last executing test programs: 3.363826475s ago: executing program 0 (id=2256): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x20000080) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r6}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r6, 0x54, "593beff29e4866709e263947317e1d76156e2e8c471b2586c79eea8c0bb6830f0a74a81d6769bf899083f87ae204e2a211d23e89e08206b6cfc564b7a2d1729f9d304e50aaed2b4dfe3499446d3aa4acecb39277"}, &(0x7f0000000100)=0x5c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a00"], 0x38}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.12401463s ago: executing program 0 (id=2259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) sendmmsg(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000080)="f6212ab5a0bf6fd3ef8ff867c6805b8a0a20ecc9c9416f519ba1fb097528f74e66", 0x21}, {&(0x7f0000000100)="cc1bf2f326852904f39d5ebce128642445", 0x11}, {&(0x7f0000000340)="911f84882786ce565d1997cefb61ab8adf8b04acf06af4516bd1b5ddf5af8c6c261ca2f3f7f77d07054efdb555dfa9987c27dbbdcdf4a9a76823e70cfee32dcc2b4376092007a5c1cab237f7ba53b5a235989db7f40c1aa6128b934d7a2c1d68e62ae5b9f9647c9b25e5fb20d1d7a3db8326d02d75fdf1c4f97e4ac6067900b5099d947282c2be1afdc2a4077192aadccf51b4ad6cf937540699f2be59bd2027f8a980b2a8a674443cb2bdb40fb9b0cf5dc62830e4839f1a2a1d5c783cf3aa562b1ffabbab470967e4a969ddf5d67a1382", 0xd1}, {&(0x7f0000000440)="6432751b173adeb7dc8b5441c0e7df224059ffec8510f8e5d9cb521c", 0x1c}, {&(0x7f0000000480)="9e667677efe9f2b79a87db5c3f", 0xd}, {&(0x7f00000004c0)="5eb916ebf82e75a2641c82fd144e588d9d984ea172", 0x15}, {&(0x7f0000001c00)="c994c117f04feebf2e54248c513977cd6f4d9c8c1103e963d127bafcb2068993aa4f3ab2747a1aed01d24156b5acd4cd5940cb95d56a3a46ce7093b71a6f02d478344bc71b52ccb6c408f681cfc49bc413ea862c0c9291aa90be165152a5a28192774f66a45b6841cd10d9331ed0ea275df2dc6246a0160353005f8ec24aff133e032cd7cb475260330594fa8d9f18d90af25c3bc8c8ca1674ca684c61bd9462d86731c9a8344305f33eef42", 0xac}, {&(0x7f0000001cc0)="0d1488290160803f1c8c1bb47bd4e6b80ec2bc4db3866e2f642f62630b5f3b94e6833c36112ebf1a744602b823cfe5414280aaecce359e7f1fdcc47b33c7d35e69f3d0247c33b5bc9ff2e8893884dfb5169a51d13c3878e28bc1f19b7249f597936528a068672c79a4a5d6dc75657dc77a19b71394ee7a8eedeba1dfe8a23b4e142e1a39359a91540dcb071f0282f249fe6374a176", 0x95}], 0x8, &(0x7f0000000700)=[{0xf8, 0x116, 0x6, "f694a1fb195dcbea7e394fd0077a8880e091081bf9c611d1a84b43bdc64cd4a0b2e719d57c688c3002345644875d754f19ba7266e1511ca1f2ce74a3fd99096fd88b4d068d6a1d369a7bd6f157b3e26fd40d8d63c2e6ff7282e1bd955a02c10b0be812b761e9f129ec03f58ae8526b3f70610c5e7a89758fd2bac250d426a3aaceaa3d44aa33a06cdc598c4ca94ee13a580d878f97933d2044c0658c96305aec6e9c3943dc2267581c7e5ce40a7c4b6681a2aed5f6cde43ae82432ceea15b7af0eb49cfbdee9d046ccdf95cd31f917c74d9b99ea750086b359c5f93711bb57d5019035364130"}, {0x1010, 0x115, 0x7fff, "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"}, {0x48, 0x3a, 0x80000000, "fc9fdd5c042acb7148af99706069f2016d467b5fe5084a5649edaabd4a7cb31abea286d97ba17c3c72a9abf02c41953e12d0"}, {0xe8, 0x101, 0x4, "3dea8f17ed38e09f19b22ede40f301a13ce50d165be25e9a303f202e50aecf336ee5f661a13558c1aa0871cf5df8ec36cab13b89330fd24d3fb4a89ff6706ad7b5b21b3707d379600d9ec12f669c99555d1b38da6825421490f759940b871279ef6c7ac146ecb2dceb1d4e74e70a13228163c6d03acb0a57d7ee0091b2cde6d4799f71a96601536635d1e544d379529b2903a44ae3c84a195f8d59abb06b899013c98977e506b78a9a15f28baea528434d128501dfc8c36ef2542ebf7d1087669dfcb3128b04510d05a718f9480b786e9b"}, {0x110, 0x11, 0x100005, "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"}, {0x58, 0x114, 0x9, "c5aec250034db85f0ca7503c29b6e5a78750d82b8d034c48c6f762688b0387cfb72da688478b9b70e9fbe71cdaf3de064dc02c3d9d2a961b60aaeae5aeb34cd4afae"}, {0x110, 0x10f, 0x1, "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"}], 0x14b0}}], 0x1, 0x20004000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000fc0100000000000000000000000000002001000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000ffffffffffffffff00000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/268], 0x154}}, 0x0) 2.358311006s ago: executing program 3 (id=2271): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "4bc7fb", 0x10, 0x21, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x1, "c8fd14", 0x7, "0ebb69"}}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x190, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f30a8d87da7126e82236da7760d7c1e4545b4c86238057d5541657007d3374"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8dc2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b99c739}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x42a9}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb3}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x400c010}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5, 0x7}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005640), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000080000001e00000004002f8008000300", @ANYRES32=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x2000c054}, 0x24040080) r10 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='8\x00\x00\x00!\x00\x00\x00', @ANYRES32, @ANYBLOB="b8947604b0468928d600fb9a8c3578c39c5c56d3", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) getsockopt$inet_opts(r10, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000000206030000000000000000000000000010000300686173683a69702c6d6163000900020073795931000000000c0007800800130000000000050005000281000000000400000000000500010007000000d709beeddbd611334ee89e81ec32ed65b72c3e50c211faeca06f47ab3a42c432fa7065fc6929701f89172bbc2f306b72edd1aabd0aba2a2092df7613b0771b56b9a388fe14112e08aa9bcf4c9376401485803688cefbe1c3404da51b51381b3b57fdd9c46b82d69f93421768ec72d86e77a2053299"], 0x54}}, 0x4040000) 2.259877081s ago: executing program 4 (id=2274): r0 = socket$kcm(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.163921643s ago: executing program 3 (id=2275): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x14, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) 2.036083973s ago: executing program 4 (id=2277): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x22e, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}, 0x1, 0xba01}, 0x0) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 2.035808776s ago: executing program 0 (id=2278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x1000, 0xa, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf8, 0x1, 0x1}, 0x1, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) 1.771945536s ago: executing program 4 (id=2281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) close(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xe0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22c8e314}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb858}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6810fde1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26b08af4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd16}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a9}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a047578}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fe5675}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10178c85}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3065580c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x754708e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44a57fe5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5248d138}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa995}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a4e}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), r2) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x70, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x401}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000089fc77bb7052022e004e6b661c661575d88b565fa2934f047cd7a0e4c31e4c77f133eca59c17d3a4a8e05019fc4912ea57ae2c66b1305e795efc79a8c34c6dc347649a07d641d80b5e90efa13a440eb902a9e203c001e5c3c2c94c175cfc2110072b3e41a747e1fa88240e46ecbd753fe13d22f70c1a058b23be377b572918738ef2f9b89594a90462da8efb6cc19b5b3ccab0eb1eb039e799d0ba8c1dca09994261547b00020302ae828ee7db7dad102cae53627f0174ce348f3d9ce4be554ee161f4c17e13801743563af51e04025424cca1abe2997792e1bf2ddf", @ANYRES16=r3, @ANYBLOB="330a2bbd7000fbdbdf25210000000c0005000203aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x24040885}, 0x8840) socket$can_raw(0x1d, 0x3, 0x1) 1.533083495s ago: executing program 4 (id=2283): unshare(0x20000400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="760a00000000000061112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000580)={{r1}, "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"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) 1.467968963s ago: executing program 0 (id=2284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @remote, @multicast, @private=0xa010102}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @remote, @multicast, @private=0xa010102}}}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) 1.467565751s ago: executing program 3 (id=2285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fbdbdf25010000003d000000084100000014001800000fff658f683a64756d6d79020000"], 0x30}, 0x1, 0x0, 0x0, 0x24080841}, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r7) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r8, 0x1}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfd832669d1f01087}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xa}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x34}}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) 1.423372979s ago: executing program 2 (id=2286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d00"}) 1.268126578s ago: executing program 4 (id=2288): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079104800000000001f0000000000a12db1a28c9b723bea00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ax25={{0x3, @default}, [@bcast, @null, @bcast, @remote, @rose, @remote, @netrom, @rose]}, &(0x7f0000000100)=0x16, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x270, 0x1a0, 0x270, 0x0, 0x3d0, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f0000000140), {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0x0, 0xff], [0xffffffff, 0xff000000, 0xffffff00], 'nicvf0\x00', 'wg2\x00', {}, {}, 0x88, 0x0, 0x2, 0x48}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'veth1_vlan\x00', 'netpci0\x00', {0xff}, {0xff}, 0x32, 0x5, 0x5, 0x60}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [0xff, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xffffffff, 0xff], 'bridge_slave_0\x00', 'wg2\x00', {}, {}, 0x89, 0x1, 0x1, 0x1b}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x7f}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0x0, 0xff], 'macvlan0\x00', 'ip6gre0\x00', {}, {0xff}, 0x2f, 0x80, 0x2, 0x2e}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x0, 0x1, [0x5, 0xfa7, 0x1fc, 0x8, 0xc5, 0x4, 0x5, 0x5, 0x3, 0x4, 0x7b3, 0x8, 0x4, 0xfff2, 0xfff5, 0x7], 0xc}}, @common=@hbh={{0x48}, {0x32, 0x2, 0x1, [0x0, 0xfffb, 0x0, 0x1, 0x9, 0x6, 0x5, 0x0, 0x81, 0x2c, 0x4, 0x4, 0x7f, 0x7, 0x101, 0x4], 0xc}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xffffff00, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xffffffff], 'veth0_to_hsr\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x5, 0x24}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0xf157, 0x8], 0x5, 0x20, 0x3, [@local, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @private2, @private0, @rand_addr=' \x01\x00', @private0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @dev={0xfe, 0x80, '\x00', 0x44}], 0xa}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) 1.254613305s ago: executing program 2 (id=2289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461b007d444012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}, {0x0, 0xa}}}, 0x24}}, 0x8080) 1.135784659s ago: executing program 3 (id=2290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000b000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000df7b373712c5811800014fff53a78f6cb46b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x122}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x24000010) (async) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a140000001079000000000100000000000000000000000a"], 0x28}}, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000950000009500000003000000050000000300000604000000fbffffff0600000008000000020000000000000e0200000001000000080000000000000802000000010000000400000f010000000500000001000000018000000200000001000000080000000100172350aaca4ebaf91479b49aa20c385200000400000001000000030000000002000009000000350f00000000000010020000007f0000000000000b00000000000000003000"], &(0x7f0000000800)=""/187, 0xb3, 0xbb, 0x1, 0x6}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r7) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) (rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYRES32=r1, @ANYRES16=r8, @ANYBLOB="310300000000000020000800000008000300", @ANYBLOB="4dbaccc42f28ff246482b8bef0223547bf981f8dd29d3b1a6d5bd884e593a0b402000000999f1f45679cf32bcf7d790c22657efa5abcb3bfe5597d64b57b159589dc158091db4fd71db79871543048a4b69f70af5ce7b0305272be58dc547ae3737834dc26ffccc98c9535163d3800455ba494ea111bc4fbb62bfd77452016de1625d14dfcd788f6675faa33ca7adb7b2234e720d04c07d43496a2f367d1928d0f5dc32331dea1745df32a6ed5a3964253ce7e963940500ef5e994249831f13d035665d1f31fc6be13d4476d138608a84586c7acbe64e30edca5789354aac0b32c69955f4993029a92", @ANYBLOB="08000600bc45344f11a740a303000000000000006ba050805ac8981bd9cef958", @ANYRESHEX=r3, @ANYRESDEC=r8, @ANYRES64=r6, @ANYRES32=r5], 0x24}}, 0xc440) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x10000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48014}, 0x40000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0x20, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffb, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="040100001600010000000000000000007f000001000000000000000000000000ff0100000000000000000000000000010000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000600000000000000000000ffffffff000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200fdffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe5d00000c0015005c07350001000000"], 0x104}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) 1.087377171s ago: executing program 4 (id=2292): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffb, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1091}, 0x20048011) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r5, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000001010500000000000000000000000000060012400000000062d23c41a739221c8c51c27a5bf58e25d100b8bd6750c82ca65dde37fee4775d016194295b4847dd8a09c2451fbdb083e38aefb8695c37a28eb851c2af9b2a66bfc305d6f4b3b980ef3ff4efbbaf491139d2a62997d955f35058ebc6e51de77ee3f40d2fee48e621c12a2c"], 0x1c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000100)={r9}, 0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x3, 0x0, &(0x7f0000000080)) 1.005476373s ago: executing program 0 (id=2293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x3000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x0, 0x7800, 0x5, 0x9, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x66, 0x0, 0xf4, 0x4, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x27, 0x1, [{0x0, 0xf, "ca9ae426bac4015cfa6d9f0fb6"}, {0x0, 0x12, "066ca6972cf7e92dae0a90a38c5eb19a"}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x1, [{@multicast1, 0xffffff7e}]}, @lsrr={0x83, 0x17, 0xc2, [@rand_addr=0x64010101, @multicast2, @local, @loopback, @remote]}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0xf, 0x2}, @func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f00000006c0)=""/161, 0x3d, 0xa1, 0x1}, 0x28) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00'}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1b, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9b2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x4, 0x10000, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r6, 0x1, 0x1, 0xffffffffffffffff, r7], &(0x7f00000008c0)=[{0x1, 0x4, 0x7, 0x7}, {0x2, 0x1, 0x2, 0x4}, {0x1, 0x3, 0x10, 0x3}], 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r10, 0x4, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) getsockopt$inet_buf(r9, 0x0, 0x25, &(0x7f0000000040)=""/224, &(0x7f0000000140)=0xe0) 961.317225ms ago: executing program 2 (id=2294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800010700000000000000000800000096b2ba891bd219155d6cc72f1e239ab1beede994748e84deee"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 839.950801ms ago: executing program 2 (id=2295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r1, 0x331, 0x0, 0x200000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000001d00)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)="b9cd14c222ee3c", 0x7}], 0x1}}], 0x1, 0x20008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) getsockopt$X25_QBITINCL(r8, 0x106, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000040000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100001500be00defa384b9c20d36898de1b80c1b691a400000000"], 0x40}}, 0x4000014) 839.116579ms ago: executing program 3 (id=2296): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt(r2, 0x1, 0x4ab, &(0x7f0000000180)="06c2a780d6e8c89f517142b97d67cb8fd9b736bd05aaa8f4b8", 0x19) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x8, 0x204, 0x6, 0xdc, 0xa321, 0x4, 0x8001, r1}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x100, @private1, 0x5beb}}, 0x9, 0x6}, &(0x7f0000000300)=0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0xffffffffffff8039, 0x64, 0x8}) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000380)=0x7, 0x4) getpeername(r0, &(0x7f00000003c0)=@alg, &(0x7f0000000440)=0x80) setsockopt(r5, 0x9, 0x5c5, &(0x7f0000000480)="d7c3", 0x2) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x0, 0x46, 0xe4, &(0x7f0000000500)="4d0f7eb5b0877d0896b33604aa083442f06942891ee429dac1cad19c04a75873fed9ca075c50fabb2b1e42f29e31d3084c681e01ca4f1e95002023ba361139a8212005b6bbcc", &(0x7f0000000580)=""/228, 