last executing test programs: 2.9036246s ago: executing program 0 (id=5511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) unshare(0x20000400) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.996635769s ago: executing program 0 (id=5519): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r0, 0xb15, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.932038441s ago: executing program 4 (id=5522): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xa, 0x6c}, [@mark={0xc, 0x15, {0x0, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r3, 0xef8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x89b1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.815872936s ago: executing program 0 (id=5525): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000181100009fd23bf9d2a0db0a9d74ce520699a008e0a9462f4752e72b2fe6b5f83191386a40c65fdd2bb7288af5fdfa3f78d2e080a464b211f2a838ecd5ef8348ea6a64fa79ea324e3b29ed539557fc86c7f7b1c1ba46d1789d7868f457e935358ee6c2e7f55bfb4cc463aa26cf1063a989cc536b353fc2c4c2a54cdeada9976dc2a2e5c78cb4c57230ab17dccf6e1bbe49d5748d4c8b0d2cfe", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) r0 = socket(0x2c, 0x3, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x48804) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x1fff}, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) 1.791912353s ago: executing program 3 (id=5526): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) 1.712587421s ago: executing program 3 (id=5527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0x40, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x0, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0x0, 0xa7, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc044}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[@ANYBLOB="58060000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="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"], 0x658}}, 0x200080d0) 1.712227554s ago: executing program 4 (id=5528): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r1, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000042) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@mcast2, @local, @mcast1, 0x4, 0x6, 0x0, 0x0, 0x4, 0x2200010, r3}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x180103, r3}) gettid() 1.679188537s ago: executing program 3 (id=5529): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x7, 0x0, 0x4, @private0, @local, 0x8, 0x700, 0x3, 0x3}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x9, '\x00', r1, r2, 0x5, 0x1, 0x2}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r6) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090426bd7000fcdbdf253700000010002e800c0004000202aaaaaaaaaaaa0c0006000100000001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8004) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000300)={'geneve0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x2, {0x2, 0x1e0}}, 0x18) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=@ipv6_delrule={0x4c, 0x21, 0x200, 0x70bd26, 0x25dfdbff, {0xa, 0x60, 0x10, 0x40, 0xc, 0x0, 0x0, 0x0, 0xa}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) recvmmsg(r9, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x20, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, r11, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r10) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb3, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in=@dev}}]}, 0x50}}, 0x0) getpeername(r5, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000440)=0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) 1.652968937s ago: executing program 4 (id=5530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a07038000000a0900010073797a30000000080c0006400000000000000002140001001100010000000000002000000000000a"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x2e, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e23, 0x4, 'rr\x00', 0xd, 0x5, 0x2f}, 0x2c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x10dc}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 1.008338512s ago: executing program 1 (id=5536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095000000000000007f446f5e2103071516491fbc"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 989.289296ms ago: executing program 2 (id=5537): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10}, 0x94) 920.522238ms ago: executing program 1 (id=5538): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000002010400000000000000000a00000004000180180003801400018008000100ac1e01010800020d50a853bd750b5a800c0002800500010000000000"], 0x40}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'veth0_macvtap\x00', {0x6}, 0x4}) (async) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x28, 0x1, 0x0) connect$packet(r4, &(0x7f0000000500)={0x28}, 0x14) (async, rerun: 32) connect$packet(r4, 0x0, 0x0) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc080) pipe(&(0x7f0000000600)) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r9, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0) (async, rerun: 64) pipe(0x0) (async, rerun: 64) socket(0x2, 0x5, 0x0) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 920.346221ms ago: executing program 2 (id=5539): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) 907.841562ms ago: executing program 1 (id=5540): unshare(0xc020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 890.091754ms ago: executing program 0 (id=5541): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) (rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) listen(r7, 0x9) (rerun: 64) listen(r6, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r8, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x5c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x4c}}, 0x0) 835.338294ms ago: executing program 2 (id=5542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000004e190000000000ecffffff00000000000000000000ef08842d3e16533c7d9bb1d65d61790fa4b283d90fd60512cabe64e4fead784fe1c3fa449f20baa7a1716dffffb730ee7d54fad0bbd261ae9d7de7d202d66686d6a93822d79b697d22800ad689e2d999390025e53b34fcd1d7238b4a035542dd4222e147cbd7440e4053e2b64a7da25f36c89f080c4da8ae"], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0xfaf}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$netlink(r3, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) 834.301618ms ago: executing program 1 (id=5543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20040000) (fail_nth: 10) 740.554226ms ago: executing program 3 (id=5544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004dc0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x4}}}, 0xb8}}, 0x0) 690.691381ms ago: executing program 4 (id=5545): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x6, &(0x7f0000000040)=[{@fixed}, {}, {@none}, {}, {}, {@fixed}]}) 689.080322ms ago: executing program 2 (id=5546): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r2, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be3", 0xe}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r0, 0xb15, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 590.601939ms ago: executing program 0 (id=5547): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c0400000000003c0012800b000100697036746e6c00002c00028014000300fc0200000000000000000000000000001400020000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 557.799832ms ago: executing program 2 (id=5548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x40, 0x5}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0xffff800016adffff}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 327.582753ms ago: executing program 4 (id=5549): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000000)="18f9", 0xc3ff, 0x4, 0x0, 0x0) close(0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0xd}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@getsadinfo={0x19c, 0x23, 0x408, 0x70bd29, 0x25dfdbfc, 0x0, [@mark={0xc, 0x15, {0x350759, 0x800}}, @coaddr={0x14, 0xe, @in=@broadcast}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@private2, 0x0, 0xa}}, @lifetime_val={0x24, 0x9, {0x2, 0x6, 0xa, 0x9}}, @algo_aead={0xf8, 0x12, {{'rfc4106(aegis128l)\x00'}, 0x560, 0x180, "89886b530a7e4ed4cbce34f7195d5ce18a901636e796f96b64dbac3c7149b657e584778de041f9804038fc2b3bfaedd3c7477b63885036c1a2737a2f08ab080c6318a405cdd53eac1fef991181fddb44fb7de3c52ba7659f7c2a5f137cef78913d651a7405c6f9253bda2bff384d55169a39202238167a85ed3d3881dbbaae34a6c19ae6d506afba68889e0dfc0c3c7beefea813477865a4a6219b3352863828c5bcb2461c701ff57c477952"}}, @mark={0xc, 0x15, {0x35075c, 0x4}}, @tfcpad={0x8, 0x16, 0x523}, @policy_type={0xa, 0x10, {0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="410305a1b727039dab30ac06db7f457fac5a"], 0x12) 327.065259ms ago: executing program 3 (id=5550): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x5, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="051d324e480000000000000092b80000000076d1572b607899ad5dfe12027546436c2404e8f09de3c6d32882f565ddda0200775a6571620cf7e6b8d9c56642e20399190343b2fa8fb4e37be0d7a3ad084dabb30841ad1ae5127fff3484d4fb3c4c3e3c3835db5bbc4248b8366362d39050d5c89fe843479276699e9654cfbcd198295df417f5e3c32db20eba61057f6dffac8a906755", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000006a53198af9b87849"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x240448c0}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={r5, 0x87, 0x7ff}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4) 152.183103ms ago: executing program 0 (id=5551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x0, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2549c5b847603933}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4, 0x6c8f, 0xd, @local, @remote, 0x7800, 0x40, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x44, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff0000, 0xb}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4d}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffff3c35}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040891}, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x1, 0x0, 0x7fff, 0x101, {{0x34, 0x4, 0x1, 0xf, 0xd0, 0x66, 0x0, 0x8, 0x29, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x34, 0x85, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x7f}, {@loopback, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0xffffffc9}, {@loopback, 0x2}]}, @timestamp={0x44, 0xc, 0x63, 0x0, 0x4, [0x3, 0x3b]}, @noop, @generic={0x94, 0x2}, @timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x1, [{@multicast1, 0x30000000}, {@private=0xa010100, 0x7}, {@loopback, 0x7ff}, {@broadcast, 0x5}, {@multicast2, 0xc}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}]}, @end, @timestamp={0x44, 0x24, 0x9d, 0x0, 0x7, [0xc18, 0x6, 0x7, 0x3a, 0x74, 0x5, 0x4, 0x6]}, @timestamp={0x44, 0x18, 0xee, 0x0, 0x3, [0x5, 0x2, 0x0, 0x3, 0x5]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r16, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@dev, @rand_addr, 0x0}, &(0x7f0000000400)=0xc) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r18}, &(0x7f0000001840), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r18, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20080060}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="000127bd7000fbdbdf2503000000050003009c000000040001804000018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300030000000800030002000000140002006970766c616e310000000000000000003c00018008000300020000000800030003000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="05000300030000000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="1400020064766d7270300000000000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="3c0002007465616d5f736c6176655f3100000000050003000c00000005000300050000000500030087000000"], 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x31) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001801800108014"], 0x34}}, 0x84) 147.872496ms ago: executing program 1 (id=5552): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000480)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newaddr={0x3c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14, 0x3, 'gretap0\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r11, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000340)=0x28) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={0x0, @generic={0x2c, "a8f1b0d5acc98f9ce9a5e20dd158"}, @nfc={0x27, r10, 0x1, 0x2}, @phonet={0x23, 0x0, 0x49, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='nicvf0\x00', 0x4, 0x8, 0x8001}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@getlink={0x48, 0x12, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x4808, 0x400}, [@IFLA_IFALIASn={0x4}, @IFLA_IFALIAS={0x14, 0x14, 'hsr0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x48}}, 0x0) 82.95654ms ago: executing program 4 (id=5553): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) accept4$netrom(r2, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @bcast, @default, @netrom, @remote, @bcast, @bcast, @netrom]}, &(0x7f00000001c0)=0x48, 0x80000) close(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r3) 71.354959ms ago: executing program 3 (id=5554): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) (async, rerun: 32) r4 = getgid() (rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000b80)=0xe8) (async) r6 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000bc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000d00)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0, 0x0}, &(0x7f0000000d80)=0xc) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000dc0)=0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r13 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r14}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) r15 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001380)={0x1400, 0x25, 0x400, 0x70bd25, 0x25dfdbfc, "", [@nested={0x19b, 0x8a, 0x0, 0x1, [@generic="ef9631bbfb590398fcd63045408e16a9a96c1cfd172fd8bed5834ef1c20c56615d5d32fda113e09a9107aee1e884c97f502ef13ca51101efcca0bc2ac7bc6aeb1febb0b50df63d2b21571746fc145a7d69a0d936bc131c623831f45973a105a41f6bb14fc747ec97ef65d3557bc1e88c153578e6808b07de61e08c037c410cdc64bac210733bb37306ddb113675ec9043ef8d8a478a34d71fd40d20983ae01", @generic="097939c23a84b87834d52edbd4ef53ce2a50a64893e5486794a6ff2f1661c57496752be7b8f5fc1eb6bc", @typed={0x8, 0x47, 0x0, 0x0, @uid}, @nested={0x4, 0x104}, @nested={0x4, 0x11e}, @typed={0xc, 0x52, 0x0, 0x0, @u64=0x5}, @generic="6ca138523b235bb986a463dc06ea4a42caf69321cf7a6dc4e6abc0c5fcde208a8caddd006a9f5772a8f240bf8a413868f666838e6bbb1e9426937b4469efdf0b9cce8f1b9164be63791c215741a79074241597c7fff732450ddcb80079a54602cbd57009eeac7c95d1da3800d790f58182ac6985e77ee620ed5480fa899e6fb1f1c06bd7b30c8fe11dfeaaafad30d6f32abbdc3c8c6d634b5876b909d856292a71f0f84d5dddc4d187585f727c7a06c9de26"]}, @nested={0x1073, 0x148, 0x0, 0x1, [@generic="a8541135201f8c61f3420a6de7a54f4b8249330372b7a4d5b0b38c5b71d61e4608809000a95ae72810da8654d0eb7a5fe9d9c6797b49", @generic="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", @nested={0x4, 0x1e}, @generic="ecd431184a9421d2fb966b5e7598c6676599bfa8b4b251c68e6acf5fa22dfebfed2f9ee87960b4ea7439435e6ebe3780851e2662b5"]}, @typed={0x8, 0x98, 0x0, 0x0, @uid}, @generic="198853dd177ac4eae8c74bcfbd6301cd1354b3ab76beadd6d66d19ac8d00", @generic="a2faf5f020a510e4fddb0e169f2305e8d29fee1e5498952517d3f1796741a818b59eaa77a991a65b843edfd03b81177dee403b81544a3f1f517e3d7eb362b6e594de1c33e8be208dfc1eb90696", @nested={0x16a, 0x147, 0x0, 0x1, [@generic="b0688a41dc3bd262612e87dae165f2ddbed1048f51710e8f7b644d2c992c6787db9521cf2ae1ed37f4e4fcb8995b3bc3de4354cbca021847dba2faa63f80225d603856737bd880c8b3950d0bc4bbe433301407e24f150b602ab33094d0e29f991744a9d0a0acbce05171b44fb2a99a77db20c5b66ee3463745d0e19a6c3a8dd40dabd1d5404e9fac999ec1b709369f52a306a2fb97520067590bb66ccad1be02575b0db6544c87a2fed7a7fc17bf0081dfe51244b9b61784f7045fbff48b8b0bad04024330f3cde561533e6e00c7110a669064d8621d8505b7488e49121f22", @typed={0x4, 0x4f}, @typed={0x8, 0xc1, 0x0, 0x0, @u32=0x8745}, @generic="144f4edff593d931b40ad1af6150758aba67d3fad4154bb425fcf972d45b10c2717c9947afae6513cb532a8d2e59e6b9b6cb79ec4d1c3b5b7329e828ed1982c313d620d70d9cd95dab3032b5c5b39def3778263fc21aa97d79e1f2d63ae3d178287d5a227f71ad1aa725144970d81298d2a1193b706e120013355e"]}]}, 0x1400}, {&(0x7f00000002c0)={0x2c0, 0x16, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@generic="de5391a0d4f012efa83416d51ca023b05db4b5645bd3e3039d0b015e45289bcae0c1246752bbe62a18f5d2884997e45147e9b7c119f8ba70b8e960", @nested={0x10, 0x31, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @uid}, @nested={0x4, 0x5}]}, @typed={0x5, 0x113, 0x0, 0x0, @str='\x00'}, @nested={0x25b, 0x111, 0x0, 0x1, [@generic="04cc35f3ebd8ff02adfded91eecdb69208d1ddefe53f7b97d2fe62ab6da9387a2d2f7ef249366e127d9afa63b87c8ac535720ef19816fe1ebe5307a4b4f7684f7e70444748734ddd75a9f44fe7f888afc8f43f2a5e0f077dcf59b296ac32f0436801296f200a59866aa630092e46c1e131fe19e09742a71579c3c15b08b205d34c994a62c6c1806af2cfae36313aec35bcc048e1d2b56d12d7000f5d4fdb37f3a9b90cef48968bf87c654dfbb13c5f67b80059437134e335a608511f5714bdfe5d6c503c61e98f1910012adacdff5f45f038fa42e56c44da8b858044a1260694d79328fe302151e2faecc9adb59e9b7a00084b", @typed={0x8, 0x8d, 0x0, 0x0, @pid}, @typed={0xc, 0x42, 0x0, 0x0, @u64=0x800}, @generic="d39a6f99d92bb2ea2b86765e9957806b238f613ca946497d06c54abe615c908d3de9309496e4d35f6722d066f1b9271df0691d6448f0459f580be5c976bd", @typed={0x4, 0xd0}, @generic="ced207a51a2c90ef43f1e31d30a741b4cde38bf1f213e6c3cc7d877a203bb886db05852ce7c522d42e343fe9fdc4154f20e34be11149063120f36a870e2b13717e6f50ef6d5216c0cf6d2c068be80671355c5916ea05c017d337f1a09b32472bd0f4165874faaa27b19118abcbf76392cbafbd124fee254ecf5f8690f437403be49f750a0932e394874358bd1cc3bc1030ff7185c693f5dbd30ca1e99981422930838050913a", @generic="8d8268b4d3c0bceea498f4a55d7ec092ada4013f5a4e4371648260bd0921444f440921a333ba801359998d265777836863ebdf4e2d04d31b472eeed618d0d4dcc7924a34456e45a28ec15d21317ee33078580d92c7644f476f6c8dccadb74508d88caf99d0586614"]}]}, 0x2c0}, {&(0x7f0000000100)=ANY=[@ANYBLOB="180000001300000827bd7000fbdbdf25080300002000000027c00bc97d1c5cb53358ce9fa0c51019fc49aa4fa6ed587112b18be7814dd03c4ba0526b61552735888614cc58bf4a3f7a2c2c375fbd575f4c8badd3acd407e5cc65cd8239115d30dcb0a659f45cef92da45000cb03cffb8564ab5d535ee3799b08eede9e9e3d92d93bd2a170041d610659c1ab0da22ce8b26b2f4358a300e893d49e91115fc73d5a7f80325b0696324d418d74b12161217a59090f6470738113cf500000000a41c4583421f19712011a2d7d5b813d707e00d03579a9b4da25e6fd292beda3195b5903844"], 