last executing test programs: 1.67525289s ago: executing program 2 (id=7633): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d00"}) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x9b16, 0x0, 0x7fffffff, 0x7, 0x6, 0x0, 0x7, r2}, &(0x7f0000000040)=0x20) 1.674843823s ago: executing program 0 (id=7634): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x2b, 0x0, 0xa}, 0x28) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x3, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@local, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) 1.527255312s ago: executing program 2 (id=7639): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3, 0x3}, &(0x7f00000002c0)=0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380), 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) getsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[], 0xd4}}, 0x4004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe24, 0x0, 0x4e20, 0x401, 0xa, 0x20, 0x0, 0x89, r7, r8}, {0x6, 0x0, 0xb0, 0xdd, 0xffffffffffffff82, 0x6, 0xfffffffffffffffe, 0xe2}, {0xfffffffffffffffa, 0x8551, 0x1, 0x7}, 0x5, 0x0, 0x0, 0x1, 0x5, 0x1}, {{@in=@multicast1, 0x4d3, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3503, 0x3, 0x0, 0x5, 0x0, 0x68, 0x8}}, 0xe8) socket$l2tp6(0xa, 0x2, 0x73) 1.526857381s ago: executing program 0 (id=7640): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) r3 = syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid\x00') sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_NEWNSID={0x2c, 0x58, 0x0, 0x703d2d, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) 1.403342709s ago: executing program 0 (id=7643): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000003f02000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 1.402864084s ago: executing program 2 (id=7644): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf25160000001800018000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000002900)=""/4096, 0xe17}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000600)=""/53, 0x35}], 0x5, &(0x7f00000006c0)=""/105, 0x69}, 0x4}], 0x48, 0x2000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) getsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000001c0)="8977757b5bfebc5a9c9bf246babcd994898e1afdaceb6e27227aaf945d835b83e8bd9ef696daab261843285e2160eeae13580df20159b45d48db9e18041a3887a42d6276fa5800a74cd730e41bccef9590013341573903f4", &(0x7f0000000240)=@udp6=r7, 0x2}, 0x20) 1.34217411s ago: executing program 3 (id=7646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0xffffffffffffff88}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 1.206745277s ago: executing program 0 (id=7647): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x15, "8461526098951c8201e48cf77e9505ef1b9880cead"}, &(0x7f0000000200)=0x1d) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x8}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x300, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0x2}, {0x6, 0xfffd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004041}, 0x40040d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x84) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000080)=0x7ff, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000000)={0x7, 0x3}) 791.068475ms ago: executing program 0 (id=7650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 789.609397ms ago: executing program 4 (id=7651): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000200)={0x1, 0x1, '\x00', 0x71, 0x8}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000200)={0x1, 0x1, '\x00', 0x71, 0x8}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) (async) 787.747167ms ago: executing program 0 (id=7652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97840000000000000000a0000000000000004000400"], 0x1c}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x90}, 0x1, 0x7}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x2, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a004}, 0x4010) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000280)={r7, 0x346}, &(0x7f00000002c0)=0x8) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, 0x0, [@null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) 750.887907ms ago: executing program 1 (id=7653): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) 726.781752ms ago: executing program 4 (id=7654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4, 0x671a}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x2, r7}, 0x10) (async) syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) r9 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'vlan0\x00', 0x57e7}) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e0, r8, 0x50e, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8d}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfc00}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7a0}, {0x8, 0xb, 0x300000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xfa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xbc7}, {0x6, 0x16, 0x130a}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x45}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24000800}, 0x8805) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r0) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r11, 0x107, 0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="00a315b354000200", @ANYRES16=r10, @ANYBLOB="00042bbd7000fddbdf250300000008000100", @ANYRES32=r12, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) 647.32102ms ago: executing program 3 (id=7655): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87034100000040000000005c0000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {0x0}], 0x2, 0x0, 0x0, 0x1f000801}, 0x0) 602.894224ms ago: executing program 4 (id=7656): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x10000}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendto$inet(r3, &(0x7f0000000540)="9b159fb079e85c63cbe56b94938103ee2adb4a1ace65b0c78afe009e8fa3cbb299a2f917de766412d82af35400d3423ba19ca772a96a0ae5152d099f00abb27560d8b707bc7759abed979f341242b78656dce40e754450", 0x57, 0xa880, &(0x7f0000000300)={0x2, 0x4e20, @private=0xa010101}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a820008100000086dd603f1060001b2f00fc000800000000000000000000000000ff0200000000000000000000000000012420810000000000fffb700000000800000086dd0800"], 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="840000002000040027bd7000fedbdf25020020fc000000060000010008000d00090000000c000c400000000000000007080010000400000008000f00040000000c000c40000000000000000284cb0c40fffffffffffffffc080002000000000008000200ac1414aa08000200ac1e0101140011007465616d5f736c6176655f3100000000"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000000000000000000000000000000000ba0000cd3a866421359f1b0fbe3d4bc9e2803d23e3a64223351c68c3adb6456f26d134c4ee542078412f55cbd044cc0de30369e5e0a86844f5bed1b17ad6", @ANYRES32=0x0, @ANYBLOB="00000000420000002c00128008000100677470002000028008000200", @ANYRES32=r7, @ANYBLOB="14000800fe800000000000000000000000000032"], 0x4c}, 0x1, 0xba01}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xf1, 0x40) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r10}]}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@local, 0x4e20, 0x1, 0x4e23, 0xec, 0x2, 0x0, 0xe0, 0x62, 0x0, r10}, {0x3ed20174, 0x6, 0x81, 0x9, 0x6, 0x200, 0xfff, 0x1}, {0x6, 0x8, 0x1, 0xec}, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d3, 0x32}, 0x2, @in6=@loopback, 0x3500, 0x0, 0x3, 0xb, 0xeb7, 0x8, 0x1}}, 0xe8) 589.509208ms ago: executing program 3 (id=7657): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001880)=@ethtool_cmd={0x43}}) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000002900)=""/4105, 0x1009}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x8) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0xfe, 0x2, 0xf, 0x0, 0xffffffff, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x2, 0x9, 0x9, 0x10000, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_key={0x0, 0x8, 0x8, 0x0, '4'}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x40004d2}]}, 0x78}, 0x1, 0x7}, 0x1) 534.931299ms ago: executing program 1 (id=7658): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000004002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 531.765549ms ago: executing program 2 (id=7659): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r8, 0x101, 0x70bd27, 0x25dfdc00, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x41}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES32, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) 516.027195ms ago: executing program 1 (id=7660): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0xf1ff, r2, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 485.010374ms ago: executing program 3 (id=7661): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d00"}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x9b16, 0x0, 0x7fffffff, 0x7, 0x6, 0x0, 0x7, r3}, &(0x7f0000000040)=0x20) 468.070782ms ago: executing program 2 (id=7662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x402, 0x44}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6d2}]]}, 0x40}}, 0x884) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x2}, {0x7f, 0x4}, {0x80, 0x6}], "39900e0fb5664f60"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x8}, {0x40, 0x1}, {0x9, 0x5}], "343dab5d05a78710"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xe5}, {0xf0, 0x6}, {0x1}, {0x2, 0x1}, {0x2b}, {0x2b, 0x7}, {0x81, 0x7}, {0x6}, {0x7, 0x2}, {0x3, 0x7}], "e83d936955e3fcfb"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040810}, 0x51) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r10, 0x101, 0xa, &(0x7f0000000200), 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r10, 0x80286722, &(0x7f0000000500)={&(0x7f0000000480)=""/89, 0x59, 0x4db, 0xffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r8, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f074901bdead"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010000}, 0x40000) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00022cbd7000fcdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696f557f9d4c4bd9d1855c063842ca19576d300000"], 0x44}}, 0x4) 410.83259ms ago: executing program 1 (id=7663): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4020) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) 410.262567ms ago: executing program 4 (id=7664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x2, 0x7, 0x7, 0x5, 0x7, 0x5, 0x3ff, 0x5}}}}]}, 0x58}}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xffffffff) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000200)={0x0, 0xfd8c}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xc}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0xc810) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "feffffffffffffff"}, 0x28) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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"/399, 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000a80)="1165b65dc1f84146f03562d6913624a2b6d8ec92d3b85d62c12f159214de3618d4dc028c1b6992dc66459f58c8b8b56fe04e31cdde47a1821cf3bddee1076115f9afb5391f0f33219347a02ffb4109374ae3528f700cf1963b704fd24e27b70dd82d3ef5fd0d6c7e9512db1aff64b84d0fe3cce36da98fcc74949374701d31a1418b3fb186b4fc5f66185717d2e4da0b381a0159a77c7470be567805e16f89688c5b75b19b2081c8026c57eb5eefe65efbb7e34c39a7651531bd31e4bcb66636f5412f2f97dd0f6eba05988d5dbfef41b1382b757f050000002e48cfb226168a09933e5851fcf209043fdb938b7d7351e7f065d41ec4faa47a000090776f19d579833473c5faaf30c40d0000000000000000", 0x112}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="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", 0x1d4}, {&(0x7f0000000f40)="e3fbc9f7e155a6e294f68078cb808c435b48612e93b0d69d1f21fd5564a9f18f996475fb64e12884979b5882a07d51ec37cab390561644521d18773068ad0fc0f6f8df2bb545c05fbfda35eefcf88a020063a2bf6468b302b9831678e59677adb2ec28d0caf29931cf5993e1ce3ba4cf655cf53218d9887589289e133b54050621892724d74ce07d912407878f2a4ec7a10be378467499f110fe42cfa93c4883db8d2c5155a0d94b828405a9de0e8ffae65c255df6ee1e807dd8fa8d384184f735fbc4e62d27f288c6c9c94477590c7ff4eb93131ebb0d6d5dfa82dbafd6a6bd0cc56bc8d7af7e4246389c34a239b98ec85073c76da59b1fe73f14c72c5fa25e77ce2d5849ad97c74e15826752d1d571e6d9377fe1dd1c794795216f2614d25d9a2a019c3f88b59dc971df962e0250e89263a6c3cbaa9f2b0c5d83cffd423c89b83783109d05b53831ba44e31971b5a5444e816b19e16ad69106d8d7339ed0b5707218728ea071db4f59aea059410e48dc0c210eb84552eaa5ff6aa127c9dc3312a6e0bd4eb3eac8bf7b9c4e158fcc69d371246d807fbeabcfb33e9268025d3dd4cdfbdb0e178cdb63493251915b8fcf933b9ac872818fc255fcc6e4d9fcd7cc6e5071928e7f1a5738321897b0d277f0bb661ea6d25d7f6f2b38273561593d62fc363cc77de0352ea0bee8b98ca55474fa1c69d476adb25ae2ab5357008d03c236294544f79039057a5b30d130c2149e755f2b61907e1cd54a56dc53e3c8471e81f83f5e8d97a5474015d24ec97a074394afa27408a73b8e765b79faf100ea3dd0c98fbfa3d113ffe56c0ffd1a30415e82b34cce8289eb6d01ed59fe6a6b0c99a00e4563c0c0c4fecd127fa357c0e12bfed2a1ac23643d91fd4daf12494bd0a8ac520886efe0caea86fe820b1e79b614fec63737d4930508e037ac05fb254fc362b39cd9b341df7d8504a13b8af2055ea1778c6043c119465f79c118e8080941bcbc0c65ba0cb25e1be8de94207dcb3d2863828a6b17f5a37fd64553ecb6d99879e38af6f3b2da109433c0b75faf20de6ee0ae823b17d1462de38d91f6d5292f02276dbf744ff835dee75532659087e91e5c873b321511b7dd74e86813b4ba4a99394559898206e29f149a53acf0483c0a150c5d1a9a050341c3f1822470381408ff787a2486ea81c6128f1b33ab8fb38e4491fd643ef1fb3efa333b5dbc8fb92daf0b957c19513a838355abcf40ddf272d88e2740dc390b94ee82a5b72a1e7c55ff6ee034d8010702dce3de159a34620b5216d3308e0cd64709cd7f4d5b026f4b81d7d43d8acb36c2251ac576b0ca9411e41eb6ba1d1871845ddcd4d95aa876d0baea1a00b59d68a00e191b59f751e54edecbc4aa0df7585e868a055efdb1dee40921d13d55dfb51f1b245ae2b91fad099e510b75b25daac3d2c529b9bdecf5ab6abcbc99c8f2358f60341eec86a4bd6a9cf0df4004124e31a4cc2e2e3c5cf53a90ee16bb4c6c49e9f50c993a8aa575b0b8e018b608f2321bc64afbace952457246dc8a3e4fc9a6c12a7d7d2779e4333072d4ef27d6e0cc2d1a6990a8376dc5dcd488888d9e436b566ecc63fe715b051859119b1399ef9c905fd63874175e5eeab2361bbfe6247921663c4c20bf6db22bf87477886f6778627bd6d5deffd7042c9b12b9a5448ef2425607e7b08fb984239750595e29f8cc241b238531824a6ba35747df767f1ce58403013394ba85a74871660d7e3e479ab54f2163662a9ffd385764bba475f87d56e191a87e1512afa51b41f664425dc0eccb202080327c8160a677054d5430e2af640d4f1bbf1c8e6d38ca007db30e52ae51781d27f5c760797601abecf3622e370f39edacfa7a8559bd1a5a2db1f0eb202f49f84f14231f593baed4ca91188665dc7daaaacdc8c02520c918a10f95f6894fbc735350a8e75b9e31493f200bbfb3824cce202f218c216310bb9d9e5621e03fd6df18b8bbf43f5eb29a1e1a7b8eb12bb28228bc536973f70f50b6c4e9663c12e861bc58d376b2a47298fd72f12e8af2970a806db26649be9876f7963fcdec769265a44048e6332e2dcd73b0637b5079c7f3c50e74bc43317f87bcb08bb0d307a9b85eb236dba7b7529be680454a76992d36fd9a8dab504f2a954ab14b40872460df0480845e307df07e80307920e5079196d14bc68e657f5d322265c6b4408b39e6a9c435ed485752cbb51a1bae60c86dd11579db163f453bacb9e34bc1b4c11498ea5dd95e8e7b8e57af0c66100745892cb16ec12dbdaa462487273bdb582a05376797c2732be2dc63e094442556be6ea8faf70e12834b7e724d516e3d6480b07b0b7c255b1c1079cb0809e84017ecd8116abe2d6cad207669a2104c9754fb265f6c7b01c5af50814d9f7f6bab90ba9010daa18c04e886939a6fde3e1e49f3823f41ee338f3ad24625143b01963bb9da90d60045604045ca4066634cf4da26b13b0a246d5f6e7a4d3e6de02aac171053c978cb6562d31b2eda0a4df9a8c54d6f0c35d59fba466208d0d9d8a38e968f0c116ebe05a7f681d74fa778fc9d3b098cc3181bb66ae6ac5ed3b13f4a4ab741bfcea12f6b7e5faf64d109fdb5d1fe812cd3fbb477146da300e021b161a1a2456993adfc0c7e7acf71f39a0dcc53dc27660a5e2ef022d334af9478b70aeb40667a20f6842630acf5e25a16efe6f377cedc969ec158878985f76a65af80a54c9d6d5d7585017f18376aa67cf8f5086f60e527268ddd87a75bf440fabb97b273d2a5d12c343c27e67968225d3575f4fa4c2de3618388e7a21acfd2ba7a9df2a195c2a36f627a55f34a8de4c46b5ce2d61298f34892f584bef2dfe95ae2f1fd1f8ca9daf85d8de0567eca0303574667bfff7210224b42180646b32b4cfc7c839b5d58f07ae83ce978ded9006619a5900428f4b051b6a539d6234e4aff0bf34c1602fc52d18dd8fa9b65341a843cef1e5160fa1d80d80a1236b14a4b524f472c6b2bb8296e8960c76398394a916df1e9c503256e14325b3dfc6a4ef123132db25a6dbe375525bc56a13067d2f93f6b4b767a4c24e52c716f87fec09875329d47bce4a0f10f7ad897cdc432b04eb1713466613657ba4fe490faa78f1ab3e309fc4ef98c9696e7bb9b32ee7f7c683697efdd78090d68efa86709c3dd49b7a25bccb368f527db6f950c33208c1c2428b702725211cd2094be97656d1695edacab73cfae2403b176fea2a4345b82f9a77946f945eb1555fa233d30d8cc6a836e02d721500f4cb1ae4f2a9e9ae0220a8b1ac5771e9c99dead7877bbbe04ee3b68b0e149deb9cbb09717e57ea163b5ad4cffcd73c83e06773fed4775e8a3a2fbaee8062ea42a72e9e63bde2d648c55984bf80d79da38eeff0e43a62a6c68122235fb8879d114932c19d951bfd3b9f56a20b069bbe630d7530c8fa203", 0x981}, {&(0x7f00000001c0)="331138efd776a2a48cb8a3c951368f3d1eb3e6588cf55aa8981e709006a06000160b388c1145c4debe57aa46e626e93fb440", 0x32}, {&(0x7f0000002a80)="5614f39e44b6b12adcfa066f3459516b6b6185f770eda23ae23142769e2ad988eb6c9de9448509f51a1a95d55f43e583651bf858dac80b55bf189e0e67bcd592f6b4c4134152ee46e4a25c4358c2fe47463d90148e7a8cf36ad1fca0f1ecf1df0996022c6c5b38aa187c170c700fc8da3044f66d9f0d90a63cb207b98c9fec608c933374027748730ed1cf7a20641bd6d6d3049fc5f841a780e4313c95c2ebabde71f073831e52a559d23b9d2b97ea0a67", 0xb1}], 0x8}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "adb6c5b29ca2b8382d00", "7e609086", "bb10000000000001"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x4c850) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 410.031747ms ago: executing program 3 (id=7665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x3c00, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x4}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) 331.329763ms ago: executing program 1 (id=7666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002002800e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 330.381701ms ago: executing program 3 (id=7667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd2a, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfff, 0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (fail_nth: 2) 255.2846ms ago: executing program 2 (id=7668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112be000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000540)={{r1}, "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"}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) 254.699497ms ago: executing program 4 (id=7669): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) socket$kcm(0xa, 0x922000000003, 0x11) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 253.815746ms ago: executing program 1 (id=7670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20008010}, 0x84) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f00000004c0)=""/188, &(0x7f00000003c0)=0xbc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="6800000096cf658f15fae5a9970000c91f611d8ba2a8c7f2622c63f9fa5d36cdc3aca43912c9f39f2bb3740da3d05c218b57712d32d3957871493440b9c3ceb90bceb6c7474e191a9cd61b1650fb3239c5f55105970a99d3770df05137c8ca03b384591bf00aace790960f7f400997e527622707e2859b77531dea8e7115a9c297d55e316e120066a9f3c33fdbc6f96e6f8c9f1ed20c1172f9d45f2f018ff65b889cc919aad5e9dcf3036762556c490a78ed5b87b275d5c0d77b6ca4979829086ae621e650eaa9f338fbd64ef20f466284816b2f34da1b522892", @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbdf25260000003600f2003e53cbdd5536054e75b07606b465ed92a396f26bb1ebef65a6adddb2e949ea9f0bc4a80c95fa32d47d6e31102b381216ca55000010009d000000000007000080000207000a002a0068040500fd090000"], 0x68}, 0x1, 0x0, 0x0, 0x30008400}, 0x48800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x48c5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf257900230008000300", @ANYRES32=r2, @ANYBLOB="0400f400"], 0x20}, 0x1, 0x0, 0x0, 0x24000054}, 0x844) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) r11 = socket(0x2d, 0x2, 0x0) connect$qrtr(r11, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r12, 0x84, 0x19, &(0x7f00000002c0)={r13, 0x7}, 0x8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x84}}, 0x28010804) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000200)={r10, 0x6, 0x7fffffff, 0x101, 0x7ff, 0xa, 0x4, 0x100, {r13, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0xbc5, 0xf1, 0x2, 0x7, 0x6}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000300)={0x2, 0x9, 0x84e2f439ca18ba20, 0x1, 0xfffffffc, 0x5f9, 0x5, 0x2}, 0x20) 0s ago: executing program 4 (id=7671): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x8916, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x1409, 0x262543c4cee33fe7, 0x70bd2b, 0x1000}, 0x4e}}, 0x20008000) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180)=0x1e8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xac}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000240)={'macvlan1\x00', 0x9}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x28}}, 0x20050800) kernel console output (not intermixed with test programs): ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.876376][T24718] RSP: 002b:00007fbab28e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.876397][T24718] RAX: ffffffffffffffda RBX: 00007fbab1bb5fa0 RCX: 00007fbab198ebe9 [ 341.876411][T24718] RDX: 0000000000041094 RSI: 0000200000000500 RDI: 0000000000000004 [ 341.876423][T24718] RBP: 00007fbab28e1090 R08: 0000000000000000 R09: 0000000000000000 [ 341.876435][T24718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.876446][T24718] R13: 00007fbab1bb6038 R14: 00007fbab1bb5fa0 R15: 00007ffcad49c9b8 [ 341.876467][T24718] [ 342.324078][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.335084][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 342.386168][T24730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.451861][ T2972] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.473985][ T97] block nbd3: Possible stuck request ffff888025267000: control (read@0,1024B). Runtime 60 seconds [ 342.487513][ T97] block nbd3: Possible stuck request ffff8880252671c0: control (read@1024,1024B). Runtime 60 seconds [ 342.498928][ T97] block nbd3: Possible stuck request ffff888025267380: control (read@2048,1024B). Runtime 60 seconds [ 342.510022][ T97] block nbd3: Possible stuck request ffff888025267540: control (read@3072,1024B). Runtime 60 seconds [ 342.562677][T24747] netlink: 'syz.0.6717': attribute type 3 has an invalid length. [ 342.579045][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.650897][T24757] FAULT_INJECTION: forcing a failure. [ 342.650897][T24757] name failslab, interval 1, probability 0, space 0, times 0 [ 342.667569][T24757] CPU: 1 UID: 0 PID: 24757 Comm: syz.1.6725 Not tainted syzkaller #0 PREEMPT(full) [ 342.667596][T24757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.667607][T24757] Call Trace: [ 342.667615][T24757] [ 342.667623][T24757] dump_stack_lvl+0x189/0x250 [ 342.667648][T24757] ? __pfx____ratelimit+0x10/0x10 [ 342.667671][T24757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.667691][T24757] ? __pfx__printk+0x10/0x10 [ 342.667715][T24757] ? __pfx_snprintf+0x10/0x10 [ 342.667737][T24757] should_fail_ex+0x414/0x560 [ 342.667761][T24757] should_failslab+0xa8/0x100 [ 342.667786][T24757] __kmalloc_noprof+0xcb/0x4f0 [ 342.667808][T24757] ? aa_label_asxprint+0x70/0x130 [ 342.667832][T24757] aa_label_asxprint+0x70/0x130 [ 342.667855][T24757] apparmor_secid_to_secctx+0x94/0x160 [ 342.667875][T24757] security_secid_to_secctx+0x94/0x2d0 [ 342.667895][T24757] netlbl_unlabel_staticlist_gen+0x497/0x820 [ 342.667918][T24757] ? __pfx_netlbl_unlabel_staticlist_gen+0x10/0x10 [ 342.667938][T24757] ? lock_acquire+0x5f/0x360 [ 342.667963][T24757] ? __pfx___mutex_lock+0x10/0x10 [ 342.667989][T24757] netlbl_unlabel_staticlistdef+0x3c1/0xa30 [ 342.668010][T24757] ? netlbl_unlabel_staticlistdef+0x8e/0xa30 [ 342.668032][T24757] genl_dumpit+0x10b/0x1b0 [ 342.668054][T24757] netlink_dump+0x6e1/0xe90 [ 342.668083][T24757] ? __pfx_netlink_dump+0x10/0x10 [ 342.668109][T24757] ? genl_start+0x499/0x6c0 [ 342.668128][T24757] __netlink_dump_start+0x5cb/0x7e0 [ 342.668153][T24757] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 342.668173][T24757] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 342.668191][T24757] ? genl_get_cmd+0x7d9/0x910 [ 342.668210][T24757] ? __pfx_genl_start+0x10/0x10 [ 342.668228][T24757] ? __pfx_genl_dumpit+0x10/0x10 [ 342.668245][T24757] ? __pfx_genl_done+0x10/0x10 [ 342.668266][T24757] ? stack_trace_save+0x9c/0xe0 [ 342.668289][T24757] genl_rcv_msg+0x5da/0x790 [ 342.668310][T24757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.668328][T24757] ? __kasan_slab_alloc+0x6c/0x80 [ 342.668350][T24757] ? __pfx_netlbl_unlabel_staticlistdef+0x10/0x10 [ 342.668370][T24757] ? __netlink_lookup+0xbd/0x810 [ 342.668385][T24757] ? rcu_is_watching+0x15/0xb0 [ 342.668407][T24757] netlink_rcv_skb+0x208/0x470 [ 342.668431][T24757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.668450][T24757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.668479][T24757] ? lock_release+0x4b/0x3e0 [ 342.668502][T24757] ? down_read+0x1ad/0x2e0 [ 342.668526][T24757] genl_rcv+0x28/0x40 [ 342.668544][T24757] netlink_unicast+0x82c/0x9e0 [ 342.668570][T24757] ? __pfx_netlink_unicast+0x10/0x10 [ 342.668592][T24757] ? netlink_sendmsg+0x642/0xb30 [ 342.668616][T24757] ? skb_put+0x11b/0x210 [ 342.668634][T24757] netlink_sendmsg+0x805/0xb30 [ 342.668662][T24757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.668687][T24757] ? aa_sock_msg_perm+0xf1/0x1d0 [ 342.668704][T24757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.668723][T24757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.668748][T24757] __sock_sendmsg+0x21c/0x270 [ 342.668771][T24757] ____sys_sendmsg+0x505/0x830 [ 342.668791][T24757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.668813][T24757] ? import_iovec+0x74/0xa0 [ 342.668835][T24757] ___sys_sendmsg+0x21f/0x2a0 [ 342.668854][T24757] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.668887][T24757] ? __fget_files+0x2a/0x420 [ 342.668911][T24757] ? __fget_files+0x3a0/0x420 [ 342.668939][T24757] __x64_sys_sendmsg+0x19b/0x260 [ 342.668959][T24757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.668982][T24757] ? __pfx_ksys_write+0x10/0x10 [ 342.669003][T24757] ? rcu_is_watching+0x15/0xb0 [ 342.669022][T24757] ? rcu_is_watching+0x15/0xb0 [ 342.669041][T24757] do_syscall_64+0xfa/0x3b0 [ 342.669066][T24757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.669084][T24757] ? clear_bhb_loop+0x60/0xb0 [ 342.669104][T24757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.669122][T24757] RIP: 0033:0x7f7877b8ebe9 [ 342.669139][T24757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.669155][T24757] RSP: 002b:00007f7878938038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.669175][T24757] RAX: ffffffffffffffda RBX: 00007f7877db5fa0 RCX: 00007f7877b8ebe9 [ 342.669189][T24757] RDX: 0000000000041094 RSI: 0000200000000500 RDI: 0000000000000004 [ 342.669202][T24757] RBP: 00007f7878938090 R08: 0000000000000000 R09: 0000000000000000 [ 342.669213][T24757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.669225][T24757] R13: 00007f7877db6038 R14: 00007f7877db5fa0 R15: 00007ffc7a8845b8 [ 342.669246][T24757] [ 343.114162][ T2972] bond3: (slave macvlan2): failed to get link speed/duplex [ 343.127404][ T97] block nbd4: Possible stuck request ffff8880252ce000: control (read@0,1024B). Runtime 60 seconds [ 343.138433][ T97] block nbd4: Possible stuck request ffff8880252ce1c0: control (read@1024,1024B). Runtime 60 seconds [ 343.149507][ T97] block nbd4: Possible stuck request ffff8880252ce380: control (read@2048,1024B). Runtime 60 seconds [ 343.160525][ T97] block nbd4: Possible stuck request ffff8880252ce540: control (read@3072,1024B). Runtime 60 seconds [ 343.203984][T24767] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 343.230267][ T3009] bond3: (slave macvlan2): failed to get link speed/duplex [ 343.278713][T24774] netlink: 'syz.0.6730': attribute type 11 has an invalid length. [ 343.339854][ T3009] bond3: (slave macvlan2): failed to get link speed/duplex [ 343.807685][T24837] FAULT_INJECTION: forcing a failure. [ 343.807685][T24837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.823807][T24837] CPU: 1 UID: 0 PID: 24837 Comm: syz.0.6755 Not tainted syzkaller #0 PREEMPT(full) [ 343.823831][T24837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.823842][T24837] Call Trace: [ 343.823849][T24837] [ 343.823855][T24837] dump_stack_lvl+0x189/0x250 [ 343.823877][T24837] ? __pfx____ratelimit+0x10/0x10 [ 343.823898][T24837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.823918][T24837] ? __pfx__printk+0x10/0x10 [ 343.823937][T24837] ? __might_fault+0xb0/0x130 [ 343.823962][T24837] ? rcu_is_watching+0x15/0xb0 [ 343.823981][T24837] should_fail_ex+0x414/0x560 [ 343.824005][T24837] _copy_from_user+0x2d/0xb0 [ 343.824026][T24837] ___sys_sendmsg+0x158/0x2a0 [ 343.824044][T24837] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.824076][T24837] ? __fget_files+0x2a/0x420 [ 343.824100][T24837] ? __fget_files+0x3a0/0x420 [ 343.824126][T24837] __x64_sys_sendmsg+0x19b/0x260 [ 343.824142][T24837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.824162][T24837] ? __pfx_ksys_write+0x10/0x10 [ 343.824181][T24837] ? rcu_is_watching+0x15/0xb0 [ 343.824198][T24837] ? rcu_is_watching+0x15/0xb0 [ 343.824226][T24837] do_syscall_64+0xfa/0x3b0 [ 343.824249][T24837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.824267][T24837] ? clear_bhb_loop+0x60/0xb0 [ 343.824284][T24837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.824301][T24837] RIP: 0033:0x7fdb3678ebe9 [ 343.824316][T24837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.824332][T24837] RSP: 002b:00007fdb37631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.824351][T24837] RAX: ffffffffffffffda RBX: 00007fdb369b5fa0 RCX: 00007fdb3678ebe9 [ 343.824363][T24837] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 343.824375][T24837] RBP: 00007fdb37631090 R08: 0000000000000000 R09: 0000000000000000 [ 343.824386][T24837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.824396][T24837] R13: 00007fdb369b6038 R14: 00007fdb369b5fa0 R15: 00007ffd9275a568 [ 343.824415][T24837] [ 344.060362][ T5233] udevd[5233]: worker [8718] /devices/virtual/block/nbd2 is taking a long time [ 344.070007][ T5233] udevd[5233]: worker [6253] /devices/virtual/block/nbd3 is taking a long time [ 344.079258][ T5233] udevd[5233]: worker [5875] /devices/virtual/block/nbd4 is taking a long time [ 344.182931][T24860] FAULT_INJECTION: forcing a failure. [ 344.182931][T24860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.204333][T24860] CPU: 1 UID: 0 PID: 24860 Comm: syz.3.6760 Not tainted syzkaller #0 PREEMPT(full) [ 344.204359][T24860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.204370][T24860] Call Trace: [ 344.204377][T24860] [ 344.204386][T24860] dump_stack_lvl+0x189/0x250 [ 344.204410][T24860] ? __pfx____ratelimit+0x10/0x10 [ 344.204434][T24860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.204451][T24860] ? __pfx__printk+0x10/0x10 [ 344.204474][T24860] ? lock_acquire+0x5f/0x360 [ 344.204499][T24860] should_fail_ex+0x414/0x560 [ 344.204522][T24860] prepare_alloc_pages+0x213/0x610 [ 344.204538][T24860] __alloc_frozen_pages_noprof+0x123/0x370 [ 344.204553][T24860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.204570][T24860] ? policy_nodemask+0x27c/0x720 [ 344.204588][T24860] ? pfn_valid+0xba/0x490 [ 344.204604][T24860] ? rcu_is_watching+0x15/0xb0 [ 344.204619][T24860] alloc_pages_mpol+0x232/0x4a0 [ 344.204638][T24860] vma_alloc_folio_noprof+0xe4/0x200 [ 344.204657][T24860] ? rcu_read_lock_held+0xa/0x50 [ 344.204670][T24860] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 344.204690][T24860] ? rcu_is_watching+0x15/0xb0 [ 344.204703][T24860] ? lock_release+0x4b/0x3e0 [ 344.204721][T24860] folio_prealloc+0x30/0x180 [ 344.204740][T24860] __handle_mm_fault+0x2ab9/0x5440 [ 344.204757][T24860] ? rcu_is_watching+0x15/0xb0 [ 344.204774][T24860] ? __pfx___handle_mm_fault+0x10/0x10 [ 344.204797][T24860] ? follow_page_pte+0x7ef/0x13e0 [ 344.204816][T24860] handle_mm_fault+0x40a/0x8e0 [ 344.204837][T24860] __get_user_pages+0x1699/0x2ce0 [ 344.204851][T24860] ? kasan_save_track+0x4f/0x80 [ 344.204879][T24860] __gup_longterm_locked+0x3dc/0x1660 [ 344.204901][T24860] ? rcu_needs_cpu+0xa1/0xb0 [ 344.204916][T24860] pin_user_pages+0x9e/0xd0 [ 344.204932][T24860] xdp_umem_pin_pages+0x117/0x340 [ 344.204953][T24860] xdp_umem_create+0x677/0x8e0 [ 344.204974][T24860] xsk_setsockopt+0x7b0/0x8d0 [ 344.204990][T24860] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.205007][T24860] ? lock_release+0x4b/0x3e0 [ 344.205026][T24860] ? aa_sock_opt_perm+0xff/0x1b0 [ 344.205040][T24860] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 344.205055][T24860] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.205071][T24860] do_sock_setsockopt+0x17c/0x1b0 [ 344.205086][T24860] __x64_sys_setsockopt+0x13f/0x1b0 [ 344.205101][T24860] do_syscall_64+0xfa/0x3b0 [ 344.205120][T24860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.205134][T24860] ? clear_bhb_loop+0x60/0xb0 [ 344.205149][T24860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.205169][T24860] RIP: 0033:0x7fbab198ebe9 [ 344.205182][T24860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.205195][T24860] RSP: 002b:00007fbab28e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.205211][T24860] RAX: ffffffffffffffda RBX: 00007fbab1bb5fa0 RCX: 00007fbab198ebe9 [ 344.205221][T24860] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 344.205230][T24860] RBP: 00007fbab28e1090 R08: 0000000000000020 R09: 0000000000000000 [ 344.205240][T24860] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 344.205249][T24860] R13: 00007fbab1bb6038 R14: 00007fbab1bb5fa0 R15: 00007ffcad49c9b8 [ 344.205265][T24860] [ 344.826129][T24899] netlink: 'syz.3.6776': attribute type 1 has an invalid length. [ 344.901642][T24899] bond7: (slave bridge13): making interface the new active one [ 344.915527][T24899] bond7: (slave bridge13): Enslaving as an active interface with an up link [ 345.015050][T24922] netlink: 'syz.4.6785': attribute type 6 has an invalid length. [ 345.027809][T24924] FAULT_INJECTION: forcing a failure. [ 345.027809][T24924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.045227][T24924] CPU: 1 UID: 0 PID: 24924 Comm: syz.1.6786 Not tainted syzkaller #0 PREEMPT(full) [ 345.045254][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.045266][T24924] Call Trace: [ 345.045273][T24924] [ 345.045281][T24924] dump_stack_lvl+0x189/0x250 [ 345.045307][T24924] ? __pfx____ratelimit+0x10/0x10 [ 345.045330][T24924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.045350][T24924] ? __pfx__printk+0x10/0x10 [ 345.045371][T24924] ? __might_fault+0xb0/0x130 [ 345.045397][T24924] ? rcu_is_watching+0x15/0xb0 [ 345.045415][T24924] should_fail_ex+0x414/0x560 [ 345.045439][T24924] _copy_from_user+0x2d/0xb0 [ 345.045459][T24924] ___sys_sendmsg+0x158/0x2a0 [ 345.045478][T24924] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.045497][T24924] ? kstrtouint+0x6e/0xe0 [ 345.045530][T24924] ? rcu_is_watching+0x15/0xb0 [ 345.045547][T24924] ? lock_release+0x4b/0x3e0 [ 345.045570][T24924] ? __might_fault+0xcc/0x130 [ 345.045592][T24924] __sys_sendmmsg+0x227/0x430 [ 345.045616][T24924] ? __pfx___sys_sendmmsg+0x10/0x10 [ 345.045632][T24924] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 345.045666][T24924] ? ksys_write+0x22a/0x250 [ 345.045689][T24924] ? __pfx_ksys_write+0x10/0x10 [ 345.045708][T24924] ? rcu_is_watching+0x15/0xb0 [ 345.045728][T24924] __x64_sys_sendmmsg+0xa0/0xc0 [ 345.045747][T24924] do_syscall_64+0xfa/0x3b0 [ 345.045771][T24924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.045788][T24924] ? clear_bhb_loop+0x60/0xb0 [ 345.045808][T24924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.045825][T24924] RIP: 0033:0x7f7877b8ebe9 [ 345.045841][T24924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.045856][T24924] RSP: 002b:00007f7878938038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.045876][T24924] RAX: ffffffffffffffda RBX: 00007f7877db5fa0 RCX: 00007f7877b8ebe9 [ 345.045890][T24924] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 345.045903][T24924] RBP: 00007f7878938090 R08: 0000000000000000 R09: 0000000000000000 [ 