last executing test programs: 2.609147876s ago: executing program 0 (id=8415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="04010000120007"], 0x104}}, 0x0) 2.560151685s ago: executing program 0 (id=8417): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={r1, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYRES64=r0], 0x80}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x9, 0x80000001, 0x4, 0x1000, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x20008000) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={r1, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYRES64=r0], 0x80}}, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x9, 0x80000001, 0x4, 0x1000, 0x4}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x20008000) (async) 2.137266585s ago: executing program 0 (id=8424): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 2.037845062s ago: executing program 0 (id=8427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.375101039s ago: executing program 3 (id=8436): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.370705186s ago: executing program 4 (id=8438): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x20, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x3, [{0x5, 0x2, "c8484ea2d21ee4c408501af78df6"}]}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0xff}, 0xa, @in6=@empty, 0x0, 0x4, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.273507898s ago: executing program 3 (id=8439): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x4000) 1.241674454s ago: executing program 3 (id=8441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.142283623s ago: executing program 2 (id=8442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}}, 0x24}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.081343994s ago: executing program 4 (id=8443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x7, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000080)={0x3, 0x3ff, 0xffff, 0xa7, 0x3, 0x23, 0x12, "0d8ed1eb01b1aaf4fc3f25e3bf0cc360509bb76e", "2e509a3a7fe02acb7ca6715fbb75c2af924384f9"}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000002140108654ab9ed44501b5d3faf0a00000000000000000000000305000400000000000900020073797a31000000000c0007800805000a00000005000100061c00000011000300686173683a69702c706f727400"/99], 0x58}}, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffe, 0x1, 0x5}, {0x100, 0xfff, 0x9, 0x1, 0xf, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c084}, 0x8c000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x4c}, {0x80000006}]}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x24, 0x0, &(0x7f0000000040)) 1.032508323s ago: executing program 0 (id=8445): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@phonet, &(0x7f0000000480)=0xfffffffffffffdcf, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000003080101000000000000000000000000050003001100000006000240004000002c00048008000740000000004800014000000000080007400000000008000240000000007cff054000000000a5ff43265f06ed5bf555236d6bfa5aca915ac23b3e2b658e0375e6cdbda7cb7ca9f2974ced19f4f65a4bc6f1592b4f64be0209bd5fdcdde29fffcc9ca83abe2d66c7e347db50af36953dfe0ab4376120eea8760ab3653966"], 0x50}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) 946.737883ms ago: executing program 1 (id=8446): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/57, &(0x7f0000000040)=0x39) socketpair(0x25, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) getsockname(r0, &(0x7f00000001c0)=@nl=@proc, &(0x7f0000000240)=0x80) r3 = socket$netlink(0x10, 0x3, 0xb) setsockopt(r1, 0x1, 0xffff, &(0x7f0000000280)="1c2fe5eea39180609c9885441342be58bd4918d16fbc60dda036f0218f2730780115a70ada08aec850410228292da51cbe4fe8e6a94deba6edc3379e56130515d8d21a8c5d9b97c14ccf21edfbe9f7018b6d673c6573068ed95d3a7eb88ba6f503837aecc43cff30945dd20c223cc360fb4c18c0798193e20ddceac567ac14fedbf96dbac8e6a2ca983f5ef1d38eb25d6c893bff297268bf5c80eafb4bd1adba4e286a58180377d2cd6e51a2a449acd405aa12d0cd839a3b03793aa9d50baca3ef8869736e3b7c", 0xc7) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x100, 0x70bd2c, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000480)=[@in={0x2, 0x4e22, @remote}], 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x10}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000580)={r4, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x3, @empty, 0xffc0}]}, &(0x7f00000005c0)=0x10) r6 = socket$inet(0x2, 0xa, 0x7) getsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000000600)={@dev, @dev}, &(0x7f0000000640)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r7, 0xf04, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x8080) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000900)={r4, 0xcc, &(0x7f0000000800)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x5, @empty, 0x7}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x0, @local, 0x8}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x97, @mcast2, 0x8}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff4}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000940)=0x10) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000980)={0x2, 0x1000, "5c5b03e8e3e983f4e55a4adc75f718d979765ea1f94c3b27075aac0f7de5de9da356f42ae3f68c8d7d0058e94d4212c743702e9b86c10c822ac4778da5059351d2e56a8e03d72d9d01c05ad1195e09518f823e7c0fb19814bd2fcd5fe387ad3b4fd0054efc02d48906b00a1570a66bb41dd0c7f6f2468e87464d13b4e77c7e6e17b1d492c4bef64985c04cd3912bb2ab413e288cbd123692a5e24ea5eabd948ebbaeaa12d659b318ac57a06a691e358ef2201065d4094e53bc36708999858fafc449ebfd4288eb72dd5b922e5545db0083a8801ad9bb9026a788d1786cffe1da9de3ed9f0ade62a37fc09a1fee24096629aa9b6746885f7f95a9dbc44e89cd71723d19dd4045e51368b59ca1af0406ebd6a59c7ae145d7e47404afbe2e7fd9be0092fe52c24bda3e248bbe492442a9c9a98e684cbde97243ab91f4c3a3344ffe13be3a283a9129914be7a950478d482edb393472041ad3c2803122520ef96ac5e84ad9c020f75b01ee3df955d0f7ef0506064b3b7e0995d9961e5092d9107f82cbb6deb635061fb05a8b4744428e3c930b221a70bce8850dce4c2d06ed5b51c17b82d088ec855e49f67fe9ca372c886cb0423b4fde73471d228e03bab74843ae38620b2ce4772457c246f2142b9b5aa2451f24b9a808a5c9eeace3996b57fde1d6919fa3e4d7a1f1659cd042e2c3d51e78015c281afd35951ef013029f2d378dfc8fe66f3ace2dc8b457c3b22bfd8de22f53fd07741a01a41d925e4d7324afbb08213bc898c76afbe34a350947595cd7f085471e082e6c8a2d1df81ae6c575d5f11bec81332a4d297982308f22629fd5d7247503516cfa632136e15189fcc2a48ade22175b870fb91cca0e974927d2e43b46ebd30d5b1e625c9b4c763aaf95925cfb302f320b9712d9ef079dd4ecd8c3f3fa51657842894a75d219ec49d6df0f7976b11d48ea8686ce281d4764f6ade143baffe03a849a1b78c4decc52e568d73db6913851b2fc4ece2da3746123fd617eff58fe7373fe6aa5d6fbda91a90a715319b2e8779e522a8a3a7f75c51e033f20ff1e5cb51a6947d3b342ba00775290cd23143282ce16e1edbe5b7c21d4bc2aae0df4bb798821eaff25e15c37bbad512b1b513f905f8ddeffafc0b3934f243364893b158428ed1284b4c3a1092933f9bbdd2551fd6bd1eb4bc73de63fef2c9f808c82320992aae3d255467e18f0d31113f002b64837806318bed791558fe798492659035d326b83bdcb883d1723e5d3773a99ad1ee89943ee1ae471b9e4783f21c448ee19a54f42a3ceb2abd224eaec822d228cf7a1d3d5311e22607a9204ba49aee8b5381cac06b8f07b2c40cfbc952b1d7b1fd7958589597219afc442ea6ede89f20f42e68b926c1ebf7d85e1a6c8175db68e05932459f5ec1a3d68ce3d15946e8a6fd1fcac2076b8416cd116df7fc2f1870ae2146460c6bd7e79e788e403d20972f2a5caeb386ff17913c56482f58cb939d9329ddfe331f23a0cf7915df2714fd4fa4835297c8be3482b0a9031fbc5032c20ec251a53af54f7a565de47acfb1706404f3201f0dc5ecadc14777d292e67fbbd00375b5f3a9507727ca5d2036511f876d04adb9df5770b4bb5054bf0ba85eff2cbc72e4fcef3d5d09674fbd559be59a2dc8a73c760e635cb372eba6a5b0d467b1966cec8c4d45dd50d71f9c110f83074f9f205f50b136fac5c3d368e996bc5443d48d5c9d0c688c55313b3f8db17f0887bf6f8e224a5e8545e5ad5466a0fb9241ad9f9658174bc94695da499c369c22ed08fdd992c0ed9641348ddb68b458cd25957837b4994ffa6637ef72339c1d1c28e7d30dd24a58ad15e4f6021b96441c4a4a118b9651366da36c2c600f5e4b8ad4c310784ba2ccccbb60202b10c24384c999b60b4b60b590d4a0ed051fae360e23b566cee07f10ff71db76e15cf0f49890e6513eeae37dbebb1d1a12b362322754522215b841cf23e2e2af7fe1eb65189d55e29db4db52a9f9bda39af79f59a741ab9d9b3049195dff9ca6db6b37e0f560dae75be8f9ecd74bb63cd3bf6de404f0ec44aa11d0b5276c5e1830db212ae79ac7a551db3e3a4c53b44d680b5f36f2376a9cb939558049fe838e72a3275c40e711539e6fd0916a238d79af60bb2fed2c96a1c9c33331f8eb8544a27c6e5f6bacfa4640fb84f6f54f61803266574fbc4ee065d3b6bc5c140761f132241b4e1a8581406894f3d544e1449be3faaab7384aa303385d82591ebbbdc8ade5eab72bd40718afd71d56a349af417971f96930a4945bcd76cf8782a242a8d924282ed43f79fb633ab856bf68001ba411e4101ee54f99e83e0274aa05034c62de570fd54122406534dbf29e9d08b1c694ef3b199bffedab4bf96e13530ccd6feb3a6158699350c8907fb36fabe407668cdb9be5f880e9e511d5a7be1eb388cfca2f19b40866a238537257ece1c97e4e91eaa897fc388184a94bf2e5aca87349005a5e63aeaa5f999866b289a13e40d40e98b17a199e4dd9acd32d54ed1f241f504522e18399832e17090082d00b2165a1ff75aefacd49a6f2228fbcc912da79d922bb8380cc4cf2e02f38a14542918ee3a313d5d9e50f62b2e3891b3a9e990284f64cf8e5ea495b5f994b9fa4960764d4821d9434c1e0ab70c4a397e7d77aba3dcab68ed61ccc0056c6c9fdba81c4ec75313447cc1277cdbd83557ca45e12273a56006a6906db20497460280631735bc129e1d4a851aa9c07f198adfebd33d288d86404a341fb391c018a32b43001ed0e1148850dc0623137a16f353b12d5545781743ccc49cfd4d89f9462cb28c64c320c467e063a8c5a8a12963acf8139503a06f335edded6365ffbf5fc9350336ae859f1900f4c458fd2a1b4a2265819ac1bff8e224500fa26c389aa690b19f2d37d344a13cdc833a50ecc306cd0e84bfc86dce70066902f24d52c7ed371067ad5c90024e2fe2d85864870693734d3b544a63fe40ae73d737f33545daca8b43e09cdb4e3699f87a41c8e91923724e93883c333edba9e8b02dc3067c9e3096809e1017d77057f3bf082cca2dac15fbbb3f8f7c35bc9d90c7b0cc192d846b140321cd1e19e4b1d7c4f28a292832bd5dedf59367855b5ebb10181a95ea4e24d4036a5cbf2091898ff0f71f893842c855d1926152cf587ff0933ace99e60d74546c6f7487790597c66320de75d39a966079ba49331e19790569fb1367ca133438157ce3f75109f25db8a222fbe1f48f960b02ea549b25b336004d60f861160963dbea687b7d586b33ee60c0c7b37b92c83e9bd0296e8528a6000972756a922265f36ddd73f64d348e814d870d8122b8be45f7b201763d38d4db72decfb0a1a7575b7c3ed67ba0d992507204250a93abbdcc38e4ee096670322b5bb259f146232464eea7348d2d887d82204feb02482f5d3d1d313bd0107d1cc3ee0a205442003f13aa79c1b9935bed86f3de04aae02d55a42c7031eea842556d79eb1fe3237b1ed33b3eb441c9a87dc6c82465cf68cb9c7fa74608270df25650f6638c2914eae4a399e675974b19a66d6e1304f0b0525577df15d48d2096057967b8247754fdae9535cde751689e94af297b2df2aaff07753e096a379b3d121049623a9f0c3890b5dce3feddec02b95914c877ecb5c736b921627fbe4a1c07313beab90de02e1f2d01bc94904fe8d06ca9aa9bd9178b36fbf70d4da6552b21f2e74c466c4b58bcf5f47d521a7731fd2dd89dfa1ad20629f11c3b37b8a0f0e935bcab9fcc9a454aeb040c28904543f46c7c487560bf55a8e32c5b76a594978b70d07217d93958970b99ae3389fff35674277510b4c88f3c945e0e7801680633257a2824de756b71354107bf6888a1bd963563054255710fa6106f7c90eab159aa89cea10300fe4c3b8fbf1e787f01b25e7dc191383e0fa62332151c3134dbe057398740885cc4567744fe2fb83ff85af70491e05735b2eba4289c5243af23afacc9bf667b177e0371d2fd2afbc12b2e0a30d39a7d67620a22162fb2565ddd96f427adae84600a33a62da9dc845610802810b1bd53a441a8da7634dbad0a5451cc801175af0e4fa1b3dfee5e5699b2e3c414e22e3bfce164bedf481878cdad324a8dd1ff102335e1135997b98f24d4df49f5845e1b5f6383e6bb2e7badb8ec44fddef2b30783244915c1a052c3d92219d8f7ddf43992f89e8fbd9b2570c2d4cfc853f725b15c1feab8d2348918dbfb56a52aa033b88a3238aa192f1125d9bacd19488f544c6679d6fd4e44fdaa18683379fa75d1e9335d3c696ccb8f2ff69cc4a0699e15d3397d23519cf3cfaf8c2262d4363e3221b6b26983e776edd8fb9465d4e3237404d2548526e2ddde1cec2ce977d12f8fce47b3feaab8da2538ee187b256dbcfcae684b06a3098bc6fd6f044a04072b9e5fd7b68113bb0137fd1b5b8ae7e03428125052d6dda75e85434c9e037b48ad031fae15c4dfbd4926f994acc32d264f813a748c9740a2de26057a8706461304bdb4d85aee0376d85604ac2c051b34af913f497e9085a34fbfca968859eea87accca93b92040230e46a7effb1500253e4a3f914fed920c10b69ca2bf01a7664d11f8b7851106f409ed2a09c4311350c96ccefdd51d3db642bf5769cd274961beef14a10e5d0359c4e99141a3d903ec114e0b41cb69d618a0548e234c10eb167952dd627511816014f537b5bf47dcfd5a1ca88d28e7aa8aa7de7579b92a9a37e866ca75e2fa96955e6dc9cd46d7734672328fcd94ef8e69d753a539a177f9e6fef53bbe0e6e38b825bdfad9505b848c47b4fb232d2dc612eaba76f576538e79c18c5ec43bf6ff7afaa23567fb4acd3aae291b9eb18797dde745e725c3b6f400c1cde99d7eafad6f553583e2117c2ef3c1891ebf0c001bad525dac152c5415ccf1023580f15807b97efdca1fe755d9ff1d29da1a346cff2e8165e05ad2bf2ae3537a4621f50dcddb2588844ad4098e79655e352d99996b9dad9811fee80e2797afe4cb3281bcd96b32f07743aecb053c14c67239eb241ea3ab88c3b45b7cd1e1e14ae103e05a26713d111662f21563e33c2baefd4c2ee4b5ea2cd1330b65717c3012a7dac5d201da9bccb73047d2732a8c34cc444cdf49da9208863101bfd1e8175b66ed09fe5b59f8074a41fd42e097fcd22eb8e1600a2c87d5491d3b2591c2bf696aad8db0153dffc2b50b5a4a36b1eec55fb24a62d8dc58168f6251731cfcc97d71cf9d5c4071031f3400a0e824b1fd6f3534a321b8393653a5882d15835a922060d54120bc1ce44f79089f14354af404538756cf00663fc2496822629e87033dd8efdf132949557bf98d1e00e679658eeed2b836b0ac012b020c511a1d93371a36901b9d0f44f3b2443d040342d628ee2e4ac2065f292afc86009d9c737f08df592c592b472dea5377bfc95ba10f2b20dc30f172673727d9b3d6649a7bb1f534e3340e5222eda3143596641fb53ae9ff107cf802894499f236855791333119a0d6dba14f390ec4244a2a0a05ace237239d3156df16fbae872a9652e95859e9d934a4ca63c01f22bf8a09641822ecdf67f69394373bbc1c753c6e36f4821f18b83b41ace1f8364a21e4d539c4b98e2f584a05be2bc517c5a859d5779ace23a6382e44a3dcdadef6302cf6e4b1a2cb0e8d448e020732a7d75b44ef5b2d8df6d752c98f7d5649fa09752945b3f09d4cb01edc897776f1118e3ca0bc431201a7464e2b6c8266a505e1850d14887f0ede1d55d94291374a61a1a0c771911acf34d95e6e1fa3cac0de26"}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, 0x2, 0x6, 0xc00, 0x0, 0x0, {0x4, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) pipe(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f0000001b00)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001b40)={r9, 0xfffffffd}, &(0x7f0000001b80)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001bc0)={r5, 0x4}, &(0x7f0000001c00)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001c40)={r12, 0x1}, &(0x7f0000001c80)=0x8) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000001cc0)='hybla\x00', 0x6) r13 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FIDEDUPERANGE(r13, 0xc0189436, &(0x7f0000001d00)={0x1, 0x100000000, 0x2, 0x0, 0x0, [{{r1}, 0xa}, {{r6}, 0x943}]}) 924.326831ms ago: executing program 0 (id=8447): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x8, 0x2c5}, 0x100, './file0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) close(r3) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x11c, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x14004090}, 0x80) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={0x0, 0xff, 0x0, 0x7, 0xffff, 0x7eb, 0xaee0, 0x8, {0x0, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0x2}}, 0xfffffffa, 0x1, 0x4, 0x0, 0x3}}, &(0x7f0000000300)=0xb0) socket$inet_mptcp(0x2, 0x1, 0x106) 804.819637ms ago: executing program 3 (id=8448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}, {0x0, 0xa}}}, 0x24}}, 0x8080) 764.543608ms ago: executing program 2 (id=8449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socket(0x10, 0x80002, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x4, 0x0, 0x46) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x4, &(0x7f0000000000)='\x00\x90\x1c\x0f'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000080)={0x1, 0x9, 0x7}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000080)={0x1, 0x9, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r9) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001280)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc(0x0, r9) (async) syz_genetlink_get_family_id$tipc(0x0, r9) 713.53374ms ago: executing program 1 (id=8450): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001340)={0x11, @multicast2, 0xffff, 0x0, 'wrr\x00', 0x2000000}, 0x2c) 713.090403ms ago: executing program 4 (id=8451): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x4000) 590.425982ms ago: executing program 4 (id=8452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0xa, 0x9, 0xffffffff, 0x6ccd8bdc}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 561.757678ms ago: executing program 1 (id=8453): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6(0x10, 0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d30", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 513.207749ms ago: executing program 2 (id=8454): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20c}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_genetlink_get_family_id$gtp(0x0, r0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x4}, 0xe) socket(0x11, 0x800000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x24, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x48004) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000800) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717a7070000273e030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 379.338159ms ago: executing program 4 (id=8455): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x300, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 361.376465ms ago: executing program 2 (id=8456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 360.81166ms ago: executing program 3 (id=8457): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@phonet, &(0x7f0000000480)=0xfffffffffffffdcf, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c010000030a0101000000000000000005000004ab000c0035499ca954ea548723ace29ed07dbf638cffc5986d30f100e78ea325f174bc5095a721fed353c557e6b03f351ccbe73feb5b01f95b75a2fb24f85e79a0eca5e85382f6245f78d68ffa8d4fe400afaea0d7a9333dfa90b88cf209ae1551dc9cc4d38e19486a7aaed000eac998312aa3f0e05d85e6ff04dd3f58c40895853636fb5e5f736e6ccdb5a5d4b3baf7ee5aadea5a8f18edd9c15f60dc4c3bee98481df5ca0c82630ef11fb74fb5d700bc000c00d1d518b3ee1fcac93a639774506875bf9b143ff27ec6625ab6c3de1ffddef12251299b3a0cb76f74654fa415a4b87e22a530c08756ebd2a296c9aaf6d6ddb111ecb4abf3f8f049dc555f725a2d2cf0699959f6b630a3768c79a9aa5fb2cbbce8a7b0a5653239767baa15dec35d14675e1b967a0a0da8faa611463ee67e83d07ee134b5d72d164e6ef399f0249b552e91c72e088d9fece2063c15b5cd5a7ed04a721576e09019680f1fc6f93b809d77b268ab01cb16d9ca61140000001100010000000000000000000000000a"], 0x1a4}}, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000003080101000000000000000000000000050003001100000006000240004000002c00048008000740000000004800014000000000080007400000000008000240000000007cff054000000000a5ff43265f06ed5bf555236d6bfa5aca915ac23b3e2b658e0375e6cdbda7cb7ca9f2974ced19f4f65a4bc6f1592b4f64be0209bd5fdcdde29fffcc9ca83abe2d66c7e347db50af36953dfe0ab4376120eea8760ab3653966"], 0x50}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) 358.432308ms ago: executing program 1 (id=8458): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000300000000000004"], 0x114}], 0x1}, 0x0) 222.759449ms ago: executing program 2 (id=8459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x2}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 141.691036ms ago: executing program 4 (id=8460): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080600010800060400"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 134.281054ms ago: executing program 3 (id=8461): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x5, 0x1000, 0xffffffffffffffff, 0xe}, 0x48) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r6, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x28004000) sendto$packet(r3, &(0x7f00000001c0)='\x00', 0x1, 0x4c0c0, &(0x7f0000000180)={0x11, 0x5, r6, 0x1, 0x0, 0x6, @random="d700"}, 0x14) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x50, r10, 0x800, 0x0, 0x0, {0x2d}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}]}, 0x50}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r9) 128.963198ms ago: executing program 1 (id=8462): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000009e00), 0x0, 0x4000) 766.941µs ago: executing program 1 (id=8463): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @bcast, 0x0, [@default, @null, @default, @remote, @null, @rose]}, &(0x7f0000000040)=0x40, 0x800) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x1, 0x3}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000000c0), 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @remote}}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0xac61, 0xd89, 0x100, 0xe, 0x19a0000, r3}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', r4, 0x7800, 0x7800, 0x4a, 0x81, {{0x20, 0x4, 0x2, 0x5, 0x80, 0x65, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @generic={0x88, 0xc, "af3a6d19f3fb0335b149"}, @generic={0x83, 0xe, "389613713585e6c37ea77a72"}, @ssrr={0x89, 0xf, 0x80, [@loopback, @multicast1, @multicast2]}, @generic={0x44, 0x4, "a631"}, @rr={0x7, 0x17, 0xf0, [@empty, @rand_addr=0x64010101, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x72, 0x1, 0x3, [{@empty, 0x3}, {@rand_addr=0x64010101}, {@broadcast, 0xc}, {@multicast1, 0x80}]}, @end, @noop, @noop]}}}}}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000340)=0x4, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) connect$rds(r5, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x719f, 0x5, 0x9, 0x6163, 0xddd, 0x8, 0x10000000000, 0x91, 0x7, 0x2, 0x8, 0x80, 0x4, 0x8, 0xb48]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000580)={r8, 0xb3, "7d3585b6f20ff525d6e906603eac9f4f46d5482249b48eba7d2fc6184747805181416d1e8d807656faf6cfd2d13060754c323e414852e2051f53305af300e7dc9d95ca849f0bd78acbd347418f1617a31c114121c72024f9b52b5c8b40adc9327dcbf76a45d6bbcade1b25410e7abf0b1b0bf55a48b69aa16a97b3e31d504d8a38c3b051f914acf6b47182499acc618a09b40dd04b4fbe960b5a59483ef5dcd49a5fddc92564942db9793b4e5317978ffe788a"}, &(0x7f0000000640)=0xbb) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000680)={r9, 0x6866, 0x8, 0x5, 0x1, 0x7f, 0x0, 0x2, {r8, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x7}}, 0xfffffffb, 0xffff, 0x48137489, 0x21, 0x8}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000780)={r10, 0x7fff}, &(0x7f00000007c0)=0x8) getsockname$inet(r7, &(0x7f0000000800)={0x2, 0x0, @broadcast}, &(0x7f0000000840)=0x10) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048045}, 0x4000) getsockname$inet(r6, &(0x7f0000000980)={0x2, 0x0, @loopback}, &(0x7f00000009c0)=0x10) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000a00)={{0x2, 0x4e24, @rand_addr=0x64010101}, {0x1, @random="5f11176ea2d2"}, 0x0, {0x2, 0x4e20, @broadcast}, 'netpci0\x00'}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000a80), &(0x7f0000000ac0)=0xe) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000b00)=0xd3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r6, 0x0, 0x86, 0xb0, &(0x7f0000000b80)="3adf6dc5f2aa90c5e5b96b2eec65cdfb8780dd241c469b447fdc1a33318fa8a00a834d916ba14a92cb46b7bbd52e22250eb162e339baf24a1101ae1860cbe47af098b108db6ece2cc23f8e0d22250610e68a3f9b77ac3a33cee8e68115539b82aaf7b27062c15040c2bea9553519aad52b8af3508a76b9c09f028d3fa94cfa3efdbb0c311bfc", &(0x7f0000000c40)=""/176, 0x2, 0x0, 0x97, 0xfa, &(0x7f0000000d00)="cc0ec60c864479621d1ffc7b9b40482433a3155a733f607eb90362db31ef16fdbff9336e0fafb1ef0f8ff8d1d4a8b43627d7fca9b0b5139d993a3a10dbb5d507c480b0dcf9dd8e17608941835f338a4fab02570449ed2da1d51a74e7fa3d9cabdf37e3a64c43ada079c2cbe36cab3ce4a32d0b30856f602db1b838cd0a34e3e46c067e1afda029e8736624a32e2f83459cb2e303b29388", &(0x7f0000000dc0)="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", 0x5, 0x0, 0xff}, 0x50) socket$kcm(0x29, 0x7, 0x0) 0s ago: executing program 2 (id=8464): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000140), 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x1d161108a18bb434, 0x4}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="1c005a801800016e9900"], 0x38}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRESOCT], 0x40}}, 0x80b0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32=r10, @ANYBLOB="0b000080976b640868603000ee39c39c249612b23b601ba3639ce7d481bfed0bf8d2c80c78a712900d657487082418f9113e7ee0e6a9bc7b4ff0ce4d117f104e638a00"/78], 0x24}], 0x1}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in6=@mcast1, 0x4e20, 0xe740, 0x4e20, 0x8, 0x2, 0x20, 0xa0, 0x4, r6, r10}, {0xe0e, 0x1000, 0x7, 0x3ff, 0x5, 0x3fcb, 0x0, 0x7}, {0x5, 0x40, 0x1, 0x10}, 0x0, 0x6e6bbf, 0x2, 0x0, 0x2}, {{@in=@broadcast, 0x4d5, 0xff}, 0x2, @in=@loopback, 0x0, 0x3, 0x2, 0x8, 0xff, 0x7fff, 0x8001}}, 0xe8) kernel console output (not intermixed with test programs): 81.142136][T24645] should_failslab+0xa8/0x100 [ 481.142160][T24645] kmem_cache_alloc_noprof+0x73/0x3c0 [ 481.142182][T24645] ? skb_clone+0x212/0x3a0 [ 481.142203][T24645] skb_clone+0x212/0x3a0 [ 481.142224][T24645] __netlink_deliver_tap+0x404/0x850 [ 481.142259][T24645] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.142284][T24645] netlink_deliver_tap+0x19c/0x1b0 [ 481.142309][T24645] netlink_unicast+0x7fa/0x9e0 [ 481.142340][T24645] ? __pfx_netlink_unicast+0x10/0x10 [ 481.142364][T24645] ? netlink_sendmsg+0x642/0xb30 [ 481.142385][T24645] ? skb_put+0x11b/0x210 [ 481.142405][T24645] netlink_sendmsg+0x805/0xb30 [ 481.142438][T24645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.142465][T24645] ? aa_sock_msg_perm+0xf1/0x1d0 [ 481.142492][T24645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.142510][T24645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.142535][T24645] __sock_sendmsg+0x219/0x270 [ 481.142560][T24645] ____sys_sendmsg+0x505/0x830 [ 481.142584][T24645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.142611][T24645] ? import_iovec+0x74/0xa0 [ 481.142633][T24645] ___sys_sendmsg+0x21f/0x2a0 [ 481.142653][T24645] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.142708][T24645] ? __fget_files+0x2a/0x420 [ 481.142728][T24645] ? __fget_files+0x3a0/0x420 [ 481.142762][T24645] __x64_sys_sendmsg+0x19b/0x260 [ 481.142781][T24645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.142808][T24645] ? __pfx_ksys_write+0x10/0x10 [ 481.142825][T24645] ? rcu_is_watching+0x15/0xb0 [ 481.142847][T24645] ? do_syscall_64+0xbe/0x3b0 [ 481.142872][T24645] do_syscall_64+0xfa/0x3b0 [ 481.142893][T24645] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.142914][T24645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.142931][T24645] ? clear_bhb_loop+0x60/0xb0 [ 481.142953][T24645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.142968][T24645] RIP: 0033:0x7f52c7b8ebe9 [ 481.142993][T24645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.143007][T24645] RSP: 002b:00007f52c5dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.143026][T24645] RAX: ffffffffffffffda RBX: 00007f52c7db5fa0 RCX: 00007f52c7b8ebe9 [ 481.143040][T24645] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 481.143051][T24645] RBP: 00007f52c5dee090 R08: 0000000000000000 R09: 0000000000000000 [ 481.143061][T24645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.143072][T24645] R13: 00007f52c7db6038 R14: 00007f52c7db5fa0 R15: 00007fff727a3938 [ 481.143102][T24645] [ 481.689015][T24658] sctp: [Deprecated]: syz.3.7479 (pid 24658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.689015][T24658] Use struct sctp_sack_info instead [ 481.756542][T24664] bridge_slave_0: entered promiscuous mode [ 481.852259][T24675] FAULT_INJECTION: forcing a failure. [ 481.852259][T24675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.854476][T24674] netlink: 'syz.4.7484': attribute type 83 has an invalid length. [ 481.866537][T24675] CPU: 1 UID: 0 PID: 24675 Comm: syz.1.7483 Not tainted syzkaller #0 PREEMPT(full) [ 481.866561][T24675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 481.866572][T24675] Call Trace: [ 481.866579][T24675] [ 481.866587][T24675] dump_stack_lvl+0x189/0x250 [ 481.866612][T24675] ? __pfx____ratelimit+0x10/0x10 [ 481.866636][T24675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.866655][T24675] ? __pfx__printk+0x10/0x10 [ 481.866686][T24675] ? __might_fault+0xb0/0x130 [ 481.866722][T24675] should_fail_ex+0x414/0x560 [ 481.866748][T24675] _copy_from_iter+0x1db/0x16f0 [ 481.866770][T24675] ? rcu_is_watching+0x15/0xb0 [ 481.866789][T24675] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 481.866814][T24675] ? __pfx__copy_from_iter+0x10/0x10 [ 481.866833][T24675] ? __build_skb_around+0x257/0x3e0 [ 481.866860][T24675] ? netlink_sendmsg+0x642/0xb30 [ 481.866882][T24675] ? skb_put+0x11b/0x210 [ 481.866901][T24675] netlink_sendmsg+0x6b2/0xb30 [ 481.866934][T24675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.866961][T24675] ? aa_sock_msg_perm+0xf1/0x1d0 [ 481.866987][T24675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.867006][T24675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.867032][T24675] __sock_sendmsg+0x219/0x270 [ 481.867056][T24675] ____sys_sendmsg+0x505/0x830 [ 481.867080][T24675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.867107][T24675] ? import_iovec+0x74/0xa0 [ 481.867130][T24675] ___sys_sendmsg+0x21f/0x2a0 [ 481.867149][T24675] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.867204][T24675] ? __fget_files+0x2a/0x420 [ 481.867226][T24675] ? __fget_files+0x3a0/0x420 [ 481.867260][T24675] __x64_sys_sendmsg+0x19b/0x260 [ 481.867281][T24675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.867313][T24675] ? __pfx_ksys_write+0x10/0x10 [ 481.867339][T24675] ? do_syscall_64+0xbe/0x3b0 [ 481.867366][T24675] do_syscall_64+0xfa/0x3b0 [ 481.867388][T24675] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.867409][T24675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.867426][T24675] ? clear_bhb_loop+0x60/0xb0 [ 481.867447][T24675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.867463][T24675] RIP: 0033:0x7fa1d458ebe9 [ 481.867479][T24675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.867493][T24675] RSP: 002b:00007fa1d547f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.867512][T24675] RAX: ffffffffffffffda RBX: 00007fa1d47b6090 RCX: 00007fa1d458ebe9 [ 481.867524][T24675] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000004 [ 481.867536][T24675] RBP: 00007fa1d547f090 R08: 0000000000000000 R09: 0000000000000000 [ 481.867546][T24675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.867555][T24675] R13: 00007fa1d47b6128 R14: 00007fa1d47b6090 R15: 00007fffc0ffece8 [ 481.867585][T24675] [ 481.984377][T24679] syzkaller0: entered promiscuous mode [ 482.172511][T24679] syzkaller0: entered allmulticast mode [ 482.235099][T24685] tipc: Enabled bearer , priority 0 [ 482.243071][T24685] syzkaller0: entered promiscuous mode [ 482.249150][T24685] syzkaller0: entered allmulticast mode [ 482.278789][T24685] tipc: Resetting bearer [ 482.315948][T24684] tipc: Resetting bearer [ 482.375640][T24684] tipc: Disabling bearer [ 482.595683][T24711] netlink: 'syz.4.7498': attribute type 83 has an invalid length. [ 482.636449][T24715] FAULT_INJECTION: forcing a failure. [ 482.636449][T24715] name failslab, interval 1, probability 0, space 0, times 0 [ 482.653213][T24715] CPU: 1 UID: 0 PID: 24715 Comm: syz.3.7500 Not tainted syzkaller #0 PREEMPT(full) [ 482.653238][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.653247][T24715] Call Trace: [ 482.653254][T24715] [ 482.653262][T24715] dump_stack_lvl+0x189/0x250 [ 482.653296][T24715] ? __pfx____ratelimit+0x10/0x10 [ 482.653319][T24715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.653340][T24715] ? __pfx__printk+0x10/0x10 [ 482.653370][T24715] ? __nla_validate_parse+0x2400/0x2d40 [ 482.653410][T24715] should_fail_ex+0x414/0x560 [ 482.653435][T24715] should_failslab+0xa8/0x100 [ 482.653460][T24715] kmem_cache_alloc_noprof+0x73/0x3c0 [ 482.653482][T24715] ? xfrm_state_alloc+0x24/0x2f0 [ 482.653513][T24715] xfrm_state_alloc+0x24/0x2f0 [ 482.653537][T24715] xfrm_add_sa+0x17d1/0x4070 [ 482.653566][T24715] ? __pfx_xfrm_add_sa+0x10/0x10 [ 482.653582][T24715] ? apparmor_capable+0x137/0x1b0 [ 482.653608][T24715] ? __nla_parse+0x40/0x60 [ 482.653633][T24715] xfrm_user_rcv_msg+0x7a3/0xab0 [ 482.653658][T24715] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 482.653717][T24715] ? __pfx___mutex_trylock_common+0x10/0x10 [ 482.653742][T24715] ? rcu_is_watching+0x15/0xb0 [ 482.653760][T24715] ? trace_contention_end+0x39/0x120 [ 482.653779][T24715] ? __mutex_lock+0x335/0x1360 [ 482.653809][T24715] netlink_rcv_skb+0x205/0x470 [ 482.653834][T24715] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 482.653855][T24715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.653900][T24715] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.653923][T24715] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.653955][T24715] xfrm_netlink_rcv+0x79/0x90 [ 482.653974][T24715] netlink_unicast+0x82f/0x9e0 [ 482.654008][T24715] ? __pfx_netlink_unicast+0x10/0x10 [ 482.654036][T24715] ? netlink_sendmsg+0x642/0xb30 [ 482.654056][T24715] ? skb_put+0x11b/0x210 [ 482.654075][T24715] netlink_sendmsg+0x805/0xb30 [ 482.654114][T24715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.654147][T24715] ? aa_sock_msg_perm+0xf1/0x1d0 [ 482.654177][T24715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.654194][T24715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.654218][T24715] __sock_sendmsg+0x219/0x270 [ 482.654253][T24715] ____sys_sendmsg+0x505/0x830 [ 482.654277][T24715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.654309][T24715] ? import_iovec+0x74/0xa0 [ 482.654332][T24715] ___sys_sendmsg+0x21f/0x2a0 [ 482.654353][T24715] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.654415][T24715] ? __fget_files+0x2a/0x420 [ 482.654437][T24715] ? __fget_files+0x3a0/0x420 [ 482.654472][T24715] __x64_sys_sendmsg+0x19b/0x260 [ 482.654493][T24715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.654518][T24715] ? __pfx_ksys_write+0x10/0x10 [ 482.654543][T24715] ? rcu_is_watching+0x15/0xb0 [ 482.654573][T24715] ? do_syscall_64+0xbe/0x3b0 [ 482.654601][T24715] do_syscall_64+0xfa/0x3b0 [ 482.654627][T24715] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.654648][T24715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.654666][T24715] ? clear_bhb_loop+0x60/0xb0 [ 482.654688][T24715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.654705][T24715] RIP: 0033:0x7f1d4178ebe9 [ 482.654722][T24715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.654737][T24715] RSP: 002b:00007f1d426c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.654756][T24715] RAX: ffffffffffffffda RBX: 00007f1d419b5fa0 RCX: 00007f1d4178ebe9 [ 482.654769][T24715] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 482.654780][T24715] RBP: 00007f1d426c2090 R08: 0000000000000000 R09: 0000000000000000 [ 482.654791][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.654801][T24715] R13: 00007f1d419b6038 R14: 00007f1d419b5fa0 R15: 00007ffcee7a5db8 [ 482.654833][T24715] [ 483.126751][T24723] FAULT_INJECTION: forcing a failure. [ 483.126751][T24723] name failslab, interval 1, probability 0, space 0, times 0 [ 483.126766][T24720] __nla_validate_parse: 7 callbacks suppressed [ 483.126779][T24720] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7503'. [ 483.166338][T24723] CPU: 1 UID: 0 PID: 24723 Comm: syz.4.7504 Not tainted syzkaller #0 PREEMPT(full) [ 483.166363][T24723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.166374][T24723] Call Trace: [ 483.166381][T24723] [ 483.166389][T24723] dump_stack_lvl+0x189/0x250 [ 483.166414][T24723] ? __pfx____ratelimit+0x10/0x10 [ 483.166437][T24723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.166458][T24723] ? __pfx__printk+0x10/0x10 [ 483.166483][T24723] ? __lock_acquire+0xab9/0xd20 [ 483.166518][T24723] should_fail_ex+0x414/0x560 [ 483.166545][T24723] should_failslab+0xa8/0x100 [ 483.166571][T24723] kmem_cache_alloc_noprof+0x73/0x3c0 [ 483.166601][T24723] ? skb_clone+0x212/0x3a0 [ 483.166625][T24723] skb_clone+0x212/0x3a0 [ 483.166645][T24723] __netlink_deliver_tap+0x404/0x850 [ 483.166680][T24723] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.166704][T24723] netlink_deliver_tap+0x19c/0x1b0 [ 483.166727][T24723] netlink_unicast+0x7fa/0x9e0 [ 483.166758][T24723] ? __pfx_netlink_unicast+0x10/0x10 [ 483.166782][T24723] ? netlink_sendmsg+0x642/0xb30 [ 483.166802][T24723] ? skb_put+0x11b/0x210 [ 483.166820][T24723] netlink_sendmsg+0x805/0xb30 [ 483.166852][T24723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.166877][T24723] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.166904][T24723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.166923][T24723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.166948][T24723] __sock_sendmsg+0x219/0x270 [ 483.166974][T24723] ____sys_sendmsg+0x505/0x830 [ 483.166998][T24723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.167025][T24723] ? import_iovec+0x74/0xa0 [ 483.167049][T24723] ___sys_sendmsg+0x21f/0x2a0 [ 483.167071][T24723] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.167130][T24723] ? __fget_files+0x2a/0x420 [ 483.167154][T24723] ? __fget_files+0x3a0/0x420 [ 483.167188][T24723] __x64_sys_sendmsg+0x19b/0x260 [ 483.167206][T24723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.167233][T24723] ? __pfx_ksys_write+0x10/0x10 [ 483.167253][T24723] ? rcu_is_watching+0x15/0xb0 [ 483.167277][T24723] ? do_syscall_64+0xbe/0x3b0 [ 483.167303][T24723] do_syscall_64+0xfa/0x3b0 [ 483.167325][T24723] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.167347][T24723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.167365][T24723] ? clear_bhb_loop+0x60/0xb0 [ 483.167387][T24723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.167404][T24723] RIP: 0033:0x7f010fb8ebe9 [ 483.167421][T24723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.167436][T24723] RSP: 002b:00007f0110ad2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.167456][T24723] RAX: ffffffffffffffda RBX: 00007f010fdb5fa0 RCX: 00007f010fb8ebe9 [ 483.167469][T24723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 483.167480][T24723] RBP: 00007f0110ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 