0x18}, {&(0x7f0000000740)={0x2d4, 0x1e, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x55, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x1ba, 0xb9, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @u32=0x6e}, @nested={0x4, 0x72}, @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x139}, @typed={0xaa, 0x1c, 0x0, 0x0, @binary="fff27f8dc5da92e5976b1638513120747095eb1c8ffc6836b1f5138e2fa23a8d6dab2539c09b6e5cb167b05754ff274aebe60601e2370bf4b3b279e583f9e6854d2f49d73493a222e2de0567f75fa1708f4eeb48f051c48aa4d9472a19932789fec41e57f75b2fe2567a01e70b37813f7db2e297f29b614da4f0d21d9a9daac227864b931cff5b1b31dd47d500292241a7f6cdde120fac7c24567bc0e85ebf77c4f7f75ab2e6"}, @generic="2eaceb1d358fff43d2e5cea7b9afe1afc7e273412d5b0f47b4e9c67c0fe7ad3dd54157fa8c0cdcc37b66c50ddbaf44bcc9830d3f0a245b3a40f345141b8348ddfdddbf703fa88b09d7cda357979d", @typed={0x96, 0x37, 0x0, 0x0, @binary="dc48c84a470054cc0a2c26202c8fe7b7cd00bf325ba175491be5b964cd2eb1afd89f2d67a736bba7830a75462e5644a67ce9ccf2dc02f9eaab3467b4cc549bd9c19e25b08ca858d663448c942a4e6ea325780507a4429c0e893baee57ab0f21e0371651e2332009ea29cfc8b75de134b5bcb76761144511ab7e01448d1c8e72805373eef0e0212039b7ecd231a351913f76b"}]}, @typed={0xaa, 0xc4, 0x0, 0x0, @binary="29c56b6b9838d7bb92c3fb57532f607b9474700608ce99dac873862f20a2158e5a3ab931ff15c34abbb6001920e0e80a92b3c605d187f5746244a02583766e6f07b3384f64e706bd948d535093c13256cb31fc9e8bd54f46c2eafc790127518142c4bf6614ae33db9c8239750bcee53acf6403114dabedc4f8dcff6b8b7f09c4553887eec3d8331f6833bf906199c67f748193bc577d3605e6e678de6b11335cb0f6743a74b9"}, @typed={0x8, 0x45, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x110, 0x0, 0x0, @pid}, @generic="1337c02f40dd2a69379a17d3e7ca2728dec19ca619de", @typed={0x8, 0x118, 0x0, 0x0, @u32=0x5}, @nested={0x24, 0x2d, 0x0, 0x1, [@nested={0x4, 0x21}, @nested={0x4, 0x7e}, @typed={0x8, 0xcd, 0x0, 0x0, @uid}, @nested={0x4, 0xc1}, @nested={0x4, 0x95}, @nested={0x4, 0x7}, @typed={0x4, 0xb2}]}]}, 0x2d4}], 0x4, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x2c, 0x1, 0x1, [r0, r10, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r15}}}], 0xc8, 0x80}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x7) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_ASKUMOUNT(r17, 0x80049370, &(0x7f00000000c0)) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r18, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) ioctl$sock_SIOCETHTOOL(r16, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x21, 0x1ff, 0xffff38ce, 0x5, 0x6, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb6, 0x3, 0xa, [0x9, 0x1]}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r16) 586.735µs ago: executing program 2 (id=5555): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=0x0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="e72d56c6e5e5ac930be4d2920352389033d9db09d15dc06abab1965177b04f2199db5e404a24be6b00845fa678f8272be691a71cbde98cefd4368b75183d927fd71447ace41c62275ae790e39f500a886f50f65381e20524e67b93a8d5253ef81cf60d0fef3146b346436a33524e18690142d34084cec595d67b6e1cb5f31a9af6b5e5102bd7cd6c790eeb9e0356", @ANYRES64=r0, @ANYBLOB="3da371beac9154455d191f4c141c8489fb9b03936d88dc2d4d11abdfed956386c9a3d580ad9a2ca68d3691afe2da796775b04d3cdce79440b036eb5cf14f27e6e137983ab9331189a7bbcdc0f6b60fcc2e8ca30fab9d7b1aa4b2f3dc0650e5eac65ba48abad2d25497b891df69b2ce9e3a6dcc2bca343f0ece972086e145dc652bc58a4ecaf12c7eb4f97e2a882e6a50a3cf30474c8286e59b1ff1bbd06028f2749addef5fb7ff35ba787e8e787f8dd7656e392c9a49def183b31dac13fe2a1b147288f49da05ef4e4a6a9bd"], 0x48) getpeername(r0, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f00000004c0)=0x80) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1000}}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x41, 0x4}]}, {0x0, [0x0, 0x61, 0x2e, 0xe]}}, &(0x7f00000005c0)=""/63, 0x46, 0x3f, 0x0, 0x1}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x0, 0x2}, 0x50) connect$rose(r0, &(0x7f0000000500)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf251d0000000c009900feffffff230000000c00238005000700050000000800010055000000"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=5556): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000480)="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", 0x145}], 0x1) accept4(r1, 0x0, &(0x7f0000000040), 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): [ 326.240896][T19187] wg1 speed is unknown, defaulting to 1000 [ 326.278826][T19187] hsr0 speed is unknown, defaulting to 1000 [ 326.594141][T19212] veth1_macvtap: entered allmulticast mode [ 326.726306][T19215] bond0: (slave team0): Releasing backup interface [ 326.832344][T19215] bridge_slave_0: left allmulticast mode [ 326.842899][T19215] bridge_slave_0: left promiscuous mode [ 326.852216][T19215] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.888704][T19215] bond0: (slave bond_slave_0): Releasing backup interface [ 326.913903][T19215] bond0: (slave bond_slave_1): Releasing backup interface [ 326.952307][T19215] team0: Port device team_slave_0 removed [ 326.988244][T19215] team0: Port device team_slave_1 removed [ 327.020030][T19215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.029916][T19215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.045793][T19215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.062687][T19234] __nla_validate_parse: 23 callbacks suppressed [ 327.062932][T19215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.066574][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 327.099668][T19215] bond1: (slave veth3): Releasing active interface [ 327.125479][T19215] bond6: (slave gretap1): Releasing active interface [ 327.140082][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 327.256558][T19240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.288680][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 327.528427][T19255] bridge: RTM_NEWNEIGH with invalid ether address [ 327.548068][T19255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4153'. [ 327.803245][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4162'. [ 327.825791][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4164'. [ 327.909387][T19275] bond0: (slave rose0): Error: Device can not be enslaved while up [ 328.071309][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4169'. [ 328.096673][T19289] tc_dump_action: action bad kind [ 328.109846][ T8005] IPVS: starting estimator thread 0... [ 328.247870][T19294] IPVS: using max 38 ests per chain, 91200 per kthread [ 328.380569][T19308] netem: incorrect gi model size [ 328.401018][T19308] netem: change failed [ 328.926344][T19340] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4189'. [ 328.956544][T19349] netlink: 'syz.3.4190': attribute type 72 has an invalid length. [ 329.062465][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4191'. [ 329.093250][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4191'. [ 329.135174][T19359] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 329.142082][T19360] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 329.152228][T19360] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.222477][T19363] bond10: (slave gretap2): making interface the new active one [ 329.234879][T19363] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 329.292871][T19355] 8021q: adding VLAN 0 to HW filter on device bond10 [ 329.352223][T19376] netlink: 'syz.3.4196': attribute type 6 has an invalid length. [ 329.400088][T19383] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 329.585073][T19398] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 329.599900][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout [ 329.606101][ T5183] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 329.614647][T19398] CPU: 0 UID: 0 PID: 19398 Comm: syz.3.4204 Not tainted syzkaller #0 PREEMPT(full) [ 329.614678][T19398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.614695][T19398] Call Trace: [ 329.614704][T19398] [ 329.614716][T19398] dump_stack_lvl+0x189/0x250 [ 329.614754][T19398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.614782][T19398] ? __pfx__printk+0x10/0x10 [ 329.614812][T19398] ? kernfs_root+0x1c/0x230 [ 329.614839][T19398] ? kernfs_path_from_node+0x2f/0x290 [ 329.614865][T19398] ? kernfs_path_from_node+0x250/0x290 [ 329.614889][T19398] ? kernfs_path_from_node+0x2f/0x290 [ 329.614916][T19398] sysfs_warn_dup+0x8e/0xa0 [ 329.614938][T19398] sysfs_do_create_link_sd+0xc0/0x110 [ 329.614963][T19398] device_add_class_symlinks+0x1cf/0x240 [ 329.614989][T19398] device_add+0x475/0xb50 [ 329.615014][T19398] wiphy_register+0x1ba6/0x28d0 [ 329.615057][T19398] ? __pfx_wiphy_register+0x10/0x10 [ 329.615089][T19398] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 329.615117][T19398] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 329.615143][T19398] ieee80211_register_hw+0x3425/0x4080 [ 329.615179][T19398] ? ieee80211_register_hw+0x13f1/0x4080 [ 329.615209][T19398] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 329.615236][T19398] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.615279][T19398] ? __hrtimer_setup+0x187/0x210 [ 329.615301][T19398] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 329.615337][T19398] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 329.615383][T19398] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 329.615411][T19398] ? trace_kmalloc+0x1f/0xd0 [ 329.615438][T19398] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 329.615480][T19398] ? kstrndup+0xbf/0x160 [ 329.615510][T19398] hwsim_new_radio_nl+0xea4/0x1b10 [ 329.615540][T19398] ? __pfx___nla_validate_parse+0x10/0x10 [ 329.615583][T19398] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 329.615616][T19398] ? __nla_parse+0x40/0x60 [ 329.615650][T19398] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 329.615683][T19398] genl_family_rcv_msg_doit+0x215/0x300 [ 329.615712][T19398] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 329.615746][T19398] ? bpf_lsm_capable+0x9/0x20 [ 329.615778][T19398] ? security_capable+0x7e/0x2e0 [ 329.615814][T19398] genl_rcv_msg+0x60e/0x790 [ 329.615842][T19398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.615864][T19398] ? __kasan_slab_alloc+0x6c/0x80 [ 329.615892][T19398] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 329.615920][T19398] ? __netlink_lookup+0xbd/0x810 [ 329.615939][T19398] ? rcu_is_watching+0x15/0xb0 [ 329.615964][T19398] netlink_rcv_skb+0x208/0x470 [ 329.615995][T19398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.616019][T19398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.616058][T19398] ? lock_release+0x4b/0x3e0 [ 329.616092][T19398] ? down_read+0x1ad/0x2e0 [ 329.616113][T19398] genl_rcv+0x28/0x40 [ 329.616134][T19398] netlink_unicast+0x82c/0x9e0 [ 329.616167][T19398] ? __pfx_netlink_unicast+0x10/0x10 [ 329.616196][T19398] ? netlink_sendmsg+0x642/0xb30 [ 329.616226][T19398] ? skb_put+0x11b/0x210 [ 329.616248][T19398] netlink_sendmsg+0x805/0xb30 [ 329.616286][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.616320][T19398] ? futex_unqueue+0x22/0x240 [ 329.616342][T19398] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.616364][T19398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.616412][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.616446][T19398] __sock_sendmsg+0x21c/0x270 [ 329.616486][T19398] ____sys_sendmsg+0x505/0x830 [ 329.616513][T19398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.616542][T19398] ? import_iovec+0x74/0xa0 [ 329.616570][T19398] ___sys_sendmsg+0x21f/0x2a0 [ 329.616595][T19398] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.616621][T19398] ? futex_wait+0x285/0x360 [ 329.616669][T19398] ? __fget_files+0x2a/0x420 [ 329.616707][T19398] ? __fget_files+0x3a0/0x420 [ 329.616746][T19398] __x64_sys_sendmsg+0x19b/0x260 [ 329.616772][T19398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.616803][T19398] ? rcu_is_watching+0x15/0xb0 [ 329.616829][T19398] ? rcu_is_watching+0x15/0xb0 [ 329.616853][T19398] do_syscall_64+0xfa/0x3b0 [ 329.616887][T19398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.616909][T19398] ? clear_bhb_loop+0x60/0xb0 [ 329.616935][T19398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.616958][T19398] RIP: 0033:0x7f139818ebe9 [ 329.616978][T19398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.616999][T19398] RSP: 002b:00007f1398f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.617024][T19398] RAX: ffffffffffffffda RBX: 00007f13983b5fa0 RCX: 00007f139818ebe9 [ 329.617043][T19398] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 329.617058][T19398] RBP: 00007f1398211e19 R08: 0000000000000000 R09: 0000000000000000 [ 329.617074][T19398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.617088][T19398] R13: 00007f13983b6038 R14: 00007f13983b5fa0 R15: 00007ffc6f582828 [ 329.617114][T19398] [ 330.098370][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.195655][T19404] pim6reg1: entered promiscuous mode [ 330.202808][T19404] pim6reg1: entered allmulticast mode [ 330.314687][T19415] netlink: 'syz.3.4211': attribute type 58 has an invalid length. [ 330.605230][T19440] netlink: 'syz.3.4222': attribute type 83 has an invalid length. [ 330.724922][T19449] ieee802154 phy1 wpan1: encryption failed: -126 [ 330.752108][T19451] wg1 speed is unknown, defaulting to 1000 [ 330.759470][T19453] netlink: 'syz.2.4224': attribute type 13 has an invalid length. [ 330.772381][T19453] macvtap0: refused to change device tx_queue_len [ 330.786906][T19451] hsr0 speed is unknown, defaulting to 1000 [ 330.803857][T19457] syzkaller1: entered promiscuous mode [ 330.818331][T19457] syzkaller1: entered allmulticast mode [ 331.037285][T19466] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 331.151865][T19471] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 331.335052][T19471] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.512950][T19477] bond9: (slave ip6gretap1): making interface the new active one [ 331.598781][T19477] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 332.131775][T19543] __nla_validate_parse: 11 callbacks suppressed [ 332.131803][T19543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4246'. [ 332.149755][T19542] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4247'. [ 332.557370][T19577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4257'. [ 332.570685][T19572] xt_HMARK: proto mask must be zero with L3 mode [ 332.637306][T19581] netlink: 'syz.2.4258': attribute type 2 has an invalid length. [ 332.652200][T19581] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4258'. [ 332.704036][T19590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4259'. [ 332.888579][T19601] C: renamed from team_slave_0 [ 332.929667][T19601] netlink: 'syz.3.4264': attribute type 1 has an invalid length. [ 332.954092][T19601] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 333.094502][T19608] 8021q: adding VLAN 0 to HW filter on device bond11 [ 333.132395][T19613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4267'. [ 333.181394][T19610] 8021q: adding VLAN 0 to HW filter on device bond11 [ 333.220975][T19610] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 333.291956][T19610] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 333.332628][T19627] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4272'. [ 333.432762][T19633] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 333.443817][T19633] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 333.469337][T19633] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 333.486585][T19636] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4274'. [ 333.496384][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4274'. [ 333.510065][T19636] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4274'. [ 333.529951][T19636] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 334.744937][T19706] validate_nla: 2 callbacks suppressed [ 334.744963][T19706] netlink: 'syz.4.4299': attribute type 7 has an invalid length. [ 335.183893][T19747] !: renamed from dummy0 (while UP) [ 335.361367][T19763] netlink: 'syz.2.4318': attribute type 12 has an invalid length. [ 335.403711][T19761] bond12 (unregistering): Released all slaves [ 335.437708][ T94] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,4096B). Runtime 180 seconds [ 335.553360][T19778] IPVS: Error connecting to the multicast addr [ 335.682146][T19784] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 335.715409][T19784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.860121][T19800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.874523][T19803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.953294][T19808] netlink: 'syz.0.4334': attribute type 8 has an invalid length. [ 335.963545][T19809] netlink: 'syz.0.4334': attribute type 8 has an invalid length. [ 336.344549][T19843] macvtap1: entered promiscuous mode [ 336.354535][T19843] vlan0: entered promiscuous mode [ 336.360579][T19840] can: request_module (can-proto-0) failed. [ 336.367293][T19843] macvtap1: entered allmulticast mode [ 336.373837][T19843] vlan0: entered allmulticast mode [ 336.379367][T19843] veth0_vlan: entered allmulticast mode [ 336.392777][T19847] lo speed is unknown, defaulting to 1000 [ 336.411604][T19847] lo speed is unknown, defaulting to 1000 [ 336.419799][T19847] lo speed is unknown, defaulting to 1000 [ 336.510559][T19852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.713102][T19847] infiniband syz0: set active [ 336.719725][ T8003] lo speed is unknown, defaulting to 1000 [ 336.730643][T19864] netlink: 'syz.4.4352': attribute type 4 has an invalid length. [ 336.742375][T19864] netlink: 'syz.4.4352': attribute type 4 has an invalid length. [ 336.753515][T19847] infiniband syz0: added lo [ 336.804955][T19847] RDS/IB: syz0: added [ 336.809877][T19847] smc: adding ib device syz0 with port count 1 [ 336.816527][T19847] smc: ib device syz0 port 1 has pnetid [ 336.823560][ T8005] lo speed is unknown, defaulting to 1000 [ 336.830726][T19847] lo speed is unknown, defaulting to 1000 [ 336.943729][T19847] lo speed is unknown, defaulting to 1000 [ 