345.045915][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.045926][T24924] R13: 00007f7877db6038 R14: 00007f7877db5fa0 R15: 00007ffc7a8845b8 [ 345.045947][T24924] [ 345.047900][T24922] team0: Device vti1 is of different type [ 345.105734][T24932] __nla_validate_parse: 27 callbacks suppressed [ 345.105754][T24932] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6787'. [ 345.171250][T24934] netlink: 'syz.2.6787': attribute type 21 has an invalid length. [ 345.179609][T24937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6790'. [ 345.413445][T24949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6793'. [ 345.472262][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6791'. [ 345.611269][T24971] FAULT_INJECTION: forcing a failure. [ 345.611269][T24971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.637829][T24971] CPU: 0 UID: 0 PID: 24971 Comm: syz.2.6799 Not tainted syzkaller #0 PREEMPT(full) [ 345.637855][T24971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.637867][T24971] Call Trace: [ 345.637874][T24971] [ 345.637881][T24971] dump_stack_lvl+0x189/0x250 [ 345.637906][T24971] ? __pfx____ratelimit+0x10/0x10 [ 345.637928][T24971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.637945][T24971] ? __pfx__printk+0x10/0x10 [ 345.637965][T24971] ? __might_fault+0xb0/0x130 [ 345.637994][T24971] ? rcu_is_watching+0x15/0xb0 [ 345.638012][T24971] should_fail_ex+0x414/0x560 [ 345.638035][T24971] _copy_from_user+0x2d/0xb0 [ 345.638054][T24971] ___sys_sendmsg+0x158/0x2a0 [ 345.638072][T24971] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.638098][T24971] ? kstrtouint+0x6e/0xe0 [ 345.638132][T24971] ? rcu_is_watching+0x15/0xb0 [ 345.638148][T24971] ? lock_release+0x4b/0x3e0 [ 345.638172][T24971] ? __might_fault+0xcc/0x130 [ 345.638195][T24971] __sys_sendmmsg+0x227/0x430 [ 345.638215][T24971] ? __pfx___sys_sendmmsg+0x10/0x10 [ 345.638232][T24971] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 345.638268][T24971] ? ksys_write+0x22a/0x250 [ 345.638290][T24971] ? __pfx_ksys_write+0x10/0x10 [ 345.638310][T24971] ? rcu_is_watching+0x15/0xb0 [ 345.638329][T24971] __x64_sys_sendmmsg+0xa0/0xc0 [ 345.638348][T24971] do_syscall_64+0xfa/0x3b0 [ 345.638372][T24971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.638390][T24971] ? clear_bhb_loop+0x60/0xb0 [ 345.638407][T24971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.638423][T24971] RIP: 0033:0x7fe2f6d8ebe9 [ 345.638440][T24971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.638456][T24971] RSP: 002b:00007fe2f7ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.638475][T24971] RAX: ffffffffffffffda RBX: 00007fe2f6fb5fa0 RCX: 00007fe2f6d8ebe9 [ 345.638488][T24971] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 345.638499][T24971] RBP: 00007fe2f7ce3090 R08: 0000000000000000 R09: 0000000000000000 [ 345.638510][T24971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.638521][T24971] R13: 00007fe2f6fb6038 R14: 00007fe2f6fb5fa0 R15: 00007ffc834f5fe8 [ 345.638540][T24971] [ 345.650219][T24976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6801'. [ 345.701121][T24978] netlink: 'syz.2.6802': attribute type 5 has an invalid length. [ 345.840576][T24982] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6802'. [ 345.847665][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6803'. [ 346.083602][T25004] FAULT_INJECTION: forcing a failure. [ 346.083602][T25004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.101666][T25004] CPU: 0 UID: 0 PID: 25004 Comm: syz.1.6812 Not tainted syzkaller #0 PREEMPT(full) [ 346.101692][T25004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.101704][T25004] Call Trace: [ 346.101711][T25004] [ 346.101719][T25004] dump_stack_lvl+0x189/0x250 [ 346.101746][T25004] ? __pfx____ratelimit+0x10/0x10 [ 346.101771][T25004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.101791][T25004] ? __pfx__printk+0x10/0x10 [ 346.101812][T25004] ? __might_fault+0xb0/0x130 [ 346.101839][T25004] ? rcu_is_watching+0x15/0xb0 [ 346.101858][T25004] should_fail_ex+0x414/0x560 [ 346.101882][T25004] _copy_from_iter+0x1db/0x16f0 [ 346.101902][T25004] ? rcu_is_watching+0x15/0xb0 [ 346.101919][T25004] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 346.101944][T25004] ? __pfx__copy_from_iter+0x10/0x10 [ 346.101962][T25004] ? __build_skb_around+0x257/0x3e0 [ 346.101988][T25004] ? netlink_sendmsg+0x642/0xb30 [ 346.102012][T25004] ? skb_put+0x11b/0x210 [ 346.102029][T25004] netlink_sendmsg+0x6b2/0xb30 [ 346.102065][T25004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.102090][T25004] ? aa_sock_msg_perm+0xf1/0x1d0 [ 346.102107][T25004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.102125][T25004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.102149][T25004] __sock_sendmsg+0x21c/0x270 [ 346.102172][T25004] ____sys_sendmsg+0x505/0x830 [ 346.102192][T25004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.102214][T25004] ? import_iovec+0x74/0xa0 [ 346.102233][T25004] ___sys_sendmsg+0x21f/0x2a0 [ 346.102250][T25004] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.102279][T25004] ? __fget_files+0x2a/0x420 [ 346.102301][T25004] ? __fget_files+0x3a0/0x420 [ 346.102327][T25004] __x64_sys_sendmsg+0x19b/0x260 [ 346.102344][T25004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.102364][T25004] ? __pfx_ksys_write+0x10/0x10 [ 346.102383][T25004] ? rcu_is_watching+0x15/0xb0 [ 346.102400][T25004] ? rcu_is_watching+0x15/0xb0 [ 346.102417][T25004] do_syscall_64+0xfa/0x3b0 [ 346.102442][T25004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.102459][T25004] ? clear_bhb_loop+0x60/0xb0 [ 346.102477][T25004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.102494][T25004] RIP: 0033:0x7f7877b8ebe9 [ 346.102509][T25004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.102526][T25004] RSP: 002b:00007f7878938038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.102546][T25004] RAX: ffffffffffffffda RBX: 00007f7877db5fa0 RCX: 00007f7877b8ebe9 [ 346.102560][T25004] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 346.102573][T25004] RBP: 00007f7878938090 R08: 0000000000000000 R09: 0000000000000000 [ 346.102585][T25004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.102596][T25004] R13: 00007f7877db6038 R14: 00007f7877db5fa0 R15: 00007ffc7a8845b8 [ 346.102616][T25004] [ 346.390540][ T13] net_ratelimit: 23 callbacks suppressed [ 346.390558][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.499628][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6810'. [ 346.518897][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.564697][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6816'. [ 346.629208][ T61] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.738458][ T61] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.848521][ T3009] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.848938][T25049] block nbd5: Unsupported socket: shutdown callout must be supported. [ 346.978257][ T3009] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.059739][T25070] syzkaller1: entered promiscuous mode [ 347.066888][T25070] syzkaller1: entered allmulticast mode [ 347.118640][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.145518][T25077] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6835'. [ 347.195239][T25080] netlink: 'syz.0.6834': attribute type 4 has an invalid length. [ 347.228453][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.290393][T25085] lo speed is unknown, defaulting to 1000 [ 347.387729][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.468559][T25085] hsr0 speed is unknown, defaulting to 1000 [ 347.477454][T25085] lo speed is unknown, defaulting to 1000 [ 347.531185][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.729030][T25124] IPVS: Unknown mcast interface: nicvf0 [ 348.174627][T25184] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 348.423294][T25208] FAULT_INJECTION: forcing a failure. [ 348.423294][T25208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.439473][T25208] CPU: 1 UID: 0 PID: 25208 Comm: syz.1.6875 Not tainted syzkaller #0 PREEMPT(full) [ 348.439500][T25208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.439512][T25208] Call Trace: [ 348.439519][T25208] [ 348.439528][T25208] dump_stack_lvl+0x189/0x250 [ 348.439553][T25208] ? __pfx____ratelimit+0x10/0x10 [ 348.439576][T25208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.439595][T25208] ? __pfx__printk+0x10/0x10 [ 348.439615][T25208] ? __might_fault+0xb0/0x130 [ 348.439641][T25208] ? rcu_is_watching+0x15/0xb0 [ 348.439659][T25208] should_fail_ex+0x414/0x560 [ 348.439684][T25208] _copy_from_user+0x2d/0xb0 [ 348.439703][T25208] ___sys_sendmsg+0x158/0x2a0 [ 348.439722][T25208] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.439742][T25208] ? kstrtouint+0x6e/0xe0 [ 348.439776][T25208] ? __fget_files+0x2a/0x420 [ 348.439800][T25208] ? __fget_files+0x3a0/0x420 [ 348.439828][T25208] __sys_sendmmsg+0x227/0x430 [ 348.439871][T25208] ? __pfx___sys_sendmmsg+0x10/0x10 [ 348.439888][T25208] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 348.439924][T25208] ? ksys_write+0x22a/0x250 [ 348.439946][T25208] ? __pfx_ksys_write+0x10/0x10 [ 348.439966][T25208] ? rcu_is_watching+0x15/0xb0 [ 348.439986][T25208] __x64_sys_sendmmsg+0xa0/0xc0 [ 348.440005][T25208] do_syscall_64+0xfa/0x3b0 [ 348.440029][T25208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.440047][T25208] ? clear_bhb_loop+0x60/0xb0 [ 348.440067][T25208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.440084][T25208] RIP: 0033:0x7f7877b8ebe9 [ 348.440100][T25208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.440116][T25208] RSP: 002b:00007f7878938038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.440136][T25208] RAX: ffffffffffffffda RBX: 00007f7877db5fa0 RCX: 00007f7877b8ebe9 [ 348.440150][T25208] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 348.440163][T25208] RBP: 00007f7878938090 R08: 0000000000000000 R09: 0000000000000000 [ 348.440174][T25208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.440185][T25208] R13: 00007f7877db6038 R14: 00007f7877db5fa0 R15: 00007ffc7a8845b8 [ 348.440205][T25208] [ 348.999385][T25183] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 349.243878][T25275] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 349.414083][T25302] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 349.948137][T25371] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 350.041402][T25382] delete_channel: no stack [ 350.134294][T25396] __nla_validate_parse: 21 callbacks suppressed [ 350.134313][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6936'. [ 350.157005][T25398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6937'. [ 350.170261][T25396] vlan0: entered allmulticast mode [ 350.182200][T25396] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 350.240175][T25402] block nbd5: server does not support multiple connections per device. [ 350.260623][T25400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6933'. [ 350.267977][T25402] block nbd5: shutting down sockets [ 350.315664][T25415] netlink: 'syz.1.6941': attribute type 1 has an invalid length. [ 350.334937][T25417] FAULT_INJECTION: forcing a failure. [ 350.334937][T25417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.350808][T25415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6941'. [ 350.353296][T25413] netlink: 'syz.0.6940': attribute type 2 has an invalid length. [ 350.375137][T25417] CPU: 0 UID: 0 PID: 25417 Comm: syz.2.6942 Not tainted syzkaller #0 PREEMPT(full) [ 350.375159][T25417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.375168][T25417] Call Trace: [ 350.375174][T25417] [ 350.375181][T25417] dump_stack_lvl+0x189/0x250 [ 350.375204][T25417] ? __pfx____ratelimit+0x10/0x10 [ 350.375227][T25417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.375245][T25417] ? __pfx__printk+0x10/0x10 [ 350.375266][T25417] ? __might_fault+0xb0/0x130 [ 350.375293][T25417] ? rcu_is_watching+0x15/0xb0 [ 350.375312][T25417] should_fail_ex+0x414/0x560 [ 350.375337][T25417] _copy_from_iter+0x1db/0x16f0 [ 350.375356][T25417] ? rcu_is_watching+0x15/0xb0 [ 350.375373][T25417] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 350.375397][T25417] ? __pfx__copy_from_iter+0x10/0x10 [ 350.375414][T25417] ? __build_skb_around+0x257/0x3e0 [ 350.375441][T25417] ? netlink_sendmsg+0x642/0xb30 [ 350.375463][T25417] ? skb_put+0x11b/0x210 [ 350.375480][T25417] netlink_sendmsg+0x6b2/0xb30 [ 350.375508][T25417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.375532][T25417] ? is_bpf_text_address+0x26/0x2b0 [ 350.375556][T25417] ? rcu_is_watching+0x15/0xb0 [ 350.375569][T25417] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.375584][T25417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.375601][T25417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.375622][T25417] __sock_sendmsg+0x21c/0x270 [ 350.375645][T25417] ____sys_sendmsg+0x52d/0x830 [ 350.375665][T25417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.375687][T25417] ? import_iovec+0x74/0xa0 [ 350.375707][T25417] ___sys_sendmsg+0x21f/0x2a0 [ 350.375725][T25417] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.375744][T25417] ? kstrtouint+0x6e/0xe0 [ 350.375779][T25417] ? __fget_files+0x2a/0x420 [ 350.375802][T25417] ? __fget_files+0x3a0/0x420 [ 350.375830][T25417] __sys_sendmmsg+0x227/0x430 [ 350.375850][T25417] ? __pfx___sys_sendmmsg+0x10/0x10 [ 350.375866][T25417] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 350.375903][T25417] ? ksys_write+0x22a/0x250 [ 350.375927][T25417] ? __pfx_ksys_write+0x10/0x10 [ 350.375947][T25417] ? rcu_is_watching+0x15/0xb0 [ 350.375967][T25417] __x64_sys_sendmmsg+0xa0/0xc0 [ 350.375993][T25417] do_syscall_64+0xfa/0x3b0 [ 350.376018][T25417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.376034][T25417] ? clear_bhb_loop+0x60/0xb0 [ 350.376054][T25417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.376071][T25417] RIP: 0033:0x7fe2f6d8ebe9 [ 350.376087][T25417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.376102][T25417] RSP: 002b:00007fe2f7ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.376123][T25417] RAX: ffffffffffffffda RBX: 00007fe2f6fb5fa0 RCX: 00007fe2f6d8ebe9 [ 350.376137][T25417] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 350.376150][T25417] RBP: 00007fe2f7ce3090 R08: 0000000000000000 R09: 0000000000000000 [ 350.376162][T25417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.376173][T25417] R13: 00007fe2f6fb6038 R14: 00007fe2f6fb5fa0 R15: 00007ffc834f5fe8 [ 350.376194][T25417] [ 350.682887][T25421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6943'. [ 350.726797][T25425] netlink: 'syz.0.6945': attribute type 3 has an invalid length. [ 350.771978][T25429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6946'. [ 350.905329][T25444] netlink: 'syz.1.6953': attribute type 1 has an invalid length. [ 350.936577][T25447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6952'. [ 350.981581][T25444] netlink: 'syz.1.6953': attribute type 10 has an invalid length. [ 350.995182][T25444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6953'. [ 351.043251][T25444] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.057997][T25444] bond9: (slave bond10): making interface the new active one [ 351.069826][T25444] bond9: (slave bond10): Enslaving as an active interface with an up link [ 351.079557][T25462] FAULT_INJECTION: forcing a failure. [ 351.079557][T25462] name failslab, interval 1, probability 0, space 0, times 0 [ 351.092474][T25462] CPU: 1 UID: 0 PID: 25462 Comm: syz.0.6958 Not tainted syzkaller #0 PREEMPT(full) [ 351.092498][T25462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.092510][T25462] Call Trace: [ 351.092518][T25462] [ 351.092525][T25462] dump_stack_lvl+0x189/0x250 [ 351.092551][T25462] ? __pfx____ratelimit+0x10/0x10 [ 351.092574][T25462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.092594][T25462] ? __pfx__printk+0x10/0x10 [ 351.092619][T25462] ? __pfx___might_resched+0x10/0x10 [ 351.092637][T25462] ? lock_acquire+0x5f/0x360 [ 351.092661][T25462] should_fail_ex+0x414/0x560 [ 351.092686][T25462] should_failslab+0xa8/0x100 [ 351.092718][T25462] __kmalloc_node_noprof+0xd1/0x4e0 [ 351.092740][T25462] ? rcu_is_watching+0x15/0xb0 [ 351.092757][T25462] ? qdisc_alloc+0x97/0xaa0 [ 351.092782][T25462] qdisc_alloc+0x97/0xaa0 [ 351.092808][T25462] qdisc_create+0x12c/0xea0 [ 351.092828][T25462] ? lock_release+0x4b/0x3e0 [ 351.092852][T25462] ? qdisc_lookup+0x36d/0x6d0 [ 351.092870][T25462] tc_modify_qdisc+0x1538/0x20e0 [ 351.092896][T25462] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 351.092925][T25462] ? lock_release+0x4b/0x3e0 [ 351.092946][T25462] ? bpf_lsm_capable+0x9/0x20 [ 351.092968][T25462] ? security_capable+0x7e/0x2e0 [ 351.092993][T25462] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 351.093012][T25462] rtnetlink_rcv_msg+0x77c/0xb70 [ 351.093038][T25462] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 351.093060][T25462] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 351.093083][T25462] ? __netlink_lookup+0xbd/0x810 [ 351.093097][T25462] ? rcu_is_watching+0x15/0xb0 [ 351.093113][T25462] ? rcu_is_watching+0x15/0xb0 [ 351.093131][T25462] netlink_rcv_skb+0x208/0x470 [ 351.093153][T25462] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 351.093177][T25462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.093207][T25462] netlink_unicast+0x82c/0x9e0 [ 351.093232][T25462] ? __pfx_netlink_unicast+0x10/0x10 [ 351.093253][T25462] ? netlink_sendmsg+0x642/0xb30 [ 351.093275][T25462] ? skb_put+0x11b/0x210 [ 351.093290][T25462] netlink_sendmsg+0x805/0xb30 [ 351.093316][T25462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.093339][T25462] ? is_bpf_text_address+0x26/0x2b0 [ 351.093359][T25462] ? rcu_is_watching+0x15/0xb0 [ 351.093375][T25462] ? aa_sock_msg_perm+0xf1/0x1d0 [ 351.093392][T25462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.093410][T25462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.093433][T25462] __sock_sendmsg+0x21c/0x270 [ 351.093455][T25462] ____sys_sendmsg+0x52d/0x830 [ 351.093474][T25462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.093494][T25462] ? import_iovec+0x74/0xa0 [ 351.093514][T25462] ___sys_sendmsg+0x21f/0x2a0 [ 351.093533][T25462] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.093552][T25462] ? kstrtouint+0x6e/0xe0 [ 351.093587][T25462] ? __fget_files+0x2a/0x420 [ 351.093609][T25462] ? __fget_files+0x3a0/0x420 [ 351.093635][T25462] __sys_sendmmsg+0x227/0x430 [ 351.093654][T25462] ? __pfx___sys_sendmmsg+0x10/0x10 [ 351.093669][T25462] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 351.093712][T25462] ? ksys_write+0x22a/0x250 [ 351.093735][T25462] ? __pfx_ksys_write+0x10/0x10 [ 351.093754][T25462] ? rcu_is_watching+0x15/0xb0 [ 351.093774][T25462] __x64_sys_sendmmsg+0xa0/0xc0 [ 351.093793][T25462] do_syscall_64+0xfa/0x3b0 [ 351.093816][T25462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.093833][T25462] ? clear_bhb_loop+0x60/0xb0 [ 351.093852][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.093868][T25462] RIP: 0033:0x7fdb3678ebe9 [ 351.093882][T25462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.093890][T25462] RSP: 002b:00007fdb37631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 351.093903][T25462] RAX: ffffffffffffffda RBX: 00007fdb369b5fa0 RCX: 00007fdb3678ebe9 [ 351.093911][T25462] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 351.093918][T25462] RBP: 00007fdb37631090 R08: 0000000000000000 R09: 0000000000000000 [ 351.093924][T25462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.093930][T25462] R13: 00007fdb369b6038 R14: 00007fdb369b5fa0 R15: 00007ffd9275a568 [ 351.093941][T25462] [ 351.498796][T25159] net_ratelimit: 27 callbacks suppressed [ 351.498815][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.554476][T25468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6959'. [ 351.618484][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.643079][T25472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6960'. [ 351.677102][T25481] netlink: 'syz.3.6964': attribute type 1 has an invalid length. [ 351.691572][T25481] netlink: 'syz.3.6964': attribute type 1 has an invalid length. [ 351.700102][T25481] netlink: 'syz.3.6964': attribute type 2 has an invalid length. [ 351.708689][T25481] netlink: 'syz.3.6964': attribute type 2 has an invalid length. [ 351.733509][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.845579][T25498] openvswitch: netlink: IPv6 tunnel dst address is zero [ 351.859480][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.980096][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 352.099259][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 352.152439][T25530] openvswitch: netlink: IPv6 tunnel dst address is zero [ 352.209086][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 352.301643][T25546] bridge0: port 3(batadv0) entered blocking state [ 352.309140][T25546] bridge0: port 3(batadv0) entered disabled state [ 352.340917][T25546] batadv0: entered allmulticast mode [ 352.357735][T25546] batadv0: entered promiscuous mode [ 352.378570][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 352.505397][T25575] validate_nla: 3 callbacks suppressed [ 352.505417][T25575] netlink: 'syz.3.6998': attribute type 10 has an invalid length. [ 352.692491][T25588] veth0: entered promiscuous mode [ 352.711958][T25587] veth0: left promiscuous mode [ 352.798825][T25159] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 352.808405][T25159] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 352.879388][T25616] syzkaller0: entered promiscuous mode [ 352.884893][T25616] syzkaller0: entered allmulticast mode [ 352.905315][T25616] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 352.916859][T25610] netlink: 'syz.0.7012': attribute type 24 has an invalid length. [ 353.202967][T25650] FAULT_INJECTION: forcing a failure. [ 353.202967][T25650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.219925][T25650] CPU: 1 UID: 0 PID: 25650 Comm: syz.2.7026 Not tainted syzkaller #0 PREEMPT(full) [ 353.219954][T25650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.219966][T25650] Call Trace: [ 353.219974][T25650] [ 353.219983][T25650] dump_stack_lvl+0x189/0x250 [ 353.220010][T25650] ? __pfx____ratelimit+0x10/0x10 [ 353.220034][T25650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.220054][T25650] ? __pfx__printk+0x10/0x10 [ 353.220079][T25650] ? lock_acquire+0x5f/0x360 [ 353.220106][T25650] should_fail_ex+0x414/0x560 [ 353.220132][T25650] prepare_alloc_pages+0x213/0x610 [ 353.220153][T25650] __alloc_frozen_pages_noprof+0x123/0x370 [ 353.220172][T25650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.220192][T25650] ? policy_nodemask+0x27c/0x720 [ 353.220215][T25650] ? pfn_valid+0xba/0x490 [ 353.220236][T25650] ? rcu_is_watching+0x15/0xb0 [ 353.220256][T25650] alloc_pages_mpol+0x232/0x4a0 [ 353.220281][T25650] vma_alloc_folio_noprof+0xe4/0x200 [ 353.220304][T25650] ? rcu_read_lock_held+0xa/0x50 [ 353.220324][T25650] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 353.220349][T25650] ? rcu_is_watching+0x15/0xb0 [ 353.220366][T25650] ? lock_release+0x4b/0x3e0 [ 353.220390][T25650] folio_prealloc+0x30/0x180 [ 353.220414][T25650] __handle_mm_fault+0x2ab9/0x5440 [ 353.220435][T25650] ? rcu_is_watching+0x15/0xb0 [ 353.220458][T25650] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.220486][T25650] ? follow_page_pte+0x7ef/0x13e0 [ 353.220512][T25650] handle_mm_fault+0x40a/0x8e0 [ 353.220545][T25650] __get_user_pages+0x1699/0x2ce0 [ 353.220564][T25650] ? kasan_save_track+0x4f/0x80 [ 353.220600][T25650] __gup_longterm_locked+0x3dc/0x1660 [ 353.220629][T25650] ? rcu_needs_cpu+0xa1/0xb0 [ 353.220648][T25650] pin_user_pages+0x9e/0xd0 [ 353.220671][T25650] xdp_umem_pin_pages+0x117/0x340 [ 353.220697][T25650] xdp_umem_create+0x677/0x8e0 [ 353.220724][T25650] xsk_setsockopt+0x7b0/0x8d0 [ 353.220747][T25650] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.220769][T25650] ? lock_release+0x4b/0x3e0 [ 353.220792][T25650] ? aa_sock_opt_perm+0xff/0x1b0 [ 353.220811][T25650] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 353.220830][T25650] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.220852][T25650] do_sock_setsockopt+0x17c/0x1b0 [ 353.220872][T25650] __x64_sys_setsockopt+0x13f/0x1b0 [ 353.220892][T25650] do_syscall_64+0xfa/0x3b0 [ 353.220917][T25650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.220936][T25650] ? clear_bhb_loop+0x60/0xb0 [ 353.220955][T25650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.220973][T25650] RIP: 0033:0x7fe2f6d8ebe9 [ 353.220991][T25650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.221007][T25650] RSP: 002b:00007fe2f7ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.221029][T25650] RAX: ffffffffffffffda RBX: 00007fe2f6fb5fa0 RCX: 00007fe2f6d8ebe9 [ 353.221044][T25650] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 353.221055][T25650] RBP: 00007fe2f7ce3090 R08: 0000000000000020 R09: 0000000000000000 [ 353.221067][T25650] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 353.221078][T25650] R13: 00007fe2f6fb6038 R14: 00007fe2f6fb5fa0 R15: 00007ffc834f5fe8 [ 353.221099][T25650] [ 353.228370][T25641] block nbd5: server does not support multiple connections per device. [ 353.382099][T25664] sctp: [Deprecated]: syz.2.7028 (pid 25664) Use of int in maxseg socket option. [ 353.382099][T25664] Use struct sctp_assoc_value instead [ 353.383653][T25641] block nbd5: shutting down sockets [ 353.734491][T25680] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 353.744210][T25680] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 353.844368][T25689] tipc: Enabling of bearer rejected, already enabled [ 353.872859][T25694] FAULT_INJECTION: forcing a failure. [ 353.872859][T25694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.894574][T25692] tipc: Enabled bearer , priority 0 [ 353.896427][T25694] CPU: 1 UID: 0 PID: 25694 Comm: syz.2.7040 Not tainted syzkaller #0 PREEMPT(full) [ 353.896450][T25694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.896461][T25694] Call Trace: [ 353.896469][T25694] [ 353.896478][T25694] dump_stack_lvl+0x189/0x250 [ 353.896503][T25694] ? __pfx____ratelimit+0x10/0x10 [ 353.896528][T25694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.896548][T25694] ? __pfx__printk+0x10/0x10 [ 353.896573][T25694] ? lock_acquire+0x5f/0x360 [ 353.896602][T25694] should_fail_ex+0x414/0x560 [ 353.896627][T25694] prepare_alloc_pages+0x213/0x610 [ 353.896648][T25694] __alloc_frozen_pages_noprof+0x123/0x370 [ 353.896669][T25694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.896692][T25694] ? policy_nodemask+0x27c/0x720 [ 353.896715][T25694] ? pfn_valid+0xba/0x490 [ 353.896736][T25694] ? rcu_is_watching+0x15/0xb0 [ 353.896763][T25694] alloc_pages_mpol+0x232/0x4a0 [ 353.896788][T25694] vma_alloc_folio_noprof+0xe4/0x200 [ 353.896812][T25694] ? rcu_read_lock_held+0xa/0x50 [ 353.896831][T25694] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 353.896856][T25694] ? rcu_is_watching+0x15/0xb0 [ 353.896874][T25694] ? lock_release+0x4b/0x3e0 [ 353.896898][T25694] folio_prealloc+0x30/0x180 [ 353.896922][T25694] __handle_mm_fault+0x2ab9/0x5440 [ 353.896944][T25694] ? rcu_is_watching+0x15/0xb0 [ 353.896968][T25694] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.896999][T25694] ? follow_page_pte+0x7ef/0x13e0 [ 353.897024][T25694] handle_mm_fault+0x40a/0x8e0 [ 353.897050][T25694] __get_user_pages+0x1699/0x2ce0 [ 353.897070][T25694] ? kasan_save_track+0x4f/0x80 [ 353.897111][T25694] __gup_longterm_locked+0x3dc/0x1660 [ 353.897141][T25694] ? rcu_needs_cpu+0xa1/0xb0 [ 353.897160][T25694] pin_user_pages+0x9e/0xd0 [ 353.897183][T25694] xdp_umem_pin_pages+0x117/0x340 [ 353.897209][T25694] xdp_umem_create+0x677/0x8e0 [ 353.897236][T25694] xsk_setsockopt+0x7b0/0x8d0 [ 353.897258][T25694] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.897280][T25694] ? lock_release+0x4b/0x3e0 [ 353.897303][T25694] ? aa_sock_opt_perm+0xff/0x1b0 [ 353.897321][T25694] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 353.897341][T25694] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.897362][T25694] do_sock_setsockopt+0x17c/0x1b0 [ 353.897388][T25694] __x64_sys_setsockopt+0x13f/0x1b0 [ 353.897409][T25694] do_syscall_64+0xfa/0x3b0 [ 353.897434][T25694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.897451][T25694] ? clear_bhb_loop+0x60/0xb0 [ 353.897472][T25694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.897490][T25694] RIP: 0033:0x7fe2f6d8ebe9 [ 353.897507][T25694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.897524][T25694] RSP: 002b:00007fe2f7ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.897545][T25694] RAX: ffffffffffffffda RBX: 00007fe2f6fb5fa0 RCX: 00007fe2f6d8ebe9 [ 353.897559][T25694] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 353.897572][T25694] RBP: 00007fe2f7ce3090 R08: 0000000000000020 R09: 0000000000000000 [ 353.897585][T25694] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 353.897597][T25694] R13: 00007fe2f6fb6038 R14: 00007fe2f6fb5fa0 R15: 00007ffc834f5fe8 [ 353.897619][T25694] [ 353.994279][T25707] IPVS: set_ctl: invalid protocol: 8 172.30.0.3:20001 [ 354.046799][T25692] syzkaller0: entered promiscuous mode [ 354.243781][T25692] syzkaller0: entered allmulticast mode [ 354.262414][T25711] tipc: Resetting bearer [ 354.303603][T25691] tipc: Resetting bearer [ 354.336261][T25691] tipc: Disabling bearer [ 354.503453][T25728] syzkaller0: entered promiscuous mode [ 354.527744][T25739] FAULT_INJECTION: forcing a failure. [ 354.527744][T25739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.530196][T25728] syzkaller0: entered allmulticast mode [ 354.542485][T25739] CPU: 0 UID: 0 PID: 25739 Comm: syz.4.7052 Not tainted syzkaller #0 PREEMPT(full) [ 354.542509][T25739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.542520][T25739] Call Trace: [ 354.542528][T25739] [ 354.542535][T25739] dump_stack_lvl+0x189/0x250 [ 354.542561][T25739] ? __pfx____ratelimit+0x10/0x10 [ 354.542584][T25739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.542604][T25739] ? __pfx__printk+0x10/0x10 [ 354.542626][T25739] ? lock_acquire+0x5f/0x360 [ 354.542653][T25739] should_fail_ex+0x414/0x560 [ 354.542677][T25739] prepare_alloc_pages+0x213/0x610 [ 354.542699][T25739] __alloc_frozen_pages_noprof+0x123/0x370 [ 354.542720][T25739] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 354.542742][T25739] ? policy_nodemask+0x27c/0x720 [ 354.542764][T25739] ? pfn_valid+0xba/0x490 [ 354.542785][T25739] ? rcu_is_watching+0x15/0xb0 [ 354.542804][T25739] alloc_pages_mpol+0x232/0x4a0 [ 354.542829][T25739] vma_alloc_folio_noprof+0xe4/0x200 [ 354.542852][T25739] ? rcu_read_lock_held+0xa/0x50 [ 354.542870][T25739] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 354.542893][T25739] ? rcu_is_watching+0x15/0xb0 [ 354.542910][T25739] ? lock_release+0x4b/0x3e0 [ 354.542934][T25739] folio_prealloc+0x30/0x180 [ 354.542958][T25739] __handle_mm_fault+0x2ab9/0x5440 [ 354.542978][T25739] ? rcu_is_watching+0x15/0xb0 [ 354.543000][T25739] ? __pfx___handle_mm_fault+0x10/0x10 [ 354.543030][T25739] ? follow_page_pte+0x7ef/0x13e0 [ 354.543054][T25739] handle_mm_fault+0x40a/0x8e0 [ 354.543080][T25739] __get_user_pages+0x1699/0x2ce0 [ 354.543098][T25739] ? kasan_save_track+0x4f/0x80 [ 354.543134][T25739] __gup_longterm_locked+0x3dc/0x1660 [ 354.543166][T25739] ? rcu_needs_cpu+0xa1/0xb0 [ 354.543184][T25739] pin_user_pages+0x9e/0xd0 [ 354.543205][T25739] xdp_umem_pin_pages+0x117/0x340 [ 354.543230][T25739] xdp_umem_create+0x677/0x8e0 [ 354.543257][T25739] xsk_setsockopt+0x7b0/0x8d0 [ 354.543278][T25739] ? __pfx_xsk_setsockopt+0x10/0x10 [ 354.543299][T25739] ? lock_release+0x4b/0x3e0 [ 354.543322][T25739] ? aa_sock_opt_perm+0xff/0x1b0 [ 354.543340][T25739] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 354.543359][T25739] ? __pfx_xsk_setsockopt+0x10/0x10 [ 354.543379][T25739] do_sock_setsockopt+0x17c/0x1b0 [ 354.543398][T25739] __x64_sys_setsockopt+0x13f/0x1b0 [ 354.543417][T25739] do_syscall_64+0xfa/0x3b0 [ 354.543441][T25739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.543459][T25739] ? clear_bhb_loop+0x60/0xb0 [ 354.543484][T25739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.543500][T25739] RIP: 0033:0x7fb79c18ebe9 [ 354.543517][T25739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.543533][T25739] RSP: 002b:00007fb79d095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 354.543553][T25739] RAX: ffffffffffffffda RBX: 00007fb79c3b5fa0 RCX: 00007fb79c18ebe9 [ 354.543566][T25739] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 354.543578][T25739] RBP: 00007fb79d095090 R08: 0000000000000020 R09: 0000000000000000 [ 354.543589][T25739] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 354.543601][T25739] R13: 00007fb79c3b6038 R14: 00007fb79c3b5fa0 R15: 00007ffd2e0f1528 [ 354.543621][T25739] [ 355.048447][T25761] team0: Device wireguard0 is of different type [ 355.154943][T25787] __nla_validate_parse: 14 callbacks suppressed [ 355.154962][T25787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7066'. [ 355.221619][T25789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7067'. [ 355.235857][T25789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7067'. [ 355.307250][T25803] netlink: 'syz.2.7069': attribute type 1 has an invalid length. [ 355.371180][T25803] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7069'. [ 355.465201][T25819] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7078'. [ 355.486504][T25821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7079'. [ 355.510206][T25823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7080'. [ 355.663414][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7085'. [ 355.711096][T25840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7086'. [ 355.768005][T25842] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7087'. [ 355.783432][T25842] netlink: 'syz.4.7087': attribute type 3 has an invalid length. [ 355.996590][T25862] FAULT_INJECTION: forcing a failure. [ 355.996590][T25862] name failslab, interval 1, probability 0, space 0, times 0 [ 356.009602][T25862] CPU: 1 UID: 0 PID: 25862 Comm: syz.3.7096 Not tainted syzkaller #0 PREEMPT(full) [ 356.009618][T25862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.009625][T25862] Call Trace: [ 356.009630][T25862] [ 356.009634][T25862] dump_stack_lvl+0x189/0x250 [ 356.009651][T25862] ? __pfx____ratelimit+0x10/0x10 [ 356.009668][T25862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.009679][T25862] ? __pfx__printk+0x10/0x10 [ 356.009692][T25862] ? fs_reclaim_acquire+0x7d/0x100 [ 356.009707][T25862] ? rcu_is_watching+0x15/0xb0 [ 356.009718][T25862] ? __pfx___might_resched+0x10/0x10 [ 356.009727][T25862] ? lock_acquire+0x5f/0x360 [ 356.009741][T25862] should_fail_ex+0x414/0x560 [ 356.009754][T25862] should_failslab+0xa8/0x100 [ 356.009768][T25862] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 356.009782][T25862] ? __alloc_skb+0x112/0x2d0 [ 356.009795][T25862] ? __pfx_netlink_unicast+0x10/0x10 [ 356.009808][T25862] __alloc_skb+0x112/0x2d0 [ 356.009822][T25862] netlink_sendmsg+0x5c6/0xb30 [ 356.009838][T25862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.009851][T25862] ? is_bpf_text_address+0x26/0x2b0 [ 356.009864][T25862] ? rcu_is_watching+0x15/0xb0 [ 356.009873][T25862] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.009883][T25862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.009893][T25862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.009906][T25862] __sock_sendmsg+0x21c/0x270 [ 356.009919][T25862] ____sys_sendmsg+0x52d/0x830 [ 356.009934][T25862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.009953][T25862] ? import_iovec+0x74/0xa0 [ 356.009973][T25862] ___sys_sendmsg+0x21f/0x2a0 [ 356.009989][T25862] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.010007][T25862] ? kstrtouint+0x6e/0xe0 [ 356.010041][T25862] ? rcu_is_watching+0x15/0xb0 [ 356.010058][T25862] ? lock_release+0x4b/0x3e0 [ 356.010080][T25862] ? __might_fault+0xcc/0x130 [ 356.010098][T25862] __sys_sendmmsg+0x227/0x430 [ 