last executing test programs: 7.445987787s ago: executing program 2 (id=4041): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000180)=ANY=[], 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x7, 0x1, 0x4, 0x2, 0x7, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) getpeername$l2tp6(r1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500000000000000000000000000000057f62ec4c7735709589d326ae9ec70ab7ed966d8f3c99e6220a775c5cab9522da53b5d88c1d3ab534fd875adefd7b9b098717cdc63771e55a8b8118d5090a7a1b701b89c2e8f6563aa7bb4bd68839a039e10d8782fcbb77b5871acc6b1993597c09bd7c27e2fb781e2957e01fbb67e3f51de30a2ccd09f6ee419180596a398cbbbd11d2188b24f95e8754d2973a90b0c0d376b8a5455e52f720bc6ca05a04e70269c3088a295c60bf658de3495ae0714b503131b18c9c3b83c52b9b9a11476e17a804d", @ANYRES64=0x0, @ANYRES16=r5, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000000000000022a5cfd43437ad6a"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x47}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x4050) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0x0, 0xffff}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) 6.862454099s ago: executing program 3 (id=4049): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) r1 = socket$phonet(0x23, 0x2, 0x1) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/19, 0x13}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000180)=""/176, 0xb0}], 0x3}, 0x9}], 0x1, 0x22, &(0x7f0000000300)={r2, r3+60000000}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0xe9, 0x70, &(0x7f0000000380)="f0f172baebe599e568c13a2c1e8ff68d344b36ad43ec82cd60b1b89da65bba5651c50cbd250cb7c59aea8f32dad81f6b61ae3e7a63014ea94424a8831b2ff49d177741dd217e753a309251476c645b4fd7d7bb034741dee1cf204b33eeb967dca1ff961a5d315a76a9a1b988f22b112b987d341b49e0e21c41d02c07aa2ea391d045a0c5290833812e9716ef4052d0043c4567c949ad6290b9bc3ac6dbdc819a1f3a2c7ec737bcfb25a865986b1d6260940b064d9040a5273924e58616d3a0b944d62cd075e775e61ddbd0e2830038f1f07c78023343299b4bcbfa165d9498560dd742b98d3a72e1ad", &(0x7f0000000480)=""/112, 0xfdd, 0x0, 0xe4, 0xf7, &(0x7f0000000500)="915b6637a112e4c0cb33ca3e092a480059c037d0593a2e0edfb1cfba5b6c46bdeaff40cc98da00240e5f16526b76fac7cd272448db3689919a0818bf2d450556d68830416932c3d5382179d6a6859def7520343120f253b24348184150ee8183b8817fe7abeda79ae43094cc90e501edb6015f418bc0530dcf8be6c83e7f9ec59be9d292b0d6c75bd5d26c06e950f7f4da9cce91a46078a3c999e10267d580032459d64e76b7611483ecf051b2f89f5a0448ce864be07a184c3f8f64f3a3da53fc96ec9b4adaf657a0aab09d24768a6a6243a7ce0372973a5229f93f8dc865f8da1d4368", &(0x7f0000000600)="7e7a85e77948f6fe3342eb1b72799e5f263cd9101f85ef30f941c8aa1643a93bf2c996dda3bfc3ea1040db34d0df0e8f1e0808217cba46fc7edd18c6d54da9793a9caeeb3bb3d54e5a0d42227fc04993a5be6772636b5dd6b7965d1ab612dc4936d3f8edf77049b3c3cec7dbc24245f17b97dda0688f8c630157baff4b664f47e19b34398bfb3cd41a692142ba13c97c9d28187bca79d4d283bb17b217de321c0e632050f385648c558a35d462c58baee6c73780ab804c51459e1fc17614bf8f6d41e01123e08954f53d55ec2795e21bbd645bc4ac54f93a7d3bd3681ab93999e2f5ee3f267e50d534c9a538a5243c0607823828e5b86d", 0x4, 0x0, 0x8}, 0x50) r5 = socket$inet6(0xa, 0x80000, 0x66a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000780)=0x925, 0x4) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000007c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=@ipv6_delrule={0x9c, 0x21, 0x300, 0x70bd2a, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x8}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @mcast1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000980)=0xca, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f00000009c0)={0x10}, 0x4) getsockopt$inet_int(r7, 0x0, 0x15, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='svc_unregister\x00', r4, 0x0, 0x2}, 0x18) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x383100, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000b80)=0x6) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000bc0)=0x80) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r10, 0x941c, 0x0) bind(r10, &(0x7f0000000c00)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @local}, 0x4, 0x3, 0x3, 0x3}}, 0x80) accept4$nfc_llcp(r10, &(0x7f0000000c80), &(0x7f0000000d00)=0x60, 0x80000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x73, r6, 0x8b30b000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x74}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x94}}, 0x40) 6.616072837s ago: executing program 4 (id=4052): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000002c0)=0x768, 0x4) 6.478382906s ago: executing program 4 (id=4055): openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000040), 0x4) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002300)={'ip6_vti0\x00', &(0x7f0000002280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xe, 0x6, 0x32, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, 0x7, 0x8, 0x2, 0x2}}) 6.304213005s ago: executing program 4 (id=4058): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "ff918db4b2ea864f5815795e5c517b777bf7d391e3a422329473449b6549c7ed", "1a324626a66fea4c37e166fb9b76dbb0b34a4b52c396450339b98a84de4a9567", "b767d3283bdd19a0bac6fc57d24dc8ec638ab26a47bc5f7cf96061a759cdef6c", "be8aa6a91224f0a70e95e0e200", "bf445359f87c8d9d44597e290cfd1c5ef93ac3eabc63287ff01f140e67ad238a", "7fb9d29063e003eb8f9ca834", 0x8, 0x7fff, 0x6, 0x5, 0x6}}) unshare(0x20000400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'gretap0\x00'}) socket$inet(0x2, 0x0, 0x261d84) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xfd, 0x1}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff0c000140000000010000000014000000110001"], 0xc0}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) 6.180060696s ago: executing program 2 (id=4061): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000180)=ANY=[], 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x7, 0x1, 0x4, 0x2, 0x7, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) getpeername$l2tp6(r1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500000000000000000000000000000057f62ec4c7735709589d326ae9ec70ab7ed966d8f3c99e6220a775c5cab9522da53b5d88c1d3ab534fd875adefd7b9b098717cdc63771e55a8b8118d5090a7a1b701b89c2e8f6563aa7bb4bd68839a039e10d8782fcbb77b5871acc6b1993597c09bd7c27e2fb781e2957e01fbb67e3f51de30a2ccd09f6ee419180596a398cbbbd11d2188b24f95e8754d2973a90b0c0d376b8a5455e52f720bc6ca05a04e70269c3088a295c60bf658de3495ae0714b503131b18c9c3b83c52b9b9a11476e17a804d", @ANYRES64=0x0, @ANYRES16=r5, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000000000000022a5cfd43437ad6a"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x47}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x4050) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0x0, 0xffff}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) 6.083780776s ago: executing program 4 (id=4063): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="110725bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xfc, 0x8, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0xba, 0x5}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x9, 0x7f, &(0x7f0000000140)=""/127, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x40}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703a90723f9000000008af26c", 0xd8}], 0x1}, 0x22040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000006c0)={@broadcast, @loopback}, &(0x7f0000000700)=0xc) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x20900, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9, 0x0, 0x5}, 0x18) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="a9050000fb00746400010000000000462bfbdf41009f3f699c9c78616e591ed0c6b856f9", 0x24}], 0x1}}], 0x1, 0x20044044) 5.86117635s ago: executing program 4 (id=4067): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r0, 