337.171454][T19885] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 337.181523][T19847] lo speed is unknown, defaulting to 1000 [ 337.269615][T19888] __nla_validate_parse: 75 callbacks suppressed [ 337.269642][T19888] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4363'. [ 337.308289][T19847] lo speed is unknown, defaulting to 1000 [ 337.454621][T19847] lo speed is unknown, defaulting to 1000 [ 337.657841][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4365'. [ 337.659059][T19847] lo speed is unknown, defaulting to 1000 [ 337.710596][T19907] delete_channel: no stack [ 337.788706][T19847] lo speed is unknown, defaulting to 1000 [ 337.932290][T19847] lo speed is unknown, defaulting to 1000 [ 338.085584][T19922] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4374'. [ 338.134733][T19847] lo speed is unknown, defaulting to 1000 [ 338.355814][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4378'. [ 338.393854][T19930] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 338.417365][T19930] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 338.589034][T19945] netlink: 'syz.4.4382': attribute type 2 has an invalid length. [ 338.595991][T19936] netlink: 'syz.3.4376': attribute type 1 has an invalid length. [ 338.604953][T19936] netlink: 'syz.3.4376': attribute type 2 has an invalid length. [ 338.617012][T19936] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.4376'. [ 338.776467][T19954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4385'. [ 338.896329][T19954] openvswitch: netlink: Flow key attr not present in new flow. [ 338.934572][T19965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4387'. [ 339.126505][T19975] bridge0: entered promiscuous mode [ 339.142743][T19975] macsec1: entered promiscuous mode [ 339.159208][T19975] bridge0: port 1(macsec1) entered blocking state [ 339.177181][T19975] bridge0: port 1(macsec1) entered disabled state [ 339.197375][T19975] macsec1: entered allmulticast mode [ 339.206066][T19975] bridge0: entered allmulticast mode [ 339.218924][T19975] macsec1: left allmulticast mode [ 339.224999][T19975] bridge0: left allmulticast mode [ 339.239535][T19975] bridge0: left promiscuous mode [ 339.274873][T19979] netlink: 'syz.4.4393': attribute type 1 has an invalid length. [ 339.308833][T19990] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.4396'. [ 339.320479][T19993] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 339.380150][T19979] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4393'. [ 339.432111][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4398'. [ 339.771806][T20032] tls_set_device_offload: netdev not found [ 339.784770][T20029] syzkaller0: entered promiscuous mode [ 339.792890][T20029] syzkaller0: entered allmulticast mode [ 340.560366][T20086] team0: Device gtp0 is of different type [ 341.012187][T20110] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 341.294696][T20131] vlan0: entered promiscuous mode [ 341.304389][T20131] vlan0: entered allmulticast mode [ 341.310318][T20131] hsr_slave_1: entered allmulticast mode [ 341.574518][T20153] validate_nla: 2 callbacks suppressed [ 341.574544][T20153] netlink: 'syz.0.4453': attribute type 8 has an invalid length. [ 341.596830][T20153] netlink: 'syz.0.4453': attribute type 8 has an invalid length. [ 341.733083][T20165] rdma_rxe: rxe_newlink: failed to add lo [ 342.386654][T20209] __nla_validate_parse: 7 callbacks suppressed [ 342.386684][T20209] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.4472'. [ 342.437608][T20211] veth1_to_bond: entered allmulticast mode [ 342.476446][T20211] veth1_to_bond: left allmulticast mode [ 342.651088][T20230] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4478'. [ 342.685791][T20230] bond0 (unregistering): Released all slaves [ 342.967362][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4485'. [ 343.011717][T20245] openvswitch: netlink: Tunnel attr 1 has unexpected len 7 expected 4 [ 343.020250][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4486'. [ 343.020290][T20247] netlink: 'syz.4.4486': attribute type 20 has an invalid length. [ 343.026948][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4486'. [ 343.031088][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.045942][T20247] netlink: 'syz.4.4486': attribute type 20 has an invalid length. [ 343.081973][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.086594][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4485'. [ 343.104342][T20245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4485'. [ 343.130232][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.141578][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.169827][T20253] netlink: 'syz.4.4488': attribute type 1 has an invalid length. [ 343.193833][T20253] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.233424][T20256] IPVS: ip_vs_edit_dest(): server weight less than zero [ 343.257069][T20259] delete_channel: no stack [ 343.266624][T20253] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.289124][T20253] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 343.309481][T20253] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 343.368098][T20266] netlink: 'syz.3.4492': attribute type 1 has an invalid length. [ 343.376149][T20266] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4492'. [ 343.386787][T20264] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4491'. [ 343.446019][T20271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4494'. [ 343.843004][T20303] delete_channel: no stack [ 344.399627][T20351] netlink: 'syz.4.4524': attribute type 1 has an invalid length. [ 344.423020][T20353] sctp: [Deprecated]: syz.2.4525 (pid 20353) Use of int in max_burst socket option. [ 344.423020][T20353] Use struct sctp_assoc_value instead [ 344.514206][T20358] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 344.743875][T20374] sctp: [Deprecated]: syz.0.4534 (pid 20374) Use of int in maxseg socket option. [ 344.743875][T20374] Use struct sctp_assoc_value instead [ 344.890437][T20387] netlink: 'syz.3.4536': attribute type 1 has an invalid length. [ 345.042376][T20398] team_slave_1: mtu less than device minimum [ 345.096661][T20399] netlink: 'syz.1.4541': attribute type 12 has an invalid length. [ 347.429831][T20535] __nla_validate_parse: 15 callbacks suppressed [ 347.429854][T20535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4583'. [ 347.651255][T20551] netlink: 'syz.4.4590': attribute type 83 has an invalid length. [ 347.792725][T20556] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4592'. [ 347.810710][T20563] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 347.846780][T20563] 8021q: adding VLAN 0 to HW filter on device bond12 [ 347.936273][T20566] 8021q: adding VLAN 0 to HW filter on device bond12 [ 347.944159][T20566] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 347.960557][T20566] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 348.046177][T20583] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4601'. [ 348.100441][T20581] bridge6: entered promiscuous mode [ 348.111674][T20581] bridge6: entered allmulticast mode [ 348.154231][T20591] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4602'. [ 348.170948][T20588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4602'. [ 348.237887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.292577][T20597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.312434][T20597] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 348.421424][T20605] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4607'. [ 348.447236][T20608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4610'. [ 348.468792][T20609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.570969][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4612'. [ 348.676296][T20621] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4613'. [ 348.796349][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4618'. [ 348.907166][T20632] netlink: 'syz.2.4619': attribute type 4 has an invalid length. [ 349.025064][T20640] geneve2: entered promiscuous mode [ 349.042481][T20640] geneve2: entered allmulticast mode [ 349.070406][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 349.093796][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 349.113069][T20649] netlink: 'syz.1.4625': attribute type 10 has an invalid length. [ 349.139554][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 349.175279][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 349.214991][T20649] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 349.490635][T20676] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.509277][T20672] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 349.689628][T20682] tipc: Enabling of bearer rejected, failed to enable media [ 349.836186][T20690] tap0: tun_chr_ioctl cmd 1074025677 [ 349.853007][T20690] tap0: linktype set to 65534 [ 349.904845][T20693] netlink: 'syz.3.4638': attribute type 1 has an invalid length. [ 349.961304][T20693] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 350.544317][T20732] can: request_module (can-proto-0) failed. [ 350.861880][T20750] netlink: 'syz.3.4659': attribute type 5 has an invalid length. [ 350.886228][T20750] geneve3: entered promiscuous mode [ 350.896193][T20750] geneve3: entered allmulticast mode [ 350.904221][ T12] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 256 - 0 [ 350.924853][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 350.949889][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 350.968176][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 351.075530][T20756] netlink: 'syz.1.4662': attribute type 9 has an invalid length. [ 351.433928][T20778] pim6reg1: entered promiscuous mode [ 351.439624][T20778] pim6reg1: entered allmulticast mode [ 351.453016][T20780] netlink: 'syz.1.4671': attribute type 7 has an invalid length. [ 351.932860][T20823] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 352.573092][T20869] : entered promiscuous mode [ 352.579743][T20867] FAULT_INJECTION: forcing a failure. [ 352.579743][T20867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.582282][T20865] tipc: New replicast peer: 255.255.255.255 [ 352.594689][T20869] __nla_validate_parse: 17 callbacks suppressed [ 352.594713][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4699'. [ 352.609203][T20865] tipc: Enabled bearer , priority 10 [ 352.622010][T20867] CPU: 1 UID: 0 PID: 20867 Comm: syz.0.4700 Not tainted syzkaller #0 PREEMPT(full) [ 352.622046][T20867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.622063][T20867] Call Trace: [ 352.622073][T20867] [ 352.622084][T20867] dump_stack_lvl+0x189/0x250 [ 352.622122][T20867] ? __pfx____ratelimit+0x10/0x10 [ 352.622157][T20867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.622188][T20867] ? __pfx__printk+0x10/0x10 [ 352.622219][T20867] ? __might_fault+0xb0/0x130 [ 352.622258][T20867] ? rcu_is_watching+0x15/0xb0 [ 352.622281][T20867] should_fail_ex+0x414/0x560 [ 352.622311][T20867] _copy_from_user+0x2d/0xb0 [ 352.622336][T20867] ___sys_recvmsg+0x12e/0x510 [ 352.622363][T20867] ? __pfx____sys_recvmsg+0x10/0x10 [ 352.622388][T20867] ? __fget_files+0x2a/0x420 [ 352.622430][T20867] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 352.622461][T20867] ? lock_release+0x4b/0x3e0 [ 352.622497][T20867] do_recvmmsg+0x307/0x770 [ 352.622525][T20867] ? __pfx_do_recvmmsg+0x10/0x10 [ 352.622547][T20867] ? rcu_is_watching+0x15/0xb0 [ 352.622581][T20867] ? _copy_from_user+0x94/0xb0 [ 352.622615][T20867] __x64_sys_recvmmsg+0x1af/0x240 [ 352.622640][T20867] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 352.622663][T20867] ? rcu_is_watching+0x15/0xb0 [ 352.622687][T20867] ? rcu_is_watching+0x15/0xb0 [ 352.622710][T20867] do_syscall_64+0xfa/0x3b0 [ 352.622742][T20867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.622763][T20867] ? clear_bhb_loop+0x60/0xb0 [ 352.622788][T20867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.622810][T20867] RIP: 0033:0x7fb418d8ebe9 [ 352.622829][T20867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.622850][T20867] RSP: 002b:00007fb419b2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 352.622873][T20867] RAX: ffffffffffffffda RBX: 00007fb418fb5fa0 RCX: 00007fb418d8ebe9 [ 352.622889][T20867] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 352.622904][T20867] RBP: 00007fb419b2d090 R08: 0000200000003700 R09: 0000000000000000 [ 352.622919][T20867] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 352.622933][T20867] R13: 00007fb418fb6038 R14: 00007fb418fb5fa0 R15: 00007ffdc4c25e58 [ 352.622958][T20867] [ 352.867845][T20878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4703'. [ 352.991464][T20885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4705'. [ 353.029136][T20885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4705'. [ 353.075440][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 353.133738][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4710'. [ 353.144514][T20893] sctp: [Deprecated]: syz.3.4709 (pid 20893) Use of int in max_burst socket option deprecated. [ 353.144514][T20893] Use struct sctp_assoc_value instead [ 353.164244][T20896] netlink: 'syz.2.4710': attribute type 6 has an invalid length. [ 353.177059][T20892] sctp: [Deprecated]: syz.3.4709 (pid 20892) Use of int in max_burst socket option deprecated. [ 353.177059][T20892] Use struct sctp_assoc_value instead [ 353.296007][T20906] FAULT_INJECTION: forcing a failure. [ 353.296007][T20906] name failslab, interval 1, probability 0, space 0, times 0 [ 353.322545][T20906] CPU: 0 UID: 0 PID: 20906 Comm: syz.3.4713 Not tainted syzkaller #0 PREEMPT(full) [ 353.322575][T20906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.322589][T20906] Call Trace: [ 353.322598][T20906] [ 353.322608][T20906] dump_stack_lvl+0x189/0x250 [ 353.322640][T20906] ? __pfx____ratelimit+0x10/0x10 [ 353.322670][T20906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.322696][T20906] ? __pfx__printk+0x10/0x10 [ 353.322723][T20906] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 353.322762][T20906] should_fail_ex+0x414/0x560 [ 353.322793][T20906] should_failslab+0xa8/0x100 [ 353.322825][T20906] kmem_cache_alloc_noprof+0x73/0x3c0 [ 353.322854][T20906] ? skb_clone+0x212/0x3a0 [ 353.322883][T20906] skb_clone+0x212/0x3a0 [ 353.322908][T20906] __netlink_deliver_tap+0x404/0x850 [ 353.322948][T20906] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.322980][T20906] netlink_deliver_tap+0x19c/0x1b0 [ 353.323011][T20906] netlink_dump+0x92b/0xe90 [ 353.323048][T20906] ? __pfx_netlink_dump+0x10/0x10 [ 353.323085][T20906] ? kmem_cache_free+0x18f/0x400 [ 353.323117][T20906] netlink_recvmsg+0x676/0xa30 [ 353.323154][T20906] ? __pfx_netlink_recvmsg+0x10/0x10 [ 353.323185][T20906] ? do_recvmmsg+0x307/0x770 [ 353.323206][T20906] ? __x64_sys_recvmmsg+0x1af/0x240 [ 353.323228][T20906] ? do_syscall_64+0xfa/0x3b0 [ 353.323266][T20906] ? __pfx_netlink_recvmsg+0x10/0x10 [ 353.323310][T20906] sock_recvmsg_nosec+0x183/0x1c0 [ 353.323342][T20906] ____sys_recvmsg+0x3aa/0x460 [ 353.323370][T20906] ? __pfx_____sys_recvmsg+0x10/0x10 [ 353.323402][T20906] ? import_iovec+0x74/0xa0 [ 353.323429][T20906] ___sys_recvmsg+0x1b5/0x510 [ 353.323455][T20906] ? __pfx____sys_recvmsg+0x10/0x10 [ 353.323481][T20906] ? __fget_files+0x2a/0x420 [ 353.323524][T20906] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 353.323557][T20906] ? lock_release+0x4b/0x3e0 [ 353.323592][T20906] do_recvmmsg+0x307/0x770 [ 353.323619][T20906] ? __pfx_do_recvmmsg+0x10/0x10 [ 353.323642][T20906] ? rcu_is_watching+0x15/0xb0 [ 353.323669][T20906] ? _copy_from_user+0x94/0xb0 [ 353.323703][T20906] __x64_sys_recvmmsg+0x1af/0x240 [ 353.323729][T20906] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 353.323752][T20906] ? rcu_is_watching+0x15/0xb0 [ 353.323776][T20906] ? rcu_is_watching+0x15/0xb0 [ 353.323798][T20906] do_syscall_64+0xfa/0x3b0 [ 353.323830][T20906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.323852][T20906] ? clear_bhb_loop+0x60/0xb0 [ 353.323876][T20906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.323897][T20906] RIP: 0033:0x7f139818ebe9 [ 353.323916][T20906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.323936][T20906] RSP: 002b:00007f1398f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 353.323961][T20906] RAX: ffffffffffffffda RBX: 00007f13983b5fa0 RCX: 00007f139818ebe9 [ 353.323977][T20906] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 353.323993][T20906] RBP: 00007f1398f50090 R08: 0000200000003700 R09: 0000000000000000 [ 353.324008][T20906] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 353.324022][T20906] R13: 00007f13983b6038 R14: 00007f13983b5fa0 R15: 00007ffc6f582828 [ 353.324047][T20906] [ 353.723430][ T8005] tipc: Node number set to 291093312 [ 353.759514][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4717'. [ 353.771777][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4717'. [ 353.913736][T20930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4720'. [ 353.948205][T20931] : renamed from bridge_slave_0 (while UP) [ 354.285934][T20960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4731'. [ 354.308323][T20960] netlink: 'syz.3.4731': attribute type 18 has an invalid length. [ 354.326978][T20963] FAULT_INJECTION: forcing a failure. [ 354.326978][T20963] name failslab, interval 1, probability 0, space 0, times 0 [ 354.353922][T15510] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 354.354014][T20960] netlink: 'syz.3.4731': attribute type 18 has an invalid length. [ 354.372402][T20963] CPU: 1 UID: 0 PID: 20963 Comm: syz.2.4733 Not tainted syzkaller #0 PREEMPT(full) [ 354.372432][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.372446][T20963] Call Trace: [ 354.372456][T20963] [ 354.372466][T20963] dump_stack_lvl+0x189/0x250 [ 354.372501][T20963] ? __pfx____ratelimit+0x10/0x10 [ 354.372532][T20963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.372557][T20963] ? __pfx__printk+0x10/0x10 [ 354.372604][T20963] should_fail_ex+0x414/0x560 [ 354.372636][T20963] should_failslab+0xa8/0x100 [ 354.372670][T20963] kmem_cache_alloc_noprof+0x73/0x3c0 [ 354.372700][T20963] ? skb_clone+0x212/0x3a0 [ 354.372727][T20963] skb_clone+0x212/0x3a0 [ 354.372754][T20963] __netlink_deliver_tap+0x404/0x850 [ 354.372794][T20963] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.372828][T20963] netlink_deliver_tap+0x19c/0x1b0 [ 354.372861][T20963] netlink_unicast+0x7fa/0x9e0 [ 354.372895][T20963] ? __pfx_netlink_unicast+0x10/0x10 [ 354.372925][T20963] ? netlink_sendmsg+0x642/0xb30 [ 354.372956][T20963] ? skb_put+0x11b/0x210 [ 354.372977][T20963] netlink_sendmsg+0x805/0xb30 [ 354.373014][T20963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.373047][T20963] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.373069][T20963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.373093][T20963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.373125][T20963] __sock_sendmsg+0x21c/0x270 [ 354.373155][T20963] __sys_sendto+0x3bd/0x520 [ 354.373189][T20963] ? __pfx___sys_sendto+0x10/0x10 [ 354.373219][T20963] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 354.373260][T20963] ? __fget_files+0x3a0/0x420 [ 354.373299][T20963] ? ksys_write+0x22a/0x250 [ 354.373328][T20963] ? __pfx_ksys_write+0x10/0x10 [ 354.373354][T20963] ? rcu_is_watching+0x15/0xb0 [ 354.373379][T20963] __x64_sys_sendto+0xde/0x100 [ 354.373413][T20963] do_syscall_64+0xfa/0x3b0 [ 354.373447][T20963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.373469][T20963] ? clear_bhb_loop+0x60/0xb0 [ 354.373491][T20963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.373512][T20963] RIP: 0033:0x7f1d18790a7c [ 354.373516][T15510] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.373532][T20963] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 354.373553][T20963] RSP: 002b:00007f1d19533ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.373582][T20963] RAX: ffffffffffffffda RBX: 00007f1d19533fc0 RCX: 00007f1d18790a7c [ 354.373599][T20963] RDX: 0000000000000020 RSI: 00007f1d19534010 RDI: 0000000000000003 [ 354.373616][T20963] RBP: 0000000000000000 R08: 00007f1d19533f14 R09: 000000000000000c [ 354.373633][T20963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 354.373649][T20963] R13: 00007f1d19533f68 R14: 00007f1d19534010 R15: 0000000000000000 [ 354.373678][T20963] [ 354.709829][T15510] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.719082][T15510] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.876520][T20987] netlink: 'syz.0.4738': attribute type 1 has an invalid length. [ 354.886167][ T8000] IPVS: starting estimator thread 0... [ 354.973806][T20980] 8021q: adding VLAN 0 to HW filter on device bond8 [ 354.991241][T20980] bond7: (slave bond8): making interface the new active one [ 354.999417][T20988] IPVS: using max 40 ests per chain, 96000 per kthread [ 355.011454][T20980] bond7: (slave bond8): Enslaving as an active interface with an up link [ 355.321688][T21017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.345338][ T7542] lo speed is unknown, defaulting to 1000 [ 355.368803][T21029] sctp: [Deprecated]: syz.3.4754 (pid 21029) Use of int in max_burst socket option. [ 355.368803][T21029] Use struct sctp_assoc_value instead [ 355.590040][T21043] dvmrp1: entered allmulticast mode [ 355.695637][T21053] nbd: must specify at least one socket [ 355.705994][T21053] nbd: must specify at least one socket [ 355.818361][T21067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 356.161919][T21070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.273968][T21075] netlink: 'syz.4.4770': attribute type 10 has an invalid length. [ 356.286060][T21075] batman_adv: batadv0: Adding interface: team0 [ 356.298091][T21075] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.354580][T21075] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 356.516095][T21094] netlink: 'syz.0.4776': attribute type 1 has an invalid length. [ 356.572987][T21094] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.604068][T21087] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.611922][T21087] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 356.624642][T21087] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 356.661734][T21094] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.755653][T21104] bridge0: port 3(batadv0) entered disabled state [ 356.800776][T21104] bridge_slave_1: left allmulticast mode [ 356.807716][T21104] bridge_slave_1: left promiscuous mode [ 356.813848][T21104] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.823840][T21104] bridge_slave_0: left allmulticast mode [ 356.832050][T21104] bridge_slave_0: left promiscuous mode [ 356.846448][T21104] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.584739][T21155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.071437][T21194] __nla_validate_parse: 82 callbacks suppressed [ 358.071468][T21194] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4811'. [ 358.154848][T21203] netlink: 'syz.0.4815': attribute type 13 has an invalid length. [ 358.166529][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4814'. [ 358.205595][T21203] veth0_macvtap: left promiscuous mode [ 358.219514][T21203] macvtap0: entered allmulticast mode [ 358.253866][T21203] macvtap0: refused to change device tx_queue_len [ 358.281891][T21208] netlink: 'syz.4.4816': attribute type 3 has an invalid length. [ 358.886376][T21242] vlan0 (unregistering): left allmulticast mode [ 358.901024][T21242] veth0_vlan (unregistering): left allmulticast mode [ 358.918102][T21242] vlan0 (unregistering): left promiscuous mode [ 359.052039][T21264] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4833'. [ 359.070059][T21264] netlink: 'syz.3.4833': attribute type 18 has an invalid length. [ 359.166665][T21273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4835'. [ 359.204609][T21275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.332071][T21282] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 359.388731][T21285] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 359.429134][T21289] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4842'. [ 359.455787][T21285] batman_adv: batadv0: Removing interface: team0 [ 359.638030][T21301] FAULT_INJECTION: forcing a failure. [ 359.638030][T21301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.670047][T21301] CPU: 1 UID: 0 PID: 21301 Comm: syz.3.4845 Not tainted syzkaller #0 PREEMPT(full) [ 359.670089][T21301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.670105][T21301] Call Trace: [ 359.670115][T21301] [ 359.670125][T21301] dump_stack_lvl+0x189/0x250 [ 359.670158][T21301] ? __pfx____ratelimit+0x10/0x10 [ 359.670190][T21301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.670216][T21301] ? __pfx__printk+0x10/0x10 [ 359.670245][T21301] ? __might_fault+0xb0/0x130 [ 359.670279][T21301] ? rcu_is_watching+0x15/0xb0 [ 359.670303][T21301] should_fail_ex+0x414/0x560 [ 359.670337][T21301] _copy_to_iter+0x1db/0x16f0 [ 359.670361][T21301] ? rcu_is_watching+0x15/0xb0 [ 359.670383][T21301] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.670413][T21301] ? __pfx__copy_to_iter+0x10/0x10 [ 359.670431][T21301] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 359.670457][T21301] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 359.670477][T21301] __skb_datagram_iter+0xf8/0x990 [ 359.670496][T21301] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 359.670517][T21301] skb_copy_datagram_iter+0xc5/0x230 [ 359.670536][T21301] netlink_recvmsg+0x2ab/0xa30 [ 359.670565][T21301] ? __pfx_netlink_recvmsg+0x10/0x10 [ 359.670588][T21301] ? lock_release+0x4b/0x3e0 [ 359.670618][T21301] ? aa_sock_msg_perm+0xf1/0x1d0 [ 359.670634][T21301] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 359.670661][T21301] ? security_socket_recvmsg+0x7e/0x2e0 [ 359.670686][T21301] ? __pfx_netlink_recvmsg+0x10/0x10 [ 359.670719][T21301] sock_recvmsg+0x22c/0x270 [ 359.670747][T21301] __sys_recvfrom+0x1f6/0x340 [ 359.670762][T21301] ? __pfx___sys_recvfrom+0x10/0x10 [ 359.670775][T21301] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 359.670804][T21301] ? __fget_files+0x3a0/0x420 [ 359.670838][T21301] ? ksys_write+0x22a/0x250 [ 359.670860][T21301] ? __pfx_ksys_write+0x10/0x10 [ 359.670879][T21301] ? rcu_is_watching+0x15/0xb0 [ 359.670896][T21301] __x64_sys_recvfrom+0xde/0x100 [ 359.670911][T21301] do_syscall_64+0xfa/0x3b0 [ 359.670936][T21301] ? rcu_is_watching+0x15/0xb0 [ 359.670950][T21301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.670966][T21301] ? clear_bhb_loop+0x60/0xb0 [ 359.670983][T21301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.671017][T21301] RIP: 0033:0x7f13981909b4 [ 359.671040][T21301] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 359.671060][T21301] RSP: 002b:00007f1398f4eed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 359.671093][T21301] RAX: ffffffffffffffda RBX: 00007f1398f4efc0 RCX: 00007f13981909b4 [ 359.671106][T21301] RDX: 0000000000001000 RSI: 00007f1398f4f010 RDI: 0000000000000003 [ 359.671118][T21301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.671127][T21301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 359.671137][T21301] R13: 00007f1398f4ef68 R14: 00007f1398f4f010 R15: 0000000000000000 [ 359.671155][T21301] [ 360.091442][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4848'. [ 360.169235][T21305] syz.4.4847 (21305) used greatest stack depth: 17992 bytes left [ 360.218099][T21320] netlink: 'syz.4.4852': attribute type 21 has an invalid length. [ 360.272989][T21320] netlink: 'syz.4.4852': attribute type 6 has an invalid length. [ 360.327014][T21320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4852'. [ 360.375489][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4856'. [ 360.463051][T21339] openvswitch: netlink: Key type 29 is not supported [ 360.476159][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4857'. [ 360.634019][T21351] tipc: Enabled bearer , priority 0 [ 360.645938][T21351] syzkaller0: entered promiscuous mode [ 360.647357][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4863'. [ 360.651789][T21351] syzkaller0: entered allmulticast mode [ 360.679870][T21353] netlink: 'syz.0.4863': attribute type 12 has an invalid length. [ 360.696763][T21353] netlink: 'syz.0.4863': attribute type 11 has an invalid length. [ 360.800495][T21360] tipc: Resetting bearer [ 360.830822][T21365] FAULT_INJECTION: forcing a failure. [ 360.830822][T21365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.887954][T21349] tipc: Resetting bearer [ 360.913673][T21365] CPU: 1 UID: 0 PID: 21365 Comm: syz.4.4866 Not tainted syzkaller #0 PREEMPT(full) [ 360.913705][T21365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.913721][T21365] Call Trace: [ 360.913730][T21365] [ 360.913740][T21365] dump_stack_lvl+0x189/0x250 [ 360.913782][T21365] ? __pfx____ratelimit+0x10/0x10 [ 360.913814][T21365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.913839][T21365] ? __pfx__printk+0x10/0x10 [ 360.913868][T21365] ? __might_fault+0xb0/0x130 [ 360.913902][T21365] ? rcu_is_watching+0x15/0xb0 [ 360.913926][T21365] should_fail_ex+0x414/0x560 [ 360.913958][T21365] _copy_from_user+0x2d/0xb0 [ 360.913984][T21365] kstrtouint_from_user+0xc4/0x170 [ 360.914017][T21365] ? __might_fault+0xb0/0x130 [ 360.914046][T21365] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 360.914083][T21365] ? vfs_write+0x211/0xb30 [ 360.914110][T21365] ? rcu_is_watching+0x15/0xb0 [ 360.914133][T21365] proc_fail_nth_write+0x88/0x200 [ 360.914158][T21365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.914182][T21365] ? security_file_permission+0x75/0x290 [ 360.914211][T21365] ? preempt_count_add+0x91/0x1a0 [ 360.914244][T21365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.914270][T21365] vfs_write+0x27b/0xb30 [ 360.914302][T21365] ? __pfx_vfs_write+0x10/0x10 [ 360.914334][T21365] ? __fget_files+0x3a0/0x420 [ 360.914365][T21365] ? __fget_files+0x2a/0x420 [ 360.914401][T21365] ksys_write+0x145/0x250 [ 360.914429][T21365] ? __pfx_ksys_write+0x10/0x10 [ 360.914455][T21365] ? rcu_is_watching+0x15/0xb0 [ 360.914479][T21365] ? rcu_is_watching+0x15/0xb0 [ 360.914501][T21365] do_syscall_64+0xfa/0x3b0 [ 360.914540][T21365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.914562][T21365] ? clear_bhb_loop+0x60/0xb0 [ 360.914587][T21365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.914608][T21365] RIP: 0033:0x7f5faa78d69f [ 360.914628][T21365] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 360.914649][T21365] RSP: 002b:00007f5fab6b6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 360.914674][T21365] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5faa78d69f [ 360.914690][T21365] RDX: 0000000000000001 RSI: 00007f5fab6b60a0 RDI: 0000000000000004 [ 360.914704][T21365] RBP: 00007f5fab6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.914718][T21365] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 360.914732][T21365] R13: 00007f5faa9b6038 R14: 00007f5faa9b5fa0 R15: 00007ffcbc89ef78 [ 360.914764][T21365] [ 361.223260][T21349] tipc: Disabling bearer [ 361.362093][T21383] netlink: 'syz.4.4870': attribute type 4 has an invalid length. [ 361.986157][T21448] nbd: must specify an index to disconnect [ 362.110402][T21451] bond0 (unregistering): Released all slaves [ 362.318179][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.441607][T21483] team1: entered promiscuous mode [ 362.446888][T21483] team1: entered allmulticast mode [ 362.722670][T21502] netlink: 'syz.4.4897': attribute type 12 has an invalid length. [ 362.984577][T21513] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.272279][T21534] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 363.670040][T21549] netlink: 'syz.3.4914': attribute type 10 has an invalid length. [ 363.729065][T21549] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 363.811040][T21565] __nla_validate_parse: 11 callbacks suppressed [ 363.811069][T21565] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4919'. [ 363.855660][T21569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4922'. [ 363.875213][T21569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4922'. [ 363.893228][T21565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4919'. [ 364.242443][T21587] : renamed from macvlan0 [ 364.691644][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4937'. [ 364.750749][T21612] dummy0: entered promiscuous mode [ 364.756982][T21612] batadv_slave_1: entered promiscuous mode [ 364.765068][T21612] debugfs: 'hsr1' already exists in 'hsr' [ 364.784082][T21612] Cannot create hsr debugfs directory [ 364.980809][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'. [ 365.011084][T21637] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4947'. [ 365.152429][T21644] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 365.262869][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4953'. [ 365.341151][T21659] : entered promiscuous mode [ 365.435500][T21664] IPVS: persistence engine module ip_vs_pe_ not found [ 365.458569][T21665] IPVS: persistence engine module ip_vs_pe_ not found [ 365.528115][ T94] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,4096B). Runtime 210 seconds [ 365.719447][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4965'. [ 365.929885][T21698] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.4968'. [ 365.998597][T21716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 366.057616][T21722] netlink: 'syz.4.4975': attribute type 142 has an invalid length. [ 366.068702][T21716] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 366.086774][T21716] gretap3: entered promiscuous mode [ 366.094048][T21716] gretap3: entered allmulticast mode [ 366.342931][ T5959] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 366.432803][T21747] netlink: 'syz.4.4980': attribute type 8 has an invalid length. [ 366.444020][ T30] audit: type=1804 audit(1756311360.067:8): pid=21750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4982" name="/newroot/344/cgroup.controllers" dev="tmpfs" ino=1755 res=1 errno=0 [ 366.536329][ T30] audit: type=1800 audit(1756311360.067:9): pid=21750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4982" name="cgroup.controllers" dev="tmpfs" ino=1755 res=0 errno=0 [ 366.588898][T21761] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 367.057972][T21762] netlink: 'syz.1.4986': attribute type 1 has an invalid length. [ 367.164527][T21775] netlink: 'syz.2.4990': attribute type 21 has an invalid length. [ 367.200626][T21775] netlink: 'syz.2.4990': attribute type 4 has an invalid length. [ 367.239432][T21775] netlink: 'syz.2.4990': attribute type 5 has an invalid length. [ 367.809251][T21809] openvswitch: netlink: Actions may not be safe on all matching packets [ 368.113599][T21829] pim6reg1: entered promiscuous mode [ 368.120121][T21829] pim6reg1: entered allmulticast mode [ 368.151811][T21795] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 368.273086][T21843] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 368.565768][T21862] Dead loop on virtual device ip6_vti0, fix it urgently! [ 368.982875][T21908] __nla_validate_parse: 10 callbacks suppressed [ 368.982900][T21908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5038'. [ 369.005081][T21910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5039'. [ 369.071562][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5040'. [ 369.083199][T21914] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5040'. [ 369.093914][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5040'. [ 369.207181][T21930] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 369.451245][ T5183] Bluetooth: hci1: command 0x0405 tx timeout [ 369.515117][T21957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5055'. [ 369.866180][T21983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5062'. [ 369.891235][T21983] netlink: 'syz.0.5062': attribute type 1 has an invalid length. [ 369.903115][T21983] netlink: 784 bytes leftover after parsing attributes in process `syz.0.5062'. [ 370.574845][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5077'. [ 371.140903][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 371.444266][T22111] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 371.522834][T22115] veth0: entered promiscuous mode [ 371.536393][T22115] veth0: left promiscuous mode [ 371.542751][T22115] sit0: entered promiscuous mode [ 371.570936][T22115] netlink: 'syz.0.5100': attribute type 1 has an invalid length. [ 371.593349][T22120] netlink: 