last executing test programs: 3.126649676s ago: executing program 0 (id=10296): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0601000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000200"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="34008000680001000000000000000000000000000000000000000000020000000000b45cbe"], 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000040)=0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) pread64(r1, &(0x7f0000000080)=""/53, 0x35, 0x7ff) 2.888224523s ago: executing program 1 (id=10299): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'pimreg0\x00', 0x1}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000100)={@empty, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@x25={0x805, {0x3, 0x0, 0xf3, "7b4d0455506b7480904c463c05e754a457142eb6df45d1f3d95e8f5f90cc33590bf165a37acd680f729f15a45239868dbfb322d115f171554fe62136febf462e1a32a4d45a4666b9b2a311975c6823ee7b202d35ab0c7b57727c1c0386c87269801cdbb19ab91f3ae11652da64f72a"}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r1, 0x0, 0x40040) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001340), 0x10) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x28, r2, 0x3, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 4) 2.702281908s ago: executing program 0 (id=10301): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="183200ad00155a996c000016000000000000000000", @ANYRES32=0x0], 0x18}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000000)={0x1, 0x2000001}, 0x8) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x4, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socket(0x1d, 0x6, 0xb) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) recvmmsg(r3, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x4e55}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000080)={'nr0\x00', 0x1}) 2.399439521s ago: executing program 1 (id=10303): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x4, 0x8, 0x12, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000680)='^', 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='nv', 0x2) shutdown(r6, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000300)={0x7}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES8=r8], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x8000, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) bind$can_j1939(r7, 0x0, 0x0) 2.305796198s ago: executing program 1 (id=10306): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c '], 0xa) 2.279257959s ago: executing program 3 (id=10307): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000005700)=""/4061, 0xfdd}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000001000)=""/172, 0xac}, {&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0x32122) 2.191632055s ago: executing program 4 (id=10308): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000100)=""/68, 0x44) write(r3, &(0x7f0000000680)="4ede", 0x2) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}, 0x1, 0x0, 0x0, 0x4004050}, 0x800) 2.112335542s ago: executing program 3 (id=10310): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4a, 0x0, &(0x7f0000000280)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.055573546s ago: executing program 0 (id=10311): syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@noop, @lsrr={0x83, 0x3, 0x77}]}}, @address_request={0x11, 0x0, 0x0, 0x576}}}}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r0, 0x6a, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r8}, 0x4) sendto(r5, &(0x7f0000000300)="0758ebe5ad6ae83e601dfaf53d580dcd2e6a630cabb390d31e0cbcc45046a3ce0c41e7e04e5a9490f9f0f56030bfa78e4005551d25c9686811", 0x39, 0x4000000, &(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x9, "86305db206a7be1e94990dec455c4ec3cdb63f5dd8a282c15cde43a4d87c1798ee3d7b534579376fff68124e63471df75195bcc7e7be5508790b2dfdfcb213", 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r11, 0x0, 0x0}, 0x20) recvmmsg(r4, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) 1.913263108s ago: executing program 4 (id=10314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$netlink(0x10, 0x3, 0xf) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r2}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.301355726s ago: executing program 2 (id=10315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.22374874s ago: executing program 2 (id=10316): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x16, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000140)='t'}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xa, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.222192584s ago: executing program 4 (id=10317): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104000000000000000db1f80c7f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200000000001400030067656e65766531000000000000000000"], 0x50}}, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x495b866df80b4e6b}, 0x14}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xc7de9e22d8d17f62, &(0x7f0000000200)={@multicast1, @remote, 0x0}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2896}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x4c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "263292fb99d5157ac6a6ec526f6518c7"}, @md5sig={0x13, 0x12, "a7e8ec95aa6295ea40a52b32e98fdeef"}]}}}}}}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000380)='./file0\x00', r8}, 0x18) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x5e, @multicast2, 0x0, 0x0, 'lc\x00', 0x24, 0xff, 0x75}, 0x2c) 1.04308918s ago: executing program 2 (id=10318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = socket$inet(0x2, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080), 0x0) getsockopt$bt_hci(r3, 0x84, 0x22, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r4 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r4, 0x0, 0x0, 0x10130, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x5}, 0x804) 960.99775ms ago: executing program 1 (id=10319): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) 960.80257ms ago: executing program 3 (id=10320): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000005700)=""/4061, 0xfdd}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000001000)=""/172, 0xac}, {&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0x32122) 809.535419ms ago: executing program 1 (id=10321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) (async) write(r1, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0xef9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0xf}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0xf}, &(0x7f00000000c0)=0x8) 789.943245ms ago: executing program 2 (id=10322): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x828}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x308}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x840}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x4090) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0xa) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWSET={0x16c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x134, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x41a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff27c9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}]}], {0x14, 0x10}}, 0x194}}, 0x4008050) r6 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x0, 0x80000000, {{0x17, 0x4, 0x2, 0x3, 0x5c, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x12, 0xffffffffffffffff, [{0x81203a0c029bd2cd, 0x8, "d56428676795"}, {0x7, 0x4, "41d8"}]}, @timestamp={0x44, 0x8, 0x16, 0x0, 0x1, [0x5]}, @timestamp={0x44, 0x14, 0xfe, 0x0, 0x1, [0xe5e, 0x10001, 0x7, 0x7]}, @rr={0x7, 0x17, 0x32, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @local, @loopback]}]}}}}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x26}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0xd, 0x9d, @vifc_lcl_ifindex=r7, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r9, 0x6, 0x9, 0x0, &(0x7f00000003c0)) getpeername$packet(r8, 0x0, 0x0) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x28, 0xc, 0x5c}, 0x2c) 714.069209ms ago: executing program 1 (id=10323): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5460, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e2208000149762de63ed3b9dc4d44ed799a61a9372eae62e1dd8758f68fc63056afc8ced5bd356108c6661286ba71786639c7101f4d05c9d8445af33e2f4f98f90bfd8d491f7742cb0fa0d75de3b91f89a40f33585419b96ed4b70b19815161aaca054ee71430b213a034a6a9b5a8167f042a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0x5, 0x6, 0x8, 0x1d9ad42c, 0x9, 0xe0000000, 0xfffffffd, 0x8}}) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 693.240282ms ago: executing program 4 (id=10324): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000100)=0xa56, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 691.46154ms ago: executing program 0 (id=10325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464658713696d300000080003"], 0x4c}}, 0x20000011) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x4, @private2, 0x3}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="f65096c37c83fd9a3dfd4932e363893e714c5d17d6c3d81df46a9a88dd16e464b2742b9c79bddce71815dffc747dc144e80cc850f57716ac5ce01b55e74fd904a4f872c449ae0228769516a42fbdc8e3e5de3792f31e037868561ed696c41ec8913a4d422f4be80a32e80ed4a5692d973f05a509f3bec903b0", 0x79}], 0x1}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 633.310687ms ago: executing program 3 (id=10326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 464.492489ms ago: executing program 2 (id=10327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 406.377908ms ago: executing program 0 (id=10328): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x6) (rerun: 32) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000100)={0x4, 0x0, 0x12c281ae, 0x1, 0xc5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000440)=@ringbuf, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x90) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e4040000", @ANYRES16=r6, @ANYBLOB="000126bd7000ffdbdf25210000000500f60004000000c8047d807c000300fec082deaa818d396b810b72fd675c00112c33bbeb79bddfa8c67066aab6eac81601c15cae5e71c42c0b2f99393a25dcffd6e29f71b6cb21b7b6a45a7007611e7954f680a0003bd670360816d5d5489c5bfe1f9ddc9b6074b471b4e392e26586aebe3e08b76a8f8ffb089aa8792b4b2e5a058a158e060ee9eb000200a8d7cfc329f23524e4a032b676097d78a5bb8c6b97287583ffad1d379e9a7fcc0fbb1898f32f05dfc982feb9da554db06615f1833ca3bf72e80538b188ff45bbacf39ef60e7a0444fb4e27428ba7b24c41eccb49ce89aa75eaa2cfc4edb0fd7d913a08b8a2d86e4eb57fd85010fcfe7ebf3d3ce99a31e7d09f3acbcfa8a5868233dc2e2793a874e15fce3bb5f059d9a52b276228be0c5021de4ad56b299c007ed55dedff5f2c250830e04320c41ff6dfafe3e62e4e8798a21869336f0e7cdafab15648b08feaa01b21ca8cc4d918265aa750b1194b743f1cd21f1ee6a056276f4ca75438af74f5e9008d000200b67f51f66aadd1e6d2e6784a44ab789b518f83cd32751415467f9d76925686a73fa4640d14f255063f58012d04bc6b3c67af88df9dded7cef74bc6642ad9971164755b30b5c9f0d56a994a96f3748c87612e128f20a2c90f7702acc69b3caa1d9c9cfab1bbe9c7f1fb057e38e5cfaa40fa538ce860bf0db1b94d0e4d53e52f2f0f0932000000b50000002453da119afa9b6d4210e99afac4f986978344d32904404c8320267c7edc8edb87bbf13b03ea68c1b1aad09909823684149a3d100dce5967a37e88776ca7fb2f67b012cfd4fd0b194d5ab61f3c176fc6116135f645cd83a48422c5ebe5c075e3d93615d5204f729c2a1ec0a90c8a9ff113548ecb4cb9816b6a606ea795cbed56ef336d691a0c6b6e2d9531583d764fdb12d58bb460cc0958b387fd4abf2e49fae017460583578c814d3df048ea638c0e560000006e0000005b048c234011924882dadea8cab18756506d2cc5bf44c4f970121376e122ce921a8f598556daa39f2a76a7946f730b6d478fd21e965c1b7e680483f6dea05b96d823c80fe70ddc455053ccda5c0ffec8233f0f11ceae3e577afed4baef021d363e2db4f8eed2ac4df8cc000017000200bb51c71b75a4c167368ed4fdde074cb9f26c2600ea00020082912c7819c57132d6f2340750bdb7f74ae56f4f0bbe983c001df9f0ea0cc0154d949411256c612b18658293269bb0cebd7f623c38490d7eec4bfd0a7f77b33cf19129ecb94b18ad9173904eebb58f0c4dcfe25050495af306d0ae9b8bac85ccb50d87e2fd105bf4f8cfa9c8d6840761203bbf97b79da300c06a0f1067d004e336c57a7fca4666f71cd1395a309e345e593c2353a51004ef3d94c2a296431497e3a759f65a8f3160c07e6a1a0b72a7fed80a369ce611eb625ad6693287b34adcc3c5610365edbfdbd49016b8f7b3f421633d7e6fc4dabf83a9f1c495c82e7c8a00009f000100b7e12350a593ef6ce190bdafb60383043c96bc6db4c7b9cc8948470c7e558754801b87bdf5cfe512a749d57b6422a2b984746fdb4b24f60949a72cda4de9b7f4b5e49357999167be1565b9e54b3fe20070b5773889aeba6527a00bbf29bde5078db5fcc8d72fa236bb12b3bc2c19ebfdf6e601f6bc5f9fb74e5b62a84ebdefeab3fb73962dea03ccb080b5df17beba8f894b67e0973611dfe72939000000000000007780075eaf6fbe82a83b4a71d06a442f089fb8f4bc043b76eafd0e9cf7216a5bdfd58e0c99"], 0x4e4}, 0x1, 0x0, 0x0, 0x20008040}, 0x4044000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@ipv4_getnetconf={0x24, 0x52, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x3}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7fffffff}]}, 0x24}}, 0x0) 404.960273ms ago: executing program 3 (id=10329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 292.306507ms ago: executing program 4 (id=10330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto(r1, 0x0, 0x0, 0x4810, &(0x7f0000000780)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 274.586758ms ago: executing program 2 (id=10331): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x2, 0x5, 0x4}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 186.942386ms ago: executing program 3 (id=10332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, 0x42, 0x1, 0x70bd27, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @typed={0x8, 0x71, 0x0, 0x0, @fd=r0}, @nested={0x8, 0x4, 0x0, 0x1, [@generic="e1ab5582"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000380)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x306, @local}, 0x32, {0x2, 0x4e20, @multicast1}, 'wlan0\x00'}) 619.61µs ago: executing program 0 (id=10333): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0xc, 0x1}, {0x5}, {0x16, 0x1}, {0x24}, {0x7a, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x24}, {0xc}, {0x4, 0x1}, {0x30, 0x1}, {}, {0xb}, {0x4, 0x1}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x101}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x12}, {0x9}, {0x6}, {0x2}, {0x9}, {0x36, 0x1}, {0x5}, {0x24, 0x1}, {0x12, 0x1}, {0x2}, {0x60}, {0x30, 0x1}, {0x36, 0x1}, {0x36, 0x1}, {0x24}, {0x18}, {0x30, 0x1}, {0x16, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20000040) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7c5, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "3e5faac9d85a9dcf20bd22b99f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b8f582d058c32a577c518b458e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f20eef1ee9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "363fabcabdd09c7998c9f121d2"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0d414eebc6"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0xa0}}, 0x400) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='\xff\xff\xff\xff\xff\xff', 0x210000, &(0x7f0000000400)={@align=0xa27c, {0x6, 0x9, 0x7fff, 0x4}}, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0xffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x300, 0x70bd25, 0xd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x4080) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000006c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000002f40)={{r0, &(0x7f0000000700)='\\)\x00', 0x22600, &(0x7f0000000740)={@_ha_fsid={[0x7, 0x6]}, {0x2, 0x6, 0x10000, 0x2}}, 0x75, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x3}, 0x8, &(0x7f0000002e40)=[{0x1, 0x6, &(0x7f0000000800)='l2tp\x00', &(0x7f0000000840)="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", 0x1000, 0x10}, {0x1, 0xb, &(0x7f0000001840)='\xff\xff\xff\xff\xff\xff', &(0x7f0000001880)="40bb92422ce9d92f34a949df66bcea1e2b518e69a23700ccbf27c0a79a4c277114cdfceccc85bde5625a35556089f7bff15d149c7850aafb857f", 0x3a, 0x20}, {0x1, 0x6, &(0x7f00000018c0)='l2tp\x00', &(0x7f0000001900)="ed03ff0bbebbdd4eecf6f6f2b1077aadb092695148475d991f1ca2b0e2c68a3213fe6bddf0a74092cfb64d3b0eb055fd9896fcacb22f5ccc42961e53e90be01150670aefd9d754787abdba00b1b64e39ac659518a16b2dbb7c4ed773053ef055da3b40d2a6c6d916b077076e12827951d7a37a15962ccab88f1df5d1cda526584aad052c00f57ebd5e251d5007cf22fb10cdaac4680126438b949ebe33a4337e556c9f04ec0f798fc48f43dbaad0bfd9723777783a9c657d7e4ad8450a47992e64e574d8015cee6637fe0ad055575ee5277472657f302d1cb81f039bd26236a070871b9bc0b913818c26bef8f7755b300f00f5a7", 0xf4, 0x2}, {0x0, 0x0, &(0x7f0000001a00)='nl80211\x00', &(0x7f0000001a40)="aa2cfa9aacd05631ea213775e9e092e376b796f61535d98d58746923ae014a32f117ff2a8895e9cf65fe993b8903c8c4bd053becaaf85c1483debec7aec1039b51001f05c10d257e389bc3c8bfe6951a1f896be3", 0x54, 0x30}, {0x3, 0x6, &(0x7f0000001ac0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000001b00)="bd1e1eb052b92e2cac4d85cb96a564f361afcea68da02609dc3e521082c880d3bc43d35df0c965b98f79c166d96b9ac88ac276797fa22f278ce1b2698313f3d22fa2ecec06c61037c107d1ebdbee956fbf55fab3f9e261d7ccd8b35b36e766992ee4c0481ebd4b7765a28033641c9cf148668e58585e6b763e9b623ce93809a036414aa95ebca83e6e8147aba3fa118b6dfffb5c83440169ee76c8cd8863b5585c96d716d4cae0799f1150de22941532214c18ef97c2d55c9934f3c09195c3ce461ebe9cbc10eaf01e25c58790fa7a61dc603655e6e72f78", 0xd8, 0x18}, {0x1, 0x1, &(0x7f0000001c00)=']*\x00', &(0x7f0000001c40)="62d6ae6493e2d119886c9057737e4f641210bfd231b799b4d247ab43184feed5fe8dc8de82aae51cc74258934f2df165c4e18931e9ee8fba1a72a2582735be9117f07a1c08c82526fbf20d06f5463ec550f3a86e17e1bbeda956bab9ac465363f474d993b113df7466f184c23978e418a9cbb007fe2522606163e75c17eb43", 0x7f, 0x18}, {0x0, 