0x8, 0xfffffffb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002280)=""/4090, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x4000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.780351679s ago: executing program 3 (id=4068): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000080ffff0000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 5.61621851s ago: executing program 3 (id=4071): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x7}, 0xe1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000400080006"], 0x24}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @loopback}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40002042, 0x0) 5.260638408s ago: executing program 3 (id=4073): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000081) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd35}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.880348816s ago: executing program 3 (id=4075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000010201020000000000000000020000092c0001800600034000040000140001"], 0x40}}, 0x814) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @empty}}}], 0x20}, 0x24008004) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f00000002c0)=0x6d, 0x4) 2.632852854s ago: executing program 4 (id=4078): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x2004c880) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r3, &(0x7f0000000000)='\"', 0x1) recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8050) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000040)=0x100000, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000080)=0x10001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d75b4cd362581725c7", "fa00", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0xb8241670086d9d8e, 0x1c9, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) close(r5) 1.708707155s ago: executing program 1 (id=4081): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000580)="d36881f00b") r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'netpci0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000540)="98e28bd65ac5d76c4b9dbb12546fdb9103b8b9dc624649a60b1967a06d2c116c19ad61bcb0f058244350fd573a6c0ef56d9bf301f1deb9f4373f31f2fd5ad26055db545dc121a57168eb0afd0f1a0f875095a777fd5f5b028c59bbea4cd0646ac70913536a5124f8d13bceec8a09104f9c33ea836e14744e6932d687b293f69fcd467e2f79bc1ffa37983317422f34fe59f9edc30230eba46ca2ee88", 0x9c}, {&(0x7f0000000600)="406b7993b431f815eb48922cb1c5bef54103254444b09c86dae80bf1fbeb8adf6466fb15c651ed180c5877c65b8f9e6269a2000441cbc562670059d8360d0d4971151091645d3125bba631d67843204344d22c70f522785f3d19bcf91ca49a1058a6471c76e99e8773", 0x69}, {&(0x7f0000000680)="ff2a7ddeababd8b4db99e88b5d04121e3996aed4610ace8b203e3d2e3652739e7f753a0a2a4fd24dcc331615a82e2b872e98310257c98204317efb5203abccee56", 0x41}, {&(0x7f0000000700)="ef42ddd9773b0f970d464c89ba181bcf7c43482bc531c0d3c905ed646236bab61972041093097659360825abdc7b2f2e212f8fd269f9c7c032cfb51cfc09f77ee117be1dcad93403c99f0b8996474e69b179c0e2963d490f96314d1f1560a464473edae443f5529ce7a855834cdd4f995ff72d1e2073311e3f7d2129f8b81635727835705a0dbe0401e9039a3096babb77d13e6aa9975498bdbd23ae9ba57fdf9a65e41375209581d25ea5a0dead96053d374028f1877e6622e25a409301f2d1483b00fa810da063", 0xc8}, {&(0x7f0000001940)="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", 0x1e9}, {&(0x7f0000000800)="f17911", 0x3}], 0x6}, 0xc000) 1.538354749s ago: executing program 1 (id=4083): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x95, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r1, 0x0, 0x100000000) 1.458117671s ago: executing program 0 (id=4084): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.328356887s ago: executing program 1 (id=4085): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a8048000300"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005"], 0x50}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2688}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x15) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0xcd77, 0x2}, 0xe) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000540)="98e28bd65ac5d76c4b9dbb12546fdb9103b8b9dc624649a60b1967a06d2c116c19ad61bcb0f058244350fd573a6c0ef56d9bf301f1deb9f4373f31f2fd5ad26055db545dc121a57168eb0afd0f1a0f875095a777fd5f5b028c59bbea4cd0646ac70913536a5124f8d13bceec8a09104f9c33ea836e14744e6932d687b293f69fcd467e2f79bc1ffa37983317422f34fe59f9edc30230eba46ca2ee88", 0x9c}, {&(0x7f0000000600)="406b7993b431f815eb48922cb1c5bef54103254444b09c86dae80bf1fbeb8adf6466fb15c651ed180c5877c65b8f9e6269a2000441cbc562670059d8360d0d4971151091645d3125bba631d67843204344d22c70f522785f3d19bcf91ca49a1058a6471c76e99e8773", 0x69}, {&(0x7f0000000680)="ff2a7ddeababd8b4db99e88b5d04121e3996aed4610ace8b203e3d2e3652739e7f753a0a2a4fd24dcc331615a82e2b872e98310257c98204317efb5203abccee56", 0x41}, {&(0x7f0000000700)="ef42ddd9773b0f970d464c89ba181bcf7c43482bc531c0d3c905ed646236bab61972041093097659360825abdc7b2f2e212f8fd269f9c7c032cfb51cfc09f77ee117be1dcad93403c99f0b8996474e69b179c0e2963d490f96314d1f1560a464473edae443f5529ce7a855834cdd4f995ff72d1e2073311e3f7d2129f8b81635727835705a0dbe0401e9039a3096babb77d13e6aa9975498bdbd23ae9ba57fdf9a65e41375209581d25ea5a0dead96053d374028f1877e6622e25a409301f2d1483b00fa810da063", 0x10d}, {&(0x7f0000001940)="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", 0x1e9}, {&(0x7f0000000800)="f17911", 0x3}], 0x6}, 0xc000) 1.326417992s ago: executing program 0 (id=4086): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}}], 0x1, 0x4000040) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b", 0xbc}], 0x2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac14141b000000000100000003efbbac1e01010a0101020000000000"], 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000002000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc805}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect(r3, &(0x7f0000001e80)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x8}, 0x1c) 1.141430871s ago: executing program 0 (id=4087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0xf0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf1, 0x3, 0x1ff, 0x5, 0x2, 0xc, 0x6, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xb, 0x2, 0x7, 0xdd, 0x0, 0xf70, 0x400, 0x6}}, {0x10, 0x2, [0x8, 0x5d, 0x8, 0xfffc, 0x18, 0x1]}}, {{0x1c, 0x1, {0xd7, 0xe, 0x5, 0x7, 0x2, 0x2, 0x10, 0x3}}, {0xa, 0x2, [0xb, 0x7f, 0x25a]}}, {{0x1c, 0x1, {0xb6, 0x3, 0x81, 0x5, 0x0, 0x8, 0x7, 0x5}}, {0xe, 0x2, [0xe, 0x3ff, 0x6, 0x7, 0x7]}}, {{0x1c, 0x1, {0xff, 0x1, 0x7, 0x8, 0x1, 0x6, 0xbd, 0x2}}, {0x8, 0x2, [0x5, 0x1]}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008021}, 0x4008050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) 1.080107796s ago: executing program 1 (id=4088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000f5000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 960.081694ms ago: executing program 1 (id=4089): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x27f}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6c3f66a2, 0x7, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 881.211861ms ago: executing program 1 (id=4090): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) close(0x3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x1c000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x8000) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='btrfs_convert_extent_bit\x00', r10, 0x0, 0x4}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x5c, r12, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000000}, 0x20040800) 791.175942ms ago: executing program 0 (id=4091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c0004000200ffffffe400000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) 687.21982ms