_ip+0xd0/0x130 [ 399.121612][T13830] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 399.121644][T13830] ? security_sctp_bind_connect+0x7e/0x2c0 [ 399.121705][T13830] sctp_sendmsg+0x159b/0x2d00 [ 399.121747][T13830] ? __pfx_sctp_sendmsg+0x10/0x10 [ 399.121776][T13830] ? aa_sk_perm+0x6d5/0x900 [ 399.121816][T13830] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.121850][T13830] ? sock_rps_record_flow+0x19/0x350 [ 399.121960][T13830] ? inet_sendmsg+0x298/0x320 [ 399.121992][T13830] ? __pfx_inet_sendmsg+0x10/0x10 [ 399.122025][T13830] ____sys_sendmsg+0x853/0xa20 [ 399.122060][T13830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.122095][T13830] ? import_iovec+0x73/0xa0 [ 399.122133][T13830] ___sys_sendmsg+0x2a5/0x360 [ 399.122157][T13830] ? __lock_acquire+0x683/0x2cd0 [ 399.122186][T13830] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.122248][T13830] ? __fget_files+0x2a/0x420 [ 399.122276][T13830] ? __fget_files+0x3a2/0x420 [ 399.122314][T13830] __x64_sys_sendmsg+0x1bd/0x2a0 [ 399.122342][T13830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.122376][T13830] ? __pfx_ksys_write+0x10/0x10 [ 399.122417][T13830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.122443][T13830] do_syscall_64+0x174/0x580 [ 399.122468][T13830] ? trace_irq_disable+0x3b/0x140 [ 399.122503][T13830] ? clear_bhb_loop+0x40/0x90 [ 399.122530][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.122553][T13830] RIP: 0033:0x7f919599ce59 [ 399.122574][T13830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.122593][T13830] RSP: 002b:00007f919680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.122617][T13830] RAX: ffffffffffffffda RBX: 00007f9195c15fa0 RCX: 00007f919599ce59 [ 399.122633][T13830] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 399.122647][T13830] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 399.122662][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.122675][T13830] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 399.122709][T13830] [ 399.528468][T13837] sctp: [Deprecated]: syz.3.2378 (pid 13837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.528468][T13837] Use struct sctp_sack_info instead [ 399.985446][T13851] FAULT_INJECTION: forcing a failure. [ 399.985446][T13851] name failslab, interval 1, probability 0, space 0, times 0 [ 400.002787][T13851] CPU: 0 UID: 0 PID: 13851 Comm: syz.1.2383 Not tainted syzkaller #0 PREEMPT(full) [ 400.002818][T13851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.002833][T13851] Call Trace: [ 400.002843][T13851] [ 400.002853][T13851] dump_stack_lvl+0xe8/0x150 [ 400.002885][T13851] should_fail_ex+0x40c/0x560 [ 400.002928][T13851] should_failslab+0xa8/0x100 [ 400.002964][T13851] ? security_inode_alloc+0x39/0x310 [ 400.002999][T13851] kmem_cache_alloc_noprof+0x87/0x650 [ 400.003039][T13851] security_inode_alloc+0x39/0x310 [ 400.003091][T13851] inode_init_always_gfp+0x97e/0xd30 [ 400.003123][T13851] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 400.003151][T13851] alloc_inode+0x82/0x1b0 [ 400.003178][T13851] new_inode+0x1f/0x170 [ 400.003209][T13851] __debugfs_create_file+0xb8/0x400 [ 400.003240][T13851] debugfs_create_file_full+0x3f/0x60 [ 400.003271][T13851] ref_tracker_dir_debugfs+0x197/0x360 [ 400.003297][T13851] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 400.003353][T13851] ? __kvmalloc_node_noprof+0x53d/0x890 [ 400.003386][T13851] ? alloc_netdev_mqs+0xa9/0x1220 [ 400.003418][T13851] ? __raw_spin_lock_init+0x45/0x100 [ 400.003453][T13851] alloc_netdev_mqs+0x275/0x1220 [ 400.003479][T13851] ? __pfx_snprintf+0x10/0x10 [ 400.003511][T13851] ? __pfx_br_dev_setup+0x10/0x10 [ 400.003542][T13851] rtnl_create_link+0x321/0xd70 [ 400.003579][T13851] rtnl_newlink_create+0x25f/0xb00 [ 400.003615][T13851] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 400.003644][T13851] ? __pfx___mutex_lock+0x10/0x10 [ 400.003683][T13851] ? ns_capable+0x89/0xe0 [ 400.003710][T13851] rtnl_newlink+0x167f/0x1bd0 [ 400.003763][T13851] ? __pfx_rtnl_newlink+0x10/0x10 [ 400.003803][T13851] ? __lock_acquire+0x683/0x2cd0 [ 400.003834][T13851] ? __lock_acquire+0x683/0x2cd0 [ 400.003863][T13851] ? arch_stack_walk+0xfb/0x150 [ 400.003900][T13851] ? unwind_next_frame+0x8f/0x2550 [ 400.003937][T13851] ? is_bpf_text_address+0x26/0x2b0 [ 400.003978][T13851] ? __lock_acquire+0x683/0x2cd0 [ 400.004009][T13851] ? kernel_text_address+0xa5/0xe0 [ 400.004048][T13851] ? __kernel_text_address+0xd/0x30 [ 400.004086][T13851] ? unwind_get_return_address+0x4d/0x90 [ 400.004112][T13851] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.004145][T13851] ? arch_stack_walk+0xfb/0x150 [ 400.004180][T13851] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 400.004235][T13851] ? __pfx_rtnl_newlink+0x10/0x10 [ 400.004268][T13851] rtnetlink_rcv_msg+0x802/0xc00 [ 400.004300][T13851] ? kasan_save_track+0x3e/0x80 [ 400.004334][T13851] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 400.004369][T13851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 400.004406][T13851] ? __lock_acquire+0x683/0x2cd0 [ 400.004444][T13851] netlink_rcv_skb+0x226/0x4a0 [ 400.004472][T13851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 400.004509][T13851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.004548][T13851] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.004572][T13851] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.004604][T13851] netlink_unicast+0x7bb/0x940 [ 400.004651][T13851] netlink_sendmsg+0x813/0xb40 [ 400.004688][T13851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.004717][T13851] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.004752][T13851] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.004781][T13851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.004809][T13851] ____sys_sendmsg+0x9b9/0xa20 [ 400.004833][T13851] ? __might_fault+0xaf/0x130 [ 400.004869][T13851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.004904][T13851] ? import_iovec+0x73/0xa0 [ 400.004935][T13851] ___sys_sendmsg+0x2a5/0x360 [ 400.004959][T13851] ? __lock_acquire+0x683/0x2cd0 [ 400.004987][T13851] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.005048][T13851] ? __fget_files+0x2a/0x420 [ 400.005082][T13851] ? __fget_files+0x3a2/0x420 [ 400.005122][T13851] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.005150][T13851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.005186][T13851] ? __pfx_ksys_write+0x10/0x10 [ 400.005228][T13851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.005254][T13851] do_syscall_64+0x174/0x580 [ 400.005278][T13851] ? trace_irq_disable+0x3b/0x140 [ 400.005311][T13851] ? clear_bhb_loop+0x40/0x90 [ 400.005339][T13851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.005362][T13851] RIP: 0033:0x7f25f079ce59 [ 400.005384][T13851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.005404][T13851] RSP: 002b:00007f25ee9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.005429][T13851] RAX: ffffffffffffffda RBX: 00007f25f0a15fa0 RCX: 00007f25f079ce59 [ 400.005445][T13851] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 400.005460][T13851] RBP: 00007f25ee9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 400.005474][T13851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.005487][T13851] R13: 00007f25f0a16038 R14: 00007f25f0a15fa0 R15: 00007ffcf8246e58 [ 400.005524][T13851] [ 400.005625][T13851] debugfs: out of free dentries, can not create file 'netdev@ffff88805317c6a8' [ 400.495722][ T1645] block nbd0: Possible stuck request ffff8880270ae000: control (read@0,2048B). Runtime 30 seconds [ 400.700534][T13834] lo speed is unknown, defaulting to 1000 [ 400.907030][T13869] FAULT_INJECTION: forcing a failure. [ 400.907030][T13869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.942132][T13868] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2390'. [ 