last executing test programs: 3.558333607s ago: executing program 1 (id=14434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 2.567325829s ago: executing program 1 (id=14455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0xffffe000, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.315486245s ago: executing program 1 (id=14462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000002c0)) socket(0x400000000010, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x15) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x1, 0x62, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000007000000000995ab24b98ab1d691bdeba6f47125010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000300), &(0x7f0000000340)=r5}, 0x20) socket$unix(0x1, 0x1, 0x0) 2.242667949s ago: executing program 4 (id=14463): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) unshare(0x10080) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0xc04, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x10}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8}, 0x40080) socketpair(0x2a, 0x800, 0x3, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ip={@loopback, @multicast1, 0xffffffff, 0xff000000, 'veth1_to_batadv\x00', 'bond_slave_1\x00', {0xff}, {}, 0x2f, 0x2, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@ip={@loopback, @multicast1, 0x1fe, 0xff, 'ip6_vti0\x00', 'netdevsim0\x00', {}, {}, 0x8, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfff, 0xfb, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x2, 0x0, 0x5, 0x1, 0x1], 0x4, 0xd28da6aa05a142ac}, {0x2, [0xce575b8a3071c47e, 0x7, 0x3, 0x0, 0x6, 0x3], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff13c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}]}, 0x48}}, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000007c0)={r4, 0xff, 0x7ff}, &(0x7f0000000800)=0x8) r6 = openat$cgroup_ro(r0, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000880)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000a00)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15, 0x0, &(0x7f0000000900)=""/251, 0xfb}, &(0x7f0000000a40)=0x40) unshare(0x280) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000a80)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000b00)={r5, 0x9}, &(0x7f0000000b40)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r6, r9, 0x25, 0x18, @void}, 0x10) sendto$packet(r2, &(0x7f0000000c80)="0108e8534ef95da9a5134916d61975b0f0a6c9b09e394fe5e757fbfa5f23d971d52554fa6cef5dc23949d219d7fa3ddcff793dee22e5287a72f0e717721693b455999f4b8b02ac6468a827d3205a7a6de4d375cbf68e0f6943f0ae67fe4ad2a4122e6e4ec7e605077d2086fc43301445950f0524d06f36659f31a6f21838f716dff223d56573ea48ee3164a2e6e1163e4adf536794d09f8e0e5e10e13c18e35ecbfcb485e5d759b08a2528276e1e63e0909c64ff8f839c9698062a119439ef4c8930fcc85d97305e3448747b17693cb78d62416e87d367ee4e0f215433d95551481a8da60490475af211dbfad332c0a3693764", 0xf3, 0x4028890, &(0x7f0000000d80)={0x11, 0x6, r9, 0x1, 0x0, 0x6, @random="549ea4d34903"}, 0x14) unshare(0x20000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0xf, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f5}, [@alu={0x7, 0x1, 0x0, 0x2, 0x9, 0xffffffffffffffe4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c0}}, @call={0x85, 0x0, 0x0, 0x3f}, @call={0x85, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000e40)='GPL\x00', 0x4, 0x9, &(0x7f0000000e80)=""/9, 0x41000, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000ec0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0x3, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f40), &(0x7f0000000f80)=[{0x0, 0x5, 0x9, 0x6}, {0x0, 0x4, 0x3, 0x3}], 0x10, 0x7fff}, 0x94) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001080)={r8, 0x1111, 0x8, 0xff}, &(0x7f00000010c0)=0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r11, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x45669c3374c95e7e}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x40) 2.051845452s ago: executing program 4 (id=14465): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x27, 0x800, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffd05, &(0x7f0000000080)={&(0x7f0000000200)={0xe4, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xca, 0x1, 0x0, 0x1, [@typed={0x0, 0x5a, 0x0, 0x0, @str='%+\'\')\x00'}]}, @typed={0xfd73, 0x88, 0x0, 0x0, @pid}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r5], 0x50}}, 0x0) write$bt_hci(r0, 0x0, 0x0) 1.941344574s ago: executing program 4 (id=14468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "8b1cae48"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) 1.816243516s ago: executing program 2 (id=14471): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0xfff0, 0x4048011}, 0xc000) 1.398490088s ago: executing program 4 (id=14472): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x6}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100287007c5680ecfaabe0000000c0099000010000080000000525162c202caaa03bd0d4d7b9d45859fa7947c0e89afa1428cc62903b912b106fd80c9cb1b38c04c33de6f63b21c37f7e108595a3de8e90bdd639cb3a12fef282f641606af879e5f0337ee7f77d714e1c56c27108130"], 0x20}}, 0x804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) write(r5, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000180)=[{r5, 0x4}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xffffff5f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) accept4$unix(r9, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) 1.351980044s ago: executing program 2 (id=14473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c0015"], 0xe0}}, 0x0) 1.299807465s ago: executing program 2 (id=14474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c300000374ed0d337b7d5dfe0cbb7ed38ef6430879be16f408004500001c0000000000029078ac14141affffffffca177c9078ffffff"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000680)={r2, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110727bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf64}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, &(0x7f00000000c0), 0x40f00, 0x0, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000100)={0xa, 0x7}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xb, 0x8, 0xd}, 0x10, 0x2084c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r6, 0x4) 1.22550226s ago: executing program 1 (id=14477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xffd, 0x8000, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0xffffff73, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x400, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x2, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x10000000, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25DELFWD(r5, 0x89eb, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0xf1}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) epoll_create1(0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000002500)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000fc0)={0x468, r8, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xc}}}}, [@NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x15, 0x29c69094e7b38c46, 0xb, 0xb]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x2, 0x18, 0x36, 0x69, 0x1, 0x2, 0x6, 0x55, 0x60, 0xc, 0x48, 0xc, 0x6c, 0x24, 0x30, 0x1b, 0x24, 0x2, 0x1b, 0x6, 0x1, 0x16, 0xc, 0x1, 0xb, 0x60, 0x18, 0xc, 0x5, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xd, 0x4, 0x7, 0x3, 0x9, 0x4, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x636, 0x8000, 0x5, 0x5, 0x4, 0x3, 0xfcd]}}]}]}, @NL80211_ATTR_TX_RATES={0x3cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x2e5, 0x8, 0x3, 0x100, 0x200, 0x49]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe6, 0x7, 0x3, 0x8, 0xc, 0x5170]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1, 0xa, 0x0, 0xff, 0x7ff, 0xcf, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0xb, 0x6c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x80a1, 0x8cc, 0xf, 0x1, 0x7f, 0x243f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x7, 0xfffe, 0xfffb, 0x2, 0xb, 0x6, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x2, 0x6c, 0x18, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4ca, 0x3ff, 0xc, 0x7, 0xbe, 0x5, 0x7, 0x5f6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x0, 0x3ff, 0x8, 0x0, 0xa25, 0x6, 0xf]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x30, 0x2, 0x1, 0x6c, 0x5, 0x18, 0x30, 0x6c, 0x3, 0x1, 0x5, 0x16, 0x5, 0x16, 0x1b, 0x5b, 0x12, 0x30, 0x6, 0x36, 0x0, 0x30, 0x36, 0x16, 0x18, 0x36, 0x36, 0x2, 0x16, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x3, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0x3}, {0x4, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x3}, {0x7, 0x3}, {0x6, 0x3}, {0x4, 0x4}, {0x2}, {0x7}, {0x1}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0x3}, {0x2, 0x7}]}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x9}, {0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {}, {0x1, 0xa}, {0x7, 0x9}, {0x6}, {0x4, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x6, 0x4}, {0x7, 0x6}, {0x5, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0xa}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x3, 0x8}, {0x4}, {0x6, 0x4}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x4, 0x1}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x1}, {0x7}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x9}, {0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xfffa, 0x1000, 0xffff, 0x6, 0x1, 0x5, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff8, 0x5, 0x400, 0xff09, 0x4057, 0xa, 0x5]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x6, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x3}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x16}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0xb, 0x12, 0x2, 0x30, 0x3, 0x16, 0x18, 0x1b, 0xa2b59872bffa54bf, 0x24, 0x30, 0x30, 0x1, 0xa6, 0x24, 0x2, 0x60, 0xb, 0x5, 0x60, 0x24, 0x60, 0x35, 0x12, 0x1, 0x1b, 0x2, 0x82, 0x1, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x800, 0x400, 0x1ff, 0x6, 0x81, 0x7]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x47, 0x1000, 0x3, 0xd, 0x0, 0x1, 0xfcd, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x3, 0x2, 0x10, 0x9, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x7, 0x69f6, 0x9, 0x47, 0x8000, 0x69]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x7fff, 0x400, 0xc, 0xfbff, 0x8000, 0x6]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x81, 0x4, 0x6, 0xffff, 0x0, 0xd0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x101, 0x5, 0xb, 0xfff, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x6}, {0x1, 0xa}, {0x3}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x6}, {0x5, 0x6}, {0x4, 0x5}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x36, 0x18, 0x1, 0x30, 0x24, 0x12, 0x1, 0x2, 0x60, 0x2, 0x48, 0x16, 0x60, 0x5, 0x2]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0xb, 0x3, 0x2, 0xb, 0x7d, 0xa, 0x1, 0x5, 0x18, 0x24, 0x48, 0x16, 0x1, 0xc, 0x6, 0x48, 0x2, 0x18, 0x30, 0x12, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x100, 0x0, 0x3, 0x6, 0x4, 0xf, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x6, 0x0, 0x3, 0x6, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfa21, 0xe, 0x3000, 0xfff7, 0xffff, 0x8, 0xe00]}}]}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8918, &(0x7f0000000000)={r9}) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x274, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc59a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f5b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) r10 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r10) sendmsg$alg(r10, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xfe0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 1.096555229s ago: executing program 2 (id=14478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff00}], &(0x7f0000000080)='GPL\x00', 0xfff, 0x9d, &(0x7f0000000280)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) 1.014547264s ago: executing program 0 (id=14480): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, r0, 0x1, 0x0, 0x14000000, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 919.765846ms ago: executing program 4 (id=14482): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "8b1cae48"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) 918.662882ms ago: executing program 1 (id=14483): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0x3e8575f57102347, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbfbbbbbbaaaaaaaa90bb86dd6002000000103aff00f41ac80000000000000020000000bbff020000009078ec876b58da01c7d9871db5014caa1fb06b81af50f2752d688961c23027fc66fed5f6c10619569ad574729418faf0acca7641fbd7d24b461fcc206a6af242ad722cc209a077e35f849a39fee405bc3795ee57ee3b5b963269c841d2261cc83d49c897bc6318fbc5ffca3f08f5371d72ffd5180a0bae9cbc49916dce4ea7231a2eb4bc0c7db902f327e30c2f76c93e8ba95dd285653de0b57f7e41d02c170803b787890f5df1927bedc983c14bf57ffdb043c036271b7bf901bac5b3d352f37695732d"], 0x0) 810.7448ms ago: executing program 3 (id=14484): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xff80, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 808.945742ms ago: executing program 0 (id=14485): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)="8c26", 0x5ec, 0x4000, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) (fail_nth: 4) 691.461674ms ago: executing program 4 (id=14486): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x9}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x9}, 0x1c) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e64300000"], 0x2c}}, 0x40006) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "98d65b583564848b", "81713e4b80bf831ce2ae0698b5a0cae6", "82bfc474", "ff94c10d5db6af36"}, 0x28) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240), 0x4) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) 413.652292ms ago: executing program 3 (id=14487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x1, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0x8b, 0x101, 0x0, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x101, 0x100], [0xfff5, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf4a}]}, 0x94}, 0x1, 0x58, 0x0, 0x400dc}, 0x0) 412.605603ms ago: executing program 1 (id=14488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000100)={0x78, r4, 0x79964d8cba2f455d, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 411.432977ms ago: executing program 2 (id=14489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x168, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x73a2ae7fab388e6}, {0x5, 0x3, 0x3}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f81036d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cd82499}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57f70fc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63425e01}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8cdaca2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8288}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x502a29c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20ece06a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c24}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf4c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c6d9b96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1614f0d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e4ed3ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7640933e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa973}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5874}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x376}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12296a1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d78b3d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x643df3e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7573f76d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53f1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r10 = accept(r9, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) accept4(r10, &(0x7f0000001040)=@in6, 0x0, 0x80000) (async) accept4(r10, &(0x7f0000001040)=@in6, 0x0, 0x80000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r8, 0x25, 0x0, @void}, 0x10) (async) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r8, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r11, r6, 0x4, r5}, 0x6) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) 360.302699ms ago: executing program 0 (id=14490): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) (async) sendto$inet6(r0, &(0x7f0000000140)="177a7a87a5436ae3ebcb610e59fe0df45dede7b4f54b52154a0bb4222f07b8cd468d18237e229bb1a1f37faa703d64844f2fdee12551e84f16de2cade029bb508ce6ce5d8a881df0c7ab260e7aa4953a18c236d9c36d53f773a943d4a1351b03ea5e2c232bd2900d49e685453db3dda13867cc13f9c390f6072699c3a249c88ff124f064d4f3814ec1fe3c6f54d9b952254c2980ee5978d5d9aa6c991f3461def35bfb6a0c5d4c861110bfbf9baff49e7a8160339d67aa1cacf236dfce78e3c38d6389ab34d36a4a2e8672bfa70173f241010362b60a20c731cff7c7d9dba940", 0xe0, 0x404c000, &(0x7f0000000240)={0xa, 0x4e24, 0x6, @loopback, 0x9}, 0x1c) 290.793991ms ago: executing program 2 (id=14491): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60121000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x8014) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000b02c487804523004010069703665727370616e00003bb0002000028006000300070000ec030012000800150000000040080005000000c1aa37a3f90f462c37c06e30670482f967417cdb5cf19375c0cc0ab56c70ab"], 0x54}}, 0x0) syz_emit_ethernet(0x3ba, &(0x7f0000000440)={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000091d00000000000000000001a80016ea1f00084003eb4bd04554bf2a31cf1f2e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e885913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b34113", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r8], 0x50}}, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe, 0x20}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendto$inet(r2, &(0x7f0000000040)="8c26", 0x2, 0x800, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) 187.893529ms ago: executing program 3 (id=14492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x23, &(0x7f0000000140)={0x0, {{0x29, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) 187.540805ms ago: executing program 0 (id=14493): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x41, 0x3, 0x268, 0xf8, 0x19, 0x0, 0x0, 0x0, 0x1d0, 0x1f0, 0x1f0, 0x1d0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {0xff}}, 0x0, 0xd8, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@addrtype={{0x30}, {0x3, 0xb50, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0xff84, 0x0, 0x45}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) socket(0x8, 0x5, 0xffffffff) 179.917149ms ago: executing program 3 (id=14494): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000010000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0) 110.064212ms ago: executing program 3 (id=14495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000081", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 55.724062ms ago: executing program 0 (id=14496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "8b1cae48"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) 