483.167490][T24723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.167501][T24723] R13: 00007f010fdb6038 R14: 00007f010fdb5fa0 R15: 00007ffc992d9fa8 [ 483.167533][T24723] [ 483.167611][T24723] netlink: 'syz.4.7504': attribute type 5 has an invalid length. [ 483.207188][T24725] syzkaller0: entered promiscuous mode [ 483.322815][T24729] netlink: 'syz.2.7507': attribute type 1 has an invalid length. [ 483.375926][T24725] syzkaller0: entered allmulticast mode [ 483.383728][T24729] netlink: 'syz.2.7507': attribute type 1 has an invalid length. [ 483.760081][T24749] tipc: Trying to set illegal importance in message [ 483.967025][T24764] netlink: 'syz.1.7520': attribute type 39 has an invalid length. [ 484.257688][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 484.265805][ C1] lec:lec_tx_timeout: lec0 [ 484.271180][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.330854][T24785] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7527'. [ 484.602181][T24791] wg2: left promiscuous mode [ 484.611317][T24791] wg2: left allmulticast mode [ 484.641421][T24791] FAULT_INJECTION: forcing a failure. [ 484.641421][T24791] name failslab, interval 1, probability 0, space 0, times 0 [ 484.672092][T24791] CPU: 1 UID: 0 PID: 24791 Comm: syz.3.7528 Not tainted syzkaller #0 PREEMPT(full) [ 484.672118][T24791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.672129][T24791] Call Trace: [ 484.672136][T24791] [ 484.672144][T24791] dump_stack_lvl+0x189/0x250 [ 484.672170][T24791] ? __pfx____ratelimit+0x10/0x10 [ 484.672195][T24791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.672216][T24791] ? __pfx__printk+0x10/0x10 [ 484.672247][T24791] ? __pfx___might_resched+0x10/0x10 [ 484.672262][T24791] ? fs_reclaim_acquire+0x7d/0x100 [ 484.672295][T24791] should_fail_ex+0x414/0x560 [ 484.672323][T24791] should_failslab+0xa8/0x100 [ 484.672354][T24791] kmem_cache_alloc_noprof+0x73/0x3c0 [ 484.672376][T24791] ? security_inode_alloc+0x39/0x330 [ 484.672399][T24791] security_inode_alloc+0x39/0x330 [ 484.672419][T24791] inode_init_always_gfp+0x9ed/0xdc0 [ 484.672457][T24791] ? __pfx_sock_alloc_inode+0x10/0x10 [ 484.672478][T24791] alloc_inode+0x82/0x1b0 [ 484.672503][T24791] __sock_create+0x12d/0x9f0 [ 484.672537][T24791] udp_sock_create4+0xbe/0x4b0 [ 484.672563][T24791] ? __pfx_udp_sock_create4+0x10/0x10 [ 484.672592][T24791] ? wg_socket_init+0x162/0xa60 [ 484.672622][T24791] wg_socket_init+0x4e5/0xa60 [ 484.672645][T24791] ? wg_socket_init+0x162/0xa60 [ 484.672670][T24791] ? __pfx_wg_socket_init+0x10/0x10 [ 484.672692][T24791] ? __mutex_lock+0x335/0x1360 [ 484.672717][T24791] ? __pfx_wg_receive+0x10/0x10 [ 484.672749][T24791] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 484.672805][T24791] wg_open+0x24f/0x420 [ 484.672829][T24791] __dev_open+0x46d/0x880 [ 484.672858][T24791] ? __pfx___dev_open+0x10/0x10 [ 484.672893][T24791] __dev_change_flags+0x1ea/0x6d0 [ 484.672918][T24791] ? __pfx___dev_change_flags+0x10/0x10 [ 484.672937][T24791] ? full_name_hash+0x92/0xe0 [ 484.672964][T24791] netif_change_flags+0x88/0x1a0 [ 484.672988][T24791] dev_change_flags+0x130/0x260 [ 484.673020][T24791] dev_ioctl+0x7b4/0x1150 [ 484.673049][T24791] sock_do_ioctl+0x22c/0x300 [ 484.673074][T24791] ? __pfx_sock_do_ioctl+0x10/0x10 [ 484.673092][T24791] ? __lock_acquire+0xab9/0xd20 [ 484.673136][T24791] sock_ioctl+0x576/0x790 [ 484.673160][T24791] ? __pfx_sock_ioctl+0x10/0x10 [ 484.673181][T24791] ? __fget_files+0x2a/0x420 [ 484.673204][T24791] ? __fget_files+0x3a0/0x420 [ 484.673226][T24791] ? __fget_files+0x2a/0x420 [ 484.673254][T24791] ? bpf_lsm_file_ioctl+0x9/0x20 [ 484.673275][T24791] ? __pfx_sock_ioctl+0x10/0x10 [ 484.673295][T24791] __se_sys_ioctl+0xfc/0x170 [ 484.673320][T24791] do_syscall_64+0xfa/0x3b0 [ 484.673343][T24791] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.673364][T24791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.673382][T24791] ? clear_bhb_loop+0x60/0xb0 [ 484.673404][T24791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.673421][T24791] RIP: 0033:0x7f1d4178ebe9 [ 484.673437][T24791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.673459][T24791] RSP: 002b:00007f1d426c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.673479][T24791] RAX: ffffffffffffffda RBX: 00007f1d419b5fa0 RCX: 00007f1d4178ebe9 [ 484.673492][T24791] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 000000000000000a [ 484.673504][T24791] RBP: 00007f1d426c2090 R08: 0000000000000000 R09: 0000000000000000 [ 484.673515][T24791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.673525][T24791] R13: 00007f1d419b6038 R14: 00007f1d419b5fa0 R15: 00007ffcee7a5db8 [ 484.673557][T24791] [ 484.673683][T24791] socket: no more sockets [ 484.732697][T24794] netlink: 'syz.1.7529': attribute type 28 has an invalid length. [ 484.758208][T24791] wireguard: wg2: Could not create IPv4 socket [ 484.758242][T24791] wg2: entered promiscuous mode [ 484.758258][T24791] wg2: entered allmulticast mode [ 484.870820][T24794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7529'. [ 485.234770][T24814] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7537'. [ 485.258201][T24814] FAULT_INJECTION: forcing a failure. [ 485.258201][T24814] name failslab, interval 1, probability 0, space 0, times 0 [ 485.272746][T24814] CPU: 1 UID: 0 PID: 24814 Comm: syz.1.7537 Not tainted syzkaller #0 PREEMPT(full) [ 485.272770][T24814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.272781][T24814] Call Trace: [ 485.272788][T24814] [ 485.272795][T24814] dump_stack_lvl+0x189/0x250 [ 485.272820][T24814] ? __pfx____ratelimit+0x10/0x10 [ 485.272843][T24814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.272863][T24814] ? __pfx__printk+0x10/0x10 [ 485.272892][T24814] ? __pfx___might_resched+0x10/0x10 [ 485.272908][T24814] ? fs_reclaim_acquire+0x7d/0x100 [ 485.272936][T24814] should_fail_ex+0x414/0x560 [ 485.272962][T24814] should_failslab+0xa8/0x100 [ 485.272985][T24814] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 485.273008][T24814] ? __alloc_skb+0x112/0x2d0 [ 485.273036][T24814] __alloc_skb+0x112/0x2d0 [ 485.273063][T24814] netlink_ack+0x146/0xa50 [ 485.273083][T24814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.273118][T24814] netlink_rcv_skb+0x28c/0x470 [ 485.273138][T24814] ? __lock_acquire+0xab9/0xd20 [ 485.273162][T24814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.273182][T24814] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.273222][T24814] ? down_read+0x1ad/0x2e0 [ 485.273247][T24814] genl_rcv+0x28/0x40 [ 485.273262][T24814] netlink_unicast+0x82f/0x9e0 [ 485.273291][T24814] ? __pfx_netlink_unicast+0x10/0x10 [ 485.273312][T24814] ? netlink_sendmsg+0x642/0xb30 [ 485.273333][T24814] ? skb_put+0x11b/0x210 [ 485.273351][T24814] netlink_sendmsg+0x805/0xb30 [ 485.273381][T24814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.273417][T24814] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.273444][T24814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.273462][T24814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.273485][T24814] __sock_sendmsg+0x219/0x270 [ 485.273509][T24814] ____sys_sendmsg+0x505/0x830 [ 485.273536][T24814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.273562][T24814] ? import_iovec+0x74/0xa0 [ 485.273584][T24814] ___sys_sendmsg+0x21f/0x2a0 [ 485.273602][T24814] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.273662][T24814] ? __fget_files+0x2a/0x420 [ 485.273684][T24814] ? __fget_files+0x3a0/0x420 [ 485.273719][T24814] __x64_sys_sendmsg+0x19b/0x260 [ 485.273740][T24814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.273767][T24814] ? __pfx_ksys_write+0x10/0x10 [ 485.273787][T24814] ? rcu_is_watching+0x15/0xb0 [ 485.273808][T24814] ? do_syscall_64+0xbe/0x3b0 [ 485.273833][T24814] do_syscall_64+0xfa/0x3b0 [ 485.273854][T24814] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.273876][T24814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.273894][T24814] ? clear_bhb_loop+0x60/0xb0 [ 485.273916][T24814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.273933][T24814] RIP: 0033:0x7fa1d458ebe9 [ 485.273950][T24814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.273965][T24814] RSP: 002b:00007fa1d54a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.273983][T24814] RAX: ffffffffffffffda RBX: 00007fa1d47b5fa0 RCX: 00007fa1d458ebe9 [ 485.273996][T24814] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 485.274007][T24814] RBP: 00007fa1d54a0090 R08: 0000000000000000 R09: 0000000000000000 [ 485.274018][T24814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.274028][T24814] R13: 00007fa1d47b6038 R14: 00007fa1d47b5fa0 R15: 00007fffc0ffece8 [ 485.274059][T24814] [ 485.606929][T24817] FAULT_INJECTION: forcing a failure. [ 485.606929][T24817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.620755][T24817] CPU: 0 UID: 0 PID: 24817 Comm: syz.4.7539 Not tainted syzkaller #0 PREEMPT(full) [ 485.620780][T24817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.620790][T24817] Call Trace: [ 485.620798][T24817] [ 485.620805][T24817] dump_stack_lvl+0x189/0x250 [ 485.620830][T24817] ? __pfx____ratelimit+0x10/0x10 [ 485.620853][T24817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.620874][T24817] ? __pfx__printk+0x10/0x10 [ 485.620897][T24817] ? __might_fault+0xb0/0x130 [ 485.620930][T24817] should_fail_ex+0x414/0x560 [ 485.620958][T24817] _copy_from_user+0x2d/0xb0 [ 485.620978][T24817] generic_map_update_batch+0x572/0x7f0 [ 485.621012][T24817] ? __pfx_generic_map_update_batch+0x10/0x10 [ 485.621032][T24817] ? __fget_files+0x2a/0x420 [ 485.621064][T24817] ? __pfx_generic_map_update_batch+0x10/0x10 [ 485.621083][T24817] bpf_map_do_batch+0x369/0x5f0 [ 485.621112][T24817] __sys_bpf+0x6af/0x870 [ 485.621137][T24817] ? __pfx___sys_bpf+0x10/0x10 [ 485.621172][T24817] ? ksys_write+0x22a/0x250 [ 485.621198][T24817] ? __pfx_ksys_write+0x10/0x10 [ 485.621217][T24817] ? rcu_is_watching+0x15/0xb0 [ 485.621244][T24817] __x64_sys_bpf+0x7c/0x90 [ 485.621275][T24817] do_syscall_64+0xfa/0x3b0 [ 485.621298][T24817] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.621320][T24817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.621337][T24817] ? clear_bhb_loop+0x60/0xb0 [ 485.621360][T24817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.621377][T24817] RIP: 0033:0x7f010fb8ebe9 [ 485.621393][T24817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.621408][T24817] RSP: 002b:00007f0110ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.621435][T24817] RAX: ffffffffffffffda RBX: 00007f010fdb5fa0 RCX: 00007f010fb8ebe9 [ 485.621449][T24817] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 485.621460][T24817] RBP: 00007f0110ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 485.621471][T24817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.621482][T24817] R13: 00007f010fdb6038 R14: 00007f010fdb5fa0 R15: 00007ffc992d9fa8 [ 485.621513][T24817] [ 485.912929][T24825] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 486.350129][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7549'. [ 486.372560][T24847] FAULT_INJECTION: forcing a failure. [ 486.372560][T24847] name failslab, interval 1, probability 0, space 0, times 0 [ 486.407888][T24847] CPU: 1 UID: 0 PID: 24847 Comm: syz.4.7549 Not tainted syzkaller #0 PREEMPT(full) [ 486.407914][T24847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.407924][T24847] Call Trace: [ 486.407932][T24847] [ 486.407940][T24847] dump_stack_lvl+0x189/0x250 [ 486.407966][T24847] ? __pfx____ratelimit+0x10/0x10 [ 486.407989][T24847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.408009][T24847] ? __pfx__printk+0x10/0x10 [ 486.408038][T24847] ? __pfx___might_resched+0x10/0x10 [ 486.408055][T24847] ? fs_reclaim_acquire+0x7d/0x100 [ 486.408085][T24847] should_fail_ex+0x414/0x560 [ 486.408113][T24847] should_failslab+0xa8/0x100 [ 486.408139][T24847] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 486.408163][T24847] ? __alloc_skb+0x112/0x2d0 [ 486.408191][T24847] __alloc_skb+0x112/0x2d0 [ 486.408219][T24847] netlink_ack+0x146/0xa50 [ 486.408241][T24847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.408259][T24847] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 486.408281][T24847] ? __pfx_nl802154_post_doit+0x10/0x10 [ 486.408318][T24847] netlink_rcv_skb+0x28c/0x470 [ 486.408340][T24847] ? __lock_acquire+0xab9/0xd20 [ 486.408364][T24847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.408385][T24847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.408429][T24847] ? down_read+0x1ad/0x2e0 [ 486.408464][T24847] genl_rcv+0x28/0x40 [ 486.408481][T24847] netlink_unicast+0x82f/0x9e0 [ 486.408512][T24847] ? __pfx_netlink_unicast+0x10/0x10 [ 486.408537][T24847] ? netlink_sendmsg+0x642/0xb30 [ 486.408558][T24847] ? skb_put+0x11b/0x210 [ 486.408579][T24847] netlink_sendmsg+0x805/0xb30 [ 486.408613][T24847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.408641][T24847] ? aa_sock_msg_perm+0xf1/0x1d0 [ 486.408668][T24847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.408687][T24847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.408712][T24847] __sock_sendmsg+0x219/0x270 [ 486.408738][T24847] ____sys_sendmsg+0x505/0x830 [ 486.408764][T24847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.408793][T24847] ? import_iovec+0x74/0xa0 [ 486.408817][T24847] ___sys_sendmsg+0x21f/0x2a0 [ 486.408838][T24847] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.408899][T24847] ? __fget_files+0x2a/0x420 [ 486.408926][T24847] ? __fget_files+0x3a0/0x420 [ 486.408962][T24847] __x64_sys_sendmsg+0x19b/0x260 [ 486.408984][T24847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.409014][T24847] ? __pfx_ksys_write+0x10/0x10 [ 486.409042][T24847] ? do_syscall_64+0xbe/0x3b0 [ 486.409070][T24847] do_syscall_64+0xfa/0x3b0 [ 486.409091][T24847] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.409113][T24847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.409130][T24847] ? clear_bhb_loop+0x60/0xb0 [ 486.409151][T24847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.409165][T24847] RIP: 0033:0x7f010fb8ebe9 [ 486.409181][T24847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.409196][T24847] RSP: 002b:00007f0110ab1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.409215][T24847] RAX: ffffffffffffffda RBX: 00007f010fdb6090 RCX: 00007f010fb8ebe9 [ 486.409229][T24847] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000004 [ 486.409241][T24847] RBP: 00007f0110ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 486.409252][T24847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.409262][T24847] R13: 00007f010fdb6128 R14: 00007f010fdb6090 R15: 00007ffc992d9fa8 [ 486.409295][T24847] [ 486.799427][T24857] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7551'. [ 486.846213][T24859] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7552'. [ 486.880245][T24859] NCSI netlink: No device for ifindex 0 [ 486.912380][T24859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7552'. [ 486.921899][T24859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7552'. [ 486.978700][T24863] tipc: Enabling of bearer rejected, failed to enable media [ 487.107545][T24873] validate_nla: 3 callbacks suppressed [ 487.107563][T24873] netlink: 'syz.3.7559': attribute type 1 has an invalid length. [ 487.132868][T24873] netlink: 'syz.3.7559': attribute type 4 has an invalid length. [ 487.152625][T24873] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7559'. [ 487.293032][T24881] tipc: Enabled bearer , priority 0 [ 487.316755][T24881] syzkaller0: entered promiscuous mode [ 487.332000][T24881] syzkaller0: entered allmulticast mode [ 487.365576][T24881] tipc: Resetting bearer [ 487.400285][T24880] tipc: Resetting bearer [ 487.448222][T24880] tipc: Disabling bearer [ 487.564906][T24894] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 487.773460][T24903] team0: Device ip6gre2 is of different type [ 487.897585][T24909] tipc: Enabled bearer , priority 0 [ 487.965629][T24909] syzkaller0: entered promiscuous mode [ 488.000373][T24915] FAULT_INJECTION: forcing a failure. [ 488.000373][T24915] name failslab, interval 1, probability 0, space 0, times 0 [ 488.000785][T24909] syzkaller0: entered allmulticast mode [ 488.013842][T24915] CPU: 0 UID: 0 PID: 24915 Comm: syz.4.7575 Not tainted syzkaller #0 PREEMPT(full) [ 488.013865][T24915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.013874][T24915] Call Trace: [ 488.013882][T24915] [ 488.013890][T24915] dump_stack_lvl+0x189/0x250 [ 488.013915][T24915] ? __pfx____ratelimit+0x10/0x10 [ 488.013939][T24915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.013958][T24915] ? __pfx__printk+0x10/0x10 [ 488.013999][T24915] ? __pfx___might_resched+0x10/0x10 [ 488.014015][T24915] ? fs_reclaim_acquire+0x7d/0x100 [ 488.014045][T24915] should_fail_ex+0x414/0x560 [ 488.014072][T24915] should_failslab+0xa8/0x100 [ 488.014098][T24915] kmem_cache_alloc_noprof+0x73/0x3c0 [ 488.014120][T24915] ? skb_clone+0x212/0x3a0 [ 488.014144][T24915] skb_clone+0x212/0x3a0 [ 488.014160][T24915] ? nfnetlink_rcv+0x486/0x2520 [ 488.014183][T24915] nfnetlink_rcv+0x4b4/0x2520 [ 488.014207][T24915] ? __dev_queue_xmit+0x1d79/0x3b50 [ 488.014237][T24915] ? __dev_queue_xmit+0x27b/0x3b50 [ 488.014267][T24915] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 488.014305][T24915] ? ref_tracker_free+0x63a/0x7d0 [ 488.014328][T24915] ? __asan_memcpy+0x40/0x70 [ 488.014346][T24915] ? __pfx_ref_tracker_free+0x10/0x10 [ 488.014385][T24915] ? skb_clone+0x246/0x3a0 [ 488.014406][T24915] ? __netlink_deliver_tap+0x807/0x850 [ 488.014430][T24915] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.014470][T24915] netlink_unicast+0x82f/0x9e0 [ 488.014500][T24915] ? __pfx_netlink_unicast+0x10/0x10 [ 488.014524][T24915] ? netlink_sendmsg+0x642/0xb30 [ 488.014545][T24915] ? skb_put+0x11b/0x210 [ 488.014564][T24915] netlink_sendmsg+0x805/0xb30 [ 488.014597][T24915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.014624][T24915] ? aa_sock_msg_perm+0xf1/0x1d0 [ 488.014651][T24915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.014670][T24915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.014694][T24915] __sock_sendmsg+0x219/0x270 [ 488.014718][T24915] ____sys_sendmsg+0x505/0x830 [ 488.014741][T24915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.014767][T24915] ? import_iovec+0x74/0xa0 [ 488.014790][T24915] ___sys_sendmsg+0x21f/0x2a0 [ 488.014815][T24915] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.014868][T24915] ? __fget_files+0x2a/0x420 [ 488.014891][T24915] ? __fget_files+0x3a0/0x420 [ 488.014925][T24915] __x64_sys_sendmsg+0x19b/0x260 [ 488.014950][T24915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.014976][T24915] ? __pfx_ksys_write+0x10/0x10 [ 