ago: executing program 2 (id=4092): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1365, 0x6a, 0xffffbffffffffffb, 0x3, 0x1, 0x8}, &(0x7f0000000040)={0x3, 0x6, 0x80000001, 0x100000000, 0xfa, 0x6, 0x80000001, 0x23e7}, &(0x7f0000000080)={0x2, 0x4e3, 0x2a73, 0x241, 0xb, 0x8000000000000001, 0x6, 0x3}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000100)={[0x1b]}, 0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x700000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 481.716584ms ago: executing program 2 (id=4093): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000004a00010029bd7000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="090000001400010000000000000000c954"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4010) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r6, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002700)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="13000000010203", 0x7}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0x81, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r7, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x10, 0x2, 0x9}}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x12, 0x6, 0x8, 0x28, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @in6=@empty, 0x6, 0x0, 0x10}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x0, 0x8, {0x6, 0x6c, 0x4, 0x1, 0x0, 0x59e4, 0x0, @in6=@private2, @in6=@loopback}}, @sadb_ident={0x2, 0xb, 0x7f, 0x0, 0xe0}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f, 0x10, 0x10}, @sadb_x_sec_ctx={0x3, 0x18, 0x5, 0xd, 0xa, "41f9df13ee4eedd4538c"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, @in6={0xa, 0x4e20, 0xa36, @private2, 0xf0}}, @sadb_ident={0x2, 0xb, 0x7}]}, 0x140}}, 0xc001) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) 481.023475ms ago: executing program 0 (id=4094): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (fail_nth: 3) 248.449489ms ago: executing program 0 (id=4095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c3ffffff0000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 235.24397ms ago: executing program 2 (id=4096): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="3cf6123f", 0x4}], 0x1, 0x0, 0x5f}, 0x24000000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x5e, 0x3}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x30, 0x0, 0x5f, 0x4f]}}, &(0x7f0000000140)=""/54, 0x56, 0x36, 0x0, 0x8, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='mm_page_alloc\x00', r3, 0x0, 0x7}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="3cf6123f", 0x4}], 0x1, 0x0, 0x5f}, 0x24000000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x5e, 0x3}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x30, 0x0, 0x5f, 0x4f]}}, &(0x7f0000000140)=""/54, 0x56, 0x36, 0x0, 0x8, 0x10000}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='mm_page_alloc\x00', r3, 0x0, 0x7}, 0xd) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) 6.581765ms ago: executing program 2 (id=4097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) unshare(0x40000) getsockopt(r9, 0x111, 0x200009, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=4098): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000002b40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "f2f8"}]}}}], 0x18}}], 0x2, 0x4000800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) r4 = socket$inet6_sctp(0xa, 0x804, 0x84) sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000080)}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000240)="00ab0f640937f9", 0x7}], 0x1}}], 0x2, 0x4040000) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000100)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x38}, [@IFA_FLAGS={0x0, 0x8, 0x4}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300)=0x76c00000, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000400000000000dbdcf0258000"/32], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = accept(r5, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x49018) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r9, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SIOCPNGETOBJECT(r11, 0x89e0, &(0x7f00000001c0)=0x10) kernel console output (not intermixed with test programs): 38'. [ 394.935083][T15623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 395.053773][T15747] digital: digital_start_poll: Unknown protocol [ 395.215295][T15623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.218365][T15754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3043'. [ 395.232752][T15753] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 395.320105][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.347721][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.354931][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.369624][T15758] FAULT_INJECTION: forcing a failure. [ 395.369624][T15758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.387352][T15758] CPU: 1 UID: 0 PID: 15758 Comm: syz.0.3046 Not tainted syzkaller #0 PREEMPT(full) [ 395.387377][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.387388][T15758] Call Trace: [ 395.387394][T15758] [ 395.387403][T15758] dump_stack_lvl+0x189/0x250 [ 395.387430][T15758] ? __pfx____ratelimit+0x10/0x10 [ 395.387449][T15758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.387471][T15758] ? __pfx__printk+0x10/0x10 [ 395.387490][T15758] ? __might_fault+0xb0/0x130 [ 395.387525][T15758] should_fail_ex+0x414/0x560 [ 395.387555][T15758] _copy_from_user+0x2d/0xb0 [ 395.387577][T15758] __sys_bpf+0x1e3/0x860 [ 395.387597][T15758] ? __pfx___sys_bpf+0x10/0x10 [ 395.387631][T15758] ? ksys_write+0x1e1/0x250 [ 395.387657][T15758] ? __pfx_ksys_write+0x10/0x10 [ 395.387690][T15758] __x64_sys_bpf+0x7c/0x90 [ 395.387715][T15758] do_syscall_64+0xfa/0xfa0 [ 395.387735][T15758] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.387755][T15758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.387773][T15758] ? clear_bhb_loop+0x60/0xb0 [ 395.387801][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.387819][T15758] RIP: 0033:0x7f663cd8efc9 [ 395.387835][T15758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.387849][T15758] RSP: 002b:00007f663dc99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.387868][T15758] RAX: ffffffffffffffda RBX: 00007f663cfe5fa0 RCX: 00007f663cd8efc9 [ 395.387882][T15758] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000024 [ 395.387894][T15758] RBP: 00007f663dc99090 R08: 0000000000000000 R09: 0000000000000000 [ 395.387905][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.387916][T15758] R13: 00007f663cfe6038 R14: 00007f663cfe5fa0 R15: 00007ffff609fae8 [ 395.387947][T15758] [ 395.587010][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.594186][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.672551][T15623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 395.683704][T15623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.864888][ T5829] Bluetooth: hci3: command tx timeout [ 396.006090][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.025115][T15783] batadv_slave_0: entered promiscuous mode [ 396.082686][T15788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3056'. [ 396.119020][T15623] veth0_vlan: entered promiscuous mode [ 396.137084][T15782] batadv_slave_0: left promiscuous mode [ 396.176303][T15623] veth1_vlan: entered promiscuous mode [ 396.242143][T15623] veth0_macvtap: entered promiscuous mode [ 396.267570][T15623] veth1_macvtap: entered promiscuous mode [ 396.331023][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.365613][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.403923][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.428944][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.450970][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.468320][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.518079][T15808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3065'. [ 