'syz.1.5102': attribute type 10 has an invalid length. [ 371.691373][T22120] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.015457][T22151] netlink: 'syz.2.5114': attribute type 13 has an invalid length. [ 372.031470][T22153] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 372.064783][T22153] bond13: entered promiscuous mode [ 372.070883][T22153] bond13: entered allmulticast mode [ 372.076825][T22153] 8021q: adding VLAN 0 to HW filter on device bond13 [ 372.120296][T22160] netlink: 'syz.4.5117': attribute type 1 has an invalid length. [ 372.189151][T22153] hsr_slave_0 (unregistering): left promiscuous mode [ 372.371406][T22174] netlink: 'syz.4.5123': attribute type 3 has an invalid length. [ 372.385072][T22174] netlink: 'syz.4.5123': attribute type 3 has an invalid length. [ 372.393914][T22174] netlink: 'syz.4.5123': attribute type 3 has an invalid length. [ 372.409726][T22174] netlink: 'syz.4.5123': attribute type 3 has an invalid length. [ 372.422346][T22174] netlink: 'syz.4.5123': attribute type 3 has an invalid length. [ 373.698971][T22257] sctp: [Deprecated]: syz.3.5151 (pid 22257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.698971][T22257] Use struct sctp_sack_info instead [ 374.096315][T22268] netlink: zone id is out of range [ 374.104424][T22268] netlink: zone id is out of range [ 374.111532][T22265] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 374.119123][T22268] netlink: zone id is out of range [ 374.124275][T22268] netlink: zone id is out of range [ 374.139118][T22265] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 374.170865][T22268] netlink: zone id is out of range [ 374.176136][T22268] netlink: zone id is out of range [ 374.199749][T22274] team0: Device hsr_slave_0 failed to register rx_handler [ 374.211346][T22268] netlink: zone id is out of range [ 374.228221][T22268] netlink: zone id is out of range [ 374.233394][T22268] netlink: zone id is out of range [ 374.339546][T22281] __nla_validate_parse: 20 callbacks suppressed [ 374.339573][T22281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5158'. [ 374.379338][T22279] netlink: 784 bytes leftover after parsing attributes in process `syz.3.5157'. [ 374.420464][T22281] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5158'. [ 374.491071][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5158'. [ 374.680852][T22304] IPVS: set_ctl: invalid protocol: 94 172.20.20.26:20003 [ 374.797270][T22314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5170'. [ 375.014780][T22332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5175'. [ 375.049644][T22335] validate_nla: 41 callbacks suppressed [ 375.049667][T22335] netlink: 'syz.2.5177': attribute type 5 has an invalid length. [ 375.055589][T22332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5175'. [ 375.175274][T22345] FAULT_INJECTION: forcing a failure. [ 375.175274][T22345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.187542][T22348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5182'. [ 375.203957][T22345] CPU: 1 UID: 0 PID: 22345 Comm: syz.3.5179 Not tainted syzkaller #0 PREEMPT(full) [ 375.203989][T22345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.204008][T22345] Call Trace: [ 375.204017][T22345] [ 375.204027][T22345] dump_stack_lvl+0x189/0x250 [ 375.204061][T22345] ? __pfx____ratelimit+0x10/0x10 [ 375.204093][T22345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.204119][T22345] ? __pfx__printk+0x10/0x10 [ 375.204152][T22345] ? rcu_is_watching+0x15/0xb0 [ 375.204175][T22345] should_fail_ex+0x414/0x560 [ 375.204205][T22345] _copy_to_user+0x31/0xb0 [ 375.204231][T22345] simple_read_from_buffer+0xe1/0x170 [ 375.204264][T22345] proc_fail_nth_read+0x1b3/0x220 [ 375.204289][T22345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.204314][T22345] ? rw_verify_area+0x2a6/0x4d0 [ 375.204341][T22345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.204365][T22345] vfs_read+0x200/0xa30 [ 375.204390][T22345] ? fdget_pos+0x247/0x320 [ 375.204411][T22345] ? __pfx___mutex_lock+0x10/0x10 [ 375.204443][T22345] ? __pfx_vfs_read+0x10/0x10 [ 375.204473][T22345] ? __fget_files+0x3a0/0x420 [ 375.204503][T22345] ? __fget_files+0x2a/0x420 [ 375.204539][T22345] ksys_read+0x145/0x250 [ 375.204566][T22345] ? __pfx_ksys_read+0x10/0x10 [ 375.204594][T22345] ? rcu_is_watching+0x15/0xb0 [ 375.204615][T22345] do_syscall_64+0xfa/0x3b0 [ 375.204646][T22345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.204668][T22345] ? clear_bhb_loop+0x60/0xb0 [ 375.204693][T22345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.204719][T22345] RIP: 0033:0x7f139818d5fc [ 375.204738][T22345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 375.204766][T22345] RSP: 002b:00007f1398f50030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.204791][T22345] RAX: ffffffffffffffda RBX: 00007f13983b5fa0 RCX: 00007f139818d5fc [ 375.204807][T22345] RDX: 000000000000000f RSI: 00007f1398f500a0 RDI: 0000000000000004 [ 375.204821][T22345] RBP: 00007f1398f50090 R08: 0000000000000000 R09: 0000000000000000 [ 375.204835][T22345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.204848][T22345] R13: 00007f13983b6038 R14: 00007f13983b5fa0 R15: 00007ffc6f582828 [ 375.204872][T22345] [ 375.508400][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5183'. [ 375.708345][T22366] netlink: 'syz.1.5186': attribute type 1 has an invalid length. [ 375.747547][T22366] netlink: 'syz.1.5186': attribute type 2 has an invalid length. [ 375.760232][T22373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5186'. [ 375.943737][T22387] ieee802154 phy1 wpan1: encryption failed: -126 [ 376.038933][T22392] netlink: 'syz.3.5194': attribute type 1 has an invalid length. [ 376.134291][T22398] mac80211_hwsim hwsim56 : renamed from wlan1 (while UP) [ 376.421704][T22424] netlink: 'syz.2.5205': attribute type 1 has an invalid length. [ 376.472752][T22424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.569245][T22433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.596235][T22433] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 376.613504][T22433] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 376.647016][T22424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.052815][T22473] netlink: 'syz.2.5220': attribute type 9 has an invalid length. [ 377.106720][T22474] netlink: 'syz.2.5220': attribute type 9 has an invalid length. [ 377.123737][T22473] netlink: 'syz.2.5220': attribute type 9 has an invalid length. [ 378.672724][T22519] bond14: (slave vcan0): The slave device specified does not support setting the MAC address [ 378.695999][T22519] bond14: (slave vcan0): Error -95 calling set_mac_address [ 378.757958][T22518] netlink: 'syz.4.5238': attribute type 10 has an invalid length. [ 378.765954][T22518] mac80211_hwsim hwsim47 wlan1: left allmulticast mode [ 378.778930][T22518] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 379.005848][T22554] veth0_to_bridge: entered promiscuous mode [ 379.052375][T22552] veth0_to_bridge: left promiscuous mode [ 379.288737][T22571] veth0: entered promiscuous mode [ 379.457993][T22583] __nla_validate_parse: 13 callbacks suppressed [ 379.458020][T22583] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5259'. [ 379.467428][T22585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5260'. [ 379.578630][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 379.588121][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5262'. [ 379.600012][T22591] netlink: 'syz.3.5262': attribute type 12 has an invalid length. [ 379.652681][T22592] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20001 [ 379.661488][T22591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5262'. [ 379.747910][T22593] macvlan0: entered promiscuous mode [ 379.762976][T22593] macvlan0: entered allmulticast mode [ 379.775060][T22593] bond9: entered promiscuous mode [ 379.782442][T22602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5266'. [ 379.789743][T22593] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 379.792415][T22602] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5266'. [ 379.808228][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5266'. [ 379.820247][T22593] bond9: left promiscuous mode [ 380.051484][T22615] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 380.063488][T22615] CPU: 1 UID: 0 PID: 22615 Comm: syz.0.5271 Not tainted syzkaller #0 PREEMPT(full) [ 380.063521][T22615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.063536][T22615] Call Trace: [ 380.063546][T22615] [ 380.063556][T22615] dump_stack_lvl+0x189/0x250 [ 380.063594][T22615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.063622][T22615] ? __pfx__printk+0x10/0x10 [ 380.063650][T22615] ? kernfs_root+0x1c/0x230 [ 380.063677][T22615] ? kernfs_path_from_node+0x2f/0x290 [ 380.063700][T22615] ? kernfs_path_from_node+0x250/0x290 [ 380.063724][T22615] ? kernfs_path_from_node+0x2f/0x290 [ 380.063752][T22615] sysfs_warn_dup+0x8e/0xa0 [ 380.063773][T22615] sysfs_do_create_link_sd+0xc0/0x110 [ 380.063799][T22615] device_add_class_symlinks+0x1cf/0x240 [ 380.063826][T22615] device_add+0x475/0xb50 [ 380.063850][T22615] wiphy_register+0x1ba6/0x28d0 [ 380.063901][T22615] ? __pfx_wiphy_register+0x10/0x10 [ 380.063933][T22615] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 380.063962][T22615] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 380.063988][T22615] ieee80211_register_hw+0x3425/0x4080 [ 380.064024][T22615] ? ieee80211_register_hw+0x13f1/0x4080 [ 380.064053][T22615] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 380.064081][T22615] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.064128][T22615] ? __hrtimer_setup+0x187/0x210 [ 380.064149][T22615] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 380.064186][T22615] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 380.064233][T22615] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 380.064260][T22615] ? trace_kmalloc+0x1f/0xd0 [ 380.064288][T22615] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 380.064320][T22615] ? kstrndup+0xbf/0x160 [ 380.064348][T22615] hwsim_new_radio_nl+0xea4/0x1b10 [ 380.064377][T22615] ? __pfx___nla_validate_parse+0x10/0x10 [ 380.064419][T22615] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.064454][T22615] ? __nla_parse+0x40/0x60 [ 380.064490][T22615] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 380.064524][T22615] genl_family_rcv_msg_doit+0x215/0x300 [ 380.064555][T22615] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.064588][T22615] ? bpf_lsm_capable+0x9/0x20 [ 380.064618][T22615] ? security_capable+0x7e/0x2e0 [ 380.064654][T22615] genl_rcv_msg+0x60e/0x790 [ 380.064683][T22615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.064706][T22615] ? __kasan_slab_alloc+0x6c/0x80 [ 380.064736][T22615] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.064764][T22615] ? __netlink_lookup+0xbd/0x810 [ 380.064783][T22615] ? rcu_is_watching+0x15/0xb0 [ 380.064811][T22615] netlink_rcv_skb+0x208/0x470 [ 380.064845][T22615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.064870][T22615] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.064909][T22615] ? lock_release+0x4b/0x3e0 [ 380.064944][T22615] ? down_read+0x1ad/0x2e0 [ 380.064966][T22615] genl_rcv+0x28/0x40 [ 380.064988][T22615] netlink_unicast+0x82c/0x9e0 [ 380.065021][T22615] ? __pfx_netlink_unicast+0x10/0x10 [ 380.065051][T22615] ? netlink_sendmsg+0x642/0xb30 [ 380.065093][T22615] ? skb_put+0x11b/0x210 [ 380.065120][T22615] netlink_sendmsg+0x805/0xb30 [ 380.065161][T22615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.065197][T22615] ? futex_unqueue+0x22/0x240 [ 380.065222][T22615] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.065244][T22615] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.065268][T22615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.065304][T22615] __sock_sendmsg+0x21c/0x270 [ 380.065334][T22615] ____sys_sendmsg+0x505/0x830 [ 380.065360][T22615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.065389][T22615] ? import_iovec+0x74/0xa0 [ 380.065417][T22615] ___sys_sendmsg+0x21f/0x2a0 [ 380.065441][T22615] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.065467][T22615] ? futex_wait+0x285/0x360 [ 380.065515][T22615] ? __fget_files+0x2a/0x420 [ 380.065548][T22615] ? __fget_files+0x3a0/0x420 [ 380.065587][T22615] __x64_sys_sendmsg+0x19b/0x260 [ 380.065612][T22615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.065641][T22615] ? rcu_is_watching+0x15/0xb0 [ 380.065666][T22615] ? rcu_is_watching+0x15/0xb0 [ 380.065690][T22615] do_syscall_64+0xfa/0x3b0 [ 380.065725][T22615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.065748][T22615] ? clear_bhb_loop+0x60/0xb0 [ 380.065774][T22615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.065796][T22615] RIP: 0033:0x7fb418d8ebe9 [ 380.065817][T22615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.065839][T22615] RSP: 002b:00007fb419b2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.065865][T22615] RAX: ffffffffffffffda RBX: 00007fb418fb5fa0 RCX: 00007fb418d8ebe9 [ 380.065882][T22615] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 380.065897][T22615] RBP: 00007fb418e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 380.065911][T22615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.065925][T22615] R13: 00007fb418fb6038 R14: 00007fb418fb5fa0 R15: 00007ffdc4c25e58 [ 380.065951][T22615] [ 380.621416][T22570] veth0: left promiscuous mode [ 380.878452][T22644] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.5280'. [ 380.900075][T22640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5279'. [ 380.998397][T22651] IPVS: Error joining to the multicast group [ 381.085454][T22657] FAULT_INJECTION: forcing a failure. [ 381.085454][T22657] name failslab, interval 1, probability 0, space 0, times 0 [ 381.107285][T22657] CPU: 0 UID: 0 PID: 22657 Comm: syz.1.5285 Not tainted syzkaller #0 PREEMPT(full) [ 381.107320][T22657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.107336][T22657] Call Trace: [ 381.107345][T22657] [ 381.107356][T22657] dump_stack_lvl+0x189/0x250 [ 381.107393][T22657] ? __pfx____ratelimit+0x10/0x10 [ 381.107425][T22657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.107450][T22657] ? __pfx__printk+0x10/0x10 [ 381.107476][T22657] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 381.107515][T22657] should_fail_ex+0x414/0x560 [ 381.107545][T22657] should_failslab+0xa8/0x100 [ 381.107579][T22657] kmem_cache_alloc_noprof+0x73/0x3c0 [ 381.107607][T22657] ? skb_clone+0x212/0x3a0 [ 381.107633][T22657] skb_clone+0x212/0x3a0 [ 381.107657][T22657] __netlink_deliver_tap+0x404/0x850 [ 381.107695][T22657] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.107728][T22657] netlink_deliver_tap+0x19c/0x1b0 [ 381.107759][T22657] netlink_dump+0x92b/0xe90 [ 381.107795][T22657] ? __pfx_netlink_dump+0x10/0x10 [ 381.107832][T22657] ? kmem_cache_free+0x18f/0x400 [ 381.107863][T22657] netlink_recvmsg+0x676/0xa30 [ 381.107900][T22657] ? __pfx_netlink_recvmsg+0x10/0x10 [ 381.107931][T22657] ? do_recvmmsg+0x307/0x770 [ 381.107954][T22657] ? __x64_sys_recvmmsg+0x1af/0x240 [ 381.107976][T22657] ? do_syscall_64+0xfa/0x3b0 [ 381.108014][T22657] ? __pfx_netlink_recvmsg+0x10/0x10 [ 381.108046][T22657] sock_recvmsg_nosec+0x183/0x1c0 [ 381.108078][T22657] ____sys_recvmsg+0x3aa/0x460 [ 381.108104][T22657] ? __pfx_____sys_recvmsg+0x10/0x10 [ 381.108135][T22657] ? import_iovec+0x74/0xa0 [ 381.108171][T22657] ___sys_recvmsg+0x1b5/0x510 [ 381.108196][T22657] ? __pfx____sys_recvmsg+0x10/0x10 [ 381.108222][T22657] ? __fget_files+0x2a/0x420 [ 381.108264][T22657] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 381.108296][T22657] ? lock_release+0x4b/0x3e0 [ 381.108332][T22657] do_recvmmsg+0x307/0x770 [ 381.108359][T22657] ? __pfx_do_recvmmsg+0x10/0x10 [ 381.108381][T22657] ? rcu_is_watching+0x15/0xb0 [ 381.108406][T22657] ? _copy_from_user+0x94/0xb0 [ 381.108437][T22657] __x64_sys_recvmmsg+0x1af/0x240 [ 381.108462][T22657] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 381.108484][T22657] ? rcu_is_watching+0x15/0xb0 [ 381.108506][T22657] ? rcu_is_watching+0x15/0xb0 [ 381.108527][T22657] do_syscall_64+0xfa/0x3b0 [ 381.108559][T22657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.108580][T22657] ? clear_bhb_loop+0x60/0xb0 [ 381.108604][T22657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.108626][T22657] RIP: 0033:0x7f0fba58ebe9 [ 381.108646][T22657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.108667][T22657] RSP: 002b:00007f0fbb376038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 381.108691][T22657] RAX: ffffffffffffffda RBX: 00007f0fba7b5fa0 RCX: 00007f0fba58ebe9 [ 381.108709][T22657] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 381.108723][T22657] RBP: 00007f0fbb376090 R08: 0000200000003700 R09: 0000000000000000 [ 381.108738][T22657] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 381.108753][T22657] R13: 00007f0fba7b6038 R14: 00007f0fba7b5fa0 R15: 00007fff16526fa8 [ 381.108777][T22657] [ 381.454303][T22660] wg1 speed is unknown, defaulting to 1000 [ 381.463435][T22660] hsr0 speed is unknown, defaulting to 1000 [ 381.782042][T22660] lo speed is unknown, defaulting to 1000 [ 382.888391][T22737] block nbd2: not configured, cannot reconfigure [ 383.298094][T22768] tipc: Enabled bearer , priority 0 [ 383.318612][T22766] tipc: Disabling bearer [ 384.063892][T22826] validate_nla: 1 callbacks suppressed [ 384.063916][T22826] netlink: 'syz.4.5338': attribute type 1 has an invalid length. [ 384.091152][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.176794][T22826] 8021q: adding VLAN 0 to HW filter on device bond15 [ 384.222397][T22832] 8021q: adding VLAN 0 to HW filter on device bond15 [ 384.233309][T22832] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.246088][T22832] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 384.366949][T22843] 8021q: adding VLAN 0 to HW filter on device bond10 [ 384.377233][T22848] FAULT_INJECTION: forcing a failure. [ 384.377233][T22848] name failslab, interval 1, probability 0, space 0, times 0 [ 384.423258][T22848] CPU: 1 UID: 0 PID: 22848 Comm: syz.3.5344 Not tainted syzkaller #0 PREEMPT(full) [ 384.423291][T22848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.423307][T22848] Call