488.015001][T24915] ? rcu_is_watching+0x15/0xb0 [ 488.015023][T24915] ? do_syscall_64+0xbe/0x3b0 [ 488.015050][T24915] do_syscall_64+0xfa/0x3b0 [ 488.015071][T24915] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.015092][T24915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.015108][T24915] ? clear_bhb_loop+0x60/0xb0 [ 488.015129][T24915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.015146][T24915] RIP: 0033:0x7f010fb8ebe9 [ 488.015162][T24915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.015176][T24915] RSP: 002b:00007f0110ad2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.015195][T24915] RAX: ffffffffffffffda RBX: 00007f010fdb5fa0 RCX: 00007f010fb8ebe9 [ 488.015208][T24915] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 488.015219][T24915] RBP: 00007f0110ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 488.015230][T24915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.015240][T24915] R13: 00007f010fdb6038 R14: 00007f010fdb5fa0 R15: 00007ffc992d9fa8 [ 488.015269][T24915] [ 488.050473][T24918] netlink: 'syz.0.7576': attribute type 83 has an invalid length. [ 488.220372][T24922] netlink: 'syz.2.7578': attribute type 1 has an invalid length. [ 488.408434][T24920] tipc: Resetting bearer [ 488.415400][T24922] netlink: 'syz.2.7578': attribute type 4 has an invalid length. [ 488.424743][T24922] __nla_validate_parse: 2 callbacks suppressed [ 488.424757][T24922] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7578'. [ 488.456485][T24930] netlink: 'syz.4.7579': attribute type 5 has an invalid length. [ 488.539089][T24916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7572'. [ 488.744521][T24908] tipc: Resetting bearer [ 488.805631][T24908] tipc: Disabling bearer [ 488.837506][T24949] bridge_slave_0: entered promiscuous mode [ 488.976801][T24956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.072813][T24959] FAULT_INJECTION: forcing a failure. [ 489.072813][T24959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.101856][T24959] CPU: 1 UID: 0 PID: 24959 Comm: syz.4.7590 Not tainted syzkaller #0 PREEMPT(full) [ 489.101881][T24959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.101900][T24959] Call Trace: [ 489.101908][T24959] [ 489.101916][T24959] dump_stack_lvl+0x189/0x250 [ 489.101942][T24959] ? __pfx____ratelimit+0x10/0x10 [ 489.101967][T24959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.101987][T24959] ? __pfx__printk+0x10/0x10 [ 489.102011][T24959] ? __might_fault+0xb0/0x130 [ 489.102046][T24959] should_fail_ex+0x414/0x560 [ 489.102074][T24959] _copy_from_user+0x2d/0xb0 [ 489.102096][T24959] generic_map_update_batch+0x572/0x7f0 [ 489.102129][T24959] ? __pfx_generic_map_update_batch+0x10/0x10 [ 489.102148][T24959] ? __fget_files+0x2a/0x420 [ 489.102180][T24959] ? __pfx_generic_map_update_batch+0x10/0x10 [ 489.102198][T24959] bpf_map_do_batch+0x369/0x5f0 [ 489.102229][T24959] __sys_bpf+0x6af/0x870 [ 489.102257][T24959] ? __pfx___sys_bpf+0x10/0x10 [ 489.102293][T24959] ? ksys_write+0x22a/0x250 [ 489.102318][T24959] ? __pfx_ksys_write+0x10/0x10 [ 489.102337][T24959] ? rcu_is_watching+0x15/0xb0 [ 489.102365][T24959] __x64_sys_bpf+0x7c/0x90 [ 489.102386][T24959] do_syscall_64+0xfa/0x3b0 [ 489.102408][T24959] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.102430][T24959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.102447][T24959] ? clear_bhb_loop+0x60/0xb0 [ 489.102469][T24959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.102486][T24959] RIP: 0033:0x7f010fb8ebe9 [ 489.102503][T24959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.102518][T24959] RSP: 002b:00007f0110ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.102537][T24959] RAX: ffffffffffffffda RBX: 00007f010fdb5fa0 RCX: 00007f010fb8ebe9 [ 489.102549][T24959] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 489.102560][T24959] RBP: 00007f0110ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 489.102571][T24959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.102580][T24959] R13: 00007f010fdb6038 R14: 00007f010fdb5fa0 R15: 00007ffc992d9fa8 [ 489.102610][T24959] [ 489.409604][T24964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7592'. [ 489.555331][T24969] syzkaller0: entered promiscuous mode [ 489.566335][T24973] netlink: 'syz.1.7596': attribute type 24 has an invalid length. [ 489.570107][T24969] syzkaller0: entered allmulticast mode [ 489.656681][T24978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7598'. [ 489.678316][T24978] netlink: 'syz.4.7598': attribute type 5 has an invalid length. [ 489.686172][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7598'. [ 489.713663][T24978] geneve4: entered promiscuous mode [ 489.722290][T24978] geneve4: entered allmulticast mode [ 489.731302][ T3540] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 489.756421][T24980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7598'. [ 489.767111][T24980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7598'. [ 489.795512][ T3540] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 489.818467][ T3540] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 489.838119][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 489.915208][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7603'. [ 489.927855][T24991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7603'. [ 489.976520][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7603'. [ 489.990823][T24993] sctp: [Deprecated]: syz.2.7604 (pid 24993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.990823][T24993] Use struct sctp_sack_info instead [ 490.017705][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 490.025756][ C1] lec:lec_tx_timeout: lec0 [ 490.030821][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 490.122383][T24999] netlink: 'syz.3.7607': attribute type 5 has an invalid length. [ 490.130576][T24999] FAULT_INJECTION: forcing a failure. [ 490.130576][T24999] name failslab, interval 1, probability 0, space 0, times 0 [ 490.144491][T24999] CPU: 0 UID: 0 PID: 24999 Comm: syz.3.7607 Not tainted syzkaller #0 PREEMPT(full) [ 490.144514][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.144524][T24999] Call Trace: [ 490.144532][T24999] [ 490.144539][T24999] dump_stack_lvl+0x189/0x250 [ 490.144566][T24999] ? __pfx____ratelimit+0x10/0x10 [ 490.144591][T24999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.144609][T24999] ? __pfx__printk+0x10/0x10 [ 490.144629][T24999] ? genl_rcv+0x28/0x40 [ 490.144648][T24999] ? ____sys_sendmsg+0x505/0x830 [ 490.144665][T24999] ? __x64_sys_sendmsg+0x19b/0x260 [ 490.144693][T24999] should_fail_ex+0x414/0x560 [ 490.144720][T24999] should_failslab+0xa8/0x100 [ 490.144745][T24999] kmem_cache_alloc_noprof+0x73/0x3c0 [ 490.144776][T24999] ? skb_clone+0x212/0x3a0 [ 490.144800][T24999] skb_clone+0x212/0x3a0 [ 490.144822][T24999] __netlink_deliver_tap+0x404/0x850 [ 490.144856][T24999] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.144880][T24999] netlink_deliver_tap+0x19c/0x1b0 [ 490.144904][T24999] netlink_sendskb+0x68/0x140 [ 490.144929][T24999] netlink_unicast+0x397/0x9e0 [ 490.144947][T24999] ? __asan_memcpy+0x40/0x70 [ 490.144975][T24999] ? __pfx_netlink_unicast+0x10/0x10 [ 490.145008][T24999] netlink_rcv_skb+0x28c/0x470 [ 490.145027][T24999] ? __lock_acquire+0xab9/0xd20 [ 490.145052][T24999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.145072][T24999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.145117][T24999] ? down_read+0x1ad/0x2e0 [ 490.145144][T24999] genl_rcv+0x28/0x40 [ 490.145160][T24999] netlink_unicast+0x82f/0x9e0 [ 490.145192][T24999] ? __pfx_netlink_unicast+0x10/0x10 [ 490.145216][T24999] ? netlink_sendmsg+0x642/0xb30 [ 490.145237][T24999] ? skb_put+0x11b/0x210 [ 490.145258][T24999] netlink_sendmsg+0x805/0xb30 [ 490.145292][T24999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.145320][T24999] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.145348][T24999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.145366][T24999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.145391][T24999] __sock_sendmsg+0x219/0x270 [ 490.145414][T24999] ____sys_sendmsg+0x505/0x830 [ 490.145438][T24999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.145466][T24999] ? import_iovec+0x74/0xa0 [ 490.145488][T24999] ___sys_sendmsg+0x21f/0x2a0 [ 490.145508][T24999] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.145565][T24999] ? __fget_files+0x2a/0x420 [ 490.145588][T24999] ? __fget_files+0x3a0/0x420 [ 490.145624][T24999] __x64_sys_sendmsg+0x19b/0x260 [ 490.145646][T24999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.145672][T24999] ? __pfx_ksys_write+0x10/0x10 [ 490.145692][T24999] ? rcu_is_watching+0x15/0xb0 [ 490.145716][T24999] ? do_syscall_64+0xbe/0x3b0 [ 490.145745][T24999] do_syscall_64+0xfa/0x3b0 [ 490.145776][T24999] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.145798][T24999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.145816][T24999] ? clear_bhb_loop+0x60/0xb0 [ 490.145838][T24999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.145856][T24999] RIP: 0033:0x7f1d4178ebe9 [ 490.145873][T24999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.145888][T24999] RSP: 002b:00007f1d426c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.145908][T24999] RAX: ffffffffffffffda RBX: 00007f1d419b5fa0 RCX: 00007f1d4178ebe9 [ 490.145921][T24999] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 490.145933][T24999] RBP: 00007f1d426c2090 R08: 0000000000000000 R09: 0000000000000000 [ 490.145943][T24999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.145954][T24999] R13: 00007f1d419b6038 R14: 00007f1d419b5fa0 R15: 00007ffcee7a5db8 [ 490.145987][T24999] [ 490.604711][T25015] tipc: Enabling of bearer rejected, failed to enable media [ 490.614598][T25015] syzkaller0: entered promiscuous mode [ 490.620994][T25015] syzkaller0: entered allmulticast mode [ 490.801253][T25020] tipc: Enabling of bearer rejected, already enabled [ 491.038690][T25032] syzkaller0: entered promiscuous mode [ 491.048261][T25032] syzkaller0: entered allmulticast mode [ 491.190092][T25037] netlink: 'syz.3.7622': attribute type 83 has an invalid length. [ 491.549114][T25063] syzkaller0: entered promiscuous mode [ 491.554930][T25063] syzkaller0: entered allmulticast mode [ 491.749594][T25071] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.980998][T25090] wg2: left promiscuous mode [ 491.985646][T25090] wg2: left allmulticast mode [ 492.048552][T25090] wg2: entered promiscuous mode [ 492.056583][T25090] wg2: entered allmulticast mode [ 492.134625][T25095] syzkaller0: entered promiscuous mode [ 492.158032][T25095] syzkaller0: entered allmulticast mode [ 492.319960][T25102] lo speed is unknown, defaulting to 1000 [ 492.430609][T25113] validate_nla: 2 callbacks suppressed [ 492.430629][T25113] netlink: 'syz.3.7650': attribute type 83 has an invalid length. [ 492.444186][T25102] lo speed is unknown, defaulting to 1000 [ 492.476345][T25118] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 493.010057][T25147] syzkaller0: entered promiscuous mode [ 493.023835][T25147] syzkaller0: entered allmulticast mode [ 493.044427][T25142] !€ÿ: renamed from bond_slave_0 [ 493.157980][T25155] netlink: 'syz.1.7662': attribute type 1 has an invalid length. [ 493.176580][T25155] netlink: 'syz.1.7662': attribute type 4 has an invalid length. [ 493.187436][T25154] netlink: 'syz.0.7663': attribute type 29 has an invalid length. [ 493.223436][T25154] netlink: 'syz.0.7663': attribute type 29 has an invalid length. [ 493.287310][T25154] netlink: 'syz.0.7663': attribute type 29 has an invalid length. [ 493.298608][T25154] netlink: 'syz.0.7663': attribute type 29 has an invalid length. [ 493.384058][T25154] netlink: 'syz.0.7663': attribute type 29 has an invalid length. [ 493.417380][T25164] netlink: 'syz.0.7663': attribute type 29 has an invalid length. [ 493.450087][T25170] : renamed from bridge_slave_0 [ 493.597549][T25179] sctp: [Deprecated]: syz.1.7669 (pid 25179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.597549][T25179] Use struct sctp_sack_info instead [ 493.681127][T25179] __nla_validate_parse: 10 callbacks suppressed [ 493.681146][T25179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7669'. [ 493.697345][T25182] nft_compat: unsupported protocol 1 [ 493.764377][T25189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7671'. [ 493.830268][T25189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7671'. [ 494.034535][T25193] syzkaller0: entered promiscuous mode [ 494.040481][T25193] syzkaller0: entered allmulticast mode [ 494.316161][T25205] IPVS: Scheduler module ip_vs_sip not found [ 494.524126][T25222] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7681'. [ 494.659448][T25228] sctp: [Deprecated]: syz.0.7685 (pid 25228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.659448][T25228] Use struct sctp_sack_info instead [ 494.681022][T25228] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7685'. [ 494.686481][T25233] wg2: left promiscuous mode [ 494.696855][T25233] wg2: left allmulticast mode [ 494.953932][T25249] netlink: 'syz.3.7691': attribute type 1 has an invalid length. [ 494.963679][T25249] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7691'. [ 495.037798][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 495.045874][ C1] lec:lec_tx_timeout: lec0 [ 495.050557][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 495.172646][T25259] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7696'. [ 495.185038][T25259] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7696'. [ 495.206125][T25257] wg2: entered promiscuous mode [ 495.216726][T25257] wg2: entered allmulticast mode [ 495.290920][T25263] syzkaller0: entered promiscuous mode [ 495.296531][T25263] syzkaller0: entered allmulticast mode [ 495.530623][T25273] wg2: entered promiscuous mode [ 495.537754][T25273] wg2: entered allmulticast mode [ 495.650590][T25283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7708'. [ 495.967999][T25308] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7715'. [ 495.978028][T25308] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 496.360346][T25329] syzkaller0: entered promiscuous mode [ 496.366116][T25329] syzkaller0: entered allmulticast mode [ 496.525998][T25334] bridge_slave_0: entered promiscuous mode [ 496.801268][T25346] wg2: left promiscuous mode [ 496.806693][T25346] wg2: left allmulticast mode [ 497.146407][T25372] 8021q: VLANs not supported on xfrm0 [ 497.216300][T25378] delete_channel: no stack [ 497.635432][T25403] syzkaller0: entered promiscuous mode [ 497.651592][T25403] syzkaller0: entered allmulticast mode [ 497.874984][T25419] validate_nla: 4 callbacks suppressed [ 497.875002][T25419] netlink: 'syz.0.7758': attribute type 1 has an invalid length. [ 497.910526][T25420] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 497.961219][T25419] 8021q: adding VLAN 0 to HW filter on device bond9 [ 497.970424][T25419] bond8: (slave bond9): making interface the new active one [ 497.980462][T25419] bond8: (slave bond9): Enslaving as an active interface with an up link [ 497.991152][T25427] 8021q: adding VLAN 0 to HW filter on device bond8 [ 498.113028][T25431] netlink: 'syz.0.7761': attribute type 24 has an invalid length. [ 498.298630][T25441] lo: entered promiscuous mode [ 498.306187][T25441] tunl0: entered promiscuous mode [ 498.320276][T25441] gre0: entered promiscuous mode [ 498.464628][T25441] ip_vti0: entered promiscuous mode [ 498.474788][T25441] ip6_vti0: entered promiscuous mode [ 498.482881][T25441] sit0: entered promiscuous mode [ 498.528107][T25441] ip6tnl0: entered promiscuous mode [ 498.537479][T25441] ip6gre0: entered promiscuous mode [ 498.550817][T25441] ip6gretap0: entered promiscuous mode [ 498.566725][T25441] bond0: entered promiscuous mode [ 498.574662][T25441] bond_slave_0: entered promiscuous mode [ 498.583547][T25441] bond_slave_1: entered promiscuous mode [ 498.590529][T25441] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 498.617121][T25441] team0: entered promiscuous mode [ 498.623123][T25441] team_slave_0: entered promiscuous mode [ 498.631981][T25441] team_slave_1: entered promiscuous mode [ 498.639949][T25441] dummy0: entered promiscuous mode [ 498.657052][T25441] nlmon0: entered promiscuous mode [ 498.664380][T25441] caif0: entered promiscuous mode [ 498.670076][T25441] veth0: entered promiscuous mode [ 498.675422][T25441] veth1: entered promiscuous mode [ 498.681961][T25441] wg1: entered promiscuous mode [ 498.688346][T25441] wg2: left allmulticast mode [ 498.694289][T25441] veth0_to_bridge: entered promiscuous mode [ 498.709143][T25441] veth1_to_bridge: entered promiscuous mode [ 498.722261][T25441] bridge_slave_1: entered promiscuous mode [ 498.734077][T25441] veth0_to_bond: entered promiscuous mode [ 498.746733][T25441] veth1_to_bond: entered promiscuous mode [ 498.764009][T25441] veth0_to_team: entered promiscuous mode [ 498.781711][T25441] veth1_to_team: entered promiscuous mode [ 498.803335][T25441] veth0_to_batadv: entered promiscuous mode [ 498.821921][T25441] batadv_slave_0: entered promiscuous mode [ 498.836341][T25441] xfrm0: entered promiscuous mode [ 498.852559][T25441] veth0_to_hsr: entered promiscuous mode [ 498.866334][T25441] veth1_to_hsr: entered promiscuous mode [ 498.892650][T25441] hsr0: entered promiscuous mode [ 498.914956][T25441] veth1_virt_wifi: entered promiscuous mode [ 498.940541][T25441] veth0_virt_wifi: entered promiscuous mode [ 498.999356][T25441] macvtap0: entered promiscuous mode [ 499.027934][T25441] macsec0: entered promiscuous mode [ 499.053726][T25441] geneve0: entered promiscuous mode [ 499.065436][T25441] geneve1: entered promiscuous mode [ 499.086365][T25441] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 499.102503][T25441] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 499.119543][T25441] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 499.135464][T25441] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 499.196484][T25441] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 499.204573][T25441] vxlan0: left allmulticast mode [ 499.238604][T25441] ipvlan2: entered promiscuous mode [ 499.248529][T25441] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 499.255680][T25441] macsec1: entered promiscuous mode [ 499.261577][T25441] tipc: Resetting bearer [ 499.274872][T25441] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 499.282959][T25441] syztnl0: entered promiscuous mode [ 499.292168][T25441] hsr1: entered promiscuous mode [ 499.304534][T25441] ip6tnl1: entered promiscuous mode [ 499.324660][T25441] ip6tnl2: entered promiscuous mode [ 499.331797][T25441] vxlan1: entered promiscuous mode [ 499.341454][T25441] ip6gre1: entered promiscuous mode [ 499.351246][T25441] @: entered