396.527543][T15808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3065'. [ 396.598421][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3062'. [ 396.618154][T15803] vlan0: entered promiscuous mode [ 396.634974][T15803] team0: Port device vlan0 added [ 396.657514][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.692526][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.762157][T15813] netlink: 'syz.2.3067': attribute type 4 has an invalid length. [ 396.794993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.806913][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.358227][T15846] netlink: 'syz.2.3078': attribute type 10 has an invalid length. [ 397.553370][T15854] wg1 speed is unknown, defaulting to 1000 [ 397.807487][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.818647][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.828204][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.843596][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.852254][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.943599][ T5829] Bluetooth: hci3: command tx timeout [ 397.962778][T15865] wg1 speed is unknown, defaulting to 1000 [ 398.067129][T15860] wg1 speed is unknown, defaulting to 1000 [ 398.211581][T15873] digital: digital_start_poll: Unknown protocol [ 398.474143][T15860] chnl_net:caif_netlink_parms(): no params data found [ 398.481704][T15878] __nla_validate_parse: 5 callbacks suppressed [ 398.481730][T15878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3088'. [ 398.613604][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'. [ 398.734738][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3095'. [ 399.176406][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.202052][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.223833][T15860] bridge_slave_0: entered allmulticast mode [ 399.237510][T15860] bridge_slave_0: entered promiscuous mode [ 399.257905][T15899] wg1 speed is unknown, defaulting to 1000 [ 399.259188][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.272143][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.288043][T15860] bridge_slave_1: entered allmulticast mode [ 399.309300][T15860] bridge_slave_1: entered promiscuous mode [ 399.407743][T15897] wg1 speed is unknown, defaulting to 1000 [ 399.443430][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.494459][T15922] digital: digital_start_poll: Unknown protocol [ 399.495618][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.666169][T15860] team0: Port device team_slave_0 added [ 399.680689][T15860] team0: Port device team_slave_1 added [ 399.742781][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.751707][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.778924][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.799977][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.807784][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.834187][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.916448][T15860] hsr_slave_0: entered promiscuous mode [ 399.923794][T15860] hsr_slave_1: entered promiscuous mode [ 399.930092][T15860] debugfs: 'hsr0' already exists in 'hsr' [ 399.936222][T15860] Cannot create hsr debugfs directory [ 399.943355][ T5829] Bluetooth: hci1: command tx timeout [ 399.953362][T15929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3102'. [ 399.975786][T15929] vlan0: entered promiscuous mode [ 400.007519][T15929] team0: Port device vlan0 added [ 400.023306][ T5829] Bluetooth: hci3: command tx timeout [ 400.065889][T15931] netlink: 'syz.0.3103': attribute type 1 has an invalid length. [ 400.217073][T15931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.237077][T15935] bond1: entered promiscuous mode [ 400.377873][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3106'. [ 400.410023][T15951] digital: digital_start_poll: Unknown protocol [ 400.620522][T15960] wg1 speed is unknown, defaulting to 1000 [ 400.745415][T15969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3116'. [ 400.771751][T15969] team_slave_0: entered promiscuous mode [ 400.777918][T15969] team_slave_1: entered promiscuous mode [ 400.790833][T15969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 400.805233][T15969] team_slave_0: left promiscuous mode [ 400.810758][T15969] team_slave_1: left promiscuous mode [ 401.070515][T15979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3119'. [ 401.118602][T15979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3119'. [ 401.148581][T15979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3119'. [ 401.236364][T15860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.290024][T15860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.312121][T15860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 401.328032][T15989] FAULT_INJECTION: forcing a failure. [ 401.328032][T15989] name failslab, interval 1, probability 0, space 0, times 0 [ 401.335411][T15988] digital: digital_start_poll: Unknown protocol [ 401.343333][T15989] CPU: 0 UID: 0 PID: 15989 Comm: syz.0.3123 Not tainted syzkaller #0 PREEMPT(full) [ 401.343359][T15989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.343370][T15989] Call Trace: [ 401.343377][T15989] [ 401.343384][T15989] dump_stack_lvl+0x189/0x250 [ 401.343413][T15989] ? __pfx____ratelimit+0x10/0x10 [ 401.343433][T15989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.343455][T15989] ? __pfx__printk+0x10/0x10 [ 401.343486][T15989] ? __pfx___might_resched+0x10/0x10 [ 401.343506][T15989] ? fs_reclaim_acquire+0x7d/0x100 [ 401.343535][T15989] should_fail_ex+0x414/0x560 [ 401.343565][T15989] should_failslab+0xa8/0x100 [ 401.343584][T15989] kmem_cache_alloc_node_noprof+0x77/0x710 [ 401.343608][T15989] ? __alloc_skb+0x112/0x2d0 [ 401.343637][T15989] __alloc_skb+0x112/0x2d0 [ 401.343664][T15989] netlink_sendmsg+0x5c6/0xb30 [ 401.343690][T15989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.343709][T15989] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.343736][T15989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.343753][T15989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.343770][T15989] __sock_sendmsg+0x21c/0x270 [ 401.343794][T15989] __sys_sendto+0x3bd/0x520 [ 401.343820][T15989] ? __pfx___sys_sendto+0x10/0x10 [ 401.343841][T15989] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 401.343876][T15989] ? __fget_files+0x3a0/0x420 [ 401.343903][T15989] ? ksys_write+0x22a/0x250 [ 401.343928][T15989] ? __pfx_ksys_write+0x10/0x10 [ 401.343954][T15989] __x64_sys_sendto+0xde/0x100 [ 401.343981][T15989] do_syscall_64+0xfa/0xfa0 [ 401.344000][T15989] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.344020][T15989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.344036][T15989] ? clear_bhb_loop+0x60/0xb0 [ 401.344057][T15989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.344074][T15989] RIP: 0033:0x7f663cd90e5c [ 401.344092][T15989] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 401.344107][T15989] RSP: 002b:00007f663dc97ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 401.344125][T15989] RAX: ffffffffffffffda RBX: 00007f663dc97fc0 RCX: 00007f663cd90e5c [ 401.344139][T15989] RDX: 0000000000000020 RSI: 00007f663dc98010 RDI: 0000000000000003 [ 401.344150][T15989] RBP: 0000000000000000 R08: 00007f663dc97f14 R09: 000000000000000c [ 401.344161][T15989] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 401.344171][T15989] R13: 00007f663dc97f68 R14: 00007f663dc98010 R15: 0000000000000000 [ 401.344200][T15989] [ 401.588165][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 