0xfffffff7, 0x0, 0xc9, 0xa4, &(0x7f0000000680)="cb4d260ae71da718ab953042861afef83605f55b33e9784341af7ddd273ee846b76b0a0f9b886f8ad1d655a5fd34c0dbafd5e4a3aa4225412e25f595fbeb4a0902273732023ca684871b222ab4a01cdc941dc7b2a2503d1d3dfc7393954e4b777470607a5863a24d9881ff762563b8618c776a992c05c3d8aa0367cff81cbc18d98e01d0a68135193dc35c2442a4ce3a1d97db48820e5772e6c16b64292589eee52f1cbabaece005715eab61aaa9ce5bd4849061789c474c2c7c91922644d0c20fc67cf6b1231546cd", &(0x7f0000000780)="437cc32045619323ccfb2da805534499138c0be18271f7302f35219dfa21ec39922fbd9e3e7c832a3958ee358c3728614e4ae8b345a1cab6ae61d8e9bac6dc4eb8664037dde286c443ea37554edc81259933d08e78029b0f62f691f81a2a771c2e9980a2c41e369ae853bf2c907c7f4a5ee150d2dbe7a043992e11518140c25cc2fddffd0f7b3c04d9fadbb15c0780a6e4867b5970820c6d8cdc7f0d7d08a64b4cda2130", 0x3, 0x0, 0x3ff}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20040000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000a00)={r2, 0xfffffffffffff3b8, 0x4, 0x5}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x7c, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x200088c4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000c40)={r3, 0x4, 0x6, 0x8, 0xfffffb8e, 0x6}, 0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000c80)=@assoc_value={r4, 0x9}, &(0x7f0000000cc0)=0x8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000d00)={'geneve1\x00', {0x2, 0x0, @local}}) close(r6) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000d40)) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000d80)={'wlan1\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x10}}]}, 0x2c}}, 0x1) 673.154552ms ago: executing program 3 (id=2298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000040)=0xde8, 0x4) recvmmsg(r5, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x4f9}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @device_b, @broadcast, @random="c80a605c3572", {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x1, 0x8c, 0xf9}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0xa, 0x4) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 444.161147ms ago: executing program 0 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x56, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10, 0x80000) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000580)={0x8, 0xa, 0x8, 0x0, 0x0, [{{r5}, 0x8001}, {{r6}, 0x5}, {{r0}, 0xf1}, {{r5}, 0xbb7}, {{r1}, 0x4ca}, {{r0}, 0x8}, {{r2}, 0x3}, {{r5}, 0x6}]}) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, 0x0, 0x20000001) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0xfffffec5}], 0x1}, 0x4044881) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000540)={@val={0x0, 0x8}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8100, 0xd, 0x0, @opaque="b1b4666db8"}}}}}}, 0x33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) 442.465284ms ago: executing program 2 (id=2301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000340)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040091) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000340)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040091) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) (async) 390.393785ms ago: executing program 1 (id=2302): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 344.486377ms ago: executing program 2 (id=2303): r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1}, 0x60) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r1}) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "5e37d38129bf19cd", "2799726e3fa7e60a1519c8b7e0f436ea89cca8bc53528d729e96ed42ab0967ee", "9fd1cbd4", "c8c93b5fbb4cfdeb"}, 0x38) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r5, &(0x7f0000000300)="e020c7ad23a0e60d9d918f128a3ec5cb0283d429bdfad6ebdeef8735261335b6761bf29d27c6a39b03d7f4684ee4968cfc59f1a40ee73ba497f6fb134f021f8e2c16f457f267be8aeda3294b6afda37cd0230fb4b92e5bad43"}, 0x20) 314.850125ms ago: executing program 1 (id=2304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r3], 0x1c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x9c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000580)={0x3, 'bridge_slave_1\x00', {0x5}, 0x4}) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x44000) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000300009000000000000000000010000000c000180060000000547000008000200000000004cd484e1f7beaa8bfa01ada8e7df3d7dce6da4e07f6a602d8b7ec99256291741c4449b27c676e1b7df39ef66408d59483e69c53c80718608d822d2815a88f3f1b0b625644d990988ea5a4a2849af731c293cec1ac28733f74c7f2e6234db9857e027c1531fc992bfd265dfbd240c7a21bfa275890c7f9fb619e60609893ab58036af941841a3c239809f77abb23d91ebee3eaa2eb6af"], 0x28}}, 0x0) 216.157363ms ago: executing program 1 (id=2305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000340)={0x0, 0xf2, 0xa, 0x1}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) 196.318979ms ago: executing program 1 (id=2306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000210001002a0002000000000677146100a11b86dc1a0742f6f3e33a610384dcb0836e1e23799400180000"], 0x24}}, 0x0) socketpair(0x22, 0x6, 0xe0a5, &(0x7f0000000000)) 133.955654ms ago: executing program 1 (id=2307): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) close(r2) 0s ago: executing program 1 (id=2308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES8=r0], 0xd8}, 0x1, 0x0, 0x0, 0x24994}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, 0x2, 0x7, 0x401, 0x0, 0x0, {0xf, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xfffffffffffffedb, 0x3, 0x1, 0x0, 0x3ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) kernel console output (not intermixed with test programs): 4.432959][ T7987] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 144.451162][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.570'. [ 144.460893][ T7987] unsupported nlmsg_type 40 [ 144.513563][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'. [ 144.654634][ T8007] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 144.679643][ T8007] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 145.059871][ T8015] infiniband syz2: set down [ 145.064760][ T8015] infiniband syz2: added bond0 [ 145.138967][ T8015] RDS/IB: syz2: added [ 145.148202][ T8015] smc: adding ib device syz2 with port count 1 [ 145.155070][ T8015] smc: ib device syz2 port 1 has pnetid [ 145.343072][ T8033] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 145.489802][ T8033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 145.606454][ T8031] netlink: 'syz.1.582': attribute type 3 has an invalid length. [ 145.763558][ T8038] bond7: (slave veth1): Enslaving as an active interface with a down link [ 145.801727][ T8040] veth0_to_bond: left promiscuous mode [ 145.823949][ T8040] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 146.479518][ T8085] netlink: 11 bytes leftover after parsing attributes in process `syz.4.594'. [ 146.491742][ T8085] netlink: 11 bytes leftover after parsing attributes in process `syz.4.594'. [ 146.745886][ T8091] netlink: 'syz.3.596': attribute type 3 has an invalid length. [ 146.786092][ T8096] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 147.053858][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 147.078890][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 147.481659][ T8119] netlink: 'syz.1.608': attribute type 12 has an invalid length. [ 147.503292][ T8121] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 147.607994][ T8121] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.792195][ T8125] netlink: 'syz.4.610': attribute type 3 has an invalid length. [ 148.135353][ T8146] netlink: 'syz.1.615': attribute type 4 has an invalid length. [ 148.151311][ T8146] `: renamed from bond0 [ 148.286376][ T8135] siw: device registration error -23 [ 148.549630][ T8159] tap0: tun_chr_ioctl cmd 2148553947 [ 148.922243][ T8175] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 149.027640][ T8175] 8021q: adding VLAN 0 to HW filter on device bond7 [ 149.121150][ T8179] bond7: (slave veth13): Enslaving as an active interface with a down link [ 149.175683][ T8180] bond10: entered allmulticast mode [ 149.181412][ T8180] 8021q: adding VLAN 0 to HW filter on device bond10 [ 149.198279][ T8180] bridge0: port 6(bond10) entered blocking state [ 149.204780][ T8180] bridge0: port 6(bond10) entered disabled state [ 149.249941][ T8180] bond10: entered promiscuous mode [ 149.308996][ T8175] bond5: (slave veth0_to_bond): Releasing active interface [ 149.381585][ T8175] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 149.524834][ T8202] __nla_validate_parse: 6 callbacks suppressed [ 149.524855][ T8202] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.630'. [ 149.944736][ T8222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.636'. [ 149.998317][ T8228] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.127822][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'. [ 150.230832][ T8221] 8021q: adding VLAN 0 to HW filter on device bond8 [ 150.424769][ T8242] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 150.622902][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.705052][ T8251] bond0: (slave veth7): Enslaving as an active interface with a down link [ 150.716836][ T8254] veth0_to_bond: left promiscuous mode [ 150.780034][ T8254] bond5: (slave veth0_to_bond): Releasing active interface [ 150.803576][ T8254] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 151.018544][ T8270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.648'. [ 151.067221][ T8275] netlink: 124 bytes leftover after parsing attributes in process `syz.4.649'. [ 151.234070][ T8283] netlink: 'syz.2.650': attribute type 10 has an invalid length. [ 151.252982][ T8284] netlink: 108 bytes leftover after parsing attributes in process `syz.3.652'. [ 151.272458][ T8283] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 151.282383][ T8284] netlink: 108 bytes leftover after parsing attributes in process `syz.3.652'. [ 151.293305][ T8284] netlink: 108 bytes leftover after parsing attributes in process `syz.3.652'. [ 151.326679][ T8283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.420836][ T8283] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 151.474474][ T8283] netlink: 244 bytes leftover after parsing attributes in process `syz.2.650'. [ 151.499374][ T8287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.650'. [ 152.905192][ T8349] netem: incorrect gi model size [ 152.913178][ T8349] netem: change failed [ 153.538668][ T8386] tipc: Started in network mode [ 153.566679][ T8386] tipc: Node identity 080211, cluster identity 4711 [ 153.586302][ T8386] tipc: Enabled bearer , priority 0 [ 153.602344][ T8389] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.250789][ T8424] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 154.274926][ T8424] bridge_slave_1: left allmulticast mode [ 154.288763][ T8424] bridge_slave_1: left promiscuous mode [ 154.300383][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.340361][ T8424] bridge_slave_1: entered promiscuous mode [ 154.388710][ T8424] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 154.608054][ T8439] bond8: entered allmulticast mode [ 154.622150][ T8439] 8021q: adding VLAN 0 to HW filter on device bond8 [ 154.629967][ T8439] bridge0: port 5(bond8) entered blocking state [ 154.637261][ T8439] bridge0: port 5(bond8) entered disabled state [ 154.647110][ T8439] bond8: entered promiscuous mode [ 154.708073][ T44] tipc: Node number set to 134353152 [ 154.817516][ T8456] __nla_validate_parse: 9 callbacks suppressed [ 154.817536][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 154.954872][ T8468] bond9: entered allmulticast mode [ 154.961587][ T8468] 8021q: adding VLAN 0 to HW filter on device bond9 [ 154.970137][ T8468] bridge0: port 9(bond9) entered blocking state [ 154.976928][ T8468] bridge0: port 9(bond9) entered disabled state [ 154.986752][ T8468] bond9: entered promiscuous mode [ 155.064733][ T8468] netlink: 44 bytes leftover after parsing attributes in process `syz.4.700'. [ 155.231408][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.701'. [ 155.567364][ T8499] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 155.575300][ T8499] netlink: 244 bytes leftover after parsing attributes in process `syz.2.707'. [ 155.610878][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.707'. [ 155.614977][ T8502] Bluetooth: MGMT ver 1.23 [ 155.644066][ T8496] bond10: entered allmulticast mode [ 155.650460][ T8496] 8021q: adding VLAN 0 to HW filter on device bond10 [ 155.656470][ T8504] netlink: 44 bytes leftover after parsing attributes in process `syz.3.708'. [ 155.667631][ T8496] bridge0: port 9(bond10) entered blocking state [ 155.689235][ T8496] bridge0: port 9(bond10) entered disabled state [ 155.726173][ T8496] bond10: entered promiscuous mode [ 155.984221][ T8512] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 156.142454][ T8512] 8021q: adding VLAN 0 to HW filter on device bond11 [ 156.547342][ T8549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.721'. [ 156.661991][ T8550] bond12: entered allmulticast mode [ 156.669342][ T8550] 8021q: adding VLAN 0 to HW filter on device bond12 [ 156.679785][ T8550] bridge0: port 10(bond12) entered blocking state [ 156.690052][ T8554] sctp: [Deprecated]: syz.1.724 (pid 8554) Use of int in maxseg socket option. [ 156.690052][ T8554] Use struct sctp_assoc_value instead [ 156.712457][ T8550] bridge0: port 10(bond12) entered disabled state [ 156.756606][ T8550] bond12: entered promiscuous mode [ 156.992268][ T8571] netlink: 108 bytes leftover after parsing attributes in process `syz.0.731'. [ 157.005472][ T8571] netlink: 108 bytes leftover after parsing attributes in process `syz.0.731'. [ 157.015005][ T8571] netlink: 108 bytes leftover after parsing attributes in process `syz.0.731'. [ 157.194813][ T8580] vcan0: entered allmulticast mode [ 157.391427][ T8585] bond8: entered promiscuous mode [ 157.404408][ T8585] bond9: entered promiscuous mode [ 157.429627][ T8585] veth10: entered promiscuous mode [ 157.439646][ T8585] veth11: entered promiscuous mode [ 157.468098][ T8585] bridge2: entered promiscuous mode [ 157.961679][ T8602] 8021q: adding VLAN 0 to HW filter on device bond13 [ 158.549460][ T8649] netlink: 'syz.3.756': attribute type 21 has an invalid length. [ 158.595833][ T8649] netlink: 'syz.3.756': attribute type 4 has an invalid length. [ 158.609750][ T8649] netlink: 'syz.3.756': attribute type 5 has an invalid length. [ 158.988682][ T8667] bond14: entered allmulticast mode [ 158.999219][ T8667] 8021q: adding VLAN 0 to HW filter on device bond14 [ 159.009920][ T8667] bridge0: port 11(bond14) entered blocking state [ 159.022679][ T8667] bridge0: port 11(bond14) entered disabled state [ 159.044644][ T8667] bond14: entered promiscuous mode [ 159.053532][ T8669] netem: change failed [ 159.077769][ T8669] tipc: Enabling of bearer rejected, media not registered [ 159.427163][ T8696] veth0_to_bond: entered promiscuous mode [ 159.475248][ T8696] team_slave_0: left allmulticast mode [ 159.487238][ T8696] vti0: entered promiscuous mode [ 159.499678][ T8696] bond0: entered promiscuous mode [ 159.513803][ T8696] veth6: entered promiscuous mode [ 159.520325][ T8696] veth7: entered promiscuous mode [ 159.881388][ T8712] __nla_validate_parse: 10 callbacks suppressed [ 159.881411][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.776'. [ 160.138512][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 160.284604][ T8721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 160.550928][ T8744] bond7: entered promiscuous mode [ 160.703120][ T8751] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.786'. [ 160.973991][ T8760] netlink: 104 bytes leftover after parsing attributes in process `syz.1.791'. [ 161.059904][ T8766] tipc: Enabling of bearer rejected, failed to enable media [ 161.154031][ T8766] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.292807][ T8773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.796'. [ 161.614862][ T8792] tc_dump_action: action bad kind [ 161.781537][ T8798] netlink: 'syz.0.807': attribute type 178 has an invalid length. [ 162.016777][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 162.286046][ T8810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.331084][ T8814] netlink: 48 bytes leftover after parsing attributes in process `syz.1.812'. [ 162.612836][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.821'. [ 162.643845][ T8841] netlink: 'syz.0.821': attribute type 2 has an invalid length. [ 162.654903][ T8841] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.821'. [ 162.669827][ T8841] nbd: must specify a device to reconfigure [ 162.883452][ T8850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.824'. [ 163.291021][ T8873] xt_policy: neither incoming nor outgoing policy selected [ 163.524740][ T8881] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 163.566179][ T8883] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 163.926855][ T8905] 8021q: adding VLAN 0 to HW filter on device bond10 [ 163.934394][ T8905] bridge0: port 10(bond10) entered blocking state [ 163.942472][ T8905] bridge0: port 10(bond10) entered disabled state [ 163.950055][ T8905] bond10: entered allmulticast mode [ 163.973200][ T8905] bond10: entered promiscuous mode [ 164.290800][ T8915] netlink: 'syz.2.844': attribute type 5 has an invalid length. [ 164.519802][ T8937] lo: left promiscuous mode [ 164.524669][ T8937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.852541][ T8952] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 165.293968][ T8964] __nla_validate_parse: 4 callbacks suppressed [ 165.293991][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 165.404160][ T8964] 8021q: adding VLAN 0 to HW filter on device bond11 [ 165.420545][ T8972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.862'. [ 166.012176][ T8999] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 166.042472][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 166.090236][ T8999] pimreg3: entered allmulticast mode [ 166.143593][ T9010] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 166.155489][ T9010] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.873'. [ 166.169246][ T9010] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 166.284106][ T9019] FAULT_INJECTION: forcing a failure. [ 166.284106][ T9019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.298219][ T9019] CPU: 1 UID: 0 PID: 9019 Comm: syz.1.875 Not tainted syzkaller #0 PREEMPT(full) [ 166.298245][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.298259][ T9019] Call Trace: [ 166.298267][ T9019] [ 166.298277][ T9019] dump_stack_lvl+0x189/0x250 [ 166.298309][ T9019] ? __pfx____ratelimit+0x10/0x10 [ 166.298339][ T9019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.298364][ T9019] ? __pfx__printk+0x10/0x10 [ 166.298394][ T9019] ? __might_fault+0xb0/0x130 [ 166.298438][ T9019] should_fail_ex+0x414/0x560 [ 166.298471][ T9019] _copy_from_user+0x2d/0xb0 [ 166.298497][ T9019] ___sys_sendmsg+0x158/0x2a0 [ 166.298522][ T9019] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.298585][ T9019] ? __fget_files+0x2a/0x420 [ 166.298617][ T9019] ? __fget_files+0x3a0/0x420 [ 166.298662][ T9019] __x64_sys_sendmsg+0x19b/0x260 [ 166.298687][ T9019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.298719][ T9019] ? __pfx_ksys_write+0x10/0x10 [ 166.298745][ T9019] ? rcu_is_watching+0x15/0xb0 [ 166.298773][ T9019] ? do_syscall_64+0xbe/0x3b0 [ 166.298808][ T9019] do_syscall_64+0xfa/0x3b0 [ 166.298837][ T9019] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.298866][ T9019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.298888][ T9019] ? clear_bhb_loop+0x60/0xb0 [ 166.298914][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.298935][ T9019] RIP: 0033:0x7f087eb8ebe9 [ 166.298953][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.298971][ T9019] RSP: 002b:00007f087f9d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.298993][ T9019] RAX: ffffffffffffffda RBX: 00007f087edb5fa0 RCX: 00007f087eb8ebe9 [ 166.299008][ T9019] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 166.299021][ T9019] RBP: 00007f087f9d8090 R08: 0000000000000000 R09: 0000000000000000 [ 166.299034][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.299046][ T9019] R13: 00007f087edb6038 R14: 00007f087edb5fa0 R15: 00007ffd0a814c68 [ 166.299080][ T9019] [ 166.589558][ T9010] 8021q: adding VLAN 0 to HW filter on device bond12 [ 166.661764][ T9015] bond12: (slave geneve2): making interface the new active one [ 166.669115][ T9027] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 166.686659][ T9015] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 166.701266][ T9021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.877'. [ 166.710885][ T7000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.751909][ T7000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.805911][ T9027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 166.893040][ T9030] bond8: (slave veth9): Enslaving as an active interface with a down link [ 166.904262][ T7000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.915847][ T9037] veth0_to_bond: left promiscuous mode [ 166.933381][ T9037] bond0: (slave veth0_to_bond): Releasing active interface [ 166.942320][ T9041] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 166.978801][ T9037] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 167.010717][ T7000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.157125][ T6986] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.170669][ T6986] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.212097][ T6986] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.259121][ T6986] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.309411][ T9070] FAULT_INJECTION: forcing a failure. [ 167.309411][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 167.339911][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'. [ 167.377555][ T9070] CPU: 1 UID: 0 PID: 9070 Comm: syz.2.889 Not tainted syzkaller #0 PREEMPT(full) [ 167.377584][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.377598][ T9070] Call Trace: [ 167.377608][ T9070] [ 167.377616][ T9070] dump_stack_lvl+0x189/0x250 [ 167.377646][ T9070] ? __pfx____ratelimit+0x10/0x10 [ 167.377677][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.377702][ T9070] ? __pfx__printk+0x10/0x10 [ 167.377740][ T9070] ? __pfx___might_resched+0x10/0x10 [ 167.377767][ T9070] should_fail_ex+0x414/0x560 [ 167.377801][ T9070] should_failslab+0xa8/0x100 [ 167.377835][ T9070] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 167.377866][ T9070] ? __alloc_skb+0x112/0x2d0 [ 167.377902][ T9070] __alloc_skb+0x112/0x2d0 [ 167.377938][ T9070] netlink_sendmsg+0x5c6/0xb30 [ 167.377989][ T9070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.378026][ T9070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 167.378062][ T9070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.378085][ T9070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.378118][ T9070] __sock_sendmsg+0x21c/0x270 [ 167.378148][ T9070] ____sys_sendmsg+0x505/0x830 [ 167.378177][ T9070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.378210][ T9070] ? import_iovec+0x74/0xa0 [ 167.378238][ T9070] ___sys_sendmsg+0x21f/0x2a0 [ 167.378262][ T9070] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.378321][ T9070] ? __fget_files+0x2a/0x420 [ 167.378353][ T9070] ? __fget_files+0x3a0/0x420 [ 167.378397][ T9070] __x64_sys_sendmsg+0x19b/0x260 [ 167.378423][ T9070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.378456][ T9070] ? __pfx_ksys_write+0x10/0x10 [ 167.378482][ T9070] ? rcu_is_watching+0x15/0xb0 [ 167.378509][ T9070] ? do_syscall_64+0xbe/0x3b0 [ 167.378545][ T9070] do_syscall_64+0xfa/0x3b0 [ 167.378575][ T9070] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.378603][ T9070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.378624][ T9070] ? clear_bhb_loop+0x60/0xb0 [ 167.378651][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.378671][ T9070] RIP: 0033:0x7fadc3b8ebe9 [ 167.378691][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.378710][ T9070] RSP: 002b:00007fadc4a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.378733][ T9070] RAX: ffffffffffffffda RBX: 00007fadc3db5fa0 RCX: 00007fadc3b8ebe9 [ 167.378749][ T9070] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 167.378762][ T9070] RBP: 00007fadc4a94090 R08: 0000000000000000 R09: 0000000000000000 [ 167.378774][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.378786][ T9070] R13: 00007fadc3db6038 R14: 00007fadc3db5fa0 R15: 00007ffdc48354c8 [ 167.378819][ T9070] [ 167.395855][ T9071] openvswitch: netlink: Flow key attr not present in new flow. [ 167.682154][ T9073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.891'. [ 167.728527][ T9081] tipc: Enabled bearer , priority 0 [ 167.874285][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.895'. [ 167.892848][ T9079] syzkaller0: entered promiscuous mode [ 167.899302][ T9079] syzkaller0: entered allmulticast mode [ 167.910739][ T9079] tipc: Resetting bearer [ 167.917324][ T9087] veth0_to_bond: entered promiscuous mode [ 167.925486][ T9087] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 167.949111][ T9087] bridge1: entered promiscuous mode [ 167.972514][ T9087] bond4: entered promiscuous mode [ 167.988904][ T9087] veth8: entered promiscuous mode [ 168.001898][ T9087] veth9: entered promiscuous mode [ 168.018783][ T9087] syztnl2: entered promiscuous mode [ 168.024424][ T9087] syztnl0: entered promiscuous mode [ 168.030476][ T9087] macsec1: entered promiscuous mode [ 168.039770][ T9087] bond5: entered promiscuous mode [ 168.052104][ T9087] veth10: entered promiscuous mode [ 168.062102][ T9087] veth11: entered promiscuous mode [ 168.085514][ T9087] bond6: entered promiscuous mode [ 168.095105][ T9087] sit1: entered promiscuous mode [ 168.108726][ T9087] bond7: entered promiscuous mode [ 168.118317][ T9087] veth12: entered promiscuous mode [ 168.130803][ T9087] veth13: entered promiscuous mode [ 168.150432][ T9087] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 168.184951][ T9096] vlan3: entered promiscuous mode [ 168.227449][ T9078] tipc: Resetting bearer [ 168.787731][ T7712] tipc: Node number set to 1289009046 [ 169.567195][ T9078] tipc: Disabling bearer [ 169.579274][ T9091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.970801][ T9129] bridge0: port 7(bond9) entered blocking state [ 169.977595][ T9129] bridge0: port 7(bond9) entered disabled state [ 169.984097][ T9129] bond9: entered allmulticast mode [ 170.013347][ T9129] bond9: entered promiscuous mode [ 170.279579][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 170.322017][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 170.363456][ T9145] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 170.469118][ T9150] netlink: 48 bytes leftover after parsing attributes in process `syz.1.907'. [ 170.516329][ T9158] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 170.563516][ T9158] syztnl2: entered promiscuous mode [ 170.602692][ T9158] vxlan0: entered promiscuous mode [ 170.700988][ T6980] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.715000][ T6980] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.747979][ T9174] openvswitch: netlink: Missing key (keys=40, expected=80) [ 170.799541][ T6980] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.840956][ T6980] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.313362][ T96] block nbd0: Possible stuck request ffff888024f2e000: control (read@0,4096B). Runtime 60 seconds [ 171.409541][ T9199] gtp0: entered promiscuous mode [ 171.592725][ T9204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.918'. [ 171.661156][ T9210] netlink: 'syz.1.920': attribute type 21 has an invalid length. [ 171.669405][ T9211] bridge_slave_0: left allmulticast mode [ 171.672821][ T9210] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.685139][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.749098][ T9211] bond0: (slave bridge_slave_1): Releasing backup interface [ 171.764025][ T9211] bond5: (slave veth0_to_bond): Releasing active interface [ 171.781741][ T9211] bond0: (slave bond_slave_0): Releasing backup interface [ 171.793421][ T9211] bond0: (slave bond_slave_1): Releasing backup interface [ 171.804921][ T9211] team0: Port device team_slave_0 removed [ 171.813432][ T9211] team0: Port device team_slave_1 removed [ 171.819495][ T9219] netlink: 108 bytes leftover after parsing attributes in process `syz.0.922'. [ 171.819807][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.831697][ T9219] netlink: 108 bytes leftover after parsing attributes in process `syz.0.922'. [ 171.847886][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.856487][ T9219] netlink: 108 bytes leftover after parsing attributes in process `syz.0.922'. [ 171.867932][ T9211] bond1: left allmulticast mode [ 171.873285][ T9211] bridge0: port 3(bond1) entered disabled state [ 171.890719][ T9211] bond2: (slave veth3): Releasing active interface [ 171.906998][ T9211] bond3: left allmulticast mode [ 171.914832][ T9211] bridge0: port 4(bond3) entered disabled state [ 171.941986][ T9211] bond4: (slave veth7): Releasing active interface [ 171.968657][ T9211] bond5: (slave veth9): Releasing active interface [ 171.982579][ T9211] bond6: left allmulticast mode [ 171.988289][ T9211] bridge0: port 5(bond6) entered disabled state [ 172.001702][ T9211] bond8: (slave bond9): Releasing backup interface [ 172.009715][ T9211] bond10: left allmulticast mode [ 172.014842][ T9211] bridge0: port 6(bond10) entered disabled state [ 172.119750][ T9227] netlink: 13 bytes leftover after parsing attributes in process `syz.2.924'. [ 172.244278][ T9231] netdevsim netdevsim0 : renamed from netdevsim0 [ 172.299955][ T9231] netdevsim netdevsim0 : left promiscuous mode [ 172.332092][ T9236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.507000][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'. [ 172.518438][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'. [ 172.537653][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'. [ 172.892254][ T9263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.172193][ T9290] netlink: 'syz.2.942': attribute type 3 has an invalid length. [ 174.059824][ T9328] 8021q: adding VLAN 0 to HW filter on device bond13 [ 174.385258][ T9357] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 174.510160][ T9357] 8021q: adding VLAN 0 to HW filter on device bond9 [ 174.687217][ T9365] bond9: (slave veth15): Enslaving as an active interface with a down link [ 174.713450][ T9357] veth0_to_bond: left promiscuous mode [ 174.725296][ T9357] bond7: (slave veth0_to_bond): Releasing active interface [ 174.748823][ T9357] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 174.959342][ T9375] syzkaller0: entered promiscuous mode [ 174.965229][ T9375] syzkaller0: entered allmulticast mode [ 175.005070][ T9390] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 175.024782][ T9393] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.450160][ T9406] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 176.461361][ T9400] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 176.470884][ T9406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 176.543687][ T9406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 176.734405][ T9423] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 176.742330][ T9423] netlink: 'syz.2.975': attribute type 3 has an invalid length. [ 176.751193][ T9423] netlink: 'syz.2.975': attribute type 235 has an invalid length. [ 176.845678][ T9430] __nla_validate_parse: 13 callbacks suppressed [ 176.845698][ T9430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.978'. [ 176.924603][ T9438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.971035][ T9438] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 177.585106][ T9453] FAULT_INJECTION: forcing a failure. [ 177.585106][ T9453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.613900][ T9453] CPU: 1 UID: 0 PID: 9453 Comm: syz.4.983 Not tainted syzkaller #0 PREEMPT(full) [ 177.613932][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.613960][ T9453] Call Trace: [ 177.613969][ T9453] [ 177.613979][ T9453] dump_stack_lvl+0x189/0x250 [ 177.614011][ T9453] ? __pfx____ratelimit+0x10/0x10 [ 177.614042][ T9453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.614068][ T9453] ? __pfx__printk+0x10/0x10 [ 177.614114][ T9453] should_fail_ex+0x414/0x560 [ 177.614148][ T9453] _copy_to_user+0x31/0xb0 [ 177.614176][ T9453] simple_read_from_buffer+0xe1/0x170 [ 177.614213][ T9453] proc_fail_nth_read+0x1b3/0x220 [ 177.614241][ T9453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.614269][ T9453] ? rw_verify_area+0x2a6/0x4d0 [ 177.614295][ T9453] ? __lock_acquire+0xab9/0xd20 [ 177.614325][ T9453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.614351][ T9453] vfs_read+0x200/0xa30 [ 177.614377][ T9453] ? fdget_pos+0x247/0x320 [ 177.614400][ T9453] ? __pfx___mutex_lock+0x10/0x10 [ 177.614433][ T9453] ? __pfx_vfs_read+0x10/0x10 [ 177.614463][ T9453] ? __fget_files+0x2a/0x420 [ 177.614501][ T9453] ? __fget_files+0x3a0/0x420 [ 177.614532][ T9453] ? __fget_files+0x2a/0x420 [ 177.614575][ T9453] ksys_read+0x145/0x250 [ 177.614607][ T9453] ? __pfx_ksys_read+0x10/0x10 [ 177.614632][ T9453] ? rcu_is_watching+0x15/0xb0 [ 177.614660][ T9453] ? do_syscall_64+0xbe/0x3b0 [ 177.614695][ T9453] do_syscall_64+0xfa/0x3b0 [ 177.614725][ T9453] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.614753][ T9453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.614775][ T9453] ? clear_bhb_loop+0x60/0xb0 [ 177.614809][ T9453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.614830][ T9453] RIP: 0033:0x7faf4b58d5fc [ 177.614850][ T9453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.614870][ T9453] RSP: 002b:00007faf4c3b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.614892][ T9453] RAX: ffffffffffffffda RBX: 00007faf4b7b5fa0 RCX: 00007faf4b58d5fc [ 177.614908][ T9453] RDX: 000000000000000f RSI: 00007faf4c3b90a0 RDI: 0000000000000003 [ 177.614921][ T9453] RBP: 00007faf4c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.614935][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.614948][ T9453] R13: 00007faf4b7b6038 R14: 00007faf4b7b5fa0 R15: 00007fffcfdb4d98 [ 177.614982][ T9453] [ 178.069998][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 178.130441][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 178.170316][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 178.241426][ T9470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.989'. [ 178.329000][ T9455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.483536][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 178.932569][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 179.029887][ T9507] tipc: Started in network mode [ 179.045218][ T9507] tipc: Node identity ba2663a1070b, cluster identity 4711 [ 179.071996][ T9507] tipc: Enabled bearer , priority 0 [ 179.093896][ T9507] syzkaller0: entered promiscuous mode [ 179.114478][ T9518] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 179.139502][ T9507] syzkaller0: entered allmulticast mode [ 179.233866][ T9518] 8021q: adding VLAN 0 to HW filter on device bond14 [ 179.271323][ T9518] bond7: (slave veth0_to_bond): Releasing active interface [ 179.307036][ T9518] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 179.411286][ T9528] bond14: (slave veth5): Enslaving as an active interface with a down link [ 179.525262][ T9527] bridge0: port 8(bond10) entered blocking state [ 179.543108][ T9527] bridge0: port 8(bond10) entered disabled state [ 179.553648][ T9527] bond10: entered allmulticast mode [ 179.569321][ T9527] bond10: entered promiscuous mode [ 179.583129][ T9530] tipc: Resetting bearer [ 179.622307][ T9537] pim6reg: entered allmulticast mode [ 179.629167][ T9507] netlink: 'syz.0.998': attribute type 2 has an invalid length. [ 179.654613][ T9544] lo: entered promiscuous mode [ 179.672225][ T9544] veth0_to_bond: entered promiscuous mode [ 179.733791][ T9544] mac80211_hwsim hwsim19 wlan5: entered promiscuous mode [ 179.765266][ T9544] gtp0: left allmulticast mode [ 179.780225][ T9544] mac80211_hwsim hwsim21 wlan6: entered promiscuous mode [ 179.788805][ T9544] sit1: entered promiscuous mode [ 179.799789][ T9544] bond7: entered promiscuous mode [ 179.807221][ T9544] veth0: entered promiscuous mode [ 179.813063][ T9544] veth1: entered promiscuous mode [ 179.824014][ T9544] vlan2: entered promiscuous mode [ 179.830824][ T9544] bond8: entered promiscuous mode [ 179.842876][ T9544] vlan0.0: entered promiscuous mode [ 179.857686][ T9544] vlan0.2: entered promiscuous mode [ 179.870300][ T9544] gre2: entered promiscuous mode [ 179.882131][ T9544] bond11: entered promiscuous mode [ 179.894168][ T9544] bond12: entered promiscuous mode [ 179.900385][ T9544] geneve2: entered promiscuous mode [ 179.912056][ T9544] bond13: entered promiscuous mode [ 179.918044][ T9544] ip6gre1: entered promiscuous mode [ 179.924121][ T9544] bond14: entered promiscuous mode [ 179.930704][ T9544] veth4: entered promiscuous mode [ 179.937602][ T9544] veth5: entered promiscuous mode [ 179.951684][ T9505] tipc: Resetting bearer [ 179.994727][ T9505] tipc: Disabling bearer [ 180.058125][ T3483] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.096474][ T3483] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.122258][ T3607] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.164467][ T3607] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.212670][ T9566] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 180.228804][ T9564] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1012'. [ 180.346416][ T9574] netlink: 'syz.0.1015': attribute type 12 has an invalid length. [ 180.709022][ T9593] pim6reg: entered promiscuous mode [ 180.944625][ T9606] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 181.002495][ T9611] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1023'. [ 181.158343][ T9619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'. [ 181.239193][ T9614] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 181.277832][ T9614] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 181.305206][ T9617] gretap1: entered promiscuous mode [ 181.318610][ T9617] bond11: (slave gretap1): making interface the new active one [ 181.329877][ T9617] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 181.394012][ T9606] macvlan2: entered promiscuous mode [ 181.417959][ T9606] macvlan2: entered allmulticast mode [ 181.441634][ T9606] bond11: entered promiscuous mode [ 181.460617][ T9606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.481455][ T9606] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 181.505052][ T9606] bond11: left promiscuous mode [ 181.550410][ T9634] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 182.070327][ T9657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 182.176285][ T9657] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1040'. [ 182.397238][ T9677] 8021q: adding VLAN 0 to HW filter on device bond15 [ 182.415267][ T9677] bridge0: port 11(bond15) entered blocking state [ 182.439415][ T9677] bridge0: port 11(bond15) entered disabled state [ 182.464900][ T9677] bond15: entered allmulticast mode [ 182.474297][ T9677] bond15: entered promiscuous mode [ 183.245257][ T9721] netlink: 'syz.3.1055': attribute type 10 has an invalid length. [ 183.267348][ T9721] team0: left promiscuous mode [ 183.281631][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.331322][ T9721] team0: entered promiscuous mode [ 183.357322][ T9721] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.493593][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 183.524404][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 183.574361][ T9728] bond10: entered allmulticast mode [ 183.580523][ T9728] 8021q: adding VLAN 0 to HW filter on device bond10 [ 183.589332][ T9728] bridge0: port 6(bond10) entered blocking state [ 183.596327][ T9728] bridge0: port 6(bond10) entered disabled state [ 183.610307][ T9728] bond10: entered promiscuous mode [ 183.961508][ T9748] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 183.985022][ T9748] netlink: 'syz.1.1065': attribute type 4 has an invalid length. [ 183.993808][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 183.998539][ T9748] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.1065'. [ 184.124704][ T9755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 184.169582][ T9763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1069'. [ 184.171011][ T9755] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1066'. [ 184.341675][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 184.633217][ T9767] 8021q: adding VLAN 0 to HW filter on device bond12 [ 184.690289][ T9785] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1076'. [ 184.692258][ T9769] 8021q: adding VLAN 0 to HW filter on device bond11 [ 184.712974][ T9769] bridge0: port 1(bond11) entered blocking state [ 184.735878][ T9769] bridge0: port 1(bond11) entered disabled state [ 184.756322][ T9769] bond11: entered allmulticast mode [ 184.764684][ T9769] bond11: entered promiscuous mode [ 185.114613][ T9801] lo: left promiscuous mode [ 185.139405][ T9801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.177383][ T9805] syzkaller1: entered promiscuous mode [ 185.200554][ T9805] syzkaller1: entered allmulticast mode [ 185.544573][ T9820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.883239][ T9844] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 185.970853][ T9847] IPv6: sit1: Disabled Multicast RS [ 185.983482][ T9847] sit1: entered allmulticast mode [ 186.328131][ T9865] ip6gre1: entered allmulticast mode [ 186.397121][ T9865] macvlan2: entered allmulticast mode [ 186.401093][ T9870] netlink: 'syz.4.1103': attribute type 15 has an invalid length. [ 186.421968][ T9865] bond0: (slave macvlan2): Opening slave failed [ 186.751055][ T9880] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.249078][ T9909] __nla_validate_parse: 16 callbacks suppressed [ 187.249099][ T9909] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1115'. [ 187.486649][ T9920] IPv6: sit1: Disabled Multicast RS [ 187.888130][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1124'. [ 188.602730][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 188.893898][ T9989] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 188.921626][ T9989] netlink: 'syz.1.1140': attribute type 2 has an invalid length. [ 188.952397][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 189.459473][T10011] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1145'. [ 189.732656][T10026] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1148'. [ 189.748521][T10011] team0 (unregistering): Port device team_slave_0 removed [ 189.784758][T10011] team0 (unregistering): Port device team_slave_1 removed [ 190.203097][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 190.226744][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 190.288513][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 190.382534][T10051] netdevsim netdevsim0 : entered promiscuous mode [ 190.400642][T10051] veth6: entered promiscuous mode [ 190.413406][T10051] veth7: entered promiscuous mode [ 190.430944][T10051] bond11: entered promiscuous mode [ 190.450209][T10051] bond13: entered promiscuous mode [ 190.460189][T10051] bond15: entered promiscuous mode [ 190.466131][T10051] ip6tnl1: entered promiscuous mode [ 190.476534][T10051] ip6tnl2: entered promiscuous mode [ 190.483145][T10051] sit1: entered promiscuous mode [ 190.617337][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.808441][T10070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1158'. [ 191.140903][T10084] tipc: Enabling of bearer rejected, already enabled [ 191.249076][T10086] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 192.064147][T10137] xt_time: unknown flags 0xf4 [ 192.227172][T10143] netlink: 'syz.2.1182': attribute type 4 has an invalid length. [ 192.442351][T10157] __nla_validate_parse: 14 callbacks suppressed [ 192.442374][T10157] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1189'. [ 192.466387][T10160] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1190'. [ 192.492572][T10157] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1189'. [ 192.524283][T10157] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1189'. [ 192.800461][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1194'. [ 192.800461][T10184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1194'. [ 192.832626][T10187] tipc: Invalid UDP bearer configuration [ 192.832687][T10187] tipc: Enabling of bearer rejected, failed to enable media [ 192.883159][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 192.909690][ T6980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.956301][ T6980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.097063][T10199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.315362][T10211] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.1203'. [ 193.379865][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 193.389603][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 193.761700][T10234] openvswitch: netlink: Message has 5 unknown bytes. [ 193.941199][T10247] netlink: 'syz.3.1217': attribute type 17 has an invalid length. [ 194.863793][T10285] trusted_key: syz.3.1231 sent an empty control message without MSG_MORE. [ 195.020460][T10291] bridge0: port 9(bond13) entered blocking state [ 195.027539][T10291] bridge0: port 9(bond13) entered disabled state [ 195.034344][T10291] bond13: entered allmulticast mode [ 195.053642][T10291] bond13: entered promiscuous mode [ 195.399003][ T6995] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.428285][ T6995] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.461690][ T6995] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.671526][T10337] netlink: 'syz.1.1248': attribute type 12 has an invalid length. [ 195.694867][T10337] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 196.187270][T10359] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 196.203931][T10364] netlink: zone id is out of range [ 196.260715][T10364] netlink: zone id is out of range [ 196.296309][T10364] netlink: zone id is out of range [ 196.315978][T10364] netlink: zone id is out of range [ 196.340459][T10364] netlink: zone id is out of range [ 196.361071][T10364] netlink: zone id is out of range [ 196.377834][T10364] netlink: zone id is out of range [ 196.391909][T10364] netlink: zone id is out of range [ 196.409605][T10364] netlink: zone id is out of range [ 196.433204][T10364] netlink: zone id is out of range [ 196.442258][T10366] macvtap2: entered promiscuous mode [ 196.478678][T10366] macvtap2: entered allmulticast mode [ 196.495441][T10366] vlan0: entered allmulticast mode [ 196.512803][T10366] veth0_vlan: entered allmulticast mode [ 196.616924][T10369] bond12: (slave geneve2): making interface the new active one [ 196.625502][T10369] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 196.637583][T10373] tipc: Cannot configure node identity twice [ 196.805126][T10394] netlink: 'syz.4.1259': attribute type 15 has an invalid length. [ 196.823002][ T3607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.117847][T10411] netlink: 'syz.1.1262': attribute type 6 has an invalid length. [ 197.335064][ T3607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.416750][ T6986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.444906][ T6986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.567471][T10426] __nla_validate_parse: 32 callbacks suppressed [ 197.567495][T10426] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1267'. [ 197.622380][T10432] netlink: 'syz.1.1270': attribute type 19 has an invalid length. [ 197.655265][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 197.681594][T10432] netlink: 'syz.1.1270': attribute type 19 has an invalid length. [ 197.692335][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 198.207963][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 198.358605][T10464] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1281'. [ 198.370396][T10464] netem: invalid attributes len -24 [ 198.388708][T10464] netem: change failed [ 198.432935][T10465] bond15: left allmulticast mode [ 198.445279][T10465] bond15: left promiscuous mode [ 198.452478][T10465] bridge0: port 11(bond15) entered disabled state [ 198.466033][T10465] bond10: left allmulticast mode [ 198.472228][T10465] bridge0: port 10(bond10) entered disabled state [ 198.486798][T10470] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1283'. [ 198.510432][T10465] bond9: left allmulticast mode [ 198.516732][T10465] bridge0: port 9(bond9) entered disabled state [ 198.532889][T10465] bond6: left allmulticast mode [ 198.541014][T10465] bridge0: port 8(bond6) entered disabled state [ 198.573042][T10465] bond5: left allmulticast mode [ 198.581238][T10465] bridge0: port 7(bond5) entered disabled state [ 198.611084][T10465] bond4: left allmulticast mode [ 198.620738][T10465] bridge0: port 6(bond4) entered disabled state [ 198.641994][T10465] bond3: left allmulticast mode [ 198.654358][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1285'. [ 198.655972][T10465] bridge0: port 5(bond3) entered disabled state [ 198.677509][T10465] bond2: left allmulticast mode [ 198.682819][T10465] bridge0: port 4(bond2) entered disabled state [ 198.702879][T10465] bond1: left allmulticast mode [ 198.716542][T10465] bridge0: port 3(bond1) entered disabled state [ 198.731015][T10465] bridge_slave_1: left allmulticast mode [ 198.737373][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.760714][T10465] bridge_slave_0: left allmulticast mode [ 198.768801][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.059812][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.114594][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.133121][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.172608][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.199139][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.221914][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.241227][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.273016][T10481] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 199.474693][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.476568][T10495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1293'. [ 199.487241][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.634320][T10500] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1295'. [ 199.657113][T10504] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1297'. [ 199.896839][T10510] FAULT_INJECTION: forcing a failure. [ 199.896839][T10510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.980368][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.4.1301 Not tainted syzkaller #0 PREEMPT(full) [ 199.980398][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.980412][T10510] Call Trace: [ 199.980420][T10510] [ 199.980429][T10510] dump_stack_lvl+0x189/0x250 [ 199.980459][T10510] ? __pfx____ratelimit+0x10/0x10 [ 199.980487][T10510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.980512][T10510] ? __pfx__printk+0x10/0x10 [ 199.980540][T10510] ? __might_fault+0xb0/0x130 [ 199.980584][T10510] should_fail_ex+0x414/0x560 [ 199.980617][T10510] _copy_from_user+0x2d/0xb0 [ 199.980643][T10510] ___sys_sendmsg+0x158/0x2a0 [ 199.980667][T10510] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.980730][T10510] ? __fget_files+0x2a/0x420 [ 199.980762][T10510] ? __fget_files+0x3a0/0x420 [ 199.980807][T10510] __x64_sys_sendmsg+0x19b/0x260 [ 199.980832][T10510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.980865][T10510] ? __pfx_ksys_write+0x10/0x10 [ 199.980898][T10510] ? rcu_is_watching+0x15/0xb0 [ 199.980924][T10510] ? do_syscall_64+0xbe/0x3b0 [ 199.980957][T10510] do_syscall_64+0xfa/0x3b0 [ 199.980986][T10510] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.981014][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.981036][T10510] ? clear_bhb_loop+0x60/0xb0 [ 199.981062][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.981083][T10510] RIP: 0033:0x7faf4b58ebe9 [ 199.981102][T10510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.981122][T10510] RSP: 002b:00007faf4c3b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.981146][T10510] RAX: ffffffffffffffda RBX: 00007faf4b7b5fa0 RCX: 00007faf4b58ebe9 [ 199.981162][T10510] RDX: 0000000000048000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 199.981176][T10510] RBP: 00007faf4c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 199.981189][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.981202][T10510] R13: 00007faf4b7b6038 R14: 00007faf4b7b5fa0 R15: 00007fffcfdb4d98 [ 199.981237][T10510] [ 200.304896][T10524] 8021q: adding VLAN 0 to HW filter on device bond16 [ 200.341534][T10524] bond16: (slave veth9): Enslaving as an active interface with a down link [ 200.465688][T10528] bond16 (unregistering): Released all slaves [ 200.551426][T10524] veth0_to_bond: left promiscuous mode [ 200.562493][T10524] bond9: (slave veth0_to_bond): Releasing active interface [ 200.590558][T10524] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 200.873164][T10557] FAULT_INJECTION: forcing a failure. [ 200.873164][T10557] name failslab, interval 1, probability 0, space 0, times 0 [ 200.933402][T10557] CPU: 1 UID: 0 PID: 10557 Comm: syz.3.1316 Not tainted syzkaller #0 PREEMPT(full) [ 200.933434][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.933447][T10557] Call Trace: [ 200.933456][T10557] [ 200.933465][T10557] dump_stack_lvl+0x189/0x250 [ 200.933497][T10557] ? __pfx____ratelimit+0x10/0x10 [ 200.933527][T10557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.933553][T10557] ? __pfx__printk+0x10/0x10 [ 200.933590][T10557] ? __pfx___might_resched+0x10/0x10 [ 200.933616][T10557] should_fail_ex+0x414/0x560 [ 200.933650][T10557] should_failslab+0xa8/0x100 [ 200.933684][T10557] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 200.933714][T10557] ? __alloc_skb+0x112/0x2d0 [ 200.933751][T10557] __alloc_skb+0x112/0x2d0 [ 200.933788][T10557] netlink_sendmsg+0x5c6/0xb30 [ 200.933830][T10557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.933865][T10557] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.933901][T10557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.933924][T10557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.933972][T10557] __sock_sendmsg+0x21c/0x270 [ 200.934003][T10557] ____sys_sendmsg+0x505/0x830 [ 200.934031][T10557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.934064][T10557] ? import_iovec+0x74/0xa0 [ 200.934093][T10557] ___sys_sendmsg+0x21f/0x2a0 [ 200.934117][T10557] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.934181][T10557] ? __fget_files+0x2a/0x420 [ 200.934213][T10557] ? __fget_files+0x3a0/0x420 [ 200.934258][T10557] __x64_sys_sendmsg+0x19b/0x260 [ 200.934284][T10557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.934319][T10557] ? __pfx_ksys_write+0x10/0x10 [ 200.934345][T10557] ? rcu_is_watching+0x15/0xb0 [ 200.934373][T10557] ? do_syscall_64+0xbe/0x3b0 [ 200.934413][T10557] do_syscall_64+0xfa/0x3b0 [ 200.934442][T10557] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.934471][T10557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.934493][T10557] ? clear_bhb_loop+0x60/0xb0 [ 200.934520][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.934541][T10557] RIP: 0033:0x7f8de7d8ebe9 [ 200.934561][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.934580][T10557] RSP: 002b:00007f8de8b7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.934603][T10557] RAX: ffffffffffffffda RBX: 00007f8de7fb5fa0 RCX: 00007f8de7d8ebe9 [ 200.934619][T10557] RDX: 0000000000048000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 200.934632][T10557] RBP: 00007f8de8b7a090 R08: 0000000000000000 R09: 0000000000000000 [ 200.934647][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.934659][T10557] R13: 00007f8de7fb6038 R14: 00007f8de7fb5fa0 R15: 00007ffcbde48638 [ 200.934694][T10557] [ 201.400179][ T96] block nbd0: Possible stuck request ffff888024f2e000: control (read@0,4096B). Runtime 90 seconds [ 201.658452][T10579] 8021q: adding VLAN 0 to HW filter on device bond14 [ 201.703475][T10582] bridge0: port 12(bond17) entered blocking state [ 201.710882][T10582] bridge0: port 12(bond17) entered disabled state [ 201.719256][T10582] bond17: entered allmulticast mode [ 201.728122][T10582] bond17: entered promiscuous mode [ 201.810366][T10584] bond14: (slave veth11): Enslaving as an active interface with a down link [ 201.849094][T10579] bond8: (slave veth0_to_bond): Releasing active interface [ 201.866326][T10579] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 202.031500][T10591] syzkaller0: entered promiscuous mode [ 202.048172][T10591] syzkaller0: entered allmulticast mode [ 202.309041][T10612] net_ratelimit: 6 callbacks suppressed [ 202.309061][T10612] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 203.645481][T10620] tipc: Enabling of bearer rejected, failed to enable media [ 203.820304][T10629] validate_nla: 29 callbacks suppressed [ 203.820328][T10629] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 203.853603][T10630] __nla_validate_parse: 9 callbacks suppressed [ 203.853623][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 203.861486][T10622] bridge0: port 13(bond18) entered blocking state [ 203.876367][T10622] bridge0: port 13(bond18) entered disabled state [ 203.883139][T10622] bond18: entered allmulticast mode [ 203.892165][T10622] bond18: entered promiscuous mode [ 203.928659][T10632] bond15: entered promiscuous mode [ 203.952659][T10632] ip6erspan0: entered promiscuous mode [ 203.978968][T10632] vxlan0: entered promiscuous mode [ 204.000011][T10632] veth6: entered promiscuous mode [ 204.005474][T10632] veth7: entered promiscuous mode [ 204.015190][T10632] vlan0: left allmulticast mode [ 204.023786][T10632] veth0_vlan: left allmulticast mode [ 204.042723][T10632] macvtap2: left allmulticast mode [ 204.106166][T10629] 8021q: adding VLAN 0 to HW filter on device bond12 [ 204.122198][T10630] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 204.187985][T10636] bond12: (slave veth17): Enslaving as an active interface with a down link [ 204.213252][T10639] bond9: (slave veth0_to_bond): Releasing active interface [ 204.228788][T10639] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 204.237204][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1347'. [ 204.328637][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 204.361479][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1347'. [ 204.464599][T10657] IPv6: Can't replace route, no match found [ 204.482120][T10662] FAULT_INJECTION: forcing a failure. [ 204.482120][T10662] name failslab, interval 1, probability 0, space 0, times 0 [ 204.495666][T10662] CPU: 0 UID: 0 PID: 10662 Comm: syz.3.1352 Not tainted syzkaller #0 PREEMPT(full) [ 204.495697][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.495718][T10662] Call Trace: [ 204.495727][T10662] [ 204.495737][T10662] dump_stack_lvl+0x189/0x250 [ 204.495767][T10662] ? __pfx____ratelimit+0x10/0x10 [ 204.495798][T10662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.495824][T10662] ? __pfx__printk+0x10/0x10 [ 204.495861][T10662] ? __pfx___might_resched+0x10/0x10 [ 204.495880][T10662] ? fs_reclaim_acquire+0x7d/0x100 [ 204.495920][T10662] should_fail_ex+0x414/0x560 [ 204.495954][T10662] should_failslab+0xa8/0x100 [ 204.495987][T10662] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 204.496018][T10662] ? __alloc_skb+0x112/0x2d0 [ 204.496054][T10662] __alloc_skb+0x112/0x2d0 [ 204.496090][T10662] netlink_ack+0x146/0xa50 [ 204.496117][T10662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.496168][T10662] netlink_rcv_skb+0x28c/0x470 [ 204.496196][T10662] ? __lock_acquire+0xab9/0xd20 [ 204.496228][T10662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.496260][T10662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.496304][T10662] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.496344][T10662] netlink_unicast+0x82c/0x9e0 [ 204.496382][T10662] ? __pfx_netlink_unicast+0x10/0x10 [ 204.496412][T10662] ? netlink_sendmsg+0x642/0xb30 [ 204.496440][T10662] ? skb_put+0x11b/0x210 [ 204.496477][T10662] netlink_sendmsg+0x805/0xb30 [ 204.496519][T10662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.496554][T10662] ? aa_sock_msg_perm+0xf1/0x1d0 [ 204.496589][T10662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.496612][T10662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.496644][T10662] __sock_sendmsg+0x21c/0x270 [ 204.496680][T10662] ____sys_sendmsg+0x505/0x830 [ 204.496714][T10662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.496747][T10662] ? import_iovec+0x74/0xa0 [ 204.496776][T10662] ___sys_sendmsg+0x21f/0x2a0 [ 204.496800][T10662] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.496864][T10662] ? __fget_files+0x2a/0x420 [ 204.496895][T10662] ? __fget_files+0x3a0/0x420 [ 204.496939][T10662] __x64_sys_sendmsg+0x19b/0x260 [ 204.496964][T10662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.496997][T10662] ? __pfx_ksys_write+0x10/0x10 [ 204.497023][T10662] ? rcu_is_watching+0x15/0xb0 [ 204.497050][T10662] ? do_syscall_64+0xbe/0x3b0 [ 204.497086][T10662] do_syscall_64+0xfa/0x3b0 [ 204.497114][T10662] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.497142][T10662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.497163][T10662] ? clear_bhb_loop+0x60/0xb0 [ 204.497189][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.497209][T10662] RIP: 0033:0x7f8de7d8ebe9 [ 204.497228][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.497247][T10662] RSP: 002b:00007f8de8b7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.497269][T10662] RAX: ffffffffffffffda RBX: 00007f8de7fb5fa0 RCX: 00007f8de7d8ebe9 [ 204.497284][T10662] RDX: 0000000000048000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 204.497298][T10662] RBP: 00007f8de8b7a090 R08: 0000000000000000 R09: 0000000000000000 [ 204.497310][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.497322][T10662] R13: 00007f8de7fb6038 R14: 00007f8de7fb5fa0 R15: 00007ffcbde48638 [ 204.497357][T10662] [ 204.497707][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 204.776773][T10676] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1355'. [ 205.076299][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.113416][T10682] netlink: 'syz.4.1358': attribute type 15 has an invalid length. [ 205.397067][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'. [ 205.435959][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'. [ 205.486840][T10701] RDS: rds_bind could not find a transport for 2dbd:7000:fddb:df25:100:0:800:100, load rds_tcp or rds_rdma? [ 205.558849][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 205.953132][T10738] netlink: 'syz.4.1379': attribute type 4 has an invalid length. [ 206.431100][T10755] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.587146][T10759] veth0_to_bond: entered promiscuous mode [ 206.607820][T10759] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 206.699721][T10759] bond9: entered promiscuous mode [ 206.731443][T10759] veth14: entered promiscuous mode [ 206.760845][T10759] veth15: entered promiscuous mode [ 206.786174][T10759] bridge2: entered promiscuous mode [ 206.840064][T10759] bond11: entered promiscuous mode [ 206.861606][T10759] bond12: entered promiscuous mode [ 206.903589][T10759] veth16: entered promiscuous mode [ 206.919887][T10759] veth17: entered promiscuous mode [ 206.987002][T10774] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 207.149054][T10787] FAULT_INJECTION: forcing a failure. [ 207.149054][T10787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.173115][T10787] CPU: 1 UID: 0 PID: 10787 Comm: syz.4.1396 Not tainted syzkaller #0 PREEMPT(full) [ 207.173145][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.173159][T10787] Call Trace: [ 207.173168][T10787] [ 207.173178][T10787] dump_stack_lvl+0x189/0x250 [ 207.173210][T10787] ? __pfx____ratelimit+0x10/0x10 [ 207.173240][T10787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.173266][T10787] ? __pfx__printk+0x10/0x10 [ 207.173311][T10787] should_fail_ex+0x414/0x560 [ 207.173346][T10787] _copy_to_user+0x31/0xb0 [ 207.173375][T10787] simple_read_from_buffer+0xe1/0x170 [ 207.173421][T10787] proc_fail_nth_read+0x1b3/0x220 [ 207.173450][T10787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.173479][T10787] ? rw_verify_area+0x2a6/0x4d0 [ 207.173505][T10787] ? __lock_acquire+0xab9/0xd20 [ 207.173533][T10787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.173558][T10787] vfs_read+0x200/0xa30 [ 207.173583][T10787] ? fdget_pos+0x247/0x320 [ 207.173607][T10787] ? __pfx___mutex_lock+0x10/0x10 [ 207.173638][T10787] ? __pfx_vfs_read+0x10/0x10 [ 207.173669][T10787] ? __fget_files+0x2a/0x420 [ 207.173707][T10787] ? __fget_files+0x3a0/0x420 [ 207.173738][T10787] ? __fget_files+0x2a/0x420 [ 207.173782][T10787] ksys_read+0x145/0x250 [ 207.173814][T10787] ? __pfx_ksys_read+0x10/0x10 [ 207.173840][T10787] ? rcu_is_watching+0x15/0xb0 [ 207.173868][T10787] ? do_syscall_64+0xbe/0x3b0 [ 207.173903][T10787] do_syscall_64+0xfa/0x3b0 [ 207.173933][T10787] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.173961][T10787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.173983][T10787] ? clear_bhb_loop+0x60/0xb0 [ 207.174010][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.174031][T10787] RIP: 0033:0x7faf4b58d5fc [ 207.174050][T10787] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.174068][T10787] RSP: 002b:00007faf4c3b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.174091][T10787] RAX: ffffffffffffffda RBX: 00007faf4b7b5fa0 RCX: 00007faf4b58d5fc [ 207.174107][T10787] RDX: 000000000000000f RSI: 00007faf4c3b90a0 RDI: 0000000000000004 [ 207.174121][T10787] RBP: 00007faf4c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 207.174134][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.174147][T10787] R13: 00007faf4b7b6038 R14: 00007faf4b7b5fa0 R15: 00007fffcfdb4d98 [ 207.174182][T10787] [ 207.415021][T10792] bond11: left allmulticast mode [ 207.420186][T10792] bond11: left promiscuous mode [ 207.425416][T10792] bridge0: port 1(bond11) entered disabled state [ 207.902650][T10817] netlink: 'syz.3.1406': attribute type 21 has an invalid length. [ 207.965291][T10817] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.993525][T10817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.000901][T10817] IPv6: NLM_F_CREATE should be set when creating new route [ 208.008341][T10817] IPv6: NLM_F_CREATE should be set when creating new route [ 208.015630][T10817] IPv6: NLM_F_CREATE should be set when creating new route [ 208.077536][T10808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.157523][T10826] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 208.281662][T10828] bond13 (unregistering): Released all slaves [ 208.903116][T10868] __nla_validate_parse: 15 callbacks suppressed [ 208.903139][T10868] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1420'. [ 208.991486][T10868] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1420'. [ 208.995718][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 209.036131][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 209.050632][T10868] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1420'. [ 209.066702][T10880] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1424'. [ 209.084580][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 209.109638][T10875] netlink: 'syz.1.1421': attribute type 10 has an invalid length. [ 209.120709][T10875] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 209.137870][T10875] dummy0: left allmulticast mode [ 209.143271][T10875] bridge0: port 4(dummy0) entered disabled state [ 209.190082][T10875] bridge_slave_0: left allmulticast mode [ 209.199166][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.275025][T10875] bridge_slave_1: left allmulticast mode [ 209.282620][T10875] bridge_slave_1: left promiscuous mode [ 209.296378][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.384513][T10875] bond14: (slave veth0_to_bond): Releasing active interface [ 209.398603][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 209.421922][T10875] `: (slave bond_slave_0): Releasing backup interface [ 209.427160][T10901] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 209.444153][T10875] `: (slave bond_slave_1): Releasing backup interface [ 209.472998][T10875] team0: Port device team_slave_0 removed [ 209.497841][T10875] team0: Port device team_slave_1 removed [ 209.511974][T10875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.522257][T10875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.548734][T10875] bond1: left allmulticast mode [ 209.554104][T10875] bridge0: port 3(bond1) entered disabled state [ 209.575416][T10875] bond2: left allmulticast mode [ 209.593051][T10875] bridge0: port 5(bond2) entered disabled state [ 209.609528][T10875] bond3: (slave veth3): Releasing active interface [ 209.624838][T10875] bond4: left allmulticast mode [ 209.630662][T10875] bridge0: port 6(bond4) entered disabled state [ 209.647102][T10875] bond5: (slave veth5): Releasing active interface [ 209.658482][T10875] bond0: (slave veth7): Releasing active interface [ 209.675502][T10875] bond8: (slave veth9): Releasing active interface [ 209.695105][T10875] bond9: left allmulticast mode [ 209.703809][T10875] bond9: left promiscuous mode [ 209.741950][T10875] bridge0: port 7(bond9) entered disabled state [ 209.791369][T10875] bond10: left allmulticast mode [ 209.821901][T10875] bond10: left promiscuous mode [ 209.847017][T10875] bridge0: port 8(bond10) entered disabled state [ 209.909361][T10875] bond11: (slave gretap1): Releasing active interface [ 209.972075][T10875] bond13: left allmulticast mode [ 209.984465][T10875] bond13: left promiscuous mode [ 209.990231][T10875] bridge0: port 9(bond13) entered disabled state [ 210.008001][T10875] bond14: (slave veth11): Releasing active interface [ 210.121775][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1430'. [ 210.618817][T10940] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1436'. [ 210.894564][T10957] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 211.145293][T10959] bond14 (unregistering): Released all slaves [ 211.796611][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 211.796630][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 211.796674][ T5882] Bluetooth: hci1: command 0x0406 tx timeout [ 211.916040][T10996] netlink: 'syz.4.1450': attribute type 9 has an invalid length. [ 212.212550][T11009] vcan0: entered allmulticast mode [ 212.433229][T11019] tipc: Enabled bearer , priority 0 [ 212.517502][T11026] netlink: 'syz.1.1457': attribute type 1 has an invalid length. [ 212.558103][T11019] syzkaller0: entered promiscuous mode [ 212.573791][T11019] syzkaller0: entered allmulticast mode [ 212.589449][T11019] tipc: Resetting bearer [ 212.680918][T11029] bond15: (slave gretap2): making interface the new active one [ 212.692920][T11029] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 212.723086][T11018] tipc: Resetting bearer [ 212.746480][T11040] IPVS: length: 8 != 1152 [ 212.770920][T11039] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 214.150749][T11018] tipc: Disabling bearer [ 214.166584][T11051] __nla_validate_parse: 16 callbacks suppressed [ 214.166602][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 214.343115][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 214.350219][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 214.356120][ T7000] tipc: Subscription rejected, illegal request [ 214.373242][T11067] netlink: 'syz.3.1468': attribute type 10 has an invalid length. [ 214.382906][T11067] dummy0: left promiscuous mode [ 214.388770][T11068] netlink: 