40.830488ms ago: executing program 3 (id=14497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r9, 0x5421, &(0x7f0000001100)=0x9) connect$bt_sco(r9, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4040000) 0s ago: executing program 0 (id=14498): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="d0359cdaf39164d765cb01f5d0352e9abea8ea3c87ba419131bbe99d6a8007033c7714b0b245a07940a6b222ea6f028f473ccb5e86dbe4a9f7cae13f2e8ab1c673e2dd861f72aacca30af1b6a361f31dc70f12b38cbeea83252db6233cf4dce154c1df4ebaaf196092860a141f01a5cba4d9fcc5", @ANYBLOB="0000000000004a641c0002000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x81}]}, 0x140}}, 0x400c000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="0006010000000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) kernel console output (not intermixed with test programs): tainted syzkaller #0 PREEMPT(full) [ 858.506066][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 858.506080][ T6897] Call Trace: [ 858.506088][ T6897] [ 858.506098][ T6897] dump_stack_lvl+0x189/0x250 [ 858.506131][ T6897] ? __pfx____ratelimit+0x10/0x10 [ 858.506158][ T6897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.506185][ T6897] ? __pfx__printk+0x10/0x10 [ 858.506214][ T6897] ? __pfx___might_resched+0x10/0x10 [ 858.506233][ T6897] ? fs_reclaim_acquire+0x7d/0x100 [ 858.506271][ T6897] should_fail_ex+0x414/0x560 [ 858.506306][ T6897] should_failslab+0xa8/0x100 [ 858.506329][ T6897] kmem_cache_alloc_node_noprof+0x77/0x710 [ 858.506357][ T6897] ? __alloc_skb+0x112/0x2d0 [ 858.506393][ T6897] __alloc_skb+0x112/0x2d0 [ 858.506427][ T6897] alloc_skb_with_frags+0xca/0x890 [ 858.506457][ T6897] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 858.506490][ T6897] sock_alloc_send_pskb+0x84d/0x980 [ 858.506535][ T6897] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 858.506563][ T6897] ? aa_file_perm+0x13a/0x1550 [ 858.506589][ T6897] ? aa_sk_perm+0x81e/0x950 [ 858.506620][ T6897] hci_sock_sendmsg+0x207/0xef0 [ 858.506658][ T6897] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 858.506688][ T6897] ? aa_sock_msg_perm+0xf1/0x1d0 [ 858.506718][ T6897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 858.506739][ T6897] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 858.506766][ T6897] __sock_sendmsg+0x21c/0x270 [ 858.506805][ T6897] sock_write_iter+0x279/0x360 [ 858.506833][ T6897] ? __pfx_sock_write_iter+0x10/0x10 [ 858.506870][ T6897] ? bpf_lsm_file_permission+0x9/0x20 [ 858.506891][ T6897] ? security_file_permission+0x75/0x290 [ 858.506925][ T6897] vfs_write+0x5c9/0xb30 [ 858.506959][ T6897] ? __pfx_sock_write_iter+0x10/0x10 [ 858.506984][ T6897] ? __pfx_vfs_write+0x10/0x10 [ 858.507025][ T6897] ? __fget_files+0x2a/0x420 [ 858.507056][ T6897] ksys_write+0x145/0x250 [ 858.507088][ T6897] ? __pfx_ksys_write+0x10/0x10 [ 858.507132][ T6897] ? do_syscall_64+0xbe/0xfa0 [ 858.507163][ T6897] do_syscall_64+0xfa/0xfa0 [ 858.507186][ T6897] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.507213][ T6897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.507233][ T6897] ? clear_bhb_loop+0x60/0xb0 [ 858.507259][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.507279][ T6897] RIP: 0033:0x7f2741d8efc9 [ 858.507299][ T6897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.507318][ T6897] RSP: 002b:00007f2742bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.507342][ T6897] RAX: ffffffffffffffda RBX: 00007f2741fe5fa0 RCX: 00007f2741d8efc9 [ 858.507357][ T6897] RDX: 0000000000000138 RSI: 0000200000000040 RDI: 0000000000000006 [ 858.507371][ T6897] RBP: 00007f2742bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 858.507383][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.507396][ T6897] R13: 00007f2741fe6038 R14: 00007f2741fe5fa0 R15: 00007fff2a4240c8 [ 858.507432][ T6897] [ 858.509862][ T6895] bond25: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 858.868321][ T6895] bond25 (unregistering): Released all slaves [ 859.000034][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13630'. [ 859.056753][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13630'. [ 859.087052][ T6914] netlink: 'syz.1.13631': attribute type 1 has an invalid length. [ 859.159979][ T6914] 8021q: adding VLAN 0 to HW filter on device bond20 [ 859.178833][ T6917] netlink: 'syz.0.13633': attribute type 1 has an invalid length. [ 859.200082][ T6914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13631'. [ 859.295678][ T6917] 8021q: adding VLAN 0 to HW filter on device bond20 [ 859.387674][ T6927] vlan8: entered promiscuous mode [ 859.394080][ T6927] bond20: entered promiscuous mode [ 859.399966][ T6927] vlan8: entered allmulticast mode [ 859.405647][ T6927] bond20: entered allmulticast mode [ 859.412119][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13635'. [ 859.553513][ T6934] FAULT_INJECTION: forcing a failure. [ 859.553513][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 859.593729][ T6934] CPU: 0 UID: 0 PID: 6934 Comm: syz.0.13639 Not tainted syzkaller #0 PREEMPT(full) [ 859.593758][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 859.593772][ T6934] Call Trace: [ 859.593781][ T6934] [ 859.593791][ T6934] dump_stack_lvl+0x189/0x250 [ 859.593834][ T6934] ? __pfx____ratelimit+0x10/0x10 [ 859.593860][ T6934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.593888][ T6934] ? __pfx__printk+0x10/0x10 [ 859.593915][ T6934] ? __pfx___might_resched+0x10/0x10 [ 859.593943][ T6934] should_fail_ex+0x414/0x560 [ 859.593980][ T6934] should_failslab+0xa8/0x100 [ 859.594003][ T6934] kmem_cache_alloc_node_noprof+0x77/0x710 [ 859.594031][ T6934] ? __alloc_skb+0x112/0x2d0 [ 859.594067][ T6934] __alloc_skb+0x112/0x2d0 [ 859.594101][ T6934] netlink_ack+0x146/0xa50 [ 859.594129][ T6934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.594185][ T6934] netlink_rcv_skb+0x28c/0x470 [ 859.594213][ T6934] ? __lock_acquire+0xab9/0xd20 [ 859.594236][ T6934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.594262][ T6934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.594316][ T6934] ? down_read+0x1ad/0x2e0 [ 859.594350][ T6934] genl_rcv+0x28/0x40 [ 859.594371][ T6934] netlink_unicast+0x82f/0x9e0 [ 859.594412][ T6934] ? __pfx_netlink_unicast+0x10/0x10 [ 859.594442][ T6934] ? netlink_sendmsg+0x642/0xb30 [ 859.594460][ T6934] ? skb_put+0x11b/0x210 [ 859.594484][ T6934] netlink_sendmsg+0x805/0xb30 [ 859.594516][ T6934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.594550][ T6934] ? aa_sock_msg_perm+0xf1/0x1d0 [ 859.594582][ T6934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 859.594603][ T6934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.594633][ T6934] __sock_sendmsg+0x21c/0x270 [ 859.594662][ T6934] ____sys_sendmsg+0x505/0x830 [ 859.594689][ T6934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.594719][ T6934] ? import_iovec+0x74/0xa0 [ 859.594748][ T6934] ___sys_sendmsg+0x21f/0x2a0 [ 859.594770][ T6934] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.594841][ T6934] ? __fget_files+0x2a/0x420 [ 859.594858][ T6934] ? __fget_files+0x3a0/0x420 [ 859.594889][ T6934] __x64_sys_sendmsg+0x19b/0x260 [ 859.594912][ T6934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.594944][ T6934] ? __pfx_ksys_write+0x10/0x10 [ 859.594975][ T6934] ? do_syscall_64+0xbe/0xfa0 [ 859.595004][ T6934] do_syscall_64+0xfa/0xfa0 [ 859.595026][ T6934] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.595050][ T6934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.595076][ T6934] ? clear_bhb_loop+0x60/0xb0 [ 859.595101][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.595119][ T6934] RIP: 0033:0x7fa7a098efc9 [ 859.595138][ T6934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.595155][ T6934] RSP: 002b:00007fa7a1771038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.595178][ T6934] RAX: ffffffffffffffda RBX: 00007fa7a0be5fa0 RCX: 00007fa7a098efc9 [ 859.595193][ T6934] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 859.595206][ T6934] RBP: 00007fa7a1771090 R08: 0000000000000000 R09: 0000000000000000 [ 859.595218][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.595230][ T6934] R13: 00007fa7a0be6038 R14: 00007fa7a0be5fa0 R15: 00007ffe298b5998 [ 859.595265][ T6934] [ 860.107108][ T6950] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 860.114554][ T6950] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 860.205069][ T6951] bond20: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 860.222704][ T6951] bond20 (unregistering): Released all slaves [ 860.274444][ T6958] team0: left promiscuous mode [ 860.281020][ T6958] team0: left allmulticast mode [ 860.291595][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.326771][ T6958] team0: Cannot enslave team device to itself [ 860.607927][ T6969] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 860.629583][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13654'. [ 861.229003][ T7006] netlink: 7380 bytes leftover after parsing attributes in process `syz.2.13667'. [ 861.333439][ T7011] netlink: 372 bytes leftover after parsing attributes in process `syz.0.13669'. [ 861.481881][ T7021] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 861.584914][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13675'. [ 861.611356][ T7028] netlink: 'syz.4.13674': attribute type 1 has an invalid length. [ 861.645574][ T7031] bridge0: Device is already in use. [ 861.725499][ T7036] netlink: 'syz.0.13680': attribute type 1 has an invalid length. [ 861.731107][ T7028] 8021q: adding VLAN 0 to HW filter on device bond25 [ 861.851687][ T7036] 8021q: adding VLAN 0 to HW filter on device bond21 [ 861.904695][ T7048] bond21: (slave veth25): Enslaving as an active interface with a down link [ 861.951408][ T7036] veth27: entered promiscuous mode [ 861.962341][ T7036] bond21: (slave veth27): Enslaving as an active interface with a down link [ 862.016453][ T7048] vlan9: entered allmulticast mode [ 862.027304][ T7048] bond21: entered allmulticast mode [ 862.038443][ T7048] bond21: (slave vlan9): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 862.217010][ T7068] FAULT_INJECTION: forcing a failure. [ 862.217010][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 862.259976][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.4.13691 Not tainted syzkaller #0 PREEMPT(full) [ 862.260008][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 862.260020][ T7068] Call Trace: [ 862.260028][ T7068] [ 862.260045][ T7068] dump_stack_lvl+0x189/0x250 [ 862.260078][ T7068] ? __pfx____ratelimit+0x10/0x10 [ 862.260103][ T7068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.260131][ T7068] ? __pfx__printk+0x10/0x10 [ 862.260159][ T7068] ? __pfx___might_resched+0x10/0x10 [ 862.260179][ T7068] ? fs_reclaim_acquire+0x7d/0x100 [ 862.260213][ T7068] should_fail_ex+0x414/0x560 [ 862.260246][ T7068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 862.260270][ T7068] should_failslab+0xa8/0x100 [ 862.260292][ T7068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 862.260312][ T7068] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 862.260337][ T7068] ? sock_alloc_inode+0x28/0xc0 [ 862.260367][ T7068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 862.260388][ T7068] sock_alloc_inode+0x28/0xc0 [ 862.260411][ T7068] alloc_inode+0x6a/0x1b0 [ 862.260441][ T7068] __sock_create+0x12d/0x9f0 [ 862.260480][ T7068] __sys_socket+0xd7/0x1b0 [ 862.260509][ T7068] __x64_sys_socket+0x7a/0x90 [ 862.260536][ T7068] do_syscall_64+0xfa/0xfa0 [ 862.260560][ T7068] ? lockdep_hardirqs_on+0x9c/0x150 [ 862.260585][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.260604][ T7068] ? clear_bhb_loop+0x60/0xb0 [ 862.260630][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.260650][ T7068] RIP: 0033:0x7f1598d90ee7 [ 862.260669][ T7068] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.260688][ T7068] RSP: 002b:00007f1599b7bf48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 862.260710][ T7068] RAX: ffffffffffffffda RBX: 00007f1598fe5fa0 RCX: 00007f1598d90ee7 [ 862.260725][ T7068] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 862.260739][ T7068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 862.260751][ T7068] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 862.260764][ T7068] R13: 00007f1598fe6038 R14: 0000200000000040 R15: 0000200000000080 [ 862.260799][ T7068] [ 862.260811][ T7068] socket: no more sockets [ 863.061223][ T7117] __nla_validate_parse: 1 callbacks suppressed [ 863.061244][ T7117] netlink: 220 bytes leftover after parsing attributes in process `syz.1.13706'. [ 863.132383][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13707'. [ 863.155380][ T7120] tc_dump_action: action bad kind [ 863.176709][ T7122] netlink: 'syz.3.13708': attribute type 10 has an invalid length. [ 863.228745][ T7124] netlink: 'syz.4.13709': attribute type 1 has an invalid length. [ 863.286846][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13710'. [ 863.305792][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13709'. [ 863.311139][ T7124] 8021q: adding VLAN 0 to HW filter on device bond26 [ 863.454134][ T7136] bond26: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 863.470889][ T7136] bond26 (unregistering): Released all slaves [ 863.695414][ T7159] netlink: 220 bytes leftover after parsing attributes in process `syz.1.13721'. [ 863.730302][ T7158] tipc: Enabled bearer , priority 0 [ 863.841698][ T7158] syzkaller0: entered promiscuous mode [ 863.848749][ T7158] syzkaller0: entered allmulticast mode [ 863.882304][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13724'. [ 863.921970][ T7156] tipc: Resetting bearer [ 863.988757][ T7175] FAULT_INJECTION: forcing a failure. [ 863.988757][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 864.015136][ T7156] tipc: Disabling bearer [ 864.029873][ T7175] CPU: 0 UID: 0 PID: 7175 Comm: syz.1.13728 Not tainted syzkaller #0 PREEMPT(full) [ 864.029905][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 864.029918][ T7175] Call Trace: [ 864.029927][ T7175] [ 864.029937][ T7175] dump_stack_lvl+0x189/0x250 [ 864.029970][ T7175] ? __pfx____ratelimit+0x10/0x10 [ 864.029997][ T7175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.030024][ T7175] ? __pfx__printk+0x10/0x10 [ 864.030053][ T7175] ? __pfx___might_resched+0x10/0x10 [ 864.030081][ T7175] should_fail_ex+0x414/0x560 [ 864.030117][ T7175] should_failslab+0xa8/0x100 [ 864.030141][ T7175] __kmalloc_noprof+0xcb/0x7f0 [ 864.030167][ T7175] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 864.030190][ T7175] ? sk_prot_alloc+0xe7/0x220 [ 864.030209][ T7175] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.030240][ T7175] sk_prot_alloc+0xe7/0x220 [ 864.030258][ T7175] ? sk_alloc+0x24/0x370 [ 864.030280][ T7175] sk_alloc+0x3a/0x370 [ 864.030304][ T7175] __netlink_create+0x65/0x260 [ 864.030334][ T7175] ? __pfx_genl_release+0x10/0x10 [ 864.030359][ T7175] netlink_create+0x3ca/0x590 [ 864.030379][ T7175] ? __pfx_genl_unbind+0x10/0x10 [ 864.030399][ T7175] ? __pfx_genl_bind+0x10/0x10 [ 864.030425][ T7175] __sock_create+0x4b3/0x9f0 [ 864.030464][ T7175] __sys_socket+0xd7/0x1b0 [ 864.030496][ T7175] __x64_sys_socket+0x7a/0x90 [ 864.030525][ T7175] do_syscall_64+0xfa/0xfa0 [ 864.030549][ T7175] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.030575][ T7175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.030594][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 864.030620][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.030640][ T7175] RIP: 0033:0x7fcb2bf90ee7 [ 864.030659][ T7175] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.030684][ T7175] RSP: 002b:00007fcb2cdc5f48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 864.030708][ T7175] RAX: ffffffffffffffda RBX: 00007fcb2c1e5fa0 RCX: 00007fcb2bf90ee7 [ 864.030722][ T7175] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 864.030736][ T7175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.030748][ T7175] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 864.030761][ T7175] R13: 00007fcb2c1e6038 R14: 0000200000000040 R15: 0000200000000080 [ 864.030808][ T7175] [ 864.040904][ T7178] netlink: 'syz.2.13729': attribute type 1 has an invalid length. [ 864.097137][ T7180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13729'. [ 864.227227][ T7178] 8021q: adding VLAN 0 to HW filter on device bond20 [ 864.500322][ T7192] bond26: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 864.529036][ T7192] bond26 (unregistering): Released all slaves [ 864.567580][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13736'. [ 864.592545][ T7196] IPv6: sit2: Disabled Multicast RS [ 864.601248][ T7196] sit2: entered allmulticast mode [ 864.710266][ T7206] FAULT_INJECTION: forcing a failure. [ 864.710266][ T7206] name failslab, interval 1, probability 0, space 0, times 0 [ 864.725551][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.1.13740 Not tainted syzkaller #0 PREEMPT(full) [ 864.725581][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 864.725594][ T7206] Call Trace: [ 864.725604][ T7206] [ 864.725615][ T7206] dump_stack_lvl+0x189/0x250 [ 864.725648][ T7206] ? __pfx____ratelimit+0x10/0x10 [ 864.725674][ T7206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.725702][ T7206] ? __pfx__printk+0x10/0x10 [ 864.725731][ T7206] ? __pfx___might_resched+0x10/0x10 [ 864.725752][ T7206] ? fs_reclaim_acquire+0x7d/0x100 [ 864.725789][ T7206] should_fail_ex+0x414/0x560 [ 864.725823][ T7206] should_failslab+0xa8/0x100 [ 864.725853][ T7206] __kmalloc_noprof+0xcb/0x7f0 [ 864.725881][ T7206] ? security_sk_alloc+0x52/0x390 [ 864.725910][ T7206] security_sk_alloc+0x52/0x390 [ 864.725935][ T7206] sk_prot_alloc+0x101/0x220 [ 864.725953][ T7206] ? sk_alloc+0x24/0x370 [ 864.725975][ T7206] sk_alloc+0x3a/0x370 [ 864.726000][ T7206] __netlink_create+0x65/0x260 [ 864.726030][ T7206] ? __pfx_genl_release+0x10/0x10 [ 864.726054][ T7206] netlink_create+0x3ca/0x590 [ 864.726084][ T7206] ? __pfx_genl_unbind+0x10/0x10 [ 864.726104][ T7206] ? __pfx_genl_bind+0x10/0x10 [ 864.726130][ T7206] __sock_create+0x4b3/0x9f0 [ 864.726169][ T7206] __sys_socket+0xd7/0x1b0 [ 864.726201][ T7206] __x64_sys_socket+0x7a/0x90 [ 864.726230][ T7206] do_syscall_64+0xfa/0xfa0 [ 864.726254][ T7206] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.726279][ T7206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.726299][ T7206] ? clear_bhb_loop+0x60/0xb0 [ 864.726324][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.726344][ T7206] RIP: 0033:0x7fcb2bf90ee7 [ 864.726364][ T7206] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.726382][ T7206] RSP: 002b:00007fcb2cdc5f48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 864.726406][ T7206] RAX: ffffffffffffffda RBX: 00007fcb2c1e5fa0 RCX: 00007fcb2bf90ee7 [ 864.726421][ T7206] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 864.726434][ T7206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.726445][ T7206] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 864.726458][ T7206] R13: 00007fcb2c1e6038 R14: 0000200000000040 R15: 0000200000000080 [ 864.726495][ T7206] [ 865.295198][ T7226] netlink: 'syz.2.13746': attribute