401.609299][T15860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.670763][T16000] dummy0: entered promiscuous mode [ 401.961687][T16017] wg1 speed is unknown, defaulting to 1000 [ 401.980884][T15860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.023467][ T5829] Bluetooth: hci1: command tx timeout [ 402.228653][T15860] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.252293][T15231] udevd[15231]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 402.285100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.292393][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.319570][T13832] udevd[13832]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 402.395677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.402985][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.627674][T16048] wg1 speed is unknown, defaulting to 1000 [ 402.894421][T15860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.950273][T16060] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 403.125482][T16067] block nbd1: shutting down sockets [ 403.332156][T15860] veth0_vlan: entered promiscuous mode [ 403.362577][T15860] veth1_vlan: entered promiscuous mode [ 403.373605][T16083] FAULT_INJECTION: forcing a failure. [ 403.373605][T16083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.387095][T16083] CPU: 0 UID: 0 PID: 16083 Comm: syz.0.3150 Not tainted syzkaller #0 PREEMPT(full) [ 403.387118][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.387128][T16083] Call Trace: [ 403.387135][T16083] [ 403.387142][T16083] dump_stack_lvl+0x189/0x250 [ 403.387171][T16083] ? __pfx____ratelimit+0x10/0x10 [ 403.387192][T16083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.387215][T16083] ? __pfx__printk+0x10/0x10 [ 403.387233][T16083] ? __might_fault+0xb0/0x130 [ 403.387276][T16083] should_fail_ex+0x414/0x560 [ 403.387306][T16083] _copy_from_user+0x2d/0xb0 [ 403.387328][T16083] do_ip_setsockopt+0x3c0/0x2d00 [ 403.387357][T16083] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 403.387390][T16083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 403.387410][T16083] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.387431][T16083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 403.387450][T16083] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 403.387472][T16083] ip_setsockopt+0x66/0x110 [ 403.387498][T16083] mptcp_setsockopt+0xf13/0x3560 [ 403.387533][T16083] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 403.387555][T16083] ? aa_sk_perm+0x81e/0x950 [ 403.387582][T16083] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.387605][T16083] ? aa_sock_opt_perm+0xff/0x1b0 [ 403.387632][T16083] ? sock_common_setsockopt+0x36/0xc0 [ 403.387654][T16083] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 403.387678][T16083] do_sock_setsockopt+0x17c/0x1b0 [ 403.387698][T16083] __x64_sys_setsockopt+0x13f/0x1b0 [ 403.387720][T16083] do_syscall_64+0xfa/0xfa0 [ 403.387740][T16083] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.387760][T16083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.387777][T16083] ? clear_bhb_loop+0x60/0xb0 [ 403.387798][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.387815][T16083] RIP: 0033:0x7f663cd8efc9 [ 403.387831][T16083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.387847][T16083] RSP: 002b:00007f663dc99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.387867][T16083] RAX: ffffffffffffffda RBX: 00007f663cfe5fa0 RCX: 00007f663cd8efc9 [ 403.387880][T16083] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 403.387891][T16083] RBP: 00007f663dc99090 R08: 0000000000000004 R09: 0000000000000000 [ 403.387902][T16083] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 403.387912][T16083] R13: 00007f663cfe6038 R14: 00007f663cfe5fa0 R15: 00007ffff609fae8 [ 403.387942][T16083] [ 403.406339][T15860] veth0_macvtap: entered promiscuous mode [ 403.689677][T15860] veth1_macvtap: entered promiscuous mode [ 403.731664][T15860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.746796][T15860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.756427][T16096] netlink: 'syz.0.3154': attribute type 1 has an invalid length. [ 403.763478][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.796657][T16096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.804633][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.804775][T16097] smc: net device bond0 applied user defined pnetid SYZ0 [ 403.821720][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.826629][T16097] smc: net device bond0 erased user defined pnetid SYZ0 [ 403.846307][T16096] bond2: (slave geneve2): making interface the new active one [ 403.855140][T16096] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 403.869298][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.970914][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.984480][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.012689][T16100] bridge_slave_0: left allmulticast mode [ 404.019148][T16100] bridge_slave_0: left promiscuous mode [ 404.025727][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.037400][T16100] bridge_slave_1: left allmulticast mode [ 404.043295][T16100] bridge_slave_1: left promiscuous mode [ 404.049025][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.061123][T16100] bond0: (slave bond_slave_0): Releasing backup interface [ 404.071766][T16100] bond0: (slave bond_slave_1): Releasing backup interface [ 404.089354][T16100] team0: Port device team_slave_0 removed [ 404.100015][T16100] team0: Port device team_slave_1 removed [ 404.107786][ T5829] Bluetooth: hci1: command tx timeout [ 404.112011][T16100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.118815][T16102] __nla_validate_parse: 8 callbacks suppressed [ 404.118831][T16102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3155'. [ 404.121818][T16100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.145994][T16100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.153950][T16100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.162692][T16100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.221412][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.230560][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.345158][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3157'. [ 404.586428][T16118] netlink: 'syz.0.3162': attribute type 4 has an invalid length. [ 404.594589][T16118] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3162'. [ 404.814733][T16127] wg1 speed is unknown, defaulting to 1000 [ 405.523708][T16159] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 405.733897][T16167] netlink: 'syz.2.3175': attribute type 3 has an invalid length. [ 405.809904][T16174] FAULT_INJECTION: forcing a failure. [ 405.809904][T16174] name failslab, interval 1, probability 0, space 0, times 0 [ 405.843070][T16174] CPU: 1 UID: 0 PID: 16174 Comm: syz.1.3179 Not tainted syzkaller #0 PREEMPT(full) [ 405.843096][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.843107][T16174] Call Trace: [ 405.843115][T16174] [ 405.843122][T16174] dump_stack_lvl+0x189/0x250 [ 405.843149][T16174] ? __pfx____ratelimit+0x10/0x10 [ 405.843169][T16174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.843190][T16174] ? __pfx__printk+0x10/0x10 [ 405.843213][T16174] ? __lock_acquire+0xab9/0xd20 [ 405.843236][T16174] should_fail_ex+0x414/0x560 [ 405.843263][T16174] should_failslab+0xa8/0x100 [ 405.843282][T16174] kmem_cache_alloc_noprof+0x74/0x6e0 [ 405.843304][T16174] ? skb_clone+0x212/0x3a0 [ 405.843326][T16174] skb_clone+0x212/0x3a0 [ 405.843347][T16174] __netlink_deliver_tap+0x404/0x850 [ 405.843384][T16174] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.843408][T16174] netlink_deliver_tap+0x19c/0x1b0 [ 405.843433][T16174] netlink_unicast+0x7fa/0x9e0 [ 405.843465][T16174] ? __pfx_netlink_unicast+0x10/0x10 [ 405.843489][T16174] ? netlink_sendmsg+0x642/0xb30 [ 405.843503][T16174] ? skb_put+0x11b/0x210 [ 405.843530][T16174] netlink_sendmsg+0x805/0xb30 [ 405.843554][T16174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.843572][T16174] ? aa_sock_msg_perm+0xf1/0x1d0 [ 405.843596][T16174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.843613][T16174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.843630][T16174] __sock_sendmsg+0x21c/0x270 [ 405.843655][T16174] ____sys_sendmsg+0x505/0x830 [ 405.843679][T16174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.843707][T16174] ? import_iovec+0x74/0xa0 [ 405.843732][T16174] ___sys_sendmsg+0x21f/0x2a0 [ 405.843754][T16174] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.843819][T16174] ? __fget_files+0x2a/0x420 [ 405.843834][T16174] ? __fget_files+0x3a0/0x420 [ 405.843861][T16174] __x64_sys_sendmsg+0x19b/0x260 [ 405.843883][T16174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.843913][T16174] ? __pfx_ksys_write+0x10/0x10 [ 405.843940][T16174] ? do_syscall_64+0xbe/0xfa0 [ 405.843965][T16174] do_syscall_64+0xfa/0xfa0 [ 405.843984][T16174] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.844004][T16174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.844021][T16174] ? clear_bhb_loop+0x60/0xb0 [ 405.844043][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.844059][T16174] RIP: 0033:0x7fd0a7f8efc9 [ 405.844076][T16174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.844091][T16174] RSP: 002b:00007fd0a8e41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.844111][T16174] RAX: ffffffffffffffda RBX: 00007fd0a81e5fa0 RCX: 00007fd0a7f8efc9 [ 405.844124][T16174] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.844135][T16174] RBP: 00007fd0a8e41090 R08: 0000000000000000 R09: 0000000000000000 [ 405.844146][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.844156][T16174] R13: 00007fd0a81e6038 R14: 00007fd0a81e5fa0 R15: 00007ffc184a4658 [ 405.844189][T16174] [ 406.223134][T15231] udevd[15231]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 406.232787][ T5829] Bluetooth: hci1: command tx timeout [ 406.292453][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 406.317985][T13832] udevd[13832]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 406.344345][T16188] netlink: 'syz.4.3180': attribute type 4 has an invalid length. [ 406.411135][T16194] netlink: 'syz.4.3180': attribute type 4 has an invalid length. [ 406.516297][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3181'. [ 406.672113][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3190'. [ 406.696490][T16209] Cannot find set identified by id 65534 to match [ 406.800281][T16213] netlink: 'syz.2.3194': attribute type 3 has an invalid length. [ 407.095081][T16232] wg1 speed is unknown, defaulting to 1000 [ 407.142658][T16230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3201'. [ 407.220169][T16242] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3206'. [ 407.362027][T16249] netlink: 'syz.0.3207': attribute type 3 has an invalid length. [ 407.440359][T16251] tipc: Started in network mode [ 407.445632][T16251] tipc: Node identity 2a953e85da7a, cluster identity 4711 [ 407.453216][T16251] tipc: Enabled bearer , priority 0 [ 407.461214][T16251] syzkaller0: entered promiscuous mode [ 407.468490][T16251] syzkaller0: entered allmulticast mode [ 407.504156][T16251] tipc: Resetting bearer [ 407.545166][T16251] tipc: Resetting bearer [ 407.595694][T16251] tipc: Disabling bearer [ 407.608272][T16253] Cannot find set identified by id 65534 to match [ 407.773819][T16257] FAULT_INJECTION: forcing a failure. [ 407.773819][T16257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.803188][T16257] CPU: 0 UID: 0 PID: 16257 Comm: syz.1.3211 Not tainted syzkaller #0 PREEMPT(full) [ 407.803215][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 407.803226][T16257] Call Trace: [ 407.803233][T16257] [ 407.803242][T16257] dump_stack_lvl+0x189/0x250 [ 407.803273][T16257] ? __pfx____ratelimit+0x10/0x10 [ 407.803294][T16257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.803316][T16257] ? __pfx__printk+0x10/0x10 [ 407.803335][T16257] ? __might_fault+0xb0/0x130 [ 407.803370][T16257] should_fail_ex+0x414/0x560 [ 407.803401][T16257] _copy_from_user+0x2d/0xb0 [ 407.803423][T16257] do_sock_getsockopt+0x17d/0x450 [ 407.803444][T16257] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 407.803461][T16257] ? do_syscall_64+0xa0/0xfa0 [ 407.803481][T16257] ? __fget_files+0x2a/0x420 [ 407.803497][T16257] ? __fget_files+0x3a0/0x420 [ 407.803513][T16257] ? __fget_files+0x2a/0x420 [ 407.803537][T16257] __x64_sys_getsockopt+0x1a5/0x250 [ 407.803554][T16257] ? do_syscall_64+0xa0/0xfa0 [ 407.803575][T16257] ? do_syscall_64+0xa0/0xfa0 [ 407.803598][T16257] do_syscall_64+0xfa/0xfa0 [ 407.803624][T16257] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.803645][T16257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.803663][T16257] ? clear_bhb_loop+0x60/0xb0 [ 407.803685][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.803702][T16257] RIP: 0033:0x7fd0a7f8efc9 [ 407.803718][T16257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.803734][T16257] RSP: 002b:00007fd0a8e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 407.803754][T16257] RAX: ffffffffffffffda RBX: 00007fd0a81e5fa0 RCX: 00007fd0a7f8efc9 [ 407.803767][T16257] RDX: 000000000000001d RSI: 0000000000000001 RDI: 0000000000000003 [ 407.803778][T16257] RBP: 00007fd0a8e41090 R08: 0000200000000300 R09: 0000000000000000 [ 407.803790][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.803800][T16257] R13: 00007fd0a81e6038 R14: 00007fd0a81e5fa0 R15: 00007ffc184a4658 [ 407.803833][T16257] [ 408.108777][T16262] netlink: 'syz.1.3214': attribute type 4 has an invalid length. [ 408.897352][T16295] netlink: 'syz.1.3220': attribute type 10 has an invalid length. [ 408.901967][T16293] netlink: 'syz.4.3218': attribute type 3 has an invalid length. [ 409.328007][T16309] wg1 speed is unknown, defaulting to 1000 [ 409.435816][T16317] wg1 speed is unknown, defaulting to 1000 [ 409.445517][T16320] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 410.230246][T16332] wg1 speed is unknown, defaulting to 1000 [ 410.357873][T16338] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 410.382550][T13832] udevd[13832]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 410.392639][T16338] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3230'. [ 410.469216][T16338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3230'. [ 410.538284][T16343] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 411.344343][T16355] netlink: 'syz.4.3233': attribute type 3 has an invalid length. [ 411.958696][T16368] netlink: 'syz.2.3239': attribute type 10 has an invalid length. [ 411.994534][T16367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3238'. [ 412.003567][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3238'. [ 412.012525][T16367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3238'. [ 412.021699][T16367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3238'. [ 412.142391][T16372] macvtap1: entered promiscuous mode [ 412.165712][T16372] macvtap1: entered allmulticast mode [ 412.266457][T16373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3241'. [ 412.390906][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'. [ 412.404021][T16383] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3245'. [ 412.418372][T16388] x_tables: duplicate underflow at hook 3 [ 412.571394][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'. [ 412.598633][T16398] erspan0: entered promiscuous