last executing test programs: 5.023907363s ago: executing program 2 (id=4465): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xc, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r2, 0x1}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000280)={'caif0\x00', {0x2, 0xfefe, @empty}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf2515000000050029000000000008002c000000008008000300", @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) 4.446593715s ago: executing program 2 (id=4469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83", 0x6a}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) connect$can_bcm(r4, &(0x7f0000000380), 0x10) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x44084) socket$netlink(0x10, 0x3, 0x0) 3.440578796s ago: executing program 2 (id=4478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x5000000000000, 0x0, 0x4004040}, 0x8810) accept4(r1, 0x0, 0x0, 0x0) 3.325543526s ago: executing program 3 (id=4481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="1011", 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="868218df5178d1efca6153edab4680ec6072354de694819ae33756a37a523faa4cf110db391ffe45c8f05298bd321ef486470bcb9cf85d8424f042dd67797362fdef1149e49585a88d48c9f7093d114142e558450542153b02712f07c73822582787c96c34294479758dd589d5d11e6e27d9b697ae76d923980a222e7e043de0f763a5d23e5728f132eea2c786ad088cda2d196930e1b2d0e003cc43da221a678b2ebef8c826027eeda1f541ed01947cd0083b717ff63925a31115e678e6bb1ae342599173cacfa86c7dfdece7c9e2c19b0868bfd5fa7b0dd4466641fd37b0f354e024d159b3e076241da53fa733b8cb556dbd529f47259fbaf09ae4677509c2df1d34c4138e4875da3e1db518f06d4a3cbb996c2a8b47b458d2b4b5b6d023342573a2bf285adbcd3e5531b7bf8aa3d8697cab66ddc1093e6d206bca464b8e4819b461a4402b24ee135d4ea62d4fe98642f85172a4cbd7ddb5fb18c6b000805fae0e4283939aaf963e82bbe8cda760892a070b17e554a9ecff3be42b69bf638db6328bc2227d10d7097ba01e3f59e95cbc60392d15d7c1075383d1aa23516531875254578ebb6560df7530e980e81f3cb6299072a4e4f87869130affedd856d9accdf23a6ad810c5e60c58fa5ed3d55f625742bbcbe8a853687203db06b7da0d93e23e592856b84f00ff10607ded859cb96ef345c43470666bae766fe6a9ac06e1d3485ec2cd3dd3afa21b77189a6e312d0d07ab280a8a92b3961fa74aefec8f0b6311f559cefa6e4a55ba95d7205b808bc6b512c7c08ad958f55acfd0baa7246b150ab67684c8957c2a1a4ba5be6bf61b9f05e07353d9abd7e1304a5d723e70095bd8a3ea76bba13e08e9c30c31ece0d2e45c2917143492ce9526363b0d52ad7b3ae34436e49a72dc51d3a15d88b3ead5c1fe28ba800235c84c580798b2bbe64bcea91dc29a804e501d7adae83493a716df975a99a4f667d10e7df821a24146c38095c49be95d6e063f9cdfd00c477eb26364a0b143fca9cf093ad7fe9bb3ccc208298112f4dadb410b398a880f44b53bac4b6e3bda269852cd43ea82985511ca7767bb6bc6b35d0761f064707a267c0f1d44c754fbf2e1e5c588935ed3b55174869e7a75f8b3f70fb18306702cb188977323e7efd5dccfb4b097b7cc8714b061b0970ec5a836aef7fd3502038885fc912968aafd9b248286160f82c0af814b145064186ebbc9b4eaf496493acabc7b2ba2c7022f322a1373f3bea0942f65125474a38483f2e173e8ff4ce5c0dee5bc2926a0c00640220792481b1aedecd1cd9e36663f53df6f159217f286578139fedf9d414ee99978354a68e42bda689441b659632af4493b34ea8df74b9f822c6c4dcf977b1945d55ca9ea6a069e3499fdb13e25871ec21b05246f287931e8f7702dfb353e59d4fb2e5f12b55ddcee41cb079003da2aa13b060e83b6c4d3a1d40b3a5ae90ca0643e1d701261dd3cc753d24a0157afa064c0d9ed3ebfe667333217a9b7426a631e4b1b6a138d89be4b3a446ad6cd4c3da824dccec51015a55223cd1f54f55c43350ea25d6d6d1babaf8f67cfda872a773b6fd325a18e271c2ee1ae581bfb8d23f94d7d4a099be0382759c7df3d9820d029a075692e8895c1f0b0f1d80a876b450ecc396843cf1ca0670351d134dd1745ced59f32ad93c0d858e3ed6ca316d9932c8b46f6c2614ff896f14359b8412bc4a53ab63e342cf15cc749662612837a3f29db09ca11c33258f22fa7a63113ce5fb3b7b2ae7d8cc88e521e6fbfb066e00720f7e4527d77c02ceccf433fd619f8d9d9224c4bd9ec9d916f9658ab9fea9d7e20080c148b7bd86615e8988bcf1f85f5fdd2445c0df132e983460635aea208f29c0e90e22715be811b00f41fd239555e3df98d27a49d1699030175f0b6440827644177aa12af93adfb63ee4586106022f79316034dd1de96d12c9f8414a2dc266a1c5498ad35ecfad1805534f7967186d7f05d2ecd100c0ceaaff13b032487f6adf8542600e6551dd5a011a170194c137bbcc3379e45d2a52663957a3adedbb26a515bb6412f547059a4f73dd1bc85945ce1753a8c0b9b1ab4111de521ba705defb9aeaafdd4c020c2da9edbc997076d219cc40816f784113eae59ce47f2190e82bb4afac99779b55f20bda525efb9bf763589fb4403ce4166ebafe180240391510f6db53005c70625b14cb10ecadfe6ba55f39a0cd61b5a92813667234b39caca5a7c2fc71390668380f7455b36c1ca0ea232000aa147a6798c2df0551192295a6c589fdc017a04dace0806f4906fa9626a4ffa60d6833581069e492e93b0c561140428642b0da6eaa476a1dcc34241e6430a9358939c1f2de9290d7661f98fd2f25b71bc57cf58462e1ac7084f62301a8ac71937158ca740a2bf6697cc5d82211d1a31a5b9f082358d336f01655616223d76fd44684b825107fc13385ee07fe2d92c7fd66d44c3737cf05a7d428b9afe6423dc329295b0d1b4b2a96235dc153a5b0507d73397eb148f808dab5e37e8e421edf78e8a70d2984c8c61bcfe83e64abc2c4c5d94fb6433a9446723ace9a8cc084da1e121628e508cd75e35890908c2c31f055d3e2e0e893928677af2aaec817c08f9bb8fa1e384f240a7ab3b3de2c1f3f4af77cacd3375bdcb04094dea6c4ba6b7328c7a92e99a3279a7f0910f90b26f7fdb76383c981e1a926e68b488ae97a671111a961491ecf1d92544e4b6df4f762632a81615b81f2109fb46ccc037895f1aff0ed2f0d259bc1fd00c1176c6719134d9c9cbc3870b2fe74676f7ef5416382168028350c2aed5124811de8bc13376d6233230631d03a73cf3a9a9e4b7703f08fa90e3792e7265b8f37f05383893538b23c387b06a51e35623c2af4857d2fe93a34caad9be4faa0abb6c8611a23940d72e26e2fac9768f895e1e4293dfc8c0f7b858f8afb076508f65229409d8617bb24b75a2422568ef68a1f53cf62aa486cb36fce1506cbce3086f5994012ca8cb77d191354501034298659765fab4174bef39b3460c341f259f4c290cdf3b7cb85be7385381b89be6e48872d077c9e5a6098bb19293cf195481b6b9a17f520813d63825aafd9812e436345b05afc582827631d3efbd8e444d115f0dd9f51aa3e2fef60088d7cba162c313607bbad830c18c95b04c01458ea97816d927bc51691a608593102a3a662576ee0c541f72043d092fb7cf5090072cb4b355a339b6aacbb0c4515f3cc05d8d2cc1", 0x901}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r5}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 3.082915966s ago: executing program 2 (id=4483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3d8, 0x1e8, 0x0, 0xe8, 0x2f0, 0x2f0, 0x2f0, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "662a0bb5714501158740948e1d4b01309f2cae53113325e589152dcb60b7"}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x1ff}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x428) 2.981451573s ago: executing program 2 (id=4486): getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x7, 0x820b, 0xffffffff, 0x266}, &(0x7f0000000600)=0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x25, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000640)={0x7}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0)="ca", 0x1006, r5, 0x0, 0xd88d02a0}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f1ac25bd7000fedbdf251100000008000300a10d8e1dff6ea3f17c19cf00823cafabf83bc9a0ebc9db8a75c0667eab2d3a5fe504a823313462244d3748c16bea41812465d0a7bb33e1e35373d4eecbaf9822631c873c042e41d236167d66130e7f4d4ae2031524c296d595a2b11d334ae039c06122b23a89d9247d330210e39559742a3117354843ae8b576d2611fc37fd0a49cc1866cfbd69a1c2be111bf3590fd9d8e879d7", @ANYRES32=r6, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7ff, 0x32}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x2, 0x8}, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, 0x0, 0x0) r10 = socket(0xa, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000580)={'hsr0\x00', &(0x7f0000000440)=@ethtool_dump={0x40, 0x0, 0xf82e, 0xbd, "264c92cfeb5d18ed01501b625a0164f2d7fcda40a9f3492338825030e202a18ef9c76faa0f18bcc40eb1a68029a39b7acac3adc06bd7a3318b81052124d2749271872dfdc638d646bfb65212139dd74122592eec34cec103f5b079f1e2e82c14ce60ad15b4d04180c0d2d8845658152fa057f332f8ce5d261a5e0dd705e160126c2b3cf34e6bf39beb8a7d231d167789f29948f0428613a168287a9767db612a254a4af50c697c694ab9e6b1fecab8c9cf9c174fdaa4ef4b5f00578f23"}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc850}, 0x44800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r13, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="0012c051c80010eb00000000586a000000000000000000ecc127f624e000000000000000000000000000000000000000001c6e3440a58a68a043af64e349242ab3512d37a0baa87f55d38d9eb9b0b456aeceb4a28e2913bd0400c067ba3da400"/110], &(0x7f00000001c0)=""/37, 0x2b, 0x25, 0x1, 0x80000001, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x5619, 0x1, 0x1, r7, 0x2, '\x00', r13, r14, 0x3, 0x1, 0x1, 0xd}, 0x50) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) 2.575905854s ago: executing program 1 (id=4487): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) getsockname(r1, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x53, &(0x7f0000001500)={@broadcast, @local, @void, {@llc={0x4, {@llc={0xf0, 0x6, "bb", "d9d468e698a02b124ceb6f9cc391d515ca738f0f790c27b7270960e64cde47e4fe67a14a2fe2557932269100f91af95a5e85f724c494f0e4e660c2efae9d62606e7a"}}}}}, &(0x7f0000001580)={0x1, 0x4, [0x8b4, 0x94, 0x52b, 0xaf9]}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r4, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffe00, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@private2, @in6=@initdev}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f00000016c0)=0xe8) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_KEYS={0x74, 0x51, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "018bc0952c037eb653ce1ed2ad"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ed2953e798"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0x0, 0x617, 0x3, 0xd}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44040}, 0x8004) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getnetconf={0x0, 0x52, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x0, 0x3, 0x100}, @NETCONFA_RP_FILTER={0x0, 0x3, 0x1}, @NETCONFA_FORWARDING={0x0, 0x2, 0x2}, @NETCONFA_RP_FILTER={0x0, 0x3, 0x8}, @NETCONFA_FORWARDING={0x0, 0x2, 0x502}, @NETCONFA_PROXY_NEIGH={0x0, 0x5, 0x4}]}, 0x3c}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r7, 0x5450) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r7, 0x0, 0x1000, 0xbd, &(0x7f00000002c0)="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", &(0x7f00000012c0)=""/189, 0x1, 0x0, 0x9b, 0x19, &(0x7f0000001380)="0b97e38b263d348415f29af394133f90504e0a52d1541c9f128abb82dbd01a2072644dfd9160bcf9eb6e0f7c50564c2e63620c05282949ca88326d16bf933419751c95faee722cc38c2879d0f544e2c6a28abb2c5f76e8d4bfa0251c15e45007ec68ac636183de1879246afa3f941d3f7f95bd18e7a9d4cbd84dab9c69507ad8352420d0f1f0a731747a0b4e439fe6f1a828160cd6ee7b226a8cf1", &(0x7f0000001440)="45bda66ca87b381b714b3a73435266919a55d5485230cf9cc1", 0x4, 0x0, 0xc3}, 0x50) 2.548385589s ago: executing program 4 (id=4488): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8919, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r5, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40, 0x5d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x80d0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x9, 0x3, 0xa, 0x40, 0x1c}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff}]}, &(0x7f0000000480)='GPL\x00', 0xf, 0x27, &(0x7f00000004c0)=""/39, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xc, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0x1, r7, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x3, 0x3, 0xa, 0x3}, {0x5, 0x2, 0x5, 0x9}, {0x1, 0x4, 0x8, 0x5}, {0x1, 0x5, 0x5, 0xa}, {0x2, 0x4, 0xb}, {0x4, 0x3, 0xd, 0x7}, {0x4, 0x1, 0x8, 0x8}, {0x0, 0x1, 0x3, 0x5}, {0x2, 0x5, 0x0, 0x8}], 0x10, 0xd812}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000740)={r8, r10}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x25df5bfc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB="000004000000000000d69a89bd123ea01728b5b969c800"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000"/28], 0x50) sendmmsg(r8, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x1, 0xc040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r12, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc0008000500"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 2.303287015s ago: executing program 3 (id=4489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000018000000040000000f00000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x2, 0x0) 2.045930671s ago: executing program 1 (id=4490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000", @ANYRES32=r2], 0x24}}, 0x40004) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) 2.045402016s ago: executing program 4 (id=4491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000002300000000004000041100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x18, 0x3f, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="10005a800c0001800400010004000a00"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x7}], 0x10}, 0x41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) read(r0, &(0x7f0000000200)=""/182, 0xb6) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2107, 0xfffffffffffffd9a, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.044879678s ago: executing program 3 (id=4492): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 1.94802814s ago: executing program 3 (id=4494): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0xa4, 0x0) 1.918068679s ago: executing program 1 (id=4495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) connect$rds(r4, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2c, r8, 0x301, 0x70bd2b, 0x25dfdbfe, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x90) 1.797136881s ago: executing program 4 (id=4497): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80ac", 0x2}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) recvmmsg$unix(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.788516177s ago: executing program 3 (id=4498): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080), 0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) 1.67213125s ago: executing program 0 (id=4499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="1011", 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="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", 0x901}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r5}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1.670932573s ago: executing program 4 (id=4500): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080), 0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) 1.443999148s ago: executing program 2 (id=4501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x3800, 0x0, 0x1, 0x0, 0x6}}, 0xb8}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)='S', 0x1}], 0x1}}], 0x1, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r6}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = socket(0x400000000010, 0x3, 0x0) recvmsg$kcm(r7, &(0x7f0000000800)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/112, 0x70}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000600)=""/161, 0xa1}], 0x5, &(0x7f0000000740)=""/133, 0x85}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8800) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0x10, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xe}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r9, &(0x7f0000000200)={0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4}, 0x20) getsockname$packet(r9, 0x0, &(0x7f0000000340)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'bond_slave_1\x00', @link_local}) write$tun(r10, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.442276059s ago: executing program 1 (id=4502): getgid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x2}, 0x6) write(r0, &(0x7f0000000040)="07000000010000", 0x7) 1.305793407s ago: executing program 0 (id=4503): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000040020511907800000000000000004e240000004890780300"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(r4) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'tunl0\x00', r5, 0x80, 0x7, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x14, 0x18, 0x68, 0x0, 0xb, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0xe0}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) (async) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{}, {0x0, 0x2, {0x1}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r9, 0x2e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 1.305617807s ago: executing program 1 (id=4504): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 922.781104ms ago: executing program 0 (id=4505): syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="003d008aa648067b7d15470f92addd2888dd820501c7e5868091dd8b2f4a1bc35e1e67e0861fe1", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) sendmmsg(r6, &(0x7f0000005b00)=[{{&(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="90caef01467aed8fa60e06fe8b7b17771a9b9bf7c927f7e6428eda81afa29eb7b8d1ef813c159e8e7eec0b9ca8da2b61168bea04569bb07091874b71a3c6ce0b79e5b458d5293089336a5cc8feb2a778b3850f45124dd6b75f65f11ea703ccc22dbaca6171e8fa7d753584a833ac428fd4ab0313ba536f43bc8c0b6c2fdf37cc6ffb", 0x82}, {&(0x7f0000000480)="d7dd7c0ffa7cfab4c63921019c1f0beb9c0849e0fff30b87a631ad60eec9034204d19cf430d00f01c772861db512730aeb439778ba6da125a3ad3e5ab97ab4c4b779090d8c780b6f73da54c56d1fb47affb906ce7852afe6e048d930e19a75913e6fe6e7bc8ca052c9233d40500f6321e827b8033706fd62f390f8999363dddcde1b9603669756d6fac0cbcf925e47995c9285329af3b07e0182bca96ae66b81c47eef05bcbc51bbfa115b34ccdca02162da218cec0bce3dd6ac92a01630a4b5388706e9fe8d2ccf18358577e397958486320c4d066c9b7037ce6e3f52285dd9a958", 0xe2}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x2b8}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000000580)=@llc={0x1a, 0x1, 0x40, 0x9, 0x6, 0x5, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x200}}, {{&(0x7f0000001c80)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="88b0eb63268c434bdef80b4c680c5ae84d013238faf2d7fbded2fc85796a1aed7bccaa7b93a68d5c8e38534eb5db54ce385851611f5e133ee03cb173bfea014d5df81b4adf5408f9e73e5be59ee3b4cd40542a27", 0x54}], 0x1}}, {{&(0x7f0000001e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x30, 0x0, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}}}, 0x80, &(0x7f0000002200)}}, {{&(0x7f0000002280)=@isdn={0x22, 0x6, 0x1, 0x23, 0x1}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002300)="90833cbb37d4d29704718a0c7230e4ca902e60a2ba8596c6e02b4c13ad0000abc5801e8e1872dc7538f48e3cc05dfda3bdff8f189811bbaa10806f98fe90d07595be5db026286ab094f85b39d7d2883bc3ef59bfa22a95148bebdd896b42c8982465334718141e093b839bc0feb03ceb687f", 0x72}, {&(0x7f0000002380)="a269a89f9fcc8ac46937f716487f7ebc60c20fb8bb5488e147c61131e385e4fdb0f4c6f485a3ee8d8152105008fd87bc7562560abb4d8aab5b5abcf207db8ea42e6e63eeb4e2c2a2dd54f11b79b0549c156a45c2b61d14bb90379e7ee5879189a75e3f0d3e50562840dfa8e51e253420fefbfb9fe8ca7a27987782a1c1c07a98c48e4f10eb5b5f8bc8f74794fc33286614c6e32f3d", 0x95}, {&(0x7f0000002480)="d5cb44b85312669995e96f02c5bc0a763d3eca6329ca7f58aa35aa2e7444bfe99e811facde9a9730bd67ebc08f29c24ccf4d7e87c46ed31885ddfdf24ef2e9e491a80f62f8e6748160f15cfc17727f07a241a593432131fac8f8e352cc383601a5d535e35fbdb91b6861da08d33828b3c808bdbd1376d0e0aa18c02ae3e45dedf3bf6ae12cff870aa90c0d5e213ad8d07fd850ef10cebe5a1e0f6d8fd03774d8d6dcc85da73fee0bb7304166dee5a7c9e2e37cbe95dd11de083fea751a85f7ea", 0xc0}, {&(0x7f0000002580)="81b43bd28bb5e7f12afeaba30dde33eff76f5de0ad990e4f2a699012b206148d42716bc0d161299704c22013e95134a0d9c03d73ff84a3c09d78fdfab829ea0b7a9258cf7f01ef365e08e9cdc1061e609e51efafa6353be774a4b32fb0804f99202df79e9338d33c29c2f795ce9c15dce0b08ebdd2", 0x75}, {&(0x7f0000002600)="4fe7884ea89f7b90f82f2c7071cc94", 0xf}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)}, {&(0x7f0000003740)="b9781e18c3b3b78ef6d9bd2177b96ec5f4562093bd8a9fb43df557bd08f46e326c401fb5e23097f9cde4995efaa53ee604f43fb687dd27b2189d98a72e6e4e6ea3fd25deb08a93ad1b7ca1cf0f909d2b6e9e170db86b156f72e40cb000b4a9a5c5aa82b5ea17a7b39d6a0c4f22ad166f260763488da1d95148ba6595ad0897470fce935d70d514d82d31584a955f27b1f802387a756fab3cd4abfd4739c4096f44346924343203e378c743c2b52dc7290bf7a375a41332ab9428eb60a2aa5e8647985c48db200ae517931638c3ce6f07b66427761bc8a4fa3958b6", 