400.952381][T13869] CPU: 0 UID: 0 PID: 13869 Comm: syz.3.2389 Not tainted syzkaller #0 PREEMPT(full) [ 400.952411][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.952425][T13869] Call Trace: [ 400.952434][T13869] [ 400.952444][T13869] dump_stack_lvl+0xe8/0x150 [ 400.952476][T13869] should_fail_ex+0x40c/0x560 [ 400.952517][T13869] _copy_from_user+0x2d/0xb0 [ 400.952545][T13869] kstrtouint_from_user+0xd6/0x180 [ 400.952584][T13869] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 400.952638][T13869] proc_fail_nth_write+0x8e/0x210 [ 400.952667][T13869] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 400.952715][T13869] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 400.952743][T13869] vfs_write+0x296/0xba0 [ 400.952786][T13869] ? __pfx_vfs_write+0x10/0x10 [ 400.952820][T13869] ? __fget_files+0x2a/0x420 [ 400.952853][T13869] ? __fget_files+0x3a2/0x420 [ 400.952880][T13869] ? __fget_files+0x2a/0x420 [ 400.952918][T13869] ksys_write+0x150/0x270 [ 400.952953][T13869] ? __pfx_ksys_write+0x10/0x10 [ 400.952998][T13869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.953022][T13869] do_syscall_64+0x174/0x580 [ 400.953049][T13869] ? trace_irq_disable+0x3b/0x140 [ 400.953083][T13869] ? clear_bhb_loop+0x40/0x90 [ 400.953111][T13869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.953134][T13869] RIP: 0033:0x7f919595d68e [ 400.953155][T13869] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.953183][T13869] RSP: 002b:00007f919680bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.953206][T13869] RAX: ffffffffffffffda RBX: 00007f919680c6c0 RCX: 00007f919595d68e [ 400.953224][T13869] RDX: 0000000000000001 RSI: 00007f919680c0a0 RDI: 0000000000000004 [ 400.953238][T13869] RBP: 00007f919680c090 R08: 0000000000000000 R09: 0000000000000000 [ 400.953252][T13869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.953265][T13869] R13: 00007f9195c16038 R14: 00007f9195c15fa0 R15: 00007ffcdc4164c8 [ 400.953301][T13869] [ 400.965777][T13871] sctp: [Deprecated]: syz.0.2391 (pid 13871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.965777][T13871] Use struct sctp_sack_info instead [ 401.264967][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 401.312100][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 402.003347][T13897] team0: Port device xfrm0 removed [ 402.019271][T13897] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 402.481008][T13909] netlink: 'syz.0.2403': attribute type 13 has an invalid length. [ 402.489513][T13909] netlink: 'syz.0.2403': attribute type 17 has an invalid length. [ 403.059115][T13902] vlan0: entered promiscuous mode [ 403.183231][T13909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.193035][T13909] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.207156][T13909] [ 403.209537][T13909] ============================================ [ 403.215772][T13909] WARNING: possible recursive locking detected [ 403.222059][T13909] syzkaller #0 Not tainted [ 403.226519][T13909] -------------------------------------------- [ 403.232718][T13909] syz.0.2403/13909 is trying to acquire lock: [ 403.238834][T13909] ffff888076846e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 403.250085][T13909] [ 403.250085][T13909] but task is already holding lock: [ 403.257476][T13909] ffff888076846e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 403.267210][T13909] and the lock comparison function returns 0: [ 403.273287][T13909] [ 403.273287][T13909] other info that might help us debug this: [ 403.281362][T13909] Possible unsafe locking scenario: [ 403.281362][T13909] [ 403.288976][T13909] CPU0 [ 403.292278][T13909] ---- [ 403.295567][T13909] lock(&dev_instance_lock_key#3); [ 403.300840][T13909] lock(&dev_instance_lock_key#3); [ 403.306072][T13909] [ 403.306072][T13909] *** DEADLOCK *** [ 403.306072][T13909] [ 403.314230][T13909] May be due to missing lock nesting notation [ 