promiscuous mode [ 499.356082][T25441] bond1: entered promiscuous mode [ 499.365019][T25441] bridge1: entered promiscuous mode [ 499.376180][T25441] ipip0: entered promiscuous mode [ 499.389135][T25441] veth2: entered promiscuous mode [ 499.394405][T25441] veth3: entered promiscuous mode [ 499.400050][T25441] bond2: entered promiscuous mode [ 499.405313][T25441] gretap1: entered promiscuous mode [ 499.412579][T25441] sit1: entered promiscuous mode [ 499.418588][T25441] veth4: entered promiscuous mode [ 499.423874][T25441] veth5: entered promiscuous mode [ 499.430090][T25441] bridge2: entered promiscuous mode [ 499.440671][T25441] bridge3: entered promiscuous mode [ 499.450543][T25441] veth6: entered promiscuous mode [ 499.456408][T25441] veth7: entered promiscuous mode [ 499.463133][T25441] bridge4: entered promiscuous mode [ 499.472443][T25441] veth8: entered promiscuous mode [ 499.478398][T25441] veth9: entered promiscuous mode [ 499.483920][T25441] mac80211_hwsim hwsim14 wlan3: entered promiscuous mode [ 499.491404][T25441] veth10: entered promiscuous mode [ 499.496718][T25441] veth11: entered promiscuous mode [ 499.503603][T25441] bridge5: entered promiscuous mode [ 499.518362][T25441] bond3: entered promiscuous mode [ 499.523452][T25441] geneve2: entered promiscuous mode [ 499.539174][T25441] gre1: entered promiscuous mode [ 499.549001][T25441] gre2: entered promiscuous mode [ 499.558312][T25441] bridge6: entered promiscuous mode [ 499.573583][T25441] gre3: entered promiscuous mode [ 499.580110][T25441] bridge7: entered promiscuous mode [ 499.586826][T25441] veth12: entered promiscuous mode [ 499.592679][T25441] veth13: entered promiscuous mode [ 499.599004][T25441] gre4: entered promiscuous mode [ 499.607622][T25441] sit2: entered promiscuous mode [ 499.613903][T25441] bridge8: entered promiscuous mode [ 499.624636][T25441] bridge9: entered promiscuous mode [ 499.632214][T25441] veth14: entered promiscuous mode [ 499.637472][T25441] veth15: entered promiscuous mode [ 499.644137][T25441] bridge10: entered promiscuous mode [ 499.658477][T25441] bond4: entered promiscuous mode [ 499.671010][T25441] bridge11: entered promiscuous mode [ 499.676536][T25441] veth16: entered promiscuous mode [ 499.682327][T25441] veth17: entered promiscuous mode [ 499.690356][T25441] bridge12: entered promiscuous mode [ 499.697603][T25441] ip6erspan0: entered promiscuous mode [ 499.709192][T25441] bond5: entered promiscuous mode [ 499.714261][T25441] bond6: entered promiscuous mode [ 499.729797][T25441] bridge0: entered promiscuous mode [ 499.740064][T25441] bond7: entered promiscuous mode [ 499.745973][T25441] bond8: entered promiscuous mode [ 499.753637][ T7033] lo speed is unknown, defaulting to 1000 [ 499.768568][ T7033] syz0: Port: 1 Link DOWN [ 499.828800][ T3540] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.865671][ T3540] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.893168][ T7033] lo speed is unknown, defaulting to 1000 [ 499.893174][ T3540] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.893200][ T3540] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.918326][T25479] netlink: 'syz.0.7772': attribute type 1 has an invalid length. [ 499.930525][ T3540] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.947600][ T3540] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.959588][ T3540] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.969549][ T3540] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.003359][T25484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.036664][T25479] 8021q: adding VLAN 0 to HW filter on device bond11 [ 500.046482][T25479] bond10: (slave bond11): making interface the new active one [ 500.048674][T25487] __nla_validate_parse: 5 callbacks suppressed [ 500.048691][T25487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7772'. [ 500.054904][T25479] bond10: (slave bond11): Enslaving as an active interface with an up link [ 500.060441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 500.085904][ C1] lec:lec_tx_timeout: lec0 [ 500.090679][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 500.101209][T25487] 8021q: adding VLAN 0 to HW filter on device bond10 [ 500.117066][T25481] tipc: Enabled bearer , priority 0 [ 500.125071][T25481] syzkaller0: entered promiscuous mode [ 500.131239][T25481] syzkaller0: entered allmulticast mode [ 500.138939][T25455] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.163184][T25481] tipc: Resetting bearer [ 500.173557][T25480] tipc: Resetting bearer [ 500.211982][T25480] tipc: Disabling bearer [ 500.483099][T25509] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7782'. [ 500.619674][T25519] netlink: 'syz.3.7787': attribute type 1 has an invalid length. [ 500.627589][T25519] netlink: 'syz.3.7787': attribute type 4 has an invalid length. [ 500.635798][T25459] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.635798][T25519] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7787'. [ 500.725822][T25520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7786'. [ 500.795771][T25526] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7789'. [ 500.809831][T25526] netlink: 'syz.2.7789': attribute type 8 has an invalid length. [ 500.899424][T25533] sctp: [Deprecated]: syz.3.7790 (pid 25533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.899424][T25533] Use struct sctp_sack_info instead [ 501.213540][T25549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7795'. [ 501.272898][T25549] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7795'. [ 501.291851][T25553] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 501.309850][T25553] tipc: Resetting bearer [ 501.370650][T25554] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7794'. [ 501.440137][T25547] nbd3: detected capacity change from 0 to 549764202496 [ 501.470285][ T5870] block nbd3: Receive control failed (result -32) [ 501.477732][T25550] block nbd3: Send control failed (result -32) [ 501.478044][T25550] block nbd3: Request send failed, requeueing [ 501.533618][ T56] block nbd3: Dead connection, failed to find a fallback [ 501.558636][ T56] block nbd3: shutting down sockets [ 501.561163][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.564151][ T56] blk_print_req_error: 138 callbacks suppressed [ 501.564163][ T56] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.587246][ T56] buffer_io_error: 138 callbacks suppressed [ 501.587261][ T56] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.602374][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.618756][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.626736][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.636077][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.644869][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.654081][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.667223][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.677496][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.685646][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.694789][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.702930][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.712403][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.714863][T25575] netlink: 'syz.1.7803': attribute type 1 has an invalid length. [ 501.720978][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.738075][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.745974][T25550] ldm_validate_partition_table(): Disk read failed. [ 501.752840][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.762222][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.770372][T25575] netlink: 'syz.1.7803': attribute type 4 has an invalid length. [ 501.788072][T25550] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.806490][T25575] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7803'. [ 501.828154][T25550] Buffer I/O error on dev nbd3, logical block 0, async page read [ 501.851713][T25550] Dev nbd3: unable to read RDB block 0 [ 501.898595][T25550] nbd3: unable to read partition table [ 501.916983][T25550] ldm_validate_partition_table(): Disk read failed. [ 501.934149][T25550] Dev nbd3: unable to read RDB block 0 [ 501.975203][T25550] nbd3: unable to read partition table [ 502.008762][T25589] sctp: [Deprecated]: syz.4.7805 (pid 25589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.008762][T25589] Use struct sctp_sack_info instead [ 502.027357][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7806'. [ 502.265676][T25598] wg2: left promiscuous mode [ 502.273400][T25598] wg2: left allmulticast mode [ 502.371325][T25608] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 502.593892][T25625] netlink: 'syz.1.7819': attribute type 1 has an invalid length. [ 502.687595][T25628] 8021q: adding VLAN 0 to HW filter on device bond13 [ 502.696696][T25628] bond12: (slave bond13): making interface the new active one [ 502.704917][T25628] bond12: (slave bond13): Enslaving as an active interface with an up link [ 502.723146][T25625] 8021q: adding VLAN 0 to HW filter on device bond12 [ 503.044369][T25650] IPVS: Unknown mcast interface: vcan0 [ 503.073692][T25650] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:65535 [ 503.361057][T25671] netlink: 'syz.0.7838': attribute type 25 has an invalid length. [ 503.860847][T25708] tipc: Enabling of bearer rejected, already enabled [ 504.108708][T25724] team0: Device gtp1 is of different type [ 504.325866][T25738] tipc: Enabling of bearer rejected, already enabled [ 504.331363][T25739] FAULT_INJECTION: forcing a failure. [ 504.331363][T25739] name failslab, interval 1, probability 0, space 0, times 0 [ 504.378863][T25739] CPU: 1 UID: 0 PID: 25739 Comm: syz.2.7862 Not tainted syzkaller #0 PREEMPT(full) [ 504.378889][T25739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.378900][T25739] Call Trace: [ 504.378908][T25739] [ 504.378916][T25739] dump_stack_lvl+0x189/0x250 [ 504.378941][T25739] ? __pfx____ratelimit+0x10/0x10 [ 504.378965][T25739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.378986][T25739] ? __pfx__printk+0x10/0x10 [ 504.379015][T25739] ? __pfx___might_resched+0x10/0x10 [ 504.379038][T25739] should_fail_ex+0x414/0x560 [ 504.379067][T25739] should_failslab+0xa8/0x100 [ 504.379093][T25739] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 504.379118][T25739] ? __alloc_skb+0x112/0x2d0 [ 504.379152][T25739] __alloc_skb+0x112/0x2d0 [ 504.379181][T25739] nf_tables_commit+0x7495/0x8700 [ 504.379228][T25739] ? __pfx_nf_tables_commit+0x10/0x10 [ 504.379255][T25739] ? free_large_kmalloc+0x13a/0x1f0 [ 504.379282][T25739] ? nf_tables_newrule+0x23bc/0x2890 [ 504.379318][T25739] ? __pfx_nf_tables_newrule+0x10/0x10 [ 504.379363][T25739] nfnetlink_rcv+0x1a4e/0x2520 [ 504.379422][T25739] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 504.379501][T25739] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.379545][T25739] netlink_unicast+0x82f/0x9e0 [ 504.379588][T25739] ? __pfx_netlink_unicast+0x10/0x10 [ 504.379612][T25739] ? netlink_sendmsg+0x642/0xb30 [ 504.379634][T25739] ? skb_put+0x11b/0x210 [ 504.379655][T25739] netlink_sendmsg+0x805/0xb30 [ 504.379690][T25739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.379718][T25739] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.379746][T25739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.379765][T25739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.379790][T25739] __sock_sendmsg+0x219/0x270 [ 504.379816][T25739] ____sys_sendmsg+0x505/0x830 [ 504.379841][T25739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.379870][T25739] ? import_iovec+0x74/0xa0 [ 504.379894][T25739] ___sys_sendmsg+0x21f/0x2a0 [ 504.379915][T25739] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.379967][T25739] ? __fget_files+0x2a/0x420 [ 504.379990][T25739] ? __fget_files+0x3a0/0x420 [ 504.380026][T25739] __x64_sys_sendmsg+0x19b/0x260 [ 504.380047][T25739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.380077][T25739] ? __pfx_ksys_write+0x10/0x10 [ 504.380097][T25739] ? rcu_is_watching+0x15/0xb0 [ 504.380121][T25739] ? do_syscall_64+0xbe/0x3b0 [ 504.380149][T25739] do_syscall_64+0xfa/0x3b0 [ 504.380171][T25739] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.380193][T25739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.380211][T25739] ? clear_bhb_loop+0x60/0xb0 [ 504.380234][T25739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.380251][T25739] RIP: 0033:0x7fbd0cf8ebe9 [ 504.380267][T25739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.380283][T25739] RSP: 002b:00007fbd0de96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.380302][T25739] RAX: ffffffffffffffda RBX: 00007fbd0d1b5fa0 RCX: 00007fbd0cf8ebe9 [ 504.380315][T25739] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 504.380326][T25739] RBP: 00007fbd0de96090 R08: 0000000000000000 R09: 0000000000000000 [ 504.380335][T25739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.380346][T25739] R13: 00007fbd0d1b6038 R14: 00007fbd0d1b5fa0 R15: 00007ffd20fbf6d8 [ 504.380378][T25739] [ 504.742866][T25743] tipc: Enabling of bearer rejected, already enabled [ 504.950307][T25752] wg2: entered promiscuous mode [ 504.955439][T25752] wg2: entered allmulticast mode [ 505.041298][T25747] IPVS: Scheduler module ip_vs_sip not found [ 505.097750][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 505.105900][ C1] lec:lec_tx_timeout: lec0 [ 505.110539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 505.242646][T25773] tipc: Enabled bearer , priority 0 [ 505.268831][T25773] syzkaller0: entered promiscuous mode [ 505.274437][T25773] syzkaller0: entered allmulticast mode [ 505.318907][T25773] tipc: Resetting bearer [ 505.350016][T25772] tipc: Resetting bearer [ 505.398766][T25772] tipc: Disabling bearer [ 505.410957][T25791] __nla_validate_parse: 9 callbacks suppressed [ 505.410978][T25791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7880'. [ 505.512576][T25794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7882'. [ 505.527417][T25794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7882'. [ 505.955754][T25802] netlink: 'syz.0.7883': attribute type 2 has an invalid length. [ 506.257208][T25817] IPVS: Scheduler module ip_vs_sip not found [ 506.485379][T25841] FAULT_INJECTION: forcing a failure. [ 506.485379][T25841] name failslab, interval 1, probability 0, space 0, times 0 [ 506.498601][T25841] CPU: 1 UID: 0 PID: 25841 Comm: syz.3.7896 Not tainted syzkaller #0 PREEMPT(full) [ 506.498627][T25841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.498637][T25841] Call Trace: [ 506.498645][T25841] [ 506.498652][T25841] dump_stack_lvl+0x189/0x250 [ 506.498679][T25841] ? __pfx____ratelimit+0x10/0x10 [ 506.498702][T25841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.498723][T25841] ? __pfx__printk+0x10/0x10 [ 506.498753][T25841] ? __pfx___might_resched+0x10/0x10 [ 506.498776][T25841] should_fail_ex+0x414/0x560 [ 506.498804][T25841] should_failslab+0xa8/0x100 [ 506.498830][T25841] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 506.498853][T25841] ? __alloc_skb+0x112/0x2d0 [ 506.498883][T25841] __alloc_skb+0x112/0x2d0 [ 506.498911][T25841] netlink_sendmsg+0x5c6/0xb30 [ 506.498947][T25841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.498974][T25841] ? aa_sock_msg_perm+0xf1/0x1d0 [ 506.499002][T25841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.499021][T25841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.499046][T25841] __sock_sendmsg+0x219/0x270 [ 506.499072][T25841] ____sys_sendmsg+0x505/0x830 [ 506.499097][T25841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.499125][T25841] ? import_iovec+0x74/0xa0 [ 506.499149][T25841] ___sys_sendmsg+0x21f/0x2a0 [ 506.499169][T25841] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.499223][T25841] ? __fget_files+0x2a/0x420 [ 506.499247][T25841] ? __fget_files+0x3a0/0x420 [ 506.499282][T25841] __x64_sys_sendmsg+0x19b/0x260 [ 506.499303][T25841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.499332][T25841] ? __pfx_ksys_write+0x10/0x10 [ 506.499353][T25841] ? rcu_is_watching+0x15/0xb0 [ 506.499384][T25841] ? do_syscall_64+0xbe/0x3b0 [ 506.499412][T25841] do_syscall_64+0xfa/0x3b0 [ 506.499433][T25841] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.499455][T25841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.499473][T25841] ? clear_bhb_loop+0x60/0xb0 [ 506.499495][T25841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.499512][T25841] RIP: 0033:0x7f1d4178ebe9 [ 506.499528][T25841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.499548][T25841] RSP: 002b:00007f1d426c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.499572][T25841] RAX: ffffffffffffffda RBX: 00007f1d419b5fa0 RCX: 00007f1d4178ebe9 [ 506.499586][T25841] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 506.499598][T25841] RBP: 00007f1d426c2090 R08: 0000000000000000 R09: 0000000000000000 [ 506.499609][T25841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.499619][T25841] R13: 00007f1d419b6038 R14: 00007f1d419b5fa0 R15: 00007ffcee7a5db8 [ 506.499651][T25841] [ 506.774208][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.923219][T25853] netlink: 'syz.3.7899': attribute type 1 has an invalid length. [ 506.942202][T25855] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7902'. [ 506.944211][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7899'. [ 506.951608][T25855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7902'. [ 507.265151][T25874] tipc: Enabled bearer , priority 0 [ 507.282419][T25874] syzkaller0: entered promiscuous mode [ 507.297887][T25874] syzkaller0: entered allmulticast mode [ 507.364361][T25873] tipc: Resetting bearer [ 507.443221][T25873] tipc: Disabling bearer [ 507.486015][T25889] netlink: 'syz.1.7913': attribute type 1 has an invalid length. [ 507.525297][T25889] bond16: entered promiscuous mode [ 507.538456][T25889] 8021q: adding VLAN 0 to HW filter on device bond16 [ 507.547603][T25888] tipc: Enabling of bearer rejected, already enabled [ 507.603636][T25894] 8021q: adding VLAN 0 to HW filter on device bond16 [ 507.633027][T25899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7918'. [ 507.643209][T25894] bond16: (slave wireguard1): The slave device specified does not support setting the MAC address [ 507.658790][T25894] bond16: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 507.688793][T25894] bond16: (slave wireguard1): making interface the new active one [ 507.709532][T25894] wireguard1: entered promiscuous mode [ 507.724250][T25894] bond16: (slave wireguard1): Enslaving as an active interface with an up link [ 507.794650][T25904] netlink: 360 bytes leftover after parsing attributes in process `syz.3.7920'. [ 507.873460][T25910] tipc: Enabling of bearer rejected, already enabled [ 