0xdb}, {&(0x7f0000003840)="00044fee65f99cfe798f4c79a95144d00ce412bb093c6b91a19db1a6d30ffef6cf0da8cd91acfea7e16b2961c708bb7882c85270c58ea63bfdd15618a1f313b3019076ac99a8350a7de8cc08e12d4f971bb5f87695293b11108dd877cbd4cb0a0d0262564a2893bae3819794b2084b4d2fe01829117dd1d87d20816d41a5221380dd6ba9a8", 0x85}], 0x9, &(0x7f0000005d40)=ANY=[@ANYBLOB="b80000000000000001000000080000003da645c5a58dbc661facb4d9d011b440094c4ee2718973a4bad9454e7808ab65f8b19fd40df138ab6e30dd0544a22da60fcc000059cc9bfcddedc6017b08903d712d0c73f7d08736876c561c35d510a8952f0999079dd8959ee7bca27421afb42f9a79010445b77b5b24429797ba01d03d756b6e95d8bd1a9c0e7032a1ef83302a113a2937457d1a0c625461d054e9bb324a8d49a6bb36807831fffebb27fba0470000000000000030492ce191e9aa193b18f294bb42"], 0xb8}}, {{&(0x7f0000003f00)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80, &(0x7f0000004280)=[{0x0}, {&(0x7f0000003fc0)="71434663bde447e59ee96c26f0eb7d86a9e862a86d12c1599c3cd6b7a096ce87bb44ced3034120e461728c52a985cd73fd1bdf2ecff48b30662a23014325fbdab738cae5fddd6aa7b05c49b96be88c68e0cb29f7887e264390e2952d50d70a874316dc52a68dee2ce5e68b5d", 0x6c}, {&(0x7f0000000740)="606152d34f6cb85a1699d4f64a537c1b5d32dece990986262afcabfdf290452eb620656d1a49a1b24069c36b416db39bdd8ac040596c6b65e3f75bb6390f9e1f21a50c85adb9d435cb1cd22fe307ac10e1ee5210c2089961760d2a520e3563d0121a839da644ddfd0d560d1e7c018cd3584620c8b52702e422257469bf26fe0e9b954c8c0863991e2465106b3bd6000097a1f8a138ccaa01be407e3a2b5d", 0x9e}, {&(0x7f0000004100)}], 0x4, &(0x7f0000004300)=[{0x10, 0x1c, 0x80000001}], 0x10}}, {{&(0x7f0000004400)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004480)="18e728caccfb1584bed54445d3095f7929dd579b8438950bec7110537f487d773679c7a21efe26ac0dcf00ceccea2e95c2c5592b7884eb071271a48902470a71ef36a9e163272bfec6edecf8aaebca8d289805af5477f4a2f496092d023e6ae404bbb199ecc919e083719d40158da5", 0x6f}], 0x1, &(0x7f00000045c0)=[{0xb8, 0x112, 0x3, "760fca3ab76e6ed464f3f19dd557cd89bf38aeb9db8fae42010ed6823a32fb96d5a4c124dd5426d62b07c07ea1615a9ffbea16f38450e0e20ae5439724d8ff887a0df3566d10e7c7bd6b846a3b1403927db8191250678e97b098bf1a40c5d39f76a4a81acb7bf5b431a98addcddc8190f299d85a108f0c05b433d0a8acba8d24b2e88da0b1368278310513b4fa6ffa0ccd386c43c6eeb9cfa60f831a40d0dedf4806b84eb698"}, {0xb8, 0x3a, 0x1, "31856e457bf324bd1c05e2b585843f35564c07769c1656fb2b0f8d8542bf3c30c6c4f234bcba222733c30373a0d0bfbfc2c3d270952833eaa5f61ee0f9af144a9172828d9403c466b7152fb7b0ac53cb70f2c4e4d8a611f07585c08bfd84349ea8cfe90ce563775889facbd895386ec3f36052c758c723848073c34fbfa0e9ad974b7d8201e6846b066686e912d7b8b6ea07fee2f3deded2c2425cb996a9849796"}, {0x20, 0x10b, 0xf564, "123673aa6a1bc8783d633e1f93847a64"}, {0x20, 0x112, 0xf, "e1a4928df2629f1d6998213963"}, {0xd8, 0x117, 0x0, "81c1ffb0588d605708b00d4518a965bdbb5f464a1536c83bcb1dd0c603b2795e5e89c49617101c54345f1d55c44abbfd6c342f4fa966964f13c1fc40b1566f7214f06844fa2fa7cfc7d4ba238a6b0740451dbfcda09a87bccd7dac8384e7230a2784d71dae9dbf2b538d9f98f28c12b6a850cc42fe0cb9514564f08118c84e20753bc366f9933dd115dc89697ebec299c0d4a3776f0cd040878945b19586a5585a4e93dd75ee90a40ea644418017fccfaeaa30e092edf961478b94cd4e20b74c75f50f1e594b"}, {0x10, 0x3a, 0x9}, {0xd8, 0x1, 0x80000000, "b783a7c59e3597a9f99a1d69eda2c52b92de136403505f250c8bbe8fef8d93c0efd35ed4a5cc44719d846946672c0b57ede42aa7b05123329c3162cc275e1c57f78adb876cb2ae8e5a71b3e922c1dfc3534bcd2b581c1b94bed66455288ba6f14d1505a344dc98f3f8bee295c39e308524cb1e49acea4e7ada5c83ed80dbceac9689d379923e716463e54ab5d349a0176d17fc0ee7832d1ed5036b76a809016e5b276ddc7231bde02a4908090719cf97e9af0abeb30c34f7dd8a75a4f04f250d050711aec02b"}], 0x370}}], 0x8, 0x20001000) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x6acc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) 864.318499ms ago: executing program 3 (id=4506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="a400000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000040000000740012800b000100697036746e6c00006400028005000400a000000006000f000100000014000200fe8800000000000000000000000000011400030000000000000000000000000000000000040013000800070009000000050004000200000004001300060010000300000008001400", @ANYRES32, @ANYRES32=r0, @ANYRES32], 0xa4}}, 0x400c044) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000340)) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r14}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r16, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000080002000200000006000300a7aa0000080001"], 0x5c}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x24}, 0x1, 0x0, 0x0, 0x8850}, 0x20044010) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c509000035000000c2aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000c3c02605590ba3f9bed9a6c091d66930ec73e33fa3", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtaction={0x198, 0x30, 0x10, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x184, 0x1, [@m_bpf={0x104, 0x9, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x5, 0x1, 0x0, 0xb4}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0xff, 0xdc08}}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x91, 0x6, "82ba3b76eecfe2f85881d46f264405bfd2e4fb9dcb690a97e62f3be086cb87f404365de470ac2b21408a84f1dd42ed247e7e0ca144c2d891ee525c84ed82c33d17d8d385ac016ae4811043f34337dd675d5d1422a4ea160f5635fe2c9649a4359b5f6ff7a03843143de1138a4dec8e9ff4850431940beb5db4592f606054d94ecc222ed44f3b791c597e6226b7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x7c, 0x6, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x26, 0x6, "aa776edd9f610bf359c09691a19032551921ac36e3e7be234ab6628df0c92c48fcdd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8021}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x40) 849.67419ms ago: executing program 1 (id=4507): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x17}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffff9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf25510000000c009900050000001b0000000a00060008021100000100000a00060008021100000100005239f7bafbe7581c86ceae2da69580208c02221745d6f760a30bf076bf7cf1ceacdedd823d31eb680333baf596a79ee3b06da8583a5c951a073d5472f6fd909ccccc8ab77ad88c7a5e1da569f3ef4b"], 0x38}, 0x1, 0x0, 0x0, 0x6271454cc9973ed6}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r7, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x51, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x7, 0x10, 0x10001}}) 715.480874ms ago: executing program 0 (id=4508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 674.951922ms ago: executing program 4 (id=4509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) 488.742119ms ago: executing program 0 (id=4510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_POLICE={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (fail_nth: 4) 78.662723ms ago: executing program 4 (id=4511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r4, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) 0s ago: executing program 0 (id=4512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140024001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) kernel console output (not intermixed with test programs): th. [ 646.444644][T21762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3799'. [ 646.542424][T21782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3803'. [ 647.468667][T21814] netlink: 'syz.4.3814': attribute type 13 has an invalid length. [ 647.496841][T21814] netlink: 'syz.4.3814': attribute type 17 has an invalid length. [ 648.183219][T21810] erspan0: left allmulticast mode [ 648.199435][T21810] gretap0: left allmulticast mode [ 648.203421][T21827] netlink: 'syz.1.3816': attribute type 1 has an invalid length. [ 648.415971][T21814] gretap0: left promiscuous mode [ 648.427602][T21814] erspan0: left promiscuous mode [ 648.455891][T21814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.738624][T21840] FAULT_INJECTION: forcing a failure. [ 648.738624][T21840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.776684][T21840] CPU: 0 UID: 0 PID: 21840 Comm: syz.3.3821 Not tainted syzkaller #0 PREEMPT(full) [ 648.776710][T21840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.776722][T21840] Call Trace: [ 648.776729][T21840] [ 648.776738][T21840] dump_stack_lvl+0xe8/0x150 [ 648.776769][T21840] should_fail_ex+0x412/0x560 [ 648.776799][T21840] _copy_to_user+0x31/0xb0 [ 648.776822][T21840] simple_read_from_buffer+0xe1/0x170 [ 648.776853][T21840] proc_fail_nth_read+0x1bb/0x230 [ 648.776882][T21840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.776912][T21840] ? rw_verify_area+0x2a6/0x4d0 [ 648.776930][T21840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.776957][T21840] vfs_read+0x20c/0xa70 [ 648.776975][T21840] ? fdget_pos+0x246/0x320 [ 648.776997][T21840] ? __pfx___mutex_lock+0x10/0x10 [ 648.777024][T21840] ? __pfx_vfs_read+0x10/0x10 [ 648.777045][T21840] ? __fget_files+0x2a/0x420 [ 648.777081][T21840] ? __fget_files+0x3a0/0x420 [ 648.777106][T21840] ? __fget_files+0x2a/0x420 [ 648.777140][T21840] ksys_read+0x150/0x270 [ 648.777162][T21840] ? __pfx_ksys_read+0x10/0x10 [ 648.777192][T21840] do_syscall_64+0x14d/0xf80 [ 648.777217][T21840] ? trace_irq_disable+0x3b/0x150 [ 648.777233][T21840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.777252][T21840] ? clear_bhb_loop+0x40/0x90 [ 648.777274][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.777292][T21840] RIP: 0033:0x7f7e3bb5d04e [ 648.777309][T21840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 648.777324][T21840] RSP: 002b:00007f7e3ca4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.777344][T21840] RAX: ffffffffffffffda RBX: 00007f7e3ca4f6c0 RCX: 00007f7e3bb5d04e [ 648.777357][T21840] RDX: 000000000000000f RSI: 00007f7e3ca4f0a0 RDI: 0000000000000008 [ 648.777369][T21840] RBP: 00007f7e3ca4f090 R08: 0000000000000000 R09: 0000000000000000 [ 648.777380][T21840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.777391][T21840] R13: 00007f7e3be16038 R14: 00007f7e3be15fa0 R15: 00007ffc55945de8 [ 648.777421][T21840] [ 649.304571][T21853] lo speed is unknown, defaulting to 1000 [ 649.350860][T21860] __nla_validate_parse: 4 callbacks suppressed [ 649.350882][T21860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3824'. [ 649.573307][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3824'. [ 650.460474][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3831'. [ 650.618737][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3831'. [ 650.665942][T21886] lo speed is unknown, defaulting to 1000 [ 651.529806][T21942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3840'. [ 651.572040][T21945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'. [ 652.961900][T21979] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 652.987591][T21972] siw: device registration error -23 [ 653.013165][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 653.094336][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 653.147146][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 653.266007][T21988] vlan6: entered promiscuous mode [ 653.384310][T21997] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 653.410055][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3855'. [ 653.830446][T22019] FAULT_INJECTION: forcing a failure. [ 653.830446][T22019] name failslab, interval 1, probability 0, space 0, times 0 [ 653.883168][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 653.897904][T22019] CPU: 1 UID: 0 PID: 22019 Comm: syz.3.3861 Not tainted syzkaller #0 PREEMPT(full) [ 653.897931][T22019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 653.897943][T22019] Call Trace: [ 653.897951][T22019] [ 653.897960][T22019] dump_stack_lvl+0xe8/0x150 [ 653.897990][T22019] should_fail_ex+0x412/0x560 [ 653.898021][T22019] should_failslab+0xa8/0x100 [ 653.898047][T22019] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 653.898070][T22019] ? __alloc_skb+0x186/0x7d0 [ 653.898090][T22019] ? __alloc_skb+0x1d0/0x7d0 [ 653.898108][T22019] ? __local_bh_enable_ip+0xd0/0x130 [ 653.898136][T22019] __alloc_skb+0x1d0/0x7d0 [ 653.898172][T22019] netlink_sendmsg+0x5d4/0xb40 [ 653.898203][T22019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.898225][T22019] ? aa_sock_msg_perm+0xf1/0x1b0 [ 653.898253][T22019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.898277][T22019] ____sys_sendmsg+0x972/0x9f0 [ 653.898309][T22019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.898341][T22019] ? import_iovec+0x73/0xa0 [ 653.898369][T22019] ___sys_sendmsg+0x2a5/0x360 [ 653.898398][T22019] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.898454][T22019] ? __fget_files+0x2a/0x420 [ 653.898478][T22019] ? __fget_files+0x3a0/0x420 [ 653.898512][T22019] __x64_sys_sendmsg+0x1bd/0x2a0 [ 653.898539][T22019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.898571][T22019] ? __pfx_ksys_write+0x10/0x10 [ 653.898608][T22019] do_syscall_64+0x14d/0xf80 [ 653.898634][T22019] ? trace_irq_disable+0x3b/0x150 [ 653.898650][T22019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.898669][T22019] ? clear_bhb_loop+0x40/0x90 [ 653.898691][T22019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.898709][T22019] RIP: 0033:0x7f7e3bb9c819 [ 653.898727][T22019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.898744][T22019] RSP: 002b:00007f7e3ca4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.898764][T22019] RAX: ffffffffffffffda RBX: 00007f7e3be15fa0 RCX: 00007f7e3bb9c819 [ 653.898778][T22019] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 653.898789][T22019] RBP: 00007f7e3ca4f090 R08: 0000000000000000 R09: 0000000000000000 [ 653.898801][T22019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.898812][T22019] R13: 00007f7e3be16038 R14: 00007f7e3be15fa0 R15: 00007ffc55945de8 [ 653.898840][T22019] [ 654.445240][T22027] lo speed is unknown, defaulting to 1000 [ 654.508686][T22033] __nla_validate_parse: 1 callbacks suppressed [ 654.508707][T22033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3863'. [ 654.577554][T22034] lo speed is unknown, defaulting to 1000 [ 654.618706][T22031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3864'. [ 654.786596][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'. [ 654.921335][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3864'. [ 655.141526][T22046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3865'. [ 655.221918][T22051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3866'. [ 655.416669][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3865'. [ 655.487191][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3867'. [ 655.691812][T22065] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 655.699718][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 655.709354][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 655.810903][T22048] lo speed is unknown, defaulting to 1000 [ 656.153493][T22076] netlink: 'syz.4.3871': attribute type 21 has an invalid length. [ 656.162636][T22076] netlink: 'syz.4.3871': attribute type 4 has an invalid length. [ 656.224570][T22082] netlink: 'syz.4.3871': attribute type 1 has an invalid length. [ 656.544640][T22082] bond45: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 656.618792][T22082] bond45 (unregistering): Released all slaves [ 656.927489][T22108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.934756][T22108] IPv6: NLM_F_CREATE should be set when creating new route [ 656.942059][T22108] IPv6: NLM_F_CREATE should be set when creating new route [ 657.025017][T22114] IPVS: Unknown mcast interface: dummy0 [ 657.298571][T22118] FAULT_INJECTION: forcing a failure. [ 657.298571][T22118] name failslab, interval 1, probability 0, space 0, times 0 [ 657.376427][T22118] CPU: 0 UID: 0 PID: 22118 Comm: syz.3.3879 Not tainted syzkaller #0 PREEMPT(full) [ 657.376453][T22118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 657.376465][T22118] Call Trace: [ 657.376473][T22118] [ 657.376482][T22118] dump_stack_lvl+0xe8/0x150 [ 657.376514][T22118] should_fail_ex+0x412/0x560 [ 657.376545][T22118] should_failslab+0xa8/0x100 [ 657.376569][T22118] ? skb_clone+0x212/0x3a0 [ 657.376594][T22118] kmem_cache_alloc_noprof+0x87/0x650 [ 657.376622][T22118] skb_clone+0x212/0x3a0 [ 657.376650][T22118] __netlink_deliver_tap+0x404/0x850 [ 657.376683][T22118] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.376704][T22118] netlink_deliver_tap+0x19c/0x1b0 [ 657.376724][T22118] netlink_sendskb+0x68/0x140 [ 657.376754][T22118] netlink_unicast+0x3a3/0x9b0 [ 657.376789][T22118] ? __pfx_netlink_unicast+0x10/0x10 [ 657.376826][T22118] netlink_rcv_skb+0x2b6/0x4b0 [ 657.376848][T22118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.376871][T22118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.376901][T22118] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.376929][T22118] netlink_unicast+0x80f/0x9b0 [ 657.376965][T22118] ? __pfx_netlink_unicast+0x10/0x10 [ 657.376995][T22118] ? netlink_sendmsg+0x650/0xb40 [ 657.377013][T22118] ? skb_put+0x11b/0x210 [ 657.377038][T22118] netlink_sendmsg+0x813/0xb40 [ 657.377067][T22118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.377092][T22118] ? aa_sock_msg_perm+0xf1/0x1b0 [ 657.377119][T22118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.377144][T22118] ____sys_sendmsg+0x972/0x9f0 [ 657.377182][T22118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.377212][T22118] ? import_iovec+0x73/0xa0 [ 657.377236][T22118] ___sys_sendmsg+0x2a5/0x360 [ 657.377265][T22118] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.377321][T22118] ? __fget_files+0x2a/0x420 [ 657.377347][T22118] ? __fget_files+0x3a0/0x420 [ 657.377383][T22118] __x64_sys_sendmsg+0x1bd/0x2a0 [ 657.377410][T22118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.377448][T22118] ? __pfx_ksys_write+0x10/0x10 [ 657.377479][T22118] do_syscall_64+0x14d/0xf80 [ 657.377504][T22118] ? trace_irq_disable+0x3b/0x150 [ 657.377521][T22118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.377539][T22118] ? clear_bhb_loop+0x40/0x90 [ 657.377561][T22118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.377579][T22118] RIP: 0033:0x7f7e3bb9c819 [ 657.377598][T22118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.377614][T22118] RSP: 002b:00007f7e3ca4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.377634][T22118] RAX: ffffffffffffffda RBX: 00007f7e3be15fa0 RCX: 00007f7e3bb9c819 [ 657.377648][T22118] RDX: 000000002000400c RSI: 00002000000001c0 RDI: 0000000000000003 [ 657.377660][T22118] RBP: 00007f7e3ca4f090 R08: 0000000000000000 R09: 0000000000000000 [ 657.377672][T22118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.377683][T22118] R13: 00007f7e3be16038 R14: 00007f7e3be15fa0 R15: 00007ffc55945de8 [ 657.377713][T22118] [ 658.137578][T22137] FAULT_INJECTION: forcing a failure. [ 658.137578][T22137] name failslab, interval 1, probability 0, space 0, times 0 [ 658.226398][T22137] CPU: 1 UID: 0 PID: 22137 Comm: syz.1.3885 Not tainted syzkaller #0 PREEMPT(full) [ 658.226425][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 658.226438][T22137] Call Trace: [ 658.226445][T22137] [ 658.226456][T22137] dump_stack_lvl+0xe8/0x150 [ 658.226483][T22137] should_fail_ex+0x412/0x560 [ 658.226514][T22137] should_failslab+0xa8/0x100 [ 658.226539][T22137] ? skb_clone+0x212/0x3a0 [ 658.226563][T22137] kmem_cache_alloc_noprof+0x87/0x650 [ 658.226583][T22137] ? __netlink_lookup+0xc6/0x8b0 [ 658.226611][T22137] skb_clone+0x212/0x3a0 [ 658.226644][T22137] __netlink_deliver_tap+0x404/0x850 [ 658.226675][T22137] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.226697][T22137] netlink_deliver_tap+0x19c/0x1b0 [ 658.226718][T22137] netlink_unicast+0x7e3/0x9b0 [ 658.226753][T22137] ? __pfx_netlink_unicast+0x10/0x10 [ 658.226782][T22137] ? netlink_sendmsg+0x650/0xb40 [ 658.226800][T22137] ? skb_put+0x11b/0x210 [ 658.226825][T22137] netlink_sendmsg+0x813/0xb40 [ 658.226852][T22137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.226876][T22137] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.226904][T22137] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.226928][T22137] ____sys_sendmsg+0x972/0x9f0 [ 658.226960][T22137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.226993][T22137] ? import_iovec+0x73/0xa0 [ 658.227016][T22137] ___sys_sendmsg+0x2a5/0x360 [ 658.227044][T22137] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.227104][T22137] ? __fget_files+0x2a/0x420 [ 658.227130][T22137] ? __fget_files+0x3a0/0x420 [ 658.227169][T22137] __x64_sys_sendmsg+0x1bd/0x2a0 [ 658.227195][T22137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.227228][T22137] ? __pfx_ksys_write+0x10/0x10 [ 658.227260][T22137] do_syscall_64+0x14d/0xf80 [ 658.227285][T22137] ? trace_irq_disable+0x3b/0x150 [ 658.227308][T22137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.227327][T22137] ? clear_bhb_loop+0x40/0x90 [ 658.227350][T22137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.227368][T22137] RIP: 0033:0x7f804bd9c819 [ 658.227385][T22137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.227400][T22137] RSP: 002b:00007f804cccb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.227421][T22137] RAX: ffffffffffffffda RBX: 00007f804c016090 RCX: 00007f804bd9c819 [ 658.227434][T22137] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014 [ 658.227444][T22137] RBP: 00007f804cccb090 R08: 0000000000000000 R09: 0000000000000000 [ 658.227456][T22137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.227467][T22137] R13: 00007f804c016128 R14: 00007f804c016090 R15: 00007ffcf2694098 [ 658.227497][T22137] [ 658.247853][T22135] lo speed is unknown, defaulting to 1000 [ 658.549556][T22145] netlink: 'syz.2.3887': attribute type 21 has an invalid length. [ 658.603227][T22145] netlink: 'syz.2.3887': attribute type 4 has an invalid length. [ 658.638974][T22153] netlink: 'syz.0.3888': attribute type 3 has an invalid length. [ 658.651842][T22145] netlink: 'syz.2.3887': attribute type 1 has an invalid length. [ 658.834636][T22160] bond36: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 658.999816][T22160] bond36 (unregistering): Released all slaves [ 659.868364][T22210] lo speed is unknown, defaulting to 1000 [ 659.874037][T22215] __nla_validate_parse: 15 callbacks suppressed [ 659.874056][T22215] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3902'. [ 660.128878][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'. [ 660.201900][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 660.239126][T22224] macvtap2: entered promiscuous mode [ 660.264473][T22224] macvtap2: entered allmulticast mode [ 660.295406][T22232] netlink: 'syz.3.3905': attribute type 21 has an invalid length. [ 660.303618][T22232] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3905'. [ 660.336314][T22232] netlink: 'syz.3.3905': attribute type 4 has an invalid length. [ 660.344215][T22232] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3905'. [ 660.434514][T22227] netlink: 'syz.3.3905': attribute type 1 has an invalid length. [ 660.464056][T22227] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3905'. [ 660.482703][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3907'. [ 660.512107][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3907'. [ 660.585257][T22227] bond37: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 660.642277][T22227] bond37 (unregistering): Released all slaves [ 660.831027][T22246] bond37: entered promiscuous mode [ 660.882042][T22246] 8021q: adding VLAN 0 to HW filter on device bond37 [ 661.225600][T22268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3912'. [ 662.011279][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 662.054456][T22294] validate_nla: 3 callbacks suppressed [ 662.054477][T22294] netlink: 'syz.4.3915': attribute type 13 has an invalid length. [ 662.098869][T22294] netlink: 'syz.4.3915': attribute type 17 has an invalid length. [ 662.296803][T22296] sctp: [Deprecated]: syz.1.3916 (pid 22296) Use of int in maxseg socket option. [ 662.296803][T22296] Use struct sctp_assoc_value instead [ 662.733331][T22294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.766615][T22302] netlink: 'syz.3.3918': attribute type 12 has an invalid length. [ 662.996140][T22322] netlink: 'syz.2.3921': attribute type 21 has an invalid length. [ 663.004564][T22322] netlink: 'syz.2.3921': attribute type 4 has an invalid length. [ 663.050625][T22320] netlink: 'syz.3.3922': attribute type 1 has an invalid length. [ 663.054330][T22327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.065751][T22327] IPv6: NLM_F_CREATE should be set when creating new route [ 663.073042][T22327] IPv6: NLM_F_CREATE should be set when creating new route [ 663.081667][T22329] netlink: 'syz.2.3921': attribute type 1 has an invalid length. [ 663.090494][T22320] bond37: entered promiscuous mode [ 663.096084][T22320] 8021q: adding VLAN 0 to HW filter on device bond37 [ 663.255830][T22322] bond36: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 663.298295][T22322] bond36 (unregistering): Released all slaves [ 664.171049][T22377] netlink: 'syz.2.3935': attribute type 1 has an invalid length. [ 664.410388][T22377] bond36: entered promiscuous mode [ 664.423792][T22377] 8021q: adding VLAN 0 to HW filter on device bond36 [ 664.446111][T22367] syzkaller1: entered promiscuous mode [ 664.451980][T22367] syzkaller1: entered allmulticast mode [ 664.468926][T22372] lo speed is unknown, defaulting to 1000 [ 664.781521][T22401] netlink: 'syz.1.3938': attribute type 21 has an invalid length. [ 664.821234][T22401] netlink: 'syz.1.3938': attribute type 4 has an invalid length. [ 664.884675][T22401] __nla_validate_parse: 10 callbacks suppressed [ 664.884695][T22401] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3938'. [ 664.972241][T22400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'. [ 665.004474][T22400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3937'. [ 665.014410][T22400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'. [ 665.024936][T22400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3937'. [ 665.071252][T22401] bond38: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 665.087264][T22401] bond38 (unregistering): Released all slaves [ 665.400430][T22416] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.412218][T22416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.776679][T22437] nbd1: detected capacity change from 0 to 127 [ 665.786010][ T5832] block nbd1: Receive control failed (result -32) [ 665.795427][T21954] block nbd1: Receive control failed (result -32) [ 665.806145][T21896] block nbd1: Dead connection, failed to find a fallback [ 665.856638][T21896] block nbd1: shutting down sockets [ 665.863158][T21896] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 665.876629][T21896] Buffer I/O error on dev nbd1, logical block 0, async page read [ 665.884831][T21896] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 665.896111][T21896] Buffer I/O error on dev nbd1, logical block 1, async page read [ 665.904053][T21896] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 665.913858][T21896] Buffer I/O error on dev nbd1, logical block 2, async page read [ 665.922092][T21896] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 665.931809][T21896] Buffer I/O error on dev nbd1, logical block 3, async page read [ 666.013858][T21896] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.061199][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'. [ 666.073854][ T5941] lo speed is unknown, defaulting to 1000 [ 666.079740][T21896] Buffer I/O error on dev nbd1, logical block 0, async page read [ 666.118165][T21896] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.161416][T21896] Buffer I/O error on dev nbd1, logical block 1, async page read [ 666.190836][T21896] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.210509][T21896] Buffer I/O error on dev nbd1, logical block 2, async page read [ 666.219037][T21896] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.228595][T21896] Buffer I/O error on dev nbd1, logical block 3, async page read [ 666.236758][T21896] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.246397][T21896] Buffer I/O error on dev nbd1, logical block 0, async page read [ 666.254256][T22451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3948'. [ 666.254377][T21896] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.273453][T21896] Buffer I/O error on dev nbd1, logical block 1, async page read [ 666.283291][T21896] ldm_validate_partition_table(): Disk read failed. [ 666.291484][T21896] Dev nbd1: unable to read RDB block 0 [ 666.300588][T22445] bond38: entered promiscuous mode [ 666.306989][T21896] nbd1: unable to read partition table [ 666.333381][T21896] ldm_validate_partition_table(): Disk read failed. [ 666.344715][T21896] Dev nbd1: unable to read RDB block 0 [ 666.364794][T21896] nbd1: unable to read partition table [ 666.370280][T22445] 8021q: adding VLAN 0 to HW filter on device bond38 [ 666.432576][T22463] bond45 (unregistering): Released all slaves [ 666.528045][T22458] vlan6: entered allmulticast mode [ 666.546261][T22458] bridge1: entered allmulticast mode [ 666.814458][T22475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3953'. [ 666.823732][T22475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3953'. [ 666.837371][T22475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3953'. [ 666.972812][T22489] bond38: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 667.071003][T22489] bond38 (unregistering): Released all slaves [ 667.306575][T22511] validate_nla: 9 callbacks suppressed [ 667.306595][T22511] netlink: 'syz.2.3962': attribute type 1 has an invalid length. [ 667.441643][T22511] bond38: entered promiscuous mode [ 667.466764][T22511] 8021q: adding VLAN 0 to HW filter on device bond38 [ 667.826407][T22536] netlink: 'syz.2.3965': attribute type 12 has an invalid length. [ 667.957845][T22524] lo speed is unknown, defaulting to 1000 [ 667.959970][T22540] FAULT_INJECTION: forcing a failure. [ 667.959970][T22540] name failslab, interval 1, probability 0, space 0, times 0 [ 667.996327][T22540] CPU: 1 UID: 0 PID: 22540 Comm: syz.1.3967 Not tainted syzkaller #0 PREEMPT(full) [ 667.996353][T22540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 667.996365][T22540] Call Trace: [ 667.996372][T22540] [ 667.996381][T22540] dump_stack_lvl+0xe8/0x150 [ 667.996411][T22540] should_fail_ex+0x412/0x560 [ 667.996442][T22540] should_failslab+0xa8/0x100 [ 667.996467][T22540] __kmalloc_cache_noprof+0x88/0x660 [ 667.996488][T22540] ? __pfx_stack_trace_save+0x10/0x10 [ 667.996509][T22540] ? rtnl_newlink+0x136/0x1be0 [ 667.996534][T22540] rtnl_newlink+0x136/0x1be0 [ 667.996554][T22540] ? kasan_save_track+0x4f/0x80 [ 667.996571][T22540] ? kasan_save_track+0x3e/0x80 [ 667.996588][T22540] ? kasan_save_free_info+0x46/0x50 [ 667.996612][T22540] ? __kasan_slab_free+0x5c/0x80 [ 667.996631][T22540] ? kmem_cache_free+0x187/0x630 [ 667.996651][T22540] ? __dev_queue_xmit+0x1557/0x3870 [ 667.996675][T22540] ? __netlink_deliver_tap+0x5ad/0x850 [ 667.996699][T22540] ? netlink_deliver_tap+0x19c/0x1b0 [ 667.996716][T22540] ? netlink_unicast+0x7e3/0x9b0 [ 667.996738][T22540] ? netlink_sendmsg+0x813/0xb40 [ 667.996758][T22540] ? __pfx_rtnl_newlink+0x10/0x10 [ 667.996775][T22540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.996820][T22540] ? kasan_quarantine_put+0xbb/0x1f0 [ 667.996839][T22540] ? lockdep_hardirqs_on+0x7a/0x110 [ 667.996867][T22540] ? kmem_cache_free+0x187/0x630 [ 667.996885][T22540] ? nlmon_xmit+0xb0/0x100 [ 667.996918][T22540] ? __lock_acquire+0x6b5/0x2cf0 [ 667.996954][T22540] ? __local_bh_enable_ip+0xd0/0x130 [ 667.996978][T22540] ? lockdep_hardirqs_on+0x7a/0x110 [ 667.997001][T22540] ? __dev_queue_xmit+0x28b/0x3870 [ 667.997024][T22540] ? __local_bh_enable_ip+0xd0/0x130 [ 667.997045][T22540] ? __dev_queue_xmit+0x28b/0x3870 [ 667.997091][T22540] ? __pfx_rtnl_newlink+0x10/0x10 [ 667.997109][T22540] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 667.997132][T22540] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 667.997151][T22540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 667.997167][T22540] ? ref_tracker_free+0x693/0x840 [ 667.997181][T22540] ? __copy_skb_header+0xa3/0x4a0 [ 667.997202][T22540] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.997227][T22540] netlink_rcv_skb+0x232/0x4b0 [ 667.997249][T22540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 667.997270][T22540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.997300][T22540] ? netlink_deliver_tap+0x2e/0x1b0 [ 667.997327][T22540] netlink_unicast+0x80f/0x9b0 [ 667.997362][T22540] ? __pfx_netlink_unicast+0x10/0x10 [ 667.997391][T22540] ? netlink_sendmsg+0x650/0xb40 [ 667.997410][T22540] ? skb_put+0x11b/0x210 [ 667.997434][T22540] netlink_sendmsg+0x813/0xb40 [ 667.997463][T22540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.997487][T22540] ? aa_sock_msg_perm+0xf1/0x1b0 [ 667.997514][T22540] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.997538][T22540] ____sys_sendmsg+0x972/0x9f0 [ 667.997569][T22540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.997601][T22540] ? import_iovec+0x73/0xa0 [ 667.997630][T22540] ___sys_sendmsg+0x2a5/0x360 [ 667.997656][T22540] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.997705][T22540] ? __fget_files+0x2a/0x420 [ 667.997729][T22540] ? __fget_files+0x3a0/0x420 [ 667.997764][T22540] __x64_sys_sendmsg+0x1bd/0x2a0 [ 667.997809][T22540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.997838][T22540] ? __pfx_ksys_write+0x10/0x10 [ 667.997868][T22540] do_syscall_64+0x14d/0xf80 [ 667.997903][T22540] ? trace_irq_disable+0x3b/0x150 [ 667.997918][T22540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.997943][T22540] ? clear_bhb_loop+0x40/0x90 [ 667.997963][T22540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.997980][T22540] RIP: 0033:0x7f804bd9c819 [ 667.997997][T22540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.998012][T22540] RSP: 002b:00007f804ccec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.998034][T22540] RAX: ffffffffffffffda RBX: 00007f804c015fa0 RCX: 00007f804bd9c819 [ 667.998047][T22540] RDX: 000000000400c044 RSI: 0000200000000000 RDI: 0000000000000003 [ 667.998059][T22540] RBP: 00007f804ccec090 R08: 0000000000000000 R09: 0000000000000000 [ 667.998071][T22540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.998082][T22540] R13: 00007f804c016038 R14: 00007f804c015fa0 R15: 00007ffcf2694098 [ 667.998109][T22540] [ 668.826769][T22563] netlink: 'syz.2.3973': attribute type 21 has an invalid length. [ 668.835022][T22563] netlink: 'syz.2.3973': attribute type 4 has an invalid length. [ 668.901052][T22555] tipc: Enabled bearer , priority 0 [ 668.924107][T22560] syzkaller0: entered promiscuous mode [ 668.934244][T22567] netlink: 'syz.0.3975': attribute type 1 has an invalid length. [ 668.934787][T22563] netlink: 'syz.2.3973': attribute type 1 has an invalid length. [ 668.943735][T22560] syzkaller0: entered allmulticast mode [ 669.034319][T22555] tipc: Resetting bearer [ 669.045429][T22569] tipc: Enabled bearer , priority 0 [ 669.091822][T22565] bond39: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 669.116652][T22565] bond39 (unregistering): Released all slaves [ 669.143226][T22567] 8021q: adding VLAN 0 to HW filter on device bond45 [ 669.248135][T22578] siw: device registration error -23 [ 669.264336][T22575] tipc: Resetting bearer [ 669.292631][T22568] tipc: Disabling bearer [ 669.330655][T22583] syzkaller0: entered promiscuous mode [ 669.343094][T22583] syzkaller0: entered allmulticast mode [ 669.616504][T22554] tipc: Resetting bearer [ 669.693456][T22554] tipc: Disabling bearer [ 670.035657][T22620] netlink: 'syz.0.3987': attribute type 21 has an invalid length. [ 670.044465][T22614] __nla_validate_parse: 21 callbacks suppressed [ 670.044484][T22614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3985'. [ 670.085695][T22614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3985'. [ 670.095726][T22620] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3987'. [ 670.117652][T22614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3985'. [ 670.123887][T22627] netlink: 'syz.4.3988': attribute type 13 has an invalid length. [ 670.142493][T22614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3985'. [ 670.155119][T22630] netlink: 'syz.0.3987': attribute type 1 has an invalid length. [ 670.181862][T22627] netlink: 'syz.4.3988': attribute type 17 has an invalid length. [ 670.193467][T22630] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3987'. [ 670.361415][T22637] siw: device registration error -23 [ 670.593413][T22620] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3987'. [ 670.633600][T22627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.671851][T22630] bond46: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 670.683683][T22630] bond46 (unregistering): Released all slaves [ 670.711012][T22643] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3991'. [ 670.840489][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3993'. [ 670.960543][T22658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3995'. [ 671.911887][T22700] bond45: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 671.926082][T22700] bond45 (unregistering): Released all slaves [ 672.065362][T22719] tipc: Enabled bearer , priority 0 [ 672.074148][T22719] syzkaller0: entered promiscuous mode [ 672.080525][T22719] syzkaller0: entered allmulticast mode [ 672.194948][T22718] tipc: Resetting bearer [ 672.210364][T22728] FAULT_INJECTION: forcing a failure. [ 672.210364][T22728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.225687][T22728] CPU: 1 UID: 0 PID: 22728 Comm: syz.4.4014 Not tainted syzkaller #0 PREEMPT(full) [ 672.225713][T22728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 672.225723][T22728] Call Trace: [ 672.225731][T22728] [ 672.225739][T22728] dump_stack_lvl+0xe8/0x150 [ 672.225769][T22728] should_fail_ex+0x412/0x560 [ 672.225800][T22728] _copy_from_user+0x2d/0xb0 [ 672.225821][T22728] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 672.225852][T22728] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 672.225879][T22728] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 672.225906][T22728] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 672.225945][T22728] ip_generic_getfrag+0x149/0x2d0 [ 672.225970][T22728] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 672.225992][T22728] ? skb_page_frag_refill+0x199/0x310 [ 672.226024][T22728] __ip6_append_data+0x20d8/0x3c50 [ 672.226063][T22728] ? __pfx_raw6_getfrag+0x10/0x10 [ 672.226104][T22728] ? __pfx___ip6_append_data+0x10/0x10 [ 672.226125][T22728] ? ip6_setup_cork+0x544/0xf30 [ 672.226144][T22728] ? ip6_append_data+0x1b7/0x280 [ 672.226166][T22728] ip6_append_data+0x10f/0x280 [ 672.226191][T22728] ? __pfx_raw6_getfrag+0x10/0x10 [ 672.226212][T22728] rawv6_sendmsg+0x12d3/0x18e0 [ 672.226244][T22728] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 672.226275][T22728] ? aa_sk_perm+0x6d5/0x900 [ 672.226308][T22728] ? __pfx_aa_sk_perm+0x10/0x10 [ 672.226335][T22728] ? sock_rps_record_flow+0x19/0x350 [ 672.226360][T22728] ? inet_sendmsg+0x2f4/0x370 [ 672.226381][T22728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.226404][T22728] ____sys_sendmsg+0x80a/0x9f0 [ 672.226435][T22728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.226467][T22728] ? import_iovec+0x73/0xa0 [ 672.226497][T22728] ___sys_sendmsg+0x2a5/0x360 [ 672.226525][T22728] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.226581][T22728] ? __fget_files+0x2a/0x420 [ 672.226606][T22728] ? __fget_files+0x3a0/0x420 [ 672.226642][T22728] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.226668][T22728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.226700][T22728] ? __pfx_ksys_write+0x10/0x10 [ 672.226731][T22728] do_syscall_64+0x14d/0xf80 [ 672.226756][T22728] ? trace_irq_disable+0x3b/0x150 [ 672.226772][T22728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.226791][T22728] ? clear_bhb_loop+0x40/0x90 [ 672.226813][T22728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.226831][T22728] RIP: 0033:0x7f671659c819 [ 672.226849][T22728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.226865][T22728] RSP: 002b:00007f671738f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.226885][T22728] RAX: ffffffffffffffda RBX: 00007f6716815fa0 RCX: 00007f671659c819 [ 672.226898][T22728] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 672.226910][T22728] RBP: 00007f671738f090 R08: 0000000000000000 R09: 0000000000000000 [ 672.226922][T22728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.226933][T22728] R13: 00007f6716816038 R14: 00007f6716815fa0 R15: 00007ffc866cbd18 [ 672.226962][T22728] [ 672.536958][T22718] tipc: Disabling bearer [ 672.781692][T22748] FAULT_INJECTION: forcing a failure. [ 672.781692][T22748] name failslab, interval 1, probability 0, space 0, times 0 [ 672.819954][T22748] CPU: 1 UID: 0 PID: 22748 Comm: syz.1.4019 Not tainted syzkaller #0 PREEMPT(full) [ 672.819980][T22748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 672.819992][T22748] Call Trace: [ 672.819999][T22748] [ 672.820008][T22748] dump_stack_lvl+0xe8/0x150 [ 672.820038][T22748] should_fail_ex+0x412/0x560 [ 672.820067][T22748] should_failslab+0xa8/0x100 [ 672.820092][T22748] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 672.820112][T22748] ? __alloc_skb+0x1d0/0x7d0 [ 672.820134][T22748] ? __local_bh_enable_ip+0xd0/0x130 [ 672.820163][T22748] __alloc_skb+0x1d0/0x7d0 [ 672.820182][T22748] ? netlink_ack_tlv_len+0x6c/0x210 [ 672.820203][T22748] netlink_ack+0x146/0xa50 [ 672.820218][T22748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.820243][T22748] ? __lock_acquire+0x6b5/0x2cf0 [ 672.820275][T22748] netlink_rcv_skb+0x2b6/0x4b0 [ 672.820296][T22748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.820321][T22748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.820355][T22748] ? down_read+0x272/0x2e0 [ 672.820371][T22748] ? genl_rcv+0xd/0x40 [ 672.820393][T22748] genl_rcv+0x28/0x40 [ 672.820414][T22748] netlink_unicast+0x80f/0x9b0 [ 672.820448][T22748] ? __pfx_netlink_unicast+0x10/0x10 [ 672.820477][T22748] ? netlink_sendmsg+0x650/0xb40 [ 672.820494][T22748] ? skb_put+0x11b/0x210 [ 672.820514][T22748] netlink_sendmsg+0x813/0xb40 [ 672.820541][T22748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.820564][T22748] ? aa_sock_msg_perm+0xf1/0x1b0 [ 672.820591][T22748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.820615][T22748] ____sys_sendmsg+0x972/0x9f0 [ 672.820647][T22748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.820686][T22748] ? import_iovec+0x73/0xa0 [ 672.820711][T22748] ___sys_sendmsg+0x2a5/0x360 [ 672.820740][T22748] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.820796][T22748] ? __fget_files+0x2a/0x420 [ 672.820822][T22748] ? __fget_files+0x3a0/0x420 [ 672.820857][T22748] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.820883][T22748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.820915][T22748] ? __pfx_ksys_write+0x10/0x10 [ 672.820946][T22748] do_syscall_64+0x14d/0xf80 [ 672.820970][T22748] ? trace_irq_disable+0x3b/0x150 [ 672.820987][T22748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.821002][T22748] ? clear_bhb_loop+0x40/0x90 [ 672.821024][T22748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.821041][T22748] RIP: 0033:0x7f804bd9c819 [ 672.821058][T22748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.821073][T22748] RSP: 002b:00007f804cccb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.821093][T22748] RAX: ffffffffffffffda RBX: 00007f804c016090 RCX: 00007f804bd9c819 [ 672.821106][T22748] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 672.821116][T22748] RBP: 00007f804cccb090 R08: 0000000000000000 R09: 0000000000000000 [ 672.821127][T22748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.821136][T22748] R13: 00007f804c016128 R14: 00007f804c016090 R15: 00007ffcf2694098 [ 672.821162][T22748] [ 673.529136][T22769] validate_nla: 7 callbacks suppressed [ 673.529155][T22769] netlink: 'syz.2.4024': attribute type 21 has an invalid length. [ 673.543097][T22769] netlink: 'syz.2.4024': attribute type 4 has an invalid length. [ 673.606982][T22769] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 673.794555][T22780] bond39: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 673.903610][T22780] bond39 (unregistering): Released all slaves [ 673.943797][T22784] netlink: 'syz.3.4027': attribute type 3 has an invalid length. [ 674.039738][T22784] block nbd3: NBD_DISCONNECT [ 674.269188][T22803] FAULT_INJECTION: forcing a failure. [ 674.269188][T22803] name failslab, interval 1, probability 0, space 0, times 0 [ 674.325181][T22803] CPU: 0 UID: 0 PID: 22803 Comm: syz.1.4033 Not tainted syzkaller #0 PREEMPT(full) [ 674.325207][T22803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 674.325220][T22803] Call Trace: [ 674.325228][T22803] [ 674.325237][T22803] dump_stack_lvl+0xe8/0x150 [ 674.325266][T22803] should_fail_ex+0x412/0x560 [ 674.325298][T22803] should_failslab+0xa8/0x100 [ 674.325324][T22803] __kmalloc_cache_noprof+0x88/0x660 [ 674.325346][T22803] ? __pfx_stack_trace_save+0x10/0x10 [ 674.325366][T22803] ? rtnl_newlink+0x136/0x1be0 [ 674.325391][T22803] rtnl_newlink+0x136/0x1be0 [ 674.325413][T22803] ? kasan_save_track+0x4f/0x80 [ 674.325431][T22803] ? kasan_save_track+0x3e/0x80 [ 674.325450][T22803] ? kasan_save_free_info+0x46/0x50 [ 674.325475][T22803] ? __kasan_slab_free+0x5c/0x80 [ 674.325493][T22803] ? kmem_cache_free+0x187/0x630 [ 674.325522][T22803] ? __dev_queue_xmit+0x1557/0x3870 [ 674.325547][T22803] ? __netlink_deliver_tap+0x5ad/0x850 [ 674.325565][T22803] ? netlink_deliver_tap+0x19c/0x1b0 [ 674.325582][T22803] ? netlink_unicast+0x7e3/0x9b0 [ 674.325606][T22803] ? netlink_sendmsg+0x813/0xb40 [ 674.325627][T22803] ? __pfx_rtnl_newlink+0x10/0x10 [ 674.325645][T22803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.325695][T22803] ? kasan_quarantine_put+0xbb/0x1f0 [ 674.325715][T22803] ? lockdep_hardirqs_on+0x7a/0x110 [ 674.325744][T22803] ? kmem_cache_free+0x187/0x630 [ 674.325765][T22803] ? nlmon_xmit+0xb0/0x100 [ 674.325798][T22803] ? __lock_acquire+0x6b5/0x2cf0 [ 674.325827][T22803] ? __local_bh_enable_ip+0xd0/0x130 [ 674.325850][T22803] ? lockdep_hardirqs_on+0x7a/0x110 [ 674.325875][T22803] ? __dev_queue_xmit+0x28b/0x3870 [ 674.325898][T22803] ? __local_bh_enable_ip+0xd0/0x130 [ 674.325920][T22803] ? __dev_queue_xmit+0x28b/0x3870 [ 674.325966][T22803] ? __pfx_rtnl_newlink+0x10/0x10 [ 674.325985][T22803] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 674.326009][T22803] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 674.326028][T22803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 674.326047][T22803] ? ref_tracker_free+0x693/0x840 [ 674.326063][T22803] ? __copy_skb_header+0xa3/0x4a0 [ 674.326088][T22803] ? __pfx_ref_tracker_free+0x10/0x10 [ 674.326115][T22803] netlink_rcv_skb+0x232/0x4b0 [ 674.326137][T22803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 674.326159][T22803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.326190][T22803] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.326214][T22803] netlink_unicast+0x80f/0x9b0 [ 674.326248][T22803] ? __pfx_netlink_unicast+0x10/0x10 [ 674.326276][T22803] ? netlink_sendmsg+0x650/0xb40 [ 674.326295][T22803] ? skb_put+0x11b/0x210 [ 674.326320][T22803] netlink_sendmsg+0x813/0xb40 [ 674.326349][T22803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.326373][T22803] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.326402][T22803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.326426][T22803] ____sys_sendmsg+0x972/0x9f0 [ 674.326458][T22803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.326490][T22803] ? import_iovec+0x73/0xa0 [ 674.326521][T22803] ___sys_sendmsg+0x2a5/0x360 [ 674.326550][T22803] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.326604][T22803] ? __fget_files+0x2a/0x420 [ 674.326631][T22803] ? __fget_files+0x3a0/0x420 [ 674.326664][T22803] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.326689][T22803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.326722][T22803] ? __pfx_ksys_write+0x10/0x10 [ 674.326752][T22803] do_syscall_64+0x14d/0xf80 [ 674.326777][T22803] ? trace_irq_disable+0x3b/0x150 [ 674.326793][T22803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.326811][T22803] ? clear_bhb_loop+0x40/0x90 [ 674.326833][T22803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.326851][T22803] RIP: 0033:0x7f804bd9c819 [ 674.326869][T22803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.326884][T22803] RSP: 002b:00007f804ccec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.326904][T22803] RAX: ffffffffffffffda RBX: 00007f804c015fa0 RCX: 00007f804bd9c819 [ 674.326918][T22803] RDX: 000000000400c044 RSI: 0000200000000000 RDI: 0000000000000003 [ 674.326931][T22803] RBP: 00007f804ccec090 R08: 0000000000000000 R09: 0000000000000000 [ 674.326942][T22803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.326953][T22803] R13: 00007f804c016038 R14: 00007f804c015fa0 R15: 00007ffcf2694098 [ 674.326982][T22803] [ 675.053461][T22816] __nla_validate_parse: 15 callbacks suppressed [ 675.053483][T22816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4036'. [ 675.247646][T22822] FAULT_INJECTION: forcing a failure. [ 675.247646][T22822] name failslab, interval 1, probability 0, space 0, times 0 [ 675.296020][T22823] FAULT_INJECTION: forcing a failure. [ 675.296020][T22823] name failslab, interval 1, probability 0, space 0, times 0 [ 675.316458][T22823] CPU: 1 UID: 0 PID: 22823 Comm: syz.4.4039 Not tainted syzkaller #0 PREEMPT(full) [ 675.316486][T22823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 675.316498][T22823] Call Trace: [ 675.316506][T22823] [ 675.316514][T22823] dump_stack_lvl+0xe8/0x150 [ 675.316544][T22823] should_fail_ex+0x412/0x560 [ 675.316574][T22823] should_failslab+0xa8/0x100 [ 675.316600][T22823] __kmalloc_noprof+0xe8/0x760 [ 675.316622][T22823] ? ethnl_default_set_doit+0x16a/0xad0 [ 675.316651][T22823] ethnl_default_set_doit+0x16a/0xad0 [ 675.316674][T22823] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 675.316699][T22823] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 675.316731][T22823] genl_family_rcv_msg_doit+0x22a/0x330 [ 675.316756][T22823] ? __asan_memcpy+0x40/0x70 [ 675.316779][T22823] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 675.316816][T22823] ? bpf_lsm_capable+0x9/0x20 [ 675.316841][T22823] ? security_capable+0x7e/0x2c0 [ 675.316873][T22823] genl_rcv_msg+0x61c/0x7a0 [ 675.316904][T22823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.316928][T22823] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 675.316952][T22823] ? __lock_acquire+0x6b5/0x2cf0 [ 675.317011][T22823] netlink_rcv_skb+0x232/0x4b0 [ 675.317033][T22823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.317059][T22823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.317104][T22823] ? down_read+0x272/0x2e0 [ 675.317120][T22823] ? genl_rcv+0xd/0x40 [ 675.317145][T22823] genl_rcv+0x28/0x40 [ 675.317167][T22823] netlink_unicast+0x80f/0x9b0 [ 675.317204][T22823] ? __pfx_netlink_unicast+0x10/0x10 [ 675.317234][T22823] ? netlink_sendmsg+0x650/0xb40 [ 675.317252][T22823] ? skb_put+0x11b/0x210 [ 675.317277][T22823] netlink_sendmsg+0x813/0xb40 [ 675.317307][T22823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.317331][T22823] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.317357][T22823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.317381][T22823] ____sys_sendmsg+0x972/0x9f0 [ 675.317413][T22823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.317445][T22823] ? import_iovec+0x73/0xa0 [ 675.317469][T22823] ___sys_sendmsg+0x2a5/0x360 [ 675.317498][T22823] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.317556][T22823] ? __fget_files+0x2a/0x420 [ 675.317583][T22823] ? __fget_files+0x3a0/0x420 [ 675.317619][T22823] __x64_sys_sendmsg+0x1bd/0x2a0 [ 675.317644][T22823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.317676][T22823] ? __pfx_ksys_write+0x10/0x10 [ 675.317707][T22823] do_syscall_64+0x14d/0xf80 [ 675.317732][T22823] ? trace_irq_disable+0x3b/0x150 [ 675.317748][T22823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.317767][T22823] ? clear_bhb_loop+0x40/0x90 [ 675.317789][T22823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.317808][T22823] RIP: 0033:0x7f671659c819 [ 675.317827][T22823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.317843][T22823] RSP: 002b:00007f671736e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.317862][T22823] RAX: ffffffffffffffda RBX: 00007f6716816090 RCX: 00007f671659c819 [ 675.317875][T22823] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014 [ 675.317887][T22823] RBP: 00007f671736e090 R08: 0000000000000000 R09: 0000000000000000 [ 675.317899][T22823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.317910][T22823] R13: 00007f6716816128 R14: 00007f6716816090 R15: 00007ffc866cbd18 [ 675.317939][T22823] [ 675.440166][T22822] CPU: 0 UID: 0 PID: 22822 Comm: syz.2.4038 Not tainted syzkaller #0 PREEMPT(full) [ 675.440193][T22822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 675.440205][T22822] Call Trace: [ 675.440213][T22822] [ 675.440221][T22822] dump_stack_lvl+0xe8/0x150 [ 675.440251][T22822] should_fail_ex+0x412/0x560 [ 675.440281][T22822] should_failslab+0xa8/0x100 [ 675.440307][T22822] __kmalloc_cache_noprof+0x88/0x660 [ 675.440327][T22822] ? __pfx___mutex_lock+0x10/0x10 [ 675.440352][T22822] ? mgmt_pending_new+0x65/0x1e0 [ 675.440383][T22822] mgmt_pending_new+0x65/0x1e0 [ 675.440414][T22822] mgmt_pending_add+0x35/0x140 [ 675.440442][T22822] set_connectable+0x53f/0x800 [ 675.440468][T22822] ? __pfx_set_connectable+0x10/0x10 [ 675.440499][T22822] hci_mgmt_cmd+0xa14/0xfa0 [ 675.440528][T22822] hci_sock_sendmsg+0x6dd/0xf40 [ 675.440554][T22822] ? __pfx_aa_sk_perm+0x10/0x10 [ 675.440580][T22822] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 675.440607][T22822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.440633][T22822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.440656][T22822] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 675.440680][T22822] sock_write_iter+0x49b/0x4f0 [ 675.440708][T22822] ? __pfx_sock_write_iter+0x10/0x10 [ 675.440745][T22822] ? bpf_lsm_file_permission+0x9/0x20 [ 675.440765][T22822] ? security_file_permission+0x75/0x260 [ 675.440795][T22822] vfs_write+0x61d/0xb90 [ 675.440823][T22822] ? __pfx_vfs_write+0x10/0x10 [ 675.440852][T22822] ? __fget_files+0x2a/0x420 [ 675.440885][T22822] ksys_write+0x150/0x270 [ 675.440908][T22822] ? __pfx_ksys_write+0x10/0x10 [ 675.440939][T22822] do_syscall_64+0x14d/0xf80 [ 675.440964][T22822] ? trace_irq_disable+0x3b/0x150 [ 675.440979][T22822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.440997][T22822] ? clear_bhb_loop+0x40/0x90 [ 675.441019][T22822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.441036][T22822] RIP: 0033:0x7f819559c819 [ 675.441054][T22822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.441070][T22822] RSP: 002b:00007f81964db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.441089][T22822] RAX: ffffffffffffffda RBX: 00007f8195815fa0 RCX: 00007f819559c819 [ 675.441110][T22822] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004 [ 675.441121][T22822] RBP: 00007f81964db090 R08: 0000000000000000 R09: 0000000000000000 [ 675.441133][T22822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.441144][T22822] R13: 00007f8195816038 R14: 00007f8195815fa0 R15: 00007ffde98755c8 [ 675.441175][T22822] [ 676.200180][T22830] tipc: Enabled bearer , priority 0 [ 676.207759][T22830] syzkaller0: entered promiscuous mode [ 676.213308][T22830] syzkaller0: entered allmulticast mode [ 676.228953][T22833] netlink: 'syz.0.4042': attribute type 21 has an invalid length. [ 676.241842][T22833] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4042'. [ 676.268634][T22830] tipc: Resetting bearer [ 676.277678][T22833] netlink: 'syz.0.4042': attribute type 4 has an invalid length. [ 676.291999][T22830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4043'. [ 676.307391][T22833] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4042'. [ 676.332209][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 676.363202][T22833] netlink: 'syz.0.4042': attribute type 1 has an invalid length. [ 676.417625][T22833] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4042'. [ 676.483154][T22836] bond46: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 676.516177][T22836] bond46 (unregistering): Released all slaves [ 676.691501][T22847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4046'. [ 676.709148][T22849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4047'. [ 676.792245][T22849] veth45: entered promiscuous mode [ 676.807150][T22849] bond38: (slave veth45): Enslaving as an active interface with an up link [ 676.830337][T22851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4047'. [ 676.855093][T22851] 8021q: adding VLAN 0 to HW filter on device bond38 [ 676.986755][T22829] tipc: Resetting bearer [ 677.021715][T22866] FAULT_INJECTION: forcing a failure. [ 677.021715][T22866] name failslab, interval 1, probability 0, space 0, times 0 [ 677.050914][T22866] CPU: 0 UID: 0 PID: 22866 Comm: syz.0.4050 Not tainted syzkaller #0 PREEMPT(full) [ 677.050940][T22866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.050951][T22866] Call Trace: [ 677.050960][T22866] [ 677.050968][T22866] dump_stack_lvl+0xe8/0x150 [ 677.051004][T22866] should_fail_ex+0x412/0x560 [ 677.051034][T22866] should_failslab+0xa8/0x100 [ 677.051058][T22866] ? skb_clone+0x212/0x3a0 [ 677.051082][T22866] kmem_cache_alloc_noprof+0x87/0x650 [ 677.051102][T22866] ? apparmor_capable+0x126/0x170 [ 677.051129][T22866] skb_clone+0x212/0x3a0 [ 677.051151][T22866] ? nfnetlink_rcv+0x4b0/0x27b0 [ 677.051171][T22866] nfnetlink_rcv+0x4e2/0x27b0 [ 677.051200][T22866] ? lockdep_hardirqs_on+0x7a/0x110 [ 677.051226][T22866] ? __dev_queue_xmit+0x28b/0x3870 [ 677.051256][T22866] ? __local_bh_enable_ip+0xd0/0x130 [ 677.051280][T22866] ? __dev_queue_xmit+0x1efe/0x3870 [ 677.051303][T22866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.051333][T22866] ? __dev_queue_xmit+0x28b/0x3870 [ 677.051359][T22866] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 677.051396][T22866] ? ref_tracker_free+0x693/0x840 [ 677.051412][T22866] ? __copy_skb_header+0xa3/0x4a0 [ 677.051440][T22866] ? __pfx_ref_tracker_free+0x10/0x10 [ 677.051472][T22866] ? skb_clone+0x246/0x3a0 [ 677.051499][T22866] ? __netlink_deliver_tap+0x807/0x850 [ 677.051523][T22866] ? netlink_deliver_tap+0x2e/0x1b0 [ 