403.314230][T13909] [ 403.322613][T13909] 2 locks held by syz.0.2403/13909: [ 403.327836][T13909] #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 403.336940][T13909] #1: ffff888076846e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 403.347064][T13909] [ 403.347064][T13909] stack backtrace: [ 403.352970][T13909] CPU: 1 UID: 0 PID: 13909 Comm: syz.0.2403 Not tainted syzkaller #0 PREEMPT(full) [ 403.352993][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.353005][T13909] Call Trace: [ 403.353013][T13909] [ 403.353022][T13909] dump_stack_lvl+0xe8/0x150 [ 403.353046][T13909] print_deadlock_bug+0x279/0x290 [ 403.353071][T13909] __lock_acquire+0x24bf/0x2cd0 [ 403.353090][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.353109][T13909] ? rtnl_newlink+0x148e/0x1bd0 [ 403.353138][T13909] ? rtnetlink_rcv_msg+0x802/0xc00 [ 403.353165][T13909] ? netlink_rcv_skb+0x226/0x4a0 [ 403.353183][T13909] ? netlink_unicast+0x7bb/0x940 [ 403.353210][T13909] ? netlink_sendmsg+0x813/0xb40 [ 403.353228][T13909] ? ____sys_sendmsg+0x9b9/0xa20 [ 403.353246][T13909] ? ___sys_sendmsg+0x2a5/0x360 [ 403.353263][T13909] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 403.353280][T13909] ? do_syscall_64+0x174/0x580 [ 403.353302][T13909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.353324][T13909] ? __ethtool_get_link_ksettings+0x109/0x250 [ 403.353349][T13909] lock_acquire+0x106/0x350 [ 403.353368][T13909] ? __ethtool_get_link_ksettings+0x109/0x250 [ 403.353398][T13909] __mutex_lock+0x19d/0x1590 [ 403.353420][T13909] ? __ethtool_get_link_ksettings+0x109/0x250 [ 403.353444][T13909] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.353464][T13909] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.353484][T13909] ? __wake_up_common_lock+0x195/0x1f0 [ 403.353513][T13909] ? __ethtool_get_link_ksettings+0x109/0x250 [ 403.353539][T13909] ? __pfx___mutex_lock+0x10/0x10 [ 403.353564][T13909] ? igmp_group_added+0x238/0x910 [ 403.353584][T13909] ? igmpv3_del_delrec+0x204/0x710 [ 403.353604][T13909] __ethtool_get_link_ksettings+0x109/0x250 [ 403.353632][T13909] bond_netdev_event+0x643/0xf80 [ 403.353747][T13909] ? __pfx_bond_netdev_event+0x10/0x10 [ 403.353778][T13909] ? ipmr_device_event+0x1f6/0x220 [ 403.353851][T13909] notifier_call_chain+0x1a5/0x3d0 [ 403.353878][T13909] __dev_notify_flags+0x1aa/0x310 [ 403.353897][T13909] ? __pfx___dev_notify_flags+0x10/0x10 [ 403.353913][T13909] ? __dev_change_flags+0x5f1/0x820 [ 403.353932][T13909] ? __pfx___dev_change_flags+0x10/0x10 [ 403.353954][T13909] netif_change_flags+0xde/0x1b0 [ 403.353972][T13909] dev_change_flags+0x128/0x260 [ 403.354003][T13909] vlan_device_event+0x1b4e/0x1f00 [ 403.354056][T13909] ? packet_notifier+0xf1b/0xf70 [ 403.354076][T13909] ? br_device_event+0x282/0x9c0 [ 403.354094][T13909] ? __pfx_phonet_device_notify+0x10/0x10 [ 403.354133][T13909] ? __pfx_vlan_device_event+0x10/0x10 [ 403.354152][T13909] ? bcm_notifier+0xa9/0x890 [ 403.354197][T13909] ? raw_notifier+0x9d/0x7d0 [ 403.354242][T13909] ? cgw_notifier+0x314/0x380 [ 403.354261][T13909] notifier_call_chain+0x1a5/0x3d0 [ 403.354287][T13909] __dev_notify_flags+0x1aa/0x310 [ 403.354306][T13909] ? __pfx___dev_notify_flags+0x10/0x10 [ 403.354322][T13909] ? __dev_change_flags+0x5f1/0x820 [ 403.354341][T13909] ? __pfx___dev_change_flags+0x10/0x10 [ 403.354362][T13909] ? __local_bh_enable_ip+0xd0/0x130 [ 403.354382][T13909] netif_change_flags+0xde/0x1b0 [ 403.354401][T13909] do_setlink+0xdd6/0x4670 [ 403.354424][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.354443][T13909] ? __pfx_do_setlink+0x10/0x10 [ 403.354461][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.354480][T13909] ? irqentry_exit+0x218/0x8e0 [ 403.354499][T13909] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.354519][T13909] ? irqentry_exit+0x218/0x8e0 [ 403.354543][T13909] ? do_raw_spin_lock+0x12b/0x2f0 [ 