507.952704][T25914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.008487][T25921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7926'. [ 508.046914][T25923] tipc: Enabled bearer , priority 0 [ 508.065874][T25923] syzkaller0: entered promiscuous mode [ 508.079682][T25923] syzkaller0: entered allmulticast mode [ 508.146599][T25931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7928'. [ 508.174802][T25923] tipc: Resetting bearer [ 508.213246][T25919] tipc: Resetting bearer [ 508.322132][T25919] tipc: Disabling bearer [ 508.620894][T25958] tipc: Enabled bearer , priority 0 [ 508.631150][T25958] syzkaller0: entered promiscuous mode [ 508.636648][T25958] syzkaller0: entered allmulticast mode [ 508.661421][T25958] tipc: Resetting bearer [ 508.672311][T25955] tipc: Resetting bearer [ 508.710379][T25955] tipc: Disabling bearer [ 508.876611][T25968] IPVS: Scheduler module ip_vs_sip not found [ 508.885737][T25969] tipc: Enabling of bearer rejected, already enabled [ 509.018258][T25982] netlink: 'syz.1.7942': attribute type 23 has an invalid length. [ 509.027115][T25983] wg2: left promiscuous mode [ 509.434777][T26008] tipc: Enabled bearer , priority 0 [ 509.442512][T26008] syzkaller0: entered promiscuous mode [ 509.457423][T26008] syzkaller0: entered allmulticast mode [ 509.483842][T26008] tipc: Resetting bearer [ 509.515940][T26013] Set syz1 is full, maxelem 65536 reached [ 509.532746][T26004] tipc: Resetting bearer [ 509.605134][T26004] tipc: Disabling bearer [ 509.844737][T26031] FAULT_INJECTION: forcing a failure. [ 509.844737][T26031] name failslab, interval 1, probability 0, space 0, times 0 [ 509.897896][T26031] CPU: 1 UID: 0 PID: 26031 Comm: syz.4.7962 Not tainted syzkaller #0 PREEMPT(full) [ 509.897922][T26031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.897933][T26031] Call Trace: [ 509.897941][T26031] [ 509.897950][T26031] dump_stack_lvl+0x189/0x250 [ 509.897975][T26031] ? __pfx____ratelimit+0x10/0x10 [ 509.898000][T26031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.898028][T26031] ? __pfx__printk+0x10/0x10 [ 509.898052][T26031] ? __lock_acquire+0xab9/0xd20 [ 509.898086][T26031] should_fail_ex+0x414/0x560 [ 509.898114][T26031] should_failslab+0xa8/0x100 [ 509.898140][T26031] kmem_cache_alloc_noprof+0x73/0x3c0 [ 509.898162][T26031] ? skb_clone+0x212/0x3a0 [ 509.898186][T26031] skb_clone+0x212/0x3a0 [ 509.898208][T26031] __netlink_deliver_tap+0x404/0x850 [ 509.898245][T26031] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.898270][T26031] netlink_deliver_tap+0x19c/0x1b0 [ 509.898296][T26031] netlink_unicast+0x7fa/0x9e0 [ 509.898327][T26031] ? __pfx_netlink_unicast+0x10/0x10 [ 509.898353][T26031] ? netlink_sendmsg+0x642/0xb30 [ 509.898374][T26031] ? skb_put+0x11b/0x210 [ 509.898395][T26031] netlink_sendmsg+0x805/0xb30 [ 509.898430][T26031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.898458][T26031] ? aa_sock_msg_perm+0xf1/0x1d0 [ 509.898485][T26031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.898504][T26031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.898529][T26031] __sock_sendmsg+0x219/0x270 [ 509.898555][T26031] ____sys_sendmsg+0x505/0x830 [ 509.898581][T26031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.898607][T26031] ? import_iovec+0x74/0xa0 [ 509.898629][T26031] ___sys_sendmsg+0x21f/0x2a0 [ 509.898668][T26031] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.898729][T26031] ? __fget_files+0x2a/0x420 [ 509.898752][T26031] ? __fget_files+0x3a0/0x420 [ 509.898788][T26031] __x64_sys_sendmsg+0x19b/0x260 [ 509.898810][T26031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.898840][T26031] ? __pfx_ksys_write+0x10/0x10 [ 509.898859][T26031] ? rcu_is_watching+0x15/0xb0 [ 509.898883][T26031] ? do_syscall_64+0xbe/0x3b0 [ 509.898912][T26031] do_syscall_64+0xfa/0x3b0 [ 509.898944][T26031] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.898970][T26031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.898987][T26031] ? clear_bhb_loop+0x60/0xb0 [ 509.899009][T26031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.899064][T26031] RIP: 0033:0x7f010fb8ebe9 [ 509.899080][T26031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.899095][T26031] RSP: 002b:00007f0110ad2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.899115][T26031] RAX: ffffffffffffffda RBX: 00007f010fdb5fa0 RCX: 00007f010fb8ebe9 [ 509.899128][T26031] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 509.899139][T26031] RBP: 00007f0110ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 509.899150][T26031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.899162][T26031] R13: 00007f010fdb6038 R14: 00007f010fdb5fa0 R15: 00007ffc992d9fa8 [ 509.899193][T26031] [ 510.209909][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 510.217952][ C1] lec:lec_tx_timeout: lec0 [ 510.223984][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 510.307020][T26042] netlink: 'syz.2.7964': attribute type 25 has an invalid length. [ 510.361724][T26047] netlink: 'syz.4.7967': attribute type 83 has an invalid length. [ 510.606550][T26061] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 510.768752][T26071] sctp: [Deprecated]: syz.4.7978 (pid 26071) Use of int in maxseg socket option. [ 510.768752][T26071] Use struct sctp_assoc_value instead [ 510.831105][T26081] syzkaller1: entered promiscuous mode [ 510.837181][T26081] syzkaller1: entered allmulticast mode [ 510.854532][T26087] __nla_validate_parse: 6 callbacks suppressed [ 510.854549][T26087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7977'. [ 511.304323][T26107] tipc: Enabled bearer , priority 0 [ 511.331186][T26107] syzkaller0: entered promiscuous mode [ 511.354525][T26107] syzkaller0: entered allmulticast mode [ 511.396105][T26119] netlink: 'syz.3.7989': attribute type 5 has an invalid length. [ 511.418251][T26113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.456698][T26107] tipc: Resetting bearer [ 511.507309][T26104] tipc: Resetting bearer [ 511.595764][T26125] IPVS: Scheduler module ip_vs_sip not found [ 511.628813][T26104] tipc: Disabling bearer [ 511.923573][T26148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7998'. [ 512.078529][T26157] syzkaller0: entered promiscuous mode [ 512.097878][T26157] syzkaller0: entered allmulticast mode [ 512.148656][T26162] sctp: [Deprecated]: syz.4.8004 (pid 26162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.148656][T26162] Use struct sctp_sack_info instead [ 512.522133][T26182] netlink: 'syz.1.8009': attribute type 83 has an invalid length. [ 512.701056][T26192] tipc: Enabling of bearer rejected, already enabled [ 512.911414][T26200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8013'. [ 512.955719][T26200] netem: unknown loss type 0 [ 512.976010][T26200] netem: change failed [ 512.999474][T26216] sctp: [Deprecated]: syz.4.8019 (pid 26216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.999474][T26216] Use struct sctp_sack_info instead [ 513.050842][T26200] netlink: 81 bytes leftover after parsing attributes in process `syz.3.8013'. [ 513.081167][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8020'. [ 513.260518][T26232] netlink: 'syz.2.8022': attribute type 83 has an invalid length. [ 513.442307][T26242] netlink: 'syz.4.8025': attribute type 5 has an invalid length. [ 513.528358][T26247] wg2: left promiscuous mode [ 513.533011][T26247] wg2: left allmulticast mode [ 513.754251][T26262] netlink: 'syz.0.8034': attribute type 25 has an invalid length. [ 513.861846][T26268] netlink: 'syz.2.8036': attribute type 83 has an invalid length. [ 514.553184][T26306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8047'. [ 514.776815][T26323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8049'. [ 514.808600][T26325] sctp: [Deprecated]: syz.4.8052 (pid 26325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.808600][T26325] Use struct sctp_sack_info instead [ 514.944649][T26340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8054'. [ 514.949541][T26341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8055'. [ 514.971915][T26340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8054'. [ 515.197136][T26349] bridge_slave_0: entered promiscuous mode [ 515.227443][T26351] tipc: Enabling of bearer rejected, already enabled [ 515.326422][T26356] netlink: 'syz.3.8059': attribute type 4 has an invalid length. [ 515.525792][T26369] FAULT_INJECTION: forcing a failure. [ 515.525792][T26369] name failslab, interval 1, probability 0, space 0, times 0 [ 515.565228][T26369] CPU: 0 UID: 0 PID: 26369 Comm: syz.4.8064 Not tainted syzkaller #0 PREEMPT(full) [ 515.565252][T26369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.565263][T26369] Call Trace: [ 515.565270][T26369] [ 515.565278][T26369] dump_stack_lvl+0x189/0x250 [ 515.565302][T26369] ? __pfx____ratelimit+0x10/0x10 [ 515.565325][T26369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.565344][T26369] ? __pfx__printk+0x10/0x10 [ 515.565368][T26369] ? __lock_acquire+0xab9/0xd20 [ 515.565402][T26369] should_fail_ex+0x414/0x560 [ 515.565438][T26369] should_failslab+0xa8/0x100 [ 515.565465][T26369] kmem_cache_alloc_noprof+0x73/0x3c0 [ 515.565487][T26369] ? skb_clone+0x212/0x3a0 [ 515.565511][T26369] skb_clone+0x212/0x3a0 [ 515.565533][T26369] __netlink_deliver_tap+0x404/0x850 [ 515.565570][T26369] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.565595][T26369] netlink_deliver_tap+0x19c/0x1b0 [ 515.565621][T26369] netlink_unicast+0x7fa/0x9e0 [ 515.565652][T26369] ? __pfx_netlink_unicast+0x10/0x10 [ 515.565676][T26369] ? netlink_sendmsg+0x642/0xb30 [ 515.565696][T26369] ? skb_put+0x11b/0x210 [ 515.565716][T26369] netlink_sendmsg+0x805/0xb30 [ 515.565750][T26369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.565776][T26369] ? aa_sock_msg_perm+0xf1/0x1d0 [ 515.565803][T26369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.565821][T26369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.565844][T26369] __sock_sendmsg+0x219/0x270 [ 515.565869][T26369] ____sys_sendmsg+0x505/0x830 [ 515.565892][T26369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.565920][T26369] ? import_iovec+0x74/0xa0 [ 515.565949][T26369] ___sys_sendmsg+0x21f/0x2a0 [ 515.565968][T26369] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.566024][T26369] ? __fget_files+0x2a/0x420 [ 515.566048][T26369] ? __fget_files+0x3a0/0x420 [ 515.566083][T26369] __x64_sys_sendmsg+0x19b/0x260 [ 515.566105][T26369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.566134][T26369] ? __pfx_ksys_write+0x10/0x10 [ 515.566153][T26369] ? rcu_is_watching+0x15/0xb0 [ 515.566176][T26369] ? do_syscall_64+0xbe/0x3b0 [ 515.566205][T26369] do_syscall_64+0xfa/0x3b0 [ 515.566230][T26369] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.566252][T26369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.566269][T26369] ? clear_bhb_loop+0x60/0xb0 [ 515.566292][T26369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.566309][T26369] RIP: 0033:0x7f010fb8ebe9 [ 515.566326][T26369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.566341][T26369] RSP: 002b:00007f0110ad2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.566360][T26369] RAX: ffffffffffffffda RBX: 00007f010fdb5fa0 RCX: 00007f010fb8ebe9 [ 515.566373][T26369] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 515.566384][T26369] RBP: 00007f0110ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 515.566395][T26369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.566412][T26369] R13: 00007f010fdb6038 R14: 00007f010fdb5fa0 R15: 00007ffc992d9fa8 [ 515.566445][T26369] [ 516.078288][T26387] tipc: Enabling of bearer rejected, already enabled [ 516.249495][T26394] tipc: Enabled bearer , priority 0 [ 516.257691][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6030 ms [ 516.265835][ C1] lec:lec_tx_timeout: lec0 [ 516.270885][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.280738][T26394] syzkaller0: entered promiscuous mode [ 516.297952][T26394] syzkaller0: entered allmulticast mode [ 516.320752][T26394] tipc: Resetting bearer [ 516.348318][T26393] tipc: Resetting bearer [ 516.419468][T26393] tipc: Disabling bearer [ 516.535438][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8080'. [ 516.780047][T26433] netlink: 360 bytes leftover after parsing attributes in process `syz.2.8082'. [ 517.533920][T26477] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8100'. [ 517.572603][T26477] Set syz1 is full, maxelem 65536 reached [ 517.824417][T26493] netlink: 'syz.4.8107': attribute type 25 has an invalid length. [ 517.908074][T26494] tipc: Enabled bearer , priority 0 [ 517.928276][T26494] syzkaller0: entered promiscuous mode [ 517.933875][T26494] syzkaller0: entered allmulticast mode [ 517.994677][T26498] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8109'. [ 518.039255][T26505] netlink: 'syz.0.8110': attribute type 1 has an invalid length. [ 518.081049][T26506] tipc: Resetting bearer [ 518.248192][T26492] tipc: Resetting bearer [ 518.784631][T26492] tipc: Disabling bearer [ 518.923546][T26526] FAULT_INJECTION: forcing a failure. [ 518.923546][T26526] name failslab, interval 1, probability 0, space 0, times 0 [ 518.946871][T26526] CPU: 0 UID: 0 PID: 26526 Comm: syz.0.8117 Not tainted syzkaller #0 PREEMPT(full) [ 518.946898][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.946909][T26526] Call Trace: [ 518.946917][T26526] [ 518.946927][T26526] dump_stack_lvl+0x189/0x250 [ 518.946955][T26526] ? __pfx____ratelimit+0x10/0x10 [ 518.946980][T26526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.947002][T26526] ? __pfx__printk+0x10/0x10 [ 518.947034][T26526] ? __pfx___might_resched+0x10/0x10 [ 518.947053][T26526] should_fail_ex+0x414/0x560 [ 518.947083][T26526] should_failslab+0xa8/0x100 [ 518.947111][T26526] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 518.947136][T26526] ? __alloc_skb+0x112/0x2d0 [ 518.947166][T26526] __alloc_skb+0x112/0x2d0 [ 518.947196][T26526] tipc_nl_compat_dumpit+0x34d/0x7b0 [ 518.947227][T26526] tipc_nl_compat_recv+0x802/0xbe0 [ 518.947253][T26526] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 518.947271][T26526] ? __mutex_trylock_common+0x153/0x260 [ 518.947290][T26526] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 518.947312][T26526] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 518.947329][T26526] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 518.947353][T26526] ? __pfx___mutex_trylock_common+0x10/0x10 [ 518.947371][T26526] ? __local_bh_enable_ip+0x12d/0x1c0 [ 518.947399][T26526] ? trace_contention_end+0x39/0x120 [ 518.947430][T26526] genl_family_rcv_msg_doit+0x212/0x300 [ 518.947460][T26526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 518.947507][T26526] genl_rcv_msg+0x60e/0x790 [ 518.947535][T26526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.947554][T26526] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 518.947577][T26526] ? __asan_memcpy+0x40/0x70 [ 518.947597][T26526] ? __pfx_ref_tracker_free+0x10/0x10 [ 518.947630][T26526] netlink_rcv_skb+0x205/0x470 [ 518.947655][T26526] ? __lock_acquire+0xab9/0xd20 [ 518.947676][T26526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.947695][T26526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.947738][T26526] ? down_read+0x1ad/0x2e0 [ 518.947764][T26526] genl_rcv+0x28/0x40 [ 518.947780][T26526] netlink_unicast+0x82f/0x9e0 [ 518.947818][T26526] ? __pfx_netlink_unicast+0x10/0x10 [ 518.947841][T26526] ? netlink_sendmsg+0x642/0xb30 [ 518.947862][T26526] ? skb_put+0x11b/0x210 [ 518.947884][T26526] netlink_sendmsg+0x805/0xb30 [ 518.947920][T26526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.947949][T26526] ? aa_sock_msg_perm+0xf1/0x1d0 [ 518.947977][T26526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.947996][T26526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.948022][T26526] __sock_sendmsg+0x219/0x270 [ 518.948048][T26526] ____sys_sendmsg+0x505/0x830 [ 518.948074][T26526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.948105][T26526] ? import_iovec+0x74/0xa0 [ 518.948130][T26526] ___sys_sendmsg+0x21f/0x2a0 [ 518.948151][T26526] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.948210][T26526] ? __fget_files+0x2a/0x420 [ 518.948234][T26526] ? __fget_files+0x3a0/0x420 [ 518.948268][T26526] __x64_sys_sendmsg+0x19b/0x260 [ 518.948291][T26526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.948321][T26526] ? __pfx_ksys_write+0x10/0x10 [ 518.948342][T26526] ? rcu_is_watching+0x15/0xb0 [ 518.948367][T26526] ? do_syscall_64+0xbe/0x3b0 [ 518.948395][T26526] do_syscall_64+0xfa/0x3b0 [ 518.948417][T26526] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.948440][T26526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.948459][T26526] ? clear_bhb_loop+0x60/0xb0 [ 518.948482][T26526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.948500][T26526] RIP: 0033:0x7f52c7b8ebe9 [ 518.948517][T26526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.948532][T26526] RSP: 002b:00007f52c5dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.948552][T26526] RAX: ffffffffffffffda RBX: 00007f52c7db5fa0 RCX: 00007f52c7b8ebe9 [ 518.948565][T26526] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 518.948577][T26526] RBP: 00007f52c5dee090 R08: 0000000000000000 R09: 0000000000000000 [ 518.948588][T26526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.948600][T26526] R13: 00007f52c7db6038 R14: 00007f52c7db5fa0 R15: 00007fff727a3938 [ 518.948633][T26526] [ 519.462065][T26535] syz0: rxe_newlink: already configured on lo [ 519.513045][T26535] lo: left promiscuous mode [ 519.566957][T26535] tunl0: left promiscuous mode [ 519.622843][T26535] gre0: left promiscuous mode [ 519.675338][T26535] ip_vti0: left promiscuous mode [ 519.701747][T26535] ip6_vti0: left promiscuous mode [ 519.720172][T26535] sit0: left promiscuous mode [ 519.730673][T26535] ip6tnl0: left promiscuous mode [ 519.737414][T26535] ip6gre0: left promiscuous mode [ 519.744294][T26535] ip6gretap0: left promiscuous mode [ 519.752987][T26535] bond0: left promiscuous mode [ 519.760604][T26535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.768233][T26535] team0: left promiscuous mode [ 519.775052][T26535] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.782672][T26535] dummy0: left promiscuous mode [ 519.790268][T26535] nlmon0: left promiscuous mode [ 519.807863][T26535] caif0: left promiscuous mode [ 519.818226][T26535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.853751][T25462] lo speed is unknown, defaulting to 1000 [ 519.880388][T25462] syz0: Port: 1 Link ACTIVE [ 519.885579][T25462] lo speed is unknown, defaulting to 1000 [ 520.064857][T26558] tipc: Enabling of bearer rejected, already enabled [ 520.124016][T26561] netlink: 'syz.2.8130': attribute type 1 has an invalid length. [ 