Trace: [ 384.423316][T22848] [ 384.423326][T22848] dump_stack_lvl+0x189/0x250 [ 384.423360][T22848] ? __pfx____ratelimit+0x10/0x10 [ 384.423392][T22848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.423419][T22848] ? __pfx__printk+0x10/0x10 [ 384.423451][T22848] ? __pfx___might_resched+0x10/0x10 [ 384.423472][T22848] ? lock_acquire+0x5f/0x360 [ 384.423506][T22848] should_fail_ex+0x414/0x560 [ 384.423548][T22848] should_failslab+0xa8/0x100 [ 384.423582][T22848] __kmalloc_noprof+0xcb/0x4f0 [ 384.423611][T22848] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 384.423642][T22848] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 384.423672][T22848] genl_start+0x180/0x6c0 [ 384.423695][T22848] ? netlink_lookup+0x30/0x200 [ 384.423728][T22848] __netlink_dump_start+0x466/0x7e0 [ 384.423762][T22848] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 384.423791][T22848] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 384.423817][T22848] ? genl_get_cmd+0x67f/0x910 [ 384.423840][T22848] ? __pfx___mutex_lock+0x10/0x10 [ 384.423874][T22848] ? __pfx_genl_start+0x10/0x10 [ 384.423896][T22848] ? __pfx_genl_dumpit+0x10/0x10 [ 384.423918][T22848] ? __pfx_genl_done+0x10/0x10 [ 384.423944][T22848] ? stack_trace_save+0x9c/0xe0 [ 384.423974][T22848] genl_rcv_msg+0x5da/0x790 [ 384.424000][T22848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.424023][T22848] ? __kasan_slab_alloc+0x6c/0x80 [ 384.424053][T22848] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 384.424082][T22848] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 384.424113][T22848] ? __netlink_lookup+0xbd/0x810 [ 384.424131][T22848] ? rcu_is_watching+0x15/0xb0 [ 384.424158][T22848] netlink_rcv_skb+0x208/0x470 [ 384.424190][T22848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.424214][T22848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.424250][T22848] ? lock_release+0x4b/0x3e0 [ 384.424283][T22848] ? down_read+0x1ad/0x2e0 [ 384.424304][T22848] genl_rcv+0x28/0x40 [ 384.424326][T22848] netlink_unicast+0x82c/0x9e0 [ 384.424358][T22848] ? __pfx_netlink_unicast+0x10/0x10 [ 384.424387][T22848] ? netlink_sendmsg+0x642/0xb30 [ 384.424418][T22848] ? skb_put+0x11b/0x210 [ 384.424440][T22848] netlink_sendmsg+0x805/0xb30 [ 384.424477][T22848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.424523][T22848] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.424546][T22848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.424571][T22848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.424604][T22848] __sock_sendmsg+0x21c/0x270 [ 384.424634][T22848] ____sys_sendmsg+0x505/0x830 [ 384.424660][T22848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.424687][T22848] ? import_iovec+0x74/0xa0 [ 384.424714][T22848] ___sys_sendmsg+0x21f/0x2a0 [ 384.424738][T22848] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.424778][T22848] ? __fget_files+0x2a/0x420 [ 384.424812][T22848] ? __fget_files+0x3a0/0x420 [ 384.424850][T22848] __x64_sys_sendmsg+0x19b/0x260 [ 384.424873][T22848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.424901][T22848] ? __pfx_ksys_write+0x10/0x10 [ 384.424930][T22848] ? rcu_is_watching+0x15/0xb0 [ 384.424954][T22848] ? rcu_is_watching+0x15/0xb0 [ 384.424976][T22848] do_syscall_64+0xfa/0x3b0 [ 384.425009][T22848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.425032][T22848] ? clear_bhb_loop+0x60/0xb0 [ 384.425057][T22848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.425078][T22848] RIP: 0033:0x7f139818ebe9 [ 384.425098][T22848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.425119][T22848] RSP: 002b:00007f1398f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.425143][T22848] RAX: ffffffffffffffda RBX: 00007f13983b5fa0 RCX: 00007f139818ebe9 [ 384.425160][T22848] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 384.425175][T22848] RBP: 00007f1398f50090 R08: 0000000000000000 R09: 0000000000000000 [ 384.425190][T22848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.425204][T22848] R13: 00007f13983b6038 R14: 00007f13983b5fa0 R15: 00007ffc6f582828 [ 384.425228][T22848] [ 385.085102][T22859] can: request_module (can-proto-3) failed. [ 385.115856][T22874] FAULT_INJECTION: forcing a failure. [ 385.115856][T22874] name failslab, interval 1, probability 0, space 0, times 0 [ 385.129395][T22874] CPU: 1 UID: 0 PID: 22874 Comm: syz.2.5354 Not tainted syzkaller #0 PREEMPT(full) [ 385.129424][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.129438][T22874] Call Trace: [ 385.129447][T22874] [ 385.129457][T22874] dump_stack_lvl+0x189/0x250 [ 385.129488][T22874] ? __pfx____ratelimit+0x10/0x10 [ 385.129519][T22874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.129545][T22874] ? __pfx__printk+0x10/0x10 [ 385.129574][T22874] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 385.129615][T22874] should_fail_ex+0x414/0x560 [ 385.129655][T22874] should_failslab+0xa8/0x100 [ 385.129688][T22874] kmem_cache_alloc_noprof+0x73/0x3c0 [ 385.129716][T22874] ? skb_clone+0x212/0x3a0 [ 385.129741][T22874] skb_clone+0x212/0x3a0 [ 385.129766][T22874] __netlink_deliver_tap+0x404/0x850 [ 385.129804][T22874] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.129835][T22874] netlink_deliver_tap+0x19c/0x1b0 [ 385.129866][T22874] netlink_dump+0x92b/0xe90 [ 385.129901][T22874] ? __pfx_netlink_dump+0x10/0x10 [ 385.129940][T22874] ? kmem_cache_free+0x18f/0x400 [ 385.129969][T22874] netlink_recvmsg+0x676/0xa30 [ 385.130006][T22874] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.130035][T22874] ? do_recvmmsg+0x307/0x770 [ 385.130055][T22874] ? __x64_sys_recvmmsg+0x1af/0x240 [ 385.130077][T22874] ? do_syscall_64+0xfa/0x3b0 [ 385.130114][T22874] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.130146][T22874] sock_recvmsg_nosec+0x183/0x1c0 [ 385.130176][T22874] ____sys_recvmsg+0x3aa/0x460 [ 385.130204][T22874] ? __pfx_____sys_recvmsg+0x10/0x10 [ 385.130236][T22874] ? import_iovec+0x74/0xa0 [ 385.130262][T22874] ___sys_recvmsg+0x1b5/0x510 [ 385.130289][T22874] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.130315][T22874] ? __fget_files+0x2a/0x420 [ 385.130356][T22874] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 385.130389][T22874] ? lock_release+0x4b/0x3e0 [ 385.130425][T22874] do_recvmmsg+0x307/0x770 [ 385.130453][T22874] ? __pfx_do_recvmmsg+0x10/0x10 [ 385.130476][T22874] ? rcu_is_watching+0x15/0xb0 [ 385.130502][T22874] ? _copy_from_user+0x94/0xb0 [ 385.130536][T22874] __x64_sys_recvmmsg+0x1af/0x240 [ 385.130562][T22874] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 385.130585][T22874] ? rcu_is_watching+0x15/0xb0 [ 385.130609][T22874] ? rcu_is_watching+0x15/0xb0 [ 385.130631][T22874] do_syscall_64+0xfa/0x3b0 [ 385.130671][T22874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.130693][T22874] ? clear_bhb_loop+0x60/0xb0 [ 385.130717][T22874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.130740][T22874] RIP: 0033:0x7f1d1878ebe9 [ 385.130759][T22874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.130780][T22874] RSP: 002b:00007f1d19535038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 385.130805][T22874] RAX: ffffffffffffffda RBX: 00007f1d189b5fa0 RCX: 00007f1d1878ebe9 [ 385.130822][T22874] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 385.130837][T22874] RBP: 00007f1d19535090 R08: 0000200000003700 R09: 0000000000000000 [ 385.130853][T22874] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 385.130867][T22874] R13: 00007f1d189b6038 R14: 00007f1d189b5fa0 R15: 00007ffed1c10ad8 [ 385.130892][T22874] [ 385.584973][T22881] __nla_validate_parse: 14 callbacks suppressed [ 385.584998][T22881] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5356'. [ 385.635834][T22884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5358'. [ 385.645027][T22884] net_ratelimit: 24 callbacks suppressed [ 385.645049][T22884] openvswitch: netlink: Flow key attr not present in new flow. [ 385.661779][T22884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5358'. [ 385.690444][T22888] FAULT_INJECTION: forcing a failure. [ 385.690444][T22888] name failslab, interval 1, probability 0, space 0, times 0 [ 385.710307][T22888] CPU: 1 UID: 0 PID: 22888 Comm: syz.2.5359 Not tainted syzkaller #0 PREEMPT(full) [ 385.710337][T22888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.710362][T22888] Call Trace: [ 385.710371][T22888] [ 385.710381][T22888] dump_stack_lvl+0x189/0x250 [ 385.710411][T22888] ? __pfx____ratelimit+0x10/0x10 [ 385.710443][T22888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.710468][T22888] ? __pfx__printk+0x10/0x10 [ 385.710501][T22888] ? __pfx___might_resched+0x10/0x10 [ 385.710521][T22888] ? lock_acquire+0x5f/0x360 [ 385.710554][T22888] should_fail_ex+0x414/0x560 [ 385.710585][T22888] should_failslab+0xa8/0x100 [ 385.710618][T22888] __kmalloc_cache_noprof+0x70/0x3d0 [ 385.710647][T22888] ? genl_start+0x1c9/0x6c0 [ 385.710675][T22888] genl_start+0x1c9/0x6c0 [ 385.710698][T22888] ? netlink_lookup+0x30/0x200 [ 385.710732][T22888] __netlink_dump_start+0x466/0x7e0 [ 385.710767][T22888] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 385.710795][T22888] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 385.710820][T22888] ? genl_get_cmd+0x67f/0x910 [ 385.710844][T22888] ? __pfx___mutex_lock+0x10/0x10 [ 385.710876][T22888] ? __pfx_genl_start+0x10/0x10 [ 385.710899][T22888] ? __pfx_genl_dumpit+0x10/0x10 [ 385.710922][T22888] ? __pfx_genl_done+0x10/0x10 [ 385.710949][T22888] ? stack_trace_save+0x9c/0xe0 [ 385.710977][T22888] genl_rcv_msg+0x5da/0x790 [ 385.711005][T22888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.711027][T22888] ? __kasan_slab_alloc+0x6c/0x80 [ 385.711056][T22888] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 385.711086][T22888] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 385.711116][T22888] ? __netlink_lookup+0xbd/0x810 [ 385.711135][T22888] ? rcu_is_watching+0x15/0xb0 [ 385.711161][T22888] netlink_rcv_skb+0x208/0x470 [ 385.711194][T22888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.711218][T22888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.711256][T22888] ? lock_release+0x4b/0x3e0 [ 385.711289][T22888] ? down_read+0x1ad/0x2e0 [ 385.711310][T22888] genl_rcv+0x28/0x40 [ 385.711358][T22888] netlink_unicast+0x82c/0x9e0 [ 385.711392][T22888] ? __pfx_netlink_unicast+0x10/0x10 [ 385.711421][T22888] ? netlink_sendmsg+0x642/0xb30 [ 385.711452][T22888] ? skb_put+0x11b/0x210 [ 385.711474][T22888] netlink_sendmsg+0x805/0xb30 [ 385.711510][T22888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.711545][T22888] ? aa_sock_msg_perm+0xf1/0x1d0 [ 385.711566][T22888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.711590][T22888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.711623][T22888] __sock_sendmsg+0x21c/0x270 [ 385.711652][T22888] ____sys_sendmsg+0x505/0x830 [ 385.711677][T22888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.711704][T22888] ? import_iovec+0x74/0xa0 [ 385.711730][T22888] ___sys_sendmsg+0x21f/0x2a0 [ 385.711753][T22888] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.711793][T22888] ? __fget_files+0x2a/0x420 [ 385.711825][T22888] ? __fget_files+0x3a0/0x420 [ 385.711863][T22888] __x64_sys_sendmsg+0x19b/0x260 [ 385.711884][T22888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.711910][T22888] ? __pfx_ksys_write+0x10/0x10 [ 385.711936][T22888] ? rcu_is_watching+0x15/0xb0 [ 385.711959][T22888] ? rcu_is_watching+0x15/0xb0 [ 385.711981][T22888] do_syscall_64+0xfa/0x3b0 [ 385.712013][T22888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.712035][T22888] ? clear_bhb_loop+0x60/0xb0 [ 385.712059][T22888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.712080][T22888] RIP: 0033:0x7f1d1878ebe9 [ 385.712099][T22888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.712120][T22888] RSP: 002b:00007f1d19535038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.712145][T22888] RAX: ffffffffffffffda RBX: 00007f1d189b5fa0 RCX: 00007f1d1878ebe9 [ 385.712162][T22888] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 385.712176][T22888] RBP: 00007f1d19535090 R08: 0000000000000000 R09: 0000000000000000 [ 385.712190][T22888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.712205][T22888] R13: 00007f1d189b6038 R14: 00007f1d189b5fa0 R15: 00007ffed1c10ad8 [ 385.712230][T22888] [ 386.127976][T22892] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5361'. [ 386.231551][ T5862] Bluetooth: hci5: command 0x0406 tx timeout [ 386.388339][T22909] syzkaller0: entered promiscuous mode [ 386.393961][T22909] syzkaller0: entered allmulticast mode [ 386.442399][T22902] tipc: Enabled bearer , priority 0 [ 386.475655][T22914] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 386.490295][T22914] CPU: 1 UID: 0 PID: 22914 Comm: syz.1.5370 Not tainted syzkaller #0 PREEMPT(full) [ 386.490334][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.490350][T22914] Call Trace: [ 386.490359][T22914] [ 386.490370][T22914] dump_stack_lvl+0x189/0x250 [ 386.490404][T22914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.490431][T22914] ? __pfx__printk+0x10/0x10 [ 386.490458][T22914] ? kernfs_root+0x1c/0x230 [ 386.490485][T22914] ? kernfs_path_from_node+0x2f/0x290 [ 386.490510][T22914] ? kernfs_path_from_node+0x250/0x290 [ 386.490533][T22914] ? kernfs_path_from_node+0x2f/0x290 [ 386.490560][T22914] sysfs_warn_dup+0x8e/0xa0 [ 386.490581][T22914] sysfs_do_create_link_sd+0xc0/0x110 [ 386.490607][T22914] device_add_class_symlinks+0x1cf/0x240 [ 386.490633][T22914] device_add+0x475/0xb50 [ 386.490656][T22914] wiphy_register+0x1ba6/0x28d0 [ 386.490698][T22914] ? __pfx_wiphy_register+0x10/0x10 [ 386.490729][T22914] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 386.490762][T22914] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 386.490789][T22914] ieee80211_register_hw+0x3425/0x4080 [ 386.490822][T22914] ? ieee80211_register_hw+0x13f1/0x4080 [ 386.490849][T22914] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 386.490873][T22914] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.490902][T22914] ? __hrtimer_setup+0x187/0x210 [ 386.490920][T22914] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 386.490951][T22914] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 386.490989][T22914] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 386.491016][T22914] ? trace_kmalloc+0x1f/0xd0 [ 386.491041][T22914] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 386.491070][T22914] ? kstrndup+0xbf/0x160 [ 386.491097][T22914] hwsim_new_radio_nl+0xea4/0x1b10 [ 386.491127][T22914] ? __pfx___nla_validate_parse+0x10/0x10 [ 386.491165][T22914] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 386.491209][T22914] ? __nla_parse+0x40/0x60 [ 386.491242][T22914] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 386.491298][T22914] genl_family_rcv_msg_doit+0x215/0x300 [ 386.491336][T22914] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 386.491369][T22914] ? bpf_lsm_capable+0x9/0x20 [ 386.491399][T22914] ? security_capable+0x7e/0x2e0 [ 386.491433][T22914] genl_rcv_msg+0x60e/0x790 [ 386.491461][T22914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.491483][T22914] ? __kasan_slab_alloc+0x6c/0x80 [ 386.491511][T22914] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 386.491537][T22914] ? __netlink_lookup+0xbd/0x810 [ 386.491554][T22914] ? rcu_is_watching+0x15/0xb0 [ 386.491581][T22914] netlink_rcv_skb+0x208/0x470 [ 386.491614][T22914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.491638][T22914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.491676][T22914] ? lock_release+0x4b/0x3e0 [ 386.491709][T22914] ? down_read+0x1ad/0x2e0 [ 386.491738][T22914] genl_rcv+0x28/0x40 [ 386.491760][T22914] netlink_unicast+0x82c/0x9e0 [ 386.491793][T22914] ? __pfx_netlink_unicast+0x10/0x10 [ 386.491823][T22914] ? netlink_sendmsg+0x642/0xb30 [ 386.491854][T22914] ? skb_put+0x11b/0x210 [ 386.491876][T22914] netlink_sendmsg+0x805/0xb30 [ 386.491913][T22914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.491947][T22914] ? futex_unqueue+0x22/0x240 [ 386.491971][T22914] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.491993][T22914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.492017][T22914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.492050][T22914] __sock_sendmsg+0x21c/0x270 [ 386.492078][T22914] ____sys_sendmsg+0x505/0x830 [ 386.492104][T22914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.492131][T22914] ? import_iovec+0x74/0xa0 [ 386.492157][T22914] ___sys_sendmsg+0x21f/0x2a0 [ 386.492180][T22914] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.492207][T22914] ? futex_wait+0x285/0x360 [ 386.492252][T22914] ? __fget_files+0x2a/0x420 [ 386.492284][T22914] ? __fget_files+0x3a0/0x420 [ 386.492323][T22914] __x64_sys_sendmsg+0x19b/0x260 [ 386.492355][T22914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.492384][T22914] ? rcu_is_watching+0x15/0xb0 [ 386.492408][T22914] ? rcu_is_watching+0x15/0xb0 [ 386.492431][T22914] do_syscall_64+0xfa/0x3b0 [ 386.492465][T22914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.492487][T22914] ? clear_bhb_loop+0x60/0xb0 [ 386.492512][T22914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.492534][T22914] RIP: 0033:0x7f0fba58ebe9 [ 386.492554][T22914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.492575][T22914] RSP: 002b:00007f0fbb376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.492600][T22914] RAX: ffffffffffffffda RBX: 00007f0fba7b5fa0 RCX: 00007f0fba58ebe9 [ 386.492617][T22914] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 386.492632][T22914] RBP: 00007f0fba611e19 R08: 0000000000000000 R09: 0000000000000000 [ 386.492647][T22914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.492661][T22914] R13: 00007f0fba7b6038 R14: 00007f0fba7b5fa0 R15: 00007fff16526fa8 [ 386.492687][T22914] [ 386.504162][T22902] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.586297][T22919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5371'. [ 387.019602][T22919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5371'. [ 387.047312][T22902] tipc: Resetting bearer [ 387.144183][T22902] tipc: Disabling bearer [ 387.207961][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5375'. [ 387.211792][T22933] !: renamed from dummy0 (while UP) [ 387.285317][T22941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5378'. [ 