0x3, &(0x7f0000001cc0)='-\x00', &(0x7f0000001d00)="191ac506daec3a6679fd48f37e221c35aef0eb7d4534c84f48021cdbae4261641247c3ced620a41f38d88438c4518814465f3e0438f23295389339a57adc2c557de2c7abe45bb507604b4f34c67c37bd3ed32ca36d5fcde03a75dc2dba021c5205b8f5200a656aee2c1309ab9b88a36761182aff029597af3bbd074cf4c889b6c2498b7d7aeca8f98f372f51d53dd50f6f011d8bda80f7eadc616169accb8946f4e54f4cf726d106086a85b1587a0007bc77b1a0a18d7409af3d8fe7406e0b08f2363db69ea25c992df5cd4925a9452e77d8cbf7a51d22a186e036de751acbe4e571081e72b8d0d58c455135a429e237a4a0eb4933afcc2954945bc78cba78f110608f0571c5263e1df15d2675e2cfc155bb06b20ca1fd722880cf33cf6db88cf503eb9e772896a01b20b6781295a9fb93f7080cec946b1b85da58b89de1ee7a5daced965d965da9d3d4f5768fb3e6cd8bbf2d700aa003f476e193fbd8c18ec32b3dce8826b26036ceb03eaab61db874af9c900bf5d445e48e3e63e8ce309dd589ae311a97c56bf34970b0c8dd8a8c58fce108283a8bd69818b5fdb7e1cfb737ebcf377371c2b070489df2efe8347c960f1a5407e69021fbee7b9024732df8a27a25833103783cd99d910ea96facfe627c7086a1c9af612ecbe58f811c6d558946c7c6a1f633e5012431c553a5b8725e3313636ee2534101bf7bd50b4f16cb3a5fd95e7c60242ae8311dba81c37ec77fe7569f5456646d9556feac4ad0cb9d896d9b0f6aa6817a90233b5f449ac0f17ac66de8034842d89d9e404316da757c05127f3aee725c5986b5e68da697c6668c92e99e108d74276d5491c6c4527dd9ffe751c6075d45077df2bed5111ef4f63cb416ba13bdee01a939eb8beced1782cbbc726a662c99f47ebc137728395644e335c7b2690cc95aa38783162ba40adf0a3ac48dec83f09237e368e9c334198df50a1772a5d23ea2eae525caadf20586824e043b5e6c517f4e0ef8272cad16955abba52585c79a287897a4dd0372f963c1ac07ed008e71a8f166fb3664bef17cc58a6452a021ed1dc262869b721e2ffe674383605a94b45a4a6b442c2e86501e88b2117a000ad52dd926c004faf0ce86bab5240d3ef7b2fe9a8a2348d2f416f914613892b488c82301715a19d55e65a5d7ebcf8b5abb181865e3ef76e740bdad20a5fec86d9d3e85ae1a10ad196110b776ed21ef10d5b4b2445eb1b83ba7223e2ebbee03d2a85ab72ffdc1f2a47fd681eb3f9fb5313b538e1dcaef649d81961216c2c47e57fa98b5795915cc140927d0a190235d0fff69732e787df9a5de8ad76bc96834978d87e409187663c284c2ddb833d8a099573375709a23d080caab7a351ede103033b2350d8c72e1f55c4aec1e08ecbfbc4a328e72e8476cbb8dfe515fa3b430278b6509c1a664b2173476296894c1d8c363d15e6660557584a69ac50d82988b46ebb6af49c6fc69a05b7ef399ae35427d7846afca6b346a74a7ef31022a3bc6d6ed59e1ca7f19a4643f4a9f40dc28d989e76dc9473336adbf8dd1c4d9ea4f3d6eaefd1ad7e0b8fbc6fe0bf70df9047b2991c827b7cbd5927198298f9ecd8c764574424908430bfc880745ababc9ca59a95423eadb6b5d058c657050475828a3fe7414f12d5e0d063f13fd9b2595fcb2f1b3541e6a60e7bc63db70b3638b2f34ea8327d7c8bf3e424c22b789bebc8f6f91dc9504d7c7ed8881b77bfe91cfedec5e8858dcae5c2610bd984d7636a888443dca2831f220049a1a4ca02e22e5bb55cc86a4d616f5fe7310c56d088c2330a1b3171e9ced299028e631c16c33800767aa0205bb448b2a0268892d1c1412bdf6f8986a05be41ed2816b7f1d9ae3ed4bb0a18a1bf466f4938dc6d0ab1de0a173c5448964a48c5b57d6356bc0f29a52ec8fb7705302ccdcea9ccee8b38085c4aa9d2220848851c0ce781161c94a91e730485ffbfa24d78d0cf833f1fe344c3daca6df872ddd32b8bdef19e015a0de45c7ee17277255b35843264f20a483c16e3825f168c79d41cd4f546fcc11d41235e6a502f3802397b0e011d7392e7a1847a3f099e366b36797779ea6e61e544adc06218eb94c40298b992075838663e31841f27b21676a79ec0c49153ab6339fa26e03fd57fa28a08ed18a4421d42bf4542ca5536fad34e93efa4519b9dd9d2f458c82f3bfc27b4648d52ada90e7a9f0c20a1bede777656685cabcd1303633bf323ee2aabcd77923022e28561a30fe19bfe90063ca713a78edc04c6dbbf6a54923a3fc8b95158f0ac78cdb2da7f24a4eb7ef22bccd56c908243525066b499baa0e7919488d2520e8185ac42000ab542df61f17dccaf8a0d82e244777271220d8089b0b8c6da3c5cedd0f01d3b3e423635bde5664f3cbf5892e344bf35b7e3338b5351305d30645a8d189af452f4ce17469e88fc1857efcd0e0e7f99460231b42dfbc0b44ce83eaf417500812f1a0daf0f066ab73bd66f305f9e46f778a87fbe66d482933ca344d4b4a400d78eefd0f936ad179393f3ea0271c450f415f580cdee792d4e7c0dc2928dd53bc709245c966264eaa4c43fd3eea2ec0e0928a89f4a8df87e2917bb26d27c7819441b8a390bc43860b952dcc09896ca3d2e2590c5f49cf0ca17aa13bd08a601edca34e34b8e8434ee57e6553f8181d55fff7447b3a4ac5228f4318819f8bb85abdc7d83c8ac7897e029fe8e9093fbaa9c6333d9b9f4169a6b091e8bf6f957bbbeb282234f2c25bcdef94f102202126b3446da4a68e764feb85c6c7f698d273baf324b6ebf407e35257439a5b68067749ab111e69ded8b4a2488bcbaa4689dde91bfb82947f58ef868b9262abc693a1f679e828927f20b8ee7dc2f6132a5b491033802c1e595a2e9349920b67861a8aaebfc99ac31f458a1fd47cc952d661172e2c487fc9605482e83cc84e7433b0a06c0a928ef690956c57cd63989416ca835f466428ee6d1cead2030408d62c49341096def7ec43432a4773539f466c885af6f7f4b684f0b37674600117d6150f74a5388670db640e74d6429530e0aa30ed382090deee7bfc54d11076ba7de81546753bfdfe0bebbcf67c28bf77620c1b6de2ffe0743bb54f3a7a0a8b0313384d55b819971ec78e2676584974ba701cf7bdf1d0fc6feee5365572a8532d80febd0798b16e6e42960280fcaae468bb4380614b79bbbc7297d4f7dc8f13746c8274ae2550330da37c77f3fb12e936386a93a2b3da2dcc4bf5daff1f53619eeb9c589f85139efe6f471e9f31992ca84110579439e3ef068c47793e19d169ebc633b74900b29c6b9b1c40008e2d0b4c39785b10a88efc3369e780fc07cb8aca8b9a00aee2d6d0fc14d4da551415cd4846117699318985cc078fae14a370b2923f7d88dd6a38475cc353e8464b6c20ed410ee2633115dacc3a318a4d1f2286927fdad901dddaab1ad3975b7447629c291795bfa6dab6e4a18ec82f430201467b70eb68bf40c558ecd375744bdbe4bbb6e3ada86c226b67dbc7bfc1656bc6bed8a2982a4dbde915679a39aa68e4b5b0d4cd0cb717c55099aaf91a1f80839c93cd71fafe2a278eb7574bb3f18ba86e67d2d401fe20994d72780075c845d38003fb66699146f7217ec45ac245b684e61b6827ce000392b9ca7af2672a70f6753378005787a13f4b0248e5550c2b86959d143240119064fc4530eae40bc68c109fa702cd1a518a90a78eb28aa06f79dab19df4e6e320e272f2ef557ef37daea61134ce50ac1558fb2458db5d09cde9203a0568a084a709a2a810cd17e6c07313aaa52101af5e6dd3a4c16cdf9dd20a72bb2ab93a5e284841f39987e0722d775b6b624560c9c03da9bed0f4d1e276b665909ce809465fb7458bdddd86fbf8bbed0c91dbf3224da4b8ec334fd63497a7f107af82d375627e4ec803d3868e7b896b703ecce2432c43c35e9596b6108ba93313f5c98d68d12a1802e30c9aee6b8633718b0b2157b64a305c49f626fc208f583a74186e278317e3816da99127b86ee8039c66e4d5a8c501281d0104e8171beaedeebb90b8d32afb0774d0ba4cd8aa9a1a0996a6ee36f09809f8ad52d806d97556c811967fde3bb85cf3848d89cfb2eb79ad3a4d76783471715226740e3506cb5e624525e4d60937f1a0a0549b139f430bf0492ff99569960e332d1d2864ed7e5fd41d7c1257ed6a170eb8fddba5ad854d46c4b9e9410f194e186e624596334493a183cbfa0b59c375c650a2e695e768f7d01a60e6a0880e924f31b5dd4754dcca4da0ce5653638f852664ca1343ca3e93777a5bd5534d2959ab9b2f0ac5ee158497c48c892de33874ed5dc5f9129cffbe94e1324ca9a672f4d66880e6ca5041ea5528a39d8a11a21c2409c79c57e74e20ed1c42abd57c3d4b2b9753fa1c6e1fccd0a91e0cab095eac212720856bb3afa85fe9b9bae051d2425338d235f547027cfe0b94d7878463101a7e7598bb86ed70bd31a2ed66ffaa7ca7b5ca441ea5de43a17b4a5109220eec73c940e4f4ba4a435eb9ccc724211b80e6f5ac7011b93c674e305ac05e91bec6e92728d3b4857d1562a137cdace884f8c999696d45806f23422db7eacbb401f8938761dff44c547952023fe142f67e1c51236a60cfb6217e60809f17e043301f6f671876505b0f81eb5f502cc4270840e1f602ac1dc675694cb1d8842d9530b2d19c1d5c72114987d9f89e5cc6d7920979bf403cbf782d8ca69e3781f3ef3240d26d547992a76ce3c6484af142330de55bfa3e6f4458eefdb3b091a52a1444312eb215df8377ee4e99b2fc3a506e57f442d737ac3eaec7a571ed429ae4f864c54eee274dcc38b88d782f635b11b7e0bd06416a962803c161891b5936054a81082648dd82a2f6b97aaa8640e3260a5a1bfd78a167f0df98390eff729fe21f3880519142751abbc3360de52e91b0f6aba7744bff2fbd29ec4537092105f95545787d57132920210a1c5d8f94202f3d35642f079596e6bf9ab6be77f715fa7af81ebca5be7e0012b211c7907a24817651633c7c8f8d63cebae39f6771a80a3e3e1709dfc1b859a303bc2e069b299346d3592133e1a38fc6b4fb0b95e299a68a4d686a1c95d61428700d970774d819f2818182884a9bde6f71ba8484aeae54c1c8245a260d822982fc66780f95e4e2437dffdc5dbcebbd98fc7613163c1a2d88e3355208d05a492e6d5c86a429fc4157fd3b2ddfd4e1ae1e131db62bcced7cc3c404b6ddedc28d7634ae7dcbc72ea23295acaf7a42e9f0c2c39a13c892ebfc74b67b431e0e1d1b9087f812b8ba52f1c4619bb933d747cc2d28b14192bca6262406b625e9e4bab6aaaaa976d9e68805a3d1fd3e479b21defe74ab8797e0ad523e29a92d6fec8a412102f9707b4f1b3705fbdf146915c0274c89f0521250c8c6304d4a8a65503402d0e41d94c7351e808f2707a0634d1748b8d655d9d5e166ed953f76d08303d5ffd43006fd3b87359024969e8bc47d658c35a6e08e362f652b4a11e0e89b0e9af6ede16d09d4a172c55d12aa1a5cc22b489efc39185093c38a23065f8be9aa3efd0720d66eb16302e1bf825ce4a2359fc266ab03fabe362deb73a8cfa8825967990af1d965f11d0f207aa9100ef53d222b6c63e86f0f70f142f673b45eb549c651df115d4d0002e35a4478f9528aca3ccbe33609d555539f5b5689a089e071937074baa0d0a4edde6e06e11cf790800cbe880c23c4d00ffbd286bbf8360bca3e2898692f31c88b06b7ac5a2711ded7ed69e95a01e8e31b313a7f865d7056ee3", 0x1000}, {0x1, 0x2245, &(0x7f0000002d00)='wlan1\x00', &(0x7f0000002d40)="61b26b5dd2e73c607a45eb39c6d3842c523d57e06109412f96e8e6629ea958a9aee8ee44171b0883353443a328d784e576e70f86aa0db8cbd4e5d78187269b1c180c47b7caba103741c89ec152bde5c5b1a3fb37a270a6d7c27837d9d29f5a1f22c6c514b198d3f27fc797a7859b84274421b7f9640106cf52b57e32e27d71ab5866e14af71d0e89f03460c7756b517d2dbf804f45334b0e640020b91076f5e452463891a206c3d89daf232d5035b294fccbe0f5194f74891b7705ec22fb1939260cc9d925aa2320b97ead5530d82f33679ff9c0eb22e78235b7278f5baf0ec328ce7c4b4778b6e279d452ffbf38df1d16", 0xf1, 0x8}]}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000003000)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)='ip6erspan0\x00', 0x8001, 0x6, 0x40}) r7 = socket$isdn(0x22, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000003080)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000003140)={{r0}, r8, 0xa, @inherit={0x80, &(0x7f00000030c0)={0x0, 0x7, 0x5, 0x6, {0x2, 0x4d, 0x4, 0x5, 0x6}, [0xfffffffffffffff7, 0x1, 0x5, 0x4, 0x3, 0x7, 0x6]}}, @devid}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r2) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, r9, 0x23c, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020000}, 0x2000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000004280)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000042c0)=r10, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000004300), &(0x7f0000004340)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004380)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x20, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0xe}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2084}, 0x20000000) r12 = accept4$nfc_llcp(r5, &(0x7f00000044c0), &(0x7f0000004540)=0x60, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000004580)=0x0) bind$nfc_llcp(r12, &(0x7f00000045c0)={0x27, r13, 0x0, 0x2, 0x3, 0x5, "8412c363a0de199c64c35d2750034a1f4d6134dab1f4d34f83b0000a4d6611f39369ac665e905b47322b3065e037a17fa6386785853bd878fe89ef6944dce6", 0x2f}, 0x60) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000004740)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x64, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) accept(0xffffffffffffffff, &(0x7f0000004780)=@tipc, &(0x7f0000004800)=0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000004840)={'wg1\x00'}) 0s ago: executing program 4 (id=10334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) sendto$netrom(0xffffffffffffffff, 0x0, 0xfffffffffffffe17, 0x40, &(0x7f0000000000)={{0x6, @rose, 0xfffffffc}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e1c, 0xffffffff, @mcast1, 0x4}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) (async) close(r1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) kernel console output (not intermixed with test programs): T6371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 988.086704][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.132071][ T6666] netlink: 'syz.0.9242': attribute type 9 has an invalid length. [ 988.277904][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.325479][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.349000][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.356239][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.413157][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.420687][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.442122][ T6681] netlink: 'syz.0.9244': attribute type 1 has an invalid length. [ 988.490679][ T6684] geneve1: Caught tx_queue_len zero misconfig [ 988.652329][ T6694] sctp: [Deprecated]: syz.3.9247 (pid 6694) Use of int in maxseg socket option. [ 988.652329][ T6694] Use struct sctp_assoc_value instead [ 988.731828][ T6696] netlink: 'syz.3.9247': attribute type 10 has an invalid length. [ 988.751880][ T6694] netlink: 'syz.3.9247': attribute type 10 has an invalid length. [ 988.781110][ T6699] syzkaller0: entered promiscuous mode [ 988.810318][ T6699] syzkaller0: entered allmulticast mode [ 988.844110][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.863776][ T6706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.887723][ T6694] bridge_slave_1: left allmulticast mode [ 988.902464][ T6694] bridge_slave_1: left promiscuous mode [ 988.917891][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.964496][ T6694] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 989.169939][ T6712] FAULT_INJECTION: forcing a failure. [ 989.169939][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.185372][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.237757][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: syz.4.9250 Not tainted syzkaller #0 PREEMPT(full) [ 989.237789][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 989.237801][ T6712] Call Trace: [ 989.237809][ T6712] [ 989.237818][ T6712] dump_stack_lvl+0xe8/0x150 [ 989.237854][ T6712] should_fail_ex+0x412/0x560 [ 989.237887][ T6712] _copy_from_iter+0x1d3/0x1670 [ 989.237929][ T6712] ? __pfx__copy_from_iter+0x10/0x10 [ 989.237954][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9252'. [ 989.237955][ T6712] ? sock_alloc_send_pskb+0x896/0x990 [ 989.237986][ T6712] ? __pfx__copy_from_iter+0x10/0x10 [ 989.238015][ T6712] ? page_copy_sane+0x16a/0x270 [ 989.238043][ T6712] copy_page_from_iter+0xdd/0x170 [ 989.238075][ T6712] skb_copy_datagram_from_iter+0x306/0x710 [ 989.238107][ T6712] tun_get_user+0xc38/0x3ed0 [ 989.238147][ T6712] ? aa_file_perm+0x50e/0x15e0 [ 989.238174][ T6712] ? __pfx_tun_get_user+0x10/0x10 [ 989.238199][ T6712] ? __lock_acquire+0x6b5/0x2cf0 [ 989.238226][ T6712] ? kstrtoull+0x12f/0x1d0 [ 989.238259][ T6712] ? ref_tracker_alloc+0x35c/0x4c0 [ 989.238288][ T6712] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 989.238318][ T6712] ? tun_get+0x1c/0x2f0 [ 989.238339][ T6712] ? tun_get+0x1c/0x2f0 [ 989.238365][ T6712] ? tun_get+0x1c/0x2f0 [ 989.238386][ T6712] ? tun_get+0x1c/0x2f0 [ 989.238412][ T6712] tun_chr_write_iter+0x113/0x200 [ 989.238437][ T6712] vfs_write+0x61d/0xb90 [ 989.238472][ T6712] ? __pfx_vfs_write+0x10/0x10 [ 989.238515][ T6712] ? __fget_files+0x2a/0x420 [ 989.238547][ T6712] ksys_write+0x150/0x270 [ 989.238576][ T6712] ? __pfx_ksys_write+0x10/0x10 [ 989.238611][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.238632][ T6712] do_syscall_64+0x15f/0xf80 [ 989.238655][ T6712] ? trace_irq_disable+0x3b/0x140 [ 989.238676][ T6712] ? clear_bhb_loop+0x40/0x90 [ 989.238707][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.238727][ T6712] RIP: 0033:0x7fdce619c819 [ 989.238746][ T6712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.238763][ T6712] RSP: 002b:00007fdce70f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 989.238785][ T6712] RAX: ffffffffffffffda RBX: 00007fdce6415fa0 RCX: 00007fdce619c819 [ 989.238799][ T6712] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 989.238812][ T6712] RBP: 00007fdce70f2090 R08: 0000000000000000 R09: 0000000000000000 [ 989.238825][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.238836][ T6712] R13: 00007fdce6416038 R14: 00007fdce6415fa0 R15: 00007ffecd67f5d8 [ 989.238866][ T6712] [ 989.458697][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9252'. [ 989.548444][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9252'. [ 989.603080][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9252'. [ 989.629344][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.763998][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9253'. [ 989.790492][ T6371] veth0_vlan: entered promiscuous mode [ 989.834528][ T6371] veth1_vlan: entered promiscuous mode [ 990.014131][ T6371] veth0_macvtap: entered promiscuous mode [ 990.046285][ T6371] veth1_macvtap: entered promiscuous mode [ 990.095818][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.122874][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.131337][ T1739] block nbd0: Possible stuck request ffff888096077000: control (read@0,1024B). Runtime 210 seconds [ 990.140978][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.142589][ T1739] block nbd0: Possible stuck request ffff8880960771c0: control (read@1024,1024B). Runtime 210 seconds [ 990.161720][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.162661][ T1739] block nbd0: Possible stuck request ffff888096077380: control (read@2048,1024B). Runtime 210 seconds [ 990.182828][ T1739] block nbd0: Possible stuck request ffff888096077540: control (read@3072,1024B). Runtime 210 seconds [ 990.231313][ T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.246614][ T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.555809][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.579422][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.690714][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.721594][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.792490][ T6773] xt_hashlimit: size too large, truncated to 1048576 [ 991.014238][ T6778] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9264'. [ 991.026006][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9265'. [ 991.053126][ T6778] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 991.096056][ T6785] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9184'. [ 991.149394][ T6785] netlink: 'syz.1.9184': attribute type 12 has an invalid length. [ 991.188618][ T6783] FAULT_INJECTION: forcing a failure. [ 991.188618][ T6783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.240175][ T6783] CPU: 0 UID: 0 PID: 6783 Comm: syz.2.9266 Not tainted syzkaller #0 PREEMPT(full) [ 991.240208][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 991.240222][ T6783] Call Trace: [ 991.240232][ T6783] [ 991.240242][ T6783] dump_stack_lvl+0xe8/0x150 [ 991.240280][ T6783] should_fail_ex+0x412/0x560 [ 991.240316][ T6783] _copy_from_iter+0x1d3/0x1670 [ 991.240359][ T6783] ? __pfx__copy_from_iter+0x10/0x10 [ 991.240387][ T6783] ? sock_alloc_send_pskb+0x896/0x990 [ 991.240415][ T6783] ? __pfx__copy_from_iter+0x10/0x10 [ 991.240459][ T6783] ? page_copy_sane+0x16a/0x270 [ 991.240491][ T6783] copy_page_from_iter+0xdd/0x170 [ 991.240527][ T6783] skb_copy_datagram_from_iter+0x306/0x710 [ 991.240563][ T6783] tun_get_user+0xc38/0x3ed0 [ 991.240608][ T6783] ? aa_file_perm+0x50e/0x15e0 [ 991.240637][ T6783] ? __pfx_tun_get_user+0x10/0x10 [ 991.240663][ T6783] ? __lock_acquire+0x6b5/0x2cf0 [ 991.240691][ T6783] ? kstrtoull+0x12f/0x1d0 [ 991.240724][ T6783] ? ref_tracker_alloc+0x35c/0x4c0 [ 991.240757][ T6783] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 991.240789][ T6783] ? tun_get+0x1c/0x2f0 [ 991.240813][ T6783] ? tun_get+0x1c/0x2f0 [ 991.240843][ T6783] ? tun_get+0x1c/0x2f0 [ 991.240863][ T6783] ? tun_get+0x1c/0x2f0 [ 991.240894][ T6783] tun_chr_write_iter+0x113/0x200 [ 991.240922][ T6783] vfs_write+0x61d/0xb90 [ 991.240959][ T6783] ? __pfx_vfs_write+0x10/0x10 [ 991.241000][ T6783] ? __fget_files+0x2a/0x420 [ 991.241033][ T6783] ksys_write+0x150/0x270 [ 991.241065][ T6783] ? __pfx_ksys_write+0x10/0x10 [ 991.241102][ T6783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.241125][ T6783] do_syscall_64+0x15f/0xf80 [ 991.241149][ T6783] ? trace_irq_disable+0x3b/0x140 [ 991.241171][ T6783] ? clear_bhb_loop+0x40/0x90 [ 991.241196][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.241215][ T6783] RIP: 0033:0x7f9a6ef9c819 [ 991.241234][ T6783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.241251][ T6783] RSP: 002b:00007f9a6febb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 991.241273][ T6783] RAX: ffffffffffffffda RBX: 00007f9a6f215fa0 RCX: 00007f9a6ef9c819 [ 991.241287][ T6783] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 991.241300][ T6783] RBP: 00007f9a6febb090 R08: 0000000000000000 R09: 0000000000000000 [ 991.241313][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.241324][ T6783] R13: 00007f9a6f216038 R14: 00007f9a6f215fa0 R15: 00007ffd7ca8dcd8 [ 991.241357][ T6783] [ 991.544176][ T6780] lo speed is unknown, defaulting to 1000 [ 991.654527][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9269'. [ 992.233544][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.264228][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 992.274643][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 992.287608][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 992.299011][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 992.670041][ T6816] lo speed is unknown, defaulting to 1000 [ 993.120845][ T135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.286222][ T6850] __nla_validate_parse: 4 callbacks suppressed [ 993.286244][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9282'. [ 993.359758][ T135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.559969][ T135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.738530][ T135] batman_adv: batadv0: Removing interface:  [ 993.750721][ T135] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.181694][ T6875] syzkaller0: entered promiscuous mode [ 994.187475][ T6875] syzkaller0: entered allmulticast mode [ 994.195193][ T1108] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.296070][ T1108] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.367831][ T5145] Bluetooth: hci1: command tx timeout [ 994.434923][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9293'. [ 994.480671][ T1013] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.581412][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 994.730828][T14311] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.762251][ T6905] netlink: 'syz.1.9299': attribute type 1 has an invalid length. [ 994.791133][ T135] dummy0: left allmulticast mode [ 994.798704][ T135] bridge0: port 1(dummy0) entered disabled state [ 994.854693][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9300'. [ 994.937502][ T135] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 994.959180][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9298'. [ 994.973434][ T135] bond5 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 994.982841][ T135] bond5 (unregistering): (slave ip6gretap2): Releasing backup interface [ 995.271534][ T135] bond2 (unregistering): (slave bridge2): Releasing active interface [ 995.592628][ T6918] nbd: must specify an index to disconnect [ 995.692600][ T135] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 995.704355][ T135] bond0 (unregistering): Released all slaves [ 995.716223][ T135] bond1 (unregistering): Released all slaves [ 995.734185][ T135] bond2 (unregistering): Released all slaves [ 995.750935][ T135] bond3 (unregistering): (slave veth5): Releasing active interface [ 995.760842][ T135] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 995.773626][ T135] bond3 (unregistering): (slave veth7): Releasing active interface [ 995.783043][ T135] bond3 (unregistering): Released all slaves [ 995.800616][ T135] bond4 (unregistering): Released all slaves [ 995.816603][ T135] bond5 (unregistering): Released all slaves [ 995.834677][ T135] bond6 (unregistering): Released all slaves [ 995.852672][ T135] bond7 (unregistering): Released all slaves [ 995.870191][ T135] bond8 (unregistering): Released all slaves [ 995.892088][ T135] bond9 (unregistering): Released all slaves [ 995.910500][ T135] bond10 (unregistering): Released all slaves [ 995.963385][ T6912] veth0_macvtap: Caught tx_queue_len zero misconfig [ 995.973234][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.998503][ T6913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.386100][ T135] tipc: Left network mode [ 996.460288][ T5145] Bluetooth: hci1: command tx timeout [ 996.466870][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.478924][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.486359][ T6816] bridge_slave_0: entered allmulticast mode [ 996.500755][ T6816] bridge_slave_0: entered promiscuous mode [ 996.528700][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.553818][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.614368][ T6816] bridge_slave_1: entered allmulticast mode [ 996.640473][ T6946] xt_hashlimit: size too large, truncated to 1048576 [ 996.656902][ T6816] bridge_slave_1: entered promiscuous mode [ 996.879266][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.035406][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.129814][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9308'. [ 997.225105][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9311'. [ 997.253208][ T6816] team0: Port device team_slave_0 added [ 997.447784][ T6816] team0: Port device team_slave_1 added [ 997.620400][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.633376][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.670806][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.960797][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.999408][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.006660][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9315'. [ 998.087576][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.204234][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 998.218500][ T7003] netlink: 'syz.1.9319': attribute type 3 has an invalid length. [ 998.230361][ T7003] netlink: 766 bytes leftover after parsing attributes in process `syz.1.9319'. [ 998.499672][ T6816] hsr_slave_0: entered promiscuous mode [ 998.512444][ T6816] hsr_slave_1: entered promiscuous mode [ 998.528733][ T5145] Bluetooth: hci1: command tx timeout [ 998.539502][ T6816] debugfs: 'hsr0' already exists in 'hsr' [ 998.556910][ T6816] Cannot create hsr debugfs directory [ 998.800834][ T7030] netlink: 'syz.1.9325': attribute type 2 has an invalid length. [ 999.331125][ T135] hsr_slave_0: left promiscuous mode [ 999.350213][ T135] hsr_slave_1: left promiscuous mode [ 999.358729][ T135] pim6reg (unregistering): left allmulticast mode [ 999.871610][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 999.899809][ T6816] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.021529][ T6816] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.308572][ T6816] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.620428][ T5145] Bluetooth: hci1: command tx timeout [ 1000.758376][ T7060] syzkaller0: entered promiscuous mode [ 1000.771683][ T7060] syzkaller0: entered allmulticast mode [ 1000.803287][ T7092] x_tables: duplicate underflow at hook 1 [ 1000.861703][ T6816] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.467852][ T7107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1005.495250][ T135] IPVS: stop unused estimator thread 0... [ 1005.774077][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9343'. [ 1006.170251][ T7153] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9348'. [ 1006.193668][ T7152] xt_hashlimit: size too large, truncated to 1048576 [ 1006.225034][ T6816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1006.258288][ T7156] netlink: 'syz.0.9347': attribute type 4 has an invalid length. [ 1006.262062][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1006.307408][ T7156] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9347'. [ 1006.312377][ T6816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1006.392047][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1006.482078][ T7156] .`¹: renamed from bond0 [ 1006.518868][ T6816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1006.558139][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1006.582599][ T6816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1006.619134][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1006.792564][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9352'. [ 1006.987868][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.088488][ T6816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.131462][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.138738][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.241177][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.248513][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.611682][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9361'. [ 1007.672754][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9361'. [ 1007.981266][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9364'. [ 1007.990664][ T7225] netlink: 'syz.0.9364': attribute type 1 has an invalid length. [ 1008.000157][ T7225] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9364'. [ 1008.210330][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.493531][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9369'. [ 1008.513766][ T7248] netlink: 'syz.3.9369': attribute type 1 has an invalid length. [ 1008.581501][ T7248] netlink: 'syz.3.9369': attribute type 1 has an invalid length. [ 1008.600978][ T7248] netlink: 'syz.3.9369': attribute type 2 has an invalid length. [ 1008.630112][ T7248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9369'. [ 1009.314388][ T7272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1009.442405][ T6816] veth0_vlan: entered promiscuous mode [ 1009.501316][ T6816] veth1_vlan: entered promiscuous mode [ 1009.516200][ T7283] openvswitch: netlink: Unknown key attributes 2 [ 1009.763426][ T7294] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 1009.849518][ T7301] netlink: 'syz.2.9379': attribute type 1 has an invalid length. [ 1009.874151][ T7294] smc: adding net device team0 with user defined pnetid SYZ2 [ 1009.883600][ T7294] team0: entered promiscuous mode [ 1009.895346][ T7294] team0: entered allmulticast mode [ 1010.025732][ T7301] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1010.079874][ T7299] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1010.101213][ T7315] bond10: entered promiscuous mode [ 1010.106556][ T7315] bond10: entered allmulticast mode [ 1010.143156][ T6816] veth0_macvtap: entered promiscuous mode [ 1010.164621][ T6816] veth1_macvtap: entered promiscuous mode [ 1010.265733][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.317202][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.368312][ T1013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.399014][ T1013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.424473][ T1013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.510661][ T1013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.900286][ T7347] wireguard0: entered promiscuous mode [ 1010.927079][ T7347] wireguard0: entered allmulticast mode [ 1011.344999][T12375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.381923][T12375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.524504][T12375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.555660][ T7379] __nla_validate_parse: 2 callbacks suppressed [ 1011.555685][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.558582][T12375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.591004][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.608899][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.660771][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.770065][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.800268][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.829712][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.868407][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.900321][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1011.920670][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1012.312184][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1012.337393][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1012.349425][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1012.360193][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1012.371255][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1012.531551][ T7408] lo speed is unknown, defaulting to 1000 [ 1012.659749][ T7420] tipc: Started in network mode [ 1012.682048][ T7420] tipc: Node identity d21d20dbccf5, cluster identity 4711 [ 1012.720689][ T7420] tipc: Enabled bearer , priority 0 [ 1012.747107][ T7423] netlink: 'syz.3.9409': attribute type 10 has an invalid length. [ 1012.769619][ T7423] netlink: 'syz.3.9409': attribute type 2 has an invalid length. [ 1012.897609][ T7424] syzkaller0: entered promiscuous mode [ 1012.904972][ T7424] syzkaller0: entered allmulticast mode [ 1012.936089][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.974381][ T7420] tipc: Resetting bearer [ 1013.128393][ T7417] tipc: Resetting bearer [ 1013.165286][ T7417] tipc: Disabling bearer [ 1013.444162][ T7447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.489723][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.535805][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 1013.758540][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.766180][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.774406][ T7408] bridge_slave_0: entered allmulticast mode [ 1013.784145][ T7408] bridge_slave_0: entered promiscuous mode [ 1013.795735][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.803781][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.815304][ T7408] bridge_slave_1: entered allmulticast mode [ 1013.824397][ T7408] bridge_slave_1: entered promiscuous mode [ 1013.853984][ T7469] netlink: 'syz.1.9423': attribute type 1 has an invalid length. [ 1013.874161][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.890192][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.945832][ T7408] team0: Port device team_slave_0 added [ 1013.960775][ T7408] team0: Port device team_slave_1 added [ 1014.012255][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.020358][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.077318][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.095993][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.116566][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.119734][ T7477] netlink: 'syz.3.9425': attribute type 1 has an invalid length. [ 1014.155260][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.268623][ T7478] tipc: Enabling of bearer rejected, failed to enable media [ 1014.381260][ T7481] tipc: Enabling of bearer rejected, failed to enable media [ 1014.430744][ T7408] hsr_slave_0: entered promiscuous mode [ 1014.447334][ T5828] Bluetooth: hci5: command tx timeout [ 1014.467584][ T7408] hsr_slave_1: entered promiscuous mode [ 1014.480203][ T7408] debugfs: 'hsr0' already exists in 'hsr' [ 1014.486269][ T7408] Cannot create hsr debugfs directory [ 1015.570652][ T7552] netlink: 'syz.1.9452': attribute type 4 has an invalid length. [ 1015.651942][ T7556] netlink: 'syz.1.9452': attribute type 4 has an invalid length. [ 1015.782374][ T7555] team0 (unregistering): Port device team_slave_0 removed [ 1015.803149][ T7555] team0 (unregistering): Port device team_slave_1 removed [ 1015.863279][ T7561] bond11: option xmit_hash_policy: invalid value (64) [ 1015.879084][ T7561] bond11 (unregistering): Released all slaves [ 1015.926836][ T7547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.024018][ T7572] syzkaller0: entered promiscuous mode [ 1016.030521][ T7572] syzkaller0: entered allmulticast mode [ 1016.050637][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.059976][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.066946][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.073800][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.080719][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.087625][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.094427][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.101288][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.108331][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.115137][ T7572] tc action pedit offset must be on 32 bit boundaries [ 1016.122106][ T7572] 0: reclassify loop, rule prio 0, protocol 800 [ 1016.328036][ T7408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1016.351799][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.375997][ T7408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1016.387944][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.396675][ T7408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1016.421182][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.430527][ T7408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1016.465226][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.526628][ T5828] Bluetooth: hci5: command tx timeout [ 1016.722681][ T7610] bond11: (slave bond_slave_1): Device is not our slave [ 1016.733842][ T7610] bond11: option active_slave: invalid value (bond_slave_1) [ 1016.745721][ T7610] bond11 (unregistering): Released all slaves [ 1016.917801][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.998830][ T7408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.031797][T12375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.039050][T12375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.060420][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c165000: rx timeout, send abort [ 1017.088233][ T7632] __nla_validate_parse: 73 callbacks suppressed [ 1017.088257][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1017.092687][T12375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.110965][T12375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.350890][ T7641] netem: incorrect gi model size [ 1017.375511][ T7641] netem: change failed [ 1017.560588][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c164400: rx timeout, send abort [ 1017.569889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c165000: abort rx timeout. Force session deactivation [ 1017.592356][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88806c164400: connection exists (fe ff). last cmd: 20 [ 1017.724423][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.771677][ T7661] FAULT_INJECTION: forcing a failure. [ 1017.771677][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.795960][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.1.9482 Not tainted syzkaller #0 PREEMPT(full) [ 1017.795990][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1017.796002][ T7661] Call Trace: [ 1017.796010][ T7661] [ 1017.796019][ T7661] dump_stack_lvl+0xe8/0x150 [ 1017.796093][ T7661] should_fail_ex+0x412/0x560 [ 1017.796130][ T7661] should_failslab+0xa8/0x100 [ 1017.796154][ T7661] __kmalloc_cache_noprof+0x88/0x660 [ 1017.796182][ T7661] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1017.796208][ T7661] ? sctp_add_bind_addr+0x8c/0x370 [ 1017.796239][ T7661] sctp_add_bind_addr+0x8c/0x370 [ 1017.796269][ T7661] sctp_copy_local_addr_list+0x314/0x4f0 [ 1017.796305][ T7661] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1017.796328][ T7661] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1017.796354][ T7661] ? sctp_v6_is_any+0x64/0x80 [ 1017.796382][ T7661] ? sctp_copy_one_addr+0x93/0x360 [ 1017.796414][ T7661] sctp_bind_addr_copy+0xb3/0x3c0 [ 1017.796439][ T7661] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1017.796475][ T7661] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1017.796508][ T7661] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1017.796544][ T7661] ? __local_bh_enable_ip+0xd0/0x130 [ 1017.796570][ T7661] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1017.796590][ T7661] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1017.796617][ T7661] sctp_sendmsg+0x1528/0x2c10 [ 1017.796662][ T7661] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1017.796693][ T7661] ? aa_sk_perm+0x6d5/0x900 [ 1017.796717][ T7661] ? __might_fault+0xaf/0x130 [ 1017.796751][ T7661] ? __pfx_aa_sk_perm+0x10/0x10 [ 1017.796780][ T7661] ? sock_rps_record_flow+0x19/0x350 [ 1017.796803][ T7661] ? __pfx_inet_sendmsg+0x10/0x10 [ 1017.796825][ T7661] ? inet_sendmsg+0x2f4/0x370 [ 1017.796845][ T7661] ? __pfx_inet_sendmsg+0x10/0x10 [ 1017.796868][ T7661] __sys_sendto+0x5de/0x710 [ 1017.796902][ T7661] ? __pfx___sys_sendto+0x10/0x10 [ 1017.796927][ T7661] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1017.796970][ T7661] ? __fget_files+0x3a0/0x420 [ 1017.797010][ T7661] ? ksys_write+0x242/0x270 [ 1017.797040][ T7661] ? __pfx_ksys_write+0x10/0x10 [ 1017.797076][ T7661] __x64_sys_sendto+0xde/0x100 [ 1017.797105][ T7661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.797128][ T7661] do_syscall_64+0x15f/0xf80 [ 1017.797154][ T7661] ? trace_irq_disable+0x3b/0x140 [ 1017.797177][ T7661] ? clear_bhb_loop+0x40/0x90 [ 1017.797202][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.797223][ T7661] RIP: 0033:0x7f2f97f9c819 [ 1017.797245][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.797264][ T7661] RSP: 002b:00007f2f98ed2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1017.797296][ T7661] RAX: ffffffffffffffda RBX: 00007f2f98215fa0 RCX: 00007f2f97f9c819 [ 1017.797312][ T7661] RDX: 0000000000000003 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1017.797326][ T7661] RBP: 00007f2f98ed2090 R08: 0000200000000100 R09: 000000000000001c [ 1017.797340][ T7661] R10: 647a49b57a144d68 R11: 0000000000000246 R12: 0000000000000002 [ 1017.797353][ T7661] R13: 00007f2f98216038 R14: 00007f2f98215fa0 R15: 00007ffee8111628 [ 1017.797388][ T7661] [ 1017.842327][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032742c00: rx timeout, send abort [ 1017.863107][ T7408] veth0_vlan: entered promiscuous mode [ 1018.220604][ T7408] veth1_vlan: entered promiscuous mode [ 1018.318220][ T7408] veth0_macvtap: entered promiscuous mode [ 1018.339957][ T7408] veth1_macvtap: entered promiscuous mode [ 1018.357733][ T7675] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9487'. [ 1018.364563][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032742c00: abort rx timeout. Force session deactivation [ 1018.404676][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.468254][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.523479][T12378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.554587][T12378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.583469][T12378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.611198][ T5828] Bluetooth: hci5: command tx timeout [ 1018.626069][T12378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.052264][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.062264][ T7697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.089068][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.179017][ T7699] syzkaller0: entered promiscuous mode [ 1019.196123][ T7699] syzkaller0: entered allmulticast mode [ 1019.340108][T12375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.368921][T12375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.511743][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9502'. [ 1019.642840][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9402'. [ 1019.831081][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9506'. [ 1019.888013][ T7732] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1019.895079][ T7729] netlink: 'syz.4.9506': attribute type 14 has an invalid length. [ 1019.917455][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9506'. [ 1019.935840][ T7732] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1020.061068][ T7741] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1020.155783][ T135] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.185375][ T135] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.214520][ T1739] block nbd0: Possible stuck request ffff888096077000: control (read@0,1024B). Runtime 240 seconds [ 1020.224522][ T135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.225514][ T1739] block nbd0: Possible stuck request ffff8880960771c0: control (read@1024,1024B). Runtime 240 seconds [ 1020.251406][ T1739] block nbd0: Possible stuck request ffff888096077380: control (read@2048,1024B). Runtime 240 seconds [ 1020.263412][ T1739] block nbd0: Possible stuck request ffff888096077540: control (read@3072,1024B). Runtime 240 seconds [ 1020.285807][ T135] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.687394][ T5828] Bluetooth: hci5: command tx timeout [ 1020.742829][ T7761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9515'. [ 1020.818413][ T7766] x_tables: duplicate underflow at hook 1 [ 1021.084833][ T7777] FAULT_INJECTION: forcing a failure. [ 1021.084833][ T7777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.127541][ T7777] CPU: 1 UID: 0 PID: 7777 Comm: syz.3.9519 Not tainted syzkaller #0 PREEMPT(full) [ 1021.127573][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.127592][ T7777] Call Trace: [ 1021.127601][ T7777] [ 1021.127611][ T7777] dump_stack_lvl+0xe8/0x150 [ 1021.127647][ T7777] should_fail_ex+0x412/0x560 [ 1021.127682][ T7777] _copy_from_user+0x2d/0xb0 [ 1021.127706][ T7777] ___sys_sendmsg+0x1c6/0x360 [ 1021.127736][ T7777] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.127767][ T7777] ? __pfx____sys_sendmsg+0x10/0x10 [ 1021.127837][ T7777] ? __fget_files+0x2a/0x420 [ 1021.127862][ T7777] ? __fget_files+0x3a0/0x420 [ 1021.127898][ T7777] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1021.127933][ T7777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1021.127974][ T7777] ? __pfx_ksys_write+0x10/0x10 [ 1021.128013][ T7777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.128035][ T7777] do_syscall_64+0x15f/0xf80 [ 1021.128060][ T7777] ? trace_irq_disable+0x3b/0x140 [ 1021.128082][ T7777] ? clear_bhb_loop+0x40/0x90 [ 1021.128115][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.128135][ T7777] RIP: 0033:0x7fdf5fd9c819 [ 1021.128156][ T7777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.128174][ T7777] RSP: 002b:00007fdf60b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.128197][ T7777] RAX: ffffffffffffffda RBX: 00007fdf60015fa0 RCX: 00007fdf5fd9c819 [ 1021.128213][ T7777] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1021.128227][ T7777] RBP: 00007fdf60b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.128240][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.128253][ T7777] R13: 00007fdf60016038 R14: 00007fdf60015fa0 R15: 00007ffd9b9949a8 [ 1021.128288][ T7777] [ 1021.498736][ T7787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1021.510980][ T7791] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1021.605569][ T7797] FAULT_INJECTION: forcing a failure. [ 1021.605569][ T7797] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.675482][ T7797] CPU: 1 UID: 0 PID: 7797 Comm: syz.3.9525 Not tainted syzkaller #0 PREEMPT(full) [ 1021.675513][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.675527][ T7797] Call Trace: [ 1021.675536][ T7797] [ 1021.675545][ T7797] dump_stack_lvl+0xe8/0x150 [ 1021.675582][ T7797] should_fail_ex+0x412/0x560 [ 1021.675619][ T7797] should_failslab+0xa8/0x100 [ 1021.675645][ T7797] __kmalloc_cache_noprof+0x88/0x660 [ 1021.675674][ T7797] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1021.675701][ T7797] ? sctp_add_bind_addr+0x8c/0x370 [ 1021.675733][ T7797] sctp_add_bind_addr+0x8c/0x370 [ 1021.675764][ T7797] sctp_copy_local_addr_list+0x314/0x4f0 [ 1021.675793][ T7797] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1021.675818][ T7797] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1021.675846][ T7797] ? sctp_v6_is_any+0x64/0x80 [ 1021.675873][ T7797] ? sctp_copy_one_addr+0x93/0x360 [ 1021.675901][ T7797] sctp_bind_addr_copy+0xb3/0x3c0 [ 1021.675924][ T7797] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1021.675959][ T7797] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1021.675992][ T7797] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1021.676036][ T7797] ? __local_bh_enable_ip+0xd0/0x130 [ 1021.676060][ T7797] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1021.676081][ T7797] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1021.676107][ T7797] sctp_sendmsg+0x1528/0x2c10 [ 1021.676153][ T7797] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1021.676184][ T7797] ? aa_sk_perm+0x6d5/0x900 [ 1021.676208][ T7797] ? __might_fault+0xaf/0x130 [ 1021.676243][ T7797] ? __pfx_aa_sk_perm+0x10/0x10 [ 1021.676272][ T7797] ? sock_rps_record_flow+0x19/0x350 [ 1021.676293][ T7797] ? __pfx_inet_sendmsg+0x10/0x10 [ 1021.676315][ T7797] ? inet_sendmsg+0x2f4/0x370 [ 1021.676336][ T7797] ? __pfx_inet_sendmsg+0x10/0x10 [ 1021.676366][ T7797] __sys_sendto+0x5de/0x710 [ 1021.676397][ T7797] ? __pfx___sys_sendto+0x10/0x10 [ 1021.676422][ T7797] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1021.676462][ T7797] ? __fget_files+0x3a0/0x420 [ 1021.676500][ T7797] ? ksys_write+0x242/0x270 [ 1021.676533][ T7797] ? __pfx_ksys_write+0x10/0x10 [ 1021.676570][ T7797] __x64_sys_sendto+0xde/0x100 [ 1021.676600][ T7797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.676623][ T7797] do_syscall_64+0x15f/0xf80 [ 1021.676648][ T7797] ? trace_irq_disable+0x3b/0x140 [ 1021.676670][ T7797] ? clear_bhb_loop+0x40/0x90 [ 1021.676697][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.676717][ T7797] RIP: 0033:0x7fdf5fd9c819 [ 1021.676738][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.676756][ T7797] RSP: 002b:00007fdf60b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1021.676780][ T7797] RAX: ffffffffffffffda RBX: 00007fdf60015fa0 RCX: 00007fdf5fd9c819 [ 1021.676795][ T7797] RDX: 0000000000000003 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1021.676808][ T7797] RBP: 00007fdf60b8d090 R08: 0000200000000100 R09: 000000000000001c [ 1021.676822][ T7797] R10: 647a49b57a144d68 R11: 0000000000000246 R12: 0000000000000002 [ 1021.676835][ T7797] R13: 00007fdf60016038 R14: 00007fdf60015fa0 R15: 00007ffd9b9949a8 [ 1021.676872][ T7797] [ 1022.201562][ T7807] bond1: option fail_over_mac: invalid value (16) [ 1022.232556][ T7807] bond1 (unregistering): Released all slaves [ 1022.534733][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9532'. [ 1022.862335][ T7849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9538'. [ 1022.884752][ T7849] openvswitch: netlink: Flow key attr not present in new flow. [ 1023.064637][ T7856] xt_hashlimit: size too large, truncated to 1048576 [ 1023.097529][ T7861] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9541'. [ 1023.114287][ T7863] FAULT_INJECTION: forcing a failure. [ 1023.114287][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.165087][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9543'. [ 1023.227387][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.4.9539 Not tainted syzkaller #0 PREEMPT(full) [ 1023.227420][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.227433][ T7863] Call Trace: [ 1023.227442][ T7863] [ 1023.227452][ T7863] dump_stack_lvl+0xe8/0x150 [ 1023.227488][ T7863] should_fail_ex+0x412/0x560 [ 1023.227524][ T7863] should_failslab+0xa8/0x100 [ 1023.227548][ T7863] __kmalloc_cache_noprof+0x88/0x660 [ 1023.227577][ T7863] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1023.227605][ T7863] ? sctp_add_bind_addr+0x8c/0x370 [ 1023.227635][ T7863] sctp_add_bind_addr+0x8c/0x370 [ 1023.227666][ T7863] sctp_copy_local_addr_list+0x314/0x4f0 [ 1023.227696][ T7863] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1023.227721][ T7863] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1023.227749][ T7863] ? sctp_v6_is_any+0x64/0x80 [ 1023.227776][ T7863] ? sctp_copy_one_addr+0x93/0x360 [ 1023.227807][ T7863] sctp_bind_addr_copy+0xb3/0x3c0 [ 1023.227834][ T7863] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1023.227872][ T7863] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1023.227906][ T7863] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1023.227943][ T7863] ? __local_bh_enable_ip+0xd0/0x130 [ 1023.227970][ T7863] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1023.227990][ T7863] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1023.228017][ T7863] sctp_sendmsg+0x1528/0x2c10 [ 1023.228063][ T7863] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1023.228104][ T7863] ? aa_sk_perm+0x6d5/0x900 [ 1023.228130][ T7863] ? __might_fault+0xaf/0x130 [ 1023.228166][ T7863] ? __pfx_aa_sk_perm+0x10/0x10 [ 1023.228197][ T7863] ? sock_rps_record_flow+0x19/0x350 [ 1023.228225][ T7863] ? __pfx_inet_sendmsg+0x10/0x10 [ 1023.228248][ T7863] ? inet_sendmsg+0x2f4/0x370 [ 1023.228270][ T7863] ? __pfx_inet_sendmsg+0x10/0x10 [ 1023.228293][ T7863] __sys_sendto+0x5de/0x710 [ 1023.228326][ T7863] ? __pfx___sys_sendto+0x10/0x10 [ 1023.228352][ T7863] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1023.228395][ T7863] ? __fget_files+0x3a0/0x420 [ 1023.228435][ T7863] ? ksys_write+0x242/0x270 [ 1023.228469][ T7863] ? __pfx_ksys_write+0x10/0x10 [ 1023.228506][ T7863] __x64_sys_sendto+0xde/0x100 [ 1023.228536][ T7863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.228560][ T7863] do_syscall_64+0x15f/0xf80 [ 1023.228586][ T7863] ? trace_irq_disable+0x3b/0x140 [ 1023.228609][ T7863] ? clear_bhb_loop+0x40/0x90 [ 1023.228636][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.228657][ T7863] RIP: 0033:0x7f92fad9c819 [ 1023.228679][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.228698][ T7863] RSP: 002b:00007f92fbc94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1023.228722][ T7863] RAX: ffffffffffffffda RBX: 00007f92fb016090 RCX: 00007f92fad9c819 [ 1023.228737][ T7863] RDX: 0000000000000003 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1023.228751][ T7863] RBP: 00007f92fbc94090 R08: 0000200000000100 R09: 000000000000001c [ 1023.228765][ T7863] R10: 647a49b57a144d68 R11: 0000000000000246 R12: 0000000000000002 [ 1023.228779][ T7863] R13: 00007f92fb016128 R14: 00007f92fb016090 R15: 00007ffe1595c948 [ 1023.228817][ T7863] [ 1024.012826][ T7890] FAULT_INJECTION: forcing a failure. [ 1024.012826][ T7890] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.039054][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.4.9550 Not tainted syzkaller #0 PREEMPT(full) [ 1024.039096][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1024.039111][ T7890] Call Trace: [ 1024.039120][ T7890] [ 1024.039129][ T7890] dump_stack_lvl+0xe8/0x150 [ 1024.039165][ T7890] should_fail_ex+0x412/0x560 [ 1024.039201][ T7890] should_failslab+0xa8/0x100 [ 1024.039223][ T7890] ? skb_clone+0x212/0x3a0 [ 1024.039243][ T7890] kmem_cache_alloc_noprof+0x87/0x650 [ 1024.039274][ T7890] ? __netlink_lookup+0xc6/0x8b0 [ 1024.039301][ T7890] skb_clone+0x212/0x3a0 [ 1024.039324][ T7890] __netlink_deliver_tap+0x404/0x850 [ 1024.039367][ T7890] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.039400][ T7890] netlink_deliver_tap+0x19c/0x1b0 [ 1024.039429][ T7890] netlink_unicast+0x730/0x8e0 [ 1024.039469][ T7890] netlink_sendmsg+0x813/0xb40 [ 1024.039509][ T7890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.039543][ T7890] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1024.039574][ T7890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1024.039613][ T7890] ____sys_sendmsg+0x972/0x9f0 [ 1024.039644][ T7890] ? __might_fault+0xaf/0x130 [ 1024.039678][ T7890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.039719][ T7890] ? import_iovec+0x73/0xa0 [ 1024.039744][ T7890] ___sys_sendmsg+0x2a5/0x360 [ 1024.039773][ T7890] ? __lock_acquire+0x6b5/0x2cf0 [ 1024.039806][ T7890] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.039876][ T7890] ? __fget_files+0x2a/0x420 [ 1024.039902][ T7890] ? __fget_files+0x3a0/0x420 [ 1024.039938][ T7890] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1024.039973][ T7890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1024.040013][ T7890] ? __pfx_ksys_write+0x10/0x10 [ 1024.040054][ T7890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.040086][ T7890] do_syscall_64+0x15f/0xf80 [ 1024.040111][ T7890] ? trace_irq_disable+0x3b/0x140 [ 1024.040134][ T7890] ? clear_bhb_loop+0x40/0x90 [ 1024.040160][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.040180][ T7890] RIP: 0033:0x7f92fad9c819 [ 1024.040201][ T7890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.040220][ T7890] RSP: 002b:00007f92fbcb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.040243][ T7890] RAX: ffffffffffffffda RBX: 00007f92fb015fa0 RCX: 00007f92fad9c819 [ 1024.040259][ T7890] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1024.040273][ T7890] RBP: 00007f92fbcb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.040286][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.040298][ T7890] R13: 00007f92fb016038 R14: 00007f92fb015fa0 R15: 00007ffe1595c948 [ 1024.040333][ T7890] [ 1024.504851][ T7903] FAULT_INJECTION: forcing a failure. [ 1024.504851][ T7903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.519052][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.3.9556 Not tainted syzkaller #0 PREEMPT(full) [ 1024.519083][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1024.519095][ T7903] Call Trace: [ 1024.519104][ T7903] [ 1024.519113][ T7903] dump_stack_lvl+0xe8/0x150 [ 1024.519151][ T7903] should_fail_ex+0x412/0x560 [ 1024.519184][ T7903] _copy_from_iter+0x1d3/0x1670 [ 1024.519218][ T7903] ? rcu_is_watching+0x15/0xb0 [ 1024.519253][ T7903] ? __pfx__copy_from_iter+0x10/0x10 [ 1024.519291][ T7903] ? netlink_sendmsg+0x650/0xb40 [ 1024.519327][ T7903] ? skb_put+0x11b/0x210 [ 1024.519360][ T7903] netlink_sendmsg+0x6c0/0xb40 [ 1024.519399][ T7903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.519434][ T7903] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1024.519464][ T7903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1024.519497][ T7903] ____sys_sendmsg+0x972/0x9f0 [ 1024.519528][ T7903] ? __might_fault+0xaf/0x130 [ 1024.519562][ T7903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.519603][ T7903] ? import_iovec+0x73/0xa0 [ 1024.519635][ T7903] ___sys_sendmsg+0x2a5/0x360 [ 1024.519665][ T7903] ? __lock_acquire+0x6b5/0x2cf0 [ 1024.519697][ T7903] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.519766][ T7903] ? __fget_files+0x2a/0x420 [ 1024.519792][ T7903] ? __fget_files+0x3a0/0x420 [ 1024.519829][ T7903] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1024.519863][ T7903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1024.519905][ T7903] ? __pfx_ksys_write+0x10/0x10 [ 1024.519946][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.519968][ T7903] do_syscall_64+0x15f/0xf80 [ 1024.519994][ T7903] ? trace_irq_disable+0x3b/0x140 [ 1024.520016][ T7903] ? clear_bhb_loop+0x40/0x90 [ 1024.520042][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.520061][ T7903] RIP: 0033:0x7fdf5fd9c819 [ 1024.520082][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.520100][ T7903] RSP: 002b:00007fdf60b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.520122][ T7903] RAX: ffffffffffffffda RBX: 00007fdf60015fa0 RCX: 00007fdf5fd9c819 [ 1024.520138][ T7903] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1024.520151][ T7903] RBP: 00007fdf60b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.520164][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.520177][ T7903] R13: 00007fdf60016038 R14: 00007fdf60015fa0 R15: 00007ffd9b9949a8 [ 1024.520212][ T7903] [ 1025.113283][ T7930] x_tables: duplicate entry at hook 2 [ 1025.293288][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9567'. [ 1025.394346][ T7946] FAULT_INJECTION: forcing a failure. [ 