520.163488][T26564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8131'. [ 520.276079][T26561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8130'. [ 520.301950][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8131'. [ 520.355827][T26578] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8134'. [ 520.590047][T26593] netlink: 'syz.1.8141': attribute type 83 has an invalid length. [ 520.733470][T26600] netlink: 'syz.0.8142': attribute type 1 has an invalid length. [ 520.815204][T26603] tipc: Enabling of bearer rejected, already enabled [ 520.944198][T26612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8142'. [ 521.020076][T26618] netlink: 'syz.4.8149': attribute type 1 has an invalid length. [ 521.033478][T26620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8148'. [ 521.314254][T26636] netlink: 'syz.1.8153': attribute type 83 has an invalid length. [ 521.431106][T26641] netlink: 'syz.3.8155': attribute type 11 has an invalid length. [ 521.440255][T26641] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 521.451235][T26639] Set syz1 is full, maxelem 65536 reached [ 521.721735][T26663] __nla_validate_parse: 4 callbacks suppressed [ 521.721765][T26663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8162'. [ 521.761014][T26661] netlink: 'syz.4.8164': attribute type 83 has an invalid length. [ 521.833604][T26666] tipc: Enabled bearer , priority 0 [ 521.860818][T26666] syzkaller0: entered promiscuous mode [ 521.871131][T26671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8168'. [ 521.890203][T26666] syzkaller0: entered allmulticast mode [ 521.911694][T26666] tipc: Resetting bearer [ 521.945767][T26665] tipc: Resetting bearer [ 522.002395][T26665] tipc: Disabling bearer [ 522.018331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 522.026372][ C1] lec:lec_tx_timeout: lec0 [ 522.031191][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 522.315345][T26696] syzkaller1: entered promiscuous mode [ 522.323905][T26696] syzkaller1: entered allmulticast mode [ 522.342997][T26696] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8177'. [ 522.385496][T26700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8178'. [ 522.736099][T26726] netlink: 'syz.2.8191': attribute type 25 has an invalid length. [ 522.819829][T26728] netlink: 'syz.3.8188': attribute type 10 has an invalid length. [ 522.837493][T26728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8188'. [ 522.867276][T26728] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8188'. [ 522.943154][T26735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8192'. [ 523.048133][T26741] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 523.100156][T26744] netlink: 'syz.4.8195': attribute type 1 has an invalid length. [ 523.255787][T26744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8195'. [ 523.274386][T26754] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 523.389889][T26754] bond12: entered promiscuous mode [ 523.401828][T26754] bond12: entered allmulticast mode [ 523.417206][T26762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8201'. [ 523.433430][T26754] 8021q: adding VLAN 0 to HW filter on device bond12 [ 523.497833][T26768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8202'. [ 523.618165][T26770] netlink: 'syz.0.8203': attribute type 25 has an invalid length. [ 523.732638][T26779] tipc: Enabling of bearer rejected, already enabled [ 523.771047][T26784] netlink: 'syz.1.8210': attribute type 1 has an invalid length. [ 523.883183][T26788] tipc: Enabled bearer , priority 0 [ 523.890905][T26788] syzkaller0: entered promiscuous mode [ 523.896402][T26788] syzkaller0: entered allmulticast mode [ 523.988149][T26788] tipc: Resetting bearer [ 524.005112][T26787] tipc: Resetting bearer [ 524.094745][T26787] tipc: Disabling bearer [ 524.294418][T26815] Set syz1 is full, maxelem 65536 reached [ 524.420925][T26822] tipc: Enabling of bearer rejected, already enabled [ 524.880616][T26854] tipc: Enabled bearer , priority 0 [ 524.890060][T26854] syzkaller0: entered promiscuous mode [ 524.897492][T26854] syzkaller0: entered allmulticast mode [ 524.945689][T26854] tipc: Resetting bearer [ 524.980705][T26853] tipc: Resetting bearer [ 525.015788][T26853] tipc: Disabling bearer [ 525.263665][T26879] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 525.286983][T26879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.323726][T26883] FAULT_INJECTION: forcing a failure. [ 525.323726][T26883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.345386][T26883] CPU: 1 UID: 0 PID: 26883 Comm: syz.0.8247 Not tainted syzkaller #0 PREEMPT(full) [ 525.345412][T26883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.345424][T26883] Call Trace: [ 525.345432][T26883] [ 525.345441][T26883] dump_stack_lvl+0x189/0x250 [ 525.345469][T26883] ? __pfx____ratelimit+0x10/0x10 [ 525.345493][T26883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.345515][T26883] ? __pfx__printk+0x10/0x10 [ 525.345540][T26883] ? __might_fault+0xb0/0x130 [ 525.345577][T26883] should_fail_ex+0x414/0x560 [ 525.345606][T26883] _copy_from_user+0x2d/0xb0 [ 525.345628][T26883] ___sys_sendmsg+0x158/0x2a0 [ 525.345651][T26883] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.345710][T26883] ? __fget_files+0x2a/0x420 [ 525.345735][T26883] ? __fget_files+0x3a0/0x420 [ 525.345772][T26883] __x64_sys_sendmsg+0x19b/0x260 [ 525.345795][T26883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.345825][T26883] ? __pfx_ksys_write+0x10/0x10 [ 525.345845][T26883] ? rcu_is_watching+0x15/0xb0 [ 525.345871][T26883] ? do_syscall_64+0xbe/0x3b0 [ 525.345899][T26883] do_syscall_64+0xfa/0x3b0 [ 525.345922][T26883] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.345945][T26883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.345964][T26883] ? clear_bhb_loop+0x60/0xb0 [ 525.345987][T26883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.346005][T26883] RIP: 0033:0x7f52c7b8ebe9 [ 525.346023][T26883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.346039][T26883] RSP: 002b:00007f52c5dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.346060][T26883] RAX: ffffffffffffffda RBX: 00007f52c7db5fa0 RCX: 00007f52c7b8ebe9 [ 525.346073][T26883] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 525.346085][T26883] RBP: 00007f52c5dee090 R08: 0000000000000000 R09: 0000000000000000 [ 525.346097][T26883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.346107][T26883] R13: 00007f52c7db6038 R14: 00007f52c7db5fa0 R15: 00007fff727a3938 [ 525.346137][T26883] [ 525.863564][T26903] Set syz1 is full, maxelem 65536 reached [ 526.082449][T26920] tipc: Enabling of bearer rejected, already enabled [ 526.286347][T26929] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 526.503948][T26941] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 526.516367][T26943] tipc: Enabling of bearer rejected, already enabled [ 526.596434][T26945] syzkaller0: entered promiscuous mode [ 526.602154][T26945] syzkaller0: entered allmulticast mode [ 526.626378][T26949] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 526.939847][T26975] validate_nla: 5 callbacks suppressed [ 526.939868][T26975] netlink: 'syz.4.8280': attribute type 17 has an invalid length. [ 526.983568][T26975] __nla_validate_parse: 14 callbacks suppressed [ 526.984128][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8280'. [ 526.988088][T26978] tipc: Enabled bearer , priority 0 [ 527.014580][T26975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8280'. [ 527.037724][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 527.045785][ C1] lec:lec_tx_timeout: lec0 [ 527.047359][T26981] syzkaller0: entered promiscuous mode [ 527.050763][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.060628][T26981] syzkaller0: entered allmulticast mode [ 527.078619][T26983] tipc: Enabling of bearer rejected, already enabled [ 527.113202][T26984] IPv6: sit4: Disabled Multicast RS [ 527.121945][T26984] sit4: entered allmulticast mode [ 527.139231][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 527.183709][T26978] tipc: Resetting bearer [ 527.210432][T26977] tipc: Resetting bearer [ 527.248257][T26977] tipc: Disabling bearer [ 527.272506][T26990] tipc: Enabling of bearer rejected, already enabled [ 527.444752][T27005] sctp: [Deprecated]: syz.3.8291 (pid 27005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.444752][T27005] Use struct sctp_sack_info instead [ 527.516241][T27014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8290'. [ 527.542674][T27008] netlink: 198220 bytes leftover after parsing attributes in process `syz.2.8289'. [ 527.548060][T27016] syzkaller0: left promiscuous mode [ 527.557541][T27016] tipc: Resetting bearer [ 527.776075][T27021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8294'. [ 527.918534][T27029] tipc: Enabling of bearer rejected, failed to enable media [ 527.945751][T27029] syzkaller0: entered promiscuous mode [ 527.957023][T27029] tipc: Resetting bearer [ 527.965926][T27037] tipc: Enabled bearer , priority 0 [ 527.981464][T27037] syzkaller0: entered promiscuous mode [ 527.987518][T27037] syzkaller0: entered allmulticast mode [ 528.011901][T27037] netem: change failed [ 528.043723][T27037] tipc: Resetting bearer [ 528.071653][T27036] tipc: Resetting bearer [ 528.119951][T27036] tipc: Disabling bearer [ 528.152501][T27047] netlink: 'syz.4.8302': attribute type 1 has an invalid length. [ 528.259480][T27047] bond14 (unregistering): Released all slaves [ 528.333380][T27053] ip6tnl3: entered promiscuous mode [ 528.372680][T27053] ip6tnl3: entered allmulticast mode [ 528.404268][T27067] sctp: [Deprecated]: syz.2.8305 (pid 27067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.404268][T27067] Use struct sctp_sack_info instead [ 528.463392][T27056] netlink: 'syz.1.8304': attribute type 5 has an invalid length. [ 528.683551][T27086] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 528.691736][T27087] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8315'. [ 528.703186][T27081] tipc: Enabling of bearer rejected, failed to enable media [ 528.716129][T27081] syzkaller0: entered promiscuous mode [ 528.723818][T27081] syzkaller0: entered allmulticast mode [ 528.837418][T27094] tipc: Enabling of bearer rejected, already enabled [ 528.926560][T27096] netlink: 'syz.3.8317': attribute type 25 has an invalid length. [ 529.007445][T27099] tipc: Enabling of bearer rejected, already enabled [ 529.256532][T27119] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8327'. [ 529.320098][T27122] sctp: [Deprecated]: syz.2.8325 (pid 27122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.320098][T27122] Use struct sctp_sack_info instead [ 529.523873][T27129] tipc: Enabled bearer , priority 0 [ 529.538844][T27129] syzkaller0: entered promiscuous mode [ 529.544904][T27129] syzkaller0: entered allmulticast mode [ 529.571224][T27129] netem: change failed [ 529.586107][T27129] tipc: Resetting bearer [ 529.607868][T27128] tipc: Resetting bearer [ 529.630291][T27134] Bluetooth: MGMT ver 1.23 [ 529.635426][T27134] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8332'. [ 529.655706][T27141] netlink: 'syz.2.8334': attribute type 16 has an invalid length. [ 529.667201][T27128] tipc: Disabling bearer [ 529.670963][T27141] netlink: 'syz.2.8334': attribute type 17 has an invalid length. [ 529.740488][T27141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.241162][T27171] FAULT_INJECTION: forcing a failure. [ 530.241162][T27171] name failslab, interval 1, probability 0, space 0, times 0 [ 530.266506][T27171] CPU: 0 UID: 0 PID: 27171 Comm: syz.2.8346 Not tainted syzkaller #0 PREEMPT(full) [ 530.266531][T27171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.266543][T27171] Call Trace: [ 530.266551][T27171] [ 530.266560][T27171] dump_stack_lvl+0x189/0x250 [ 530.266587][T27171] ? __pfx____ratelimit+0x10/0x10 [ 530.266611][T27171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.266631][T27171] ? __pfx__printk+0x10/0x10 [ 530.266661][T27171] ? __pfx___might_resched+0x10/0x10 [ 530.266678][T27171] ? fs_reclaim_acquire+0x7d/0x100 [ 530.266708][T27171] should_fail_ex+0x414/0x560 [ 530.266736][T27171] should_failslab+0xa8/0x100 [ 530.266761][T27171] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 530.266785][T27171] ? __alloc_skb+0x112/0x2d0 [ 530.266814][T27171] __alloc_skb+0x112/0x2d0 [ 530.266842][T27171] netlink_ack+0x146/0xa50 [ 530.266864][T27171] ? sock_diag_lock_handler+0x19/0x290 [ 530.266896][T27171] ? sock_diag_lock_handler+0x19/0x290 [ 530.266923][T27171] ? sock_diag_rcv_msg+0x4ed/0x600 [ 530.266950][T27171] netlink_rcv_skb+0x28c/0x470 [ 530.266976][T27171] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 530.267002][T27171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.267039][T27171] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.267072][T27171] netlink_unicast+0x82f/0x9e0 [ 530.267105][T27171] ? __pfx_netlink_unicast+0x10/0x10 [ 530.267131][T27171] ? netlink_sendmsg+0x642/0xb30 [ 530.267153][T27171] ? skb_put+0x11b/0x210 [ 530.267174][T27171] netlink_sendmsg+0x805/0xb30 [ 530.267209][T27171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.267238][T27171] ? aa_sock_msg_perm+0xf1/0x1d0 [ 530.267267][T27171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.267286][T27171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.267312][T27171] __sock_sendmsg+0x219/0x270 [ 530.267338][T27171] ____sys_sendmsg+0x505/0x830 [ 530.267363][T27171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.267393][T27171] ? import_iovec+0x74/0xa0 [ 530.267418][T27171] ___sys_sendmsg+0x21f/0x2a0 [ 530.267440][T27171] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.267502][T27171] ? __fget_files+0x2a/0x420 [ 530.267526][T27171] ? __fget_files+0x3a0/0x420 [ 530.267563][T27171] __x64_sys_sendmsg+0x19b/0x260 [ 530.267585][T27171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.267616][T27171] ? __pfx_ksys_write+0x10/0x10 [ 530.267636][T27171] ? rcu_is_watching+0x15/0xb0 [ 530.267659][T27171] ? do_syscall_64+0xbe/0x3b0 [ 530.267684][T27171] do_syscall_64+0xfa/0x3b0 [ 530.267705][T27171] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.267727][T27171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.267744][T27171] ? clear_bhb_loop+0x60/0xb0 [ 530.267765][T27171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.267782][T27171] RIP: 0033:0x7fbd0cf8ebe9 [ 530.267799][T27171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.267814][T27171] RSP: 002b:00007fbd0de96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.267835][T27171] RAX: ffffffffffffffda RBX: 00007fbd0d1b5fa0 RCX: 00007fbd0cf8ebe9 [ 530.267849][T27171] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 530.267860][T27171] RBP: 00007fbd0de96090 R08: 0000000000000000 R09: 0000000000000000 [ 530.267878][T27171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.267889][T27171] R13: 00007fbd0d1b6038 R14: 00007fbd0d1b5fa0 R15: 00007ffd20fbf6d8 [ 530.267920][T27171] [ 530.718398][T27181] netlink: 'syz.1.8350': attribute type 1 has an invalid length. [ 530.789027][T27181] 8021q: adding VLAN 0 to HW filter on device bond19 [ 530.972831][T27200] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8357'. [ 530.986798][T27201] netlink: 'syz.4.8355': attribute type 5 has an invalid length. [ 531.010916][T27204] sctp: [Deprecated]: syz.3.8356 (pid 27204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.010916][T27204] Use struct sctp_sack_info instead [ 531.041190][T27201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8355'. [ 531.373823][T27227] netlink: 'syz.0.8359': attribute type 10 has an invalid length. [ 531.468872][T25459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.477438][T25459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.582894][T27227] bond6: (slave gretap2): Releasing active interface [ 531.736026][T27227] bond8: (slave bond9): Releasing backup interface [ 531.753666][T27227] bond10: (slave bond11): Releasing backup interface [ 531.778442][T25459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.892011][T27254] FAULT_INJECTION: forcing a failure. [ 531.892011][T27254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.931035][T27254] CPU: 0 UID: 0 PID: 27254 Comm: syz.2.8366 Not tainted syzkaller #0 PREEMPT(full) [ 531.931061][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.931072][T27254] Call Trace: [ 531.931080][T27254] [ 531.931089][T27254] dump_stack_lvl+0x189/0x250 [ 531.931116][T27254] ? __pfx____ratelimit+0x10/0x10 [ 531.931139][T27254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.931159][T27254] ? __pfx__printk+0x10/0x10 [ 531.931197][T27254] should_fail_ex+0x414/0x560 [ 531.931226][T27254] _copy_to_user+0x31/0xb0 [ 531.931249][T27254] simple_read_from_buffer+0xe1/0x170 [ 531.931279][T27254] proc_fail_nth_read+0x1b3/0x220 [ 531.931301][T27254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.931323][T27254] ? rw_verify_area+0x2a6/0x4d0 [ 531.931344][T27254] ? __lock_acquire+0xab9/0xd20 [ 531.931367][T27254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.931388][T27254] vfs_read+0x200/0xa30 [ 531.931410][T27254] ? fdget_pos+0x247/0x320 [ 531.931430][T27254] ? __pfx___mutex_lock+0x10/0x10 [ 531.931454][T27254] ? __pfx_vfs_read+0x10/0x10 [ 531.931478][T27254] ? __fget_files+0x2a/0x420 [ 531.931508][T27254] ? __fget_files+0x3a0/0x420 [ 531.931531][T27254] ? __fget_files+0x2a/0x420 [ 531.931566][T27254] ksys_read+0x145/0x250 [ 531.931591][T27254] ? __pfx_ksys_read+0x10/0x10 [ 531.931611][T27254] ? rcu_is_watching+0x15/0xb0 [ 531.931636][T27254] ? do_syscall_64+0xbe/0x3b0 [ 531.931664][T27254] do_syscall_64+0xfa/0x3b0 [ 531.931694][T27254] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.931717][T27254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.931736][T27254] ? clear_bhb_loop+0x60/0xb0 [ 531.931758][T27254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.931776][T27254] RIP: 0033:0x7fbd0cf8d5fc [ 531.931794][T27254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 531.931811][T27254] RSP: 002b:00007fbd0de96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.931831][T27254] RAX: ffffffffffffffda RBX: 00007fbd0d1b5fa0 RCX: 00007fbd0cf8d5fc [ 531.931845][T27254] RDX: 000000000000000f RSI: 00007fbd0de960a0 RDI: 0000000000000004 [ 531.931857][T27254] RBP: 00007fbd0de96090 R08: 0000000000000000 R09: 0000000000000000 [ 531.931869][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.931881][T27254] R13: 00007fbd0d1b6038 R14: 00007fbd0d1b5fa0 R15: 00007ffd20fbf6d8 [ 531.931913][T27254] [ 532.067780][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 532.184066][ C1] lec:lec_tx_timeout: lec0 [ 532.190639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 532.403283][T27281] __nla_validate_parse: 3 callbacks suppressed [ 