677.051558][T22866] netlink_unicast+0x80f/0x9b0 [ 677.051593][T22866] ? __pfx_netlink_unicast+0x10/0x10 [ 677.051623][T22866] ? netlink_sendmsg+0x650/0xb40 [ 677.051641][T22866] ? skb_put+0x11b/0x210 [ 677.051666][T22866] netlink_sendmsg+0x813/0xb40 [ 677.051695][T22866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.051719][T22866] ? aa_sock_msg_perm+0xf1/0x1b0 [ 677.051751][T22866] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.051775][T22866] ____sys_sendmsg+0x972/0x9f0 [ 677.051808][T22866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.051840][T22866] ? import_iovec+0x73/0xa0 [ 677.051864][T22866] ___sys_sendmsg+0x2a5/0x360 [ 677.051892][T22866] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.051946][T22866] ? __fget_files+0x2a/0x420 [ 677.051971][T22866] ? __fget_files+0x3a0/0x420 [ 677.052005][T22866] __x64_sys_sendmsg+0x1bd/0x2a0 [ 677.052032][T22866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.052063][T22866] ? __pfx_ksys_write+0x10/0x10 [ 677.052094][T22866] do_syscall_64+0x14d/0xf80 [ 677.052118][T22866] ? trace_irq_disable+0x3b/0x150 [ 677.052135][T22866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.052154][T22866] ? clear_bhb_loop+0x40/0x90 [ 677.052176][T22866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.052194][T22866] RIP: 0033:0x7f1cca39c819 [ 677.052211][T22866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.052227][T22866] RSP: 002b:00007f1ccb26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.052254][T22866] RAX: ffffffffffffffda RBX: 00007f1cca615fa0 RCX: 00007f1cca39c819 [ 677.052268][T22866] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 677.052280][T22866] RBP: 00007f1ccb26d090 R08: 0000000000000000 R09: 0000000000000000 [ 677.052291][T22866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.052302][T22866] R13: 00007f1cca616038 R14: 00007f1cca615fa0 R15: 00007ffc2db036a8 [ 677.052331][T22866] [ 677.054895][T22829] tipc: Disabling bearer [ 677.199583][T22872] openvswitch: netlink: IP tunnel dst address not specified [ 677.220397][T22873] netlink: 'syz.3.4056': attribute type 21 has an invalid length. [ 677.340665][T22882] netlink: 'syz.3.4056': attribute type 1 has an invalid length. [ 677.424479][T22873] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4056'. [ 677.481937][T22873] netlink: 'syz.3.4056': attribute type 4 has an invalid length. [ 677.540262][T22889] bond39: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 677.561370][T22889] bond39 (unregistering): Released all slaves [ 677.714827][T22899] syzkaller1: entered promiscuous mode [ 677.727528][T22899] syzkaller1: entered allmulticast mode [ 677.923325][T22912] lo speed is unknown, defaulting to 1000 [ 678.172922][T22927] SET target dimension over the limit! [ 678.377227][T22935] FAULT_INJECTION: forcing a failure. [ 678.377227][T22935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.426422][T22935] CPU: 1 UID: 0 PID: 22935 Comm: syz.1.4067 Not tainted syzkaller #0 PREEMPT(full) [ 678.426450][T22935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 678.426462][T22935] Call Trace: [ 678.426471][T22935] [ 678.426479][T22935] dump_stack_lvl+0xe8/0x150 [ 678.426510][T22935] should_fail_ex+0x412/0x560 [ 678.426543][T22935] _copy_from_user+0x2d/0xb0 [ 678.426566][T22935] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 678.426599][T22935] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 678.426627][T22935] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 678.426654][T22935] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 678.426693][T22935] ip_generic_getfrag+0x149/0x2d0 [ 678.426719][T22935] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 678.426743][T22935] ? skb_page_frag_refill+0x199/0x310 [ 678.426784][T22935] __ip6_append_data+0x20d8/0x3c50 [ 678.426825][T22935] ? __pfx_raw6_getfrag+0x10/0x10 [ 678.426868][T22935] ? __pfx___ip6_append_data+0x10/0x10 [ 678.426889][T22935] ? ip6_setup_cork+0x544/0xf30 [ 678.426911][T22935] ? ip6_append_data+0x1b7/0x280 [ 678.426933][T22935] ip6_append_data+0x10f/0x280 [ 678.426956][T22935] ? __pfx_raw6_getfrag+0x10/0x10 [ 678.426981][T22935] rawv6_sendmsg+0x12d3/0x18e0 [ 678.427016][T22935] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 678.427050][T22935] ? aa_sk_perm+0x6d5/0x900 [ 678.427084][T22935] ? __pfx_aa_sk_perm+0x10/0x10 [ 678.427113][T22935] ? sock_rps_record_flow+0x19/0x350 [ 678.427139][T22935] ? inet_sendmsg+0x2f4/0x370 [ 678.427160][T22935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.427185][T22935] ____sys_sendmsg+0x80a/0x9f0 [ 678.427216][T22935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.427247][T22935] ? import_iovec+0x73/0xa0 [ 678.427271][T22935] ___sys_sendmsg+0x2a5/0x360 [ 678.427301][T22935] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.427359][T22935] ? __fget_files+0x2a/0x420 [ 678.427385][T22935] ? __fget_files+0x3a0/0x420 [ 678.427422][T22935] __x64_sys_sendmsg+0x1bd/0x2a0 [ 678.427448][T22935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.427481][T22935] ? rcu_is_watching+0x15/0xb0 [ 678.427520][T22935] do_syscall_64+0x14d/0xf80 [ 678.427545][T22935] ? trace_irq_disable+0x3b/0x150 [ 678.427562][T22935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.427582][T22935] ? clear_bhb_loop+0x40/0x90 [ 678.427604][T22935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.427623][T22935] RIP: 0033:0x7f804bd9c819 [ 678.427641][T22935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.427657][T22935] RSP: 002b:00007f804ccec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.427678][T22935] RAX: ffffffffffffffda RBX: 00007f804c015fa0 RCX: 00007f804bd9c819 [ 678.427692][T22935] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 678.427704][T22935] RBP: 00007f804ccec090 R08: 0000000000000000 R09: 0000000000000000 [ 678.427716][T22935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.427728][T22935] R13: 00007f804c016038 R14: 00007f804c015fa0 R15: 00007ffcf2694098 [ 678.427767][T22935] [ 678.823267][T22942] FAULT_INJECTION: forcing a failure. [ 678.823267][T22942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.848575][T22944] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 678.900064][T22942] CPU: 1 UID: 0 PID: 22942 Comm: syz.1.4070 Not tainted syzkaller #0 PREEMPT(full) [ 678.900092][T22942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 678.900104][T22942] Call Trace: [ 678.900113][T22942] [ 678.900121][T22942] dump_stack_lvl+0xe8/0x150 [ 678.900150][T22942] should_fail_ex+0x412/0x560 [ 678.900181][T22942] _copy_from_iter+0x1d3/0x1670 [ 678.900213][T22942] ? rcu_is_watching+0x15/0xb0 [ 678.900242][T22942] ? __pfx__copy_from_iter+0x10/0x10 [ 678.900276][T22942] ? netlink_sendmsg+0x650/0xb40 [ 678.900296][T22942] ? skb_put+0x11b/0x210 [ 678.900322][T22942] netlink_sendmsg+0x6c0/0xb40 [ 678.900352][T22942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.900376][T22942] ? aa_sock_msg_perm+0xf1/0x1b0 [ 678.900406][T22942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.900430][T22942] ____sys_sendmsg+0x972/0x9f0 [ 678.900463][T22942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.900495][T22942] ? import_iovec+0x73/0xa0 [ 678.900519][T22942] ___sys_sendmsg+0x2a5/0x360 [ 678.900547][T22942] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.900601][T22942] ? __fget_files+0x2a/0x420 [ 678.900627][T22942] ? __fget_files+0x3a0/0x420 [ 678.900664][T22942] __x64_sys_sendmsg+0x1bd/0x2a0 [ 678.900691][T22942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.900724][T22942] ? __pfx_ksys_write+0x10/0x10 [ 678.900755][T22942] do_syscall_64+0x14d/0xf80 [ 678.900789][T22942] ? trace_irq_disable+0x3b/0x150 [ 678.900807][T22942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.900825][T22942] ? clear_bhb_loop+0x40/0x90 [ 678.900848][T22942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.900865][T22942] RIP: 0033:0x7f804bd9c819 [ 678.900883][T22942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.900899][T22942] RSP: 002b:00007f804ccec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.900920][T22942] RAX: ffffffffffffffda RBX: 00007f804c015fa0 RCX: 00007f804bd9c819 [ 678.900935][T22942] RDX: 0000000020004000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 678.900947][T22942] RBP: 00007f804ccec090 R08: 0000000000000000 R09: 0000000000000000 [ 678.900959][T22942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.900971][T22942] R13: 00007f804c016038 R14: 00007f804c015fa0 R15: 00007ffcf2694098 [ 678.901002][T22942] [ 679.308966][T22951] validate_nla: 2 callbacks suppressed [ 679.308987][T22951] netlink: 'syz.1.4073': attribute type 21 has an invalid length. [ 679.322747][T22951] netlink: 'syz.1.4073': attribute type 4 has an invalid length. [ 679.366856][T22954] syzkaller1: entered promiscuous mode [ 679.372491][T22954] syzkaller1: entered allmulticast mode [ 679.392751][T22957] netlink: 'syz.1.4073': attribute type 1 has an invalid length. [ 679.507543][T22951] bond39: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 679.529187][T22951] bond39 (unregistering): Released all slaves [ 679.650495][T22970] FAULT_INJECTION: forcing a failure. [ 679.650495][T22970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.681644][T22970] CPU: 0 UID: 0 PID: 22970 Comm: syz.0.4078 Not tainted syzkaller #0 PREEMPT(full) [ 679.681671][T22970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 679.681683][T22970] Call Trace: [ 679.681692][T22970] [ 679.681700][T22970] dump_stack_lvl+0xe8/0x150 [ 679.681729][T22970] should_fail_ex+0x412/0x560 [ 679.681758][T22970] _copy_from_user+0x2d/0xb0 [ 679.681779][T22970] inet_ioctl+0x2f8/0x560 [ 679.681803][T22970] ? __pfx_inet_ioctl+0x10/0x10 [ 679.681840][T22970] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 679.681876][T22970] sock_do_ioctl+0x101/0x320 [ 679.681906][T22970] ? __pfx_sock_do_ioctl+0x10/0x10 [ 679.681930][T22970] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 679.681968][T22970] sock_ioctl+0x5c6/0x7f0 [ 679.681994][T22970] ? __pfx_sock_ioctl+0x10/0x10 [ 679.682019][T22970] ? __fget_files+0x2a/0x420 [ 679.682044][T22970] ? __fget_files+0x3a0/0x420 [ 679.682066][T22970] ? __fget_files+0x2a/0x420 [ 679.682092][T22970] ? bpf_lsm_file_ioctl+0x9/0x20 [ 679.682115][T22970] ? __pfx_sock_ioctl+0x10/0x10 [ 679.682138][T22970] __se_sys_ioctl+0xfc/0x170 [ 679.682161][T22970] do_syscall_64+0x14d/0xf80 [ 679.682183][T22970] ? trace_irq_disable+0x3b/0x150 [ 679.682198][T22970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.682217][T22970] ? clear_bhb_loop+0x40/0x90 [ 679.682240][T22970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.682258][T22970] RIP: 0033:0x7f1cca39c819 [ 679.682276][T22970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.682293][T22970] RSP: 002b:00007f1ccb26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.682313][T22970] RAX: ffffffffffffffda RBX: 00007f1cca615fa0 RCX: 00007f1cca39c819 [ 679.682327][T22970] RDX: 0000200000000840 RSI: 000000000000890b RDI: 0000000000000005 [ 679.682339][T22970] RBP: 00007f1ccb26d090 R08: 0000000000000000 R09: 0000000000000000 [ 679.682350][T22970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.682362][T22970] R13: 00007f1cca616038 R14: 00007f1cca615fa0 R15: 00007ffc2db036a8 [ 679.682391][T22970] [ 679.914505][T22968] tipc: Enabled bearer , priority 0 [ 679.922740][T22968] syzkaller0: entered promiscuous mode [ 679.932126][T22968] syzkaller0: entered allmulticast mode [ 680.029328][T22986] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 680.079711][T22971] tipc: Resetting bearer [ 680.106686][T22967] tipc: Resetting bearer [ 680.158127][T22967] tipc: Disabling bearer [ 680.232424][T22998] __nla_validate_parse: 16 callbacks suppressed [ 680.232444][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 680.252445][T22999] netlink: 724 bytes leftover after parsing attributes in process `syz.1.4084'. [ 680.273333][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 680.296654][T22999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4084'. [ 680.305642][T22999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4084'. [ 680.329183][T22999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4084'. [ 680.468892][T23010] netlink: 'syz.2.4086': attribute type 2 has an invalid length. [ 680.533627][T23010] : entered promiscuous mode [ 680.553731][T23013] syzkaller1: entered promiscuous mode [ 680.571362][T23013] syzkaller1: entered allmulticast mode [ 680.787263][T23037] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4091'. [ 680.875615][T23041] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 680.885533][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4094'. [ 680.895193][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4094'. [ 681.020644][T23046] syzkaller0: entered promiscuous mode [ 681.026661][T23046] syzkaller0: entered allmulticast mode [ 682.956422][T22984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.965662][T23005] netlink: 'syz.0.4081': attribute type 1 has an invalid length. [ 682.979664][T23005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4081'. [ 683.157755][T23070] syzkaller1: entered promiscuous mode [ 683.170099][T23070] syzkaller1: entered allmulticast mode [ 683.417873][T23095] ieee802154 phy0 wpan0: encryption failed: -90 [ 683.870843][T23112] netlink: 'syz.1.4110': attribute type 1 has an invalid length. [ 684.199060][T23124] tipc: Enabled bearer , priority 0 [ 684.209536][T23124] syzkaller0: entered promiscuous mode [ 684.215043][T23124] syzkaller0: entered allmulticast mode [ 684.264191][T23124] tipc: Resetting bearer [ 684.281259][T23122] tipc: Resetting bearer [ 684.401167][T23122] tipc: Disabling bearer [ 684.621604][T23148] syzkaller1: entered promiscuous mode [ 684.627276][T23148] syzkaller1: entered allmulticast mode [ 685.461074][T23166] xt_hashlimit: size too large, truncated to 1048576 [ 685.670766][T23175] netlink: 'syz.1.4122': attribute type 1 has an invalid length. [ 685.687704][T23171] __nla_validate_parse: 5 callbacks suppressed [ 685.687724][T23171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4121'. [ 685.721387][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.728066][T23175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4122'. [ 685.730280][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 685.744120][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'. [ 686.036330][T21954] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 686.119933][T23194] FAULT_INJECTION: forcing a failure. [ 686.119933][T23194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.144270][T23190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4126'. [ 686.182922][T23192] lo speed is unknown, defaulting to 1000 [ 686.186749][T23194] CPU: 0 UID: 0 PID: 23194 Comm: syz.3.4127 Not tainted syzkaller #0 PREEMPT(full) [ 686.186776][T23194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 686.186788][T23194] Call Trace: [ 686.186796][T23194] [ 686.186804][T23194] dump_stack_lvl+0xe8/0x150 [ 686.186833][T23194] should_fail_ex+0x412/0x560 [ 686.186863][T23194] _copy_to_user+0x31/0xb0 [ 686.186886][T23194] simple_read_from_buffer+0xe1/0x170 [ 686.186926][T23194] proc_fail_nth_read+0x1bb/0x230 [ 686.186955][T23194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.186982][T23194] ? rw_verify_area+0x2a6/0x4d0 [ 686.187000][T23194] ? reacquire_held_locks+0x104/0x190 [ 686.187024][T23194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.187050][T23194] vfs_read+0x20c/0xa70 [ 686.187067][T23194] ? fdget_pos+0x246/0x320 [ 686.187088][T23194] ? __pfx___mutex_lock+0x10/0x10 [ 686.187113][T23194] ? __pfx_vfs_read+0x10/0x10 [ 686.187133][T23194] ? __fget_files+0x2a/0x420 [ 686.187162][T23194] ? __fget_files+0x3a0/0x420 [ 686.187186][T23194] ? __fget_files+0x2a/0x420 [ 686.187217][T23194] ksys_read+0x150/0x270 [ 686.187239][T23194] ? __pfx_ksys_read+0x10/0x10 [ 686.187257][T23194] ? fput+0xa0/0xd0 [ 686.187289][T23194] do_syscall_64+0x14d/0xf80 [ 686.187313][T23194] ? trace_irq_disable+0x3b/0x150 [ 686.187328][T23194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.187346][T23194] ? clear_bhb_loop+0x40/0x90 [ 686.187367][T23194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.187384][T23194] RIP: 0033:0x7f7e3bb5d04e [ 686.187400][T23194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 686.187415][T23194] RSP: 002b:00007f7e3ca4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.187435][T23194] RAX: ffffffffffffffda RBX: 00007f7e3ca4f6c0 RCX: 00007f7e3bb5d04e [ 686.187447][T23194] RDX: 000000000000000f RSI: 00007f7e3ca4f0a0 RDI: 0000000000000004 [ 686.187459][T23194] RBP: 00007f7e3ca4f090 R08: 0000000000000000 R09: 0000000000000000 [ 686.187470][T23194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.187480][T23194] R13: 00007f7e3be16038 R14: 00007f7e3be15fa0 R15: 00007ffc55945de8 [ 686.187508][T23194] [ 686.325396][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 686.419591][T23206] netlink: 'syz.3.4129': attribute type 13 has an invalid length. [ 686.436712][T23206] netlink: 'syz.3.4129': attribute type 17 has an invalid length. [ 686.461426][T23199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 686.958046][T23217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4131'. [ 686.981408][T23217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4131'. [ 687.006570][T23202] bridge0: port 3(dummy0) entered disabled state [ 687.415910][T23206] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.446560][T23230] netlink: 'syz.4.4135': attribute type 1 has an invalid length. [ 687.469683][T23206] bridge0: port 3(dummy0) entered blocking state [ 687.476229][T23206] bridge0: port 3(dummy0) entered forwarding state [ 687.476865][T23230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4135'. [ 687.515900][T23206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.057305][T23238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4138'. [ 688.285063][T23250] netlink: 'syz.4.4140': attribute type 1 has an invalid length. [ 688.388811][T23250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.689849][T23266] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 688.719502][T23269] vlan6: entered promiscuous mode [ 690.144887][T23337] netlink: 'syz.3.4159': attribute type 1 has an invalid length. [ 690.766213][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 690.774327][ C1] lec:lec_tx_timeout: lec0 [ 691.147901][T23361] __nla_validate_parse: 7 callbacks suppressed [ 691.147923][T23361] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4164'. [ 691.277899][T23365] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4166'. [ 691.443411][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 691.527499][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4170'. [ 691.590238][T23379] erspan0: entered promiscuous mode [ 691.595655][T23379] macvtap3: entered promiscuous mode [ 691.637505][T23379] macvtap3: entered allmulticast mode [ 691.639419][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4170'. [ 691.656429][T23379] erspan0: entered allmulticast mode [ 691.760971][T23384] erspan0: left allmulticast mode [ 691.769166][T23384] erspan0: left promiscuous mode [ 691.867489][T23391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4172'. [ 692.536593][T23415] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4178'. [ 692.985600][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4181'. [ 693.670788][T23449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4186'. [ 693.827838][T23456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4187'. [ 694.374829][T23483] FAULT_INJECTION: forcing a