1025.394346][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.409836][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.0.9570 Not tainted syzkaller #0 PREEMPT(full) [ 1025.409868][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.409880][ T7946] Call Trace: [ 1025.409889][ T7946] [ 1025.409899][ T7946] dump_stack_lvl+0xe8/0x150 [ 1025.409934][ T7946] should_fail_ex+0x412/0x560 [ 1025.409969][ T7946] _copy_from_iter+0x1d3/0x1670 [ 1025.410012][ T7946] ? rcu_is_watching+0x15/0xb0 [ 1025.410049][ T7946] ? __pfx__copy_from_iter+0x10/0x10 [ 1025.410089][ T7946] ? netlink_sendmsg+0x650/0xb40 [ 1025.410119][ T7946] ? skb_put+0x11b/0x210 [ 1025.410151][ T7946] netlink_sendmsg+0x6c0/0xb40 [ 1025.410193][ T7946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.410227][ T7946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1025.410263][ T7946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1025.410297][ T7946] ____sys_sendmsg+0x972/0x9f0 [ 1025.410328][ T7946] ? __might_fault+0xaf/0x130 [ 1025.410364][ T7946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1025.410406][ T7946] ? import_iovec+0x73/0xa0 [ 1025.410431][ T7946] ___sys_sendmsg+0x2a5/0x360 [ 1025.410461][ T7946] ? __lock_acquire+0x6b5/0x2cf0 [ 1025.410492][ T7946] ? __pfx____sys_sendmsg+0x10/0x10 [ 1025.410562][ T7946] ? __fget_files+0x2a/0x420 [ 1025.410587][ T7946] ? __fget_files+0x3a0/0x420 [ 1025.410624][ T7946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1025.410659][ T7946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1025.410701][ T7946] ? __pfx_ksys_write+0x10/0x10 [ 1025.410742][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.410766][ T7946] do_syscall_64+0x15f/0xf80 [ 1025.410792][ T7946] ? trace_irq_disable+0x3b/0x140 [ 1025.410814][ T7946] ? clear_bhb_loop+0x40/0x90 [ 1025.410841][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.410862][ T7946] RIP: 0033:0x7fb29339c819 [ 1025.410884][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.410902][ T7946] RSP: 002b:00007fb2942ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1025.410926][ T7946] RAX: ffffffffffffffda RBX: 00007fb293615fa0 RCX: 00007fb29339c819 [ 1025.410942][ T7946] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1025.410956][ T7946] RBP: 00007fb2942ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.410969][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.410982][ T7946] R13: 00007fb293616038 R14: 00007fb293615fa0 R15: 00007fff84172b08 [ 1025.411023][ T7946] [ 1025.606061][ T7942] tipc: Enabling of bearer rejected, failed to enable media [ 1025.909481][ T7962] FAULT_INJECTION: forcing a failure. [ 1025.909481][ T7962] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.925176][ T7962] CPU: 0 UID: 0 PID: 7962 Comm: syz.2.9576 Not tainted syzkaller #0 PREEMPT(full) [ 1025.925208][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.925221][ T7962] Call Trace: [ 1025.925230][ T7962] [ 1025.925241][ T7962] dump_stack_lvl+0xe8/0x150 [ 1025.925279][ T7962] should_fail_ex+0x412/0x560 [ 1025.925313][ T7962] should_failslab+0xa8/0x100 [ 1025.925339][ T7962] __kmalloc_cache_noprof+0x88/0x660 [ 1025.925369][ T7962] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1025.925395][ T7962] ? sctp_add_bind_addr+0x8c/0x370 [ 1025.925427][ T7962] sctp_add_bind_addr+0x8c/0x370 [ 1025.925457][ T7962] sctp_copy_local_addr_list+0x314/0x4f0 [ 1025.925488][ T7962] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1025.925513][ T7962] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1025.925540][ T7962] ? sctp_v6_is_any+0x64/0x80 [ 1025.925568][ T7962] ? sctp_copy_one_addr+0x93/0x360 [ 1025.925595][ T7962] sctp_bind_addr_copy+0xb3/0x3c0 [ 1025.925622][ T7962] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1025.925664][ T7962] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1025.925696][ T7962] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1025.925732][ T7962] ? __local_bh_enable_ip+0xd0/0x130 [ 1025.925758][ T7962] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1025.925779][ T7962] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1025.925807][ T7962] sctp_sendmsg+0x1528/0x2c10 [ 1025.925853][ T7962] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1025.925886][ T7962] ? aa_sk_perm+0x6d5/0x900 [ 1025.925913][ T7962] ? __might_fault+0xaf/0x130 [ 1025.925949][ T7962] ? __pfx_aa_sk_perm+0x10/0x10 [ 1025.925980][ T7962] ? sock_rps_record_flow+0x19/0x350 [ 1025.926003][ T7962] ? __pfx_inet_sendmsg+0x10/0x10 [ 1025.926026][ T7962] ? inet_sendmsg+0x2f4/0x370 [ 1025.926056][ T7962] ? __pfx_inet_sendmsg+0x10/0x10 [ 1025.926080][ T7962] __sys_sendto+0x5de/0x710 [ 1025.926113][ T7962] ? __pfx___sys_sendto+0x10/0x10 [ 1025.926139][ T7962] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1025.926183][ T7962] ? __fget_files+0x3a0/0x420 [ 1025.926223][ T7962] ? ksys_write+0x242/0x270 [ 1025.926257][ T7962] ? __pfx_ksys_write+0x10/0x10 [ 1025.926294][ T7962] __x64_sys_sendto+0xde/0x100 [ 1025.926323][ T7962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.926347][ T7962] do_syscall_64+0x15f/0xf80 [ 1025.926374][ T7962] ? trace_irq_disable+0x3b/0x140 [ 1025.926395][ T7962] ? clear_bhb_loop+0x40/0x90 [ 1025.926421][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.926441][ T7962] RIP: 0033:0x7f9a6ef9c819 [ 1025.926463][ T7962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.926480][ T7962] RSP: 002b:00007f9a6febb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1025.926503][ T7962] RAX: ffffffffffffffda RBX: 00007f9a6f215fa0 RCX: 00007f9a6ef9c819 [ 1025.926519][ T7962] RDX: 0000000000000003 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1025.926531][ T7962] RBP: 00007f9a6febb090 R08: 0000200000000100 R09: 000000000000001c [ 1025.926545][ T7962] R10: 647a49b57a144d68 R11: 0000000000000246 R12: 0000000000000002 [ 1025.926559][ T7962] R13: 00007f9a6f216038 R14: 00007f9a6f215fa0 R15: 00007ffd7ca8dcd8 [ 1025.926595][ T7962] [ 1026.415295][ T7974] FAULT_INJECTION: forcing a failure. [ 1026.415295][ T7974] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.434000][ T7974] CPU: 0 UID: 0 PID: 7974 Comm: syz.1.9582 Not tainted syzkaller #0 PREEMPT(full) [ 1026.434029][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1026.434042][ T7974] Call Trace: [ 1026.434051][ T7974] [ 1026.434060][ T7974] dump_stack_lvl+0xe8/0x150 [ 1026.434095][ T7974] should_fail_ex+0x412/0x560 [ 1026.434131][ T7974] should_failslab+0xa8/0x100 [ 1026.434155][ T7974] __kmalloc_noprof+0xe8/0x760 [ 1026.434186][ T7974] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1026.434219][ T7974] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1026.434253][ T7974] genl_family_rcv_msg_doit+0xd9/0x330 [ 1026.434285][ T7974] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1026.434318][ T7974] ? apparmor_capable+0x126/0x170 [ 1026.434342][ T7974] ? bpf_lsm_capable+0x9/0x20 [ 1026.434364][ T7974] ? security_capable+0x7e/0x2c0 [ 1026.434398][ T7974] genl_rcv_msg+0x61c/0x7a0 [ 1026.434428][ T7974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1026.434450][ T7974] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1026.434475][ T7974] ? __pfx_ref_tracker_free+0x10/0x10 [ 1026.434518][ T7974] netlink_rcv_skb+0x232/0x4b0 [ 1026.434550][ T7974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1026.434576][ T7974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1026.434626][ T7974] ? down_read+0x270/0x2e0 [ 1026.434652][ T7974] ? genl_rcv+0xd/0x40 [ 1026.434677][ T7974] genl_rcv+0x28/0x40 [ 1026.434699][ T7974] netlink_unicast+0x75c/0x8e0 [ 1026.434740][ T7974] netlink_sendmsg+0x813/0xb40 [ 1026.434782][ T7974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.434818][ T7974] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1026.434848][ T7974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1026.434882][ T7974] ____sys_sendmsg+0x972/0x9f0 [ 1026.434913][ T7974] ? __might_fault+0xaf/0x130 [ 1026.434949][ T7974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.435121][ T7974] ? import_iovec+0x73/0xa0 [ 1026.435162][ T7974] ___sys_sendmsg+0x2a5/0x360 [ 1026.435195][ T7974] ? __lock_acquire+0x6b5/0x2cf0 [ 1026.435228][ T7974] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.435304][ T7974] ? __fget_files+0x2a/0x420 [ 1026.435330][ T7974] ? __fget_files+0x3a0/0x420 [ 1026.435369][ T7974] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1026.435406][ T7974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1026.435449][ T7974] ? __pfx_ksys_write+0x10/0x10 [ 1026.435490][ T7974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.435515][ T7974] do_syscall_64+0x15f/0xf80 [ 1026.435542][ T7974] ? trace_irq_disable+0x3b/0x140 [ 1026.435566][ T7974] ? clear_bhb_loop+0x40/0x90 [ 1026.435594][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.435616][ T7974] RIP: 0033:0x7f2f97f9c819 [ 1026.435639][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.435658][ T7974] RSP: 002b:00007f2f98ed2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.435684][ T7974] RAX: ffffffffffffffda RBX: 00007f2f98215fa0 RCX: 00007f2f97f9c819 [ 1026.435699][ T7974] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1026.435714][ T7974] RBP: 00007f2f98ed2090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.435727][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.435741][ T7974] R13: 00007f2f98216038 R14: 00007f2f98215fa0 R15: 00007ffee8111628 [ 1026.435778][ T7974] [ 1027.237306][ T8007] bridge0: port 2(vlan2) entered blocking state [ 1027.250378][ T8007] bridge0: port 2(vlan2) entered disabled state [ 1027.259670][ T8007] vlan2: entered allmulticast mode [ 1027.275925][ T8007] geneve0: entered allmulticast mode [ 1027.292592][ T8007] vlan2: entered promiscuous mode [ 1027.324971][ T8007] geneve0: entered promiscuous mode [ 1027.368632][ T8018] FAULT_INJECTION: forcing a failure. [ 1027.368632][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.401375][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.0.9596 Not tainted syzkaller #0 PREEMPT(full) [ 1027.401407][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1027.401421][ T8018] Call Trace: [ 1027.401430][ T8018] [ 1027.401440][ T8018] dump_stack_lvl+0xe8/0x150 [ 1027.401477][ T8018] should_fail_ex+0x412/0x560 [ 1027.401514][ T8018] should_failslab+0xa8/0x100 [ 1027.401539][ T8018] __kmalloc_cache_noprof+0x88/0x660 [ 1027.401572][ T8018] ? l2tp_tunnel_create+0x92/0x3e0 [ 1027.401608][ T8018] l2tp_tunnel_create+0x92/0x3e0 [ 1027.401642][ T8018] l2tp_nl_cmd_tunnel_create+0x2b1/0x970 [ 1027.401666][ T8018] ? rcu_is_watching+0x15/0xb0 [ 1027.401702][ T8018] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1027.401729][ T8018] ? __nla_parse+0x40/0x60 [ 1027.401756][ T8018] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1027.401782][ T8018] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1027.401817][ T8018] genl_family_rcv_msg_doit+0x22a/0x330 [ 1027.401852][ T8018] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1027.401893][ T8018] ? bpf_lsm_capable+0x9/0x20 [ 1027.401923][ T8018] ? security_capable+0x7e/0x2c0 [ 1027.401968][ T8018] genl_rcv_msg+0x61c/0x7a0 [ 1027.402001][ T8018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1027.402024][ T8018] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1027.402050][ T8018] ? __pfx_ref_tracker_free+0x10/0x10 [ 1027.402094][ T8018] netlink_rcv_skb+0x232/0x4b0 [ 1027.402126][ T8018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1027.402152][ T8018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1027.402202][ T8018] ? down_read+0x270/0x2e0 [ 1027.402230][ T8018] ? genl_rcv+0xd/0x40 [ 1027.402263][ T8018] genl_rcv+0x28/0x40 [ 1027.402284][ T8018] netlink_unicast+0x75c/0x8e0 [ 1027.402326][ T8018] netlink_sendmsg+0x813/0xb40 [ 1027.402368][ T8018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1027.402403][ T8018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1027.402434][ T8018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1027.402470][ T8018] ____sys_sendmsg+0x972/0x9f0 [ 1027.402502][ T8018] ? __might_fault+0xaf/0x130 [ 1027.402538][ T8018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1027.402578][ T8018] ? import_iovec+0x73/0xa0 [ 1027.402604][ T8018] ___sys_sendmsg+0x2a5/0x360 [ 1027.402633][ T8018] ? __lock_acquire+0x6b5/0x2cf0 [ 1027.402663][ T8018] ? __pfx____sys_sendmsg+0x10/0x10 [ 1027.402743][ T8018] ? __fget_files+0x2a/0x420 [ 1027.402770][ T8018] ? __fget_files+0x3a0/0x420 [ 1027.402828][ T8018] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1027.402864][ T8018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1027.402904][ T8018] ? __pfx_ksys_write+0x10/0x10 [ 1027.402943][ T8018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.402965][ T8018] do_syscall_64+0x15f/0xf80 [ 1027.402989][ T8018] ? trace_irq_disable+0x3b/0x140 [ 1027.403010][ T8018] ? clear_bhb_loop+0x40/0x90 [ 1027.403035][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.403054][ T8018] RIP: 0033:0x7fb29339c819 [ 1027.403075][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.403092][ T8018] RSP: 002b:00007fb2942ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.403115][ T8018] RAX: ffffffffffffffda RBX: 00007fb293615fa0 RCX: 00007fb29339c819 [ 1027.403130][ T8018] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1027.403142][ T8018] RBP: 00007fb2942ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.403154][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.403166][ T8018] R13: 00007fb293616038 R14: 00007fb293615fa0 R15: 00007fff84172b08 [ 1027.403201][ T8018] [ 1028.100189][ T8027] syzkaller1: entered promiscuous mode [ 1028.142925][ T8027] syzkaller1: entered allmulticast mode [ 1028.211502][ T8039] ip6erspan1: entered allmulticast mode [ 1028.235730][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9603'. [ 1028.247179][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9603'. [ 1028.258240][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9603'. [ 1028.269891][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9603'. [ 1028.532247][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9610'. [ 1028.709678][ T8063] sctp: [Deprecated]: syz.4.9612 (pid 8063) Use of int in max_burst socket option. [ 1028.709678][ T8063] Use struct sctp_assoc_value instead [ 1029.009236][ T5145] Bluetooth: hci5: command 0x0405 tx timeout [ 1029.215670][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9615'. [ 1029.297933][ T8072] netlink: 'syz.1.9615': attribute type 1 has an invalid length. [ 1029.414391][ T8095] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9620'. [ 1029.528194][ T8072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1029.572145][ T8098] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1029.586953][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9623'. [ 1029.904675][ T8114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 1029.940083][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9626'. [ 1030.005369][ T8118] bond1: (slave geneve2): making interface the new active one [ 1030.053221][ T8118] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1030.206164][ T8126] FAULT_INJECTION: forcing a failure. [ 1030.206164][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.238068][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.3.9628 Not tainted syzkaller #0 PREEMPT(full) [ 1030.238100][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1030.238114][ T8126] Call Trace: [ 1030.238123][ T8126] [ 1030.238133][ T8126] dump_stack_lvl+0xe8/0x150 [ 1030.238169][ T8126] should_fail_ex+0x412/0x560 [ 1030.238206][ T8126] should_failslab+0xa8/0x100 [ 1030.238230][ T8126] __kmalloc_cache_noprof+0x88/0x660 [ 1030.238268][ T8126] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1030.238295][ T8126] ? sctp_add_bind_addr+0x8c/0x370 [ 1030.238326][ T8126] sctp_add_bind_addr+0x8c/0x370 [ 1030.238355][ T8126] sctp_copy_local_addr_list+0x314/0x4f0 [ 1030.238384][ T8126] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1030.238409][ T8126] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1030.238437][ T8126] ? sctp_v6_is_any+0x64/0x80 [ 1030.238464][ T8126] ? sctp_copy_one_addr+0x93/0x360 [ 1030.238493][ T8126] sctp_bind_addr_copy+0xb3/0x3c0 [ 1030.238519][ T8126] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1030.238556][ T8126] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1030.238591][ T8126] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1030.238627][ T8126] ? __local_bh_enable_ip+0xd0/0x130 [ 1030.238653][ T8126] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1030.238673][ T8126] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1030.238702][ T8126] sctp_sendmsg+0x1528/0x2c10 [ 1030.238748][ T8126] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1030.238780][ T8126] ? aa_sk_perm+0x6d5/0x900 [ 1030.238806][ T8126] ? __might_fault+0xaf/0x130 [ 1030.238841][ T8126] ? __pfx_aa_sk_perm+0x10/0x10 [ 1030.238871][ T8126] ? sock_rps_record_flow+0x19/0x350 [ 1030.238893][ T8126] ? __pfx_inet_sendmsg+0x10/0x10 [ 1030.238914][ T8126] ? inet_sendmsg+0x2f4/0x370 [ 1030.238935][ T8126] ? __pfx_inet_sendmsg+0x10/0x10 [ 1030.238957][ T8126] __sys_sendto+0x5de/0x710 [ 1030.238989][ T8126] ? __pfx___sys_sendto+0x10/0x10 [ 1030.239012][ T8126] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1030.239048][ T8126] ? __fget_files+0x3a0/0x420 [ 1030.239085][ T8126] ? ksys_write+0x242/0x270 [ 1030.239118][ T8126] ? __pfx_ksys_write+0x10/0x10 [ 1030.239154][ T8126] __x64_sys_sendto+0xde/0x100 [ 1030.239184][ T8126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.239207][ T8126] do_syscall_64+0x15f/0xf80 [ 1030.239232][ T8126] ? trace_irq_disable+0x3b/0x140 [ 1030.239264][ T8126] ? clear_bhb_loop+0x40/0x90 [ 1030.239290][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.239311][ T8126] RIP: 0033:0x7fdf5fd9c819 [ 1030.239331][ T8126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.239349][ T8126] RSP: 002b:00007fdf5dfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1030.239377][ T8126] RAX: ffffffffffffffda RBX: 00007fdf60016180 RCX: 00007fdf5fd9c819 [ 1030.239392][ T8126] RDX: 0000000000000003 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1030.239406][ T8126] RBP: 00007fdf5dfd5090 R08: 0000200000000100 R09: 000000000000001c [ 1030.239419][ T8126] R10: 647a49b57a144d68 R11: 0000000000000246 R12: 0000000000000002 [ 1030.239433][ T8126] R13: 00007fdf60016218 R14: 00007fdf60016180 R15: 00007ffd9b9949a8 [ 1030.239470][ T8126] [ 1031.193782][ T8140] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1031.354029][ T8149] Bluetooth: MGMT ver 1.23 [ 1031.427522][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1031.828179][ T8178] netlink: 'syz.2.9646': attribute type 3 has an invalid length. [ 1031.930304][ T8181] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1032.295003][ T8190] netlink: 'syz.3.9651': attribute type 1 has an invalid length. [ 1032.608100][ T8190] bond2: entered promiscuous mode [ 1032.613815][ T8190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1032.622443][ T8207] netlink: 'syz.2.9654': attribute type 1 has an invalid length. [ 1032.818036][ T8226] netlink: 'syz.0.9662': attribute type 1 has an invalid length. [ 1032.860908][ T8226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1033.205555][ T8248] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1033.353356][ T8259] netlink: 'syz.3.9671': attribute type 11 has an invalid length. [ 1033.361739][ T8259] __nla_validate_parse: 3 callbacks suppressed [ 1033.361760][ T8259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9671'. [ 1033.379787][ T8261] FAULT_INJECTION: forcing a failure. [ 1033.379787][ T8261] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.394188][ T8261] CPU: 1 UID: 0 PID: 8261 Comm: syz.4.9670 Not tainted syzkaller #0 PREEMPT(full) [ 1033.394216][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.394227][ T8261] Call Trace: [ 1033.394235][ T8261] [ 1033.394242][ T8261] dump_stack_lvl+0xe8/0x150 [ 1033.394275][ T8261] should_fail_ex+0x412/0x560 [ 1033.394305][ T8261] should_failslab+0xa8/0x100 [ 1033.394328][ T8261] __kmalloc_cache_noprof+0x88/0x660 [ 1033.394355][ T8261] ? sctp_add_bind_addr+0x8c/0x370 [ 1033.394382][ T8261] sctp_add_bind_addr+0x8c/0x370 [ 1033.394407][ T8261] sctp_copy_local_addr_list+0x314/0x4f0 [ 1033.394431][ T8261] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1033.394452][ T8261] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1033.394474][ T8261] ? sctp_v6_is_any+0x64/0x80 [ 1033.394497][ T8261] ? sctp_copy_one_addr+0x93/0x360 [ 1033.394522][ T8261] sctp_bind_addr_copy+0xb3/0x3c0 [ 1033.394544][ T8261] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1033.394575][ T8261] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1033.394605][ T8261] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1033.394639][ T8261] ? __local_bh_enable_ip+0xd0/0x130 [ 1033.394665][ T8261] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1033.394684][ T8261] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1033.394711][ T8261] sctp_sendmsg+0x1528/0x2c10 [ 1033.394754][ T8261] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1033.394783][ T8261] ? aa_sk_perm+0x6d5/0x900 [ 1033.394803][ T8261] ? __might_fault+0xaf/0x130 [ 1033.394824][ T8261] ? __pfx_aa_sk_perm+0x10/0x10 [ 1033.394841][ T8261] ? sock_rps_record_flow+0x19/0x350 [ 1033.394854][ T8261] ? __pfx_inet_sendmsg+0x10/0x10 [ 1033.394867][ T8261] ? inet_sendmsg+0x2f4/0x370 [ 1033.394881][ T8261] ? __pfx_inet_sendmsg+0x10/0x10 [ 1033.394902][ T8261] __sys_sendto+0x5de/0x710 [ 1033.394922][ T8261] ? __pfx___sys_sendto+0x10/0x10 [ 1033.394937][ T8261] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1033.394962][ T8261] ? __fget_files+0x3a0/0x420 [ 1033.394984][ T8261] ? ksys_write+0x242/0x270 [ 1033.395004][ T8261] ? __pfx_ksys_write+0x10/0x10 [ 1033.395025][ T8261] __x64_sys_sendto+0xde/0x100 [ 1033.395043][ T8261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.395057][ T8261] do_syscall_64+0x15f/0xf80 [ 1033.395072][ T8261] ? trace_irq_disable+0x3b/0x140 [ 1033.395086][ T8261] ? clear_bhb_loop+0x40/0x90 [ 1033.395101][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.395113][ T8261] RIP: 0033:0x7f92fad9c819 [ 1033.395127][ T8261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.395145][ T8261] RSP: 002b:00007f92fbcb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1033.395161][ T8261] RAX: ffffffffffffffda RBX: 00007f92fb015fa0 RCX: 00007f92fad9c819 [ 1033.395171][ T8261] RDX: 0000000000000003 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1033.395179][ T8261] RBP: 00007f92fbcb5090 R08: 0000200000000100 R09: 000000000000001c [ 1033.395187][ T8261] R10: 647a49b57a144d68 R11: 0000000000000246 R12: 0000000000000002 [ 1033.395195][ T8261] R13: 00007f92fb016038 R14: 00007f92fb015fa0 R15: 00007ffe1595c948 [ 1033.395216][ T8261] [ 1034.019039][ T8282] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1034.141347][ T8286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1034.373672][ T8301] bridge0: port 3(ipvlan3) entered blocking state [ 1034.390575][ T8301] bridge0: port 3(ipvlan3) entered disabled state [ 1034.419099][ T8301] ipvlan3: entered allmulticast mode [ 1034.446938][ T8301] bridge0: entered allmulticast mode [ 1034.500376][ T8301] ipvlan3: left allmulticast mode [ 1034.511381][ T8301] bridge0: left allmulticast mode [ 1034.675733][ T8302] lo speed is unknown, defaulting to 1000 [ 1034.774418][ T8324] netlink: 'syz.3.9688': attribute type 3 has an invalid length. [ 1034.785660][ T8324] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9688'. [ 1035.045868][ T8335] syzkaller0: entered promiscuous mode [ 1035.069689][ T8335] syzkaller0: entered allmulticast mode [ 1035.724903][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1035.742665][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1035.762156][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1035.778239][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1035.790050][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1035.859251][ T8357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.998710][ T8361] lo speed is unknown, defaulting to 1000 [ 1036.100861][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9705'. [ 1036.212503][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9705'. [ 1036.957144][ T8400] syzkaller0: entered promiscuous mode [ 1036.985369][ T8400] syzkaller0: entered allmulticast mode [ 1037.890700][ T5145] Bluetooth: hci3: command tx timeout [ 1038.043754][ T8420] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9716'. [ 1038.079728][ T8420] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.9716'. [ 1038.092912][ T8420] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1038.368993][ T8361] chnl_net:caif_netlink_parms(): no params data found [ 1038.949603][ T8361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.985876][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.998437][ T8361] bridge_slave_0: entered allmulticast mode [ 1039.020002][ T8361] bridge_slave_0: entered promiscuous mode [ 1039.032846][ T8361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.042177][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.052822][ T8361] bridge_slave_1: entered allmulticast mode [ 1039.080231][ T8361] bridge_slave_1: entered promiscuous mode [ 1039.312628][ T8361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.326189][ T8361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.621479][ T8361] team0: Port device team_slave_0 added [ 1039.862859][ T8361] team0: Port device team_slave_1 added [ 1039.883226][ T8478] netlink: 766 bytes leftover after parsing attributes in process `syz.0.9732'. [ 1039.968100][ T5145] Bluetooth: hci3: command tx timeout [ 1040.054493][ T8488] netlink: 'syz.3.9735': attribute type 1 has an invalid length. [ 1040.232754][ T8488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1040.245659][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.280415][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.378712][ T8361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.439821][ T8486] bond3: (slave geneve2): making interface the new active one [ 1040.451329][ T8486] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1040.468736][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.478609][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.506123][ T8361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.520291][ T8506] tipc: Enabling of bearer rejected, media not registered [ 1040.715877][ T8361] hsr_slave_0: entered promiscuous mode [ 1040.723483][ T8361] hsr_slave_1: entered promiscuous mode [ 1040.745778][ T8361] debugfs: 'hsr0' already exists in 'hsr' [ 1040.762816][ T8361] Cannot create hsr debugfs directory [ 1040.820755][ T8508] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9741'. [ 1041.460077][ T8361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.735123][ T8361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.052257][ T5145] Bluetooth: hci3: command tx timeout [ 1042.088522][ T8361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.854691][ T8538] infiniband syz0: set active [ 1042.860841][ T8538] infiniband syz0: added veth0_vlan [ 1042.870150][ T8538] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1042.878167][ T8538] infiniband syz0: Couldn't open port 1 [ 1042.918394][ T8559] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1043.047853][ T8538] RDS/IB: syz0: added [ 1043.077474][ T8538] smc: adding ib device syz0 with port count 1 [ 1043.102660][ T8538] smc: ib device syz0 port 1 has no pnetid [ 1043.282059][ T8361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1043.334378][ T8566] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9760'. [ 1043.473941][ T8361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.523188][ T8569] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1043.619474][ T8361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1043.655765][ T8361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1043.689717][ T8361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1043.717990][ T8361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1043.738994][ T8361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1043.781403][ T8361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1044.062223][ T8361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.093263][ T8361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.126137][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.133598][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.147200][ T5145] Bluetooth: hci3: command tx timeout [ 1044.203013][ T8589] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1044.248279][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.255798][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.762199][ T8601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.788047][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9769'. [ 1044.995315][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9769'. [ 1045.072041][ T8606] netlink: 'syz.1.9769': attribute type 1 has an invalid length. [ 1045.233540][ T8611] netlink: 'syz.4.9772': attribute type 10 has an invalid length. [ 1045.360357][ T8611] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1045.509990][ T8361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.719895][ T8361] veth0_vlan: entered promiscuous mode [ 1045.778867][ T8361] veth1_vlan: entered promiscuous mode [ 1045.916798][ T8625] netlink: 'syz.0.9777': attribute type 1 has an invalid length. [ 1045.938893][ T8361] veth0_macvtap: entered promiscuous mode [ 1045.951494][ T8625] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9777'. [ 1045.979771][ T8361] veth1_macvtap: entered promiscuous mode [ 1045.980761][ T8625] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9777'. [ 1046.051717][ T8361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.079004][ T8625] netlink: 'syz.0.9777': attribute type 1 has an invalid length. [ 1046.094810][ T8361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.116585][ T8625] netlink: 'syz.0.9777': attribute type 8 has an invalid length. [ 1046.135728][ T8625] netlink: 582 bytes leftover after parsing attributes in process `syz.0.9777'. [ 1046.152894][ T135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.210802][ T135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.244187][ T135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.294712][ T135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.500506][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9780'. [ 1046.643877][ T8631] hsr_slave_0: left promiscuous mode [ 1046.698693][ T8631] hsr_slave_1: left promiscuous mode [ 1046.811026][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.861695][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.016125][T12375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.055811][T12375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.319100][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9783'. [ 1047.391066][ T8645] bridge1: entered promiscuous mode [ 1047.423978][ T8645] bridge1: entered allmulticast mode [ 1047.455124][ T8645] team0: Port device bridge1 added [ 1047.502329][ T8649] bridge0: port 3(team0) entered blocking state [ 1047.520025][ T8649] bridge0: port 3(team0) entered disabled state [ 1047.539243][ T8649] team0: entered allmulticast mode [ 1047.564469][ T8649] team_slave_0: entered allmulticast mode [ 1047.594399][ T8649] team_slave_1: entered allmulticast mode [ 1047.623719][ T8649] team0: entered promiscuous mode [ 1047.640169][ T8649] team_slave_0: entered promiscuous mode [ 1047.663241][ T8649] team_slave_1: entered promiscuous mode [ 1047.687830][ T8649] bridge0: port 3(team0) entered blocking state [ 1047.694305][ T8649] bridge0: port 3(team0) entered forwarding state [ 1047.744223][ T8646] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1048.795251][ T8679] openvswitch: netlink: EtherType 0 is less than min 600 [ 1048.857803][ T8683] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.9794'. [ 1048.877990][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1048.891359][ T8683] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1048.921189][ T8679] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1048.978144][ T8688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9795'. [ 1049.049069][ T8688] sctp: [Deprecated]: syz.0.9795 (pid 8688) Use of int in maxseg socket option. [ 1049.049069][ T8688] Use struct sctp_assoc_value instead [ 1050.260691][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9805'. [ 1050.293763][ T1739] block nbd0: Possible stuck request ffff888096077000: control (read@0,1024B). Runtime 270 seconds [ 1050.305897][ T1739] block nbd0: Possible stuck request ffff8880960771c0: control (read@1024,1024B). Runtime 270 seconds [ 1050.318112][ T1739] block nbd0: Possible stuck request ffff888096077380: control (read@2048,1024B). Runtime 270 seconds [ 1050.329825][ T1739] block nbd0: Possible stuck request ffff888096077540: control (read@3072,1024B). Runtime 270 seconds [ 1050.530832][ T8728] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1050.749807][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9808'. [ 1050.992621][ T8735] Cannot find add_set index 0 as target [ 1051.565546][ T8754] netlink: 'syz.2.9814': attribute type 30 has an invalid length. [ 1051.668313][ T8754] bond1: option arp_missed_max: invalid value (0) [ 1051.675244][ T8754] bond1: option arp_missed_max: allowed values 1 - 255 [ 1051.695770][ T8754] bond1 (unregistering): Released all slaves [ 1052.340002][ T8764] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1052.789414][ T8784] team0: left allmulticast mode [ 1052.804666][ T8784] team_slave_0: left allmulticast mode [ 1052.833848][ T8784] team_slave_1: left allmulticast mode [ 1052.877522][ T8784] team0: left promiscuous mode [ 1052.921722][ T8784] team_slave_0: left promiscuous mode [ 1052.984093][ T8784] team_slave_1: left promiscuous mode [ 1053.031439][ T8784] bridge0: port 3(team0) entered disabled state [ 1053.151301][ T8784] bridge_slave_0: left promiscuous mode [ 1053.169746][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.241382][ T8784] bridge_slave_1: left allmulticast mode [ 1053.271426][ T8784] bridge_slave_1: left promiscuous mode [ 1053.301584][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.403971][ T8784] bond0: (slave bond_slave_0): Releasing backup interface [ 1053.508699][ T8784] bond0: (slave bond_slave_1): Releasing backup interface [ 1053.615465][ T8784] team0: Port device team_slave_0 removed [ 1053.694359][ T8784] team0: Port device team_slave_1 removed [ 1053.714509][ T8784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.735472][ T8784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.773822][ T8784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.800805][ T8784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.831759][ T8784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1053.849710][ T8791] tipc: Enabling of bearer rejected, failed to enable media [ 1054.272012][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9834'. [ 1054.303814][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9834'. [ 1054.447623][ T8818] bridge3: port 1(vlan2) entered blocking state [ 1054.475325][ T8818] bridge3: port 1(vlan2) entered disabled state [ 1054.493350][ T8818] vlan2: entered allmulticast mode [ 1054.518022][ T8818] bridge3: entered allmulticast mode [ 1054.550443][ T8818] vlan2: left allmulticast mode [ 1054.568196][ T8818] bridge3: left allmulticast mode [ 1054.629015][ T8823] SET target dimension over the limit! [ 1054.725854][ T8828] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1055.109583][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9842'. [ 1055.184721][ T8838] netlink: 'syz.4.9842': attribute type 1 has an invalid length. [ 1055.268723][ T8838] netlink: 'syz.4.9842': attribute type 2 has an invalid length. [ 1055.629222][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9844'. [ 1055.666579][ T8852] netlink: 'syz.4.9844': attribute type 1 has an invalid length. [ 1055.688632][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9844'. [ 1055.715846][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9844'. [ 1055.758338][ T8852] netlink: 'syz.4.9844': attribute type 1 has an invalid length. [ 1055.789565][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9844'. [ 1056.052596][ T8859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9848'. [ 1056.072012][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9846'. [ 1056.119491][ T8862] netlink: 'syz.3.9847': attribute type 1 has an invalid length. [ 1056.219772][ T8862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1056.354274][ T8832] netlink: 'syz.1.9840': attribute type 16 has an invalid length. [ 1056.378425][ T8832] netlink: 'syz.1.9840': attribute type 17 has an invalid length. [ 1056.550323][ T8832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1056.854162][ T8877] xt_ecn: cannot match TCP bits for non-tcp packets [ 1057.028938][ T8894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1057.252949][ T8906] netlink: 'syz.2.9859': attribute type 16 has an invalid length. [ 1057.261732][ T8906] netlink: 'syz.2.9859': attribute type 17 has an invalid length. [ 1057.313582][ T8906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1059.849939][ T8886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.232253][ T8920] netlink: 'syz.4.9865': attribute type 12 has an invalid length. [ 1060.313153][ T8918] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9862'. [ 1061.389474][ T8958] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1061.920643][ T8981] netlink: 'syz.4.9883': attribute type 1 has an invalid length. [ 1061.951362][ T8985] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1062.121897][ T8993] xt_cluster: node mask cannot exceed total number of nodes [ 1063.069485][ T135] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 1063.196122][ T9036] x_tables: duplicate entry at hook 1 [ 1063.688531][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9903'. [ 1063.698939][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9903'. [ 1064.208611][ T135] wlan1: Trigger new scan to find an IBSS to join [ 1065.747082][ T9021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1066.918076][ T9103] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1067.040126][ T9104] Dead loop on virtual device ip6_vti0 (net 502), fix it urgently! [ 1067.651048][ T9122] vlan1: entered promiscuous mode [ 1067.666677][ T9122] bridge0: entered promiscuous mode [ 1068.396258][ T9147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1068.552164][ T9144] netlink: 'syz.4.9929': attribute type 2 has an invalid length. [ 1068.633094][ T9155] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.9930'. [ 1068.682033][ T9158] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9930'. [ 1068.856075][ T9161] netlink: 'syz.4.9933': attribute type 1 has an invalid length. [ 1068.903931][ T9161] netlink: 'syz.4.9933': attribute type 1 has an invalid length. [ 1068.958365][ T9168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.031091][ T9172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.540455][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9940'. [ 1070.504915][ T9214] netlink: set zone limit has 4 unknown bytes [ 1070.547912][ T9229] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9950'. [ 1070.755422][ T9222] lo speed is unknown, defaulting to 1000 [ 1070.969198][ T9246] netlink: 'syz.2.9953': attribute type 10 has an invalid length. [ 1070.981065][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1071.149681][ T9246] team0 (unregistering): Port device team_slave_0 removed [ 1071.343859][ T9246] team0 (unregistering): Port device team_slave_1 removed [ 1071.424217][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1072.152847][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9964'. [ 1072.682528][ T9291] team_slave_1: entered allmulticast mode [ 1073.168660][ T9295] syzkaller1: entered promiscuous mode [ 1073.189548][ T9295] syzkaller1: entered allmulticast mode [ 1073.335234][ T9306] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9974'. [ 1074.063233][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9977'. [ 1074.221364][ T9334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.419421][ T9341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9983'. [ 1074.613815][ T9350] GUP no longer grows the stack in syz.4.9982 (9350): 200000003000-20000000a000 (200000001000) [ 1074.636071][ T9350] CPU: 0 UID: 0 PID: 9350 Comm: syz.4.9982 Not tainted syzkaller #0 PREEMPT(full) [ 1074.636108][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1074.636121][ T9350] Call Trace: [ 1074.636131][ T9350] [ 1074.636141][ T9350] dump_stack_lvl+0xe8/0x150 [ 1074.636179][ T9350] __get_user_pages+0x2453/0x29d0 [ 1074.636233][ T9350] ? __gup_longterm_locked+0xc4e/0x1630 [ 1074.636262][ T9350] ? down_read_killable+0x1bb/0x340 [ 1074.636292][ T9350] ? try_get_folio+0xec/0x650 [ 1074.636325][ T9350] __gup_longterm_locked+0xdcf/0x1630 [ 1074.636380][ T9350] gup_fast_fallback+0x1d82/0x22e0 [ 1074.636443][ T9350] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1074.636472][ T9350] ? is_valid_gup_args+0x11f/0x200 [ 1074.636502][ T9350] ? get_user_pages_fast+0x4d/0xb0 [ 1074.636542][ T9350] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 1074.636576][ T9350] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1074.636614][ T9350] iov_iter_get_pages2+0x5e/0xa0 [ 1074.636639][ T9350] __se_sys_vmsplice+0x7b3/0x1490 [ 1074.636692][ T9350] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1074.636722][ T9350] ? __pfx_futex_wait+0x10/0x10 [ 1074.636823][ T9350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.636847][ T9350] do_syscall_64+0x15f/0xf80 [ 1074.636873][ T9350] ? trace_irq_disable+0x3b/0x140 [ 1074.636897][ T9350] ? clear_bhb_loop+0x40/0x90 [ 1074.636926][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.636947][ T9350] RIP: 0033:0x7f92fad9c819 [ 1074.636969][ T9350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.636989][ T9350] RSP: 002b:00007f92fbc73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1074.637014][ T9350] RAX: ffffffffffffffda RBX: 00007f92fb016180 RCX: 00007f92fad9c819 [ 1074.637030][ T9350] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1074.637044][ T9350] RBP: 00007f92fae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1074.637057][ T9350] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1074.637071][ T9350] R13: 00007f92fb016218 R14: 00007f92fb016180 R15: 00007ffe1595c948 [ 1074.637106][ T9350] [ 1074.642885][ T9338] bond3: option lp_interval: invalid value (0) [ 1074.875276][ T9338] bond3: option lp_interval: allowed values 1 - 2147483647 [ 1074.988864][ T9338] bond3 (unregistering): Released all slaves [ 1075.542372][ T9363] netlink: 'syz.0.9986': attribute type 10 has an invalid length. [ 1075.852041][ T9347] netlink: 'syz.4.9982': attribute type 25 has an invalid length. [ 1075.922935][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.938465][ T9363] bridge_slave_1: left allmulticast mode [ 1075.944213][ T9363] bridge_slave_1: left promiscuous mode [ 1075.957312][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.004680][ T9363] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1076.210292][ T9369] netlink: 'syz.4.9988': attribute type 1 has an invalid length. [ 1076.226773][ T9369] netlink: 476 bytes leftover after parsing attributes in process `syz.4.9988'. [ 1076.248381][ T9369] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.9988'. [ 1076.343781][ T9370] tipc: Started in network mode [ 1076.357349][ T9370] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1076.370223][ T9370] tipc: Enabled bearer , priority 10 [ 1076.760354][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9994'. [ 1076.782369][ T9398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1077.069328][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9998'. [ 1077.120919][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9999'. [ 1077.130664][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9999'. [ 1077.202628][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10000'. [ 1077.214884][ T9408] xt_TCPMSS: Only works on TCP SYN packets [ 1077.215108][ T9410] xt_TCPMSS: Only works on TCP SYN packets [ 1077.233128][ T9408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10000'. [ 1077.386852][T15644] tipc: Node number set to 10136234 [ 1077.462026][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10003'. [ 1077.508312][ T9421] Cannot find set identified by id 0 to match [ 1078.045247][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10012'. [ 1078.119458][ T9440] ±ÿ: renamed from lo (while UP) [ 1078.419060][ T9453] syzkaller0: entered promiscuous mode [ 1078.437895][ T9453] syzkaller0: entered allmulticast mode [ 1078.458863][ T9458] Bluetooth: MGMT ver 1.23 [ 1080.400592][ T1739] block nbd0: Possible stuck request ffff888096077000: control (read@0,1024B). Runtime 300 seconds [ 1080.412536][ T1739] block nbd0: Possible stuck request ffff8880960771c0: control (read@1024,1024B). Runtime 300 seconds [ 1080.424200][ T1739] block nbd0: Possible stuck request ffff888096077380: control (read@2048,1024B). Runtime 300 seconds [ 1080.435597][ T1739] block nbd0: Possible stuck request ffff888096077540: control (read@3072,1024B). Runtime 300 seconds [ 1084.335798][ T9479] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10022'. [ 1084.580917][ T9484] x_tables: duplicate underflow at hook 1 [ 1084.813121][ T9494] batman_adv: batadv0: Adding interface: dummy0 [ 1084.825436][ T9494] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.873742][ T9494] batman_adv: batadv0: Interface activated: dummy0 [ 1084.974462][ T9501] batadv0: mtu less than device minimum [ 1084.981883][ T9505] IPv6: NLM_F_CREATE should be specified when creating new route [ 1084.995918][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.010355][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.022424][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.028642][ T9505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1085.034761][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.042102][ T9505] IPv6: NLM_F_CREATE should be set when creating new route [ 1085.053304][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.071557][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.083693][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.095699][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.107700][ T9501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1085.177944][ T9498] syzkaller1: entered promiscuous mode [ 1085.183682][ T9498] syzkaller1: entered allmulticast mode [ 1085.356008][ T9512] netlink: 388 bytes leftover after parsing attributes in process `syz.0.10032'. [ 1085.415182][ T9501] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1085.778677][ T9523] Bluetooth: hci1: too big key_count value 32778 [ 1085.987262][ T2371] IPVS: starting estimator thread 0... [ 1086.076586][ T9535] IPVS: using max 28 ests per chain, 67200 per kthread [ 1086.207699][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10040'. [ 1086.381574][ T9542] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1086.431416][ T9542] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1086.471000][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10043'. [ 1086.542286][ T992] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.561083][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10043'. [ 1086.605305][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10043'. [ 1086.617903][ T135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.654448][ T135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.732308][ T135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.909602][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1086.940076][ T9571] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1086.968544][ T9571] lo: entered allmulticast mode [ 1086.981333][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10048'. [ 1087.436934][ T9586] ip6tnl0: Caught tx_queue_len zero misconfig [ 1087.462389][ T9586] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10051'. [ 1087.508069][ T9586] lo: Caught tx_queue_len zero misconfig [ 1088.047075][ T9603] netlink: 'syz.2.10057': attribute type 2 has an invalid length. [ 1088.069668][ T9603] netlink: 'syz.2.10057': attribute type 2 has an invalid length. [ 1088.985825][ T2371] IPVS: starting estimator thread 0... [ 1089.106661][ T9627] IPVS: using max 27 ests per chain, 64800 per kthread [ 1090.662990][ T9707] __nla_validate_parse: 1 callbacks suppressed [ 1090.663013][ T9707] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.10088'. [ 1090.685517][ T9705] netlink: 'syz.3.10087': attribute type 1 has an invalid length. [ 1090.713018][ T9705] netlink: 'syz.3.10087': attribute type 3 has an invalid length. [ 1090.756793][ T9705] netlink: 212 bytes leftover after parsing attributes in process `syz.3.10087'. [ 1090.771816][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10088'. [ 1090.943416][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10090'. [ 1090.994848][ T9722] x_tables: unsorted entry at hook 1 [ 1091.153533][ T9705] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.634645][ T9705] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.691746][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1091.843674][ T9755] veth0_macvtap: left promiscuous mode [ 1091.932712][ T9738] syzkaller1: entered promiscuous mode [ 1091.945809][ T9738] syzkaller1: entered allmulticast mode [ 1092.062215][ T9705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.293170][ T9705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.344054][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10100'. [ 1092.452196][ T9765] team0: Port device team_slave_0 removed [ 1092.515902][ T9777] syzkaller1: entered promiscuous mode [ 1092.561938][ T9777] syzkaller1: entered allmulticast mode [ 1092.957252][ T135] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.001815][ T9793] netlink: 'syz.4.10109': attribute type 12 has an invalid length. [ 1093.111828][ T992] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.192022][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1093.279387][ T992] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.351606][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10112'. [ 1093.363903][ T9810] mac80211_hwsim hwsim84 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1093.386983][ T992] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.610761][ T9815] netlink: 'syz.1.10116': attribute type 1 has an invalid length. [ 1093.633384][ T9817] net_ratelimit: 11 callbacks suppressed [ 1093.633447][ T9817] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1093.764302][ T9825] netlink: 'syz.4.10119': attribute type 1 has an invalid length. [ 1093.787825][ T9815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1093.985395][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1094.063219][ T9827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1094.947744][ T9864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1096.135162][ T9909] x_tables: duplicate underflow at hook 1 [ 1096.168757][ T9910] xt_time: unknown flags 0xf4 [ 1096.673303][ T9928] __nla_validate_parse: 6 callbacks suppressed [ 1096.673326][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10151'. [ 1096.759233][ T9935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10151'. [ 1097.280240][ T9953] syzkaller0: entered promiscuous mode [ 1097.314360][ T9953] syzkaller0: entered allmulticast mode [ 1097.775867][ T9968] IPv6: sit1: Disabled Multicast RS [ 1097.793072][ T9968] sit1: entered allmulticast mode [ 1097.803314][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10161'. [ 1097.906260][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10161'. [ 1098.010573][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10163'. [ 1098.044174][ T9984] netlink: 'syz.4.10163': attribute type 26 has an invalid length. [ 1098.062766][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10164'. [ 1098.077257][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10163'. [ 1098.118846][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10164'. [ 1098.129986][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10163'. [ 1098.170976][ T9984] netlink: 'syz.4.10163': attribute type 26 has an invalid length. [ 1098.190944][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10163'. [ 1098.665175][ T9997] netlink: set zone limit has 4 unknown bytes [ 1098.921057][T10005] bridge5: entered promiscuous mode [ 1098.949138][T10005] bridge5: entered allmulticast mode [ 1100.128624][ T2377] page_pool_release_retry() stalled pool shutdown: id 1260, 1 inflight 60 sec [ 1100.138577][T10046] netlink: 'syz.3.10187': attribute type 21 has an invalid length. [ 1100.161626][T10046] IPv6: NLM_F_CREATE should be specified when creating new route [ 1100.184811][T10046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.192361][T10046] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.199701][T10046] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.207184][T10046] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.503443][T10059] syzkaller1: entered promiscuous mode [ 1100.509750][T10059] syzkaller1: entered allmulticast mode [ 1101.213490][T10090] netlink: 'syz.3.10201': attribute type 10 has an invalid length. [ 1101.949404][T10126] xt_hashlimit: size too large, truncated to 1048576 [ 1102.094445][T10143] __nla_validate_parse: 4 callbacks suppressed [ 1102.094464][T10143] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1102.181276][T10143] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1102.232613][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1102.276213][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1102.297244][T10158] netlink: 'syz.3.10215': attribute type 1 has an invalid length. [ 1102.653931][T10163] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1102.679563][T10163] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1102.718115][T10163] bond5: (slave ip6gre1): making interface the new active one [ 1102.774093][T10163] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 1102.975879][T10179] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10218'. [ 1103.005545][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10218'. [ 1103.058482][T10167] syzkaller0: entered promiscuous mode [ 1103.096281][T10167] syzkaller0: entered allmulticast mode [ 1103.634482][T10211] Bluetooth: MGMT ver 1.23 [ 1103.679055][T10210] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10226'. [ 1104.808132][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10237'. [ 1104.900625][T10272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10240'. [ 1105.016801][T10274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1105.090029][T10279] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1105.090029][T10279] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1105.185636][T10283] netlink: zone id is out of range [ 1105.192171][T10283] netlink: zone id is out of range [ 1105.200698][T10283] netlink: zone id is out of range [ 1105.221157][T10283] netlink: zone id is out of range [ 1105.229402][T10283] netlink: zone id is out of range [ 1105.246629][T10283] netlink: zone id is out of range [ 1105.259870][T10283] netlink: zone id is out of range [ 1105.314877][T10283] netlink: zone id is out of range [ 1105.335488][T10283] netlink: zone id is out of range [ 1105.349412][T10283] netlink: zone id is out of range [ 1105.888641][T10315] netlink: 'syz.3.10252': attribute type 4 has an invalid length. [ 1106.158878][T10313] syzkaller0: entered promiscuous mode [ 1106.178299][T10313] syzkaller0: entered allmulticast mode [ 1107.002136][T10351] netlink: 'syz.3.10261': attribute type 39 has an invalid length. [ 1107.020496][T10350] netlink: 'syz.3.10261': attribute type 39 has an invalid length. [ 1110.470412][ T1739] block nbd0: Possible stuck request ffff888096077000: control (read@0,1024B). Runtime 330 seconds [ 1110.482858][ T1739] block nbd0: Possible stuck request ffff8880960771c0: control (read@1024,1024B). Runtime 330 seconds [ 1110.495174][ T1739] block nbd0: Possible stuck request ffff888096077380: control (read@2048,1024B). Runtime 330 seconds [ 1110.509065][ T1739] block nbd0: Possible stuck request ffff888096077540: control (read@3072,1024B). Runtime 330 seconds [ 1112.410704][T10342] IPVS: Error connecting to the multicast addr [ 1112.456525][T10351] hsr_slave_1 (unregistering): left promiscuous mode [ 1112.604869][T10375] sctp: [Deprecated]: syz.2.10264 (pid 10375) Use of int in maxseg socket option. [ 1112.604869][T10375] Use struct sctp_assoc_value instead [ 1112.737646][T10380] netlink: 'syz.3.10266': attribute type 2 has an invalid length. [ 1112.773389][T10380] netlink: 'syz.3.10266': attribute type 3 has an invalid length. [ 1112.786498][T10380] __nla_validate_parse: 2 callbacks suppressed [ 1112.786519][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10266'. [ 1112.826160][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10266'. [ 1112.849110][T10389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10267'. [ 