'syz.2.1467': attribute type 21 has an invalid length. [ 214.403931][T11067] dummy0: entered promiscuous mode [ 214.426713][T11072] netlink: 'syz.3.1468': attribute type 10 has an invalid length. [ 214.447451][T11067] team0: Port device dummy0 added [ 214.484132][T11072] dummy0: left promiscuous mode [ 214.506932][T11072] team0: Port device dummy0 removed [ 214.529787][T11072] dummy0: entered promiscuous mode [ 214.540053][T11072] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 214.589778][T11077] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 214.729026][T11082] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1474'. [ 214.780533][T11086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1475'. [ 214.908635][T11094] netlink: 'syz.3.1478': attribute type 1 has an invalid length. [ 214.908635][T11095] netlink: 'syz.3.1478': attribute type 1 has an invalid length. [ 214.908662][T11095] netlink: 'syz.3.1478': attribute type 2 has an invalid length. [ 214.946079][T11094] netlink: 'syz.3.1478': attribute type 2 has an invalid length. [ 214.966622][T11096] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1479'. [ 214.998744][T11096] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1479'. [ 215.024870][T11096] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1479'. [ 215.210492][T11106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1482'. [ 215.362670][T11107] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 215.459960][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1487'. [ 215.743964][ T7719] IPVS: starting estimator thread 0... [ 215.867524][T11133] IPVS: using max 24 ests per chain, 57600 per kthread [ 215.900919][T11139] netlink: 'syz.1.1492': attribute type 5 has an invalid length. [ 216.580756][T11182] bond16 (unregistering): Released all slaves [ 217.104875][T11196] 8021q: adding VLAN 0 to HW filter on device bond17 [ 217.112959][T11220] FAULT_INJECTION: forcing a failure. [ 217.112959][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 217.125986][T11220] CPU: 1 UID: 0 PID: 11220 Comm: syz.4.1520 Not tainted syzkaller #0 PREEMPT(full) [ 217.126013][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.126027][T11220] Call Trace: [ 217.126036][T11220] [ 217.126045][T11220] dump_stack_lvl+0x189/0x250 [ 217.126076][T11220] ? __pfx____ratelimit+0x10/0x10 [ 217.126106][T11220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.126133][T11220] ? __pfx__printk+0x10/0x10 [ 217.126179][T11220] should_fail_ex+0x414/0x560 [ 217.126214][T11220] should_failslab+0xa8/0x100 [ 217.126248][T11220] kmem_cache_alloc_noprof+0x73/0x3c0 [ 217.126277][T11220] ? radix_tree_node_alloc+0x7e/0x3a0 [ 217.126310][T11220] radix_tree_node_alloc+0x7e/0x3a0 [ 217.126347][T11220] idr_get_free+0x2b3/0xa70 [ 217.126391][T11220] idr_alloc_u32+0x159/0x2d0 [ 217.126426][T11220] ? __pfx_idr_alloc_u32+0x10/0x10 [ 217.126459][T11220] ? do_raw_spin_lock+0x121/0x290 [ 217.126496][T11220] idr_alloc_cyclic+0x9b/0x1b0 [ 217.126533][T11220] bpf_map_alloc_id+0x40/0xe0 [ 217.126573][T11220] map_create+0x1056/0x14d0 [ 217.126609][T11220] ? security_bpf+0x7e/0x300 [ 217.126642][T11220] __sys_bpf+0x60f/0x870 [ 217.126673][T11220] ? __pfx___sys_bpf+0x10/0x10 [ 217.126716][T11220] ? ksys_write+0x22a/0x250 [ 217.126749][T11220] ? __pfx_ksys_write+0x10/0x10 [ 217.126788][T11220] __x64_sys_bpf+0x7c/0x90 [ 217.126815][T11220] do_syscall_64+0xfa/0x3b0 [ 217.126845][T11220] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.126874][T11220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.126896][T11220] ? clear_bhb_loop+0x60/0xb0 [ 217.126924][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.126945][T11220] RIP: 0033:0x7faf4b58ebe9 [ 217.126964][T11220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.126983][T11220] RSP: 002b:00007faf4c3b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.127007][T11220] RAX: ffffffffffffffda RBX: 00007faf4b7b5fa0 RCX: 00007faf4b58ebe9 [ 217.127023][T11220] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 217.127037][T11220] RBP: 00007faf4c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 217.127051][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.127063][T11220] R13: 00007faf4b7b6038 R14: 00007faf4b7b5fa0 R15: 00007fffcfdb4d98 [ 217.127099][T11220] [ 218.070393][T11260] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 218.352098][T11277] netlink: 'syz.3.1538': attribute type 6 has an invalid length. [ 218.582423][T11289] NCSI netlink: No device for ifindex 0 [ 218.644657][T11297] Bluetooth: MGMT ver 1.23 [ 218.651672][T11283] 8021q: adding VLAN 0 to HW filter on device bond16 [ 218.749936][T11295] bond16: (slave veth9): Enslaving as an active interface with a down link [ 218.808054][T11283] veth0_to_bond: left promiscuous mode [ 218.820581][T11283] bond14: (slave veth0_to_bond): Releasing active interface [ 218.847696][T11283] bond14: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 218.893921][T11283] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 219.157210][ T6986] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.199355][ T6986] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.218789][ T6986] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.238250][T11325] __nla_validate_parse: 25 callbacks suppressed [ 219.238271][T11325] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1556'. [ 219.256022][ T6986] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.574366][T11341] syz.3.1560 uses old SIOCAX25GETINFO [ 219.756828][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1565'. [ 219.776997][T11351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1565'. [ 219.944488][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 220.021759][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 220.026050][ T5188] Bluetooth: hci4: command 0x0405 tx timeout [ 220.115186][T11367] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1572'. [ 220.452130][T11386] validate_nla: 1 callbacks suppressed [ 220.452151][T11386] netlink: 'syz.2.1578': attribute type 5 has an invalid length. [ 220.502070][T11386] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1578'. [ 220.586753][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 220.627467][T11392] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 220.716463][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 220.741611][T11392] 8021q: adding VLAN 0 to HW filter on device bond20 [ 220.823977][T11407] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1585'. [ 220.834683][T11394] bond20: (slave geneve3): making interface the new active one [ 220.897216][T11394] bond20: (slave geneve3): Enslaving as an active interface with an up link [ 220.953712][ T7000] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 6081 - 0 [ 220.974309][ T7000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.011786][ T7000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.057698][ T7000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.834027][T11462] netlink: 'syz.0.1602': attribute type 10 has an invalid length. [ 221.871969][T11462] bridge_slave_1: left allmulticast mode [ 221.917119][T11462] bridge_slave_1: left promiscuous mode [ 221.942733][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.965805][T11462] bridge_slave_1: entered promiscuous mode [ 221.972406][T11462] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 221.993859][T11464] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 222.011923][T11464] vxlan1: entered promiscuous mode [ 222.020323][T11464] ip6tnl2: entered promiscuous mode [ 222.028026][T11467] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 222.043209][ T3607] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.063748][ T3607] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.083990][ T3607] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.111049][ T3607] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.413562][T11495] lo: left promiscuous mode [ 222.431978][T11495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.675209][T11508] veth0_to_bond: entered promiscuous mode [ 222.705037][T11508] bridge4: entered promiscuous mode [ 222.746263][T11508] geneve2: entered promiscuous mode [ 222.779118][T11508] bond16: entered promiscuous mode [ 222.807470][T11508] veth8: entered promiscuous mode [ 222.827496][T11508] veth9: entered promiscuous mode [ 222.857296][T11508] bond19: entered promiscuous mode [ 222.896194][T11508] 8: entered promiscuous mode [ 222.901104][T11508] vxlan0: entered promiscuous mode [ 223.096816][T11508] ipvlan2: entered promiscuous mode [ 223.136567][T11508] bond20: entered promiscuous mode [ 223.151058][T11508] geneve3: entered promiscuous mode [ 223.180046][T11511] lo: entered promiscuous mode [ 223.197595][T11511] bridge_slave_1: entered promiscuous mode [ 223.219698][T11511] veth0_to_bond: entered promiscuous mode [ 223.244602][T11511] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 223.282079][T11511] pimreg3: entered promiscuous mode [ 223.318186][T11511] bond8: entered promiscuous mode [ 223.342788][T11511] veth8: entered promiscuous mode [ 223.353277][T11511] veth9: entered promiscuous mode [ 223.364855][T11511] bond9: entered promiscuous mode [ 223.381903][T11511] vxcan2: entered promiscuous mode [ 223.402696][T11511] vxcan3: entered promiscuous mode [ 223.409293][T11511] bond10: entered promiscuous mode [ 223.414551][T11511] bond11: entered promiscuous mode [ 223.421344][T11511] bond12: entered promiscuous mode [ 223.428324][T11511] mac80211_hwsim hwsim26 wlan2: entered promiscuous mode [ 223.436169][T11511] mac80211_hwsim hwsim27 wlan3: entered promiscuous mode [ 223.443473][T11511] bond13: entered promiscuous mode [ 223.450644][T11511] vxlan1: entered promiscuous mode [ 223.459291][T11511] bond14: entered promiscuous mode [ 223.466613][T11511] veth10: entered promiscuous mode [ 223.472107][T11511] veth11: entered promiscuous mode [ 223.478449][T11511] ip6tnl2: entered promiscuous mode [ 223.484022][T11511] bond15: entered promiscuous mode [ 223.489703][T11511] gretap2: entered promiscuous mode [ 223.498413][T11511] mac80211_hwsim hwsim30 wlan4: entered promiscuous mode [ 223.506259][T11511] bond16: entered promiscuous mode [ 223.511622][T11511] vcan1: entered promiscuous mode [ 223.518791][T11511] bond17: entered promiscuous mode [ 223.525812][T11511] gre2: entered promiscuous mode [ 223.575137][T11511] ipvlan0: entered promiscuous mode [ 223.582550][T11511] mac80211_hwsim hwsim33 wlan5: entered promiscuous mode [ 223.603233][ T7000] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.611543][ T7000] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.624403][ T7000] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.673053][ T7000] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.708666][ T7000] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.729294][ T7000] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.760496][ T7000] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.978523][T11543] netlink: 'syz.0.1626': attribute type 5 has an invalid length. [ 224.179614][T11562] netlink: 'syz.2.1633': attribute type 10 has an invalid length. [ 224.448532][T11585] macvlan2: entered promiscuous mode [ 224.454199][T11585] macvlan2: entered allmulticast mode [ 224.592831][T11591] netlink: 'syz.3.1642': attribute type 4 has an invalid length. [ 224.715498][T11599] netlink: 'syz.4.1644': attribute type 18 has an invalid length. [ 225.032142][T11627] __nla_validate_parse: 15 callbacks suppressed [ 225.032166][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 225.101010][T11626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1650'. [ 225.318839][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 225.393363][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 225.634947][T11660] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 225.775371][T11660] 8021q: adding VLAN 0 to HW filter on device bond13 [ 225.789279][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'. [ 225.810635][T11678] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 225.819725][T11678] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1663'. [ 225.834436][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1664'. [ 225.907839][T11676] bond13: (slave veth19): Enslaving as an active interface with a down link [ 225.944401][T11660] veth0_to_bond: left promiscuous mode [ 226.008057][T11660] bond12: (slave veth0_to_bond): Releasing active interface [ 226.048968][T11660] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 226.054633][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1668'. [ 226.260820][T11698] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1670'. [ 226.282241][T11698] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1670'. [ 226.467429][T11708] netem: change failed [ 226.538174][T11706] bridge_slave_0: default FDB implementation only supports local addresses [ 227.375429][T11758] netlink: 'syz.3.1689': attribute type 27 has an invalid length. [ 227.410423][T11759] netlink: 'syz.3.1689': attribute type 27 has an invalid length. [ 231.467319][ T55] block nbd0: Possible stuck request ffff888024f2e000: control (read@0,4096B). Runtime 120 seconds [ 231.995843][ T5238] udevd[5238]: worker [5919] /devices/virtual/block/nbd0 is taking a long time [ 247.340593][T11826] __nla_validate_parse: 6 callbacks suppressed [ 247.340614][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 247.395402][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 247.414666][T11834] netlink: 'syz.4.1707': attribute type 4 has an invalid length. [ 247.468211][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 247.518517][ T7711] IPVS: starting estimator thread 0... [ 247.538774][T11839] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1709'. [ 247.617086][T11838] IPVS: using max 25 ests per chain, 60000 per kthread [ 247.770288][T11843] raw_sendmsg: syz.4.1710 forgot to set AF_INET. Fix it! [ 248.004821][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 248.368632][T11868] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1716'. [ 248.491497][T11881] ip6erspan0: entered promiscuous mode [ 248.709618][T11896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1722'. [ 249.139409][T11914] veth0_to_bond: entered promiscuous mode [ 249.168898][T11914] gre1: entered promiscuous mode [ 249.183705][T11914] bond13: entered promiscuous mode [ 249.191084][T11914] veth18: entered promiscuous mode [ 249.217391][T11914] veth19: entered promiscuous mode [ 249.383899][T11929] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1731'. [ 249.397016][T11918] bond18: entered allmulticast mode [ 249.402637][T11918] bridge0: port 1(bond18) entered blocking state [ 249.410519][T11918] bridge0: port 1(bond18) entered disabled state [ 249.424235][T11918] bond18: entered promiscuous mode [ 249.619856][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1734'. [ 249.633163][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1734'. [ 249.810726][T11944] vlan3: entered allmulticast mode [ 249.827694][T11944] bridge0: entered allmulticast mode [ 249.838258][T11944] bridge0: port 1(vlan3) entered blocking state [ 249.856517][T11944] bridge0: port 1(vlan3) entered disabled state [ 250.150930][T11963] !: renamed from dummy0 [ 250.295157][T11965] bond17: entered allmulticast mode [ 250.301460][T11965] bridge0: port 1(bond17) entered blocking state [ 250.308421][T11965] bridge0: port 1(bond17) entered disabled state [ 250.323173][T11965] bond17: entered promiscuous mode [ 250.459586][T11982] Driver unsupported XDP return value 0 on prog (id 350) dev N/A, expect packet loss! [ 250.830566][T12000] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 251.171853][T12019] bond21: entered allmulticast mode [ 251.177799][T12019] bridge0: port 2(bond21) entered blocking state [ 251.184817][T12019] bridge0: port 2(bond21) entered disabled state [ 251.199827][T12019] bond21: entered promiscuous mode [ 251.303945][T12035] bridge: RTM_NEWNEIGH with invalid ether address [ 251.576509][T12047] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 251.608373][T12050] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 251.742597][T12050] 8021q: adding VLAN 0 to HW filter on device bond18 [ 251.805090][T12057] bond18: (slave veth11): Enslaving as an active interface with a down link [ 251.834372][T12058] 8021q: adding VLAN 0 to HW filter on device bond14 [ 251.846773][T12063] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 251.911002][T12061] bond16: (slave veth0_to_bond): Releasing active interface [ 251.927570][T12061] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 252.146289][T12077] netlink: 'syz.2.1776': attribute type 1 has an invalid length. [ 252.312932][T12091] vlan2: entered promiscuous mode [ 252.351115][T12096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.544895][T12107] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 252.710037][T12107] 8021q: adding VLAN 0 to HW filter on device bond15 [ 252.721102][T12118] netlink: 'syz.1.1786': attribute type 9 has an invalid length. [ 252.739695][T12119] tipc: Enabled bearer , priority 20 [ 252.801931][T12112] bond15: (slave veth13): Enslaving as an active interface with a down link [ 252.812773][T12115] veth0_to_bond: left promiscuous mode [ 252.827811][T12115] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 252.841202][T12128] sctp: [Deprecated]: syz.0.1788 (pid 12128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.841202][T12128] Use struct sctp_sack_info instead [ 252.889346][T12130] __nla_validate_parse: 16 callbacks suppressed [ 252.889368][T12130] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1789'. [ 252.921140][T12120] tipc: Enabling of bearer rejected, already enabled [ 252.933365][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 253.363997][T12159] netlink: 'syz.3.1798': attribute type 7 has an invalid length. [ 253.396962][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1800'. [ 253.618833][T12174] netlink: 