356.010109][T25862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 356.010118][T25862] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 356.010139][T25862] ? ksys_write+0x22a/0x250 [ 356.010152][T25862] ? __pfx_ksys_write+0x10/0x10 [ 356.010163][T25862] ? rcu_is_watching+0x15/0xb0 [ 356.010174][T25862] __x64_sys_sendmmsg+0xa0/0xc0 [ 356.010184][T25862] do_syscall_64+0xfa/0x3b0 [ 356.010199][T25862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.010209][T25862] ? clear_bhb_loop+0x60/0xb0 [ 356.010219][T25862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.010229][T25862] RIP: 0033:0x7fbab198ebe9 [ 356.010239][T25862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.010248][T25862] RSP: 002b:00007fbab28e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.010260][T25862] RAX: ffffffffffffffda RBX: 00007fbab1bb5fa0 RCX: 00007fbab198ebe9 [ 356.010268][T25862] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 356.010275][T25862] RBP: 00007fbab28e1090 R08: 0000000000000000 R09: 0000000000000000 [ 356.010282][T25862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.010288][T25862] R13: 00007fbab1bb6038 R14: 00007fbab1bb5fa0 R15: 00007ffcad49c9b8 [ 356.010299][T25862] [ 356.135735][T25863] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:0 [ 356.410868][T25875] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.432490][T25875] vlan4: entered allmulticast mode [ 356.445731][T25875] bond9: entered allmulticast mode [ 356.485717][T25880] netlink: 'syz.3.7099': attribute type 4 has an invalid length. [ 356.512684][T25875] netlink: 'syz.3.7099': attribute type 4 has an invalid length. [ 356.525784][T25886] FAULT_INJECTION: forcing a failure. [ 356.525784][T25886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.539799][T25886] CPU: 0 UID: 0 PID: 25886 Comm: syz.0.7104 Not tainted syzkaller #0 PREEMPT(full) [ 356.539824][T25886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.539835][T25886] Call Trace: [ 356.539842][T25886] [ 356.539850][T25886] dump_stack_lvl+0x189/0x250 [ 356.539874][T25886] ? __pfx____ratelimit+0x10/0x10 [ 356.539898][T25886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.539917][T25886] ? __pfx__printk+0x10/0x10 [ 356.539937][T25886] ? rcu_is_watching+0x15/0xb0 [ 356.539953][T25886] ? lock_acquire+0x5f/0x360 [ 356.539976][T25886] ? __might_fault+0xb0/0x130 [ 356.539999][T25886] ? rcu_is_watching+0x15/0xb0 [ 356.540017][T25886] should_fail_ex+0x414/0x560 [ 356.540042][T25886] _copy_from_user+0x2d/0xb0 [ 356.540062][T25886] __copy_msghdr+0x3c5/0x5b0 [ 356.540080][T25886] ___sys_sendmsg+0x1a5/0x2a0 [ 356.540098][T25886] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.540116][T25886] ? kstrtouint+0x6e/0xe0 [ 356.540150][T25886] ? __fget_files+0x2a/0x420 [ 356.540174][T25886] ? __fget_files+0x3a0/0x420 [ 356.540202][T25886] __sys_sendmmsg+0x227/0x430 [ 356.540222][T25886] ? __pfx___sys_sendmmsg+0x10/0x10 [ 356.540239][T25886] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 356.540275][T25886] ? ksys_write+0x22a/0x250 [ 356.540296][T25886] ? __pfx_ksys_write+0x10/0x10 [ 356.540315][T25886] ? rcu_is_watching+0x15/0xb0 [ 356.540334][T25886] __x64_sys_sendmmsg+0xa0/0xc0 [ 356.540353][T25886] do_syscall_64+0xfa/0x3b0 [ 356.540377][T25886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.540395][T25886] ? clear_bhb_loop+0x60/0xb0 [ 356.540414][T25886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.540432][T25886] RIP: 0033:0x7fdb3678ebe9 [ 356.540447][T25886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.540463][T25886] RSP: 002b:00007fdb37631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.540485][T25886] RAX: ffffffffffffffda RBX: 00007fdb369b5fa0 RCX: 00007fdb3678ebe9 [ 356.540499][T25886] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 356.540511][T25886] RBP: 00007fdb37631090 R08: 0000000000000000 R09: 0000000000000000 [ 356.540523][T25886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.540541][T25886] R13: 00007fdb369b6038 R14: 00007fdb369b5fa0 R15: 00007ffd9275a568 [ 356.540562][T25886] [ 356.780394][ T13] net_ratelimit: 33 callbacks suppressed [ 356.780413][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.918218][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 357.012029][T25916] FAULT_INJECTION: forcing a failure. [ 357.012029][T25916] name failslab, interval 1, probability 0, space 0, times 0 [ 357.024726][T25916] CPU: 1 UID: 0 PID: 25916 Comm: syz.0.7116 Not tainted syzkaller #0 PREEMPT(full) [ 357.024750][T25916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.024761][T25916] Call Trace: [ 357.024769][T25916] [ 357.024777][T25916] dump_stack_lvl+0x189/0x250 [ 357.024803][T25916] ? __pfx____ratelimit+0x10/0x10 [ 357.024826][T25916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.024846][T25916] ? __pfx__printk+0x10/0x10 [ 357.024868][T25916] ? rcu_read_lock_held+0xa/0x50 [ 357.024886][T25916] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 357.024915][T25916] should_fail_ex+0x414/0x560 [ 357.024940][T25916] should_failslab+0xa8/0x100 [ 357.024963][T25916] ? __pfx_ip6_dst_gc+0x10/0x10 [ 357.024979][T25916] kmem_cache_alloc_noprof+0x73/0x3c0 [ 357.025001][T25916] ? dst_alloc+0x105/0x170 [ 357.025020][T25916] ? __pfx_ip6_dst_gc+0x10/0x10 [ 357.025037][T25916] dst_alloc+0x105/0x170 [ 357.025058][T25916] ip6_pol_route+0xa21/0x1180 [ 357.025077][T25916] ? ip6_pol_route+0x162/0x1180 [ 357.025096][T25916] ? __pfx_ip6_pol_route+0x10/0x10 [ 357.025116][T25916] ? fib_rules_lookup+0x96/0xe90 [ 357.025132][T25916] ? rcu_is_watching+0x15/0xb0 [ 357.025149][T25916] ? lock_acquire+0x5f/0x360 [ 357.025175][T25916] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 357.025194][T25916] fib6_rule_action+0x206/0x7d0 [ 357.025215][T25916] ? __pfx_fib6_rule_action+0x10/0x10 [ 357.025235][T25916] fib_rules_lookup+0x767/0xe90 [ 357.025252][T25916] ? l3mdev_update_flow+0x29/0x640 [ 357.025273][T25916] ? fib_rules_lookup+0x96/0xe90 [ 357.025289][T25916] ? __pfx_fib_rules_lookup+0x10/0x10 [ 357.025306][T25916] ? l3mdev_update_flow+0x29/0x640 [ 357.025330][T25916] ? l3mdev_update_flow+0x4d1/0x640 [ 357.025350][T25916] fib6_rule_lookup+0x18e/0x6f0 [ 357.025370][T25916] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 357.025389][T25916] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 357.025407][T25916] ? ip6_route_output_flags+0x2e/0x5d0 [ 357.025424][T25916] ? rcu_is_watching+0x15/0xb0 [ 357.025440][T25916] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 357.025460][T25916] ? tomoyo_domain_quota_is_ok+0x97/0x570 [ 357.025488][T25916] ip6_route_output_flags+0x364/0x5d0 [ 357.025507][T25916] ? ip6_route_output_flags+0x2e/0x5d0 [ 357.025528][T25916] ip6_dst_lookup_tail+0x1ae/0x1510 [ 357.025550][T25916] ? txopt_get+0x7a/0x3f0 [ 357.025572][T25916] ? txopt_get+0x7a/0x3f0 [ 357.025595][T25916] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 357.025615][T25916] ? snprintf+0xda/0x120 [ 357.025635][T25916] ? txopt_get+0x7a/0x3f0 [ 357.025655][T25916] ? txopt_get+0x7a/0x3f0 [ 357.025677][T25916] ? txopt_get+0x335/0x3f0 [ 357.025699][T25916] ? rcu_is_watching+0x15/0xb0 [ 357.025714][T25916] ? aa_label_sk_perm+0x4cd/0x630 [ 357.025738][T25916] ? __pfx_txopt_get+0x10/0x10 [ 357.025762][T25916] ip6_dst_lookup_flow+0x47/0xe0 [ 357.025785][T25916] rawv6_sendmsg+0xdab/0x1820 [ 357.025808][T25916] ? tomoyo_check_inet_address+0x275/0x8c0 [ 357.025832][T25916] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 357.025866][T25916] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.025890][T25916] ? sock_rps_record_flow+0x19/0x410 [ 357.025912][T25916] ? inet_sendmsg+0x2f4/0x370 [ 357.025931][T25916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.025952][T25916] __sock_sendmsg+0x19c/0x270 [ 357.025975][T25916] ____sys_sendmsg+0x52d/0x830 [ 357.025995][T25916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.026018][T25916] ? import_iovec+0x74/0xa0 [ 357.026038][T25916] ___sys_sendmsg+0x21f/0x2a0 [ 357.026057][T25916] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.026076][T25916] ? kstrtouint+0x6e/0xe0 [ 357.026111][T25916] ? __fget_files+0x2a/0x420 [ 357.026134][T25916] ? __fget_files+0x3a0/0x420 [ 357.026162][T25916] __sys_sendmmsg+0x227/0x430 [ 357.026182][T25916] ? __pfx___sys_sendmmsg+0x10/0x10 [ 357.026199][T25916] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 357.026235][T25916] ? ksys_write+0x22a/0x250 [ 357.026257][T25916] ? __pfx_ksys_write+0x10/0x10 [ 357.026276][T25916] ? rcu_is_watching+0x15/0xb0 [ 357.026296][T25916] __x64_sys_sendmmsg+0xa0/0xc0 [ 357.026314][T25916] do_syscall_64+0xfa/0x3b0 [ 357.026345][T25916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.026362][T25916] ? clear_bhb_loop+0x60/0xb0 [ 357.026382][T25916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.026398][T25916] RIP: 0033:0x7fdb3678ebe9 [ 357.026413][T25916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.026427][T25916] RSP: 002b:00007fdb37631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.026446][T25916] RAX: ffffffffffffffda RBX: 00007fdb369b5fa0 RCX: 00007fdb3678ebe9 [ 357.026458][T25916] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 357.026469][T25916] RBP: 00007fdb37631090 R08: 0000000000000000 R09: 0000000000000000 [ 357.026480][T25916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.026490][T25916] R13: 00007fdb369b6038 R14: 00007fdb369b5fa0 R15: 00007ffd9275a568 [ 357.026510][T25916] [ 357.507071][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 357.561278][T25869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.567217][T25869] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 357.606142][T25930] netlink: 'syz.4.7121': attribute type 1 has an invalid length. [ 357.620209][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 357.728154][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 357.755431][T25953] netlink: 'syz.0.7128': attribute type 7 has an invalid length. [ 357.769197][T25953] netlink: 'syz.0.7128': attribute type 26 has an invalid length. [ 357.816015][T25962] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 357.839586][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 357.927395][T25973] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 357.949149][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 358.000978][T25981] FAULT_INJECTION: forcing a failure. [ 358.000978][T25981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.016535][T25981] CPU: 0 UID: 0 PID: 25981 Comm: syz.2.7139 Not tainted syzkaller #0 PREEMPT(full) [ 358.016559][T25981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.016571][T25981] Call Trace: [ 358.016579][T25981] [ 358.016587][T25981] dump_stack_lvl+0x189/0x250 [ 358.016614][T25981] ? __pfx____ratelimit+0x10/0x10 [ 358.016638][T25981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.016658][T25981] ? __pfx__printk+0x10/0x10 [ 358.016682][T25981] ? lock_acquire+0x5f/0x360 [ 358.016708][T25981] should_fail_ex+0x414/0x560 [ 358.016732][T25981] prepare_alloc_pages+0x213/0x610 [ 358.016753][T25981] __alloc_frozen_pages_noprof+0x123/0x370 [ 358.016774][T25981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.016796][T25981] ? policy_nodemask+0x27c/0x720 [ 358.016818][T25981] ? pfn_valid+0xba/0x490 [ 358.016839][T25981] ? rcu_is_watching+0x15/0xb0 [ 358.016859][T25981] alloc_pages_mpol+0x232/0x4a0 [ 358.016884][T25981] vma_alloc_folio_noprof+0xe4/0x200 [ 358.016907][T25981] ? rcu_read_lock_held+0xa/0x50 [ 358.016926][T25981] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 358.016951][T25981] ? rcu_is_watching+0x15/0xb0 [ 358.016968][T25981] ? lock_release+0x4b/0x3e0 [ 358.016992][T25981] folio_prealloc+0x30/0x180 [ 358.017016][T25981] __handle_mm_fault+0x2ab9/0x5440 [ 358.017038][T25981] ? rcu_is_watching+0x15/0xb0 [ 358.017062][T25981] ? __pfx___handle_mm_fault+0x10/0x10 [ 358.017092][T25981] ? follow_page_pte+0x7ef/0x13e0 [ 358.017117][T25981] handle_mm_fault+0x40a/0x8e0 [ 358.017144][T25981] __get_user_pages+0x1699/0x2ce0 [ 358.017163][T25981] ? kasan_save_track+0x4f/0x80 [ 358.017200][T25981] __gup_longterm_locked+0x3dc/0x1660 [ 358.017228][T25981] ? rcu_needs_cpu+0xa1/0xb0 [ 358.017247][T25981] pin_user_pages+0x9e/0xd0 [ 358.017269][T25981] xdp_umem_pin_pages+0x117/0x340 [ 358.017295][T25981] xdp_umem_create+0x677/0x8e0 [ 358.017323][T25981] xsk_setsockopt+0x7b0/0x8d0 [ 358.017345][T25981] ? __pfx_xsk_setsockopt+0x10/0x10 [ 358.017367][T25981] ? lock_release+0x4b/0x3e0 [ 358.017391][T25981] ? aa_sock_opt_perm+0xff/0x1b0 [ 358.017410][T25981] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 358.017429][T25981] ? __pfx_xsk_setsockopt+0x10/0x10 [ 358.017451][T25981] do_sock_setsockopt+0x17c/0x1b0 [ 358.017477][T25981] __x64_sys_setsockopt+0x13f/0x1b0 [ 358.017497][T25981] do_syscall_64+0xfa/0x3b0 [ 358.017523][T25981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.017546][T25981] ? clear_bhb_loop+0x60/0xb0 [ 358.017566][T25981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.017583][T25981] RIP: 0033:0x7fe2f6d8ebe9 [ 358.017600][T25981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.017616][T25981] RSP: 002b:00007fe2f7ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.017637][T25981] RAX: ffffffffffffffda RBX: 00007fe2f6fb5fa0 RCX: 00007fe2f6d8ebe9 [ 358.017652][T25981] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 358.017664][T25981] RBP: 00007fe2f7ce3090 R08: 0000000000000020 R09: 0000000000000000 [ 358.017677][T25981] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 358.017689][T25981] R13: 00007fe2f6fb6038 R14: 00007fe2f6fb5fa0 R15: 00007ffc834f5fe8 [ 358.017710][T25981] [ 358.089642][T25989] nft_compat: unsupported protocol 0 [ 358.096903][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 358.196370][T25991] nft_compat: unsupported protocol 0 [ 358.389341][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 358.637065][T26034] netlink: 'syz.3.7159': attribute type 8 has an invalid length. [ 358.859403][T26060] netlink: 'syz.3.7164': attribute type 1 has an invalid length. [ 358.879049][T26060] netlink: 'syz.3.7164': attribute type 2 has an invalid length. [ 358.914763][T26060] netlink: 'syz.3.7164': attribute type 1 has an invalid length. [ 358.927521][T26067] netlink: 'syz.0.7171': attribute type 1 has an invalid length. [ 358.954824][T26071] 8021q: VLANs not supported on ip6gre0 [ 358.986825][T26073] netlink: 'syz.4.7173': attribute type 1 has an invalid length. [ 359.040883][T26078] netlink: 'syz.0.7174': attribute type 10 has an invalid length. [ 359.056813][T26078] veth1_macvtap: left promiscuous mode [ 359.067039][T26078] team0: Device veth1_macvtap failed to register rx_handler [ 359.077519][T26070] veth0: entered promiscuous mode [ 359.083367][T26069] veth0: left promiscuous mode [ 359.165091][T26090] FAULT_INJECTION: forcing a failure. [ 359.165091][T26090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.189342][T26090] CPU: 1 UID: 0 PID: 26090 Comm: syz.2.7179 Not tainted syzkaller #0 PREEMPT(full) [ 359.189367][T26090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.189379][T26090] Call Trace: [ 359.189386][T26090] [ 359.189394][T26090] dump_stack_lvl+0x189/0x250 [ 359.189419][T26090] ? __pfx____ratelimit+0x10/0x10 [ 359.189443][T26090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.189462][T26090] ? __pfx__printk+0x10/0x10 [ 359.189486][T26090] ? rcu_is_watching+0x15/0xb0 [ 359.189506][T26090] should_fail_ex+0x414/0x560 [ 359.189529][T26090] _copy_to_user+0x31/0xb0 [ 359.189550][T26090] wext_handle_ioctl+0x136/0x1c0 [ 359.189578][T26090] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 359.189601][T26090] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 359.189632][T26090] sock_ioctl+0x15f/0x790 [ 359.189652][T26090] ? lock_release+0x4b/0x3e0 [ 359.189675][T26090] ? __pfx_sock_ioctl+0x10/0x10 [ 359.189695][T26090] ? __fget_files+0x2a/0x420 [ 359.189718][T26090] ? __fget_files+0x3a0/0x420 [ 359.189741][T26090] ? __fget_files+0x2a/0x420 [ 359.189766][T26090] ? bpf_lsm_file_ioctl+0x9/0x20 [ 359.189785][T26090] ? __pfx_sock_ioctl+0x10/0x10 [ 359.189804][T26090] __se_sys_ioctl+0xfc/0x170 [ 359.189824][T26090] do_syscall_64+0xfa/0x3b0 [ 359.189848][T26090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.189865][T26090] ? clear_bhb_loop+0x60/0xb0 [ 359.189883][T26090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.189900][T26090] RIP: 0033:0x7fe2f6d8ebe9 [ 359.189915][T26090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.189931][T26090] RSP: 002b:00007fe2f7ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.189951][T26090] RAX: ffffffffffffffda RBX: 00007fe2f6fb5fa0 RCX: 00007fe2f6d8ebe9 [ 359.189964][T26090] RDX: 0000200000000080 RSI: 0000000000008b15 RDI: 0000000000000005 [ 359.189976][T26090] RBP: 00007fe2f7ce3090 R08: 0000000000000000 R09: 0000000000000000 [ 359.189987][T26090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.189999][T26090] R13: 00007fe2f6fb6038 R14: 00007fe2f6fb5fa0 R15: 00007ffc834f5fe8 [ 359.190019][T26090] [ 359.196443][T26088] veth0_to_bridge: entered promiscuous mode [ 359.428596][T26088] veth0_to_bridge: left promiscuous mode [ 359.844798][T26152] FAULT_INJECTION: forcing a failure. [ 359.844798][T26152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.883364][T26152] CPU: 1 UID: 0 PID: 26152 Comm: syz.0.7197 Not tainted syzkaller #0 PREEMPT(full) [ 359.883393][T26152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.883404][T26152] Call Trace: [ 359.883412][T26152] [ 359.883420][T26152] dump_stack_lvl+0x189/0x250 [ 359.883446][T26152] ? __pfx____ratelimit+0x10/0x10 [ 359.883470][T26152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.883489][T26152] ? __pfx__printk+0x10/0x10 [ 359.883510][T26152] ? __might_fault+0xb0/0x130 [ 359.883536][T26152] ? rcu_is_watching+0x15/0xb0 [ 359.883555][T26152] should_fail_ex+0x414/0x560 [ 359.883580][T26152] _copy_from_user+0x2d/0xb0 [ 359.883600][T26152] ____sys_sendmsg+0x2fe/0x830 [ 359.883621][T26152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.883642][T26152] ? import_iovec+0x74/0xa0 [ 359.883662][T26152] ___sys_sendmsg+0x21f/0x2a0 [ 359.883681][T26152] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.883701][T26152] ? kstrtouint+0x6e/0xe0 [ 359.883735][T26152] ? rcu_is_watching+0x15/0xb0 [ 359.883751][T26152] ? lock_release+0x4b/0x3e0 [ 359.883774][T26152] ? __might_fault+0xcc/0x130 [ 359.883796][T26152] __sys_sendmmsg+0x227/0x430 [ 359.883816][T26152] ? __pfx___sys_sendmmsg+0x10/0x10 [ 359.883832][T26152] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 359.883868][T26152] ? ksys_write+0x22a/0x250 [ 359.883890][T26152] ? __pfx_ksys_write+0x10/0x10 [ 359.883909][T26152] ? rcu_is_watching+0x15/0xb0 [ 359.883928][T26152] __x64_sys_sendmmsg+0xa0/0xc0 [ 359.883947][T26152] do_syscall_64+0xfa/0x3b0 [ 359.883971][T26152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.883992][T26152] ? clear_bhb_loop+0x60/0xb0 [ 359.884011][T26152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.884028][T26152] RIP: 0033:0x7fdb3678ebe9 [ 359.884045][T26152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.884061][T26152] RSP: 002b:00007fdb37631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.884080][T26152] RAX: ffffffffffffffda RBX: 00007fdb369b5fa0 RCX: 00007fdb3678ebe9 [ 359.884094][T26152] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 359.884107][T26152] RBP: 00007fdb37631090 R08: 0000000000000000 R09: 0000000000000000 [ 359.884126][T26152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.884138][T26152] R13: 00007fdb369b6038 R14: 00007fdb369b5fa0 R15: 00007ffd9275a568 [ 359.884159][T26152] [ 360.256928][T26149] vlan0: left promiscuous mode [ 360.286188][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.295332][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.304357][T25159] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.320127][T25159] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.338375][T25159] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.347279][T25159] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.356467][T25159] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.365620][T25159] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.428467][T26173] tipc: Enabled bearer , priority 0 [ 360.436252][T26173] syzkaller0: entered promiscuous mode [ 360.448512][T26173] syzkaller0: entered allmulticast mode [ 360.457394][T26177] rdma_rxe: rxe_newlink: failed to add bond0 [ 360.486314][T26180] FAULT_INJECTION: forcing a failure. [ 360.486314][T26180] name failslab, interval 1, probability 0, space 0, times 0 [ 360.519952][T26180] CPU: 0 UID: 0 PID: 26180 Comm: syz.3.7207 Not tainted syzkaller #0 PREEMPT(full) [ 360.519978][T26180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.519990][T26180] Call Trace: [ 360.519997][T26180] [ 360.520005][T26180] dump_stack_lvl+0x189/0x250 [ 360.520031][T26180] ? __pfx____ratelimit+0x10/0x10 [ 360.520054][T26180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.520074][T26180] ? __pfx__printk+0x10/0x10 [ 360.520097][T26180] ? fs_reclaim_acquire+0x7d/0x100 [ 360.520122][T26180] ? rcu_is_watching+0x15/0xb0 [ 360.520140][T26180] ? __pfx___might_resched+0x10/0x10 [ 360.520156][T26180] ? lock_acquire+0x5f/0x360 [ 360.520180][T26180] should_fail_ex+0x414/0x560 [ 360.520215][T26180] should_failslab+0xa8/0x100 [ 360.520240][T26180] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 360.520262][T26180] ? __alloc_skb+0x112/0x2d0 [ 360.520286][T26180] ? __pfx_netlink_unicast+0x10/0x10 [ 360.520316][T26180] __alloc_skb+0x112/0x2d0 [ 360.520342][T26180] netlink_sendmsg+0x5c6/0xb30 [ 360.520370][T26180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.520394][T26180] ? is_bpf_text_address+0x26/0x2b0 [ 360.520418][T26180] ? rcu_is_watching+0x15/0xb0 [ 360.520433][T26180] ? aa_sock_msg_perm+0xf1/0x1d0 [ 360.520451][T26180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.520469][T26180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.520493][T26180] __sock_sendmsg+0x21c/0x270 [ 360.520516][T26180] ____sys_sendmsg+0x52d/0x830 [ 360.520537][T26180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.520558][T26180] ? import_iovec+0x74/0xa0 [ 360.520580][T26180] ___sys_sendmsg+0x21f/0x2a0 [ 360.520598][T26180] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.520618][T26180] ? kstrtouint+0x6e/0xe0 [ 360.520653][T26180] ? rcu_is_watching+0x15/0xb0 [ 360.520670][T26180] ? lock_release+0x4b/0x3e0 [ 360.520693][T26180] ? __might_fault+0xcc/0x130 [ 360.520716][T26180] __sys_sendmmsg+0x227/0x430 [ 360.520737][T26180] ? __pfx___sys_sendmmsg+0x10/0x10 [ 360.520753][T26180] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 360.520789][T26180] ? ksys_write+0x22a/0x250 [ 360.520811][T26180] ? __pfx_ksys_write+0x10/0x10 [ 360.520835][T26180] __x64_sys_sendmmsg+0xa0/0xc0 [ 360.520854][T26180] do_syscall_64+0xfa/0x3b0 [ 360.520877][T26180] ? rcu_is_watching+0x15/0xb0 [ 360.520893][T26180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.520911][T26180] ? clear_bhb_loop+0x60/0xb0 [ 360.520930][T26180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.520948][T26180] RIP: 0033:0x7fbab198ebe9 [ 360.520964][T26180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.520980][T26180] RSP: 002b:00007fbab28e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.521001][T26180] RAX: ffffffffffffffda RBX: 00007fbab1bb5fa0 RCX: 00007fbab198ebe9 [ 360.521015][T26180] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 360.521027][T26180] RBP: 00007fbab28e1090 R08: 0000000000000000 R09: 0000000000000000 [ 360.521039][T26180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.521050][T26180] R13: 00007fbab1bb6038 R14: 00007fbab1bb5fa0 R15: 00007ffcad49c9b8 [ 360.521071][T26180] [ 360.846826][T26182] __nla_validate_parse: 35 callbacks suppressed [ 360.846846][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7208'. [ 360.903133][T26188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7209'. [ 360.950967][T26173] tipc: Resetting bearer [ 360.974743][T26170] tipc: Resetting bearer [ 361.005969][T26170] tipc: Disabling bearer [ 361.089970][T26197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7214'. [ 361.232771][T26228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7223'. [ 361.255731][T26230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7224'. [ 361.270710][T26232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7226'. [ 361.703953][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7235'. [ 361.838307][ T12] net_ratelimit: 26 callbacks suppressed [ 361.838328][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 361.858356][T26279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7238'. [ 361.901863][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.915214][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.926203][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.939448][T26283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7240'. [ 361.948985][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.958620][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.981403][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.990483][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 361.991337][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.012384][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.141434][T26304] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 362.294278][T26321] team0: Device wireguard0 is of different type [ 362.342720][T26329] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7259'. [ 362.513246][T26319] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 362.527254][T26340] FAULT_INJECTION: forcing a failure. [ 362.527254][T26340] name failslab, interval 1, probability 0, space 0, times 0 [ 362.542121][T26340] CPU: 0 UID: 0 PID: 26340 Comm: syz.0.7263 Not tainted syzkaller #0 PREEMPT(full) [ 362.542145][T26340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.542155][T26340] Call Trace: [ 362.542162][T26340] [ 362.542169][T26340] dump_stack_lvl+0x189/0x250 [ 362.542192][T26340] ? __pfx____ratelimit+0x10/0x10 [ 362.542215][T26340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.542232][T26340] ? __pfx__printk+0x10/0x10 [ 362.542252][T26340] ? __mutex_lock+0x335/0x1350 [ 362.542276][T26340] ? __pfx___might_resched+0x10/0x10 [ 362.542294][T26340] ? lock_acquire+0x5f/0x360 [ 362.542317][T26340] should_fail_ex+0x414/0x560 [ 362.542340][T26340] should_failslab+0xa8/0x100 [ 362.542363][T26340] __kmalloc_cache_noprof+0x70/0x3d0 [ 362.542383][T26340] ? tcf_chain_create+0xb0/0x310 [ 362.542401][T26340] tcf_chain_create+0xb0/0x310 [ 362.542417][T26340] __tcf_chain_get+0x111/0x3c0 [ 362.542438][T26340] tc_new_tfilter+0x753/0x15b0 [ 362.542455][T26340] ? is_bpf_text_address+0x26/0x2b0 [ 362.542485][T26340] ? __pfx_tc_new_tfilter+0x10/0x10 [ 362.542507][T26340] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 362.542531][T26340] ? rcu_is_watching+0x15/0xb0 [ 362.542548][T26340] ? lock_release+0x4b/0x3e0 [ 362.542568][T26340] ? bpf_lsm_capable+0x9/0x20 [ 362.542590][T26340] ? security_capable+0x7e/0x2e0 [ 362.542613][T26340] ? __pfx_tc_new_tfilter+0x10/0x10 [ 362.542629][T26340] rtnetlink_rcv_msg+0x7cc/0xb70 [ 362.542654][T26340] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 362.542676][T26340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.542700][T26340] ? __netlink_lookup+0xbd/0x810 [ 362.542714][T26340] ? rcu_is_watching+0x15/0xb0 [ 362.542732][T26340] ? rcu_is_watching+0x15/0xb0 [ 362.542752][T26340] netlink_rcv_skb+0x208/0x470 [ 362.542775][T26340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.542798][T26340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.542829][T26340] netlink_unicast+0x82c/0x9e0 [ 362.542854][T26340] ? __pfx_netlink_unicast+0x10/0x10 [ 362.542877][T26340] ? netlink_sendmsg+0x642/0xb30 [ 362.542899][T26340] ? skb_put+0x11b/0x210 [ 362.542926][T26340] netlink_sendmsg+0x805/0xb30 [ 362.542955][T26340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.542979][T26340] ? is_bpf_text_address+0x26/0x2b0 [ 362.543001][T26340] ? rcu_is_watching+0x15/0xb0 [ 362.543016][T26340] ? aa_sock_msg_perm+0xf1/0x1d0 [ 362.543033][T26340] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.543051][T26340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.543075][T26340] __sock_sendmsg+0x21c/0x270 [ 362.543097][T26340] ____sys_sendmsg+0x52d/0x830 [ 362.543118][T26340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.543140][T26340] ? import_iovec+0x74/0xa0 [ 362.543161][T26340] ___sys_sendmsg+0x21f/0x2a0 [ 362.543178][T26340] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.543197][T26340] ? kstrtouint+0x6e/0xe0 [ 362.543232][T26340] ? rcu_is_watching+0x15/0xb0 [ 362.543249][T26340] ? lock_release+0x4b/0x3e0 [ 362.543272][T26340] ? __might_fault+0xcc/0x130 [ 362.543295][T26340] __sys_sendmmsg+0x227/0x430 [ 362.543316][T26340] ? __pfx___sys_sendmmsg+0x10/0x10 [ 362.543333][T26340] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 362.543366][T26340] ? ksys_write+0x22a/0x250 [ 362.543388][T26340] ? __pfx_ksys_write+0x10/0x10 [ 362.543407][T26340] ? rcu_is_watching+0x15/0xb0 [ 362.543424][T26340] __x64_sys_sendmmsg+0xa0/0xc0 [ 362.543443][T26340] do_syscall_64+0xfa/0x3b0 [ 362.543467][T26340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.543485][T26340] ? clear_bhb_loop+0x60/0xb0 [ 362.543504][T26340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.543521][T26340] RIP: 0033:0x7fdb3678ebe9 [ 362.543537][T26340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.543551][T26340] RSP: 002b:00007fdb37631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.543570][T26340] RAX: ffffffffffffffda RBX: 00007fdb369b5fa0 RCX: 00007fdb3678ebe9 [ 362.543583][T26340] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 362.543595][T26340] RBP: 00007fdb37631090 R08: 0000000000000000 R09: 0000000000000000 [ 362.543607][T26340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.543618][T26340] R13: 00007fdb369b6038 R14: 00007fdb369b5fa0 R15: 00007ffd9275a568 [ 362.543638][T26340] [ 362.550117][T26341] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 362.643679][T26348] validate_nla: 4 callbacks suppressed [ 362.643695][T26348] netlink: 'syz.4.7268': attribute type 32 has an invalid length. [ 362.999089][T26348] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 363.130134][T26361] tipc: Enabled bearer , priority 0 [ 363.194929][T26361] syzkaller0: entered promiscuous mode [ 363.208403][T26361] syzkaller0: entered allmulticast mode [ 363.284532][T26382] netlink: 'syz.2.7280': attribute type 11 has an invalid length. [ 363.292497][T26382] netlink: 'syz.2.7280': attribute type 11 has an invalid length. [ 363.302432][T26361] tipc: Resetting bearer [ 363.312141][T26361] tipc: Disabling bearer [ 363.521293][T26405] delete_channel: no stack [ 363.977632][T26437] netlink: 'syz.1.7299': attribute type 9 has an invalid length. [ 364.093667][T26451] netlink: 'syz.4.7304': attribute type 1 has an invalid length. [ 364.284696][T26475] netlink: 'syz.3.7312': attribute type 11 has an invalid length. [ 364.292800][T26475] netlink: 'syz.3.7312': attribute type 11 has an invalid length. [ 364.338379][T26477] netlink: 'syz.3.7313': attribute type 10 has an invalid length. [ 364.411681][T26485] gtp1: entered promiscuous mode [ 364.433048][T26485] gtp1: entered allmulticast mode [ 365.251238][T26580] netlink: 'syz.2.7352': attribute type 27 has an invalid length. [ 365.522407][T26608] vlan4: entered allmulticast mode [ 365.530101][T26608] gretap0: entered allmulticast mode [ 365.856936][T26643] __nla_validate_parse: 28 callbacks suppressed [ 365.856955][T26643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7372'. [ 365.858894][T26647] netlink: 'syz.3.7374': attribute type 1 has an invalid length. [ 365.908458][ T97] block nbd0: Possible stuck request ffff888025157000: control (read@0,1024B). Runtime 90 seconds [ 365.919340][ T97] block nbd0: Possible stuck request ffff8880251571c0: control (read@1024,1024B). Runtime 90 seconds [ 365.930291][ T97] block nbd0: Possible stuck request ffff888025157380: control (read@2048,1024B). Runtime 90 seconds [ 365.941281][ T97] block nbd0: Possible stuck request ffff888025157540: control (read@3072,1024B). Runtime 90 seconds [ 366.031558][T26655] bridge15: entered promiscuous mode [ 366.037066][T26655] bridge15: entered allmulticast mode [ 366.159263][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7381'. [ 366.217250][T26679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7384'. [ 366.300797][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 366.515199][T26708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7394'. [ 366.605608][T26718] netlink: 'syz.3.7399': attribute type 1 has an invalid length. [ 366.662679][T26718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7399'. [ 366.662907][T26724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7401'. [ 366.678354][T26718] bond10: (slave gretap3): making interface the new active one [ 366.689293][T26718] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 366.760972][T26731] netlink: 'syz.3.7403': attribute type 1 has an invalid length. [ 366.762735][T26732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7404'. [ 366.781309][T26729] netlink: 'syz.3.7403': attribute type 1 has an invalid length. [ 366.806145][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7402'. [ 366.815662][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7402'. [ 366.858235][T26729] veth23: entered promiscuous mode [ 366.865227][T26729] bond11: (slave veth23): Enslaving as a backup interface with a down link [ 366.875582][T26729] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.888325][ T13] net_ratelimit: 79 callbacks suppressed [ 366.888345][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 366.949867][T26740] tipc: Enabled bearer , priority 0 [ 366.961982][T26740] tipc: Resetting bearer [ 366.977426][T26738] tipc: Disabling bearer [ 367.020626][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.140226][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.176423][T26769] IPVS: Unknown mcast interface: batadv_slave_1 [ 367.258562][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.377354][T26791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.391261][ T2972] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.435414][T26792] lo speed is unknown, defaulting to 1000 [ 367.508687][ T2972] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.524886][T26800] netlink: 'syz.1.7429': attribute type 11 has an invalid length. [ 367.559568][T26792] hsr0 speed is unknown, defaulting to 1000 [ 367.566466][T26792] lo speed is unknown, defaulting to 1000 [ 367.618213][ T2972] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.629505][T26802] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.749058][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.762187][T26816] netlink: 'syz.1.7433': attribute type 1 has an invalid length. [ 367.870965][T26831] xfrm1: entered promiscuous mode [ 367.876120][T26831] xfrm1: entered allmulticast mode [ 367.905034][T26832] netlink: 'syz.1.7437': attribute type 1 has an invalid length. [ 367.913052][T26832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.928250][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 368.284404][T26861] 8021q: VLANs not supported on ip_vti0 [ 368.791250][T26882] syzkaller1: entered promiscuous mode [ 368.796758][T26882] syzkaller1: entered allmulticast mode [ 368.923302][T26907] netlink: 'syz.2.7456': attribute type 1 has an invalid length. [ 368.933115][T26907] netlink: 'syz.2.7456': attribute type 1 has an invalid length. [ 368.958148][T26907] netlink: 'syz.2.7456': attribute type 1 has an invalid length. [ 368.965995][T26907] netlink: 'syz.2.7456': attribute type 2 has an invalid length. [ 369.047523][T26915] veth0: entered promiscuous mode [ 369.099294][T26921] FAULT_INJECTION: forcing a failure. [ 369.099294][T26921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.115815][ T97] block nbd1: Possible stuck request ffff88802518e000: control (read@0,1024B). Runtime 90 seconds [ 