387.364661][T22938] hsr_slave_1 (unregistering): left promiscuous mode [ 387.423971][T22950] bridge7: port 1(veth9) entered blocking state [ 387.442215][T22950] bridge7: port 1(veth9) entered disabled state [ 387.449456][T22950] veth9: entered allmulticast mode [ 387.459370][T22950] veth9: entered promiscuous mode [ 387.469125][T22941] bridge7: port 2(veth0_to_bond) entered blocking state [ 387.499772][T22941] bridge7: port 2(veth0_to_bond) entered disabled state [ 387.506985][T22941] veth0_to_bond: entered allmulticast mode [ 387.572995][T22941] veth0_to_bond: entered promiscuous mode [ 387.593976][T22960] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 387.613987][T22960] CPU: 0 UID: 0 PID: 22960 Comm: syz.3.5385 Not tainted syzkaller #0 PREEMPT(full) [ 387.614017][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.614033][T22960] Call Trace: [ 387.614041][T22960] [ 387.614051][T22960] dump_stack_lvl+0x189/0x250 [ 387.614086][T22960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.614114][T22960] ? __pfx__printk+0x10/0x10 [ 387.614142][T22960] ? kernfs_root+0x1c/0x230 [ 387.614168][T22960] ? kernfs_path_from_node+0x2f/0x290 [ 387.614190][T22960] ? kernfs_path_from_node+0x250/0x290 [ 387.614214][T22960] ? kernfs_path_from_node+0x2f/0x290 [ 387.614240][T22960] sysfs_warn_dup+0x8e/0xa0 [ 387.614261][T22960] sysfs_do_create_link_sd+0xc0/0x110 [ 387.614286][T22960] device_add_class_symlinks+0x1cf/0x240 [ 387.614312][T22960] device_add+0x475/0xb50 [ 387.614336][T22960] wiphy_register+0x1ba6/0x28d0 [ 387.614376][T22960] ? __pfx_wiphy_register+0x10/0x10 [ 387.614406][T22960] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 387.614432][T22960] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 387.614467][T22960] ieee80211_register_hw+0x3425/0x4080 [ 387.614499][T22960] ? ieee80211_register_hw+0x13f1/0x4080 [ 387.614528][T22960] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 387.614552][T22960] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.614585][T22960] ? __hrtimer_setup+0x187/0x210 [ 387.614605][T22960] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 387.614636][T22960] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 387.614678][T22960] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 387.614704][T22960] ? trace_kmalloc+0x1f/0xd0 [ 387.614730][T22960] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 387.614761][T22960] ? kstrndup+0xbf/0x160 [ 387.614789][T22960] hwsim_new_radio_nl+0xea4/0x1b10 [ 387.614819][T22960] ? __pfx___nla_validate_parse+0x10/0x10 [ 387.614860][T22960] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 387.614893][T22960] ? __nla_parse+0x40/0x60 [ 387.614926][T22960] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 387.614958][T22960] genl_family_rcv_msg_doit+0x215/0x300 [ 387.614988][T22960] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 387.615020][T22960] ? bpf_lsm_capable+0x9/0x20 [ 387.615049][T22960] ? security_capable+0x7e/0x2e0 [ 387.615084][T22960] genl_rcv_msg+0x60e/0x790 [ 387.615112][T22960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.615134][T22960] ? __kasan_slab_alloc+0x6c/0x80 [ 387.615164][T22960] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 387.615190][T22960] ? __netlink_lookup+0xbd/0x810 [ 387.615208][T22960] ? rcu_is_watching+0x15/0xb0 [ 387.615236][T22960] netlink_rcv_skb+0x208/0x470 [ 387.615268][T22960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.615293][T22960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.615330][T22960] ? lock_release+0x4b/0x3e0 [ 387.615363][T22960] ? down_read+0x1ad/0x2e0 [ 387.615384][T22960] genl_rcv+0x28/0x40 [ 387.615407][T22960] netlink_unicast+0x82c/0x9e0 [ 387.615449][T22960] ? __pfx_netlink_unicast+0x10/0x10 [ 387.615480][T22960] ? netlink_sendmsg+0x642/0xb30 [ 387.615512][T22960] ? skb_put+0x11b/0x210 [ 387.615535][T22960] netlink_sendmsg+0x805/0xb30 [ 387.615573][T22960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.615608][T22960] ? futex_unqueue+0x22/0x240 [ 387.615633][T22960] ? aa_sock_msg_perm+0xf1/0x1d0 [ 387.615654][T22960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.615677][T22960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.615712][T22960] __sock_sendmsg+0x21c/0x270 [ 387.615743][T22960] ____sys_sendmsg+0x505/0x830 [ 387.615766][T22960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.615793][T22960] ? import_iovec+0x74/0xa0 [ 387.615818][T22960] ___sys_sendmsg+0x21f/0x2a0 [ 387.615841][T22960] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.615867][T22960] ? futex_wait+0x285/0x360 [ 387.615912][T22960] ? __fget_files+0x2a/0x420 [ 387.615945][T22960] ? __fget_files+0x3a0/0x420 [ 387.615982][T22960] __x64_sys_sendmsg+0x19b/0x260 [ 387.616007][T22960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.616036][T22960] ? rcu_is_watching+0x15/0xb0 [ 387.616060][T22960] ? rcu_is_watching+0x15/0xb0 [ 387.616083][T22960] do_syscall_64+0xfa/0x3b0 [ 387.616117][T22960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.616139][T22960] ? clear_bhb_loop+0x60/0xb0 [ 387.616164][T22960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.616185][T22960] RIP: 0033:0x7f139818ebe9 [ 387.616207][T22960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.616227][T22960] RSP: 002b:00007f1398f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.616250][T22960] RAX: ffffffffffffffda RBX: 00007f13983b5fa0 RCX: 00007f139818ebe9 [ 387.616267][T22960] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 387.616281][T22960] RBP: 00007f1398211e19 R08: 0000000000000000 R09: 0000000000000000 [ 387.616295][T22960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.616308][T22960] R13: 00007f13983b6038 R14: 00007f13983b5fa0 R15: 00007ffc6f582828 [ 387.616333][T22960] [ 388.535230][T22995] netlink: 'syz.1.5395': attribute type 29 has an invalid length. [ 388.545478][T22997] FAULT_INJECTION: forcing a failure. [ 388.545478][T22997] name failslab, interval 1, probability 0, space 0, times 0 [ 388.561213][T22997] CPU: 0 UID: 0 PID: 22997 Comm: syz.4.5396 Not tainted syzkaller #0 PREEMPT(full) [ 388.561247][T22997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.561262][T22997] Call Trace: [ 388.561272][T22997] [ 388.561284][T22997] dump_stack_lvl+0x189/0x250 [ 388.561315][T22997] ? __pfx____ratelimit+0x10/0x10 [ 388.561346][T22997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.561372][T22997] ? __pfx__printk+0x10/0x10 [ 388.561406][T22997] ? __pfx___might_resched+0x10/0x10 [ 388.561426][T22997] ? lock_acquire+0x5f/0x360 [ 388.561460][T22997] should_fail_ex+0x414/0x560 [ 388.561491][T22997] should_failslab+0xa8/0x100 [ 388.561523][T22997] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 388.561554][T22997] ? __alloc_skb+0x112/0x2d0 [ 388.561589][T22997] __alloc_skb+0x112/0x2d0 [ 388.561624][T22997] netlink_ack+0x146/0xa50 [ 388.561654][T22997] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.561684][T22997] ? ref_tracker_free+0x63a/0x7d0 [ 388.561714][T22997] ? __asan_memcpy+0x40/0x70 [ 388.561744][T22997] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.561781][T22997] netlink_rcv_skb+0x28c/0x470 [ 388.561812][T22997] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.561845][T22997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.561890][T22997] netlink_unicast+0x82c/0x9e0 [ 388.561923][T22997] ? __pfx_netlink_unicast+0x10/0x10 [ 388.561952][T22997] ? netlink_sendmsg+0x642/0xb30 [ 388.561983][T22997] ? skb_put+0x11b/0x210 [ 388.562004][T22997] netlink_sendmsg+0x805/0xb30 [ 388.562042][T22997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.562082][T22997] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.562102][T22997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.562126][T22997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.562165][T22997] __sock_sendmsg+0x21c/0x270 [ 388.562195][T22997] ____sys_sendmsg+0x505/0x830 [ 388.562220][T22997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.562248][T22997] ? import_iovec+0x74/0xa0 [ 388.562275][T22997] ___sys_sendmsg+0x21f/0x2a0 [ 388.562298][T22997] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.562342][T22997] ? __fget_files+0x2a/0x420 [ 388.562374][T22997] ? __fget_files+0x3a0/0x420 [ 388.562414][T22997] __x64_sys_sendmsg+0x19b/0x260 [ 388.562438][T22997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.562466][T22997] ? __pfx_ksys_write+0x10/0x10 [ 388.562493][T22997] ? rcu_is_watching+0x15/0xb0 [ 388.562517][T22997] ? rcu_is_watching+0x15/0xb0 [ 388.562540][T22997] do_syscall_64+0xfa/0x3b0 [ 388.562573][T22997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.562594][T22997] ? clear_bhb_loop+0x60/0xb0 [ 388.562619][T22997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.562641][T22997] RIP: 0033:0x7f5faa78ebe9 [ 388.562659][T22997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.562679][T22997] RSP: 002b:00007f5fab6b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.562715][T22997] RAX: ffffffffffffffda RBX: 00007f5faa9b5fa0 RCX: 00007f5faa78ebe9 [ 388.562732][T22997] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 388.562746][T22997] RBP: 00007f5fab6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.562760][T22997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.562774][T22997] R13: 00007f5faa9b6038 R14: 00007f5faa9b5fa0 R15: 00007ffcbc89ef78 [ 388.562800][T22997] [ 388.563832][T22995] netlink: 'syz.1.5395': attribute type 29 has an invalid length. [ 388.629285][T22999] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5395'. [ 389.039499][T23012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5399'. [ 389.078957][ T959] IPVS: starting estimator thread 0... [ 389.170371][T23016] IPVS: using max 38 ests per chain, 91200 per kthread [ 389.182293][T23021] ieee802154 phy1 wpan1: encryption failed: -126 [ 389.215184][T23025] FAULT_INJECTION: forcing a failure. [ 389.215184][T23025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.235000][T23025] CPU: 0 UID: 0 PID: 23025 Comm: syz.1.5404 Not tainted syzkaller #0 PREEMPT(full) [ 389.235032][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.235047][T23025] Call Trace: [ 389.235057][T23025] [ 389.235066][T23025] dump_stack_lvl+0x189/0x250 [ 389.235099][T23025] ? __pfx____ratelimit+0x10/0x10 [ 389.235130][T23025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.235156][T23025] ? __pfx__printk+0x10/0x10 [ 389.235189][T23025] ? rcu_is_watching+0x15/0xb0 [ 389.235212][T23025] should_fail_ex+0x414/0x560 [ 389.235243][T23025] _copy_to_user+0x31/0xb0 [ 389.235269][T23025] simple_read_from_buffer+0xe1/0x170 [ 389.235303][T23025] proc_fail_nth_read+0x1b3/0x220 [ 389.235330][T23025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.235363][T23025] ? rw_verify_area+0x2a6/0x4d0 [ 389.235390][T23025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.235416][T23025] vfs_read+0x200/0xa30 [ 389.235442][T23025] ? fdget_pos+0x247/0x320 [ 389.235463][T23025] ? __pfx___mutex_lock+0x10/0x10 [ 389.235496][T23025] ? __pfx_vfs_read+0x10/0x10 [ 389.235528][T23025] ? __fget_files+0x3a0/0x420 [ 389.235560][T23025] ? __fget_files+0x2a/0x420 [ 389.235597][T23025] ksys_read+0x145/0x250 [ 389.235626][T23025] ? __pfx_ksys_read+0x10/0x10 [ 389.235652][T23025] ? rcu_is_watching+0x15/0xb0 [ 389.235676][T23025] ? rcu_is_watching+0x15/0xb0 [ 389.235699][T23025] do_syscall_64+0xfa/0x3b0 [ 389.235732][T23025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.235754][T23025] ? clear_bhb_loop+0x60/0xb0 [ 389.235778][T23025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.235800][T23025] RIP: 0033:0x7f0fba58d5fc [ 389.235820][T23025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 389.235841][T23025] RSP: 002b:00007f0fbb376030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.235865][T23025] RAX: ffffffffffffffda RBX: 00007f0fba7b5fa0 RCX: 00007f0fba58d5fc [ 389.235882][T23025] RDX: 000000000000000f RSI: 00007f0fbb3760a0 RDI: 0000000000000003 [ 389.235896][T23025] RBP: 00007f0fbb376090 R08: 0000000000000000 R09: 0000000000000000 [ 389.235911][T23025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.235924][T23025] R13: 00007f0fba7b6038 R14: 00007f0fba7b5fa0 R15: 00007fff16526fa8 [ 389.235950][T23025] [ 389.669722][T23042] nbd: nbd0 already in use [ 389.761058][T23048] wg1 speed is unknown, defaulting to 1000 [ 389.769171][T23048] hsr0 speed is unknown, defaulting to 1000 [ 389.949375][T23048] lo speed is unknown, defaulting to 1000 [ 390.015026][T23060] openvswitch: netlink: IPv6 tunnel dst address is zero [ 390.220481][T23050] netlink: 'syz.4.5412': attribute type 13 has an invalid length. [ 390.255620][T23050] netlink: 'syz.4.5412': attribute type 17 has an invalid length. [ 390.271469][T23072] bridge_slave_0: entered promiscuous mode [ 390.296531][T23074] team0: Cannot enslave team device to itself [ 390.339661][T23050] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.359393][T23050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.385312][T23079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.421759][T23079] block nbd1: not configured, cannot reconfigure [ 390.886757][T23098] __nla_validate_parse: 5 callbacks suppressed [ 390.886779][T23098] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5428'. [ 390.940254][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5428'. [ 391.066615][T23109] wg1 speed is unknown, defaulting to 1000 [ 391.111843][T23109] hsr0 speed is unknown, defaulting to 1000 [ 391.479717][T23109] lo speed is unknown, defaulting to 1000 [ 391.756976][T23155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5445'. [ 391.819936][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5447'. [ 392.344326][T23188] FAULT_INJECTION: forcing a failure. [ 392.344326][T23188] name failslab, interval 1, probability 0, space 0, times 0 [ 392.379333][T23188] CPU: 0 UID: 0 PID: 23188 Comm: syz.0.5455 Not tainted syzkaller #0 PREEMPT(full) [ 392.379364][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.379378][T23188] Call Trace: [ 392.379388][T23188] [ 392.379397][T23188] dump_stack_lvl+0x189/0x250 [ 392.379429][T23188] ? __pfx____ratelimit+0x10/0x10 [ 392.379459][T23188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.379485][T23188] ? __pfx__printk+0x10/0x10 [ 392.379513][T23188] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 392.379554][T23188] should_fail_ex+0x414/0x560 [ 392.379585][T23188] should_failslab+0xa8/0x100 [ 392.379618][T23188] kmem_cache_alloc_noprof+0x73/0x3c0 [ 392.379647][T23188] ? skb_clone+0x212/0x3a0 [ 392.379674][T23188] skb_clone+0x212/0x3a0 [ 392.379699][T23188] __netlink_deliver_tap+0x404/0x850 [ 392.379738][T23188] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.379771][T23188] netlink_deliver_tap+0x19c/0x1b0 [ 392.379803][T23188] netlink_dump+0x92b/0xe90 [ 392.379839][T23188] ? __pfx_netlink_dump+0x10/0x10 [ 392.379879][T23188] ? kmem_cache_free+0x18f/0x400 [ 392.379911][T23188] netlink_recvmsg+0x676/0xa30 [ 392.379948][T23188] ? __pfx_netlink_recvmsg+0x10/0x10 [ 392.379979][T23188] ? do_recvmmsg+0x307/0x770 [ 392.380009][T23188] ? __x64_sys_recvmmsg+0x1af/0x240 [ 392.380031][T23188] ? do_syscall_64+0xfa/0x3b0 [ 392.380069][T23188] ? __pfx_netlink_recvmsg+0x10/0x10 [ 392.380102][T23188] sock_recvmsg_nosec+0x183/0x1c0 [ 392.380133][T23188] ____sys_recvmsg+0x3aa/0x460 [ 392.380167][T23188] ? __pfx_____sys_recvmsg+0x10/0x10 [ 392.380199][T23188] ? import_iovec+0x74/0xa0 [ 392.380230][T23188] ___sys_recvmsg+0x1b5/0x510 [ 392.380255][T23188] ? __pfx____sys_recvmsg+0x10/0x10 [ 392.380281][T23188] ? __fget_files+0x2a/0x420 [ 392.380323][T23188] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 392.380355][T23188] ? lock_release+0x4b/0x3e0 [ 392.380390][T23188] do_recvmmsg+0x307/0x770 [ 392.380417][T23188] ? __pfx_do_recvmmsg+0x10/0x10 [ 392.380440][T23188] ? rcu_is_watching+0x15/0xb0 [ 392.380467][T23188] ? _copy_from_user+0x94/0xb0 [ 392.380500][T23188] __x64_sys_recvmmsg+0x1af/0x240 [ 392.380526][T23188] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 392.380548][T23188] ? rcu_is_watching+0x15/0xb0 [ 392.380571][T23188] ? rcu_is_watching+0x15/0xb0 [ 392.380594][T23188] do_syscall_64+0xfa/0x3b0 [ 392.380626][T23188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.380648][T23188] ? clear_bhb_loop+0x60/0xb0 [ 392.380672][T23188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.380693][T23188] RIP: 0033:0x7fb418d8ebe9 [ 392.380712][T23188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.380731][T23188] RSP: 002b:00007fb419b2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 392.380755][T23188] RAX: ffffffffffffffda RBX: 00007fb418fb5fa0 RCX: 00007fb418d8ebe9 [ 392.380772][T23188] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 392.380786][T23188] RBP: 00007fb419b2d090 R08: 0000200000003700 R09: 0000000000000000 [ 392.380801][T23188] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 392.380814][T23188] R13: 00007fb418fb6038 R14: 00007fb418fb5fa0 R15: 00007ffdc4c25e58 [ 392.380840][T23188] [ 392.735110][T23193] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 392.749439][T23199] netlink: 796 bytes leftover after parsing attributes in process `syz.0.5460'. [ 392.918456][T23208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5462'. [ 392.929248][T23210] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5465'. [ 393.302707][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5469'. [ 393.357859][T23233] netlink: 'syz.1.5471': attribute type 1 has an invalid length. [ 393.423249][T23233] 8021q: adding VLAN 0 to HW filter on device bond14 [ 393.447177][T23242] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5474'. [ 393.468633][T23238] 8021q: adding VLAN 0 to HW filter on device bond14 [ 393.484824][T23238] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 393.498709][T23238] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 393.526228][T23243] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 393.788463][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5481'. [ 394.142918][T23295] 8021q: adding VLAN 0 to HW filter on device bond10 [ 394.478686][ T7999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.607710][T23320] FAULT_INJECTION: forcing a failure. [ 394.607710][T23320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.677915][T23320] CPU: 