failure. [ 694.374829][T23483] name failslab, interval 1, probability 0, space 0, times 0 [ 694.438399][T23483] CPU: 0 UID: 0 PID: 23483 Comm: syz.0.4193 Not tainted syzkaller #0 PREEMPT(full) [ 694.438426][T23483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.438437][T23483] Call Trace: [ 694.438446][T23483] [ 694.438454][T23483] dump_stack_lvl+0xe8/0x150 [ 694.438485][T23483] should_fail_ex+0x412/0x560 [ 694.438516][T23483] should_failslab+0xa8/0x100 [ 694.438542][T23483] __kmalloc_noprof+0xe8/0x760 [ 694.438561][T23483] ? ip_rt_ioctl+0x94d/0x1250 [ 694.438582][T23483] ? sock_do_ioctl+0x101/0x320 [ 694.438607][T23483] ? fib_create_info+0x1723/0x31f0 [ 694.438636][T23483] fib_create_info+0x1723/0x31f0 [ 694.438685][T23483] fib_table_insert+0xc8/0x1b50 [ 694.438723][T23483] ? __kasan_kmalloc+0x93/0xb0 [ 694.438746][T23483] ? __kmalloc_cache_noprof+0x31c/0x660 [ 694.438769][T23483] ? fib_new_table+0x10a/0x2d0 [ 694.438792][T23483] ip_rt_ioctl+0x4db/0x1250 [ 694.438819][T23483] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 694.438865][T23483] inet_ioctl+0x49d/0x560 [ 694.438889][T23483] ? __pfx_inet_ioctl+0x10/0x10 [ 694.438933][T23483] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 694.438962][T23483] sock_do_ioctl+0x101/0x320 [ 694.438990][T23483] ? __pfx_sock_do_ioctl+0x10/0x10 [ 694.439015][T23483] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 694.439057][T23483] sock_ioctl+0x5c6/0x7f0 [ 694.439101][T23483] ? __pfx_sock_ioctl+0x10/0x10 [ 694.439127][T23483] ? __fget_files+0x2a/0x420 [ 694.439152][T23483] ? __fget_files+0x3a0/0x420 [ 694.439178][T23483] ? __fget_files+0x2a/0x420 [ 694.439206][T23483] ? bpf_lsm_file_ioctl+0x9/0x20 [ 694.439230][T23483] ? __pfx_sock_ioctl+0x10/0x10 [ 694.439256][T23483] __se_sys_ioctl+0xfc/0x170 [ 694.439280][T23483] do_syscall_64+0x14d/0xf80 [ 694.439305][T23483] ? trace_irq_disable+0x3b/0x150 [ 694.439320][T23483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.439339][T23483] ? clear_bhb_loop+0x40/0x90 [ 694.439362][T23483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.439380][T23483] RIP: 0033:0x7f1cca39c819 [ 694.439397][T23483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.439412][T23483] RSP: 002b:00007f1ccb26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.439436][T23483] RAX: ffffffffffffffda RBX: 00007f1cca615fa0 RCX: 00007f1cca39c819 [ 694.439450][T23483] RDX: 0000200000000840 RSI: 000000000000890b RDI: 0000000000000005 [ 694.439462][T23483] RBP: 00007f1ccb26d090 R08: 0000000000000000 R09: 0000000000000000 [ 694.439474][T23483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.439485][T23483] R13: 00007f1cca616038 R14: 00007f1cca615fa0 R15: 00007ffc2db036a8 [ 694.439516][T23483] [ 695.959749][T23537] FAULT_INJECTION: forcing a failure. [ 695.959749][T23537] name failslab, interval 1, probability 0, space 0, times 0 [ 695.989489][T23537] CPU: 1 UID: 0 PID: 23537 Comm: syz.1.4204 Not tainted syzkaller #0 PREEMPT(full) [ 695.989517][T23537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 695.989529][T23537] Call Trace: [ 695.989537][T23537] [ 695.989551][T23537] dump_stack_lvl+0xe8/0x150 [ 695.989581][T23537] should_fail_ex+0x412/0x560 [ 695.989614][T23537] should_failslab+0xa8/0x100 [ 695.989640][T23537] __kmalloc_cache_noprof+0x88/0x660 [ 695.989663][T23537] ? sctp_add_bind_addr+0x8c/0x370 [ 695.989695][T23537] sctp_add_bind_addr+0x8c/0x370 [ 695.989725][T23537] sctp_copy_local_addr_list+0x314/0x4f0 [ 695.989754][T23537] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 695.989781][T23537] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 695.989809][T23537] ? sctp_v6_is_any+0x64/0x80 [ 695.989844][T23537] ? sctp_copy_one_addr+0x93/0x360 [ 695.989873][T23537] sctp_bind_addr_copy+0xb3/0x3c0 [ 695.989900][T23537] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 695.989927][T23537] sctp_connect_new_asoc+0x2ff/0x6b0 [ 695.989951][T23537] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 695.989972][T23537] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 695.989991][T23537] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 695.990010][T23537] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 695.990030][T23537] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 695.990052][T23537] ? security_sctp_bind_connect+0x7e/0x2c0 [ 695.990078][T23537] sctp_sendmsg+0x1528/0x2c10 [ 695.990112][T23537] ? __pfx_sctp_sendmsg+0x10/0x10 [ 695.990135][T23537] ? aa_sk_perm+0x6d5/0x900 [ 695.990166][T23537] ? __pfx_aa_sk_perm+0x10/0x10 [ 695.990193][T23537] ? sock_rps_record_flow+0x19/0x350 [ 695.990215][T23537] ? __pfx_inet_sendmsg+0x10/0x10 [ 695.990237][T23537] ? inet_sendmsg+0x2f4/0x370 [ 695.990257][T23537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.990276][T23537] ? __pfx_inet_sendmsg+0x10/0x10 [ 695.990297][T23537] __sys_sendto+0x5de/0x710 [ 695.990320][T23537] ? __pfx___sys_sendto+0x10/0x10 [ 695.990338][T23537] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 695.990375][T23537] ? __fget_files+0x3a0/0x420 [ 695.990408][T23537] ? ksys_write+0x242/0x270 [ 695.990428][T23537] ? __pfx_ksys_write+0x10/0x10 [ 695.990456][T23537] __x64_sys_sendto+0xde/0x100 [ 695.990482][T23537] do_syscall_64+0x14d/0xf80 [ 695.990505][T23537] ? trace_irq_disable+0x3b/0x150 [ 695.990521][T23537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.990539][T23537] ? clear_bhb_loop+0x40/0x90 [ 695.990560][T23537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.990579][T23537] RIP: 0033:0x7f804bd9c819 [ 695.990597][T23537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.990612][T23537] RSP: 002b:00007f804ccec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 695.990633][T23537] RAX: ffffffffffffffda RBX: 00007f804c015fa0 RCX: 00007f804bd9c819 [ 695.990646][T23537] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 695.990658][T23537] RBP: 00007f804ccec090 R08: 0000200000000280 R09: 000000000000001c [ 695.990670][T23537] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002 [ 695.990681][T23537] R13: 00007f804c016038 R14: 00007f804c015fa0 R15: 00007ffcf2694098 [ 695.990712][T23537] [ 696.476612][T23532] __nla_validate_parse: 2 callbacks suppressed [ 696.476631][T23532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4202'. [ 696.849370][T23553] netlink: 'syz.2.4207': attribute type 1 has an invalid length. [ 696.953915][T23561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4209'. [ 697.034690][T23553] bond39: entered promiscuous mode [ 697.049688][T23553] 8021q: adding VLAN 0 to HW filter on device bond39 [ 697.058151][T23560] FAULT_INJECTION: forcing a failure. [ 697.058151][T23560] name failslab, interval 1, probability 0, space 0, times 0 [ 697.081599][T23560] CPU: 0 UID: 0 PID: 23560 Comm: syz.3.4210 Not tainted syzkaller #0 PREEMPT(full) [ 697.081624][T23560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 697.081635][T23560] Call Trace: [ 697.081643][T23560] [ 697.081652][T23560] dump_stack_lvl+0xe8/0x150 [ 697.081682][T23560] should_fail_ex+0x412/0x560 [ 697.081714][T23560] should_failslab+0xa8/0x100 [ 697.081740][T23560] __kvmalloc_node_noprof+0x178/0x8a0 [ 697.081762][T23560] ? __raw_spin_lock_init+0x45/0x100 [ 697.081782][T23560] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 697.081816][T23560] alloc_netdev_mqs+0xa4b/0x11b0 [ 697.081847][T23560] rtnl_create_link+0x31f/0xd70 [ 697.081876][T23560] rtnl_newlink_create+0x277/0xb70 [ 697.081902][T23560] ? __mutex_lock+0x5ac/0x1300 [ 697.081934][T23560] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 697.081960][T23560] ? __pfx___mutex_lock+0x10/0x10 [ 697.081998][T23560] ? ns_capable+0x89/0xe0 [ 697.082032][T23560] rtnl_newlink+0x1666/0x1be0 [ 697.082069][T23560] ? __pfx_rtnl_newlink+0x10/0x10 [ 697.082087][T23560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.082141][T23560] ? kasan_quarantine_put+0xbb/0x1f0 [ 697.082161][T23560] ? lockdep_hardirqs_on+0x7a/0x110 [ 697.082190][T23560] ? kmem_cache_free+0x187/0x630 [ 697.082211][T23560] ? nlmon_xmit+0xb0/0x100 [ 697.082246][T23560] ? __lock_acquire+0x6b5/0x2cf0 [ 697.082276][T23560] ? __local_bh_enable_ip+0xd0/0x130 [ 697.082300][T23560] ? lockdep_hardirqs_on+0x7a/0x110 [ 697.082325][T23560] ? __dev_queue_xmit+0x28b/0x3870 [ 697.082350][T23560] ? __local_bh_enable_ip+0xd0/0x130 [ 697.082376][T23560] ? __dev_queue_xmit+0x28b/0x3870 [ 697.082426][T23560] ? __pfx_rtnl_newlink+0x10/0x10 [ 697.082446][T23560] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 697.082469][T23560] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 697.082488][T23560] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 697.082506][T23560] ? ref_tracker_free+0x693/0x840 [ 697.082522][T23560] ? __copy_skb_header+0xa3/0x4a0 [ 697.082549][T23560] ? __pfx_ref_tracker_free+0x10/0x10 [ 697.082566][T23560] ? __skb_clone+0x63/0x7a0 [ 697.082599][T23560] netlink_rcv_skb+0x232/0x4b0 [ 697.082622][T23560] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 697.082645][T23560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.082677][T23560] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.082706][T23560] netlink_unicast+0x80f/0x9b0 [ 697.082742][T23560] ? __pfx_netlink_unicast+0x10/0x10 [ 697.082772][T23560] ? netlink_sendmsg+0x650/0xb40 [ 697.082790][T23560] ? skb_put+0x11b/0x210 [ 697.082815][T23560] netlink_sendmsg+0x813/0xb40 [ 697.082845][T23560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.082870][T23560] ? aa_sock_msg_perm+0xf1/0x1b0 [ 697.082899][T23560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.082924][T23560] ____sys_sendmsg+0x972/0x9f0 [ 697.082957][T23560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.082988][T23560] ? import_iovec+0x73/0xa0 [ 697.083018][T23560] ___sys_sendmsg+0x2a5/0x360 [ 697.083047][T23560] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.083103][T23560] ? __fget_files+0x2a/0x420 [ 697.083129][T23560] ? __fget_files+0x3a0/0x420 [ 697.083164][T23560] __x64_sys_sendmsg+0x1bd/0x2a0 [ 697.083190][T23560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.083224][T23560] ? __pfx_ksys_write+0x10/0x10 [ 697.083256][T23560] do_syscall_64+0x14d/0xf80 [ 697.083281][T23560] ? trace_irq_disable+0x3b/0x150 [ 697.083297][T23560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.083315][T23560] ? clear_bhb_loop+0x40/0x90 [ 697.083336][T23560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.083354][T23560] RIP: 0033:0x7f7e3bb9c819 [ 697.083372][T23560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.083388][T23560] RSP: 002b:00007f7e3ca4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.083405][T23560] RAX: ffffffffffffffda RBX: 00007f7e3be15fa0 RCX: 00007f7e3bb9c819 [ 697.083417][T23560] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 697.083427][T23560] RBP: 00007f7e3ca4f090 R08: 0000000000000000 R09: 0000000000000000 [ 697.083438][T23560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 697.083449][T23560] R13: 00007f7e3be16038 R14: 00007f7e3be15fa0 R15: 00007ffc55945de8 [ 697.083478][T23560] [ 697.550128][T23562] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4208'. [ 697.567536][T23563] vlan5: entered allmulticast mode [ 697.572714][T23563] bridge4: entered allmulticast mode [ 697.740021][T23565] bridge4: port 1(bond39) entered blocking state [ 697.746849][T23565] bridge4: port 1(bond39) entered disabled state [ 697.753698][T23565] bond39: entered allmulticast mode [ 697.765675][T23565] bond39: entered promiscuous mode [ 697.862632][T23586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4215'. [ 697.924548][T23586] IPv6: sit2: Disabled Multicast RS [ 698.900212][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'. [ 698.999645][T23632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4224'. [ 699.325229][T23647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 699.365412][T23640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4225'. [ 699.404059][T23645] lo speed is unknown, defaulting to 1000 [ 699.442454][T23647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4227'. [ 699.480396][T23650] veth47: entered promiscuous mode [ 699.514555][T23650] bond40: (slave veth47): Enslaving as an active interface with an up link [ 699.586786][T23654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4225'. [ 699.588515][T23647] 8021q: adding VLAN 0 to HW filter on device bond40 [ 699.748607][T23664] FAULT_INJECTION: forcing a failure. [ 699.748607][T23664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.774104][T23664] CPU: 0 UID: 0 PID: 23664 Comm: syz.0.4231 Not tainted syzkaller #0 PREEMPT(full) [ 699.774132][T23664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 699.774144][T23664] Call Trace: [ 699.774152][T23664] [ 699.774160][T23664] dump_stack_lvl+0xe8/0x150 [ 699.774191][T23664] should_fail_ex+0x412/0x560 [ 699.774222][T23664] _copy_to_user+0x31/0xb0 [ 699.774266][T23664] simple_read_from_buffer+0xe1/0x170 [ 699.774297][T23664] proc_fail_nth_read+0x1bb/0x230 [ 699.774326][T23664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.774356][T23664] ? rw_verify_area+0x2a6/0x4d0 [ 699.774376][T23664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.774403][T23664] vfs_read+0x20c/0xa70 [ 699.774421][T23664] ? fdget_pos+0x246/0x320 [ 699.774443][T23664] ? __pfx___mutex_lock+0x10/0x10 [ 699.774471][T23664] ? __pfx_vfs_read+0x10/0x10 [ 699.774493][T23664] ? __fget_files+0x2a/0x420 [ 699.774523][T23664] ? __fget_files+0x3a0/0x420 [ 699.774548][T23664] ? __fget_files+0x2a/0x420 [ 699.774582][T23664] ksys_read+0x150/0x270 [ 699.774604][T23664] ? __pfx_ksys_read+0x10/0x10 [ 699.774635][T23664] do_syscall_64+0x14d/0xf80 [ 699.774667][T23664] ? trace_irq_disable+0x3b/0x150 [ 699.774688][T23664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.774706][T23664] ? clear_bhb_loop+0x40/0x90 [ 699.774729][T23664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.774747][T23664] RIP: 0033:0x7f1cca35d04e [ 699.774764][T23664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 699.774780][T23664] RSP: 002b:00007f1ccb26cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 699.774800][T23664] RAX: ffffffffffffffda RBX: 00007f1ccb26d6c0 RCX: 00007f1cca35d04e [ 699.774812][T23664] RDX: 000000000000000f RSI: 00007f1ccb26d0a0 RDI: 0000000000000015 [ 699.774824][T23664] RBP: 00007f1ccb26d090 R08: 0000000000000000 R09: 0000000000000000 [ 699.774835][T23664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.774845][T23664] R13: 00007f1cca616038 R14: 00007f1cca615fa0 R15: 00007ffc2db036a8 [ 699.774870][T23664] [ 701.090700][T23727] netlink: 'syz.2.4240': attribute type 13 has an invalid length. [ 701.127543][T23727] netlink: 'syz.2.4240': attribute type 17 has an invalid length. [ 701.129870][T23730] netlink: 'syz.4.4243': attribute type 1 has an invalid length. [ 701.654872][ T795] lo speed is unknown, defaulting to 1000 [ 701.716574][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 701.734437][T23727] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.745498][T23727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 701.809390][T23740] 8021q: adding VLAN 0 to HW filter on device bond45 [ 702.104608][T11080] lo speed is unknown, defaulting to 1000 [ 702.123547][T23770] __nla_validate_parse: 3 callbacks suppressed [ 702.123565][T23770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4247'. [ 702.146798][T23776] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4248'. [ 702.327451][T23773] syzkaller0: entered promiscuous mode [ 702.329053][T23788] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 702.333037][T23773] syzkaller0: entered allmulticast mode [ 702.356713][T23789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4253'. [ 702.374659][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4251'. [ 702.396076][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4251'. [ 702.407402][T23792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4252'. [ 702.521750][T23796] netlink: 'syz.4.4254': attribute type 1 has an invalid length. [ 702.608524][T23798] xt_CT: No such helper "netbios-ns" [ 702.666464][T23803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4254'. [ 704.536028][T23796] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR [ 704.624751][T23808] syzkaller0: entered promiscuous mode [ 704.647258][T23808] syzkaller0: entered allmulticast mode [ 704.944673][T23842] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 705.067250][T23860] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4262'. [ 705.092245][T23842] 8021q: adding VLAN 0 to HW filter on device bond40 [ 705.155749][T23860] syzkaller0: entered promiscuous mode [ 705.168648][T23860] syzkaller0: entered allmulticast mode [ 705.194811][T23863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4264'. [ 705.420535][T23871] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4267'. [ 705.510148][T23876] siw: device registration error -23 [ 707.060093][T23884] bond46: invalid ARP target 0.0.0.0 specified for addition [ 707.068426][T23884] bond46: option arp_ip_target: invalid value (0) [ 707.077296][T23884] bond46 (unregistering): Released all slaves [ 707.420681][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4276'. [ 707.445714][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4276'. [ 707.478343][T23909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 707.498967][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4276'. [ 707.858487][T23919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4279'. [ 707.908420][T23915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4278'. [ 707.919176][T23918] lo speed is unknown, defaulting to 1000 [ 708.098311][T23923] netlink: 'syz.2.4280': attribute type 1 has an invalid length. [ 708.183445][T23923] bond41: entered promiscuous mode [ 708.198353][T23923] 8021q: adding VLAN 0 to HW filter on device bond41 [ 708.374302][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4282'. [ 708.391693][T23936] macsec1: entered promiscuous mode [ 708.423391][T23936] batadv_slave_1: entered promiscuous mode [ 708.766137][T23960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4290'. [ 709.126420][T23980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'. [ 709.163234][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4293'. [ 709.346717][T23989] netlink: 'syz.4.4296': attribute type 1 has an invalid length. [ 709.461265][T23989] bond46: entered promiscuous mode [ 709.489719][T23989] 8021q: adding VLAN 0 to HW filter on device bond46 [ 709.851557][T24012] IPv6: Can't replace route, no match found [ 710.318421][T24040] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 710.376277][T24040] bond39: entered promiscuous mode [ 710.382089][T24040] 8021q: adding VLAN 0 to HW filter on device bond39 [ 710.625881][T24057] xt_bpf: check failed: parse error [ 711.369074][T24073] IPv6: Can't replace route, no match found [ 711.824834][T24100] FAULT_INJECTION: forcing a failure. [ 711.824834][T24100] name failslab, interval 1, probability 0, space 0, times 0 [ 711.866435][T24100] CPU: 0 UID: 0 PID: 24100 Comm: syz.0.4321 Not tainted syzkaller #0 PREEMPT(full) [ 711.866461][T24100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 711.866472][T24100] Call Trace: [ 711.866481][T24100] [ 711.866489][T24100] dump_stack_lvl+0xe8/0x150 [ 711.866517][T24100] should_fail_ex+0x412/0x560 [ 711.866547][T24100] should_failslab+0xa8/0x100 [ 711.866570][T24100] __kmalloc_cache_noprof+0x88/0x660 [ 711.866592][T24100] ? __asan_memset+0x22/0x50 [ 711.866609][T24100] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 711.866632][T24100] ? __kmalloc_cache_noprof+0x15b/0x660 [ 