type 1 has an invalid length. [ 865.338202][ T7226] 8021q: adding VLAN 0 to HW filter on device bond21 [ 865.362767][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13746'. [ 865.434142][ T7242] FAULT_INJECTION: forcing a failure. [ 865.434142][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 865.457240][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.0.13751 Not tainted syzkaller #0 PREEMPT(full) [ 865.457272][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 865.457285][ T7242] Call Trace: [ 865.457294][ T7242] [ 865.457304][ T7242] dump_stack_lvl+0x189/0x250 [ 865.457338][ T7242] ? __pfx____ratelimit+0x10/0x10 [ 865.457364][ T7242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.457391][ T7242] ? __pfx__printk+0x10/0x10 [ 865.457416][ T7242] ? __pfx___might_resched+0x10/0x10 [ 865.457439][ T7242] ? fs_reclaim_acquire+0x7d/0x100 [ 865.457475][ T7242] should_fail_ex+0x414/0x560 [ 865.457512][ T7242] should_failslab+0xa8/0x100 [ 865.457534][ T7242] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 865.457561][ T7242] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 865.457586][ T7242] ? __d_alloc+0x36/0x7a0 [ 865.457614][ T7242] __d_alloc+0x36/0x7a0 [ 865.457644][ T7242] d_alloc_pseudo+0x21/0xc0 [ 865.457669][ T7242] alloc_file_pseudo+0xcc/0x210 [ 865.457697][ T7242] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 865.457728][ T7242] ? alloc_fd+0x64c/0x6c0 [ 865.457762][ T7242] sock_alloc_file+0xb8/0x2e0 [ 865.457785][ T7242] ? __sys_socket+0x12c/0x1b0 [ 865.457813][ T7242] __sys_socket+0x13d/0x1b0 [ 865.457844][ T7242] __x64_sys_socket+0x7a/0x90 [ 865.457874][ T7242] do_syscall_64+0xfa/0xfa0 [ 865.457905][ T7242] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.457929][ T7242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.457949][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 865.457975][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.457995][ T7242] RIP: 0033:0x7fa7a0990ee7 [ 865.458014][ T7242] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.458032][ T7242] RSP: 002b:00007fa7a176ff48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 865.458062][ T7242] RAX: ffffffffffffffda RBX: 00007fa7a0be5fa0 RCX: 00007fa7a0990ee7 [ 865.458077][ T7242] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 865.458089][ T7242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.458101][ T7242] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 865.458115][ T7242] R13: 00007fa7a0be6038 R14: 0000200000000040 R15: 0000200000000080 [ 865.458152][ T7242] [ 865.715513][ T7233] bond27: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 865.728720][ T7233] bond27 (unregistering): Released all slaves [ 865.824676][ T7246] dvmrp1: left allmulticast mode [ 866.007961][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13754'. [ 866.254491][ T7269] netlink: 'syz.3.13762': attribute type 1 has an invalid length. [ 866.332794][ T7269] 8021q: adding VLAN 0 to HW filter on device bond26 [ 866.622853][ T7289] netlink: 'syz.0.13769': attribute type 2 has an invalid length. [ 866.632884][ T7283] bond27: (slave vxcan3): The slave device specified does not support setting the MAC address [ 866.651285][ T7283] bond27: (slave vxcan3): Error -95 calling set_mac_address [ 866.683858][ T7293] macvlan7: entered promiscuous mode [ 866.689649][ T7293] macvlan7: entered allmulticast mode [ 866.695799][ T7293] bond27: (slave macvlan7): Error -98 calling set_mac_address [ 866.821710][ T7302] macvtap2: entered promiscuous mode [ 866.827602][ T7302] vlan0: entered promiscuous mode [ 866.833063][ T7302] macvtap2: entered allmulticast mode [ 866.838879][ T7302] vlan0: entered allmulticast mode [ 866.945544][ T7302] macvtap3: entered promiscuous mode [ 866.977275][ T7302] macvtap3: entered allmulticast mode [ 867.296441][ T7325] macvtap3: entered promiscuous mode [ 867.312055][ T7325] macvtap3: entered allmulticast mode [ 867.330876][ T7331] FAULT_INJECTION: forcing a failure. [ 867.330876][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 867.385992][ T7331] CPU: 1 UID: 0 PID: 7331 Comm: syz.0.13782 Not tainted syzkaller #0 PREEMPT(full) [ 867.386024][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 867.386036][ T7331] Call Trace: [ 867.386045][ T7331] [ 867.386055][ T7331] dump_stack_lvl+0x189/0x250 [ 867.386088][ T7331] ? __pfx____ratelimit+0x10/0x10 [ 867.386112][ T7331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.386138][ T7331] ? __pfx__printk+0x10/0x10 [ 867.386167][ T7331] ? __pfx___might_resched+0x10/0x10 [ 867.386189][ T7331] ? fs_reclaim_acquire+0x7d/0x100 [ 867.386222][ T7331] should_fail_ex+0x414/0x560 [ 867.386255][ T7331] should_failslab+0xa8/0x100 [ 867.386278][ T7331] kmem_cache_alloc_node_noprof+0x77/0x710 [ 867.386305][ T7331] ? __alloc_skb+0x112/0x2d0 [ 867.386332][ T7331] ? netlink_autobind+0xdb/0x300 [ 867.386357][ T7331] __alloc_skb+0x112/0x2d0 [ 867.386392][ T7331] netlink_sendmsg+0x5c6/0xb30 [ 867.386421][ T7331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.386453][ T7331] ? aa_sock_msg_perm+0xf1/0x1d0 [ 867.386484][ T7331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.386503][ T7331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.386532][ T7331] __sock_sendmsg+0x21c/0x270 [ 867.386562][ T7331] ____sys_sendmsg+0x52d/0x830 [ 867.386591][ T7331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.386621][ T7331] ? import_iovec+0x74/0xa0 [ 867.386651][ T7331] ___sys_sendmsg+0x21f/0x2a0 [ 867.386674][ T7331] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.386736][ T7331] ? __fget_files+0x2a/0x420 [ 867.386755][ T7331] ? __fget_files+0x3a0/0x420 [ 867.386787][ T7331] __sys_sendmmsg+0x227/0x430 [ 867.386814][ T7331] ? __pfx___sys_sendmmsg+0x10/0x10 [ 867.386846][ T7331] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 867.386894][ T7331] ? ksys_write+0x22a/0x250 [ 867.386926][ T7331] ? __pfx_ksys_write+0x10/0x10 [ 867.386959][ T7331] __x64_sys_sendmmsg+0xa0/0xc0 [ 867.386993][ T7331] do_syscall_64+0xfa/0xfa0 [ 867.387018][ T7331] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.387043][ T7331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.387063][ T7331] ? clear_bhb_loop+0x60/0xb0 [ 867.387088][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.387109][ T7331] RIP: 0033:0x7fa7a098efc9 [ 867.387128][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.387146][ T7331] RSP: 002b:00007fa7a1750038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 867.387170][ T7331] RAX: ffffffffffffffda RBX: 00007fa7a0be6090 RCX: 00007fa7a098efc9 [ 867.387186][ T7331] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 867.387200][ T7331] RBP: 00007fa7a1750090 R08: 0000000000000000 R09: 0000000000000000 [ 867.387214][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.387226][ T7331] R13: 00007fa7a0be6128 R14: 00007fa7a0be6090 R15: 00007ffe298b5998 [ 867.387270][ T7331] [ 867.724081][ T7340] netlink: ct family unspecified [ 867.729246][ T7340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.041836][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.083540][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.120280][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.432659][ T7381] syzkaller0: entered promiscuous mode [ 868.445340][ T7381] syzkaller0: entered allmulticast mode [ 868.564616][ T7391] __nla_validate_parse: 9 callbacks suppressed [ 868.564638][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13801'. [ 868.583635][ T7390] Cannot find add_set index 2 as target [ 868.611210][ T7390] netlink: 'syz.0.13802': attribute type 29 has an invalid length. [ 868.622416][ T7390] netlink: 'syz.0.13802': attribute type 29 has an invalid length. [ 869.018462][ T7417] : renamed from hsr0 [ 869.101912][ T7423] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 869.124482][ T7423] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 869.138170][ T7423] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 869.182794][ T7430] syzkaller0: entered promiscuous mode [ 869.198319][ T7430] syzkaller0: entered allmulticast mode [ 869.501529][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13822'. [ 869.585670][ T7451] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13826'. [ 869.766690][ T7462] tipc: Enabled bearer , priority 0 [ 869.775005][ T7462] syzkaller0: entered promiscuous mode [ 869.782632][ T7462] syzkaller0: entered allmulticast mode [ 869.888112][ T7462] tipc: Resetting bearer [ 869.911643][ T7461] tipc: Resetting bearer [ 869.962499][ T7461] tipc: Disabling bearer [ 869.992315][ T7475] syzkaller0: entered promiscuous mode [ 869.992335][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13833'. [ 870.014630][ T7475] syzkaller0: entered allmulticast mode [ 870.199183][ T7483] netlink: 'syz.4.13841': attribute type 10 has an invalid length. [ 870.472190][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.484447][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 870.814775][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13853'. [ 870.883298][ T7524] netlink: 'syz.2.13856': attribute type 1 has an invalid length. [ 870.926532][ T7524] netlink: 'syz.2.13856': attribute type 3 has an invalid length. [ 870.937703][ T7524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13856'. [ 870.999227][ T7530] macvtap3: entered promiscuous mode [ 871.005369][ T7530] macvtap3: entered allmulticast mode [ 871.053392][ T7537] macvtap3: entered promiscuous mode [ 871.086946][ T7537] macvtap3: entered allmulticast mode [ 871.237193][ T7542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.281072][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13865'. [ 871.392270][ T7555] bond27: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 871.410461][ T7555] bond27 (unregistering): Released all slaves [ 871.445228][ T7561] macvtap3: entered promiscuous mode [ 871.450979][ T7561] macvtap3: entered allmulticast mode [ 871.493148][ T7542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.529898][ T7563] macvtap3: entered promiscuous mode [ 871.536462][ T7563] macvtap3: entered allmulticast mode [ 871.567013][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13870'. [ 871.592072][ T7542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.620042][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13870'. [ 871.690321][ T7542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.871506][ T3499] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.881161][ T7579] netlink: 'syz.3.13875': attribute type 29 has an invalid length. [ 871.931034][T24095] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.972810][ T7579] netlink: 'syz.3.13875': attribute type 29 has an invalid length. [ 872.014119][ T7586] netlink: 500 bytes leftover after parsing attributes in process `syz.3.13875'. [ 872.061719][ T7588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.088796][T24091] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.154330][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.555200][ T7615] FAULT_INJECTION: forcing a failure. [ 872.555200][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 872.596625][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.2.13884 Not tainted syzkaller #0 PREEMPT(full) [ 872.596658][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 872.596671][ T7615] Call Trace: [ 872.596681][ T7615] [ 872.596700][ T7615] dump_stack_lvl+0x189/0x250 [ 872.596735][ T7615] ? __pfx____ratelimit+0x10/0x10 [ 872.596761][ T7615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.596788][ T7615] ? __pfx__printk+0x10/0x10 [ 872.596817][ T7615] ? __pfx___might_resched+0x10/0x10 [ 872.596839][ T7615] ? fs_reclaim_acquire+0x7d/0x100 [ 872.596875][ T7615] should_fail_ex+0x414/0x560 [ 872.596913][ T7615] should_failslab+0xa8/0x100 [ 872.596945][ T7615] kmem_cache_alloc_node_noprof+0x77/0x710 [ 872.596974][ T7615] ? __alloc_skb+0x112/0x2d0 [ 872.597002][ T7615] ? netlink_autobind+0xdb/0x300 [ 872.597028][ T7615] __alloc_skb+0x112/0x2d0 [ 872.597063][ T7615] netlink_sendmsg+0x5c6/0xb30 [ 872.597094][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.597129][ T7615] ? aa_sock_msg_perm+0xf1/0x1d0 [ 872.597161][ T7615] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.597182][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.597214][ T7615] __sock_sendmsg+0x21c/0x270 [ 872.597244][ T7615] ____sys_sendmsg+0x505/0x830 [ 872.597272][ T7615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.597302][ T7615] ? import_iovec+0x74/0xa0 [ 872.597332][ T7615] ___sys_sendmsg+0x21f/0x2a0 [ 872.597357][ T7615] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.597422][ T7615] ? __fget_files+0x2a/0x420 [ 872.597440][ T7615] ? __fget_files+0x3a0/0x420 [ 872.597482][ T7615] __x64_sys_sendmsg+0x19b/0x260 [ 872.597506][ T7615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.597540][ T7615] ? __pfx_ksys_write+0x10/0x10 [ 872.597573][ T7615] ? do_syscall_64+0xbe/0xfa0 [ 872.597603][ T7615] do_syscall_64+0xfa/0xfa0 [ 872.597627][ T7615] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.597653][ T7615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.597674][ T7615] ? clear_bhb_loop+0x60/0xb0 [ 872.597707][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.597727][ T7615] RIP: 0033:0x7f2741d8efc9 [ 872.597747][ T7615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.597766][ T7615] RSP: 002b:00007f2742b9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.597789][ T7615] RAX: ffffffffffffffda RBX: 00007f2741fe6090 RCX: 00007f2741d8efc9 [ 872.597806][ T7615] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 872.597820][ T7615] RBP: 00007f2742b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 872.597833][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.597846][ T7615] R13: 00007f2741fe6128 R14: 00007f2741fe6090 R15: 00007fff2a4240c8 [ 872.597884][ T7615] [ 873.083222][ T7633] netlink: 'syz.4.13891': attribute type 16 has an invalid length. [ 873.158750][ T7637] bridge0: port 3(veth0_to_bridge) entered blocking state [ 873.215214][ T7637] bridge0: port 3(veth0_to_bridge) entered disabled state [ 873.222742][ T7637] veth0_to_bridge: entered allmulticast mode [ 873.238878][ T7637] veth0_to_bridge: entered promiscuous mode [ 873.265759][ T7637] sctp: [Deprecated]: syz.1.13889 (pid 7637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.265759][ T7637] Use struct sctp_sack_info instead [ 873.610027][ T7670] __nla_validate_parse: 9 callbacks suppressed [ 873.610050][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13901'. [ 873.694548][ T7676] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 873.837393][ T7685] FAULT_INJECTION: forcing a failure. [ 873.837393][ T7685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.896410][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.1.13908 Not tainted syzkaller #0 PREEMPT(full) [ 873.896440][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 873.896453][ T7685] Call Trace: [ 873.896462][ T7685] [ 873.896471][ T7685] dump_stack_lvl+0x189/0x250 [ 873.896505][ T7685] ? __pfx____ratelimit+0x10/0x10 [ 873.896530][ T7685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.896555][ T7685] ? __pfx__printk+0x10/0x10 [ 873.896578][ T7685] ? __might_fault+0xb0/0x130 [ 873.896621][ T7685] should_fail_ex+0x414/0x560 [ 873.896657][ T7685] _copy_from_iter+0x1de/0x1790 [ 873.896688][ T7685] ? rcu_is_watching+0x15/0xb0 [ 873.896716][ T7685] ? kmalloc_reserve+0xbd/0x290 [ 873.896746][ T7685] ? __pfx__copy_from_iter+0x10/0x10 [ 873.896770][ T7685] ? __build_skb_around+0x262/0x3f0 [ 873.896804][ T7685] ? netlink_sendmsg+0x642/0xb30 [ 873.896821][ T7685] ? skb_put+0x11b/0x210 [ 873.896845][ T7685] netlink_sendmsg+0x6b2/0xb30 [ 873.896876][ T7685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.896911][ T7685] ? aa_sock_msg_perm+0xf1/0x1d0 [ 873.896942][ T7685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 873.896961][ T7685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.896992][ T7685] __sock_sendmsg+0x21c/0x270 [ 873.897035][ T7685] __sys_sendto+0x3bd/0x520 [ 873.897069][ T7685] ? __pfx___sys_sendto+0x10/0x10 [ 873.897095][ T7685] ? count_memcg_event_mm+0x21/0x260 [ 873.897149][ T7685] ? exc_page_fault+0x82/0x100 [ 873.897178][ T7685] ? do_user_addr_fault+0xc85/0x1380 [ 873.897206][ T7685] __x64_sys_sendto+0xde/0x100 [ 873.897240][ T7685] do_syscall_64+0xfa/0xfa0 [ 873.897265][ T7685] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.897290][ T7685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.897311][ T7685] ? clear_bhb_loop+0x60/0xb0 [ 873.897337][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.897356][ T7685] RIP: 0033:0x7fcb2bf90e5c [ 873.897376][ T7685] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 873.897394][ T7685] RSP: 002b:00007fcb2cdc5e60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 873.897416][ T7685] RAX: ffffffffffffffda RBX: 00007fcb2cdc5fa0 RCX: 00007fcb2bf90e5c [ 873.897430][ T7685] RDX: 0000000000000020 RSI: 00007fcb2cdc5ff0 RDI: 0000000000000004 [ 873.897443][ T7685] RBP: 0000000000000000 R08: 00007fcb2cdc5eb4 R09: 000000000000000c [ 873.897455][ T7685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 873.897466][ T7685] R13: 00007fcb2cdc5f08 R14: 00007fcb2cdc5ff0 R15: 0000000000000000 [ 873.897502][ T7685] [ 874.181583][ T7695] FAULT_INJECTION: forcing a failure. [ 874.181583][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.196395][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.3.13910 Not tainted syzkaller #0 PREEMPT(full) [ 874.196428][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 874.196440][ T7695] Call Trace: [ 874.196449][ T7695] [ 874.196458][ T7695] dump_stack_lvl+0x189/0x250 [ 874.196491][ T7695] ? __pfx____ratelimit+0x10/0x10 [ 874.196516][ T7695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.196543][ T7695] ? __pfx__printk+0x10/0x10 [ 874.196565][ T7695] ? __might_fault+0xb0/0x130 [ 874.196607][ T7695] should_fail_ex+0x414/0x560 [ 874.196642][ T7695] _copy_from_user+0x2d/0xb0 [ 874.196670][ T7695] ___sys_sendmsg+0x158/0x2a0 [ 874.196695][ T7695] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.196757][ T7695] ? __fget_files+0x2a/0x420 [ 874.196776][ T7695] ? __fget_files+0x3a0/0x420 [ 874.196808][ T7695] __x64_sys_sendmsg+0x19b/0x260 [ 874.196832][ T7695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.196860][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 874.196893][ T7695] ? do_syscall_64+0xbe/0xfa0 [ 874.196924][ T7695] do_syscall_64+0xfa/0xfa0 [ 874.196947][ T7695] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.196982][ T7695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.197001][ T7695] ? clear_bhb_loop+0x60/0xb0 [ 874.197025][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.197043][ T7695] RIP: 0033:0x7ff75d98efc9 [ 874.197061][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.197078][ T7695] RSP: 002b:00007ff75e765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.197100][ T7695] RAX: ffffffffffffffda RBX: 00007ff75dbe5fa0 RCX: 00007ff75d98efc9 [ 874.197116][ T7695] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000003 [ 874.197129][ T7695] RBP: 00007ff75e765090 R08: 0000000000000000 R09: 0000000000000000 [ 874.197141][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.197153][ T7695] R13: 00007ff75dbe6038 R14: 00007ff75dbe5fa0 R15: 00007ffe46ea0c78 [ 874.197189][ T7695] [ 874.436352][ T7690] 8021q: VLANs not supported on sit0 [ 874.597683][ T7707] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13913'. [ 874.809487][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13916'. [ 874.861275][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13916'. [ 875.025639][ T7733] bond22: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 875.049317][ T7733] bond22 (unregistering): Released all slaves [ 875.253691][ T7748] bridge0: Device is already in use. [ 875.370367][ T7754] FAULT_INJECTION: forcing a failure. [ 875.370367][ T7754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.406975][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.4.13929 Not tainted syzkaller #0 PREEMPT(full) [ 875.407008][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 875.407021][ T7754] Call Trace: [ 875.407030][ T7754] [ 875.407040][ T7754] dump_stack_lvl+0x189/0x250 [ 875.407074][ T7754] ? __pfx____ratelimit+0x10/0x10 [ 875.407099][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.407127][ T7754] ? __pfx__printk+0x10/0x10 [ 875.407149][ T7754] ? __might_fault+0xb0/0x130 [ 875.407189][ T7754] should_fail_ex+0x414/0x560 [ 875.407226][ T7754] _copy_from_user+0x2d/0xb0 [ 875.407253][ T7754] ___sys_sendmsg+0x158/0x2a0 [ 875.407278][ T7754] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.407344][ T7754] ? __fget_files+0x2a/0x420 [ 875.407363][ T7754] ? __fget_files+0x3a0/0x420 [ 875.407396][ T7754] __x64_sys_sendmsg+0x19b/0x260 [ 875.407421][ T7754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.407454][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 875.407486][ T7754] ? do_syscall_64+0xbe/0xfa0 [ 875.407518][ T7754] do_syscall_64+0xfa/0xfa0 [ 875.407542][ T7754] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.407567][ T7754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.407587][ T7754] ? clear_bhb_loop+0x60/0xb0 [ 875.407612][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.407632][ T7754] RIP: 0033:0x7f1598d8efc9 [ 875.407652][ T7754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.407669][ T7754] RSP: 002b:00007f1599b7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.407694][ T7754] RAX: ffffffffffffffda RBX: 00007f1598fe5fa0 RCX: 00007f1598d8efc9 [ 875.407709][ T7754] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 875.407722][ T7754] RBP: 00007f1599b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 875.407735][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.407748][ T7754] R13: 00007f1598fe6038 R14: 00007f1598fe5fa0 R15: 00007ffdc7056f58 [ 875.407786][ T7754] [ 875.730452][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13932'. [ 875.752729][ T7763] tc_dump_action: action bad kind [ 875.874742][ T7776] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13937'. [ 875.894774][ T7778] FAULT_INJECTION: forcing a failure. [ 875.894774][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 875.921362][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.2.13936 Not tainted syzkaller #0 PREEMPT(full) [ 875.921393][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 875.921413][ T7778] Call Trace: [ 875.921423][ T7778] [ 875.921433][ T7778] dump_stack_lvl+0x189/0x250 [ 875.921468][ T7778] ? __pfx____ratelimit+0x10/0x10 [ 875.921492][ T7778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.921518][ T7778] ? __pfx__printk+0x10/0x10 [ 875.921547][ T7778] ? __pfx___might_resched+0x10/0x10 [ 875.921568][ T7778] ? fs_reclaim_acquire+0x7d/0x100 [ 875.921604][ T7778] should_fail_ex+0x414/0x560 [ 875.921643][ T7778] should_failslab+0xa8/0x100 [ 875.921672][ T7778] __kmalloc_noprof+0xcb/0x7f0 [ 875.921698][ T7778] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 875.921725][ T7778] ? __local_bh_enable_ip+0x12d/0x1c0 [ 875.921754][ T7778] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 875.921789][ T7778] genl_family_rcv_msg_doit+0xb8/0x300 [ 875.921822][ T7778] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 875.921858][ T7778] ? apparmor_capable+0x137/0x1b0 [ 875.921884][ T7778] ? bpf_lsm_capable+0x9/0x20 [ 875.921908][ T7778] ? security_capable+0x7e/0x2e0 [ 875.921963][ T7778] genl_rcv_msg+0x60e/0x790 [ 875.921997][ T7778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.922020][ T7778] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 875.922040][ T7778] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 875.922061][ T7778] ? __pfx_nl80211_post_doit+0x10/0x10 [ 875.922084][ T7778] ? __asan_memcpy+0x40/0x70 [ 875.922110][ T7778] ? __pfx_ref_tracker_free+0x10/0x10 [ 875.922138][ T7778] netlink_rcv_skb+0x208/0x470 [ 875.922166][ T7778] ? __lock_acquire+0xab9/0xd20 [ 875.922188][ T7778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.922222][ T7778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 875.922283][ T7778] ? down_read+0x1ad/0x2e0 [ 875.922316][ T7778] genl_rcv+0x28/0x40 [ 875.922337][ T7778] netlink_unicast+0x82f/0x9e0 [ 875.922376][ T7778] ? __pfx_netlink_unicast+0x10/0x10 [ 875.922406][ T7778] ? netlink_sendmsg+0x642/0xb30 [ 875.922423][ T7778] ? skb_put+0x11b/0x210 [ 875.922448][ T7778] netlink_sendmsg+0x805/0xb30 [ 875.922480][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.922514][ T7778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 875.922546][ T7778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 875.922566][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.922604][ T7778] __sock_sendmsg+0x21c/0x270 [ 875.922635][ T7778] ____sys_sendmsg+0x505/0x830 [ 875.922665][ T7778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.922698][ T7778] ? import_iovec+0x74/0xa0 [ 875.922729][ T7778] ___sys_sendmsg+0x21f/0x2a0 [ 875.922753][ T7778] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.922828][ T7778] ? __fget_files+0x2a/0x420 [ 875.922848][ T7778] ? __fget_files+0x3a0/0x420 [ 875.922881][ T7778] __x64_sys_sendmsg+0x19b/0x260 [ 875.922913][ T7778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.922954][ T7778] ? __pfx_ksys_write+0x10/0x10 [ 875.922989][ T7778] ? do_syscall_64+0xbe/0xfa0 [ 875.923020][ T7778] do_syscall_64+0xfa/0xfa0 [ 875.923044][ T7778] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.923069][ T7778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.923090][ T7778] ? clear_bhb_loop+0x60/0xb0 [ 875.923117][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.923137][ T7778] RIP: 0033:0x7f2741d8efc9 [ 875.923156][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.923176][ T7778] RSP: 002b:00007f2742bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.923200][ T7778] RAX: ffffffffffffffda RBX: 00007f2741fe5fa0 RCX: 00007f2741d8efc9 [ 875.923216][ T7778] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 875.923231][ T7778] RBP: 00007f2742bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 875.923245][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.923258][ T7778] R13: 00007f2741fe6038 R14: 00007f2741fe5fa0 R15: 00007fff2a4240c8 [ 875.923296][ T7778] [ 876.227294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 876.321428][ C1] lec:lec_tx_timeout: lec0 [ 876.425388][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13941'. [ 876.608069][ T7791] macvtap2: entered allmulticast mode [ 876.614350][ T7791] veth0_macvtap: entered allmulticast mode [ 876.680908][ T7801] FAULT_INJECTION: forcing a failure. [ 876.680908][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 876.694580][ T7791] macvtap3: entered promiscuous mode [ 876.694784][ T7791] macvtap3: entered allmulticast mode [ 876.739088][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.3.13946 Not tainted syzkaller #0 PREEMPT(full) [ 876.739120][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 876.739133][ T7801] Call Trace: [ 876.739142][ T7801] [ 876.739151][ T7801] dump_stack_lvl+0x189/0x250 [ 876.739185][ T7801] ? __pfx____ratelimit+0x10/0x10 [ 876.739211][ T7801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.739247][ T7801] ? __pfx__printk+0x10/0x10 [ 876.739276][ T7801] ? __pfx___might_resched+0x10/0x10 [ 876.739298][ T7801] ? fs_reclaim_acquire+0x7d/0x100 [ 876.739335][ T7801] should_fail_ex+0x414/0x560 [ 876.739371][ T7801] should_failslab+0xa8/0x100 [ 876.739395][ T7801] kmem_cache_alloc_node_noprof+0x77/0x710 [ 876.739424][ T7801] ? __alloc_skb+0x112/0x2d0 [ 876.739452][ T7801] ? netlink_autobind+0xdb/0x300 [ 876.739478][ T7801] __alloc_skb+0x112/0x2d0 [ 876.739513][ T7801] netlink_sendmsg+0x5c6/0xb30 [ 876.739544][ T7801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.739580][ T7801] ? aa_sock_msg_perm+0xf1/0x1d0 [ 876.739611][ T7801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 876.739632][ T7801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.739662][ T7801] __sock_sendmsg+0x21c/0x270 [ 876.739694][ T7801] ____sys_sendmsg+0x505/0x830 [ 876.739722][ T7801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.739755][ T7801] ? import_iovec+0x74/0xa0 [ 876.739786][ T7801] ___sys_sendmsg+0x21f/0x2a0 [ 876.739811][ T7801] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.739877][ T7801] ? __fget_files+0x2a/0x420 [ 876.739904][ T7801] ? __fget_files+0x3a0/0x420 [ 876.739937][ T7801] __x64_sys_sendmsg+0x19b/0x260 [ 876.739962][ T7801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.739996][ T7801] ? __pfx_ksys_write+0x10/0x10 [ 876.740029][ T7801] ? do_syscall_64+0xbe/0xfa0 [ 876.740066][ T7801] do_syscall_64+0xfa/0xfa0 [ 876.740089][ T7801] ? lockdep_hardirqs_on+0x9c/0x150 [ 876.740115][ T7801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.740136][ T7801] ? clear_bhb_loop+0x60/0xb0 [ 876.740160][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.740180][ T7801] RIP: 0033:0x7ff75d98efc9 [ 876.740199][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.740218][ T7801] RSP: 002b:00007ff75e765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.740242][ T7801] RAX: ffffffffffffffda RBX: 00007ff75dbe5fa0 RCX: 00007ff75d98efc9 [ 876.740258][ T7801] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 876.740272][ T7801] RBP: 00007ff75e765090 R08: 0000000000000000 R09: 0000000000000000 [ 876.740286][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.740299][ T7801] R13: 00007ff75dbe6038 R14: 00007ff75dbe5fa0 R15: 00007ffe46ea0c78 [ 876.740337][ T7801] [ 876.766199][ T7802] macvtap4: entered promiscuous mode [ 876.973499][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13950'. [ 876.999779][ T7802] macvtap4: entered allmulticast mode [ 877.065037][ T7812] smc: net device geneve0 erased user defined pnetid SYZ0 [ 877.093100][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13951'. [ 877.158800][ T7802] macvtap4: entered allmulticast mode [ 877.302788][ T7825] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13956'. [ 877.315377][ T7821] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 877.323014][ T7821] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 877.498639][ T7827] tipc: Enabled bearer , priority 0 [ 877.547863][ T7827] syzkaller0: entered promiscuous mode [ 877.553914][ T7827] syzkaller0: entered allmulticast mode [ 877.673007][ T7827] tipc: Resetting bearer [ 877.700188][ T7826] tipc: Resetting bearer [ 877.769793][ T7826] tipc: Disabling bearer [ 877.882912][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.895388][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.067604][ T7866] FAULT_INJECTION: forcing a failure. [ 878.067604][ T7866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.081860][ T7866] CPU: 1 UID: 0 PID: 7866 Comm: syz.3.13972 Not tainted syzkaller #0 PREEMPT(full) [ 878.081891][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 878.081904][ T7866] Call Trace: [ 878.081912][ T7866] [ 878.081922][ T7866] dump_stack_lvl+0x189/0x250 [ 878.081955][ T7866] ? __pfx____ratelimit+0x10/0x10 [ 878.081980][ T7866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.082008][ T7866] ? __pfx__printk+0x10/0x10 [ 878.082031][ T7866] ? __might_fault+0xb0/0x130 [ 878.082074][ T7866] should_fail_ex+0x414/0x560 [ 878.082111][ T7866] _copy_from_iter+0x1de/0x1790 [ 878.082141][ T7866] ? rcu_is_watching+0x15/0xb0 [ 878.082170][ T7866] ? kmalloc_reserve+0xbd/0x290 [ 878.082201][ T7866] ? __pfx__copy_from_iter+0x10/0x10 [ 878.082226][ T7866] ? __build_skb_around+0x262/0x3f0 [ 878.082260][ T7866] ? netlink_sendmsg+0x642/0xb30 [ 878.082278][ T7866] ? skb_put+0x11b/0x210 [ 878.082301][ T7866] netlink_sendmsg+0x6b2/0xb30 [ 878.082334][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.082368][ T7866] ? aa_sock_msg_perm+0xf1/0x1d0 [ 878.082399][ T7866] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 878.082419][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.082451][ T7866] __sock_sendmsg+0x21c/0x270 [ 878.082501][ T7866] ____sys_sendmsg+0x505/0x830 [ 878.082530][ T7866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.082564][ T7866] ? import_iovec+0x74/0xa0 [ 878.082594][ T7866] ___sys_sendmsg+0x21f/0x2a0 [ 878.082619][ T7866] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.082694][ T7866] ? __fget_files+0x2a/0x420 [ 878.082712][ T7866] ? __fget_files+0x3a0/0x420 [ 878.082745][ T7866] __x64_sys_sendmsg+0x19b/0x260 [ 878.082771][ T7866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.082806][ T7866] ? __pfx_ksys_write+0x10/0x10 [ 878.082841][ T7866] ? do_syscall_64+0xbe/0xfa0 [ 878.082872][ T7866] do_syscall_64+0xfa/0xfa0 [ 878.082895][ T7866] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.082920][ T7866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.082940][ T7866] ? clear_bhb_loop+0x60/0xb0 [ 878.082966][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.082985][ T7866] RIP: 0033:0x7ff75d98efc9 [ 878.083004][ T7866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.083022][ T7866] RSP: 002b:00007ff75e765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.083046][ T7866] RAX: ffffffffffffffda RBX: 00007ff75dbe5fa0 RCX: 00007ff75d98efc9 [ 878.083062][ T7866] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 878.083076][ T7866] RBP: 00007ff75e765090 R08: 0000000000000000 R09: 0000000000000000 [ 878.083089][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.083103][ T7866] R13: 00007ff75dbe6038 R14: 00007ff75dbe5fa0 R15: 00007ffe46ea0c78 [ 878.083140][ T7866] [ 878.188021][ T7873] sch_fq: defrate 0 ignored. [ 878.554774][ T7888] tipc: Enabled bearer , priority 0 [ 878.588899][ T7888] syzkaller0: entered promiscuous mode [ 878.602452][ T7888] syzkaller0: entered allmulticast mode [ 878.643585][ T7888] tipc: Resetting bearer [ 878.664691][ T7887] tipc: Resetting bearer [ 878.739148][ T7887] tipc: Disabling bearer [ 878.779057][ T7897] syzkaller0: entered promiscuous mode [ 878.785011][ T7897] syzkaller0: entered allmulticast mode [ 878.938337][ T7906] FAULT_INJECTION: forcing a failure. [ 878.938337][ T7906] name failslab, interval 1, probability 0, space 0, times 0 [ 878.996743][ T7906] CPU: 0 UID: 0 PID: 7906 Comm: syz.3.13984 Not tainted syzkaller #0 PREEMPT(full) [ 878.996775][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 878.996788][ T7906] Call Trace: [ 878.996797][ T7906] [ 878.996807][ T7906] dump_stack_lvl+0x189/0x250 [ 878.996842][ T7906] ? __pfx____ratelimit+0x10/0x10 [ 878.996867][ T7906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.996895][ T7906] ? __pfx__printk+0x10/0x10 [ 878.996934][ T7906] ? __pfx___might_resched+0x10/0x10 [ 878.996964][ T7906] should_fail_ex+0x414/0x560 [ 878.997001][ T7906] should_failslab+0xa8/0x100 [ 878.997025][ T7906] kmem_cache_alloc_node_noprof+0x77/0x710 [ 878.997054][ T7906] ? __alloc_skb+0x112/0x2d0 [ 878.997091][ T7906] __alloc_skb+0x112/0x2d0 [ 878.997126][ T7906] netlink_ack+0x146/0xa50 [ 878.997153][ T7906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 878.997175][ T7906] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 878.997197][ T7906] ? __pfx_nl80211_post_doit+0x10/0x10 [ 878.997237][ T7906] netlink_rcv_skb+0x28c/0x470 [ 878.997264][ T7906] ? __lock_acquire+0xab9/0xd20 [ 878.997286][ T7906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 878.997311][ T7906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 878.997365][ T7906] ? down_read+0x1ad/0x2e0 [ 878.997396][ T7906] genl_rcv+0x28/0x40 [ 878.997418][ T7906] netlink_unicast+0x82f/0x9e0 [ 878.997458][ T7906] ? __pfx_netlink_unicast+0x10/0x10 [ 878.997488][ T7906] ? netlink_sendmsg+0x642/0xb30 [ 878.997505][ T7906] ? skb_put+0x11b/0x210 [ 878.997529][ T7906] netlink_sendmsg+0x805/0xb30 [ 878.997560][ T7906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.997595][ T7906] ? aa_sock_msg_perm+0xf1/0x1d0 [ 878.997627][ T7906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 878.997647][ T7906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.997675][ T7906] __sock_sendmsg+0x21c/0x270 [ 878.997700][ T7906] ____sys_sendmsg+0x505/0x830 [ 878.997723][ T7906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.997750][ T7906] ? import_iovec+0x74/0xa0 [ 878.997780][ T7906] ___sys_sendmsg+0x21f/0x2a0 [ 878.997805][ T7906] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.997869][ T7906] ? __fget_files+0x2a/0x420 [ 878.997887][ T7906] ? __fget_files+0x3a0/0x420 [ 878.997931][ T7906] __x64_sys_sendmsg+0x19b/0x260 [ 878.997955][ T7906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.997988][ T7906] ? __pfx_ksys_write+0x10/0x10 [ 878.998020][ T7906] ? do_syscall_64+0xbe/0xfa0 [ 878.998050][ T7906] do_syscall_64+0xfa/0xfa0 [ 878.998073][ T7906] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.998097][ T7906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.998118][ T7906] ? clear_bhb_loop+0x60/0xb0 [ 878.998143][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.998163][ T7906] RIP: 0033:0x7ff75d98efc9 [ 878.998183][ T7906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.998201][ T7906] RSP: 002b:00007ff75e765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.998224][ T7906] RAX: ffffffffffffffda RBX: 00007ff75dbe5fa0 RCX: 00007ff75d98efc9 [ 878.998240][ T7906] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000003 [ 878.998254][ T7906] RBP: 00007ff75e765090 R08: 0000000000000000 R09: 0000000000000000 [ 878.998267][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.998280][ T7906] R13: 00007ff75dbe6038 R14: 00007ff75dbe5fa0 R15: 00007ffe46ea0c78 [ 878.998319][ T7906] [ 879.512208][ T7923] __nla_validate_parse: 3 callbacks suppressed [ 879.512232][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13991'. [ 879.530522][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13990'. [ 879.557052][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13991'. [ 879.723932][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13995'. [ 879.795056][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13994'. [ 879.924882][ T7941] syzkaller0: entered promiscuous mode [ 879.950936][ T7941] syzkaller0: entered allmulticast mode [ 879.977007][ T7946] FAULT_INJECTION: forcing a failure. [ 