0 UID: 0 PID: 23320 Comm: syz.2.5499 Not tainted syzkaller #0 PREEMPT(full) [ 394.677951][T23320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.677966][T23320] Call Trace: [ 394.677976][T23320] [ 394.677986][T23320] dump_stack_lvl+0x189/0x250 [ 394.678020][T23320] ? __pfx____ratelimit+0x10/0x10 [ 394.678052][T23320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.678079][T23320] ? __pfx__printk+0x10/0x10 [ 394.678107][T23320] ? __might_fault+0xb0/0x130 [ 394.678144][T23320] ? rcu_is_watching+0x15/0xb0 [ 394.678167][T23320] should_fail_ex+0x414/0x560 [ 394.678200][T23320] _copy_from_user+0x2d/0xb0 [ 394.678225][T23320] ___sys_recvmsg+0x12e/0x510 [ 394.678252][T23320] ? __pfx____sys_recvmsg+0x10/0x10 [ 394.678278][T23320] ? __fget_files+0x2a/0x420 [ 394.678321][T23320] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 394.678353][T23320] ? lock_release+0x4b/0x3e0 [ 394.678389][T23320] do_recvmmsg+0x307/0x770 [ 394.678417][T23320] ? __pfx_do_recvmmsg+0x10/0x10 [ 394.678440][T23320] ? rcu_is_watching+0x15/0xb0 [ 394.678467][T23320] ? _copy_from_user+0x94/0xb0 [ 394.678500][T23320] __x64_sys_recvmmsg+0x1af/0x240 [ 394.678525][T23320] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 394.678548][T23320] ? rcu_is_watching+0x15/0xb0 [ 394.678570][T23320] ? rcu_is_watching+0x15/0xb0 [ 394.678593][T23320] do_syscall_64+0xfa/0x3b0 [ 394.678625][T23320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.678647][T23320] ? clear_bhb_loop+0x60/0xb0 [ 394.678671][T23320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.678700][T23320] RIP: 0033:0x7f1d1878ebe9 [ 394.678720][T23320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.678740][T23320] RSP: 002b:00007f1d19535038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 394.678765][T23320] RAX: ffffffffffffffda RBX: 00007f1d189b5fa0 RCX: 00007f1d1878ebe9 [ 394.678782][T23320] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 394.678798][T23320] RBP: 00007f1d19535090 R08: 0000200000003700 R09: 0000000000000000 [ 394.678813][T23320] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 394.678827][T23320] R13: 00007f1d189b6038 R14: 00007f1d189b5fa0 R15: 00007ffed1c10ad8 [ 394.678853][T23320] [ 394.931381][ T7999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.021200][T23330] 8021q: adding VLAN 0 to HW filter on device bond11 [ 395.089709][T23339] netlink: 'syz.4.5504': attribute type 1 has an invalid length. [ 395.143056][T23335] netlink: 'syz.1.5506': attribute type 12 has an invalid length. [ 395.151825][T23339] 8021q: adding VLAN 0 to HW filter on device bond16 [ 395.202713][T23345] 8021q: adding VLAN 0 to HW filter on device bond16 [ 395.210706][T23345] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address [ 395.222535][T23345] bond16: (slave vxcan3): Error -95 calling set_mac_address [ 395.252343][T23349] 8021q: adding VLAN 0 to HW filter on device bond12 [ 395.279950][T23355] 8021q: adding VLAN 0 to HW filter on device bond11 [ 395.500071][T23374] netlink: 'syz.2.5514': attribute type 1 has an invalid length. [ 395.582136][T23380] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 395.599003][ T94] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,4096B). Runtime 240 seconds [ 395.619239][T23380] CPU: 1 UID: 0 PID: 23380 Comm: syz.1.5517 Not tainted syzkaller #0 PREEMPT(full) [ 395.619271][T23380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.619286][T23380] Call Trace: [ 395.619295][T23380] [ 395.619305][T23380] dump_stack_lvl+0x189/0x250 [ 395.619339][T23380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.619366][T23380] ? __pfx__printk+0x10/0x10 [ 395.619395][T23380] ? kernfs_root+0x1c/0x230 [ 395.619421][T23380] ? kernfs_path_from_node+0x2f/0x290 [ 395.619445][T23380] ? kernfs_path_from_node+0x250/0x290 [ 395.619467][T23380] ? kernfs_path_from_node+0x2f/0x290 [ 395.619504][T23380] sysfs_warn_dup+0x8e/0xa0 [ 395.619525][T23380] sysfs_do_create_link_sd+0xc0/0x110 [ 395.619549][T23380] device_add_class_symlinks+0x1cf/0x240 [ 395.619573][T23380] device_add+0x475/0xb50 [ 395.619596][T23380] wiphy_register+0x1ba6/0x28d0 [ 395.619634][T23380] ? __pfx_wiphy_register+0x10/0x10 [ 395.619662][T23380] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 395.619686][T23380] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 395.619713][T23380] ieee80211_register_hw+0x3425/0x4080 [ 395.619748][T23380] ? ieee80211_register_hw+0x13f1/0x4080 [ 395.619777][T23380] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 395.619805][T23380] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.619840][T23380] ? __hrtimer_setup+0x187/0x210 [ 395.619861][T23380] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 395.619895][T23380] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 395.619941][T23380] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 395.619967][T23380] ? trace_kmalloc+0x1f/0xd0 [ 395.619996][T23380] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 395.620027][T23380] ? kstrndup+0xbf/0x160 [ 395.620053][T23380] hwsim_new_radio_nl+0xea4/0x1b10 [ 395.620083][T23380] ? __pfx___nla_validate_parse+0x10/0x10 [ 395.620124][T23380] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 395.620159][T23380] ? __nla_parse+0x40/0x60 [ 395.620194][T23380] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 395.620226][T23380] genl_family_rcv_msg_doit+0x215/0x300 [ 395.620257][T23380] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 395.620290][T23380] ? bpf_lsm_capable+0x9/0x20 [ 395.620321][T23380] ? security_capable+0x7e/0x2e0 [ 395.620356][T23380] genl_rcv_msg+0x60e/0x790 [ 395.620385][T23380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.620408][T23380] ? __kasan_slab_alloc+0x6c/0x80 [ 395.620437][T23380] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 395.620465][T23380] ? __netlink_lookup+0xbd/0x810 [ 395.620492][T23380] ? rcu_is_watching+0x15/0xb0 [ 395.620522][T23380] netlink_rcv_skb+0x208/0x470 [ 395.620554][T23380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.620579][T23380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.620616][T23380] ? lock_release+0x4b/0x3e0 [ 395.620650][T23380] ? down_read+0x1ad/0x2e0 [ 395.620672][T23380] genl_rcv+0x28/0x40 [ 395.620694][T23380] netlink_unicast+0x82c/0x9e0 [ 395.620728][T23380] ? __pfx_netlink_unicast+0x10/0x10 [ 395.620757][T23380] ? netlink_sendmsg+0x642/0xb30 [ 395.620788][T23380] ? skb_put+0x11b/0x210 [ 395.620809][T23380] netlink_sendmsg+0x805/0xb30 [ 395.620847][T23380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.620881][T23380] ? futex_unqueue+0x22/0x240 [ 395.620906][T23380] ? aa_sock_msg_perm+0xf1/0x1d0 [ 395.620927][T23380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.620951][T23380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.620985][T23380] __sock_sendmsg+0x21c/0x270 [ 395.621016][T23380] ____sys_sendmsg+0x505/0x830 [ 395.621041][T23380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.621068][T23380] ? import_iovec+0x74/0xa0 [ 395.621095][T23380] ___sys_sendmsg+0x21f/0x2a0 [ 395.621118][T23380] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.621143][T23380] ? futex_wait+0x285/0x360 [ 395.621187][T23380] ? __fget_files+0x2a/0x420 [ 395.621220][T23380] ? __fget_files+0x3a0/0x420 [ 395.621260][T23380] __x64_sys_sendmsg+0x19b/0x260 [ 395.621285][T23380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.621314][T23380] ? rcu_is_watching+0x15/0xb0 [ 395.621339][T23380] ? rcu_is_watching+0x15/0xb0 [ 395.621362][T23380] do_syscall_64+0xfa/0x3b0 [ 395.621397][T23380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.621419][T23380] ? clear_bhb_loop+0x60/0xb0 [ 395.621444][T23380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.621466][T23380] RIP: 0033:0x7f0fba58ebe9 [ 395.621494][T23380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.621514][T23380] RSP: 002b:00007f0fbb376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.621539][T23380] RAX: ffffffffffffffda RBX: 00007f0fba7b5fa0 RCX: 00007f0fba58ebe9 [ 395.621557][T23380] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 395.621572][T23380] RBP: 00007f0fba611e19 R08: 0000000000000000 R09: 0000000000000000 [ 395.621587][T23380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.621601][T23380] R13: 00007f0fba7b6038 R14: 00007f0fba7b5fa0 R15: 00007fff16526fa8 [ 395.621627][T23380] [ 396.385115][T23399] __nla_validate_parse: 5 callbacks suppressed [ 396.385138][T23399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'. [ 396.403456][T23399] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 396.520920][T23409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5527'. [ 396.664964][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5530'. [ 396.675536][T23422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5530'. [ 397.453860][T23455] FAULT_INJECTION: forcing a failure. [ 397.453860][T23455] name failslab, interval 1, probability 0, space 0, times 0 [ 397.525790][T23455] CPU: 0 UID: 0 PID: 23455 Comm: syz.1.5543 Not tainted syzkaller #0 PREEMPT(full) [ 397.525822][T23455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.525836][T23455] Call Trace: [ 397.525845][T23455] [ 397.525854][T23455] dump_stack_lvl+0x189/0x250 [ 397.525887][T23455] ? __pfx____ratelimit+0x10/0x10 [ 397.525919][T23455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.525945][T23455] ? __pfx__printk+0x10/0x10 [ 397.525975][T23455] ? wg_get_device_dump+0x15fc/0x1b70 [ 397.526003][T23455] ? ref_tracker_alloc+0x318/0x460 [ 397.526036][T23455] should_fail_ex+0x414/0x560 [ 397.526068][T23455] should_failslab+0xa8/0x100 [ 397.526103][T23455] kmem_cache_alloc_noprof+0x73/0x3c0 [ 397.526133][T23455] ? skb_clone+0x212/0x3a0 [ 397.526160][T23455] skb_clone+0x212/0x3a0 [ 397.526184][T23455] __netlink_deliver_tap+0x404/0x850 [ 397.526224][T23455] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.526256][T23455] netlink_deliver_tap+0x19c/0x1b0 [ 397.526289][T23455] __netlink_sendskb+0x47/0x90 [ 397.526318][T23455] netlink_dump+0xa84/0xe90 [ 397.526355][T23455] ? __pfx_netlink_dump+0x10/0x10 [ 397.526385][T23455] ? dev_get_by_name+0x21/0x200 [ 397.526410][T23455] ? dev_get_by_name+0x21/0x200 [ 397.526453][T23455] ? genl_start+0x581/0x6c0 [ 397.526482][T23455] __netlink_dump_start+0x5cb/0x7e0 [ 397.526520][T23455] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 397.526548][T23455] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 397.526579][T23455] ? __pfx_genl_start+0x10/0x10 [ 397.526602][T23455] ? __pfx_genl_dumpit+0x10/0x10 [ 397.526625][T23455] ? __pfx_genl_done+0x10/0x10 [ 397.526651][T23455] ? bpf_lsm_capable+0x9/0x20 [ 397.526681][T23455] ? security_capable+0x7e/0x2e0 [ 397.526718][T23455] genl_rcv_msg+0x5da/0x790 [ 397.526746][T23455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.526769][T23455] ? __pfx_wg_get_device_start+0x10/0x10 [ 397.526794][T23455] ? __pfx_wg_get_device_dump+0x10/0x10 [ 397.526826][T23455] ? __pfx_wg_get_device_done+0x10/0x10 [ 397.526852][T23455] ? __asan_memcpy+0x40/0x70 [ 397.526877][T23455] ? __pfx_ref_tracker_free+0x10/0x10 [ 397.526912][T23455] netlink_rcv_skb+0x208/0x470 [ 397.526944][T23455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.526970][T23455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.527008][T23455] ? lock_release+0x4b/0x3e0 [ 397.527042][T23455] ? down_read+0x1ad/0x2e0 [ 397.527065][T23455] genl_rcv+0x28/0x40 [ 397.527087][T23455] netlink_unicast+0x82c/0x9e0 [ 397.527121][T23455] ? __pfx_netlink_unicast+0x10/0x10 [ 397.527151][T23455] ? netlink_sendmsg+0x642/0xb30 [ 397.527182][T23455] ? skb_put+0x11b/0x210 [ 397.527203][T23455] netlink_sendmsg+0x805/0xb30 [ 397.527239][T23455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.527272][T23455] ? aa_sock_msg_perm+0xf1/0x1d0 [ 397.527293][T23455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.527316][T23455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.527347][T23455] __sock_sendmsg+0x21c/0x270 [ 397.527380][T23455] ____sys_sendmsg+0x505/0x830 [ 397.527404][T23455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.527436][T23455] ? import_iovec+0x74/0xa0 [ 397.527460][T23455] ___sys_sendmsg+0x21f/0x2a0 [ 397.527482][T23455] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.527523][T23455] ? __fget_files+0x2a/0x420 [ 397.527556][T23455] ? __fget_files+0x3a0/0x420 [ 397.527594][T23455] __x64_sys_sendmsg+0x19b/0x260 [ 397.527618][T23455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.527645][T23455] ? __pfx_ksys_write+0x10/0x10 [ 397.527672][T23455] ? rcu_is_watching+0x15/0xb0 [ 397.527698][T23455] ? rcu_is_watching+0x15/0xb0 [ 397.527720][T23455] do_syscall_64+0xfa/0x3b0 [ 397.527754][T23455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.527776][T23455] ? clear_bhb_loop+0x60/0xb0 [ 397.527801][T23455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.527823][T23455] RIP: 0033:0x7f0fba58ebe9 [ 397.527843][T23455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.527863][T23455] RSP: 002b:00007f0fbb376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.527888][T23455] RAX: ffffffffffffffda RBX: 00007f0fba7b5fa0 RCX: 00007f0fba58ebe9 [ 397.527905][T23455] RDX: 0000000020040000 RSI: 0000200000000380 RDI: 0000000000000004 [ 397.527920][T23455] RBP: 00007f0fbb376090 R08: 0000000000000000 R09: 0000000000000000 [ 397.527934][T23455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.527948][T23455] R13: 00007f0fba7b6038 R14: 00007f0fba7b5fa0 R15: 00007fff16526fa8 [ 397.527974][T23455] [ 397.540075][T23460] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5544'. [ 397.712213][ T36] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 397.739085][T23464] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 397.896948][T23471] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5549'. [ 397.972457][T23473] sctp: [Deprecated]: syz.3.5550 (pid 23473) Use of int in maxseg socket option. [ 397.972457][T23473] Use struct sctp_assoc_value instead [ 398.233399][T23490] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 398.245550][T23490] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 398.254019][T23490] CPU: 0 UID: 0 PID: 23490 Comm: syz.2.5555 Not tainted syzkaller #0 PREEMPT(full) [ 398.263530][T23490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.273647][T23490] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 398.278778][T23493] netlink: 'syz.1.5556': attribute type 4 has an invalid length. [ 398.279153][T23490] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 398.306558][T23490] RSP: 0018:ffffc90003c4fae0 EFLAGS: 00010202 [ 398.313215][T23490] RAX: 0000000000000000 RBX: ffff88807dfe8400 RCX: 0000000000000002 [ 398.321490][T23490] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.329623][T23490] RBP: ffffc90003c4fc10 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 398.337737][T23490] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88802862a300 [ 398.345759][T23490] R13: dffffc0000000000 R14: ffff88802862a300 R15: 0000000000000002 [ 398.353783][T23490] FS: 00007f1d195356c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 398.362762][T23490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.369389][T23490] CR2: 0000001b2de23ffc CR3: 0000000069530000 CR4: 00000000003526f0 [ 398.377675][T23490] Call Trace: [ 398.381094][T23490] [ 398.384074][T23490] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 398.389231][T23490] ? bpf_lsm_capable+0x9/0x20 [ 398.394035][T23490] ? security_capable+0x7e/0x2e0 [ 398.399014][T23490] rose_ioctl+0x3ce/0x8b0 [ 398.403375][T23490] ? __pfx_rose_ioctl+0x10/0x10 [ 398.408275][T23490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 398.413340][T23490] sock_do_ioctl+0xd9/0x300 [ 398.417957][T23490] ? __pfx_sock_do_ioctl+0x10/0x10 [ 398.423262][T23490] ? do_futex+0x333/0x420 [ 398.427638][T23490] sock_ioctl+0x576/0x790 [ 398.432373][T23490] ? lock_release+0x4b/0x3e0 [ 398.437032][T23490] ? __pfx_sock_ioctl+0x10/0x10 [ 398.442103][T23490] ? __fget_files+0x2a/0x420 [ 398.446749][T23490] ? __fget_files+0x3a0/0x420 [ 398.452028][T23490] ? __fget_files+0x2a/0x420 [ 398.456772][T23490] ? bpf_lsm_file_ioctl+0x9/0x20 [ 398.461779][T23490] ? __pfx_sock_ioctl+0x10/0x10 [ 398.466760][T23490] __se_sys_ioctl+0xfc/0x170 [ 398.471392][T23490] do_syscall_64+0xfa/0x3b0 [ 398.475922][T23490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.482394][T23490] ? clear_bhb_loop+0x60/0xb0 [ 398.487371][T23490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.493615][T23490] RIP: 0033:0x7f1d1878ebe9 [ 398.498274][T23490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.518414][T23490] RSP: 002b:00007f1d19535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.526954][T23490] RAX: ffffffffffffffda RBX: 00007f1d189b5fa0 RCX: 00007f1d1878ebe9 [ 398.534973][T23490] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000004 [ 398.542974][T23490] RBP: 00007f1d18811e19 R08: 0000000000000000 R09: 0000000000000000 [ 398.550968][T23490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.559137][T23490] R13: 00007f1d189b6038 R14: 00007f1d189b5fa0 R15: 00007ffed1c10ad8 [ 398.567774][T23490] [ 398.570837][T23490] Modules linked in: [ 398.574939][T23490] ---[ end trace 0000000000000000 ]--- [ 398.580530][T23490] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 398.586224][T23490] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 398.605992][T23490] RSP: 0018:ffffc90003c4fae0 EFLAGS: 00010202 [ 398.612106][T23490] RAX: 0000000000000000 RBX: ffff88807dfe8400 RCX: 0000000000000002 [ 398.620136][T23490] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.628313][T23490] RBP: ffffc90003c4fc10 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 398.636329][T23490] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88802862a300 [ 398.644713][T23490] R13: dffffc0000000000 R14: ffff88802862a300 R15: 0000000000000002 [ 398.652846][T23490] FS: 00007f1d195356c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 398.662001][T23490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.668920][T23490] CR2: 0000001b2de23ffc CR3: 0000000069530000 CR4: 00000000003526f0 [ 398.676967][T23490] Kernel panic - not syncing: Fatal exception in interrupt [ 398.684623][T23490] Kernel Offset: disabled [ 398.689050][T23490] Rebooting in 86400 seconds..