532.403302][T27281] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8374'. [ 532.499230][T25459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.533622][T27286] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8375'. [ 532.591734][T27288] netlink: 'syz.3.8376': attribute type 25 has an invalid length. [ 533.451403][T27325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8385'. [ 533.496068][T27325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8385'. [ 533.596113][T27334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8388'. [ 533.636138][T27330] netlink: 'syz.3.8387': attribute type 5 has an invalid length. [ 533.697247][T27331] netlink: 'syz.4.8385': attribute type 6 has an invalid length. [ 533.705322][T27339] tipc: Enabled bearer , priority 0 [ 533.712360][T27339] syzkaller0: entered promiscuous mode [ 533.712382][T27339] syzkaller0: entered allmulticast mode [ 533.770248][T27339] tipc: Resetting bearer [ 533.816648][T27338] tipc: Resetting bearer [ 533.842431][T27345] netlink: 'syz.3.8390': attribute type 1 has an invalid length. [ 533.868470][T27338] tipc: Disabling bearer [ 534.022425][T27345] 8021q: adding VLAN 0 to HW filter on device bond16 [ 534.061130][T27349] bond16: (slave veth9): Enslaving as an active interface with a down link [ 534.201953][T27345] vlan0: entered allmulticast mode [ 534.238566][T27345] bond16: (slave vlan0): Opening slave failed [ 534.896915][T27398] tipc: Enabled bearer , priority 0 [ 534.935960][T27398] syzkaller0: entered promiscuous mode [ 534.961506][T27398] syzkaller0: entered allmulticast mode [ 535.018121][T27398] tipc: Resetting bearer [ 535.040336][T27396] tipc: Resetting bearer [ 535.079798][T27396] tipc: Disabling bearer [ 535.086905][T27408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8400'. [ 535.196048][T27412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8402'. [ 535.236506][T27415] netlink: 360 bytes leftover after parsing attributes in process `syz.4.8403'. [ 535.280439][T27418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.333957][T27420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8406'. [ 535.373118][T27424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8407'. [ 535.422802][T27425] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.443739][T27425] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 535.450023][T27426] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 535.674375][T27425] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.718049][T27425] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 535.767539][T27450] FAULT_INJECTION: forcing a failure. [ 535.767539][T27450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.805801][T27425] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.825519][T27450] CPU: 0 UID: 0 PID: 27450 Comm: syz.1.8413 Not tainted syzkaller #0 PREEMPT(full) [ 535.825547][T27450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.825558][T27450] Call Trace: [ 535.825566][T27450] [ 535.825575][T27450] dump_stack_lvl+0x189/0x250 [ 535.825602][T27450] ? __pfx____ratelimit+0x10/0x10 [ 535.825627][T27450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.825648][T27450] ? __pfx__printk+0x10/0x10 [ 535.825673][T27450] ? __might_fault+0xb0/0x130 [ 535.825710][T27450] should_fail_ex+0x414/0x560 [ 535.825739][T27450] _copy_from_user+0x2d/0xb0 [ 535.825761][T27450] ___sys_sendmsg+0x158/0x2a0 [ 535.825784][T27450] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.825842][T27450] ? __fget_files+0x2a/0x420 [ 535.825867][T27450] ? __fget_files+0x3a0/0x420 [ 535.825903][T27450] __x64_sys_sendmsg+0x19b/0x260 [ 535.825926][T27450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.825956][T27450] ? __pfx_ksys_write+0x10/0x10 [ 535.825985][T27450] ? do_syscall_64+0xbe/0x3b0 [ 535.826013][T27450] do_syscall_64+0xfa/0x3b0 [ 535.826035][T27450] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.826065][T27450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.826084][T27450] ? clear_bhb_loop+0x60/0xb0 [ 535.826107][T27450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.826125][T27450] RIP: 0033:0x7fa1d458ebe9 [ 535.826143][T27450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.826159][T27450] RSP: 002b:00007fa1d54a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.826180][T27450] RAX: ffffffffffffffda RBX: 00007fa1d47b5fa0 RCX: 00007fa1d458ebe9 [ 535.826194][T27450] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 535.826207][T27450] RBP: 00007fa1d54a0090 R08: 0000000000000000 R09: 0000000000000000 [ 535.826219][T27450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.826231][T27450] R13: 00007fa1d47b6038 R14: 00007fa1d47b5fa0 R15: 00007fffc0ffece8 [ 535.826263][T27450] [ 535.826506][T27425] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 535.927143][T27456] netlink: 'syz.3.8418': attribute type 1 has an invalid length. [ 536.061588][T27456] netlink: 'syz.3.8418': attribute type 4 has an invalid length. [ 536.100880][T27425] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.131701][T27425] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 536.396891][T27481] netlink: 'syz.3.8429': attribute type 16 has an invalid length. [ 536.411011][ T50] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.417457][T27481] netlink: 'syz.3.8429': attribute type 17 has an invalid length. [ 536.424793][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 536.457331][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.471976][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 536.484952][T27479] tipc: Enabled bearer , priority 0 [ 536.526238][T27487] FAULT_INJECTION: forcing a failure. [ 536.526238][T27487] name failslab, interval 1, probability 0, space 0, times 0 [ 536.526533][T27481] 1ªî{X¹¦: left allmulticast mode [ 536.566355][T27487] CPU: 0 UID: 0 PID: 27487 Comm: syz.2.8431 Not tainted syzkaller #0 PREEMPT(full) [ 536.566380][T27487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.566392][T27487] Call Trace: [ 536.566399][T27487] [ 536.566408][T27487] dump_stack_lvl+0x189/0x250 [ 536.566433][T27487] ? __pfx____ratelimit+0x10/0x10 [ 536.566457][T27487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.566476][T27487] ? __pfx__printk+0x10/0x10 [ 536.566505][T27487] ? __pfx___might_resched+0x10/0x10 [ 536.566527][T27487] should_fail_ex+0x414/0x560 [ 536.566556][T27487] should_failslab+0xa8/0x100 [ 536.566584][T27487] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 536.566609][T27487] ? __alloc_skb+0x112/0x2d0 [ 536.566631][T27487] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 536.566657][T27487] __alloc_skb+0x112/0x2d0 [ 536.566685][T27487] pfkey_sendmsg+0x1dd/0x1090 [ 536.566718][T27487] ? __pfx___might_resched+0x10/0x10 [ 536.566733][T27487] ? __lock_acquire+0xab9/0xd20 [ 536.566762][T27487] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 536.566793][T27487] ? aa_sk_perm+0x81e/0x950 [ 536.566822][T27487] ? __pfx_aa_sk_perm+0x10/0x10 [ 536.566844][T27487] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 536.566870][T27487] ? aa_sock_msg_perm+0xf1/0x1d0 [ 536.566898][T27487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.566917][T27487] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 536.566943][T27487] __sock_sendmsg+0x219/0x270 [ 536.566968][T27487] ____sys_sendmsg+0x505/0x830 [ 536.566992][T27487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.567021][T27487] ? import_iovec+0x74/0xa0 [ 536.567046][T27487] ___sys_sendmsg+0x21f/0x2a0 [ 536.567067][T27487] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.567119][T27487] ? __fget_files+0x2a/0x420 [ 536.567140][T27487] ? __fget_files+0x3a0/0x420 [ 536.567167][T27487] __x64_sys_sendmsg+0x19b/0x260 [ 536.567187][T27487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.567222][T27487] ? __pfx_ksys_write+0x10/0x10 [ 536.567243][T27487] ? rcu_is_watching+0x15/0xb0 [ 536.567267][T27487] ? do_syscall_64+0xbe/0x3b0 [ 536.567294][T27487] do_syscall_64+0xfa/0x3b0 [ 536.567316][T27487] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.567338][T27487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.567357][T27487] ? clear_bhb_loop+0x60/0xb0 [ 536.567380][T27487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.567398][T27487] RIP: 0033:0x7fbd0cf8ebe9 [ 536.567414][T27487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.567431][T27487] RSP: 002b:00007fbd0de96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.567451][T27487] RAX: ffffffffffffffda RBX: 00007fbd0d1b5fa0 RCX: 00007fbd0cf8ebe9 [ 536.567465][T27487] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 536.567476][T27487] RBP: 00007fbd0de96090 R08: 0000000000000000 R09: 0000000000000000 [ 536.567488][T27487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.567499][T27487] R13: 00007fbd0d1b6038 R14: 00007fbd0d1b5fa0 R15: 00007ffd20fbf6d8 [ 536.567531][T27487] [ 536.650831][T27492] Set syz1 is full, maxelem 65536 reached [ 536.880249][T27481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.896786][T27479] syzkaller0: entered promiscuous mode [ 536.904475][T27479] syzkaller0: entered allmulticast mode [ 537.010183][T27496] tipc: Resetting bearer [ 537.047419][T12480] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.070905][T12480] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 537.091676][T12480] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.112512][T12480] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 537.133364][T27477] tipc: Resetting bearer [ 537.159747][T27477] tipc: Disabling bearer [ 537.170271][T27507] tipc: New replicast peer: 255.255.255.255 [ 537.176735][T27507] tipc: Enabled bearer , priority 10 [ 537.211291][T27513] tipc: Enabled bearer , priority 0 [ 537.219203][T27513] syzkaller0: entered promiscuous mode [ 537.258079][T27513] syzkaller0: entered allmulticast mode [ 537.345806][T27515] tipc: Resetting bearer [ 537.360764][T27511] tipc: Resetting bearer [ 537.364283][T27522] Set syz1 is full, maxelem 65536 reached [ 537.426827][T27511] tipc: Disabling bearer [ 537.474672][T27523] netlink: 'syz.4.8443': attribute type 10 has an invalid length. [ 537.492336][T27519] tipc: Enabling of bearer rejected, already enabled [ 537.560056][T27536] netlink: 'syz.0.8447': attribute type 10 has an invalid length. [ 537.684553][T27545] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 537.901939][T27560] __nla_validate_parse: 43 callbacks suppressed [ 537.901961][T27560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8453'. [ 537.937716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 537.945786][ C1] lec:lec_tx_timeout: lec0 [ 537.951014][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 538.071121][T27569] netlink: 'syz.1.8458': attribute type 1 has an invalid length. [ 538.090254][T27569] netlink: 'syz.1.8458': attribute type 4 has an invalid length. [ 538.099090][T27570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8457'. [ 538.117907][T27569] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8458'. [ 538.199792][T27575] tipc: Enabling of bearer rejected, already enabled [ 538.299089][T27584] veth0: entered promiscuous mode [ 538.314282][T27586] [ 538.316646][T27586] ====================================================== [ 538.323851][T27586] WARNING: possible circular locking dependency detected [ 538.330883][T27586] syzkaller #0 Not tainted [ 538.335296][T27586] ------------------------------------------------------ [ 538.342322][T27586] syz.3.8461/27586 is trying to acquire lock: [ 538.348390][T27586] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 538.357550][T27586] [ 538.357550][T27586] but task is already holding lock: [ 538.364915][T27586] ffff88806f569170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 538.374131][T27586] [ 538.374131][T27586] which lock already depends on the new lock. [ 538.374131][T27586] [ 538.384515][T27586] [ 538.384515][T27586] the existing dependency chain (in reverse order) is: [ 538.393507][T27586] [ 538.393507][T27586] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 538.401568][T27586] lock_acquire+0x120/0x360 [ 538.406592][T27586] _raw_spin_lock_bh+0x36/0x50 [ 538.411862][T27586] nr_rt_device_down+0x12a/0x720 [ 538.417307][T27586] nr_device_event+0x137/0x150 [ 538.422671][T27586] notifier_call_chain+0x1b3/0x3e0 [ 538.428290][T27586] __dev_notify_flags+0x18d/0x2e0 [ 538.433907][T27586] netif_change_flags+0xe8/0x1a0 [ 538.439346][T27586] dev_change_flags+0x130/0x260 [ 538.444715][T27586] dev_ioctl+0x7b4/0x1150 [ 538.449749][T27586] sock_do_ioctl+0x22c/0x300 [ 538.454865][T27586] sock_ioctl+0x576/0x790 [ 538.459707][T27586] __se_sys_ioctl+0xfc/0x170 [ 538.464819][T27586] do_syscall_64+0xfa/0x3b0 [ 538.469836][T27586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.476237][T27586] [ 538.476237][T27586] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 538.484136][T27586] lock_acquire+0x120/0x360 [ 538.489150][T27586] _raw_spin_lock_bh+0x36/0x50 [ 538.494420][T27586] nr_rt_device_down+0xa9/0x720 [ 538.499774][T27586] nr_device_event+0x137/0x150 [ 538.505050][T27586] notifier_call_chain+0x1b3/0x3e0 [ 538.510667][T27586] netif_close_many+0x29c/0x410 [ 538.516030][T27586] netif_close+0x158/0x210 [ 538.520953][T27586] dev_close+0x10a/0x220 [ 538.525704][T27586] bpq_device_event+0x377/0x6a0 [ 538.531093][T27586] notifier_call_chain+0x1b3/0x3e0 [ 538.536708][T27586] netif_close_many+0x29c/0x410 [ 538.542074][T27586] netif_close+0x158/0x210 [ 538.547015][T27586] dev_close+0x10a/0x220 [ 538.551774][T27586] bond_setup_by_slave+0x5f/0x3f0 [ 538.557316][T27586] bond_enslave+0x7a0/0x3a20 [ 538.562496][T27586] bond_do_ioctl+0x635/0x9b0 [ 538.567604][T27586] bond_siocdevprivate+0x17e/0x350 [ 538.573233][T27586] dev_ifsioc+0xb54/0xf00 [ 538.578072][T27586] dev_ioctl+0x84c/0x1150 [ 538.582912][T27586] sock_ioctl+0x719/0x790 [ 538.587747][T27586] __se_sys_ioctl+0xfc/0x170 [ 538.592843][T27586] do_syscall_64+0xfa/0x3b0 [ 538.597853][T27586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.604252][T27586] [ 538.604252][T27586] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 538.612228][T27586] validate_chain+0xb9b/0x2140 [ 538.617584][T27586] __lock_acquire+0xab9/0xd20 [ 538.622782][T27586] lock_acquire+0x120/0x360 [ 538.627796][T27586] _raw_spin_lock_bh+0x36/0x50 [ 538.633078][T27586] nr_rt_ioctl+0x390/0xd50 [ 538.638019][T27586] sock_do_ioctl+0xdc/0x300 [ 538.643044][T27586] sock_ioctl+0x576/0x790 [ 538.647980][T27586] __se_sys_ioctl+0xfc/0x170 [ 538.653094][T27586] do_syscall_64+0xfa/0x3b0 [ 538.658112][T27586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.664509][T27586] [ 538.664509][T27586] other info that might help us debug this: [ 538.664509][T27586] [ 538.674730][T27586] Chain exists of: [ 538.674730][T27586] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 538.674730][T27586] [ 538.688532][T27586] Possible unsafe locking scenario: [ 538.688532][T27586] [ 538.695969][T27586] CPU0 CPU1 [ 538.701333][T27586] ---- ---- [ 538.706685][T27586] lock(&nr_node->node_lock); [ 538.711434][T27586] lock(nr_node_list_lock); [ 538.718528][T27586] lock(&nr_node->node_lock); [ 538.725797][T27586] lock(nr_neigh_list_lock); [ 538.730460][T27586] [ 538.730460][T27586] *** DEADLOCK *** [ 538.730460][T27586] [ 538.738587][T27586] 2 locks held by syz.3.8461/27586: [ 538.743771][T27586] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 538.753241][T27586] #1: ffff88806f569170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 538.762886][T27586] [ 538.762886][T27586] stack backtrace: [ 538.768844][T27586] CPU: 0 UID: 0 PID: 27586 Comm: syz.3.8461 Not tainted syzkaller #0 PREEMPT(full) [ 538.768861][T27586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.768870][T27586] Call Trace: [ 538.768878][T27586] [ 538.768885][T27586] dump_stack_lvl+0x189/0x250 [ 538.768906][T27586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.768922][T27586] ? __pfx__printk+0x10/0x10 [ 538.768939][T27586] ? stack_trace_save+0x9c/0xe0 [ 538.768959][T27586] print_circular_bug+0x2ee/0x310 [ 538.768976][T27586] check_noncircular+0x134/0x160 [ 538.768998][T27586] validate_chain+0xb9b/0x2140 [ 538.769016][T27586] ? look_up_lock_class+0x74/0x170 [ 538.769035][T27586] ? register_lock_class+0x51/0x320 [ 538.769056][T27586] __lock_acquire+0xab9/0xd20 [ 538.769076][T27586] ? nr_rt_ioctl+0x390/0xd50 [ 538.769092][T27586] lock_acquire+0x120/0x360 [ 538.769110][T27586] ? nr_rt_ioctl+0x390/0xd50 [ 538.769126][T27586] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 538.769143][T27586] ? nr_rt_ioctl+0x390/0xd50 [ 538.769158][T27586] _raw_spin_lock_bh+0x36/0x50 [ 538.769175][T27586] ? nr_rt_ioctl+0x390/0xd50 [ 538.769189][T27586] nr_rt_ioctl+0x390/0xd50 [ 538.769209][T27586] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 538.769228][T27586] ? apparmor_capable+0x137/0x1b0 [ 538.769247][T27586] ? capable+0x89/0xe0 [ 538.769260][T27586] ? nr_ioctl+0x1b1/0x3b0 [ 538.769273][T27586] sock_do_ioctl+0xdc/0x300 [ 538.769291][T27586] ? __pfx_sock_do_ioctl+0x10/0x10 [ 538.769307][T27586] ? __lock_acquire+0xab9/0xd20 [ 538.769330][T27586] sock_ioctl+0x576/0x790 [ 538.769346][T27586] ? __pfx_sock_ioctl+0x10/0x10 [ 538.769361][T27586] ? __fget_files+0x2a/0x420 [ 538.769381][T27586] ? __fget_files+0x3a0/0x420 [ 538.769399][T27586] ? __fget_files+0x2a/0x420 [ 538.769419][T27586] ? bpf_lsm_file_ioctl+0x9/0x20 [ 538.769435][T27586] ? __pfx_sock_ioctl+0x10/0x10 [ 538.769450][T27586] __se_sys_ioctl+0xfc/0x170 [ 538.769467][T27586] do_syscall_64+0xfa/0x3b0 [ 538.769485][T27586] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.769502][T27586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.769516][T27586] ? clear_bhb_loop+0x60/0xb0 [ 538.769531][T27586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.769545][T27586] RIP: 0033:0x7f1d4178ebe9 [ 538.769558][T27586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.769572][T27586] RSP: 002b:00007f1d42680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.769588][T27586] RAX: ffffffffffffffda RBX: 00007f1d419b6180 RCX: 00007f1d4178ebe9 [ 538.769598][T27586] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 538.769607][T27586] RBP: 00007f1d41811e19 R08: 0000000000000000 R09: 0000000000000000 [ 538.769616][T27586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.769625][T27586] R13: 00007f1d419b6218 R14: 00007f1d419b6180 R15: 00007ffcee7a5db8 [ 538.769642][T27586] [ 539.093734][T27585] gtp0: entered promiscuous mode [ 539.121546][T27580] veth0: left promiscuous mode [ 542.957763][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 542.965817][ C1] lec:lec_tx_timeout: lec0 [ 542.970683][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 547.977744][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 547.985886][ C1] lec:lec_tx_timeout: lec0 [ 547.990536][ C1] lec:lec_start_xmit: lec0:No lecd attached