1112.889753][T10394] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1113.110087][T10399] netlink: 33 bytes leftover after parsing attributes in process `syz.4.10270'. [ 1113.125495][T10399] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10270'. [ 1113.150066][T10399] netlink: 33 bytes leftover after parsing attributes in process `syz.4.10270'. [ 1113.168889][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.448036][T10399] syzkaller0: entered promiscuous mode [ 1113.866659][T10424] netlink: 'syz.2.10276': attribute type 10 has an invalid length. [ 1113.875739][T10424] netlink: 396 bytes leftover after parsing attributes in process `syz.2.10276'. [ 1118.308526][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 1118.943528][T10400] netlink: 'syz.0.10271': attribute type 5 has an invalid length. [ 1119.350621][T10437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10282'. [ 1119.765325][T10455] netlink: 'syz.3.10285': attribute type 1 has an invalid length. [ 1119.780561][T10455] netlink: 'syz.3.10285': attribute type 1 has an invalid length. [ 1119.853056][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.928573][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10287'. [ 1120.157362][T10471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1120.304157][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.569437][ T2377] syz0: Port: 1 Link DOWN [ 1120.585941][T10478] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1120.609376][T14316] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.642997][T14316] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.691105][T14316] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.724846][T14316] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.004746][T10494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10297'. [ 1121.277165][T10505] FAULT_INJECTION: forcing a failure. [ 1121.277165][T10505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.295984][T10503] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1121.309093][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.1.10299 Not tainted syzkaller #0 PREEMPT(full) [ 1121.309124][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1121.309138][T10505] Call Trace: [ 1121.309146][T10505] [ 1121.309155][T10505] dump_stack_lvl+0xe8/0x150 [ 1121.309190][T10505] should_fail_ex+0x412/0x560 [ 1121.309227][T10505] _copy_from_iter+0x1d3/0x1670 [ 1121.309263][T10505] ? rcu_is_watching+0x15/0xb0 [ 1121.309300][T10505] ? __pfx__copy_from_iter+0x10/0x10 [ 1121.309339][T10505] ? netlink_sendmsg+0x650/0xb40 [ 1121.309369][T10505] ? skb_put+0x11b/0x210 [ 1121.309401][T10505] netlink_sendmsg+0x6c0/0xb40 [ 1121.309438][T10505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1121.309472][T10505] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1121.309502][T10505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1121.309534][T10505] ____sys_sendmsg+0x972/0x9f0 [ 1121.309564][T10505] ? __might_fault+0xaf/0x130 [ 1121.309598][T10505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1121.309637][T10505] ? import_iovec+0x73/0xa0 [ 1121.309660][T10505] ___sys_sendmsg+0x2a5/0x360 [ 1121.309688][T10505] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.309719][T10505] ? __pfx____sys_sendmsg+0x10/0x10 [ 1121.309787][T10505] ? __fget_files+0x2a/0x420 [ 1121.309811][T10505] ? __fget_files+0x3a0/0x420 [ 1121.309848][T10505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1121.309880][T10505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1121.309921][T10505] ? __pfx_ksys_write+0x10/0x10 [ 1121.309962][T10505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.309985][T10505] do_syscall_64+0x15f/0xf80 [ 1121.310011][T10505] ? trace_irq_disable+0x3b/0x140 [ 1121.310043][T10505] ? clear_bhb_loop+0x40/0x90 [ 1121.310069][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.310090][T10505] RIP: 0033:0x7f2f97f9c819 [ 1121.310110][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.310129][T10505] RSP: 002b:00007f2f98ed2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.310152][T10505] RAX: ffffffffffffffda RBX: 00007f2f98215fa0 RCX: 00007f2f97f9c819 [ 1121.310167][T10505] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000005 [ 1121.310181][T10505] RBP: 00007f2f98ed2090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.310194][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.310207][T10505] R13: 00007f2f98216038 R14: 00007f2f98215fa0 R15: 00007ffee8111628 [ 1121.310241][T10505] [ 1121.924932][T10533] bond1: entered promiscuous mode [ 1122.060223][T10541] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10308'. [ 1122.065823][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10311'. [ 1122.131951][T10544] FAULT_INJECTION: forcing a failure. [ 1122.131951][T10544] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.157992][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.2.10313 Not tainted syzkaller #0 PREEMPT(full) [ 1122.158030][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1122.158043][T10544] Call Trace: [ 1122.158052][T10544] [ 1122.158062][T10544] dump_stack_lvl+0xe8/0x150 [ 1122.158097][T10544] should_fail_ex+0x412/0x560 [ 1122.158132][T10544] should_failslab+0xa8/0x100 [ 1122.158156][T10544] __kmalloc_noprof+0xe8/0x760 [ 1122.158186][T10544] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1122.158219][T10544] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1122.158252][T10544] genl_family_rcv_msg_doit+0xd9/0x330 [ 1122.158283][T10544] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1122.158316][T10544] ? apparmor_capable+0x126/0x170 [ 1122.158339][T10544] ? bpf_lsm_capable+0x9/0x20 [ 1122.158361][T10544] ? security_capable+0x7e/0x2c0 [ 1122.158394][T10544] genl_rcv_msg+0x61c/0x7a0 [ 1122.158424][T10544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1122.158445][T10544] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1122.158465][T10544] ? __pfx_nl80211_get_mpath+0x10/0x10 [ 1122.158485][T10544] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1122.158506][T10544] ? __pfx_ref_tracker_free+0x10/0x10 [ 1122.158548][T10544] netlink_rcv_skb+0x232/0x4b0 [ 1122.158578][T10544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1122.158603][T10544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1122.158650][T10544] ? down_read+0x270/0x2e0 [ 1122.158677][T10544] ? genl_rcv+0xd/0x40 [ 1122.158700][T10544] genl_rcv+0x28/0x40 [ 1122.158720][T10544] netlink_unicast+0x75c/0x8e0 [ 1122.158759][T10544] netlink_sendmsg+0x813/0xb40 [ 1122.158799][T10544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.158832][T10544] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1122.158862][T10544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1122.158895][T10544] ____sys_sendmsg+0x972/0x9f0 [ 1122.158926][T10544] ? __might_fault+0xaf/0x130 [ 1122.158960][T10544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1122.159007][T10544] ? import_iovec+0x73/0xa0 [ 1122.159033][T10544] ___sys_sendmsg+0x2a5/0x360 [ 1122.159062][T10544] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.159093][T10544] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.159164][T10544] ? __fget_files+0x2a/0x420 [ 1122.159188][T10544] ? __fget_files+0x3a0/0x420 [ 1122.159225][T10544] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1122.159258][T10544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1122.159299][T10544] ? __pfx_ksys_write+0x10/0x10 [ 1122.159339][T10544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.159362][T10544] do_syscall_64+0x15f/0xf80 [ 1122.159386][T10544] ? trace_irq_disable+0x3b/0x140 [ 1122.159404][T10544] ? clear_bhb_loop+0x40/0x90 [ 1122.159425][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.159441][T10544] RIP: 0033:0x7fb6e339c819 [ 1122.159458][T10544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.159472][T10544] RSP: 002b:00007fb6e41c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.159491][T10544] RAX: ffffffffffffffda RBX: 00007fb6e3615fa0 RCX: 00007fb6e339c819 [ 1122.159504][T10544] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000005 [ 1122.159514][T10544] RBP: 00007fb6e41c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.159525][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.159535][T10544] R13: 00007fb6e3616038 R14: 00007fb6e3615fa0 R15: 00007fff787ab338 [ 1122.159563][T10544] [ 1123.057403][T10556] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0 [ 1123.146747][T10559] x_tables: unsorted entry at hook 1 [ 1123.390717][T10568] netlink: 288 bytes leftover after parsing attributes in process `syz.1.10323'. [ 1123.402780][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10325'. [ 1123.429165][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10323'. [ 1123.450956][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10325'. [ 1123.882614][T10596] netlink: 'syz.2.10331': attribute type 10 has an invalid length. [ 1123.890683][T10596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10331'. [ 1123.940796][T10595] netlink: 'syz.2.10331': attribute type 10 has an invalid length. [ 1123.948973][T10595] dummy0: entered promiscuous mode [ 1123.954828][T10595] bridge0: port 3(dummy0) entered blocking state [ 1123.961255][T10595] bridge0: port 3(dummy0) entered disabled state [ 1123.967981][T10595] dummy0: entered allmulticast mode [ 1123.998502][ T31] INFO: task udevd:31230 blocked for more than 143 seconds. [ 1124.006036][ T31] Not tainted syzkaller #0 [ 1124.019539][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1124.028288][ T31] task:udevd state:D stack:22392 pid:31230 tgid:31230 ppid:5194 task_flags:0x400140 flags:0x00080002 [ 1124.040437][ T31] Call Trace: [ 1124.044033][ T31] [ 1124.047522][ T31] __schedule+0x17b4/0x5680 [ 1124.052552][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.061873][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.067542][ T31] ? __pfx___schedule+0x10/0x10 [ 1124.072946][ T31] ? schedule+0x90/0x360 [ 1124.077269][ T31] schedule+0x164/0x360 [ 1124.081569][ T31] io_schedule+0x7f/0xd0 [ 1124.085871][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1124.135707][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1124.141627][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 1124.146878][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1124.148163][T10598] bond6: entered promiscuous mode [ 1124.152491][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1124.152546][ T31] do_read_cache_folio+0x1ad/0x590 [ 1124.152572][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1124.173967][ T31] read_part_sector+0xb6/0x2b0 [ 1124.202808][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1124.223184][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1124.230009][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1124.235877][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1124.242266][ T31] bdev_disk_changed+0x817/0x1770 [ 1124.247359][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1124.252949][ T31] blkdev_get_whole+0x380/0x510 [ 1124.257936][ T31] bdev_open+0x31e/0xd30 [ 1124.262236][ T31] blkdev_open+0x470/0x610 [ 1124.266702][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1124.271683][ T31] do_dentry_open+0x785/0x14e0 [ 1124.276499][ T31] vfs_open+0x3b/0x340 [ 1124.280782][ T31] ? path_openat+0x2df0/0x3860 [ 1124.285592][ T31] path_openat+0x2e08/0x3860 [ 1124.290294][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1124.295693][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1124.301257][ T31] ? __pfx_path_openat+0x10/0x10 [ 1124.306207][ T31] ? __x64_sys_openat+0x138/0x170 [ 1124.311274][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.316601][ T31] do_file_open+0x23e/0x4a0 [ 1124.321169][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1124.340826][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1124.345836][ T31] ? alloc_fd+0x64b/0x6c0 [ 1124.350222][ T31] do_sys_openat2+0x113/0x200 [ 1124.355012][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1124.360588][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.365796][ T31] ? rcu_is_watching+0x15/0xb0 [ 1124.370573][ T31] __x64_sys_openat+0x138/0x170 [ 1124.375451][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.381536][ T31] do_syscall_64+0x15f/0xf80 [ 1124.386190][ T31] ? trace_irq_disable+0x3b/0x140 [ 1124.391262][ T31] ? clear_bhb_loop+0x40/0x90 [ 1124.395968][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.401881][ T31] RIP: 0033:0x7f4fee2a7407 [ 1124.406309][ T31] RSP: 002b:00007ffd65dd5330 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1124.415117][ T31] RAX: ffffffffffffffda RBX: 00007f4fee96f880 RCX: 00007f4fee2a7407 [ 1124.423210][ T31] RDX: 00000000000a0800 RSI: 00005558565c2100 RDI: ffffffffffffff9c [ 1124.431239][ T31] RBP: 000055585659c910 R08: 0000000000000000 R09: 0000000000000000 [ 1124.439594][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005558565b0ba0 [ 1124.460070][ T31] R13: 00005558565aa190 R14: 0000000000000000 R15: 00005558565b0ba0 [ 1124.468237][ T31] [ 1124.471558][ T31] [ 1124.471558][ T31] Showing all locks held in the system: [ 1124.479304][ T31] 2 locks held by ksoftirqd/1/23: [ 1124.484355][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1124.494475][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1124.503430][ T31] 1 lock held by khungtaskd/31: [ 1124.508505][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1124.518644][ T31] 2 locks held by getty/5584: [ 1124.523365][ T31] #0: ffff8880368780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1124.534271][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1124.544855][ T31] 3 locks held by kworker/1:8/27810: [ 1124.550431][ T31] #0: ffff88813fe53140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1124.571905][ T31] #1: ffffc9000d1efc40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1124.583847][ T31] #2: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1124.596103][ T31] 1 lock held by udevd/31230: [ 1124.600804][ T31] #0: ffff88805318d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1124.610496][ T31] 2 locks held by kworker/u8:0/10133: [ 1124.615894][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1124.625916][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1124.634814][ T31] 1 lock held by syz.4.10334/10600: [ 1124.640105][ T31] #0: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1124.649183][ T31] [ 1124.651560][ T31] ============================================= [ 1124.651560][ T31] [ 1124.660031][ T31] NMI backtrace for cpu 0 [ 1124.660054][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1124.660078][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1124.660090][ T31] Call Trace: [ 1124.660099][ T31] [ 1124.660110][ T31] dump_stack_lvl+0xe8/0x150 [ 1124.660145][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1124.660179][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1124.660211][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1124.660254][ T31] sys_info+0x135/0x170 [ 1124.660283][ T31] watchdog+0xfaa/0x1000 [ 1124.660313][ T31] ? watchdog+0x209/0x1000 [ 1124.660343][ T31] kthread+0x388/0x470 [ 1124.660365][ T31] ? __pfx_watchdog+0x10/0x10 [ 1124.660385][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.660407][ T31] ret_from_fork+0x514/0xb70 [ 1124.660440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.660468][ T31] ? __switch_to+0xc79/0x1410 [ 1124.660495][ T31] ? __pfx_kthread+0x10/0x10 [ 1124.660518][ T31] ret_from_fork_asm+0x1a/0x30 [ 1124.660565][ T31] [ 1124.660573][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1124.788032][ C1] NMI backtrace for cpu 1 [ 1124.788052][ C1] CPU: 1 UID: 0 PID: 10153 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 1124.788072][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1124.788083][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1124.788111][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1124.788131][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 5b 0a 7d f5 cc [ 1124.788146][ C1] RSP: 0018:ffffc9000daa7808 EFLAGS: 00000002 [ 1124.788160][ C1] RAX: 0000000000000001 RBX: ffff8880878a5c40 RCX: ffffffff93e74988 [ 1124.788172][ C1] RDX: 0000000000000002 RSI: ffff8880878a67d0 RDI: ffff8880878a5c40 [ 1124.788183][ C1] RBP: 0000000000000000 R08: ffffffff903219b7 R09: 1ffffffff2064336 [ 1124.788195][ C1] R10: dffffc0000000000 R11: fffffbfff2064337 R12: ffff8880878a67d0 [ 1124.788206][ C1] R13: ffff8880b8736d90 R14: ffff8880878a67d0 R15: 0000000000000000 [ 1124.788219][ C1] FS: 0000000000000000(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 1124.788233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1124.788251][ C1] CR2: 00007fdf5ffe7158 CR3: 000000007d400000 CR4: 00000000003526f0 [ 1124.788268][ C1] Call Trace: [ 1124.788275][ C1] [ 1124.788282][ C1] lockdep_hardirqs_on_prepare+0x110/0x260 [ 1124.788306][ C1] trace_hardirqs_on+0x28/0x40 [ 1124.788323][ C1] crng_make_state+0x2c5/0x600 [ 1124.788344][ C1] ? crng_make_state+0xb6/0x600 [ 1124.788363][ C1] _get_random_bytes+0xff/0x260 [ 1124.788382][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 1124.788410][ C1] nsim_dev_trap_report_work+0x6ac/0xb80 [ 1124.788439][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1124.788462][ C1] process_scheduled_works+0xb5d/0x1860 [ 1124.788495][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1124.788518][ C1] ? assign_work+0x3d5/0x5e0 [ 1124.788540][ C1] worker_thread+0xa53/0xfc0 [ 1124.788561][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1124.788592][ C1] kthread+0x388/0x470 [ 1124.788608][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1124.788629][ C1] ? __pfx_kthread+0x10/0x10 [ 1124.788645][ C1] ret_from_fork+0x514/0xb70 [ 1124.788668][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.788688][ C1] ? __switch_to+0xc79/0x1410 [ 1124.788725][ C1] ? __pfx_kthread+0x10/0x10 [ 1124.788741][ C1] ret_from_fork_asm+0x1a/0x30 [ 1124.788771][ C1] [ 1125.056296][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1125.063288][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1125.072419][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1125.082487][ T31] Call Trace: [ 1125.085784][ T31] [ 1125.088727][ T31] vpanic+0x56c/0xa60 [ 1125.092720][ T31] ? __pfx___schedule+0x10/0x10 [ 1125.097617][ T31] ? __pfx_vpanic+0x10/0x10 [ 1125.102157][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1125.107399][ T31] panic+0xc5/0xd0 [ 1125.111488][ T31] ? __pfx_panic+0x10/0x10 [ 1125.115928][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1125.121335][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1125.127619][ T31] watchdog+0xff4/0x1000 [ 1125.131894][ T31] ? watchdog+0x209/0x1000 [ 1125.136330][ T31] kthread+0x388/0x470 [ 1125.140422][ T31] ? __pfx_watchdog+0x10/0x10 [ 1125.145195][ T31] ? __pfx_kthread+0x10/0x10 [ 1125.149888][ T31] ret_from_fork+0x514/0xb70 [ 1125.154501][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1125.159648][ T31] ? __switch_to+0xc79/0x1410 [ 1125.164347][ T31] ? __pfx_kthread+0x10/0x10 [ 1125.169476][ T31] ret_from_fork_asm+0x1a/0x30 [ 1125.174273][ T31] [ 1125.177822][ T31] Kernel Offset: disabled [ 1125.182242][ T31] Rebooting in 86400 seconds..