403.354576][T13909] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.354595][T13909] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.354616][T13909] ? __mutex_lock+0x10ab/0x1590 [ 403.354639][T13909] ? __mutex_lock+0x5c5/0x1590 [ 403.354662][T13909] ? rtnl_newlink+0x8a3/0x1bd0 [ 403.354691][T13909] ? __pfx___mutex_lock+0x10/0x10 [ 403.354717][T13909] ? ns_capable+0x89/0xe0 [ 403.354735][T13909] ? rtnl_link_get_net_capable+0xd3/0x310 [ 403.354755][T13909] rtnl_newlink+0x148e/0x1bd0 [ 403.354790][T13909] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.354820][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.354841][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.354870][T13909] ? unwind_next_frame+0x8f/0x2550 [ 403.354895][T13909] ? is_bpf_text_address+0x26/0x2b0 [ 403.354920][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.354941][T13909] ? kernel_text_address+0xa5/0xe0 [ 403.354967][T13909] ? __kernel_text_address+0xd/0x30 [ 403.354993][T13909] ? unwind_get_return_address+0x4d/0x90 [ 403.355015][T13909] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 403.355044][T13909] ? arch_stack_walk+0xfb/0x150 [ 403.355069][T13909] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 403.355098][T13909] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.355132][T13909] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.355160][T13909] rtnetlink_rcv_msg+0x802/0xc00 [ 403.355187][T13909] ? kasan_save_track+0x3e/0x80 [ 403.355214][T13909] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 403.355243][T13909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.355272][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.355295][T13909] netlink_rcv_skb+0x226/0x4a0 [ 403.355315][T13909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.355345][T13909] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.355370][T13909] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.355389][T13909] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.355411][T13909] netlink_unicast+0x7bb/0x940 [ 403.355445][T13909] netlink_sendmsg+0x813/0xb40 [ 403.355477][T13909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.355499][T13909] ? aa_sock_msg_perm+0xf1/0x1b0 [ 403.355527][T13909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.355552][T13909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.355572][T13909] ____sys_sendmsg+0x9b9/0xa20 [ 403.355591][T13909] ? __might_fault+0xaf/0x130 [ 403.355618][T13909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.355641][T13909] ? import_iovec+0x73/0xa0 [ 403.355663][T13909] ___sys_sendmsg+0x2a5/0x360 [ 403.355681][T13909] ? __lock_acquire+0x683/0x2cd0 [ 403.355701][T13909] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.355724][T13909] ? futex_wait+0x2a2/0x390 [ 403.355770][T13909] ? __fget_files+0x2a/0x420 [ 403.355793][T13909] ? __fget_files+0x3a2/0x420 [ 403.355820][T13909] __x64_sys_sendmsg+0x1bd/0x2a0 [ 403.355840][T13909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.355868][T13909] ? rcu_is_watching+0x15/0xb0 [ 403.355893][T13909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.355912][T13909] do_syscall_64+0x174/0x580 [ 403.355932][T13909] ? trace_irq_disable+0x3b/0x140 [ 403.355960][T13909] ? clear_bhb_loop+0x40/0x90 [ 403.355980][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.355999][T13909] RIP: 0033:0x7f2c0c19ce59 [ 403.356017][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.356034][T13909] RSP: 002b:00007f2c0d0ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.356054][T13909] RAX: ffffffffffffffda RBX: 00007f2c0c416090 RCX: 00007f2c0c19ce59 [ 403.356068][T13909] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 403.356080][T13909] RBP: 00007f2c0c232d6f R08: 0000000000000000 R09: 0000000000000000 [ 403.356092][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.356103][T13909] R13: 00007f2c0c416128 R14: 00007f2c0c416090 R15: 00007ffd1c1296a8 [ 403.356126][T13909]