711.866657][T24100] alloc_netdev_mqs+0xbf8/0x11b0 [ 711.866686][T24100] rtnl_create_link+0x31f/0xd70 [ 711.866717][T24100] rtnl_newlink_create+0x277/0xb70 [ 711.866738][T24100] ? __pfx___nla_validate_parse+0x10/0x10 [ 711.866763][T24100] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 711.866787][T24100] ? __pfx___mutex_lock+0x10/0x10 [ 711.866822][T24100] ? ns_capable+0x89/0xe0 [ 711.866849][T24100] rtnl_newlink+0x1666/0x1be0 [ 711.866879][T24100] ? __pfx_rtnl_newlink+0x10/0x10 [ 711.866897][T24100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.866948][T24100] ? kasan_quarantine_put+0xbb/0x1f0 [ 711.866968][T24100] ? lockdep_hardirqs_on+0x7a/0x110 [ 711.866997][T24100] ? kmem_cache_free+0x187/0x630 [ 711.867026][T24100] ? nlmon_xmit+0xb0/0x100 [ 711.867060][T24100] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867091][T24100] ? __local_bh_enable_ip+0xd0/0x130 [ 711.867115][T24100] ? lockdep_hardirqs_on+0x7a/0x110 [ 711.867139][T24100] ? __dev_queue_xmit+0x28b/0x3870 [ 711.867161][T24100] ? __local_bh_enable_ip+0xd0/0x130 [ 711.867181][T24100] ? __dev_queue_xmit+0x28b/0x3870 [ 711.867224][T24100] ? __pfx_rtnl_newlink+0x10/0x10 [ 711.867244][T24100] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 711.867268][T24100] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 711.867287][T24100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 711.867305][T24100] ? ref_tracker_free+0x693/0x840 [ 711.867322][T24100] ? __copy_skb_header+0xa3/0x4a0 [ 711.867347][T24100] ? __pfx_ref_tracker_free+0x10/0x10 [ 711.867375][T24100] netlink_rcv_skb+0x232/0x4b0 [ 711.867398][T24100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 711.867420][T24100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 711.867451][T24100] ? netlink_deliver_tap+0x2e/0x1b0 [ 711.867479][T24100] netlink_unicast+0x80f/0x9b0 [ 711.867515][T24100] ? __pfx_netlink_unicast+0x10/0x10 [ 711.867544][T24100] ? netlink_sendmsg+0x650/0xb40 [ 711.867562][T24100] ? skb_put+0x11b/0x210 [ 711.867586][T24100] netlink_sendmsg+0x813/0xb40 [ 711.867616][T24100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.867640][T24100] ? aa_sock_msg_perm+0xf1/0x1b0 [ 711.867669][T24100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 711.867693][T24100] ____sys_sendmsg+0x972/0x9f0 [ 711.867727][T24100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.867761][T24100] ? import_iovec+0x73/0xa0 [ 711.867786][T24100] ___sys_sendmsg+0x2a5/0x360 [ 711.867815][T24100] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.867873][T24100] ? __fget_files+0x2a/0x420 [ 711.867898][T24100] ? __fget_files+0x3a0/0x420 [ 711.867934][T24100] __x64_sys_sendmsg+0x1bd/0x2a0 [ 711.867961][T24100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 711.867995][T24100] ? __pfx_ksys_write+0x10/0x10 [ 711.868033][T24100] do_syscall_64+0x14d/0xf80 [ 711.868059][T24100] ? trace_irq_disable+0x3b/0x150 [ 711.868075][T24100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.868094][T24100] ? clear_bhb_loop+0x40/0x90 [ 711.868117][T24100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.868135][T24100] RIP: 0033:0x7f1cca39c819 [ 711.868154][T24100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.868171][T24100] RSP: 002b:00007f1ccb26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.868191][T24100] RAX: ffffffffffffffda RBX: 00007f1cca615fa0 RCX: 00007f1cca39c819 [ 711.868205][T24100] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 711.868216][T24100] RBP: 00007f1ccb26d090 R08: 0000000000000000 R09: 0000000000000000 [ 711.868228][T24100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.868239][T24100] R13: 00007f1cca616038 R14: 00007f1cca615fa0 R15: 00007ffc2db036a8 [ 711.868268][T24100] [ 712.418306][T24111] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 712.463366][T24102] netlink: 'syz.2.4322': attribute type 1 has an invalid length. [ 712.564287][T24120] netlink: 'syz.3.4325': attribute type 5 has an invalid length. [ 712.575315][T24121] netlink: 'syz.1.4327': attribute type 1 has an invalid length. [ 712.597731][T24115] bond40: (slave geneve3): making interface the new active one [ 712.611748][T24115] bond40: (slave geneve3): Enslaving as an active interface with an up link [ 712.632555][T24116] __nla_validate_parse: 7 callbacks suppressed [ 712.632576][T24116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4326'. [ 712.698184][T24102] bond42: entered promiscuous mode [ 712.727792][T24102] 8021q: adding VLAN 0 to HW filter on device bond42 [ 712.739138][T24132] netlink: 'syz.1.4327': attribute type 5 has an invalid length. [ 712.794893][T18655] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 712.803619][T18655] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 712.892681][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4326'. [ 713.058470][T18655] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 713.097850][T18655] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 713.114980][T24122] lo speed is unknown, defaulting to 1000 [ 713.212730][T24146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4329'. [ 713.437535][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'. [ 713.665486][T24166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4337'. [ 713.679008][T24166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4337'. [ 713.841466][T24178] netlink: 'syz.0.4338': attribute type 13 has an invalid length. [ 713.857931][T24178] netlink: 'syz.0.4338': attribute type 17 has an invalid length. [ 713.969206][T24178] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.998448][T24178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.711914][T24207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4342'. [ 714.897227][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 714.966144][T24222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4347'. [ 715.000664][T24222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4347'. [ 715.347925][T24228] lo speed is unknown, defaulting to 1000 [ 715.431512][T24234] netlink: 'syz.0.4350': attribute type 1 has an invalid length. [ 715.601256][T24234] netlink: 'syz.0.4350': attribute type 5 has an invalid length. [ 716.152169][T24270] netlink: 'syz.2.4357': attribute type 13 has an invalid length. [ 716.173167][T24270] netlink: 'syz.2.4357': attribute type 17 has an invalid length. [ 716.675777][ T5941] lo speed is unknown, defaulting to 1000 [ 716.732926][T24285] netlink: 'syz.4.4360': attribute type 21 has an invalid length. [ 716.770900][T24270] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.799654][T24270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 716.892748][T11123] lo speed is unknown, defaulting to 1000 [ 716.899919][T24285] netlink: 'syz.4.4360': attribute type 4 has an invalid length. [ 717.000117][T24289] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 717.078088][T24284] bond47: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 717.157860][T24284] bond47 (unregistering): Released all slaves [ 717.295216][T24299] tipc: Enabled bearer , priority 0 [ 717.317659][T24299] syzkaller0: entered promiscuous mode [ 717.340998][T24299] syzkaller0: entered allmulticast mode [ 717.386462][T24299] tipc: Resetting bearer [ 717.448224][T24297] tipc: Resetting bearer [ 717.479729][T24311] FAULT_INJECTION: forcing a failure. [ 717.479729][T24311] name failslab, interval 1, probability 0, space 0, times 0 [ 717.486808][T24297] tipc: Disabling bearer [ 717.515070][T24311] CPU: 1 UID: 0 PID: 24311 Comm: syz.2.4368 Not tainted syzkaller #0 PREEMPT(full) [ 717.515096][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.515107][T24311] Call Trace: [ 717.515116][T24311] [ 717.515123][T24311] dump_stack_lvl+0xe8/0x150 [ 717.515155][T24311] should_fail_ex+0x412/0x560 [ 717.515180][T24311] should_failslab+0xa8/0x100 [ 717.515200][T24311] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 717.515216][T24311] ? __kasan_kmalloc+0x93/0xb0 [ 717.515232][T24311] ? __request_module+0x2ec/0x660 [ 717.515249][T24311] ? __kmalloc_cache_noprof+0x31c/0x660 [ 717.515270][T24311] kstrdup+0x42/0x100 [ 717.515292][T24311] __request_module+0x2ec/0x660 [ 717.515321][T24311] ? __pfx___request_module+0x10/0x10 [ 717.515346][T24311] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 717.515377][T24311] ? trace_irq_disable+0x3b/0x150 [ 717.515400][T24311] load_settype+0x3a/0xe0 [ 717.515425][T24311] ip_set_create+0x4d2/0x1a40 [ 717.515448][T24311] ? ip_set_create+0x4eb/0x1a40 [ 717.515488][T24311] ? __pfx_ip_set_create+0x10/0x10 [ 717.515531][T24311] nfnetlink_rcv_msg+0xc00/0x12c0 [ 717.515546][T24311] ? unwind_get_return_address+0x4d/0x90 [ 717.515567][T24311] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 717.515591][T24311] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 717.515642][T24311] netlink_rcv_skb+0x232/0x4b0 [ 717.515663][T24311] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 717.515682][T24311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.515709][T24311] ? bpf_lsm_capable+0x9/0x20 [ 717.515733][T24311] ? security_capable+0x7e/0x2c0 [ 717.515762][T24311] nfnetlink_rcv+0x2c0/0x27b0 [ 717.515788][T24311] ? __local_bh_enable_ip+0xd0/0x130 [ 717.515812][T24311] ? lockdep_hardirqs_on+0x7a/0x110 [ 717.515835][T24311] ? __dev_queue_xmit+0x28b/0x3870 [ 717.515858][T24311] ? __local_bh_enable_ip+0xd0/0x130 [ 717.515879][T24311] ? __dev_queue_xmit+0x28b/0x3870 [ 717.515902][T24311] ? __dev_queue_xmit+0x1efe/0x3870 [ 717.515924][T24311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.515952][T24311] ? __dev_queue_xmit+0x28b/0x3870 [ 717.515975][T24311] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 717.515996][T24311] ? __pfx___dev_queue_xmit+0x10/0x10 [ 717.516023][T24311] ? ref_tracker_free+0x693/0x840 [ 717.516039][T24311] ? __copy_skb_header+0xa3/0x4a0 [ 717.516061][T24311] ? __pfx_ref_tracker_free+0x10/0x10 [ 717.516090][T24311] ? skb_clone+0x246/0x3a0 [ 717.516116][T24311] ? __netlink_deliver_tap+0x807/0x850 [ 717.516134][T24311] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.516161][T24311] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.516183][T24311] netlink_unicast+0x80f/0x9b0 [ 717.516213][T24311] ? __pfx_netlink_unicast+0x10/0x10 [ 717.516240][T24311] ? netlink_sendmsg+0x650/0xb40 [ 717.516256][T24311] ? skb_put+0x11b/0x210 [ 717.516278][T24311] netlink_sendmsg+0x813/0xb40 [ 717.516304][T24311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.516323][T24311] ? aa_sock_msg_perm+0xf1/0x1b0 [ 717.516349][T24311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.516370][T24311] ____sys_sendmsg+0x972/0x9f0 [ 717.516399][T24311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.516431][T24311] ? import_iovec+0x73/0xa0 [ 717.516464][T24311] ___sys_sendmsg+0x2a5/0x360 [ 717.516494][T24311] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.516541][T24311] ? __fget_files+0x2a/0x420 [ 717.516564][T24311] ? __fget_files+0x3a0/0x420 [ 717.516595][T24311] __x64_sys_sendmsg+0x1bd/0x2a0 [ 717.516618][T24311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.516646][T24311] ? __pfx_ksys_write+0x10/0x10 [ 717.516675][T24311] do_syscall_64+0x14d/0xf80 [ 717.516697][T24311] ? trace_irq_disable+0x3b/0x150 [ 717.516711][T24311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.516728][T24311] ? clear_bhb_loop+0x40/0x90 [ 717.516747][T24311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.516764][T24311] RIP: 0033:0x7f819559c819 [ 717.516780][T24311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.516797][T24311] RSP: 002b:00007f81964db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.516817][T24311] RAX: ffffffffffffffda RBX: 00007f8195815fa0 RCX: 00007f819559c819 [ 717.516830][T24311] RDX: 0000000020004000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 717.516843][T24311] RBP: 00007f81964db090 R08: 0000000000000000 R09: 0000000000000000 [ 717.516854][T24311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.516866][T24311] R13: 00007f8195816038 R14: 00007f8195815fa0 R15: 00007ffde98755c8 [ 717.516893][T24311] [ 717.960265][T24311] Can't find ip_set type has [ 718.007013][T24324] __nla_validate_parse: 17 callbacks suppressed [ 718.007035][T24324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4371'. [ 718.160592][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4373'. [ 718.177663][T24334] netlink: 'syz.0.4374': attribute type 29 has an invalid length. [ 718.185830][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4373'. [ 718.199711][T24333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4373'. [ 718.212575][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4373'. [ 718.526078][T24350] FAULT_INJECTION: forcing a failure. [ 718.526078][T24350] name failslab, interval 1, probability 0, space 0, times 0 [ 718.551132][T24352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4377'. [ 718.566313][T24350] CPU: 0 UID: 0 PID: 24350 Comm: syz.3.4379 Not tainted syzkaller #0 PREEMPT(full) [ 718.566340][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 718.566351][T24350] Call Trace: [ 718.566358][T24350] [ 718.566366][T24350] dump_stack_lvl+0xe8/0x150 [ 718.566397][T24350] should_fail_ex+0x412/0x560 [ 718.566430][T24350] should_failslab+0xa8/0x100 [ 718.566471][T24350] __kvmalloc_node_noprof+0x178/0x8a0 [ 718.566493][T24350] ? alloc_netdev_mqs+0xc89/0x11b0 [ 718.566518][T24350] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 718.566550][T24350] alloc_netdev_mqs+0xc89/0x11b0 [ 718.566586][T24350] rtnl_create_link+0x31f/0xd70 [ 718.566618][T24350] rtnl_newlink_create+0x277/0xb70 [ 718.566641][T24350] ? __pfx___nla_validate_parse+0x10/0x10 [ 718.566670][T24350] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 718.566695][T24350] ? __pfx___mutex_lock+0x10/0x10 [ 718.566732][T24350] ? ns_capable+0x89/0xe0 [ 718.566760][T24350] rtnl_newlink+0x1666/0x1be0 [ 718.566794][T24350] ? __pfx_rtnl_newlink+0x10/0x10 [ 718.566813][T24350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.566866][T24350] ? kasan_quarantine_put+0xbb/0x1f0 [ 718.566886][T24350] ? lockdep_hardirqs_on+0x7a/0x110 [ 718.566917][T24350] ? kmem_cache_free+0x187/0x630 [ 718.566937][T24350] ? nlmon_xmit+0xb0/0x100 [ 718.566971][T24350] ? __lock_acquire+0x6b5/0x2cf0 [ 718.566999][T24350] ? __local_bh_enable_ip+0xd0/0x130 [ 718.567022][T24350] ? lockdep_hardirqs_on+0x7a/0x110 [ 718.567046][T24350] ? __dev_queue_xmit+0x28b/0x3870 [ 718.567070][T24350] ? __local_bh_enable_ip+0xd0/0x130 [ 718.567091][T24350] ? __dev_queue_xmit+0x28b/0x3870 [ 718.567140][T24350] ? __pfx_rtnl_newlink+0x10/0x10 [ 718.567160][T24350] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 718.567183][T24350] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 718.567202][T24350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 718.567220][T24350] ? ref_tracker_free+0x693/0x840 [ 718.567236][T24350] ? __copy_skb_header+0xa3/0x4a0 [ 718.567261][T24350] ? __pfx_ref_tracker_free+0x10/0x10 [ 718.567288][T24350] netlink_rcv_skb+0x232/0x4b0 [ 718.567311][T24350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 718.567331][T24350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 718.567361][T24350] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.567387][T24350] netlink_unicast+0x80f/0x9b0 [ 718.567423][T24350] ? __pfx_netlink_unicast+0x10/0x10 [ 718.567454][T24350] ? netlink_sendmsg+0x650/0xb40 [ 718.567472][T24350] ? skb_put+0x11b/0x210 [ 718.567498][T24350] netlink_sendmsg+0x813/0xb40 [ 718.567529][T24350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.567553][T24350] ? aa_sock_msg_perm+0xf1/0x1b0 [ 718.567587][T24350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 718.567612][T24350] ____sys_sendmsg+0x972/0x9f0 [ 718.567643][T24350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.567676][T24350] ? import_iovec+0x73/0xa0 [ 718.567700][T24350] ___sys_sendmsg+0x2a5/0x360 [ 718.567729][T24350] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.567787][T24350] ? __fget_files+0x2a/0x420 [ 718.567813][T24350] ? __fget_files+0x3a0/0x420 [ 718.567859][T24350] __x64_sys_sendmsg+0x1bd/0x2a0 [ 718.567887][T24350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.567920][T24350] ? __pfx_ksys_write+0x10/0x10 [ 718.567953][T24350] do_syscall_64+0x14d/0xf80 [ 718.567978][T24350] ? trace_irq_disable+0x3b/0x150 [ 718.567994][T24350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.568013][T24350] ? clear_bhb_loop+0x40/0x90 [ 718.568035][T24350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.568053][T24350] RIP: 0033:0x7f7e3bb9c819 [ 718.568071][T24350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.568086][T24350] RSP: 002b:00007f7e3ca4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.568106][T24350] RAX: ffffffffffffffda RBX: 00007f7e3be15fa0 RCX: 00007f7e3bb9c819 [ 718.568119][T24350] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 718.568131][T24350] RBP: 00007f7e3ca4f090 R08: 0000000000000000 R09: 0000000000000000 [ 718.568142][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.568153][T24350] R13: 00007f7e3be16038 R14: 00007f7e3be15fa0 R15: 00007ffc55945de8 [ 718.568183][T24350] [ 718.998415][T24360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 719.059720][T24345] lo speed is unknown, defaulting to 1000 [ 719.181977][T24342] syz.4.4376 (24342) used greatest stack depth: 17472 bytes left [ 719.282887][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'. [ 719.427966][T24376] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4385'. [ 719.498803][T24376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4385'. [ 720.106446][T24416] netlink: 'syz.1.4392': attribute type 13 has an invalid length. [ 720.178329][T24416] netlink: 'syz.1.4392': attribute type 17 has an invalid length. [ 720.221720][T24437] netlink: 'syz.3.4394': attribute type 1 has an invalid length. [ 720.339435][T24445] netlink: 'syz.3.4394': attribute type 5 has an invalid length. [ 720.730962][T24411] erspan0: left allmulticast mode [ 720.957125][T24411] batadv_slave_1: left promiscuous mode [ 720.976616][T24416] erspan0: left promiscuous mode [ 721.007567][T24416] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.018150][T24416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 721.037280][T24437] workqueue: Failed to create a rescuer kthread for wq "bond41": -EINTR [ 721.225137][T21408] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 721.299983][T21408] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 721.331054][T21408] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 721.353177][T21408] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 721.366289][T24448] lo speed is unknown, defaulting to 1000 [ 721.436142][T24489] FAULT_INJECTION: forcing a failure. [ 721.436142][T24489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.495928][T24489] CPU: 1 UID: 0 PID: 24489 Comm: syz.3.4406 Not tainted syzkaller #0 PREEMPT(full) [ 721.495952][T24489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 721.495964][T24489] Call Trace: [ 721.495972][T24489] [ 721.495980][T24489] dump_stack_lvl+0xe8/0x150 [ 721.496018][T24489] should_fail_ex+0x412/0x560 [ 721.496045][T24489] _copy_from_user+0x2d/0xb0 [ 721.496067][T24489] ___sys_sendmsg+0x1c6/0x360 [ 721.496095][T24489] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.496147][T24489] ? __fget_files+0x2a/0x420 [ 721.496175][T24489] ? __fget_files+0x3a0/0x420 [ 721.496207][T24489] __x64_sys_sendmsg+0x1bd/0x2a0 [ 721.496232][T24489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.496263][T24489] ? __pfx_ksys_write+0x10/0x10 [ 721.496295][T24489] do_syscall_64+0x14d/0xf80 [ 721.496321][T24489] ? trace_irq_disable+0x3b/0x150 [ 721.496337][T24489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.496355][T24489] ? clear_bhb_loop+0x40/0x90 [ 721.496377][T24489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.496395][T24489] RIP: 0033:0x7f7e3bb9c819 [ 721.496413][T24489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.496428][T24489] RSP: 002b:00007f7e3ca4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.496448][T24489] RAX: ffffffffffffffda RBX: 00007f7e3be15fa0 RCX: 00007f7e3bb9c819 [ 721.496462][T24489] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 721.496473][T24489] RBP: 00007f7e3ca4f090 R08: 0000000000000000 R09: 0000000000000000 [ 721.496483][T24489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.496493][T24489] R13: 00007f7e3be16038 R14: 00007f7e3be15fa0 R15: 00007ffc55945de8 [ 721.496518][T24489] [ 721.860278][T24501] netlink: 'syz.2.4409': attribute type 1 has an invalid length. [ 721.987339][T24507] netlink: 'syz.2.4412': attribute type 12 has an invalid length. [ 722.013122][T24503] syzkaller0: create flow: hash 2090689732 index 1 [ 722.056430][ T47] syzkaller0: tun_net_xmit 76 [ 722.084445][T24502] syzkaller0: delete flow: hash 2090689732 index 2 [ 723.094161][T24546] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 723.102570][T24546] __nla_validate_parse: 11 callbacks suppressed [ 723.102590][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 723.119671][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 723.324336][T24554] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4424'. [ 723.333814][T24554] netlink: 'syz.4.4424': attribute type 1 has an invalid length. [ 723.342311][T24554] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4424'. [ 724.064265][T24524] lo speed is unknown, defaulting to 1000 [ 724.097884][T24557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4426'. [ 724.109181][T24563] lo speed is unknown, defaulting to 1000 [ 724.139469][T24557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4426'. [ 724.596032][T24598] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 724.596517][T24597] siw: device registration error -23 [ 724.605853][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 724.621871][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 725.043019][T24621] netlink: 'syz.4.4437': attribute type 13 has an invalid length. [ 725.119120][T24621] netlink: 'syz.4.4437': attribute type 17 has an invalid length. [ 725.577691][T24621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 725.615134][T21408] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 725.704466][T24651] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4444'. [ 725.972534][T24666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4449'. [ 726.038582][T24666] vlan7: entered allmulticast mode [ 726.045951][T24666] bridge3: entered allmulticast mode [ 726.187316][T24672] netlink: 'syz.0.4451': attribute type 1 has an invalid length. [ 726.247501][T24672] bond47: entered promiscuous mode [ 726.267447][T24672] 8021q: adding VLAN 0 to HW filter on device bond47 [ 726.730693][T24688] veth43: entered promiscuous mode [ 726.778140][T24688] bond43: (slave veth43): Enslaving as an active interface with an up link [ 726.808431][T24689] 8021q: adding VLAN 0 to HW filter on device bond43 [ 727.674076][T24720] netlink: 'syz.0.4464': attribute type 13 has an invalid length. [ 727.716912][T24720] netlink: 'syz.0.4464': attribute type 17 has an invalid length. [ 728.074853][T24720] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.092410][T24720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.110478][T24729] __nla_validate_parse: 5 callbacks suppressed [ 728.110496][T24729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4467'. [ 728.136129][T24729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4467'. [ 728.178034][T24729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4467'. [ 728.209857][T24729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4467'. [ 728.320654][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4470'. [ 728.348122][T24751] openvswitch: netlink: Missing key (keys=40, expected=80) [ 728.467855][T24756] netlink: 'syz.1.4471': attribute type 1 has an invalid length. [ 728.477790][T24751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4470'. [ 728.522858][T24757] netlink: 'syz.1.4471': attribute type 4 has an invalid length. [ 729.594921][T24805] netlink: 'syz.0.4482': attribute type 13 has an invalid length. [ 729.608077][T24805] netlink: 'syz.0.4482': attribute type 17 has an invalid length. [ 729.716563][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 729.992806][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4486'. [ 730.145997][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4481'. [ 730.176813][T24808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4481'. [ 730.215228][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4481'. [ 730.343876][T24805] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.415767][T24805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 730.653573][T24851] netlink: 'syz.4.4491': attribute type 10 has an invalid length. [ 731.800701][T24896] batadv_slave_0: Caught tx_queue_len zero misconfig [ 731.989243][T24909] erspan0: entered promiscuous mode [ 731.994654][T24909] macvtap4: entered promiscuous mode [ 732.006638][T24909] macvtap4: entered allmulticast mode [ 732.022401][T24909] erspan0: entered allmulticast mode [ 732.037960][T24915] erspan0: left allmulticast mode [ 732.053474][T24915] erspan0: left promiscuous mode [ 732.065062][T24906] lo speed is unknown, defaulting to 1000 [ 732.228732][T24925] FAULT_INJECTION: forcing a failure. [ 732.228732][T24925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.260356][T24925] CPU: 0 UID: 0 PID: 24925 Comm: syz.0.4510 Not tainted syzkaller #0 PREEMPT(full) [ 732.260383][T24925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 732.260395][T24925] Call Trace: [ 732.260403][T24925] [ 732.260411][T24925] dump_stack_lvl+0xe8/0x150 [ 732.260442][T24925] should_fail_ex+0x412/0x560 [ 732.260473][T24925] _copy_from_iter+0x1d3/0x1670 [ 732.260505][T24925] ? rcu_is_watching+0x15/0xb0 [ 732.260533][T24925] ? __pfx__copy_from_iter+0x10/0x10 [ 732.260569][T24925] ? netlink_sendmsg+0x650/0xb40 [ 732.260589][T24925] ? skb_put+0x11b/0x210 [ 732.260613][T24925] netlink_sendmsg+0x6c0/0xb40 [ 732.260642][T24925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.260666][T24925] ? aa_sock_msg_perm+0xf1/0x1b0 [ 732.260694][T24925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 732.260717][T24925] ____sys_sendmsg+0x972/0x9f0 [ 732.260750][T24925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.260782][T24925] ? import_iovec+0x73/0xa0 [ 732.260803][T24925] ___sys_sendmsg+0x2a5/0x360 [ 732.260830][T24925] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.260879][T24925] ? __fget_files+0x2a/0x420 [ 732.260904][T24925] ? __fget_files+0x3a0/0x420 [ 732.260943][T24925] __x64_sys_sendmsg+0x1bd/0x2a0 [ 732.260968][T24925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 732.260997][T24925] ? __pfx_ksys_write+0x10/0x10 [ 732.261028][T24925] do_syscall_64+0x14d/0xf80 [ 732.261061][T24925] ? trace_irq_disable+0x3b/0x150 [ 732.261076][T24925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.261094][T24925] ? clear_bhb_loop+0x40/0x90 [ 732.261115][T24925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.261133][T24925] RIP: 0033:0x7f1cca39c819 [ 732.261151][T24925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.261166][T24925] RSP: 002b:00007f1ccb26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.261184][T24925] RAX: ffffffffffffffda RBX: 00007f1cca615fa0 RCX: 00007f1cca39c819 [ 732.261198][T24925] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 732.261209][T24925] RBP: 00007f1ccb26d090 R08: 0000000000000000 R09: 0000000000000000 [ 732.261220][T24925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.261229][T24925] R13: 00007f1cca616038 R14: 00007f1cca615fa0 R15: 00007ffc2db036a8 [ 732.261256][T24925] [ 732.677997][T24883] [ 732.680408][T24883] ====================================================== [ 732.687432][T24883] WARNING: possible circular locking dependency detected [ 732.694464][T24883] syzkaller #0 Not tainted [ 732.698878][T24883] ------------------------------------------------------ [ 732.705889][T24883] syz.2.4501/24883 is trying to acquire lock: [ 732.711941][T24883] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 732.721773][T24883] [ 732.721773][T24883] but task is already holding lock: [ 732.729224][T24883] ffff8880347c6e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 732.737931][T24883] [ 732.737931][T24883] which lock already depends on the new lock. [ 732.737931][T24883] [ 732.748328][T24883] [ 732.748328][T24883] the existing dependency chain (in reverse order) is: [ 732.757421][T24883] [ 732.757421][T24883] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 732.765163][T24883] lock_sock_nested+0x41/0x100 [ 732.770439][T24883] inet_shutdown+0x6a/0x390 [ 732.775540][T24883] nbd_mark_nsock_dead+0x2e9/0x560 [ 732.781248][T24883] recv_work+0x1c7f/0x1d90 [ 732.786176][T24883] process_scheduled_works+0xb6e/0x18c0 [ 732.792328][T24883] worker_thread+0xa53/0xfc0 [ 732.797452][T24883] kthread+0x388/0x470 [ 732.802027][T24883] ret_from_fork+0x51e/0xb90 [ 732.807130][T24883] ret_from_fork_asm+0x1a/0x30 [ 732.812502][T24883] [ 732.812502][T24883] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 732.820134][T24883] __mutex_lock+0x19f/0x1300 [ 732.825245][T24883] nbd_queue_rq+0x37b/0x1100 [ 732.830356][T24883] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 732.836513][T24883] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 732.843523][T24883] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 732.850016][T24883] blk_mq_run_hw_queue+0x348/0x4f0 [ 732.855636][T24883] blk_mq_dispatch_list+0xd16/0xe10 [ 732.861342][T24883] blk_mq_flush_plug_list+0x48d/0x570 [ 732.867227][T24883] __blk_flush_plug+0x3ed/0x4d0 [ 732.872610][T24883] __submit_bio+0x28d/0x580 [ 732.877643][T24883] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 732.883821][T24883] block_read_full_folio+0x599/0x830 [ 732.889644][T24883] filemap_read_folio+0x137/0x3b0 [ 732.895295][T24883] do_read_cache_folio+0x358/0x590 [ 732.900942][T24883] read_part_sector+0xb6/0x2b0 [ 732.906270][T24883] adfspart_check_ICS+0xa5/0xa40 [ 732.911731][T24883] bdev_disk_changed+0x7ba/0x1550 [ 732.917269][T24883] blkdev_get_whole+0x380/0x510 [ 732.922629][T24883] bdev_open+0x31e/0xd30 [ 732.927509][T24883] blkdev_open+0x470/0x610 [ 732.932477][T24883] do_dentry_open+0x785/0x14e0 [ 732.937757][T24883] vfs_open+0x3b/0x340 [ 732.942443][T24883] path_openat+0x2e08/0x3860 [ 732.947648][T24883] do_file_open+0x23e/0x4a0 [ 732.952674][T24883] do_sys_openat2+0x113/0x200 [ 732.958132][T24883] __x64_sys_openat+0x138/0x170 [ 732.963499][T24883] do_syscall_64+0x14d/0xf80 [ 732.968617][T24883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.975020][T24883] [ 732.975020][T24883] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 732.982219][T24883] __mutex_lock+0x19f/0x1300 [ 732.987325][T24883] nbd_queue_rq+0xc6/0x1100 [ 732.992426][T24883] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 732.998492][T24883] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 733.005346][T24883] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 733.011839][T24883] blk_mq_run_hw_queue+0x348/0x4f0 [ 733.017471][T24883] blk_mq_dispatch_list+0xd16/0xe10 [ 733.023358][T24883] blk_mq_flush_plug_list+0x48d/0x570 [ 733.029336][T24883] __blk_flush_plug+0x3ed/0x4d0 [ 733.034700][T24883] __submit_bio+0x28d/0x580 [ 733.039728][T24883] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 733.045880][T24883] block_read_full_folio+0x599/0x830 [ 733.051680][T24883] filemap_read_folio+0x137/0x3b0 [ 733.057214][T24883] do_read_cache_folio+0x358/0x590 [ 733.062844][T24883] read_part_sector+0xb6/0x2b0 [ 733.068116][T24883] adfspart_check_ICS+0xa5/0xa40 [ 733.073564][T24883] bdev_disk_changed+0x7ba/0x1550 [ 733.079101][T24883] blkdev_get_whole+0x380/0x510 [ 733.084555][T24883] bdev_open+0x31e/0xd30 [ 733.089323][T24883] blkdev_open+0x470/0x610 [ 733.094345][T24883] do_dentry_open+0x785/0x14e0 [ 733.099746][T24883] vfs_open+0x3b/0x340 [ 733.104339][T24883] path_openat+0x2e08/0x3860 [ 733.109442][T24883] do_file_open+0x23e/0x4a0 [ 733.114476][T24883] do_sys_openat2+0x113/0x200 [ 733.119671][T24883] __x64_sys_openat+0x138/0x170 [ 733.125044][T24883] do_syscall_64+0x14d/0xf80 [ 733.130159][T24883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.136557][T24883] [ 733.136557][T24883] -> #3 (set->srcu){.+.+}-{0:0}: [ 733.143681][T24883] __synchronize_srcu+0xca/0x300 [ 733.149154][T24883] elevator_switch+0x1e8/0x7a0 [ 733.154523][T24883] elevator_change+0x2cc/0x450 [ 733.159799][T24883] elevator_set_default+0x36c/0x430 [ 733.165506][T24883] blk_register_queue+0x366/0x430 [ 733.171049][T24883] __add_disk+0x677/0xd50 [ 733.175903][T24883] add_disk_fwnode+0xfb/0x480 [ 733.181093][T24883] nbd_dev_add+0x72c/0xb50 [ 733.186016][T24883] nbd_init+0x168/0x1f0 [ 733.190741][T24883] do_one_initcall+0x250/0x8d0 [ 733.196029][T24883] do_initcall_level+0x104/0x190 [ 733.201474][T24883] do_initcalls+0x59/0xa0 [ 733.206396][T24883] kernel_init_freeable+0x2a6/0x3e0 [ 733.212121][T24883] kernel_init+0x1d/0x1d0 [ 733.216977][T24883] ret_from_fork+0x51e/0xb90 [ 733.222075][T24883] ret_from_fork_asm+0x1a/0x30 [ 733.227348][T24883] [ 733.227348][T24883] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 733.235149][T24883] __mutex_lock+0x19f/0x1300 [ 733.240250][T24883] elevator_change+0x1b3/0x450 [ 733.245520][T24883] elevator_set_none+0xb5/0x140 [ 733.250884][T24883] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 733.257205][T24883] nbd_start_device+0x17f/0xb10 [ 733.262567][T24883] nbd_genl_connect+0x165b/0x1cf0 [ 733.268187][T24883] genl_family_rcv_msg_doit+0x22a/0x330 [ 733.274251][T24883] genl_rcv_msg+0x61c/0x7a0 [ 733.279285][T24883] netlink_rcv_skb+0x232/0x4b0 [ 733.284554][T24883] genl_rcv+0x28/0x40 [ 733.289237][T24883] netlink_unicast+0x80f/0x9b0 [ 733.294514][T24883] netlink_sendmsg+0x813/0xb40 [ 733.300044][T24883] ____sys_sendmsg+0x972/0x9f0 [ 733.305416][T24883] ___sys_sendmsg+0x2a5/0x360 [ 733.310616][T24883] __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.316167][T24883] do_syscall_64+0x14d/0xf80 [ 733.321466][T24883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.327874][T24883] [ 733.327874][T24883] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 733.336558][T24883] blk_alloc_queue+0x546/0x680 [ 733.342258][T24883] __blk_mq_alloc_disk+0x197/0x390 [ 733.347935][T24883] nbd_dev_add+0x499/0xb50 [ 733.352885][T24883] nbd_init+0x168/0x1f0 [ 733.357591][T24883] do_one_initcall+0x250/0x8d0 [ 733.362870][T24883] do_initcall_level+0x104/0x190 [ 733.368325][T24883] do_initcalls+0x59/0xa0 [ 733.373163][T24883] kernel_init_freeable+0x2a6/0x3e0 [ 733.378865][T24883] kernel_init+0x1d/0x1d0 [ 733.383704][T24883] ret_from_fork+0x51e/0xb90 [ 733.388799][T24883] ret_from_fork_asm+0x1a/0x30 [ 733.394076][T24883] [ 733.394076][T24883] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 733.401271][T24883] __lock_acquire+0x15a5/0x2cf0 [ 733.406630][T24883] lock_acquire+0xf0/0x2e0 [ 733.411644][T24883] fs_reclaim_acquire+0x71/0x100 [ 733.417090][T24883] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 733.423488][T24883] __alloc_skb+0x27d/0x7d0 [ 733.428410][T24883] tcp_send_active_reset+0x8a/0x5d0 [ 733.434123][T24883] __tcp_close+0x4c5/0xfe0 [ 733.439060][T24883] tcp_close+0x28/0x110 [ 733.443724][T24883] inet_release+0x143/0x190 [ 733.448733][T24883] sock_close+0xc3/0x240 [ 733.453494][T24883] __fput+0x44f/0xa70 [ 733.457984][T24883] task_work_run+0x1d9/0x270 [ 733.463166][T24883] exit_to_user_mode_loop+0xed/0x480 [ 733.468956][T24883] do_syscall_64+0x32d/0xf80 [ 733.474068][T24883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.480469][T24883] [ 733.480469][T24883] other info that might help us debug this: [ 733.480469][T24883] [ 733.490716][T24883] Chain exists of: [ 733.490716][T24883] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 733.490716][T24883] [ 733.503478][T24883] Possible unsafe locking scenario: [ 733.503478][T24883] [ 733.511000][T24883] CPU0 CPU1 [ 733.516354][T24883] ---- ---- [ 733.521959][T24883] lock(sk_lock-AF_INET6); [ 733.526536][T24883] lock(&nsock->tx_lock); [ 733.533544][T24883] lock(sk_lock-AF_INET6); [ 733.540655][T24883] lock(fs_reclaim); [ 733.544714][T24883] [ 733.544714][T24883] *** DEADLOCK *** [ 733.544714][T24883] [ 733.552941][T24883] 2 locks held by syz.2.4501/24883: [ 733.558228][T24883] #0: ffff88805b5587c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 733.568408][T24883] #1: ffff8880347c6e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 733.577539][T24883] [ 733.577539][T24883] stack backtrace: [ 733.583414][T24883] CPU: 1 UID: 0 PID: 24883 Comm: syz.2.4501 Not tainted syzkaller #0 PREEMPT(full) [ 733.583431][T24883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 733.583441][T24883] Call Trace: [ 733.583448][T24883] [ 733.583454][T24883] dump_stack_lvl+0xe8/0x150 [ 733.583475][T24883] print_circular_bug+0x2e1/0x300 [ 733.583497][T24883] check_noncircular+0x12e/0x150 [ 733.583519][T24883] __lock_acquire+0x15a5/0x2cf0 [ 733.583543][T24883] lock_acquire+0xf0/0x2e0 [ 733.583559][T24883] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 733.583590][T24883] fs_reclaim_acquire+0x71/0x100 [ 733.583606][T24883] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 733.583620][T24883] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 733.583635][T24883] ? __alloc_skb+0x27d/0x7d0 [ 733.583649][T24883] ? __alloc_skb+0x186/0x7d0 [ 733.583664][T24883] __alloc_skb+0x27d/0x7d0 [ 733.583679][T24883] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 733.583698][T24883] tcp_send_active_reset+0x8a/0x5d0 [ 733.583715][T24883] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 733.583735][T24883] __tcp_close+0x4c5/0xfe0 [ 733.583756][T24883] tcp_close+0x28/0x110 [ 733.583775][T24883] inet_release+0x143/0x190 [ 733.583791][T24883] sock_close+0xc3/0x240 [ 733.583810][T24883] ? __pfx_sock_close+0x10/0x10 [ 733.583828][T24883] __fput+0x44f/0xa70 [ 733.583851][T24883] task_work_run+0x1d9/0x270 [ 733.583866][T24883] ? __pfx_task_work_run+0x10/0x10 [ 733.583882][T24883] exit_to_user_mode_loop+0xed/0x480 [ 733.583898][T24883] ? rcu_is_watching+0x15/0xb0 [ 733.583923][T24883] do_syscall_64+0x32d/0xf80 [ 733.583942][T24883] ? trace_irq_disable+0x3b/0x150 [ 733.583954][T24883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.583968][T24883] ? clear_bhb_loop+0x40/0x90 [ 733.583983][T24883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.583996][T24883] RIP: 0033:0x7f819559c819 [ 733.584010][T24883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.584022][T24883] RSP: 002b:00007ffde9875728 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 733.584038][T24883] RAX: 0000000000000000 RBX: 00007f8195817da0 RCX: 00007f819559c819 [ 733.584047][T24883] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 733.584056][T24883] RBP: 00007f8195817da0 R08: 0000000000000006 R09: 0000000000000000 [ 733.584065][T24883] R10: 00007f8195817cb0 R11: 0000000000000246 R12: 00000000000b2cfe [ 733.584075][T24883] R13: 00007f819581609c R14: 00000000000b2af2 R15: 00007f8195816090 [ 733.584090][T24883] [ 734.970359][T24911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.196348][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!