879.977007][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.997357][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.4.14001 Not tainted syzkaller #0 PREEMPT(full) [ 879.997388][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 879.997401][ T7946] Call Trace: [ 879.997410][ T7946] [ 879.997419][ T7946] dump_stack_lvl+0x189/0x250 [ 879.997452][ T7946] ? __pfx____ratelimit+0x10/0x10 [ 879.997476][ T7946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.997503][ T7946] ? __pfx__printk+0x10/0x10 [ 879.997524][ T7946] ? __might_fault+0xb0/0x130 [ 879.997565][ T7946] should_fail_ex+0x414/0x560 [ 879.997600][ T7946] _copy_from_user+0x2d/0xb0 [ 879.997626][ T7946] ___sys_sendmsg+0x158/0x2a0 [ 879.997652][ T7946] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.997714][ T7946] ? __fget_files+0x2a/0x420 [ 879.997732][ T7946] ? __fget_files+0x3a0/0x420 [ 879.997763][ T7946] __x64_sys_sendmsg+0x19b/0x260 [ 879.997786][ T7946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.997818][ T7946] ? __pfx_ksys_write+0x10/0x10 [ 879.997856][ T7946] ? do_syscall_64+0xbe/0xfa0 [ 879.997895][ T7946] do_syscall_64+0xfa/0xfa0 [ 879.997917][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.997942][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.997962][ T7946] ? clear_bhb_loop+0x60/0xb0 [ 879.997987][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.998006][ T7946] RIP: 0033:0x7f1598d8efc9 [ 879.998025][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.998044][ T7946] RSP: 002b:00007f1599b7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.998066][ T7946] RAX: ffffffffffffffda RBX: 00007f1598fe5fa0 RCX: 00007f1598d8efc9 [ 879.998081][ T7946] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 879.998095][ T7946] RBP: 00007f1599b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 879.998108][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.998120][ T7946] R13: 00007f1598fe6038 R14: 00007f1598fe5fa0 R15: 00007ffdc7056f58 [ 879.998156][ T7946] [ 880.381615][ T7952] netlink: 'syz.4.14003': attribute type 1 has an invalid length. [ 880.392208][ T7952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14003'. [ 880.609292][ T7959] bridge0: port 1(syz_tun) entered disabled state [ 880.666812][ T7959] bond0: (slave bridge0): Releasing backup interface [ 880.705155][ T7959] bridge0: left promiscuous mode [ 880.729930][ T7959] bridge0: left allmulticast mode [ 880.737793][ T7959] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 880.846757][ T7968] FAULT_INJECTION: forcing a failure. [ 880.846757][ T7968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.876848][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.0.14011 Not tainted syzkaller #0 PREEMPT(full) [ 880.876879][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 880.876892][ T7968] Call Trace: [ 880.876901][ T7968] [ 880.876910][ T7968] dump_stack_lvl+0x189/0x250 [ 880.876952][ T7968] ? __pfx____ratelimit+0x10/0x10 [ 880.876978][ T7968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 880.877006][ T7968] ? __pfx__printk+0x10/0x10 [ 880.877043][ T7968] should_fail_ex+0x414/0x560 [ 880.877079][ T7968] _copy_to_user+0x31/0xb0 [ 880.877109][ T7968] simple_read_from_buffer+0xe1/0x170 [ 880.877144][ T7968] proc_fail_nth_read+0x1b3/0x220 [ 880.877174][ T7968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.877203][ T7968] ? rw_verify_area+0x2a6/0x4d0 [ 880.877229][ T7968] ? __lock_acquire+0xab9/0xd20 [ 880.877246][ T7968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.877272][ T7968] vfs_read+0x200/0xa30 [ 880.877299][ T7968] ? fdget_pos+0x247/0x320 [ 880.877322][ T7968] ? __pfx___mutex_lock+0x10/0x10 [ 880.877351][ T7968] ? __pfx_vfs_read+0x10/0x10 [ 880.877380][ T7968] ? __fget_files+0x2a/0x420 [ 880.877406][ T7968] ? __fget_files+0x3a0/0x420 [ 880.877424][ T7968] ? __fget_files+0x2a/0x420 [ 880.877456][ T7968] ksys_read+0x145/0x250 [ 880.877486][ T7968] ? __pfx_ksys_read+0x10/0x10 [ 880.877517][ T7968] ? do_syscall_64+0xbe/0xfa0 [ 880.877546][ T7968] do_syscall_64+0xfa/0xfa0 [ 880.877568][ T7968] ? lockdep_hardirqs_on+0x9c/0x150 [ 880.877593][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.877613][ T7968] ? clear_bhb_loop+0x60/0xb0 [ 880.877639][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.877659][ T7968] RIP: 0033:0x7fa7a098d9dc [ 880.877677][ T7968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 880.877696][ T7968] RSP: 002b:00007fa7a1771030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.877719][ T7968] RAX: ffffffffffffffda RBX: 00007fa7a0be5fa0 RCX: 00007fa7a098d9dc [ 880.877735][ T7968] RDX: 000000000000000f RSI: 00007fa7a17710a0 RDI: 0000000000000004 [ 880.877747][ T7968] RBP: 00007fa7a1771090 R08: 0000000000000000 R09: 0000000000000000 [ 880.877760][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.877772][ T7968] R13: 00007fa7a0be6038 R14: 00007fa7a0be5fa0 R15: 00007ffe298b5998 [ 880.877810][ T7968] [ 881.197994][ T7982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14008'. [ 881.245811][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14008'. [ 881.323910][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14014'. [ 881.443751][ T7989] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 881.459743][ T7989] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 881.760239][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14026'. [ 881.852505][ T8020] macvtap2: entered promiscuous mode [ 881.866199][ T8020] macvtap2: entered allmulticast mode [ 882.489989][ T8052] FAULT_INJECTION: forcing a failure. [ 882.489989][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.514054][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.0.14043 Not tainted syzkaller #0 PREEMPT(full) [ 882.514086][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 882.514099][ T8052] Call Trace: [ 882.514107][ T8052] [ 882.514117][ T8052] dump_stack_lvl+0x189/0x250 [ 882.514151][ T8052] ? __pfx____ratelimit+0x10/0x10 [ 882.514178][ T8052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.514205][ T8052] ? __pfx__printk+0x10/0x10 [ 882.514227][ T8052] ? __might_fault+0xb0/0x130 [ 882.514267][ T8052] should_fail_ex+0x414/0x560 [ 882.514302][ T8052] _copy_from_user+0x2d/0xb0 [ 882.514328][ T8052] __sys_sendto+0x25c/0x520 [ 882.514360][ T8052] ? __pfx___sys_sendto+0x10/0x10 [ 882.514387][ T8052] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 882.514426][ T8052] ? __fget_files+0x3a0/0x420 [ 882.514458][ T8052] ? ksys_write+0x22a/0x250 [ 882.514488][ T8052] ? __pfx_ksys_write+0x10/0x10 [ 882.514520][ T8052] __x64_sys_sendto+0xde/0x100 [ 882.514554][ T8052] do_syscall_64+0xfa/0xfa0 [ 882.514578][ T8052] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.514617][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.514637][ T8052] ? clear_bhb_loop+0x60/0xb0 [ 882.514664][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.514683][ T8052] RIP: 0033:0x7fa7a0990e5c [ 882.514703][ T8052] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 882.514721][ T8052] RSP: 002b:00007fa7a176fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 882.514743][ T8052] RAX: ffffffffffffffda RBX: 00007fa7a176ffc0 RCX: 00007fa7a0990e5c [ 882.514759][ T8052] RDX: 0000000000000024 RSI: 00007fa7a1770010 RDI: 0000000000000004 [ 882.514772][ T8052] RBP: 0000000000000000 R08: 00007fa7a176ff14 R09: 000000000000000c [ 882.514785][ T8052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 882.514797][ T8052] R13: 00007fa7a176ff68 R14: 00007fa7a1770010 R15: 0000000000000000 [ 882.514833][ T8052] [ 882.846834][ T8060] macvtap1: entered promiscuous mode [ 882.863382][ T8060] vlan0: entered promiscuous mode [ 882.878062][ T8060] veth0_vlan: entered promiscuous mode [ 882.884541][ T8060] macvtap1: entered allmulticast mode [ 882.903240][ T8072] tc_dump_action: action bad kind [ 883.136782][ T8083] netlink: 'syz.3.14053': attribute type 12 has an invalid length. [ 883.684723][ T8129] netlink: 'syz.0.14066': attribute type 1 has an invalid length. [ 883.705434][ T8129] netlink: 'syz.0.14066': attribute type 1 has an invalid length. [ 883.861966][ T8140] FAULT_INJECTION: forcing a failure. [ 883.861966][ T8140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.885121][ T8140] CPU: 0 UID: 0 PID: 8140 Comm: syz.1.14067 Not tainted syzkaller #0 PREEMPT(full) [ 883.885151][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 883.885163][ T8140] Call Trace: [ 883.885172][ T8140] [ 883.885182][ T8140] dump_stack_lvl+0x189/0x250 [ 883.885217][ T8140] ? __pfx____ratelimit+0x10/0x10 [ 883.885242][ T8140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.885270][ T8140] ? __pfx__printk+0x10/0x10 [ 883.885292][ T8140] ? __might_fault+0xb0/0x130 [ 883.885335][ T8140] should_fail_ex+0x414/0x560 [ 883.885370][ T8140] _copy_from_iter+0x1de/0x1790 [ 883.885412][ T8140] ? rcu_is_watching+0x15/0xb0 [ 883.885441][ T8140] ? kmalloc_reserve+0xbd/0x290 [ 883.885478][ T8140] ? __pfx__copy_from_iter+0x10/0x10 [ 883.885503][ T8140] ? __build_skb_around+0x262/0x3f0 [ 883.885536][ T8140] ? netlink_sendmsg+0x642/0xb30 [ 883.885554][ T8140] ? skb_put+0x11b/0x210 [ 883.885578][ T8140] netlink_sendmsg+0x6b2/0xb30 [ 883.885616][ T8140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.885652][ T8140] ? aa_sock_msg_perm+0xf1/0x1d0 [ 883.885684][ T8140] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 883.885713][ T8140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.885745][ T8140] __sock_sendmsg+0x21c/0x270 [ 883.885776][ T8140] ____sys_sendmsg+0x505/0x830 [ 883.885805][ T8140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 883.885843][ T8140] ? import_iovec+0x74/0xa0 [ 883.885872][ T8140] ___sys_sendmsg+0x21f/0x2a0 [ 883.885895][ T8140] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.885958][ T8140] ? __fget_files+0x2a/0x420 [ 883.885976][ T8140] ? __fget_files+0x3a0/0x420 [ 883.886007][ T8140] __x64_sys_sendmsg+0x19b/0x260 [ 883.886031][ T8140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 883.886062][ T8140] ? __pfx_ksys_write+0x10/0x10 [ 883.886094][ T8140] ? do_syscall_64+0xbe/0xfa0 [ 883.886124][ T8140] do_syscall_64+0xfa/0xfa0 [ 883.886147][ T8140] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.886172][ T8140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.886191][ T8140] ? clear_bhb_loop+0x60/0xb0 [ 883.886217][ T8140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.886235][ T8140] RIP: 0033:0x7fcb2bf8efc9 [ 883.886254][ T8140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.886272][ T8140] RSP: 002b:00007fcb2cdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.886295][ T8140] RAX: ffffffffffffffda RBX: 00007fcb2c1e5fa0 RCX: 00007fcb2bf8efc9 [ 883.886310][ T8140] RDX: 000000002000c094 RSI: 0000200000000000 RDI: 0000000000000003 [ 883.886323][ T8140] RBP: 00007fcb2cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 883.886336][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.886348][ T8140] R13: 00007fcb2c1e6038 R14: 00007fcb2c1e5fa0 R15: 00007ffe6b4f8e38 [ 883.886383][ T8140] [ 884.495827][ T8164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.543946][ T8170] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 884.632014][ T8175] __nla_validate_parse: 17 callbacks suppressed [ 884.632035][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14084'. [ 884.683278][ T8180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14087'. [ 884.797130][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14089'. [ 884.811349][ T8182] geneve3: entered promiscuous mode [ 884.833610][T24091] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 20002 - 0 [ 884.848231][T24091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 884.859398][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14092'. [ 884.906350][T24091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 884.979064][ T8199] x_tables: duplicate underflow at hook 2 [ 884.991147][T24091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 885.067608][ T8198] netlink: 928 bytes leftover after parsing attributes in process `syz.3.14095'. [ 885.409219][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14104'. [ 885.481628][ T8225] FAULT_INJECTION: forcing a failure. [ 885.481628][ T8225] name failslab, interval 1, probability 0, space 0, times 0 [ 885.494978][ T8225] CPU: 1 UID: 0 PID: 8225 Comm: syz.2.14106 Not tainted syzkaller #0 PREEMPT(full) [ 885.495008][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 885.495022][ T8225] Call Trace: [ 885.495031][ T8225] [ 885.495041][ T8225] dump_stack_lvl+0x189/0x250 [ 885.495074][ T8225] ? __pfx____ratelimit+0x10/0x10 [ 885.495100][ T8225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.495128][ T8225] ? __pfx__printk+0x10/0x10 [ 885.495155][ T8225] ? stack_trace_save+0x9c/0xe0 [ 885.495189][ T8225] should_fail_ex+0x414/0x560 [ 885.495226][ T8225] should_failslab+0xa8/0x100 [ 885.495251][ T8225] kmem_cache_alloc_noprof+0x74/0x6e0 [ 885.495277][ T8225] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 885.495301][ T8225] ? xfrm_state_alloc+0x24/0x2f0 [ 885.495336][ T8225] xfrm_state_alloc+0x24/0x2f0 [ 885.495366][ T8225] __find_acq_core+0x8a7/0x1c00 [ 885.495391][ T8225] ? xfrm_find_acq+0x4b/0xa0 [ 885.495427][ T8225] xfrm_find_acq+0x78/0xa0 [ 885.495460][ T8225] xfrm_alloc_userspi+0x6b3/0xc90 [ 885.495506][ T8225] ? apparmor_capable+0x137/0x1b0 [ 885.495529][ T8225] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 885.495556][ T8225] ? __nla_parse+0x40/0x60 [ 885.495585][ T8225] xfrm_user_rcv_msg+0x7a3/0xab0 [ 885.495616][ T8225] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 885.495680][ T8225] ? __pfx___mutex_trylock_common+0x10/0x10 [ 885.495712][ T8225] ? rcu_is_watching+0x15/0xb0 [ 885.495736][ T8225] ? trace_contention_end+0x39/0x120 [ 885.495762][ T8225] ? __mutex_lock+0x335/0x1350 [ 885.495798][ T8225] netlink_rcv_skb+0x208/0x470 [ 885.495834][ T8225] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 885.495858][ T8225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 885.495904][ T8225] ? netlink_deliver_tap+0x2e/0x1b0 [ 885.495940][ T8225] ? netlink_deliver_tap+0x2e/0x1b0 [ 885.495972][ T8225] xfrm_netlink_rcv+0x79/0x90 [ 885.495993][ T8225] netlink_unicast+0x82f/0x9e0 [ 885.496030][ T8225] ? __pfx_netlink_unicast+0x10/0x10 [ 885.496058][ T8225] ? netlink_sendmsg+0x642/0xb30 [ 885.496073][ T8225] ? skb_put+0x11b/0x210 [ 885.496096][ T8225] netlink_sendmsg+0x805/0xb30 [ 885.496124][ T8225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.496157][ T8225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 885.496187][ T8225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 885.496206][ T8225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.496236][ T8225] __sock_sendmsg+0x21c/0x270 [ 885.496265][ T8225] ____sys_sendmsg+0x505/0x830 [ 885.496292][ T8225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.496322][ T8225] ? import_iovec+0x74/0xa0 [ 885.496351][ T8225] ___sys_sendmsg+0x21f/0x2a0 [ 885.496374][ T8225] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.496435][ T8225] ? __fget_files+0x2a/0x420 [ 885.496452][ T8225] ? __fget_files+0x3a0/0x420 [ 885.496484][ T8225] __x64_sys_sendmsg+0x19b/0x260 [ 885.496509][ T8225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.496543][ T8225] ? __pfx_ksys_write+0x10/0x10 [ 885.496576][ T8225] ? do_syscall_64+0xbe/0xfa0 [ 885.496607][ T8225] do_syscall_64+0xfa/0xfa0 [ 885.496630][ T8225] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.496655][ T8225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.496675][ T8225] ? clear_bhb_loop+0x60/0xb0 [ 885.496701][ T8225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.496720][ T8225] RIP: 0033:0x7f2741d8efc9 [ 885.496740][ T8225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.496758][ T8225] RSP: 002b:00007f2742bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.496781][ T8225] RAX: ffffffffffffffda RBX: 00007f2741fe5fa0 RCX: 00007f2741d8efc9 [ 885.496796][ T8225] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 885.496810][ T8225] RBP: 00007f2742bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 885.496822][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.496835][ T8225] R13: 00007f2741fe6038 R14: 00007f2741fe5fa0 R15: 00007fff2a4240c8 [ 885.496873][ T8225] [ 886.095355][ T8236] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 886.185108][ T8239] FAULT_INJECTION: forcing a failure. [ 886.185108][ T8239] name failslab, interval 1, probability 0, space 0, times 0 [ 886.219100][ T8239] CPU: 1 UID: 0 PID: 8239 Comm: syz.2.14112 Not tainted syzkaller #0 PREEMPT(full) [ 886.219133][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.219145][ T8239] Call Trace: [ 886.219155][ T8239] [ 886.219164][ T8239] dump_stack_lvl+0x189/0x250 [ 886.219199][ T8239] ? __pfx____ratelimit+0x10/0x10 [ 886.219224][ T8239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.219253][ T8239] ? __pfx__printk+0x10/0x10 [ 886.219282][ T8239] ? __pfx___might_resched+0x10/0x10 [ 886.219304][ T8239] ? fs_reclaim_acquire+0x7d/0x100 [ 886.219341][ T8239] should_fail_ex+0x414/0x560 [ 886.219378][ T8239] should_failslab+0xa8/0x100 [ 886.219402][ T8239] __kmalloc_noprof+0xcb/0x7f0 [ 886.219430][ T8239] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 886.219457][ T8239] ? rcu_is_watching+0x15/0xb0 [ 886.219486][ T8239] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 886.219521][ T8239] genl_family_rcv_msg_doit+0xb8/0x300 [ 886.219554][ T8239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 886.219589][ T8239] ? apparmor_capable+0x137/0x1b0 [ 886.219615][ T8239] ? bpf_lsm_capable+0x9/0x20 [ 886.219650][ T8239] ? security_capable+0x7e/0x2e0 [ 886.219686][ T8239] genl_rcv_msg+0x60e/0x790 [ 886.219720][ T8239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.219743][ T8239] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 886.219788][ T8239] netlink_rcv_skb+0x208/0x470 [ 886.219815][ T8239] ? __lock_acquire+0xab9/0xd20 [ 886.219836][ T8239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.219863][ T8239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.219916][ T8239] ? down_read+0x1ad/0x2e0 [ 886.219949][ T8239] genl_rcv+0x28/0x40 [ 886.219970][ T8239] netlink_unicast+0x82f/0x9e0 [ 886.220009][ T8239] ? __pfx_netlink_unicast+0x10/0x10 [ 886.220039][ T8239] ? netlink_sendmsg+0x642/0xb30 [ 886.220056][ T8239] ? skb_put+0x11b/0x210 [ 886.220080][ T8239] netlink_sendmsg+0x805/0xb30 [ 886.220113][ T8239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.220148][ T8239] ? aa_sock_msg_perm+0xf1/0x1d0 [ 886.220179][ T8239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.220199][ T8239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.220230][ T8239] __sock_sendmsg+0x21c/0x270 [ 886.220261][ T8239] ____sys_sendmsg+0x505/0x830 [ 886.220291][ T8239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.220324][ T8239] ? import_iovec+0x74/0xa0 [ 886.220354][ T8239] ___sys_sendmsg+0x21f/0x2a0 [ 886.220378][ T8239] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.220441][ T8239] ? __fget_files+0x2a/0x420 [ 886.220459][ T8239] ? __fget_files+0x3a0/0x420 [ 886.220491][ T8239] __x64_sys_sendmsg+0x19b/0x260 [ 886.220515][ T8239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.220548][ T8239] ? __pfx_ksys_write+0x10/0x10 [ 886.220582][ T8239] ? do_syscall_64+0xbe/0xfa0 [ 886.220613][ T8239] do_syscall_64+0xfa/0xfa0 [ 886.220645][ T8239] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.220670][ T8239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.220690][ T8239] ? clear_bhb_loop+0x60/0xb0 [ 886.220716][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.220735][ T8239] RIP: 0033:0x7f2741d8efc9 [ 886.220756][ T8239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.220774][ T8239] RSP: 002b:00007f2742bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.220798][ T8239] RAX: ffffffffffffffda RBX: 00007f2741fe5fa0 RCX: 00007f2741d8efc9 [ 886.220813][ T8239] RDX: 000000002000c094 RSI: 0000200000000000 RDI: 0000000000000003 [ 886.220828][ T8239] RBP: 00007f2742bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 886.220841][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.220853][ T8239] R13: 00007f2741fe6038 R14: 00007f2741fe5fa0 R15: 00007fff2a4240c8 [ 886.220889][ T8239] [ 886.228145][ T8243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14113'. [ 886.412867][ T8250] openvswitch: netlink: Key type 31 is not supported [ 886.709788][ T8260] macvtap3: entered promiscuous mode [ 886.725744][ T8260] macvtap3: entered allmulticast mode [ 886.827183][ T8261] macvtap3: entered promiscuous mode [ 886.847081][ T8261] macvtap3: entered allmulticast mode [ 886.869358][ T8269] FAULT_INJECTION: forcing a failure. [ 886.869358][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 886.905955][ T8269] CPU: 0 UID: 0 PID: 8269 Comm: syz.2.14122 Not tainted syzkaller #0 PREEMPT(full) [ 886.905983][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.905994][ T8269] Call Trace: [ 886.906002][ T8269] [ 886.906009][ T8269] dump_stack_lvl+0x189/0x250 [ 886.906040][ T8269] ? __pfx____ratelimit+0x10/0x10 [ 886.906061][ T8269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.906085][ T8269] ? __pfx__printk+0x10/0x10 [ 886.906108][ T8269] ? xfrm_alloc_spi+0xa45/0xf40 [ 886.906135][ T8269] should_fail_ex+0x414/0x560 [ 886.906166][ T8269] should_failslab+0xa8/0x100 [ 886.906187][ T8269] kmem_cache_alloc_node_noprof+0x77/0x710 [ 886.906211][ T8269] ? __alloc_skb+0x112/0x2d0 [ 886.906236][ T8269] ? __pfx_xfrm_alloc_spi+0x10/0x10 [ 886.906258][ T8269] __alloc_skb+0x112/0x2d0 [ 886.906289][ T8269] xfrm_alloc_userspi+0x81d/0xc90 [ 886.906323][ T8269] ? apparmor_capable+0x137/0x1b0 [ 886.906341][ T8269] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 886.906363][ T8269] ? __nla_parse+0x40/0x60 [ 886.906386][ T8269] xfrm_user_rcv_msg+0x7a3/0xab0 [ 886.906412][ T8269] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 886.906470][ T8269] ? __pfx___mutex_trylock_common+0x10/0x10 [ 886.906497][ T8269] ? rcu_is_watching+0x15/0xb0 [ 886.906518][ T8269] ? trace_contention_end+0x39/0x120 [ 886.906540][ T8269] ? __mutex_lock+0x335/0x1350 [ 886.906571][ T8269] netlink_rcv_skb+0x208/0x470 [ 886.906599][ T8269] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 886.906620][ T8269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.906664][ T8269] ? netlink_deliver_tap+0x2e/0x1b0 [ 886.906693][ T8269] ? netlink_deliver_tap+0x2e/0x1b0 [ 886.906723][ T8269] xfrm_netlink_rcv+0x79/0x90 [ 886.906746][ T8269] netlink_unicast+0x82f/0x9e0 [ 886.906783][ T8269] ? __pfx_netlink_unicast+0x10/0x10 [ 886.906812][ T8269] ? netlink_sendmsg+0x642/0xb30 [ 886.906828][ T8269] ? skb_put+0x11b/0x210 [ 886.906851][ T8269] netlink_sendmsg+0x805/0xb30 [ 886.906885][ T8269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.906919][ T8269] ? aa_sock_msg_perm+0xf1/0x1d0 [ 886.906950][ T8269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.906970][ T8269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.907000][ T8269] __sock_sendmsg+0x21c/0x270 [ 886.907031][ T8269] ____sys_sendmsg+0x505/0x830 [ 886.907060][ T8269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.907094][ T8269] ? import_iovec+0x74/0xa0 [ 886.907124][ T8269] ___sys_sendmsg+0x21f/0x2a0 [ 886.907148][ T8269] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.907214][ T8269] ? __fget_files+0x2a/0x420 [ 886.907232][ T8269] ? __fget_files+0x3a0/0x420 [ 886.907261][ T8269] __x64_sys_sendmsg+0x19b/0x260 [ 886.907286][ T8269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.907316][ T8269] ? __pfx_ksys_write+0x10/0x10 [ 886.907346][ T8269] ? do_syscall_64+0xbe/0xfa0 [ 886.907376][ T8269] do_syscall_64+0xfa/0xfa0 [ 886.907400][ T8269] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.907424][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.907445][ T8269] ? clear_bhb_loop+0x60/0xb0 [ 886.907472][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.907492][ T8269] RIP: 0033:0x7f2741d8efc9 [ 886.907513][ T8269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.907530][ T8269] RSP: 002b:00007f2742bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.907554][ T8269] RAX: ffffffffffffffda RBX: 00007f2741fe5fa0 RCX: 00007f2741d8efc9 [ 886.907569][ T8269] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 886.907583][ T8269] RBP: 00007f2742bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 886.907597][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.907610][ T8269] R13: 00007f2741fe6038 R14: 00007f2741fe5fa0 R15: 00007fff2a4240c8 [ 886.907644][ T8269] [ 887.124979][ T8283] tipc: Enabled bearer , priority 0 [ 887.340771][ T8284] syzkaller0: entered promiscuous mode [ 887.362676][ T8284] syzkaller0: entered allmulticast mode [ 887.412072][ T8283] tipc: Resetting bearer [ 887.442148][ T8282] tipc: Resetting bearer [ 887.505658][ T8282] tipc: Disabling bearer [ 887.656716][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14133'. [ 887.690922][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14133'. [ 887.704897][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14129'. [ 887.895336][ T8319] netlink: 'syz.0.14136': attribute type 21 has an invalid length. [ 887.935115][ T8319] netlink: 'syz.0.14136': attribute type 5 has an invalid length. [ 888.020179][ T8319] netlink: 'syz.0.14136': attribute type 6 has an invalid length. [ 888.020600][ T8325] FAULT_INJECTION: forcing a failure. [ 888.020600][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 888.030311][ T8319] netlink: 'syz.0.14136': attribute type 6 has an invalid length. [ 888.073676][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.3.14140 Not tainted syzkaller #0 PREEMPT(full) [ 888.073710][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 888.073722][ T8325] Call Trace: [ 888.073732][ T8325] [ 888.073742][ T8325] dump_stack_lvl+0x189/0x250 [ 888.073776][ T8325] ? __pfx____ratelimit+0x10/0x10 [ 888.073802][ T8325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.073831][ T8325] ? __pfx__printk+0x10/0x10 [ 888.073882][ T8325] should_fail_ex+0x414/0x560 [ 888.073920][ T8325] should_failslab+0xa8/0x100 [ 888.073944][ T8325] kmem_cache_alloc_node_noprof+0x77/0x710 [ 888.073973][ T8325] ? __alloc_skb+0x112/0x2d0 [ 888.074010][ T8325] __alloc_skb+0x112/0x2d0 [ 888.074044][ T8325] xfrm_alloc_compat+0x1a6/0x16f0 [ 888.074078][ T8325] ? xfrm_get_translator+0x1b/0x240 [ 888.074109][ T8325] dump_one_state+0x2c8/0x440 [ 888.074139][ T8325] xfrm_alloc_userspi+0x85e/0xc90 [ 888.074181][ T8325] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 888.074208][ T8325] ? __nla_parse+0x40/0x60 [ 888.074236][ T8325] xfrm_user_rcv_msg+0x7a3/0xab0 [ 888.074267][ T8325] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 888.074334][ T8325] ? __pfx___mutex_trylock_common+0x10/0x10 [ 888.074367][ T8325] ? rcu_is_watching+0x15/0xb0 [ 888.074391][ T8325] ? trace_contention_end+0x39/0x120 [ 888.074416][ T8325] ? __mutex_lock+0x335/0x1350 [ 888.074452][ T8325] netlink_rcv_skb+0x208/0x470 [ 888.074485][ T8325] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 888.074511][ T8325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 888.074560][ T8325] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.074590][ T8325] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.074622][ T8325] xfrm_netlink_rcv+0x79/0x90 [ 888.074646][ T8325] netlink_unicast+0x82f/0x9e0 [ 888.074685][ T8325] ? __pfx_netlink_unicast+0x10/0x10 [ 888.074715][ T8325] ? netlink_sendmsg+0x642/0xb30 [ 888.074732][ T8325] ? skb_put+0x11b/0x210 [ 888.074756][ T8325] netlink_sendmsg+0x805/0xb30 [ 888.074787][ T8325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.074820][ T8325] ? aa_sock_msg_perm+0xf1/0x1d0 [ 888.074859][ T8325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.074880][ T8325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.074912][ T8325] __sock_sendmsg+0x21c/0x270 [ 888.074944][ T8325] ____sys_sendmsg+0x505/0x830 [ 888.074973][ T8325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.075007][ T8325] ? import_iovec+0x74/0xa0 [ 888.075038][ T8325] ___sys_sendmsg+0x21f/0x2a0 [ 888.075063][ T8325] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.075126][ T8325] ? __fget_files+0x2a/0x420 [ 888.075146][ T8325] ? __fget_files+0x3a0/0x420 [ 888.075180][ T8325] __x64_sys_sendmsg+0x19b/0x260 [ 888.075205][ T8325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.075237][ T8325] ? __pfx_ksys_write+0x10/0x10 [ 888.075270][ T8325] ? do_syscall_64+0xbe/0xfa0 [ 888.075301][ T8325] do_syscall_64+0xfa/0xfa0 [ 888.075325][ T8325] ? lockdep_hardirqs_on+0x9c/0x150 [ 888.075350][ T8325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.075371][ T8325] ? clear_bhb_loop+0x60/0xb0 [ 888.075397][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.075417][ T8325] RIP: 0033:0x7ff75d98efc9 [ 888.075436][ T8325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.075454][ T8325] RSP: 002b:00007ff75e765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.075478][ T8325] RAX: ffffffffffffffda RBX: 00007ff75dbe5fa0 RCX: 00007ff75d98efc9 [ 888.075493][ T8325] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 888.075506][ T8325] RBP: 00007ff75e765090 R08: 0000000000000000 R09: 0000000000000000 [ 888.075519][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.075532][ T8325] R13: 00007ff75dbe6038 R14: 00007ff75dbe5fa0 R15: 00007ffe46ea0c78 [ 888.075570][ T8325] [ 888.410807][ T8339] FAULT_INJECTION: forcing a failure. [ 888.410807][ T8339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.487475][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.3.14146 Not tainted syzkaller #0 PREEMPT(full) [ 888.487508][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 888.487520][ T8339] Call Trace: [ 888.487529][ T8339] [ 888.487539][ T8339] dump_stack_lvl+0x189/0x250 [ 888.487573][ T8339] ? __pfx____ratelimit+0x10/0x10 [ 888.487598][ T8339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.487624][ T8339] ? __pfx__printk+0x10/0x10 [ 888.487648][ T8339] ? __might_fault+0xb0/0x130 [ 888.487691][ T8339] should_fail_ex+0x414/0x560 [ 888.487728][ T8339] _copy_from_user+0x2d/0xb0 [ 888.487755][ T8339] kstrtouint_from_user+0xc4/0x170 [ 888.487781][ T8339] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 888.487825][ T8339] proc_fail_nth_write+0x88/0x200 [ 888.487861][ T8339] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 888.487895][ T8339] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 888.487922][ T8339] vfs_write+0x27e/0xb30 [ 888.487962][ T8339] ? __pfx_vfs_write+0x10/0x10 [ 888.487993][ T8339] ? __fget_files+0x2a/0x420 [ 888.488020][ T8339] ? __fget_files+0x3a0/0x420 [ 888.488037][ T8339] ? __fget_files+0x2a/0x420 [ 888.488070][ T8339] ksys_write+0x145/0x250 [ 888.488102][ T8339] ? __pfx_ksys_write+0x10/0x10 [ 888.488135][ T8339] ? do_syscall_64+0xbe/0xfa0 [ 888.488167][ T8339] do_syscall_64+0xfa/0xfa0 [ 888.488191][ T8339] ? lockdep_hardirqs_on+0x9c/0x150 [ 888.488217][ T8339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.488238][ T8339] ? clear_bhb_loop+0x60/0xb0 [ 888.488264][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.488284][ T8339] RIP: 0033:0x7ff75d98da7f [ 888.488303][ T8339] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 888.488321][ T8339] RSP: 002b:00007ff75e744030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 888.488345][ T8339] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff75d98da7f [ 888.488361][ T8339] RDX: 0000000000000001 RSI: 00007ff75e7440a0 RDI: 0000000000000005 [ 888.488374][ T8339] RBP: 00007ff75e744090 R08: 0000000000000000 R09: 0000000000000000 [ 888.488387][ T8339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 888.488400][ T8339] R13: 00007ff75dbe6128 R14: 00007ff75dbe6090 R15: 00007ffe46ea0c78 [ 888.488439][ T8339] [ 888.489485][ T8330] set match dimension is over the limit! [ 888.934960][ T8355] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 889.006882][ T8355] syzkaller0: entered promiscuous mode [ 889.015812][ T8355] syzkaller0: entered allmulticast mode [ 891.162138][ T8370] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 891.399767][ T8381] bond28: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 891.424297][ T8391] __nla_validate_parse: 14 callbacks suppressed [ 891.424319][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14162'. [ 891.450305][ T8381] bond28 (unregistering): Released all slaves [ 891.482482][ T8393] netlink: 'syz.2.14161': attribute type 21 has an invalid length. [ 891.499414][ T8393] netlink: 'syz.2.14161': attribute type 1 has an invalid length. [ 891.504760][ T8395] FAULT_INJECTION: forcing a failure. [ 891.504760][ T8395] name failslab, interval 1, probability 0, space 0, times 0 [ 891.520366][ T8395] CPU: 1 UID: 0 PID: 8395 Comm: syz.4.14163 Not tainted syzkaller #0 PREEMPT(full) [ 891.520394][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 891.520407][ T8395] Call Trace: [ 891.520415][ T8395] [ 891.520425][ T8395] dump_stack_lvl+0x189/0x250 [ 891.520457][ T8395] ? __pfx____ratelimit+0x10/0x10 [ 891.520481][ T8395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.520508][ T8395] ? __pfx__printk+0x10/0x10 [ 891.520537][ T8395] ? __pfx___might_resched+0x10/0x10 [ 891.520565][ T8395] should_fail_ex+0x414/0x560 [ 891.520600][ T8395] should_failslab+0xa8/0x100 [ 891.520623][ T8395] __kmalloc_noprof+0xcb/0x7f0 [ 891.520650][ T8395] ? kfree+0x4d/0x6d0 [ 891.520671][ T8395] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.520709][ T8395] tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.520741][ T8395] ? tomoyo_domain+0xd9/0x130 [ 891.520777][ T8395] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 891.520803][ T8395] tomoyo_path_number_perm+0x1e8/0x5a0 [ 891.520832][ T8395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 891.520916][ T8395] ? __fget_files+0x2a/0x420 [ 891.520941][ T8395] ? __fget_files+0x3a0/0x420 [ 891.520960][ T8395] ? __fget_files+0x2a/0x420 [ 891.520984][ T8395] security_file_ioctl+0xcb/0x2d0 [ 891.521011][ T8395] __se_sys_ioctl+0x47/0x170 [ 891.521040][ T8395] do_syscall_64+0xfa/0xfa0 [ 891.521064][ T8395] ? lockdep_hardirqs_on+0x9c/0x150 [ 891.521091][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.521111][ T8395] ? clear_bhb_loop+0x60/0xb0 [ 891.521135][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.521154][ T8395] RIP: 0033:0x7f1598d8efc9 [ 891.521173][ T8395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.521189][ T8395] RSP: 002b:00007f1599b7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.521212][ T8395] RAX: ffffffffffffffda RBX: 00007f1598fe5fa0 RCX: 00007f1598d8efc9 [ 891.521227][ T8395] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000005 [ 891.521241][ T8395] RBP: 00007f1599b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 891.521253][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.521265][ T8395] R13: 00007f1598fe6038 R14: 00007f1598fe5fa0 R15: 00007ffdc7056f58 [ 891.521301][ T8395] [ 891.521311][ T8395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 891.866480][ T8404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14165'. [ 891.994963][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14168'. [ 892.034100][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14169'. [ 892.060092][ T8414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14169'. [ 892.134649][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14170'. [ 892.167862][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14170'. [ 892.182899][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14173'. [ 892.186442][ T8419] netlink: 'syz.1.14170': attribute type 15 has an invalid length. [ 892.202963][ T8422] tc_dump_action: action bad kind [ 892.240275][ T8423] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 892.372544][ T8429] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14175'. [ 892.416126][ T8433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14177'. [ 892.711924][ T8452] v: renamed from vlan0 [ 892.758213][ T8456] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 892.901595][ T8465] macvtap2: entered promiscuous mode [ 892.907382][ T8465] macvtap2: entered allmulticast mode [ 892.947405][ T8472] macvtap2: entered promiscuous mode [ 892.966998][ T8472] macvtap2: entered allmulticast mode [ 893.308384][ T8496] tunl0: left allmulticast mode [ 893.314040][ T8496] gre0: left allmulticast mode [ 893.321167][ T8496] gretap0: left allmulticast mode [ 893.331086][ T8496] erspan0: left allmulticast mode [ 893.336977][ T8496] ip_vti0: left allmulticast mode [ 893.347579][ T8500] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 893.532437][ T8505] tipc: Enabled bearer , priority 0 [ 893.547248][ T8505] syzkaller0: entered promiscuous mode [ 893.564049][ T8505] syzkaller0: entered allmulticast mode [ 893.682430][ T8505] tipc: Resetting bearer [ 893.774658][ T8503] tipc: Resetting bearer [ 893.915664][ T8503] tipc: Disabling bearer [ 894.632055][ T8576] tipc: Enabled bearer , priority 0 [ 894.656569][ T8576] syzkaller0: entered promiscuous mode [ 894.662201][ T8576] syzkaller0: entered allmulticast mode [ 894.726895][ T8576] tipc: Resetting bearer [ 894.744024][ T8575] tipc: Resetting bearer [ 894.772925][ T8575] tipc: Disabling bearer [ 895.116694][ T8594] bond22: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 895.168284][ T8594] bond22 (unregistering): Released all slaves [ 896.328728][ T8675] tc_dump_action: action bad kind [ 896.894513][ T8696] macvtap5: entered promiscuous mode [ 896.900647][ T8696] macvtap5: entered allmulticast mode [ 897.000137][ T8700] macvtap5: entered promiscuous mode [ 897.006897][ T8700] macvtap5: entered allmulticast mode [ 897.048718][ T8707] FAULT_INJECTION: forcing a failure. [ 897.048718][ T8707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.083471][ T8709] FAULT_INJECTION: forcing a failure. [ 897.083471][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 897.098468][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.1.14268 Not tainted syzkaller #0 PREEMPT(full) [ 897.098500][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 897.098513][ T8707] Call Trace: [ 897.098522][ T8707] [ 897.098532][ T8707] dump_stack_lvl+0x189/0x250 [ 897.098564][ T8707] ? __pfx____ratelimit+0x10/0x10 [ 897.098591][ T8707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.098619][ T8707] ? __pfx__printk+0x10/0x10 [ 897.098641][ T8707] ? __might_fault+0xb0/0x130 [ 897.098684][ T8707] should_fail_ex+0x414/0x560 [ 897.098721][ T8707] _copy_from_user+0x2d/0xb0 [ 897.098756][ T8707] ___sys_sendmsg+0x158/0x2a0 [ 897.098782][ T8707] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.098858][ T8707] ? __fget_files+0x2a/0x420 [ 897.098877][ T8707] ? __fget_files+0x3a0/0x420 [ 897.098908][ T8707] __x64_sys_sendmsg+0x19b/0x260 [ 897.098951][ T8707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.098983][ T8707] ? __pfx_ksys_write+0x10/0x10 [ 897.099014][ T8707] ? do_syscall_64+0xbe/0xfa0 [ 897.099043][ T8707] do_syscall_64+0xfa/0xfa0 [ 897.099066][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.099090][ T8707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.099109][ T8707] ? clear_bhb_loop+0x60/0xb0 [ 897.099134][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.099153][ T8707] RIP: 0033:0x7fcb2bf8efc9 [ 897.099173][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.099191][ T8707] RSP: 002b:00007fcb2cdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.099216][ T8707] RAX: ffffffffffffffda RBX: 00007fcb2c1e5fa0 RCX: 00007fcb2bf8efc9 [ 897.099232][ T8707] RDX: 0000000004048002 RSI: 0000200000000ec0 RDI: 0000000000000004 [ 897.099246][ T8707] RBP: 00007fcb2cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 897.099260][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.099273][ T8707] R13: 00007fcb2c1e6038 R14: 00007fcb2c1e5fa0 R15: 00007ffe6b4f8e38 [ 897.099311][ T8707] [ 897.152082][ T8711] __nla_validate_parse: 71 callbacks suppressed [ 897.152101][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14270'. [ 897.157567][ T8709] CPU: 0 UID: 0 PID: 8709 Comm: syz.3.14269 Not tainted syzkaller #0 PREEMPT(full) [ 897.157593][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 897.157605][ T8709] Call Trace: [ 897.157613][ T8709] [ 897.157621][ T8709] dump_stack_lvl+0x189/0x250 [ 897.157651][ T8709] ? __pfx____ratelimit+0x10/0x10 [ 897.157675][ T8709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.157699][ T8709] ? __pfx__printk+0x10/0x10 [ 897.157725][ T8709] ? __pfx___might_resched+0x10/0x10 [ 897.157745][ T8709] ? fs_reclaim_acquire+0x7d/0x100 [ 897.157777][ T8709] should_fail_ex+0x414/0x560 [ 897.157817][ T8709] should_failslab+0xa8/0x100 [ 897.157838][ T8709] kmem_cache_alloc_node_noprof+0x77/0x710 [ 897.157863][ T8709] ? __alloc_skb+0x112/0x2d0 [ 897.157889][ T8709] ? netlink_autobind+0xdb/0x300 [ 897.157918][ T8709] __alloc_skb+0x112/0x2d0 [ 897.157948][ T8709] netlink_sendmsg+0x5c6/0xb30 [ 897.157976][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.158007][ T8709] ? aa_sock_msg_perm+0xf1/0x1d0 [ 897.158035][ T8709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 897.158053][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.158081][ T8709] __sock_sendmsg+0x21c/0x270 [ 897.158108][ T8709] ____sys_sendmsg+0x505/0x830 [ 897.158133][ T8709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.158163][ T8709] ? import_iovec+0x74/0xa0 [ 897.158190][ T8709] ___sys_sendmsg+0x21f/0x2a0 [ 897.158212][ T8709] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.158269][ T8709] ? __fget_files+0x2a/0x420 [ 897.158286][ T8709] ? __fget_files+0x3a0/0x420 [ 897.158315][ T8709] __x64_sys_sendmsg+0x19b/0x260 [ 897.158337][ T8709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.158366][ T8709] ? __pfx_ksys_write+0x10/0x10 [ 897.158396][ T8709] ? do_syscall_64+0xbe/0xfa0 [ 897.158423][ T8709] do_syscall_64+0xfa/0xfa0 [ 897.158444][ T8709] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.158466][ T8709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.158485][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 897.158507][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.158524][ T8709] RIP: 0033:0x7ff75d98efc9 [ 897.158541][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.158557][ T8709] RSP: 002b:00007ff75e765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.158578][ T8709] RAX: ffffffffffffffda RBX: 00007ff75dbe5fa0 RCX: 00007ff75d98efc9 [ 897.158599][ T8709] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 897.158611][ T8709] RBP: 00007ff75e765090 R08: 0000000000000000 R09: 0000000000000000 [ 897.158623][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.158635][ T8709] R13: 00007ff75dbe6038 R14: 00007ff75dbe5fa0 R15: 00007ffe46ea0c78 [ 897.158668][ T8709] [ 897.346330][ T8717] netlink: 220 bytes leftover after parsing attributes in process `syz.2.14273'. [ 897.368049][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14272'. [ 897.715367][ T8727] macvtap5: entered promiscuous mode [ 897.723220][ T8727] macvtap5: entered allmulticast mode [ 897.742215][ T8732] tipc: Enabling of bearer rejected, media not registered [ 897.935395][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14279'. [ 898.165075][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14282'. [ 898.171649][ T8758] netlink: 'syz.1.14285': attribute type 1 has an invalid length. [ 898.195758][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14282'. [ 898.211308][ T8761] FAULT_INJECTION: forcing a failure. [ 898.211308][ T8761] name failslab, interval 1, probability 0, space 0, times 0 [ 898.238360][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.0.14286 Not tainted syzkaller #0 PREEMPT(full) [ 898.238392][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 898.238406][ T8761] Call Trace: [ 898.238414][ T8761] [ 898.238424][ T8761] dump_stack_lvl+0x189/0x250 [ 898.238459][ T8761] ? __pfx____ratelimit+0x10/0x10 [ 898.238485][ T8761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.238512][ T8761] ? __pfx__printk+0x10/0x10 [ 898.238542][ T8761] ? __pfx___might_resched+0x10/0x10 [ 898.238571][ T8761] should_fail_ex+0x414/0x560 [ 898.238610][ T8761] should_failslab+0xa8/0x100 [ 898.238634][ T8761] kmem_cache_alloc_node_noprof+0x77/0x710 [ 898.238664][ T8761] ? __alloc_skb+0x112/0x2d0 [ 898.238702][ T8761] __alloc_skb+0x112/0x2d0 [ 898.238738][ T8761] netlink_ack+0x146/0xa50 [ 898.238766][ T8761] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.238809][ T8761] ? nfnetlink_rcv+0x23eb/0x2590 [ 898.238848][ T8761] nfnetlink_rcv+0x2309/0x2590 [ 898.238920][ T8761] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 898.239009][ T8761] ? netlink_deliver_tap+0x2e/0x1b0 [ 898.239062][ T8761] netlink_unicast+0x82f/0x9e0 [ 898.239101][ T8761] ? __pfx_netlink_unicast+0x10/0x10 [ 898.239132][ T8761] ? netlink_sendmsg+0x642/0xb30 [ 898.239149][ T8761] ? skb_put+0x11b/0x210 [ 898.239173][ T8761] netlink_sendmsg+0x805/0xb30 [ 898.239203][ T8761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.239238][ T8761] ? aa_sock_msg_perm+0xf1/0x1d0 [ 898.239270][ T8761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 898.239291][ T8761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.239323][ T8761] __sock_sendmsg+0x21c/0x270 [ 898.239359][ T8761] ____sys_sendmsg+0x505/0x830 [ 898.239389][ T8761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.239422][ T8761] ? import_iovec+0x74/0xa0 [ 898.239452][ T8761] ___sys_sendmsg+0x21f/0x2a0 [ 898.239476][ T8761] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.239543][ T8761] ? __fget_files+0x2a/0x420 [ 898.239562][ T8761] ? __fget_files+0x3a0/0x420 [ 898.239595][ T8761] __x64_sys_sendmsg+0x19b/0x260 [ 898.239621][ T8761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 898.239656][ T8761] ? __pfx_ksys_write+0x10/0x10 [ 898.239689][ T8761] ? do_syscall_64+0xbe/0xfa0 [ 898.239721][ T8761] do_syscall_64+0xfa/0xfa0 [ 898.239743][ T8761] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.239768][ T8761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.239789][ T8761] ? clear_bhb_loop+0x60/0xb0 [ 898.239824][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.239844][ T8761] RIP: 0033:0x7fa7a098efc9 [ 898.239864][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.239883][ T8761] RSP: 002b:00007fa7a1771038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.239907][ T8761] RAX: ffffffffffffffda RBX: 00007fa7a0be5fa0 RCX: 00007fa7a098efc9 [ 898.239924][ T8761] RDX: 0000000004008000 RSI: 0000200000000700 RDI: 0000000000000003 [ 898.239938][ T8761] RBP: 00007fa7a1771090 R08: 0000000000000000 R09: 0000000000000000 [ 898.239952][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 898.239965][ T8761] R13: 00007fa7a0be6038 R14: 00007fa7a0be5fa0 R15: 00007ffe298b5998 [ 898.240004][ T8761] [ 898.301329][ T8758] 8021q: adding VLAN 0 to HW filter on device bond21 [ 898.662938][ T8763] vlan0: entered promiscuous mode [ 898.682107][ T8763] bond21: entered promiscuous mode [ 898.698842][ T8763] vlan0: entered allmulticast mode [ 898.708825][ T8763] bond21: entered allmulticast mode [ 898.931033][ T8790] tipc: Enabled bearer , priority 0 [ 898.942806][ T8790] syzkaller0: entered promiscuous mode [ 898.953613][ T8790] syzkaller0: entered allmulticast mode [ 899.002380][ T8790] tipc: Resetting bearer [ 899.057591][ T8787] tipc: Resetting bearer [ 899.167755][ T8787] tipc: Disabling bearer [ 899.300776][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14302'. [ 899.339120][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14302'. [ 899.553334][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14309'. [ 900.214937][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14328'. [ 900.309729][ T8876] tipc: Enabled bearer , priority 0 [ 900.328362][ T8876] syzkaller0: entered promiscuous mode [ 900.334028][ T8876] syzkaller0: entered allmulticast mode [ 900.363302][ T8875] : entered promiscuous mode [ 900.405250][ T8871] tipc: Resetting bearer [ 900.438515][ T8871] tipc: Disabling bearer [ 900.462864][ T8884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 900.472861][ T8879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 900.562892][ T8895] FAULT_INJECTION: forcing a failure. [ 900.562892][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 900.606610][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.1.14333 Not tainted syzkaller #0 PREEMPT(full) [ 900.606641][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 900.606654][ T8895] Call Trace: [ 900.606664][ T8895] [ 900.606674][ T8895] dump_stack_lvl+0x189/0x250 [ 900.606708][ T8895] ? __pfx____ratelimit+0x10/0x10 [ 900.606734][ T8895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.606762][ T8895] ? __pfx__printk+0x10/0x10 [ 900.606799][ T8895] ? __pfx___might_resched+0x10/0x10 [ 900.606820][ T8895] ? fs_reclaim_acquire+0x7d/0x100 [ 900.606857][ T8895] should_fail_ex+0x414/0x560 [ 900.606895][ T8895] should_failslab+0xa8/0x100 [ 900.606919][ T8895] __kmalloc_noprof+0xcb/0x7f0 [ 900.606945][ T8895] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 900.606971][ T8895] ? rcu_is_watching+0x15/0xb0 [ 900.607001][ T8895] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 900.607036][ T8895] genl_family_rcv_msg_doit+0xb8/0x300 [ 900.607071][ T8895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 900.607106][ T8895] ? apparmor_capable+0x137/0x1b0 [ 900.607131][ T8895] ? bpf_lsm_capable+0x9/0x20 [ 900.607156][ T8895] ? security_capable+0x7e/0x2e0 [ 900.607192][ T8895] genl_rcv_msg+0x60e/0x790 [ 900.607225][ T8895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 900.607249][ T8895] ? __pfx_ieee802154_llsec_del_dev+0x10/0x10 [ 900.607290][ T8895] netlink_rcv_skb+0x208/0x470 [ 900.607318][ T8895] ? __lock_acquire+0xab9/0xd20 [ 900.607341][ T8895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 900.607367][ T8895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 900.607422][ T8895] ? down_read+0x1ad/0x2e0 [ 900.607455][ T8895] genl_rcv+0x28/0x40 [ 900.607477][ T8895] netlink_unicast+0x82f/0x9e0 [ 900.607517][ T8895] ? __pfx_netlink_unicast+0x10/0x10 [ 900.607547][ T8895] ? netlink_sendmsg+0x642/0xb30 [ 900.607563][ T8895] ? skb_put+0x11b/0x210 [ 900.607588][ T8895] netlink_sendmsg+0x805/0xb30 [ 900.607626][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.607661][ T8895] ? aa_sock_msg_perm+0xf1/0x1d0 [ 900.607694][ T8895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 900.607714][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.607746][ T8895] __sock_sendmsg+0x21c/0x270 [ 900.607777][ T8895] ____sys_sendmsg+0x505/0x830 [ 900.607816][ T8895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.607852][ T8895] ? import_iovec+0x74/0xa0 [ 900.607883][ T8895] ___sys_sendmsg+0x21f/0x2a0 [ 900.607909][ T8895] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.607987][ T8895] ? __fget_files+0x2a/0x420 [ 900.608006][ T8895] ? __fget_files+0x3a0/0x420 [ 900.608040][ T8895] __x64_sys_sendmsg+0x19b/0x260 [ 900.608077][ T8895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 900.608113][ T8895] ? __pfx_ksys_write+0x10/0x10 [ 900.608147][ T8895] ? do_syscall_64+0xbe/0xfa0 [ 900.608179][ T8895] do_syscall_64+0xfa/0xfa0 [ 900.608203][ T8895] ? lockdep_hardirqs_on+0x9c/0x150 [ 900.608228][ T8895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.608249][ T8895] ? clear_bhb_loop+0x60/0xb0 [ 900.608275][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.608294][ T8895] RIP: 0033:0x7fcb2bf8efc9 [ 900.608314][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.608330][ T8895] RSP: 002b:00007fcb2cdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.608354][ T8895] RAX: ffffffffffffffda RBX: 00007fcb2c1e5fa0 RCX: 00007fcb2bf8efc9 [ 900.608370][ T8895] RDX: 0000000004048002 RSI: 0000200000000ec0 RDI: 0000000000000004 [ 900.608383][ T8895] RBP: 00007fcb2cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 900.608397][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.608409][ T8895] R13: 00007fcb2c1e6038 R14: 00007fcb2c1e5fa0 R15: 00007ffe6b4f8e38 [ 900.608449][ T8895] [ 901.593602][ T8926] tipc: Enabled bearer , priority 0 [ 901.610464][ T8926] syzkaller0: entered promiscuous mode [ 901.616732][ T8926] syzkaller0: entered allmulticast mode [ 901.625758][ T8938] tipc: Enabled bearer , priority 2 [ 901.634012][ T8937] tc_dump_action: action bad kind [ 901.686798][ T8941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.735719][ T8924] tipc: Resetting bearer [ 901.808417][ T8924] tipc: Disabling bearer [ 902.310955][ T8976] __nla_validate_parse: 6 callbacks suppressed [ 902.310976][ T8976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14363'. [ 902.348840][ T8976] netlink: 'syz.0.14363': attribute type 153 has an invalid length. [ 902.777147][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14368'. [ 902.832960][ T9008] x_tables: unsorted entry at hook 2 [ 903.051621][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14371'. [ 903.145758][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14374'. [ 903.169671][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14371'. [ 903.490337][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14381'. [ 903.660950][ T9058] vlan5: entered promiscuous mode [ 903.682262][ T9058] bridge0: entered promiscuous mode [ 903.718926][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.832779][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14389'. [ 904.055793][ T9078] syzkaller1: entered promiscuous mode [ 904.067988][ T9078] syzkaller1: entered allmulticast mode [ 904.083456][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14395'. [ 904.272629][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14398'. [ 904.813703][ T9122] netlink: 'syz.3.14409': attribute type 39 has an invalid length. [ 905.032646][ T9131] No such timeout policy "syz1" [ 905.065092][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14411'. [ 905.237886][ T9143] netlink: 'syz.0.14416': attribute type 32 has an invalid length. [ 905.741636][ T9174] bridge16: entered promiscuous mode [ 905.756045][ T9174] bridge16: entered allmulticast mode [ 905.970338][ T9183] IPv6: sit2: Disabled Multicast RS [ 905.978936][ T9183] sit2: entered allmulticast mode [ 906.021154][ T9185] IPVS: Unknown mcast interface: netpci0 [ 906.349612][ T9207] ipt_REJECT: TCP_RESET invalid for non-tcp [ 906.460570][ T9213] netlink: 'syz.1.14434': attribute type 12 has an invalid length. [ 906.558181][ T9213] bond22: option primary_reselect: invalid value (255) [ 906.581162][ T9213] bond22 (unregistering): Released all slaves [ 906.965609][ T9243] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 907.358960][ T9266] __nla_validate_parse: 14 callbacks suppressed [ 907.358985][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14455'. [ 907.386031][ T9266] tc_dump_action: action bad kind [ 907.532758][ T9280] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14460'. [ 907.568323][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14458'. [ 907.590627][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14458'. [ 907.616634][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14458'. [ 907.631814][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14458'. [ 907.812407][ T9296] netlink: 'syz.0.14464': attribute type 24 has an invalid length. [ 907.839790][ T9297] netlink: zone id is out of range [ 907.845328][ T9297] netlink: zone id is out of range [ 907.851663][ T9297] netlink: set zone limit has 8 unknown bytes [ 908.024059][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14468'. [ 908.038999][ T9311] FAULT_INJECTION: forcing a failure. [ 908.038999][ T9311] name failslab, interval 1, probability 0, space 0, times 0 [ 908.053478][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14470'. [ 908.072218][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14468'. [ 908.092039][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.3.14469 Not tainted syzkaller #0 PREEMPT(full) [ 908.092070][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 908.092083][ T9311] Call Trace: [ 908.092092][ T9311] [ 908.092101][ T9311] dump_stack_lvl+0x189/0x250 [ 908.092137][ T9311] ? __pfx____ratelimit+0x10/0x10 [ 908.092162][ T9311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.092189][ T9311] ? __pfx__printk+0x10/0x10 [ 908.092209][ T9311] ? rcu_is_watching+0x15/0xb0 [ 908.092233][ T9311] ? trace_fib_table_lookup+0x85/0x200 [ 908.092263][ T9311] should_fail_ex+0x414/0x560 [ 908.092299][ T9311] should_failslab+0xa8/0x100 [ 908.092321][ T9311] kmem_cache_alloc_noprof+0x74/0x6e0 [ 908.092348][ T9311] ? __pfx_find_exception+0x10/0x10 [ 908.092372][ T9311] ? dst_alloc+0x105/0x170 [ 908.092399][ T9311] ? fib_lookup+0x76/0x440 [ 908.092427][ T9311] dst_alloc+0x105/0x170 [ 908.092454][ T9311] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 908.092492][ T9311] ? ip_route_output_key_hash+0xc1/0x280 [ 908.092520][ T9311] ip_route_output_key_hash+0x174/0x280 [ 908.092545][ T9311] ? __lock_acquire+0xab9/0xd20 [ 908.092567][ T9311] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 908.092598][ T9311] ? __pfx__copy_from_iter+0x10/0x10 [ 908.092634][ T9311] ip_route_output_flow+0x2a/0x150 [ 908.092657][ T9311] ? security_sk_classify_flow+0x70/0x180 [ 908.092686][ T9311] raw_sendmsg+0x1039/0x18b0 [ 908.092741][ T9311] ? __pfx_raw_sendmsg+0x10/0x10 [ 908.092793][ T9311] ? aa_sk_perm+0x81e/0x950 [ 908.092829][ T9311] ? __pfx_aa_sk_perm+0x10/0x10 [ 908.092854][ T9311] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 908.092890][ T9311] ? sock_rps_record_flow+0x19/0x410 [ 908.092923][ T9311] ? inet_sendmsg+0x2f4/0x370 [ 908.092950][ T9311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 908.092976][ T9311] __sock_sendmsg+0x19c/0x270 [ 908.093007][ T9311] __sys_sendto+0x3bd/0x520 [ 908.093042][ T9311] ? __pfx___sys_sendto+0x10/0x10 [ 908.093068][ T9311] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 908.093114][ T9311] ? __fget_files+0x3a0/0x420 [ 908.093148][ T9311] ? ksys_write+0x22a/0x250 [ 908.093180][ T9311] ? __pfx_ksys_write+0x10/0x10 [ 908.093213][ T9311] __x64_sys_sendto+0xde/0x100 [ 908.093248][ T9311] do_syscall_64+0xfa/0xfa0 [ 908.093273][ T9311] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.093299][ T9311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.093320][ T9311] ? clear_bhb_loop+0x60/0xb0 [ 908.093346][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.093366][ T9311] RIP: 0033:0x7ff75d98efc9 [ 908.093385][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.093405][ T9311] RSP: 002b:00007ff75e765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 908.093429][ T9311] RAX: ffffffffffffffda RBX: 00007ff75dbe5fa0 RCX: 00007ff75d98efc9 [ 908.093445][ T9311] RDX: 00000000000005ec RSI: 0000200000000040 RDI: 0000000000000003 [ 908.093459][ T9311] RBP: 00007ff75e765090 R08: 00002000000000c0 R09: 0000000000000010 [ 908.093472][ T9311] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 908.093486][ T9311] R13: 00007ff75dbe6038 R14: 00007ff75dbe5fa0 R15: 00007ffe46ea0c78 [ 908.093523][ T9311] [ 908.498896][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14473'. [ 909.112682][ T9356] FAULT_INJECTION: forcing a failure. [ 909.112682][ T9356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.182262][ T9356] CPU: 0 UID: 0 PID: 9356 Comm: syz.0.14485 Not tainted syzkaller #0 PREEMPT(full) [ 909.182293][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 909.182306][ T9356] Call Trace: [ 909.182314][ T9356] [ 909.182324][ T9356] dump_stack_lvl+0x189/0x250 [ 909.182359][ T9356] ? __pfx____ratelimit+0x10/0x10 [ 909.182385][ T9356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 909.182413][ T9356] ? __pfx__printk+0x10/0x10 [ 909.182437][ T9356] ? __might_fault+0xb0/0x130 [ 909.182489][ T9356] should_fail_ex+0x414/0x560 [ 909.182526][ T9356] _copy_from_user+0x2d/0xb0 [ 909.182554][ T9356] kstrtouint_from_user+0xc4/0x170 [ 909.182579][ T9356] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 909.182620][ T9356] proc_fail_nth_write+0x88/0x200 [ 909.182646][ T9356] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 909.182680][ T9356] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 909.182707][ T9356] vfs_write+0x27e/0xb30 [ 909.182747][ T9356] ? __pfx_vfs_write+0x10/0x10 [ 909.182785][ T9356] ? __fget_files+0x2a/0x420 [ 909.182811][ T9356] ? __fget_files+0x3a0/0x420 [ 909.182828][ T9356] ? __fget_files+0x2a/0x420 [ 909.182857][ T9356] ksys_write+0x145/0x250 [ 909.182888][ T9356] ? __pfx_ksys_write+0x10/0x10 [ 909.182920][ T9356] ? do_syscall_64+0xbe/0xfa0 [ 909.182951][ T9356] do_syscall_64+0xfa/0xfa0 [ 909.182973][ T9356] ? lockdep_hardirqs_on+0x9c/0x150 [ 909.182999][ T9356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.183019][ T9356] ? clear_bhb_loop+0x60/0xb0 [ 909.183045][ T9356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.183063][ T9356] RIP: 0033:0x7fa7a098da7f [ 909.183082][ T9356] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 909.183100][ T9356] RSP: 002b:00007fa7a1771030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 909.183124][ T9356] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa7a098da7f [ 909.183138][ T9356] RDX: 0000000000000001 RSI: 00007fa7a17710a0 RDI: 0000000000000004 [ 909.183152][ T9356] RBP: 00007fa7a1771090 R08: 0000000000000000 R09: 0000000000000010 [ 909.183165][ T9356] R10: 0000000000004000 R11: 0000000000000293 R12: 0000000000000001 [ 909.183177][ T9356] R13: 00007fa7a0be6038 R14: 00007fa7a0be5fa0 R15: 00007ffe298b5998 [ 909.183216][ T9356] [ 909.492897][ T9364] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 909.581824][ T9363] bond30: (slave geneve4): Enslaving as an active interface with an up link [ 909.595790][T24095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 909.627455][T24095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 909.653555][T24095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 909.698938][ T9379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 909.829953][ T9367] [ 909.840485][ T9367] ====================================================== [ 909.847613][ T9367] WARNING: possible circular locking dependency detected [ 909.854666][ T9367] syzkaller #0 Not tainted [ 909.859189][ T9367] ------------------------------------------------------ [ 909.866244][ T9367] syz.1.14488/9367 is trying to acquire lock: [ 909.872518][ T9367] ffff888142796808 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 909.882056][ T9367] [ 909.882056][ T9367] but task is already holding lock: [ 909.889584][ T9367] ffff8881427962c8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 909.899790][ T9367] [ 909.899790][ T9367] which lock already depends on the new lock. [ 909.899790][ T9367] [ 909.910281][ T9367] [ 909.910281][ T9367] the existing dependency chain (in reverse order) is: [ 909.919401][ T9367] [ 909.919401][ T9367] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 909.928210][ T9367] lock_acquire+0x120/0x360 [ 909.933582][ T9367] blk_alloc_queue+0x538/0x620 [ 909.938988][ T9367] __blk_mq_alloc_disk+0x15c/0x340 [ 909.944969][ T9367] nbd_dev_add+0x46c/0xae0 [ 909.949924][ T9367] nbd_init+0x168/0x1f0 [ 909.954693][ T9367] do_one_initcall+0x236/0x820 [ 909.960073][ T9367] do_initcall_level+0x104/0x190 [ 909.965551][ T9367] do_initcalls+0x59/0xa0 [ 909.970446][ T9367] kernel_init_freeable+0x334/0x4b0 [ 909.976193][ T9367] kernel_init+0x1d/0x1d0 [ 909.981322][ T9367] ret_from_fork+0x4bc/0x870 [ 909.986453][ T9367] ret_from_fork_asm+0x1a/0x30 [ 909.991766][ T9367] [ 909.991766][ T9367] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 909.999248][ T9367] lock_acquire+0x120/0x360 [ 910.004289][ T9367] fs_reclaim_acquire+0x72/0x100 [ 910.009776][ T9367] kmem_cache_alloc_node_noprof+0x48/0x710 [ 910.016324][ T9367] __alloc_skb+0x112/0x2d0 [ 910.021282][ T9367] __ip6_append_data+0x2c16/0x3f30 [ 910.026924][ T9367] ip6_append_data+0x1c1/0x380 [ 910.032218][ T9367] rawv6_sendmsg+0x1286/0x1830 [ 910.037502][ T9367] __sock_sendmsg+0x19c/0x270 [ 910.042710][ T9367] ____sys_sendmsg+0x505/0x830 [ 910.048001][ T9367] ___sys_sendmsg+0x21f/0x2a0 [ 910.053198][ T9367] __x64_sys_sendmsg+0x19b/0x260 [ 910.058658][ T9367] do_syscall_64+0xfa/0xfa0 [ 910.063701][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.070266][ T9367] [ 910.070266][ T9367] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 910.078194][ T9367] lock_acquire+0x120/0x360 [ 910.083399][ T9367] lock_sock_nested+0x48/0x100 [ 910.088689][ T9367] inet_shutdown+0x6a/0x390 [ 910.093740][ T9367] nbd_mark_nsock_dead+0x2e9/0x560 [ 910.099373][ T9367] recv_work+0x2138/0x24f0 [ 910.104315][ T9367] process_scheduled_works+0xae1/0x17b0 [ 910.110556][ T9367] worker_thread+0x8a0/0xda0 [ 910.115811][ T9367] kthread+0x711/0x8a0 [ 910.120498][ T9367] ret_from_fork+0x4bc/0x870 [ 910.125710][ T9367] ret_from_fork_asm+0x1a/0x30 [ 910.131087][ T9367] [ 910.131087][ T9367] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 910.138739][ T9367] lock_acquire+0x120/0x360 [ 910.143770][ T9367] __mutex_lock+0x187/0x1350 [ 910.148972][ T9367] nbd_queue_rq+0x257/0xf10 [ 910.153995][ T9367] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 910.160158][ T9367] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 910.167112][ T9367] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 910.173726][ T9367] blk_mq_run_hw_queue+0x348/0x4f0 [ 910.179911][ T9367] blk_mq_dispatch_list+0xd0c/0xe00 [ 910.185734][ T9367] blk_mq_flush_plug_list+0x469/0x550 [ 910.191730][ T9367] __blk_flush_plug+0x3d3/0x4b0 [ 910.197208][ T9367] __submit_bio+0x2d3/0x5a0 [ 910.202411][ T9367] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 910.208766][ T9367] block_read_full_folio+0x599/0x830 [ 910.215015][ T9367] filemap_read_folio+0x117/0x380 [ 910.220627][ T9367] do_read_cache_folio+0x350/0x590 [ 910.226440][ T9367] read_part_sector+0xb6/0x2b0 [ 910.231932][ T9367] adfspart_check_ICS+0xa4/0xa50 [ 910.237455][ T9367] bdev_disk_changed+0x75f/0x14b0 [ 910.243041][ T9367] blkdev_get_whole+0x380/0x510 [ 910.248446][ T9367] bdev_open+0x31e/0xd30 [ 910.253235][ T9367] blkdev_open+0x457/0x600 [ 910.258199][ T9367] do_dentry_open+0x953/0x13f0 [ 910.263594][ T9367] vfs_open+0x3b/0x340 [ 910.268361][ T9367] path_openat+0x2ee5/0x3830 [ 910.273511][ T9367] do_filp_open+0x1fa/0x410 [ 910.278654][ T9367] do_sys_openat2+0x121/0x1c0 [ 910.283958][ T9367] __x64_sys_openat+0x138/0x170 [ 910.289423][ T9367] do_syscall_64+0xfa/0xfa0 [ 910.294543][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.300957][ T9367] [ 910.300957][ T9367] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 910.308188][ T9367] lock_acquire+0x120/0x360 [ 910.313217][ T9367] __mutex_lock+0x187/0x1350 [ 910.318364][ T9367] nbd_queue_rq+0xc8/0xf10 [ 910.323302][ T9367] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 910.329377][ T9367] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 910.336414][ T9367] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 910.342924][ T9367] blk_mq_run_hw_queue+0x348/0x4f0 [ 910.348746][ T9367] blk_mq_dispatch_list+0xd0c/0xe00 [ 910.354911][ T9367] blk_mq_flush_plug_list+0x469/0x550 [ 910.361075][ T9367] __blk_flush_plug+0x3d3/0x4b0 [ 910.366456][ T9367] __submit_bio+0x2d3/0x5a0 [ 910.371479][ T9367] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 910.377665][ T9367] block_read_full_folio+0x599/0x830 [ 910.383483][ T9367] filemap_read_folio+0x117/0x380 [ 910.389115][ T9367] do_read_cache_folio+0x350/0x590 [ 910.394845][ T9367] read_part_sector+0xb6/0x2b0 [ 910.400309][ T9367] adfspart_check_ICS+0xa4/0xa50 [ 910.405949][ T9367] bdev_disk_changed+0x75f/0x14b0 [ 910.411762][ T9367] blkdev_get_whole+0x380/0x510 [ 910.417244][ T9367] bdev_open+0x31e/0xd30 [ 910.422016][ T9367] blkdev_open+0x457/0x600 [ 910.426966][ T9367] do_dentry_open+0x953/0x13f0 [ 910.432254][ T9367] vfs_open+0x3b/0x340 [ 910.436874][ T9367] path_openat+0x2ee5/0x3830 [ 910.441987][ T9367] do_filp_open+0x1fa/0x410 [ 910.447015][ T9367] do_sys_openat2+0x121/0x1c0 [ 910.452211][ T9367] __x64_sys_openat+0x138/0x170 [ 910.457582][ T9367] do_syscall_64+0xfa/0xfa0 [ 910.462609][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.469044][ T9367] [ 910.469044][ T9367] -> #1 (set->srcu){.+.+}-{0:0}: [ 910.476303][ T9367] lock_sync+0xba/0x160 [ 910.480990][ T9367] __synchronize_srcu+0x96/0x3a0 [ 910.486540][ T9367] elevator_switch+0x12b/0x640 [ 910.491846][ T9367] elevator_change+0x315/0x4c0 [ 910.497226][ T9367] elevator_set_default+0x186/0x260 [ 910.503042][ T9367] blk_register_queue+0x34e/0x3f0 [ 910.508600][ T9367] __add_disk+0x677/0xd50 [ 910.513459][ T9367] add_disk_fwnode+0xfc/0x480 [ 910.518831][ T9367] nbd_dev_add+0x717/0xae0 [ 910.523797][ T9367] nbd_init+0x168/0x1f0 [ 910.528566][ T9367] do_one_initcall+0x236/0x820 [ 910.533956][ T9367] do_initcall_level+0x104/0x190 [ 910.539506][ T9367] do_initcalls+0x59/0xa0 [ 910.544359][ T9367] kernel_init_freeable+0x334/0x4b0 [ 910.550180][ T9367] kernel_init+0x1d/0x1d0 [ 910.555116][ T9367] ret_from_fork+0x4bc/0x870 [ 910.560232][ T9367] ret_from_fork_asm+0x1a/0x30 [ 910.565519][ T9367] [ 910.565519][ T9367] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 910.573344][ T9367] validate_chain+0xb9b/0x2140 [ 910.578998][ T9367] __lock_acquire+0xab9/0xd20 [ 910.584215][ T9367] lock_acquire+0x120/0x360 [ 910.589255][ T9367] __mutex_lock+0x187/0x1350 [ 910.594572][ T9367] elevator_change+0x1e5/0x4c0 [ 910.600138][ T9367] elevator_set_none+0x42/0xb0 [ 910.605445][ T9367] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 910.611783][ T9367] nbd_start_device+0x17f/0xb10 [ 910.617245][ T9367] nbd_genl_connect+0x135b/0x18f0 [ 910.622820][ T9367] genl_family_rcv_msg_doit+0x215/0x300 [ 910.628980][ T9367] genl_rcv_msg+0x60e/0x790 [ 910.634003][ T9367] netlink_rcv_skb+0x208/0x470 [ 910.639309][ T9367] genl_rcv+0x28/0x40 [ 910.643822][ T9367] netlink_unicast+0x82f/0x9e0 [ 910.649114][ T9367] netlink_sendmsg+0x805/0xb30 [ 910.654400][ T9367] __sock_sendmsg+0x21c/0x270 [ 910.659604][ T9367] ____sys_sendmsg+0x505/0x830 [ 910.664974][ T9367] ___sys_sendmsg+0x21f/0x2a0 [ 910.670182][ T9367] __x64_sys_sendmsg+0x19b/0x260 [ 910.675732][ T9367] do_syscall_64+0xfa/0xfa0 [ 910.680848][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.687270][ T9367] [ 910.687270][ T9367] other info that might help us debug this: [ 910.687270][ T9367] [ 910.697498][ T9367] Chain exists of: [ 910.697498][ T9367] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 910.697498][ T9367] [ 910.711347][ T9367] Possible unsafe locking scenario: [ 910.711347][ T9367] [ 910.718896][ T9367] CPU0 CPU1 [ 910.724257][ T9367] ---- ---- [ 910.729718][ T9367] lock(&q->q_usage_counter(io)#55); [ 910.735100][ T9367] lock(fs_reclaim); [ 910.741668][ T9367] lock(&q->q_usage_counter(io)#55); [ 910.749680][ T9367] lock(&q->elevator_lock); [ 910.754458][ T9367] [ 910.754458][ T9367] *** DEADLOCK *** [ 910.754458][ T9367] [ 910.762687][ T9367] 6 locks held by syz.1.14488/9367: [ 910.767966][ T9367] #0: ffffffff8f330f10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 910.776262][ T9367] #1: ffffffff8f330d28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 910.785418][ T9367] #2: ffff88802570c9c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 910.797006][ T9367] #3: ffff88802570c8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 910.808072][ T9367] #4: ffff8881427962c8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 910.819059][ T9367] #5: ffff888142796300 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 910.830142][ T9367] [ 910.830142][ T9367] stack backtrace: [ 910.836051][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.1.14488 Not tainted syzkaller #0 PREEMPT(full) [ 910.836082][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 910.836095][ T9367] Call Trace: [ 910.836106][ T9367] [ 910.836116][ T9367] dump_stack_lvl+0x189/0x250 [ 910.836150][ T9367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.836175][ T9367] ? __pfx__printk+0x10/0x10 [ 910.836197][ T9367] ? print_lock_name+0xde/0x100 [ 910.836217][ T9367] print_circular_bug+0x2ee/0x310 [ 910.836243][ T9367] check_noncircular+0x134/0x160 [ 910.836270][ T9367] validate_chain+0xb9b/0x2140 [ 910.836305][ T9367] __lock_acquire+0xab9/0xd20 [ 910.836326][ T9367] ? elevator_change+0x1e5/0x4c0 [ 910.836352][ T9367] lock_acquire+0x120/0x360 [ 910.836369][ T9367] ? elevator_change+0x1e5/0x4c0 [ 910.836402][ T9367] __mutex_lock+0x187/0x1350 [ 910.836428][ T9367] ? elevator_change+0x1e5/0x4c0 [ 910.836455][ T9367] ? xa_find_after+0xae/0x430 [ 910.836481][ T9367] ? xa_find_after+0x402/0x430 [ 910.836510][ T9367] ? elevator_change+0x1e5/0x4c0 [ 910.836531][ T9367] ? xa_find_after+0xae/0x430 [ 910.836553][ T9367] ? __pfx___mutex_lock+0x10/0x10 [ 910.836575][ T9367] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 910.836594][ T9367] elevator_change+0x1e5/0x4c0 [ 910.836619][ T9367] elevator_set_none+0x42/0xb0 [ 910.836642][ T9367] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 910.836666][ T9367] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 910.836688][ T9367] ? sysfs_add_file_mode_ns+0x259/0x300 [ 910.836708][ T9367] nbd_start_device+0x17f/0xb10 [ 910.836727][ T9367] ? device_create_file+0xf4/0x1c0 [ 910.836746][ T9367] nbd_genl_connect+0x135b/0x18f0 [ 910.836764][ T9367] ? __pfx_nbd_genl_connect+0x10/0x10 [ 910.836780][ T9367] ? rcu_is_watching+0x15/0xb0 [ 910.836799][ T9367] ? __nla_parse+0x40/0x60 [ 910.836816][ T9367] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 910.836839][ T9367] genl_family_rcv_msg_doit+0x215/0x300 [ 910.836861][ T9367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 910.836885][ T9367] ? stack_trace_save+0x9c/0xe0 [ 910.836907][ T9367] genl_rcv_msg+0x60e/0x790 [ 910.836927][ T9367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 910.836945][ T9367] ? __pfx_nbd_genl_connect+0x10/0x10 [ 910.836964][ T9367] netlink_rcv_skb+0x208/0x470 [ 910.836986][ T9367] ? __lock_acquire+0xab9/0xd20 [ 910.837001][ T9367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 910.837019][ T9367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 910.837048][ T9367] ? down_read+0x1ad/0x2e0 [ 910.837071][ T9367] genl_rcv+0x28/0x40 [ 910.837087][ T9367] netlink_unicast+0x82f/0x9e0 [ 910.837111][ T9367] ? __pfx_netlink_unicast+0x10/0x10 [ 910.837132][ T9367] ? netlink_sendmsg+0x642/0xb30 [ 910.837146][ T9367] ? skb_put+0x11b/0x210 [ 910.837161][ T9367] netlink_sendmsg+0x805/0xb30 [ 910.837178][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.837203][ T9367] ? aa_sock_msg_perm+0xf1/0x1d0 [ 910.837226][ T9367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 910.837242][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.837265][ T9367] __sock_sendmsg+0x21c/0x270 [ 910.837286][ T9367] ____sys_sendmsg+0x505/0x830 [ 910.837304][ T9367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 910.837323][ T9367] ? import_iovec+0x74/0xa0 [ 910.837343][ T9367] ___sys_sendmsg+0x21f/0x2a0 [ 910.837359][ T9367] ? __pfx____sys_sendmsg+0x10/0x10 [ 910.837387][ T9367] ? __fget_files+0x2a/0x420 [ 910.837402][ T9367] ? __fget_files+0x3a0/0x420 [ 910.837419][ T9367] __x64_sys_sendmsg+0x19b/0x260 [ 910.837436][ T9367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 910.837457][ T9367] ? do_syscall_64+0xbe/0xfa0 [ 910.837479][ T9367] do_syscall_64+0xfa/0xfa0 [ 910.837505][ T9367] ? lockdep_hardirqs_on+0x9c/0x150 [ 910.837524][ T9367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.837540][ T9367] ? clear_bhb_loop+0x60/0xb0 [ 910.837557][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.837573][ T9367] RIP: 0033:0x7fcb2bf8efc9 [ 910.837589][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.837604][ T9367] RSP: 002b:00007fcb2cda6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.837622][ T9367] RAX: ffffffffffffffda RBX: 00007fcb2c1e6090 RCX: 00007fcb2bf8efc9 [ 910.837635][ T9367] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 910.837646][ T9367] RBP: 00007fcb2c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 910.837656][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.837666][ T9367] R13: 00007fcb2c1e6128 R14: 00007fcb2c1e6090 R15: 00007ffe6b4f8e38 [ 910.837685][ T9367] [ 911.410494][ T9398] block nbd6: Receive control failed (result -32) [ 911.417261][ T9397] block nbd6: Receive control failed (result -32) [ 911.419959][ T9396] block nbd6: Receive control failed (result -32) [ 911.423978][ T5828] block nbd6: Receive control failed (result -32) [ 911.437675][ T5836] block nbd6: Receive control failed (result -32) [ 911.444299][ T9395] block nbd6: Receive control failed (result -32)