'syz.2.1803': attribute type 6 has an invalid length. [ 253.662330][T12178] netlink: 'syz.0.1805': attribute type 83 has an invalid length. [ 253.759875][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 253.841609][T12185] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 253.861587][T12180] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1806'. [ 253.870479][T12189] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 253.883213][T12189] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 253.886056][T12185] netlink: 'syz.4.1810': attribute type 5 has an invalid length. [ 253.903918][T12194] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 253.926798][T12180] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1806'. [ 253.966771][T12198] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1807'. [ 254.005773][T12180] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1806'. [ 254.351762][T12215] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1814'. [ 254.407968][T12215] IPv6: sit2: Disabled Multicast RS [ 254.424376][T12215] sit2: entered allmulticast mode [ 254.552408][T12226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1818'. [ 254.610909][T12230] netlink: 'syz.3.1817': attribute type 8 has an invalid length. [ 254.797724][T12237] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 254.893419][T12242] FAULT_INJECTION: forcing a failure. [ 254.893419][T12242] name failslab, interval 1, probability 0, space 0, times 0 [ 254.908970][T12242] CPU: 0 UID: 0 PID: 12242 Comm: syz.1.1823 Not tainted syzkaller #0 PREEMPT(full) [ 254.909015][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.909029][T12242] Call Trace: [ 254.909038][T12242] [ 254.909047][T12242] dump_stack_lvl+0x189/0x250 [ 254.909080][T12242] ? __pfx____ratelimit+0x10/0x10 [ 254.909110][T12242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.909136][T12242] ? __pfx__printk+0x10/0x10 [ 254.909173][T12242] ? __pfx___might_resched+0x10/0x10 [ 254.909199][T12242] should_fail_ex+0x414/0x560 [ 254.909232][T12242] should_failslab+0xa8/0x100 [ 254.909267][T12242] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 254.909298][T12242] ? __alloc_skb+0x112/0x2d0 [ 254.909334][T12242] __alloc_skb+0x112/0x2d0 [ 254.909370][T12242] netlink_sendmsg+0x5c6/0xb30 [ 254.909411][T12242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.909447][T12242] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.909481][T12242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.909505][T12242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.909537][T12242] __sock_sendmsg+0x21c/0x270 [ 254.909567][T12242] ____sys_sendmsg+0x505/0x830 [ 254.909595][T12242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.909627][T12242] ? import_iovec+0x74/0xa0 [ 254.909656][T12242] ___sys_sendmsg+0x21f/0x2a0 [ 254.909680][T12242] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.909741][T12242] ? __fget_files+0x2a/0x420 [ 254.909773][T12242] ? __fget_files+0x3a0/0x420 [ 254.909816][T12242] __x64_sys_sendmsg+0x19b/0x260 [ 254.909841][T12242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.909874][T12242] ? __pfx_ksys_write+0x10/0x10 [ 254.909899][T12242] ? rcu_is_watching+0x15/0xb0 [ 254.909927][T12242] ? do_syscall_64+0xbe/0x3b0 [ 254.909962][T12242] do_syscall_64+0xfa/0x3b0 [ 254.909999][T12242] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.910027][T12242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.910048][T12242] ? clear_bhb_loop+0x60/0xb0 [ 254.910074][T12242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.910095][T12242] RIP: 0033:0x7f087eb8ebe9 [ 254.910115][T12242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.910134][T12242] RSP: 002b:00007f087f9d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.910156][T12242] RAX: ffffffffffffffda RBX: 00007f087edb5fa0 RCX: 00007f087eb8ebe9 [ 254.910171][T12242] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 254.910185][T12242] RBP: 00007f087f9d8090 R08: 0000000000000000 R09: 0000000000000000 [ 254.910198][T12242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.910210][T12242] R13: 00007f087edb6038 R14: 00007f087edb5fa0 R15: 00007ffd0a814c68 [ 254.910244][T12242] [ 256.715450][T12295] netlink: 'syz.0.1838': attribute type 11 has an invalid length. [ 256.981789][T12300] bridge0: port 7(bond15) entered blocking state [ 257.002411][T12300] bridge0: port 7(bond15) entered disabled state [ 257.015147][T12300] bond15: entered allmulticast mode [ 257.036961][T12300] bond15: entered promiscuous mode [ 257.707078][T12339] FAULT_INJECTION: forcing a failure. [ 257.707078][T12339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.748528][T12339] CPU: 1 UID: 0 PID: 12339 Comm: syz.4.1849 Not tainted syzkaller #0 PREEMPT(full) [ 257.748558][T12339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.748572][T12339] Call Trace: [ 257.748581][T12339] [ 257.748591][T12339] dump_stack_lvl+0x189/0x250 [ 257.748622][T12339] ? __pfx____ratelimit+0x10/0x10 [ 257.748652][T12339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.748678][T12339] ? __pfx__printk+0x10/0x10 [ 257.748708][T12339] ? __might_fault+0xb0/0x130 [ 257.748752][T12339] should_fail_ex+0x414/0x560 [ 257.748794][T12339] _copy_from_iter+0x1db/0x16f0 [ 257.748820][T12339] ? rcu_is_watching+0x15/0xb0 [ 257.748843][T12339] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 257.748875][T12339] ? __pfx__copy_from_iter+0x10/0x10 [ 257.748906][T12339] ? __build_skb_around+0x257/0x3e0 [ 257.748942][T12339] ? netlink_sendmsg+0x642/0xb30 [ 257.748972][T12339] ? skb_put+0x11b/0x210 [ 257.749009][T12339] netlink_sendmsg+0x6b2/0xb30 [ 257.749052][T12339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.749088][T12339] ? aa_sock_msg_perm+0xf1/0x1d0 [ 257.749124][T12339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.749147][T12339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.749180][T12339] __sock_sendmsg+0x21c/0x270 [ 257.749210][T12339] ____sys_sendmsg+0x505/0x830 [ 257.749239][T12339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.749271][T12339] ? import_iovec+0x74/0xa0 [ 257.749299][T12339] ___sys_sendmsg+0x21f/0x2a0 [ 257.749323][T12339] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.749386][T12339] ? __fget_files+0x2a/0x420 [ 257.749417][T12339] ? __fget_files+0x3a0/0x420 [ 257.749462][T12339] __x64_sys_sendmsg+0x19b/0x260 [ 257.749487][T12339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.749520][T12339] ? __pfx_ksys_write+0x10/0x10 [ 257.749546][T12339] ? rcu_is_watching+0x15/0xb0 [ 257.749573][T12339] ? do_syscall_64+0xbe/0x3b0 [ 257.749607][T12339] do_syscall_64+0xfa/0x3b0 [ 257.749637][T12339] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.749666][T12339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.749687][T12339] ? clear_bhb_loop+0x60/0xb0 [ 257.749713][T12339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.749734][T12339] RIP: 0033:0x7faf4b58ebe9 [ 257.749753][T12339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.749779][T12339] RSP: 002b:00007faf4c3b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.749801][T12339] RAX: ffffffffffffffda RBX: 00007faf4b7b5fa0 RCX: 00007faf4b58ebe9 [ 257.749817][T12339] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 257.749830][T12339] RBP: 00007faf4c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 257.749844][T12339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.749856][T12339] R13: 00007faf4b7b6038 R14: 00007faf4b7b5fa0 R15: 00007fffcfdb4d98 [ 257.749890][T12339] [ 258.087094][T12344] bridge0: port 2(bond19) entered blocking state [ 258.093702][T12344] bridge0: port 2(bond19) entered disabled state [ 258.101283][T12344] bond19: entered allmulticast mode [ 258.112773][T12344] bond19: entered promiscuous mode [ 258.150109][T12352] __nla_validate_parse: 10 callbacks suppressed [ 258.150131][T12352] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1854'. [ 258.203203][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 258.226624][T12352] netlink: zone id is out of range [ 258.231862][T12352] netlink: get zone limit has 8 unknown bytes [ 258.553309][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'. [ 258.624714][T12376] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 258.644043][T12377] netlink: 'syz.2.1861': attribute type 1 has an invalid length. [ 258.664548][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 258.701640][T12380] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1863'. [ 258.706364][T12376] 8021q: adding VLAN 0 to HW filter on device bond20 [ 258.737320][T12382] bond20: (slave veth13): Enslaving as an active interface with a down link [ 258.751769][T12376] veth0_to_bond: left promiscuous mode [ 258.762017][T12376] bond20: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 258.901586][T12386] pim6reg1: entered promiscuous mode [ 258.907565][T12386] pim6reg1: entered allmulticast mode [ 259.121302][T12392] bond16 (unregistering): Released all slaves [ 259.269892][T12405] netlink: 1104 bytes leftover after parsing attributes in process `syz.1.1869'. [ 259.339153][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 259.357603][T12408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1871'. [ 259.393808][T12410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1871'. [ 259.472140][T12408] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1871'. [ 259.506797][T12411] IPVS: persistence engine module ip_vs_pe_À not found [ 259.519506][T12420] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 259.546237][T12422] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 259.611161][T12408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.642909][T12422] 8021q: adding VLAN 0 to HW filter on device bond21 [ 259.709238][T12419] bond21: (slave veth15): Enslaving as an active interface with a down link [ 260.539823][T12470] syzkaller1: entered promiscuous mode [ 260.545364][T12470] syzkaller1: entered allmulticast mode [ 260.834083][T12482] tipc: Enabled bearer , priority 0 [ 260.857231][T12482] syzkaller0: entered promiscuous mode [ 260.883688][T12482] syzkaller0: entered allmulticast mode [ 260.911150][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.917900][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.459057][T12498] 8021q: adding VLAN 0 to HW filter on device bond16 [ 261.546012][ T55] block nbd0: Possible stuck request ffff888024f2e000: control (read@0,4096B). Runtime 150 seconds [ 261.604165][T12481] tipc: Resetting bearer [ 261.661701][T12481] tipc: Disabling bearer [ 261.721072][T12522] pim6reg1: entered promiscuous mode [ 261.744138][T12522] pim6reg1: entered allmulticast mode [ 261.996484][T12531] netlink: 'syz.1.1901': attribute type 10 has an invalid length. [ 262.005219][T12531] team0: Device hsr_slave_0 failed to register rx_handler [ 262.760427][T12570] tipc: Enabled bearer , priority 0 [ 262.843099][T12570] tipc: Resetting bearer [ 262.916453][T12568] tipc: Disabling bearer [ 263.132330][T12588] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 263.153225][T12587] gtp0: entered promiscuous mode [ 263.156094][T12588] netlink: 'syz.4.1923': attribute type 2 has an invalid length. [ 263.161822][T12587] gtp0: entered allmulticast mode [ 263.186114][T12588] __nla_validate_parse: 14 callbacks suppressed [ 263.186135][T12588] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.1923'. [ 263.222395][T12584] tipc: New replicast peer: 255.255.255.255 [ 263.229337][T12584] tipc: Enabled bearer , priority 20 [ 263.236458][T12591] tipc: Enabling of bearer rejected, already enabled [ 264.080482][T12615] netlink: 'syz.4.1931': attribute type 2 has an invalid length. [ 264.632021][T12651] netlink: 'syz.2.1941': attribute type 7 has an invalid length. [ 264.721559][T12651] : entered promiscuous mode [ 264.797932][T12657] : renamed from hsr0 [ 264.845888][T12665] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1943'. [ 265.110088][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 265.144957][T12677] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 265.179069][T12677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.231141][T12677] ipvlan1: left promiscuous mode [ 265.469344][T12690] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1954'. [ 265.740420][T12707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1958'. [ 265.748252][T12709] erspan0: entered allmulticast mode [ 265.823531][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1960'. [ 265.845997][T12708] netlink: 'syz.0.1960': attribute type 49 has an invalid length. [ 266.104484][T12730] netlink: 'syz.1.1965': attribute type 1 has an invalid length. [ 266.123318][T12730] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1965'. [ 266.157392][T12732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1967'. [ 266.175314][T12730] : entered promiscuous mode [ 266.323156][T12738] 8021q: VLANs not supported on tunl0 [ 266.331263][T12738] 8021q: VLANs not supported on tunl0 [ 266.594975][T12752] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1974'. [ 266.711044][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 266.718762][T12752] sctp: [Deprecated]: syz.4.1974 (pid 12752) Use of int in maxseg socket option. [ 266.718762][T12752] Use struct sctp_assoc_value instead [ 266.726179][T12758] netlink: 'syz.0.1977': attribute type 20 has an invalid length. [ 266.802786][ T3607] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 266.802893][T12758] netlink: 'syz.0.1977': attribute type 20 has an invalid length. [ 266.821583][ T3607] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.838922][ T6998] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.860011][ T6998] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.946183][T12766] netlink: 'syz.3.1982': attribute type 30 has an invalid length. [ 267.451707][T12800] sctp: [Deprecated]: syz.0.1994 (pid 12800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.451707][T12800] Use struct sctp_sack_info instead [ 267.490315][T12801] bond14: entered promiscuous mode [ 267.507215][T12801] gre2: entered promiscuous mode [ 267.513396][T12801] bond16: entered promiscuous mode [ 267.622369][T12810] batadv2: entered allmulticast mode [ 267.763156][T12820] netlink: 'syz.3.2000': attribute type 3 has an invalid length. [ 267.851118][T12824] netlink: 'syz.0.2002': attribute type 7 has an invalid length. [ 267.863395][T12826] netlink: 'syz.0.2002': attribute type 7 has an invalid length. [ 268.220988][T12847] FAULT_INJECTION: forcing a failure. [ 268.220988][T12847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.260131][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.0.2007 Not tainted syzkaller #0 PREEMPT(full) [ 268.260161][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.260173][T12847] Call Trace: [ 268.260182][T12847] [ 268.260191][T12847] dump_stack_lvl+0x189/0x250 [ 268.260239][T12847] ? __pfx____ratelimit+0x10/0x10 [ 268.260270][T12847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.260297][T12847] ? __pfx__printk+0x10/0x10 [ 268.260328][T12847] ? __might_fault+0xb0/0x130 [ 268.260370][T12847] should_fail_ex+0x414/0x560 [ 268.260410][T12847] _copy_from_user+0x2d/0xb0 [ 268.260441][T12847] ___sys_sendmsg+0x158/0x2a0 [ 268.260467][T12847] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.260524][T12847] ? __fget_files+0x2a/0x420 [ 268.260553][T12847] ? __fget_files+0x3a0/0x420 [ 268.260594][T12847] __x64_sys_sendmsg+0x19b/0x260 [ 268.260617][T12847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.260648][T12847] ? __pfx_ksys_write+0x10/0x10 [ 268.260674][T12847] ? rcu_is_watching+0x15/0xb0 [ 268.260718][T12847] ? do_syscall_64+0xbe/0x3b0 [ 268.260754][T12847] do_syscall_64+0xfa/0x3b0 [ 268.260784][T12847] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.260824][T12847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.260862][T12847] ? clear_bhb_loop+0x60/0xb0 [ 268.260889][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.260910][T12847] RIP: 0033:0x7fc2ca58ebe9 [ 268.260929][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.260948][T12847] RSP: 002b:00007fc2cb485038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.260971][T12847] RAX: ffffffffffffffda RBX: 00007fc2ca7b5fa0 RCX: 00007fc2ca58ebe9 [ 268.260987][T12847] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 268.261001][T12847] RBP: 00007fc2cb485090 R08: 0000000000000000 R09: 0000000000000000 [ 268.261020][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.261033][T12847] R13: 00007fc2ca7b6038 R14: 00007fc2ca7b5fa0 R15: 00007ffc917a9c48 [ 268.261068][T12847] [ 268.582680][T12852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.876422][T12866] ip6gre0: Master is either lo or non-ether device [ 269.126039][T12878] syzkaller0: create flow: hash 3762764828 index 1 [ 269.482975][T12894] FAULT_INJECTION: forcing a failure. [ 269.482975][T12894] name failslab, interval 1, probability 0, space 0, times 0 [ 269.496926][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.4.2022 Not tainted syzkaller #0 PREEMPT(full) [ 269.496969][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.496983][T12894] Call Trace: [ 269.496992][T12894] [ 269.497001][T12894] dump_stack_lvl+0x189/0x250 [ 269.497034][T12894] ? __pfx____ratelimit+0x10/0x10 [ 269.497064][T12894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.497090][T12894] ? __pfx__printk+0x10/0x10 [ 269.497127][T12894] ? __pfx___might_resched+0x10/0x10 [ 269.497154][T12894] should_fail_ex+0x414/0x560 [ 269.497187][T12894] should_failslab+0xa8/0x100 [ 269.497221][T12894] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 269.497252][T12894] ? __alloc_skb+0x112/0x2d0 [ 269.497288][T12894] __alloc_skb+0x112/0x2d0 [ 269.497324][T12894] netlink_sendmsg+0x5c6/0xb30 [ 269.497365][T12894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.497401][T12894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 269.497437][T12894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.497461][T12894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.497495][T12894] __sock_sendmsg+0x21c/0x270 [ 269.497526][T12894] ____sys_sendmsg+0x505/0x830 [ 269.497554][T12894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.497585][T12894] ? import_iovec+0x74/0xa0 [ 269.497613][T12894] ___sys_sendmsg+0x21f/0x2a0 [ 269.497638][T12894] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.497701][T12894] ? __fget_files+0x2a/0x420 [ 269.497733][T12894] ? __fget_files+0x3a0/0x420 [ 269.497777][T12894] __x64_sys_sendmsg+0x19b/0x260 [ 269.497802][T12894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.497834][T12894] ? __pfx_ksys_write+0x10/0x10 [ 269.497861][T12894] ? rcu_is_watching+0x15/0xb0 [ 269.497888][T12894] ? do_syscall_64+0xbe/0x3b0 [ 269.497924][T12894] do_syscall_64+0xfa/0x3b0 [ 269.497961][T12894] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.497990][T12894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.498011][T12894] ? clear_bhb_loop+0x60/0xb0 [ 269.498038][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.498059][T12894] RIP: 0033:0x7faf4b58ebe9 [ 269.498078][T12894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.498098][T12894] RSP: 002b:00007faf4c3b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.498120][T12894] RAX: ffffffffffffffda RBX: 00007faf4b7b5fa0 RCX: 00007faf4b58ebe9 [ 269.498156][T12894] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 269.498169][T12894] RBP: 00007faf4c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 269.498182][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.498194][T12894] R13: 00007faf4b7b6038 R14: 00007faf4b7b5fa0 R15: 00007fffcfdb4d98 [ 269.498228][T12894] [ 269.854724][T12865] syzkaller0: delete flow: hash 3762764828 index 1 [ 270.052125][T12908] __nla_validate_parse: 14 callbacks suppressed [ 270.052144][T12908] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2027'. [ 271.610519][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 271.635941][T12925] tipc: Enabled bearer , priority 10 [ 271.829241][T12939] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2036'. [ 271.848730][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 271.873465][T12940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2033'. [ 271.908502][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 271.968541][T12943] tipc: Enabled bearer , priority 0 [ 272.111612][T12951] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 272.121461][T12951] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2041'. [ 272.143608][T12951] dvmrp0: entered allmulticast mode [ 272.479585][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2047'. [ 272.528479][T12970] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 272.637795][T12977] validate_nla: 2 callbacks suppressed [ 272.637816][T12977] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 272.909713][T12994] mac80211_hwsim hwsim37 wlan2: entered promiscuous mode [ 272.934771][T12994] ip6tnl3: entered promiscuous mode [ 273.042022][ T7712] tipc: Node number set to 883961674 [ 273.142641][T13007] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 273.151448][T13006] netlink: 'syz.0.2059': attribute type 9 has an invalid length. [ 273.167914][T13007] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 273.178983][T13006] netlink: 'syz.0.2059': attribute type 9 has an invalid length. [ 273.313381][T13016] lo: left promiscuous mode [ 273.319971][T13016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.381744][T13019] netlink: 'syz.2.2063': attribute type 1 has an invalid length. [ 273.411742][T13019] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2063'. [ 273.491439][T13019] team0: Mode changed to "loadbalance" [ 273.621361][T13031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2067'. [ 273.683855][T13031] 8021q: VLANs not supported on ip6gre0 [ 274.096537][T13065] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 274.248406][T13065] 8021q: adding VLAN 0 to HW filter on device bond22 [ 274.505683][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 274.665172][T13088] bridge0: port 8(bond17) entered blocking state [ 274.672105][T13088] bridge0: port 8(bond17) entered disabled state [ 274.679653][T13088] bond17: entered allmulticast mode [ 274.688156][T13088] bond17: entered promiscuous mode [ 274.797979][T13097] netlink: zone id is out of range [ 274.803172][T13097] netlink: zone id is out of range [ 274.808722][T13097] netlink: zone id is out of range [ 274.813970][T13097] netlink: zone id is out of range [ 274.832183][T13097] netlink: zone id is out of range [ 274.842320][T13097] netlink: get zone limit has 8 unknown bytes [ 275.515918][T13128] __nla_validate_parse: 5 callbacks suppressed [ 275.515940][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2097'. [ 275.678254][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 275.857793][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2105'. [ 275.991284][T13162] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2109'. [ 276.588610][T13174] netlink: 'syz.2.2114': attribute type 11 has an invalid length. [ 276.668219][T13174] netlink: 'syz.2.2114': attribute type 11 has an invalid length. [ 276.781606][T13208] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 276.793814][T13208] batman_adv: batadv0: Adding interface: wlan1 [ 276.803705][T13208] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.832478][T13208] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 276.864740][T13213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2123'. [ 276.900184][T13213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2123'. [ 277.269063][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 277.421987][T13230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2130'. [ 277.438577][T13231] vlan0: entered allmulticast mode [ 277.442786][T13234] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2130'. [ 277.444497][T13231] bridge0: entered allmulticast mode [ 277.460232][T13231] bridge3: port 1(vlan0) entered blocking state [ 277.471939][T13231] bridge3: port 1(vlan0) entered disabled state [ 277.481475][T13231] vlan0: entered promiscuous mode [ 277.490560][T13237] mac80211_hwsim hwsim35 wlan6: entered promiscuous mode [ 277.499639][T13237] ipip0: entered promiscuous mode [ 277.507540][T13237] ip6gretap1: entered promiscuous mode [ 277.516826][T13237] @: entered promiscuous mode [ 277.529579][T13237] macvlan2: entered promiscuous mode [ 277.535382][T13237] macvlan3: entered promiscuous mode [ 277.550070][T13237] bond22: entered promiscuous mode [ 277.568565][T13237] ip6tnl3: entered promiscuous mode [ 277.600072][ T6980] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.631152][ T6980] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.671213][ T6980] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.693364][ T6980] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.811574][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 277.983192][T13265] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 278.814190][ T6995] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.846536][ T6995] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.866525][ T6995] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.875298][ T6995] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.876998][T13368] IPVS: Error connecting to the multicast addr [ 280.129213][T13380] netlink: 'syz.3.2173': attribute type 1 has an invalid length. [ 280.165392][T13380] 8021q: adding VLAN 0 to HW filter on device bond18 [ 280.232946][T13380] bond18: (slave veth21): Enslaving as an active interface with a down link [ 280.376844][T13384] bond18: (slave veth23): Enslaving as an active interface with a down link [ 280.942664][T13417] __nla_validate_parse: 10 callbacks suppressed [ 280.942687][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 281.028556][T13417] smc: net device bond0 applied user defined pnetid SYZ2 [ 281.058811][T13417] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2181'. [ 281.348946][T13433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2185'. [ 281.370345][T13417] smc: removing net device bond0 with user defined pnetid SYZ2 [ 281.387117][T13417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.399579][T13417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.410565][T13417] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 281.421069][T13417] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 281.431271][T13417] bond0 (unregistering): Released all slaves [ 281.685022][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 281.715283][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 281.882344][T13448] bond17 (unregistering): Released all slaves [ 282.003228][T13465] net_ratelimit: 1 callbacks suppressed [ 282.003252][T13465] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 282.091129][T13465] netlink: 'syz.3.2194': attribute type 2 has an invalid length. [ 282.272663][T13478] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2195'. [ 282.349808][T13488] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 282.357917][T13488] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 282.536255][T13496] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 282.580566][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 283.231872][T13507] ksmbd: Unknown IPC event: 3, ignore. [ 283.250081][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 283.276686][T13509] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 283.295831][T13509] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 283.381836][T13518] bridge0: port 3(bond22) entered blocking state [ 283.389259][T13518] bridge0: port 3(bond22) entered disabled state [ 283.396399][T13518] bond22: entered allmulticast mode [ 283.404990][T13518] bond22: entered promiscuous mode [ 283.649085][T13542] netlink: 'syz.1.2214': attribute type 10 has an invalid length. [ 283.693966][T13548] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2218'. [ 283.707544][T13547] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2218'. [ 283.878536][T13555] macsec2: entered promiscuous mode [ 283.896875][T13555] macsec2: entered allmulticast mode [ 284.926438][T13616] netlink: 'syz.2.2237': attribute type 10 has an invalid length. [ 284.956208][T13616] batadv0: left promiscuous mode [ 284.963162][T13616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.001871][T13616] batadv0: entered promiscuous mode [ 285.016659][T13616] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 285.353532][T13639] netlink: 'syz.4.2245': attribute type 6 has an invalid length. [ 285.400911][T13639] netlink: 'syz.4.2245': attribute type 6 has an invalid length. [ 285.839560][T13665] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 286.042294][T13675] __nla_validate_parse: 14 callbacks suppressed [ 286.042316][T13675] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2256'. [ 286.093175][T13675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.322765][T13679] svc: failed to register nfsdv3 RPC service (errno 111). [ 286.359557][T13679] svc: failed to register nfsaclv3 RPC service (errno 111). [ 286.459655][T13700] netlink: 'syz.2.2262': attribute type 10 has an invalid length. [ 286.473712][T13700] veth0_vlan: entered allmulticast mode [ 286.491206][T13700] team0: Device veth0_vlan failed to register rx_handler [ 286.869575][T13720] netlink: 'syz.3.2267': attribute type 2 has an invalid length. [ 286.954321][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 287.132128][T13738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2271'. [ 287.512941][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2275'. [ 287.663373][T13748] 8021q: adding VLAN 0 to HW filter on device bond19 [ 287.692262][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 287.747891][T13762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2279'. [ 288.079220][T13791] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 288.106464][T13791] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2285'. [ 288.138014][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 288.742766][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'. [ 288.774122][T13834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2298'. [ 288.785031][T13834] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 289.186031][T13810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.200220][T13810] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 289.239411][T13810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.251992][T13810] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 289.284498][T13810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.302192][T13810] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 289.334085][T13810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.346942][T13810] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 289.378320][T13810] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 289.390256][T13810] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 289.398696][T13810] CPU: 0 UID: 0 PID: 13810 Comm: syz.4.2292 Not tainted syzkaller #0 PREEMPT(full) [ 289.408075][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.418136][T13810] RIP: 0010:klist_remove+0x14a/0x340 [ 289.423455][T13810] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 8c b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 8c b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 289.443076][T13810] RSP: 0018:ffffc9001c18f820 EFLAGS: 00010202 [ 289.449156][T13810] RAX: 000000000000000b RBX: ffff888050d6bc00 RCX: 0000000000000000 [ 289.457131][T13810] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 289.465123][T13810] RBP: ffffc9001c18f908 R08: ffffffff8f89f843 R09: 1ffffffff1f13f08 [ 289.473120][T13810] R10: dffffc0000000000 R11: fffffbfff1f13f09 R12: 0000000000000000 [ 289.481105][T13810] R13: 1ffff1100b1baa8c R14: ffff888058dd5460 R15: dffffc0000000000 [ 289.489176][T13810] FS: 00007faf4c3b96c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 289.498137][T13810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.504737][T13810] CR2: 00007ffdc4833fa8 CR3: 0000000031b7a000 CR4: 00000000003526f0 [ 289.512719][T13810] Call Trace: [ 289.516005][T13810] [ 289.518946][T13810] ? __pfx_klist_remove+0x10/0x10 [ 289.523994][T13810] ? __pfx_kobject_move+0x10/0x10 [ 289.529037][T13810] ? get_device_parent+0x366/0x3a0 [ 289.534175][T13810] device_move+0x193/0x700 [ 289.538597][T13810] hci_conn_del_sysfs+0xb8/0x170 [ 289.543545][T13810] hci_conn_del+0x9b7/0xd60 [ 289.548070][T13810] hci_conn_hash_flush+0x191/0x230 [ 289.553189][T13810] hci_dev_close_sync+0xaef/0x1330 [ 289.558312][T13810] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 289.563871][T13810] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 289.569778][T13810] hci_dev_do_close+0x2f/0x90 [ 289.574472][T13810] hci_rfkill_set_block+0x21d/0x2e0 [ 289.579696][T13810] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 289.585421][T13810] rfkill_set_block+0x1d2/0x440 [ 289.590291][T13810] rfkill_fop_write+0x44b/0x570 [ 289.595176][T13810] ? __pfx_rfkill_fop_write+0x10/0x10 [ 289.600612][T13810] ? __pfx_security_file_permission+0x10/0x10 [ 289.606703][T13810] ? rw_verify_area+0x255/0x4d0 [ 289.611589][T13810] ? __lock_acquire+0xab9/0xd20 [ 289.616470][T13810] ? __pfx_rfkill_fop_write+0x10/0x10 [ 289.621876][T13810] vfs_write+0x27b/0xb30 [ 289.626149][T13810] ? __pfx_vfs_write+0x10/0x10 [ 289.631023][T13810] ? __fget_files+0x2a/0x420 [ 289.635646][T13810] ? __fget_files+0x2a/0x420 [ 289.640261][T13810] ? __fget_files+0x3a0/0x420 [ 289.644953][T13810] ? __fget_files+0x2a/0x420 [ 289.649563][T13810] ksys_write+0x145/0x250 [ 289.653926][T13810] ? __pfx_ksys_write+0x10/0x10 [ 289.658789][T13810] ? rcu_is_watching+0x15/0xb0 [ 289.663573][T13810] ? do_syscall_64+0xbe/0x3b0 [ 289.668273][T13810] do_syscall_64+0xfa/0x3b0 [ 289.672795][T13810] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.678009][T13810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.684111][T13810] ? clear_bhb_loop+0x60/0xb0 [ 289.688819][T13810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.694735][T13810] RIP: 0033:0x7faf4b58ebe9 [ 289.699163][T13810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.718780][T13810] RSP: 002b:00007faf4c3b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.727206][T13810] RAX: ffffffffffffffda RBX: 00007faf4b7b5fa0 RCX: 00007faf4b58ebe9 [ 289.735197][T13810] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 289.743174][T13810] RBP: 00007faf4b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 289.751151][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.759142][T13810] R13: 00007faf4b7b6038 R14: 00007faf4b7b5fa0 R15: 00007fffcfdb4d98 [ 289.767135][T13810] [ 289.770155][T13810] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 289.775200][T13810] ---[ end trace 0000000000000000 ]--- [ 289.781947][T13810] RIP: 0010:klist_remove+0x14a/0x340 [ 289.787746][T13810] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 8c b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 8c b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 289.867156][T13810] RSP: 0018:ffffc9001c18f820 EFLAGS: 00010202 [ 289.873728][T13810] RAX: 000000000000000b RBX: ffff888050d6bc00 RCX: 0000000000000000 [ 289.928185][T13810] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 289.944371][T13810] RBP: ffffc9001c18f908 R08: ffffffff8f89f843 R09: 1ffffffff1f13f08 [ 289.965900][T13810] R10: dffffc0000000000 R11: fffffbfff1f13f09 R12: 0000000000000000 [ 289.973954][T13810] R13: 1ffff1100b1baa8c R14: ffff888058dd5460 R15: dffffc0000000000 [ 290.015626][T13810] FS: 00007faf4c3b96c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 290.024623][T13810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.085911][T13810] CR2: 00007f087f9b6f98 CR3: 0000000031b7a000 CR4: 00000000003526f0 [ 290.093949][T13810] Kernel panic - not syncing: Fatal exception [ 290.100410][T13810] Kernel Offset: disabled [ 290.104735][T13810] Rebooting in 86400 seconds..