369.117818][T26921] CPU: 0 UID: 0 PID: 26921 Comm: syz.1.7464 Not tainted syzkaller #0 PREEMPT(full) [ 369.117843][T26921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.117857][T26921] Call Trace: [ 369.117865][T26921] [ 369.117873][T26921] dump_stack_lvl+0x189/0x250 [ 369.117899][T26921] ? __pfx____ratelimit+0x10/0x10 [ 369.117922][T26921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.117942][T26921] ? __pfx__printk+0x10/0x10 [ 369.117962][T26921] ? __might_fault+0xb0/0x130 [ 369.117988][T26921] ? rcu_is_watching+0x15/0xb0 [ 369.118006][T26921] should_fail_ex+0x414/0x560 [ 369.118031][T26921] _copy_from_user+0x2d/0xb0 [ 369.118055][T26921] do_sock_getsockopt+0x17d/0x450 [ 369.118074][T26921] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 369.118090][T26921] ? rcu_needs_cpu+0xa0/0xb0 [ 369.118106][T26921] ? __fget_files+0x3a0/0x420 [ 369.118130][T26921] ? __fget_files+0x2a/0x420 [ 369.118155][T26921] __x64_sys_getsockopt+0x1a5/0x250 [ 369.118172][T26921] ? rcu_needs_cpu+0xa0/0xb0 [ 369.118188][T26921] ? rcu_needs_cpu+0xa0/0xb0 [ 369.118206][T26921] do_syscall_64+0xfa/0x3b0 [ 369.118230][T26921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.118247][T26921] ? clear_bhb_loop+0x60/0xb0 [ 369.118266][T26921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.118286][T26921] RIP: 0033:0x7f7877b8ebe9 [ 369.118301][T26921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.118317][T26921] RSP: 002b:00007f7878938038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 369.118337][T26921] RAX: ffffffffffffffda RBX: 00007f7877db5fa0 RCX: 00007f7877b8ebe9 [ 369.118349][T26921] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 369.118360][T26921] RBP: 00007f7878938090 R08: 0000200000000180 R09: 0000000000000000 [ 369.118372][T26921] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 369.118403][T26921] R13: 00007f7877db6038 R14: 00007f7877db5fa0 R15: 00007ffc7a8845b8 [ 369.118423][T26921] [ 369.159931][T26914] veth0: left promiscuous mode [ 369.162601][ T97] block nbd1: Possible stuck request ffff88802518e1c0: control (read@1024,1024B). Runtime 90 seconds [ 369.347593][ T97] block nbd1: Possible stuck request ffff88802518e380: control (read@2048,1024B). Runtime 90 seconds [ 369.358829][ T97] block nbd1: Possible stuck request ffff88802518e540: control (read@3072,1024B). Runtime 90 seconds [ 369.392868][T26941] netlink: 'syz.2.7472': attribute type 1 has an invalid length. [ 369.492782][T26953] netlink: 'syz.3.7474': attribute type 33 has an invalid length. [ 369.500916][T26952] netlink: 'syz.3.7474': attribute type 33 has an invalid length. [ 369.511731][T26953] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 369.531296][T26952] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 369.683540][T26969] tipc: Enabling of bearer rejected, already enabled [ 369.689955][T26971] netlink: 'syz.3.7482': attribute type 1 has an invalid length. [ 369.746647][T26971] 8021q: adding VLAN 0 to HW filter on device bond12 [ 369.969140][T27005] FAULT_INJECTION: forcing a failure. [ 369.969140][T27005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.005752][T27005] CPU: 1 UID: 0 PID: 27005 Comm: syz.4.7494 Not tainted syzkaller #0 PREEMPT(full) [ 370.005776][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.005786][T27005] Call Trace: [ 370.005793][T27005] [ 370.005799][T27005] dump_stack_lvl+0x189/0x250 [ 370.005823][T27005] ? __pfx____ratelimit+0x10/0x10 [ 370.005845][T27005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.005864][T27005] ? __pfx__printk+0x10/0x10 [ 370.005888][T27005] ? rcu_is_watching+0x15/0xb0 [ 370.005907][T27005] should_fail_ex+0x414/0x560 [ 370.005932][T27005] _copy_to_user+0x31/0xb0 [ 370.005953][T27005] simple_read_from_buffer+0xe1/0x170 [ 370.005979][T27005] proc_fail_nth_read+0x1b3/0x220 [ 370.006000][T27005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.006021][T27005] ? rw_verify_area+0x2a6/0x4d0 [ 370.006042][T27005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.006061][T27005] vfs_read+0x200/0xa30 [ 370.006082][T27005] ? fdget_pos+0x247/0x320 [ 370.006099][T27005] ? __pfx___mutex_lock+0x10/0x10 [ 370.006123][T27005] ? __pfx_vfs_read+0x10/0x10 [ 370.006148][T27005] ? __fget_files+0x3a0/0x420 [ 370.006171][T27005] ? __fget_files+0x2a/0x420 [ 370.006199][T27005] ksys_read+0x145/0x250 [ 370.006221][T27005] ? __pfx_ksys_read+0x10/0x10 [ 370.006241][T27005] ? rcu_is_watching+0x15/0xb0 [ 370.006261][T27005] ? rcu_is_watching+0x15/0xb0 [ 370.006280][T27005] do_syscall_64+0xfa/0x3b0 [ 370.006305][T27005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.006323][T27005] ? clear_bhb_loop+0x60/0xb0 [ 370.006352][T27005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.006370][T27005] RIP: 0033:0x7fb79c18d5fc [ 370.006386][T27005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.006403][T27005] RSP: 002b:00007fb79d095030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.006424][T27005] RAX: ffffffffffffffda RBX: 00007fb79c3b5fa0 RCX: 00007fb79c18d5fc [ 370.006439][T27005] RDX: 000000000000000f RSI: 00007fb79d0950a0 RDI: 0000000000000004 [ 370.006451][T27005] RBP: 00007fb79d095090 R08: 0000000000000000 R09: 0000000000000000 [ 370.006464][T27005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.006475][T27005] R13: 00007fb79c3b6038 R14: 00007fb79c3b5fa0 R15: 00007ffd2e0f1528 [ 370.006497][T27005] [ 370.482150][T27045] tipc: Enabling of bearer rejected, already enabled [ 370.592654][T27044] syzkaller1: entered promiscuous mode [ 370.598370][T27044] syzkaller1: entered allmulticast mode [ 370.699566][T27071] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 370.720256][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.758289][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.775858][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.794955][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.858938][T27083] netlink: 'syz.3.7519': attribute type 11 has an invalid length. [ 371.031501][ T11] block nbd2: Possible stuck request ffff888025237000: control (read@0,1024B). Runtime 90 seconds [ 371.042781][ T11] block nbd2: Possible stuck request ffff8880252371c0: control (read@1024,1024B). Runtime 90 seconds [ 371.054654][ T11] block nbd2: Possible stuck request ffff888025237380: control (read@2048,1024B). Runtime 90 seconds [ 371.065895][ T11] block nbd2: Possible stuck request ffff888025237540: control (read@3072,1024B). Runtime 90 seconds [ 371.093087][T27089] __nla_validate_parse: 30 callbacks suppressed [ 371.093108][T27089] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7521'. [ 371.126172][T27117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7527'. [ 371.231251][T27130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7531'. [ 371.257936][T27132] veth29: entered promiscuous mode [ 371.265045][T27132] bond13: (slave veth29): Enslaving as a backup interface with a down link [ 371.277600][T27129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7532'. [ 371.290877][T27129] 8021q: adding VLAN 0 to HW filter on device bond13 [ 371.291704][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7533'. [ 371.505758][T27153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 371.644810][T27164] tipc: Enabled bearer , priority 0 [ 371.689654][T27164] syzkaller0: entered promiscuous mode [ 371.695200][T27164] syzkaller0: entered allmulticast mode [ 371.702531][T27164] tipc: Resetting bearer [ 371.810829][T27163] tipc: Resetting bearer [ 371.873807][T27163] tipc: Disabling bearer [ 371.877089][T27184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7549'. [ 371.890619][T27184] geneve0: left allmulticast mode [ 371.896430][T27182] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7548'. [ 371.908958][T27182] gretap0: entered promiscuous mode [ 371.914750][T15822] net_ratelimit: 32 callbacks suppressed [ 371.914767][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 371.947098][T27182] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7548'. [ 371.958288][T27182] 0ªî{X¹¦: renamed from gretap0 [ 371.987012][T27182] 0ªî{X¹¦: left promiscuous mode [ 372.004098][T27182] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 372.048281][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 372.158286][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 372.183499][T27212] tipc: Enabling of bearer rejected, failed to enable media [ 372.282539][T27219] lo speed is unknown, defaulting to 1000 [ 372.292471][T27222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7562'. [ 372.302308][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 372.405765][T27222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.479591][T25159] bond3: (slave macvlan2): failed to get link speed/duplex [ 372.608509][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 372.728578][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 372.867917][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 372.952964][ T97] block nbd3: Possible stuck request ffff888025267000: control (read@0,1024B). Runtime 90 seconds [ 372.963896][ T97] block nbd3: Possible stuck request ffff8880252671c0: control (read@1024,1024B). Runtime 90 seconds [ 372.976313][ T97] block nbd3: Possible stuck request ffff888025267380: control (read@2048,1024B). Runtime 90 seconds [ 372.987637][ T97] block nbd3: Possible stuck request ffff888025267540: control (read@3072,1024B). Runtime 90 seconds [ 373.000719][T27219] hsr0 speed is unknown, defaulting to 1000 [ 373.029522][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 373.108968][T27219] lo speed is unknown, defaulting to 1000 [ 373.595940][ T97] block nbd4: Possible stuck request ffff8880252ce000: control (read@0,1024B). Runtime 90 seconds [ 373.610050][ T97] block nbd4: Possible stuck request ffff8880252ce1c0: control (read@1024,1024B). Runtime 90 seconds [ 373.621247][ T97] block nbd4: Possible stuck request ffff8880252ce380: control (read@2048,1024B). Runtime 90 seconds [ 373.632456][ T97] block nbd4: Possible stuck request ffff8880252ce540: control (read@3072,1024B). Runtime 90 seconds [ 373.893662][T27297] FAULT_INJECTION: forcing a failure. [ 373.893662][T27297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.961363][T27297] CPU: 1 UID: 0 PID: 27297 Comm: syz.4.7588 Not tainted syzkaller #0 PREEMPT(full) [ 373.961389][T27297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.961400][T27297] Call Trace: [ 373.961407][T27297] [ 373.961415][T27297] dump_stack_lvl+0x189/0x250 [ 373.961441][T27297] ? __pfx____ratelimit+0x10/0x10 [ 373.961464][T27297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.961484][T27297] ? __pfx__printk+0x10/0x10 [ 373.961506][T27297] ? __might_fault+0xb0/0x130 [ 373.961533][T27297] ? rcu_is_watching+0x15/0xb0 [ 373.961552][T27297] should_fail_ex+0x414/0x560 [ 373.961576][T27297] _copy_from_iter+0x1db/0x16f0 [ 373.961595][T27297] ? rcu_is_watching+0x15/0xb0 [ 373.961613][T27297] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 373.961637][T27297] ? __pfx__copy_from_iter+0x10/0x10 [ 373.961655][T27297] ? __build_skb_around+0x257/0x3e0 [ 373.961681][T27297] ? netlink_sendmsg+0x642/0xb30 [ 373.961704][T27297] ? skb_put+0x11b/0x210 [ 373.961721][T27297] netlink_sendmsg+0x6b2/0xb30 [ 373.961749][T27297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.961774][T27297] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.961792][T27297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.961811][T27297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.961835][T27297] __sock_sendmsg+0x21c/0x270 [ 373.961858][T27297] ____sys_sendmsg+0x505/0x830 [ 373.961878][T27297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.961900][T27297] ? import_iovec+0x74/0xa0 [ 373.961921][T27297] ___sys_sendmsg+0x21f/0x2a0 [ 373.961939][T27297] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.961973][T27297] ? __fget_files+0x2a/0x420 [ 373.961997][T27297] ? __fget_files+0x3a0/0x420 [ 373.962025][T27297] __x64_sys_sendmsg+0x19b/0x260 [ 373.962044][T27297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.962068][T27297] ? rcu_is_watching+0x15/0xb0 [ 373.962092][T27297] ? trace_sys_enter+0x25/0x100 [ 373.962119][T27297] do_syscall_64+0xfa/0x3b0 [ 373.962144][T27297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.962161][T27297] ? clear_bhb_loop+0x60/0xb0 [ 373.962180][T27297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.962197][T27297] RIP: 0033:0x7fb79c18ebe9 [ 373.962212][T27297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.962229][T27297] RSP: 002b:00007fb79d095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.962248][T27297] RAX: ffffffffffffffda RBX: 00007fb79c3b5fa0 RCX: 00007fb79c18ebe9 [ 373.962261][T27297] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 373.962273][T27297] RBP: 00007fb79d095090 R08: 0000000000000000 R09: 0000000000000000 [ 373.962284][T27297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.962295][T27297] R13: 00007fb79c3b6038 R14: 00007fb79c3b5fa0 R15: 00007ffd2e0f1528 [ 373.962316][T27297] [ 374.811220][T27315] validate_nla: 7 callbacks suppressed [ 374.811237][T27315] netlink: 'syz.2.7596': attribute type 21 has an invalid length. [ 374.909024][T27315] netlink: 'syz.2.7596': attribute type 21 has an invalid length. [ 375.287632][T27344] bridge15: entered promiscuous mode [ 375.306175][T27344] bridge15: entered allmulticast mode [ 375.530310][T27366] FAULT_INJECTION: forcing a failure. [ 375.530310][T27366] name failslab, interval 1, probability 0, space 0, times 0 [ 375.552726][T27368] wg2: entered promiscuous mode [ 375.557905][T27368] wg2: entered allmulticast mode [ 375.581565][T27366] CPU: 1 UID: 0 PID: 27366 Comm: syz.3.7614 Not tainted syzkaller #0 PREEMPT(full) [ 375.581592][T27366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.581604][T27366] Call Trace: [ 375.581612][T27366] [ 375.581620][T27366] dump_stack_lvl+0x189/0x250 [ 375.581646][T27366] ? __pfx____ratelimit+0x10/0x10 [ 375.581670][T27366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.581691][T27366] ? __pfx__printk+0x10/0x10 [ 375.581715][T27366] ? fs_reclaim_acquire+0x7d/0x100 [ 375.581740][T27366] ? rcu_is_watching+0x15/0xb0 [ 375.581758][T27366] ? __pfx___might_resched+0x10/0x10 [ 375.581774][T27366] ? lock_acquire+0x5f/0x360 [ 375.581799][T27366] should_fail_ex+0x414/0x560 [ 375.581824][T27366] should_failslab+0xa8/0x100 [ 375.581850][T27366] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 375.581874][T27366] ? xfrm_add_sa+0x1eb9/0x4070 [ 375.581897][T27366] kmemdup_noprof+0x2b/0x70 [ 375.581916][T27366] xfrm_add_sa+0x1eb9/0x4070 [ 375.581940][T27366] ? __pfx_xfrm_add_sa+0x10/0x10 [ 375.581958][T27366] ? apparmor_capable+0x137/0x1b0 [ 375.581980][T27366] ? __nla_parse+0x40/0x60 [ 375.582006][T27366] xfrm_user_rcv_msg+0x7a3/0xab0 [ 375.582032][T27366] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 375.582069][T27366] ? __pfx___mutex_trylock_common+0x10/0x10 [ 375.582089][T27366] ? kasan_save_track+0x4f/0x80 [ 375.582111][T27366] ? rcu_is_watching+0x15/0xb0 [ 375.582128][T27366] ? trace_contention_end+0x39/0x120 [ 375.582148][T27366] ? __mutex_lock+0x335/0x1350 [ 375.582175][T27366] netlink_rcv_skb+0x208/0x470 [ 375.582200][T27366] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 375.582227][T27366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.582253][T27366] ? lock_release+0x4b/0x3e0 [ 375.582272][T27366] ? net_generic+0x1e/0x240 [ 375.582288][T27366] ? net_generic+0x1e/0x240 [ 375.582304][T27366] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.582325][T27366] xfrm_netlink_rcv+0x79/0x90 [ 375.582342][T27366] netlink_unicast+0x82c/0x9e0 [ 375.582363][T27366] ? __pfx_netlink_unicast+0x10/0x10 [ 375.582381][T27366] ? netlink_sendmsg+0x642/0xb30 [ 375.582402][T27366] ? skb_put+0x11b/0x210 [ 375.582417][T27366] netlink_sendmsg+0x805/0xb30 [ 375.582444][T27366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.582466][T27366] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.582483][T27366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.582500][T27366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.582521][T27366] __sock_sendmsg+0x21c/0x270 [ 375.582542][T27366] ____sys_sendmsg+0x505/0x830 [ 375.582560][T27366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.582580][T27366] ? import_iovec+0x74/0xa0 [ 375.582598][T27366] ___sys_sendmsg+0x21f/0x2a0 [ 375.582615][T27366] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.582645][T27366] ? __fget_files+0x2a/0x420 [ 375.582667][T27366] ? __fget_files+0x3a0/0x420 [ 375.582694][T27366] __x64_sys_sendmsg+0x19b/0x260 [ 375.582712][T27366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.582733][T27366] ? __pfx_ksys_write+0x10/0x10 [ 375.582751][T27366] ? rcu_is_watching+0x15/0xb0 [ 375.582767][T27366] ? rcu_is_watching+0x15/0xb0 [ 375.582780][T27366] do_syscall_64+0xfa/0x3b0 [ 375.582801][T27366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.582815][T27366] ? clear_bhb_loop+0x60/0xb0 [ 375.582829][T27366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.582843][T27366] RIP: 0033:0x7fbab198ebe9 [ 375.582856][T27366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.582869][T27366] RSP: 002b:00007fbab28e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.582885][T27366] RAX: ffffffffffffffda RBX: 00007fbab1bb5fa0 RCX: 00007fbab198ebe9 [ 375.582896][T27366] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 375.582905][T27366] RBP: 00007fbab28e1090 R08: 0000000000000000 R09: 0000000000000000 [ 375.582914][T27366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.582923][T27366] R13: 00007fbab1bb6038 R14: 00007fbab1bb5fa0 R15: 00007ffcad49c9b8 [ 375.582939][T27366] [ 376.025182][T27379] netlink: 'syz.2.7618': attribute type 1 has an invalid length. [ 376.068784][T27383] netlink: 'syz.3.7619': attribute type 10 has an invalid length. [ 376.135625][T27384] bond12: (slave bridge16): making interface the new active one [ 376.145346][T27384] bond12: (slave bridge16): Enslaving as an active interface with an up link [ 376.171874][T27392] __nla_validate_parse: 13 callbacks suppressed [ 376.171904][T27392] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7623'. [ 376.238473][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7624'. [ 376.321472][T27408] FAULT_INJECTION: forcing a failure. [ 376.321472][T27408] name failslab, interval 1, probability 0, space 0, times 0 [ 376.365343][T27408] CPU: 1 UID: 0 PID: 27408 Comm: syz.2.7629 Not tainted syzkaller #0 PREEMPT(full) [ 376.365370][T27408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.365381][T27408] Call Trace: [ 376.365389][T27408] [ 376.365397][T27408] dump_stack_lvl+0x189/0x250 [ 376.365423][T27408] ? __pfx____ratelimit+0x10/0x10 [ 376.365446][T27408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.365466][T27408] ? __pfx__printk+0x10/0x10 [ 376.365489][T27408] ? fs_reclaim_acquire+0x7d/0x100 [ 376.365514][T27408] ? rcu_is_watching+0x15/0xb0 [ 376.365531][T27408] ? __pfx___might_resched+0x10/0x10 [ 376.365547][T27408] ? lock_acquire+0x5f/0x360 [ 376.365572][T27408] should_fail_ex+0x414/0x560 [ 376.365596][T27408] should_failslab+0xa8/0x100 [ 376.365621][T27408] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 376.365644][T27408] ? xfrm_add_sa+0x1eb9/0x4070 [ 376.365667][T27408] kmemdup_noprof+0x2b/0x70 [ 376.365686][T27408] xfrm_add_sa+0x1eb9/0x4070 [ 376.365711][T27408] ? __pfx_xfrm_add_sa+0x10/0x10 [ 376.365728][T27408] ? apparmor_capable+0x137/0x1b0 [ 376.365751][T27408] ? __nla_parse+0x40/0x60 [ 376.365776][T27408] xfrm_user_rcv_msg+0x7a3/0xab0 [ 376.365798][T27408] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 376.365834][T27408] ? __pfx___mutex_trylock_common+0x10/0x10 [ 376.365855][T27408] ? rcu_is_watching+0x15/0xb0 [ 376.365872][T27408] ? trace_contention_end+0x39/0x120 [ 376.365891][T27408] ? __mutex_lock+0x335/0x1350 [ 376.365918][T27408] netlink_rcv_skb+0x208/0x470 [ 376.366004][T27408] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 376.366025][T27408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.366052][T27408] ? lock_release+0x4b/0x3e0 [ 376.366077][T27408] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.366101][T27408] xfrm_netlink_rcv+0x79/0x90 [ 376.366121][T27408] netlink_unicast+0x82c/0x9e0 [ 376.366146][T27408] ? __pfx_netlink_unicast+0x10/0x10 [ 376.366168][T27408] ? netlink_sendmsg+0x642/0xb30 [ 376.366191][T27408] ? skb_put+0x11b/0x210 [ 376.366208][T27408] netlink_sendmsg+0x805/0xb30 [ 376.366236][T27408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.366262][T27408] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.366278][T27408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.366298][T27408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.366323][T27408] __sock_sendmsg+0x21c/0x270 [ 376.366346][T27408] ____sys_sendmsg+0x505/0x830 [ 376.366367][T27408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.366389][T27408] ? import_iovec+0x74/0xa0 [ 376.366410][T27408] ___sys_sendmsg+0x21f/0x2a0 [ 376.366428][T27408] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.366461][T27408] ? __fget_files+0x2a/0x420 [ 376.366485][T27408] ? __fget_files+0x3a0/0x420 [ 376.366513][T27408] __x64_sys_sendmsg+0x19b/0x260 [ 376.366533][T27408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.366556][T27408] ? __pfx_ksys_write+0x10/0x10 [ 376.366576][T27408] ? rcu_is_watching+0x15/0xb0 [ 376.366595][T27408] ? rcu_is_watching+0x15/0xb0 [ 376.366614][T27408] do_syscall_64+0xfa/0x3b0 [ 376.366638][T27408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.366656][T27408] ? clear_bhb_loop+0x60/0xb0 [ 376.366675][T27408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.366693][T27408] RIP: 0033:0x7fe2f6d8ebe9 [ 376.366710][T27408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.366727][T27408] RSP: 002b:00007fe2f7ce3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.366747][T27408] RAX: ffffffffffffffda RBX: 00007fe2f6fb5fa0 RCX: 00007fe2f6d8ebe9 [ 376.366762][T27408] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 376.366775][T27408] RBP: 00007fe2f7ce3090 R08: 0000000000000000 R09: 0000000000000000 [ 376.366787][T27408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.366798][T27408] R13: 00007fe2f6fb6038 R14: 00007fe2f6fb5fa0 R15: 00007ffc834f5fe8 [ 376.366819][T27408] [ 376.857537][T27428] : renamed from hsr0 [ 376.901790][T27429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7634'. [ 376.926584][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7634'. [ 376.936035][T27429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7634'. [ 376.946440][T27429] netlink: 'syz.0.7634': attribute type 24 has an invalid length. [ 376.999238][ T13] net_ratelimit: 23 callbacks suppressed [ 376.999256][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 377.035489][T27442] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7640'. [ 377.063233][T27444] netlink: 'syz.4.7642': attribute type 10 has an invalid length. [ 377.069100][T27435] nbd5: detected capacity change from 0 to 549764202496 [ 377.073368][T27444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7642'. [ 377.111289][ T5184] block nbd5: Receive control failed (result -104) [ 377.118406][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 377.122752][T27448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7644'. [ 377.137936][T27450] FAULT_INJECTION: forcing a failure. [ 377.137936][T27450] name failslab, interval 1, probability 0, space 0, times 0 [ 377.171915][T27450] CPU: 1 UID: 0 PID: 27450 Comm: syz.4.7645 Not tainted syzkaller #0 PREEMPT(full) [ 377.171942][T27450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.171954][T27450] Call Trace: [ 377.171961][T27450] [ 377.171969][T27450] dump_stack_lvl+0x189/0x250 [ 377.171996][T27450] ? __pfx____ratelimit+0x10/0x10 [ 377.172018][T27450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.172037][T27450] ? __pfx__printk+0x10/0x10 [ 377.172058][T27450] ? __mutex_lock+0x335/0x1350 [ 377.172091][T27450] ? __pfx___might_resched+0x10/0x10 [ 377.172109][T27450] ? lock_acquire+0x5f/0x360 [ 377.172134][T27450] should_fail_ex+0x414/0x560 [ 377.172159][T27450] should_failslab+0xa8/0x100 [ 377.172184][T27450] __kmalloc_node_noprof+0xd1/0x4e0 [ 377.172210][T27450] ? __pfx___up_read+0x10/0x10 [ 377.172228][T27450] ? crypto_create_tfm_node+0x83/0x3f0 [ 377.172254][T27450] crypto_create_tfm_node+0x83/0x3f0 [ 377.172280][T27450] crypto_spawn_tfm2+0x5c/0x90 [ 377.172299][T27450] aead_init_geniv+0x169/0x240 [ 377.172323][T27450] crypto_create_tfm_node+0x189/0x3f0 [ 377.172350][T27450] crypto_alloc_tfm_node+0x172/0x3f0 [ 377.172377][T27450] esp_init_state+0x36b/0x1140 [ 377.172395][T27450] ? __sock_sendmsg+0x21c/0x270 [ 377.172416][T27450] ? ____sys_sendmsg+0x505/0x830 [ 377.172433][T27450] ? ___sys_sendmsg+0x21f/0x2a0 [ 377.172450][T27450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.172473][T27450] ? __pfx_esp_init_state+0x10/0x10 [ 377.172504][T27450] ? rcu_is_watching+0x15/0xb0 [ 377.172523][T27450] ? rcu_is_watching+0x15/0xb0 [ 377.172543][T27450] __xfrm_init_state+0xa76/0x13f0 [ 377.172564][T27450] ? __xfrm_init_state+0x7ef/0x13f0 [ 377.172586][T27450] xfrm_add_sa+0x2f5b/0x4070 [ 377.172611][T27450] ? __pfx_xfrm_add_sa+0x10/0x10 [ 377.172630][T27450] ? apparmor_capable+0x137/0x1b0 [ 377.172652][T27450] ? __nla_parse+0x40/0x60 [ 377.172677][T27450] xfrm_user_rcv_msg+0x7a3/0xab0 [ 377.172700][T27450] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 377.172736][T27450] ? __pfx___mutex_trylock_common+0x10/0x10 [ 377.172755][T27450] ? kasan_save_track+0x4f/0x80 [ 377.172777][T27450] ? rcu_is_watching+0x15/0xb0 [ 377.172794][T27450] ? trace_contention_end+0x39/0x120 [ 377.172813][T27450] ? __mutex_lock+0x335/0x1350 [ 377.172839][T27450] netlink_rcv_skb+0x208/0x470 [ 377.172864][T27450] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 377.172884][T27450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.172913][T27450] ? lock_release+0x4b/0x3e0 [ 377.172935][T27450] ? net_generic+0x1e/0x240 [ 377.172953][T27450] ? net_generic+0x1e/0x240 [ 377.172973][T27450] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.172997][T27450] xfrm_netlink_rcv+0x79/0x90 [ 377.173017][T27450] netlink_unicast+0x82c/0x9e0 [ 377.173042][T27450] ? __pfx_netlink_unicast+0x10/0x10 [ 377.173065][T27450] ? netlink_sendmsg+0x642/0xb30 [ 377.173093][T27450] ? skb_put+0x11b/0x210 [ 377.173111][T27450] netlink_sendmsg+0x805/0xb30 [ 377.173140][T27450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.173166][T27450] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.173183][T27450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.173203][T27450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.173227][T27450] __sock_sendmsg+0x21c/0x270 [ 377.173250][T27450] ____sys_sendmsg+0x505/0x830 [ 377.173271][T27450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.173293][T27450] ? import_iovec+0x74/0xa0 [ 377.173315][T27450] ___sys_sendmsg+0x21f/0x2a0 [ 377.173333][T27450] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.173363][T27450] ? __fget_files+0x2a/0x420 [ 377.173384][T27450] ? __fget_files+0x3a0/0x420 [ 377.173409][T27450] __x64_sys_sendmsg+0x19b/0x260 [ 377.173426][T27450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.173447][T27450] ? __pfx_ksys_write+0x10/0x10 [ 377.173465][T27450] ? rcu_is_watching+0x15/0xb0 [ 377.173482][T27450] ? rcu_is_watching+0x15/0xb0 [ 377.173500][T27450] do_syscall_64+0xfa/0x3b0 [ 377.173526][T27450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.173542][T27450] ? clear_bhb_loop+0x60/0xb0 [ 377.173560][T27450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.173577][T27450] RIP: 0033:0x7fb79c18ebe9 [ 377.173592][T27450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.173606][T27450] RSP: 002b:00007fb79d095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.173624][T27450] RAX: ffffffffffffffda RBX: 00007fb79c3b5fa0 RCX: 00007fb79c18ebe9 [ 377.173637][T27450] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 377.173648][T27450] RBP: 00007fb79d095090 R08: 0000000000000000 R09: 0000000000000000 [ 377.173659][T27450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.173670][T27450] R13: 00007fb79c3b6038 R14: 00007fb79c3b5fa0 R15: 00007ffd2e0f1528 [ 377.173689][T27450] [ 377.642586][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 377.691649][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7646'. [ 377.758471][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 377.840100][T27479] netlink: 'syz.3.7655': attribute type 10 has an invalid length. [ 377.852906][T27479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7655'. [ 377.868527][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 377.979869][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 378.099053][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 378.173159][T27513] FAULT_INJECTION: forcing a failure. [ 378.173159][T27513] name failslab, interval 1, probability 0, space 0, times 0 [ 378.204507][T27513] CPU: 1 UID: 0 PID: 27513 Comm: syz.3.7667 Not tainted syzkaller #0 PREEMPT(full) [ 378.204533][T27513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.204544][T27513] Call Trace: [ 378.204552][T27513] [ 378.204560][T27513] dump_stack_lvl+0x189/0x250 [ 378.204584][T27513] ? __pfx____ratelimit+0x10/0x10 [ 378.204608][T27513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.204627][T27513] ? __pfx__printk+0x10/0x10 [ 378.204650][T27513] ? fs_reclaim_acquire+0x7d/0x100 [ 378.204673][T27513] ? rcu_is_watching+0x15/0xb0 [ 378.204689][T27513] ? __pfx___might_resched+0x10/0x10 [ 378.204704][T27513] ? lock_acquire+0x5f/0x360 [ 378.204726][T27513] should_fail_ex+0x414/0x560 [ 378.204747][T27513] should_failslab+0xa8/0x100 [ 378.204769][T27513] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 378.204791][T27513] ? __alloc_skb+0x112/0x2d0 [ 378.204816][T27513] __alloc_skb+0x112/0x2d0 [ 378.204851][T27513] netlink_sendmsg+0x5c6/0xb30 [ 378.204880][T27513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.204906][T27513] ? aa_sock_msg_perm+0xf1/0x1d0 [ 378.204924][T27513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.204943][T27513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.204967][T27513] __sock_sendmsg+0x21c/0x270 [ 378.204990][T27513] ____sys_sendmsg+0x505/0x830 [ 378.205010][T27513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.205032][T27513] ? import_iovec+0x74/0xa0 [ 378.205053][T27513] ___sys_sendmsg+0x21f/0x2a0 [ 378.205072][T27513] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.205104][T27513] ? __fget_files+0x2a/0x420 [ 378.205128][T27513] ? __fget_files+0x3a0/0x420 [ 378.205155][T27513] __x64_sys_sendmsg+0x19b/0x260 [ 378.205173][T27513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.205193][T27513] ? __pfx_ksys_write+0x10/0x10 [ 378.205212][T27513] ? rcu_is_watching+0x15/0xb0 [ 378.205229][T27513] ? rcu_is_watching+0x15/0xb0 [ 378.205246][T27513] do_syscall_64+0xfa/0x3b0 [ 378.205269][T27513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.205286][T27513] ? clear_bhb_loop+0x60/0xb0 [ 378.205304][T27513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.205321][T27513] RIP: 0033:0x7fbab198ebe9 [ 378.205336][T27513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.205352][T27513] RSP: 002b:00007fbab28e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.205371][T27513] RAX: ffffffffffffffda RBX: 00007fbab1bb5fa0 RCX: 00007fbab198ebe9 [ 378.205385][T27513] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 378.205396][T27513] RBP: 00007fbab28e1090 R08: 0000000000000000 R09: 0000000000000000 [ 378.205407][T27513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.205417][T27513] R13: 00007fbab1bb6038 R14: 00007fbab1bb5fa0 R15: 00007ffcad49c9b8 [ 378.205435][T27513] [ 378.483715][ T2986] bond3: (slave macvlan2): failed to get link speed/duplex [ 378.524480][T27521] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 378.536407][T27521] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 378.544841][T27521] CPU: 0 UID: 0 PID: 27521 Comm: syz.4.7671 Not tainted syzkaller #0 PREEMPT(full) [ 378.554231][T27521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.564301][T27521] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 378.569783][T27521] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 378.590012][T27521] RSP: 0018:ffffc90004df7ae0 EFLAGS: 00010202 [ 378.596134][T27521] RAX: 0000000000000000 RBX: ffff888026b96c00 RCX: 0000000000000002 [ 378.604248][T27521] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.612243][T27521] RBP: ffffc90004df7c10 R08: 0000000000000003 R09: 0000000000000004 [ 378.620242][T27521] R10: dffffc0000000000 R11: fffff520009bef4c R12: dffffc0000000000 [ 378.628215][T27521] R13: dffffc0000000000 R14: ffff88802c7a7d00 R15: 0000000000000002 [ 378.636213][T27521] FS: 00007fb79d0956c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 378.645166][T27521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.651746][T27521] CR2: 0000001b3311eff8 CR3: 0000000047ad6000 CR4: 00000000003526f0 [ 378.659731][T27521] Call Trace: [ 378.663003][T27521] [ 378.665925][T27521] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 378.671033][T27521] ? bpf_lsm_capable+0x9/0x20 [ 378.675715][T27521] ? security_capable+0x7e/0x2e0 [ 378.680647][T27521] rose_ioctl+0x3ce/0x8b0 [ 378.684965][T27521] ? __pfx_rose_ioctl+0x10/0x10 [ 378.689800][T27521] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 378.694826][T27521] sock_do_ioctl+0xd9/0x300 [ 378.699331][T27521] ? __pfx_sock_do_ioctl+0x10/0x10 [ 378.704443][T27521] ? do_futex+0x333/0x420 [ 378.708782][T27521] sock_ioctl+0x576/0x790 [ 378.713143][T27521] ? lock_release+0x4b/0x3e0 [ 378.717730][T27521] ? __pfx_sock_ioctl+0x10/0x10 [ 378.722569][T27521] ? __fget_files+0x2a/0x420 [ 378.727162][T27521] ? __fget_files+0x3a0/0x420 [ 378.731827][T27521] ? __fget_files+0x2a/0x420 [ 378.736413][T27521] ? bpf_lsm_file_ioctl+0x9/0x20 [ 378.741349][T27521] ? __pfx_sock_ioctl+0x10/0x10 [ 378.746203][T27521] __se_sys_ioctl+0xfc/0x170 [ 378.750795][T27521] do_syscall_64+0xfa/0x3b0 [ 378.755303][T27521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.761359][T27521] ? clear_bhb_loop+0x60/0xb0 [ 378.766027][T27521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.771926][T27521] RIP: 0033:0x7fb79c18ebe9 [ 378.776675][T27521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.796362][T27521] RSP: 002b:00007fb79d095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.804858][T27521] RAX: ffffffffffffffda RBX: 00007fb79c3b5fa0 RCX: 00007fb79c18ebe9 [ 378.812906][T27521] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000006 [ 378.820867][T27521] RBP: 00007fb79c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 378.828826][T27521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.836782][T27521] R13: 00007fb79c3b6038 R14: 00007fb79c3b5fa0 R15: 00007ffd2e0f1528 [ 378.844754][T27521] [ 378.847802][T27521] Modules linked in: [ 378.851795][T27521] ---[ end trace 0000000000000000 ]--- [ 378.857255][T27521] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 378.862766][T27521] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 378.872739][T15822] bond3: (slave macvlan2): failed to get link speed/duplex [ 378.882407][T27521] RSP: 0018:ffffc90004df7ae0 EFLAGS: 00010202 [ 378.882431][T27521] RAX: 0000000000000000 RBX: ffff888026b96c00 RCX: 0000000000000002 [ 378.882445][T27521] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.911686][T27521] RBP: ffffc90004df7c10 R08: 0000000000000003 R09: 0000000000000004 [ 378.919713][T27521] R10: dffffc0000000000 R11: fffff520009bef4c R12: dffffc0000000000 [ 378.927703][T27521] R13: dffffc0000000000 R14: ffff88802c7a7d00 R15: 0000000000000002 [ 378.935720][T27521] FS: 00007fb79d0956c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 378.944791][T27521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.951517][T27521] CR2: 0000001b3311eff8 CR3: 0000000047ad6000 CR4: 00000000003526f0 [ 378.959533][T27521] Kernel panic - not syncing: Fatal exception in interrupt [ 378.967070][T27521] Kernel Offset: disabled [ 378.971383][T27521] Rebooting in 86400 seconds..