mode [ 412.607176][T16398] erspan0: left promiscuous mode [ 412.649516][T16402] netlink: 'syz.0.3252': attribute type 3 has an invalid length. [ 412.932203][ T6156] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.943740][ T6156] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.986417][ T6156] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.000573][ T6156] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.389188][T16425] netlink: 'syz.1.3259': attribute type 4 has an invalid length. [ 413.414608][T16425] netlink: 'syz.1.3259': attribute type 4 has an invalid length. [ 413.850710][T16442] netlink: 'syz.4.3264': attribute type 9 has an invalid length. [ 414.058244][T16448] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 414.918312][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.928349][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.938661][ T5825] syz_tun (unregistering): left allmulticast mode [ 414.945755][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.956371][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.965685][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.102055][T16479] wg1 speed is unknown, defaulting to 1000 [ 415.422000][T16495] netlink: 'syz.4.3281': attribute type 4 has an invalid length. [ 415.451358][T16493] bond1 (unregistering): Released all slaves [ 415.471870][T16498] netlink: 'syz.0.3285': attribute type 10 has an invalid length. [ 415.484128][T16501] netlink: 'syz.4.3281': attribute type 4 has an invalid length. [ 415.672291][T16507] netlink: 'syz.0.3288': attribute type 2 has an invalid length. [ 415.672670][T16509] digital: digital_start_poll: Unknown protocol [ 415.706063][T16507] : entered promiscuous mode [ 415.711233][T16511] FAULT_INJECTION: forcing a failure. [ 415.711233][T16511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.711348][T16479] chnl_net:caif_netlink_parms(): no params data found [ 415.727198][T16511] CPU: 0 UID: 0 PID: 16511 Comm: syz.2.3290 Not tainted syzkaller #0 PREEMPT(full) [ 415.727223][T16511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.727233][T16511] Call Trace: [ 415.727241][T16511] [ 415.727249][T16511] dump_stack_lvl+0x189/0x250 [ 415.727276][T16511] ? __pfx____ratelimit+0x10/0x10 [ 415.727297][T16511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.727319][T16511] ? __pfx__printk+0x10/0x10 [ 415.727349][T16511] should_fail_ex+0x414/0x560 [ 415.727379][T16511] _copy_to_user+0x31/0xb0 [ 415.727403][T16511] simple_read_from_buffer+0xe1/0x170 [ 415.727433][T16511] proc_fail_nth_read+0x1b3/0x220 [ 415.727457][T16511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.727481][T16511] ? rw_verify_area+0x2a6/0x4d0 [ 415.727503][T16511] ? __lock_acquire+0xab9/0xd20 [ 415.727518][T16511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.727541][T16511] vfs_read+0x200/0xa30 [ 415.727562][T16511] ? fdget_pos+0x247/0x320 [ 415.727583][T16511] ? __pfx___mutex_lock+0x10/0x10 [ 415.727606][T16511] ? __pfx_vfs_read+0x10/0x10 [ 415.727629][T16511] ? __fget_files+0x2a/0x420 [ 415.727649][T16511] ? __fget_files+0x3a0/0x420 [ 415.727664][T16511] ? __fget_files+0x2a/0x420 [ 415.727689][T16511] ksys_read+0x145/0x250 [ 415.727714][T16511] ? __pfx_ksys_read+0x10/0x10 [ 415.727740][T16511] ? do_syscall_64+0xbe/0xfa0 [ 415.727764][T16511] do_syscall_64+0xfa/0xfa0 [ 415.727782][T16511] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.727802][T16511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.727837][T16511] ? clear_bhb_loop+0x60/0xb0 [ 415.727857][T16511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.727874][T16511] RIP: 0033:0x7fc655d8d9dc [ 415.727890][T16511] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.727905][T16511] RSP: 002b:00007fc656ce8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.727924][T16511] RAX: ffffffffffffffda RBX: 00007fc655fe5fa0 RCX: 00007fc655d8d9dc [ 415.727943][T16511] RDX: 000000000000000f RSI: 00007fc656ce80a0 RDI: 0000000000000004 [ 415.727954][T16511] RBP: 00007fc656ce8090 R08: 0000000000000000 R09: 0000000000000000 [ 415.727965][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.727975][T16511] R13: 00007fc655fe6038 R14: 00007fc655fe5fa0 R15: 00007ffc1ebe57c8 [ 415.728005][T16511] [ 415.778188][T16507] __nla_validate_parse: 15 callbacks suppressed [ 415.778205][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3288'. [ 415.854404][T16514] FAULT_INJECTION: forcing a failure. [ 415.854404][T16514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.001924][T16514] CPU: 1 UID: 0 PID: 16514 Comm: syz.2.3291 Not tainted syzkaller #0 PREEMPT(full) [ 416.001947][T16514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.001957][T16514] Call Trace: [ 416.001964][T16514] [ 416.001972][T16514] dump_stack_lvl+0x189/0x250 [ 416.001997][T16514] ? __pfx____ratelimit+0x10/0x10 [ 416.002023][T16514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.002045][T16514] ? __pfx__printk+0x10/0x10 [ 416.002074][T16514] should_fail_ex+0x414/0x560 [ 416.002105][T16514] _copy_to_user+0x31/0xb0 [ 416.002129][T16514] sk_getsockopt+0x19dd/0x2530 [ 416.002159][T16514] ? __pfx_sk_getsockopt+0x10/0x10 [ 416.002181][T16514] ? do_syscall_64+0xa0/0xfa0 [ 416.002208][T16514] ? __lock_acquire+0xab9/0xd20 [ 416.002235][T16514] ? __might_fault+0xb0/0x130 [ 416.002275][T16514] do_sock_getsockopt+0x237/0x450 [ 416.002291][T16514] ? do_syscall_64+0xa0/0xfa0 [ 416.002312][T16514] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 416.002326][T16514] ? do_syscall_64+0xa0/0xfa0 [ 416.002360][T16514] ? __fget_files+0x2a/0x420 [ 416.002374][T16514] ? __fget_files+0x3a0/0x420 [ 416.002387][T16514] ? __fget_files+0x2a/0x420 [ 416.002409][T16514] __x64_sys_getsockopt+0x1a5/0x250 [ 416.002425][T16514] ? do_syscall_64+0xa0/0xfa0 [ 416.002445][T16514] ? do_syscall_64+0xa0/0xfa0 [ 416.002467][T16514] do_syscall_64+0xfa/0xfa0 [ 416.002484][T16514] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.002504][T16514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.002521][T16514] ? clear_bhb_loop+0x60/0xb0 [ 416.002540][T16514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.002557][T16514] RIP: 0033:0x7fc655d8efc9 [ 416.002572][T16514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.002587][T16514] RSP: 002b:00007fc656ce8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 416.002606][T16514] RAX: ffffffffffffffda RBX: 00007fc655fe5fa0 RCX: 00007fc655d8efc9 [ 416.002616][T16514] RDX: 000000000000001d RSI: 0000000000000001 RDI: 0000000000000003 [ 416.002621][T16514] RBP: 00007fc656ce8090 R08: 0000200000000300 R09: 0000000000000000 [ 416.002628][T16514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.002633][T16514] R13: 00007fc655fe6038 R14: 00007fc655fe5fa0 R15: 00007ffc1ebe57c8 [ 416.002650][T16514] [ 416.347548][T16517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3293'. [ 416.507979][T16479] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.517372][T16479] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.525005][T16479] bridge_slave_0: entered allmulticast mode [ 416.532985][T16479] bridge_slave_0: entered promiscuous mode [ 416.539297][T16536] openvswitch: netlink: Message has 8 unknown bytes. [ 416.541859][T16479] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.553698][T16479] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.561348][T16479] bridge_slave_1: entered allmulticast mode [ 416.569344][T16479] bridge_slave_1: entered promiscuous mode [ 416.660393][T16479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.680910][T16479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.738574][T16479] team0: Port device team_slave_0 added [ 416.750577][T16479] team0: Port device team_slave_1 added [ 416.761556][T16545] FAULT_INJECTION: forcing a failure. [ 416.761556][T16545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.808749][T16545] CPU: 0 UID: 0 PID: 16545 Comm: syz.4.3300 Not tainted syzkaller #0 PREEMPT(full) [ 416.808774][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.808784][T16545] Call Trace: [ 416.808791][T16545] [ 416.808797][T16545] dump_stack_lvl+0x189/0x250 [ 416.808826][T16545] ? __pfx____ratelimit+0x10/0x10 [ 416.808846][T16545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.808868][T16545] ? __pfx__printk+0x10/0x10 [ 416.808885][T16545] ? __might_fault+0xb0/0x130 [ 416.808918][T16545] should_fail_ex+0x414/0x560 [ 416.808947][T16545] _copy_from_user+0x2d/0xb0 [ 416.808969][T16545] ___sys_sendmsg+0x158/0x2a0 [ 416.808991][T16545] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.809052][T16545] ? __fget_files+0x2a/0x420 [ 416.809068][T16545] ? __fget_files+0x3a0/0x420 [ 416.809096][T16545] __x64_sys_sendmsg+0x19b/0x260 [ 416.809116][T16545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.809146][T16545] ? rcu_is_watching+0x15/0xb0 [ 416.809176][T16545] do_syscall_64+0xfa/0xfa0 [ 416.809195][T16545] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.809216][T16545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.809234][T16545] ? clear_bhb_loop+0x60/0xb0 [ 416.809256][T16545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.809272][T16545] RIP: 0033:0x7fdcb938efc9 [ 416.809286][T16545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.809300][T16545] RSP: 002b:00007fdcb75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.809319][T16545] RAX: ffffffffffffffda RBX: 00007fdcb95e5fa0 RCX: 00007fdcb938efc9 [ 416.809331][T16545] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 416.809342][T16545] RBP: 00007fdcb75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.809354][T16545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.809365][T16545] R13: 00007fdcb95e6038 R14: 00007fdcb95e5fa0 R15: 00007fff63b7b6a8 [ 416.809397][T16545] [ 416.880640][T16551] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3303'. [ 417.028516][T16479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.030573][T16551] netlink: 'syz.0.3303': attribute type 9 has an invalid length. [ 417.035664][T16479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.035693][T16479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.039827][T16479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.083706][ T5829] Bluetooth: hci2: command tx timeout [ 417.093230][T16479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.127033][T16479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.127726][T16551] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3303'. [ 417.188380][T16479] hsr_slave_0: entered promiscuous mode [ 417.196849][T16479] hsr_slave_1: entered promiscuous mode [ 417.206019][T16479] debugfs: 'hsr0' already exists in 'hsr' [ 417.211776][T16479] Cannot create hsr debugfs directory [ 417.428106][T16560] bridge0: port 3(macsec0) entered disabled state [ 417.700764][T16560] vlan0: left promiscuous mode [ 417.747264][T16560] veth1_macvtap: left allmulticast mode [ 417.832264][T16560] bond1: left promiscuous mode [ 417.976958][ T2983] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.995070][ T2983] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.025241][T16583] Cannot find set identified by id 65534 to match [ 418.033888][ T2983] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.063230][ T2983] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.162789][ T2983] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.173938][ T2983] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.241819][ T2983] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.259878][ T2983] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.276792][T16580] wg1 speed is unknown, defaulting to 1000 [ 418.294940][T16591] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3319'. [ 418.313436][T16591] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3319'. [ 418.328372][T16592] Bluetooth: MGMT ver 1.23 [ 418.345245][T16595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3317'. [ 418.387092][T16594] syzkaller1: entered promiscuous mode [ 418.392816][T16594] syzkaller1: entered allmulticast mode [ 418.496812][T16598] netlink: 'syz.1.3321': attribute type 1 has an invalid length. [ 418.511171][T16479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.548307][T16594] veth0_to_batadv: entered allmulticast mode [ 418.587049][T16598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.644380][T16479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.754678][T16479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.863052][T16479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.897110][T16614] syzkaller0: entered promiscuous mode [ 418.902694][T16614] syzkaller0: entered allmulticast mode [ 419.027566][T16620] netlink: 'syz.1.3327': attribute type 10 has an invalid length. [ 419.059529][T16479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.088142][T16479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.118505][T16479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.143339][ T5841] Bluetooth: hci2: command tx timeout [ 419.153641][T16479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.178847][T16630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3331'. [ 419.334999][T16479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.409449][T16479] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.446323][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.453554][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.498300][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.505705][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.607100][T16646] netlink: 'syz.4.3334': attribute type 4 has an invalid length. [ 419.655594][T16646] netlink: 'syz.4.3334': attribute type 4 has an invalid length. [ 419.740376][T16648] macvtap0: entered promiscuous mode [ 419.764016][T16648] macvtap0: entered allmulticast mode [ 419.932531][T16655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3336'. [ 419.987580][T16479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.150673][T16479] veth0_vlan: entered promiscuous mode [ 420.215660][T16479] veth1_vlan: entered promiscuous mode [ 420.291083][T16479] veth0_macvtap: entered promiscuous mode [ 420.316806][T16479] veth1_macvtap: entered promiscuous mode [ 420.345443][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.352729][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 420.382531][T16479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.410129][T16479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.474469][ T6162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.491105][ T6162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.528943][ T6162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.553032][ T6162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.780987][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.793451][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.814387][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3347'. [ 420.832055][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3347'. [ 420.946526][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.954955][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.212263][T16712] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 421.223846][ T5829] Bluetooth: hci2: command tx timeout [ 421.269141][T16712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.311440][T16720] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 421.370199][T16720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.392472][T16724] bond2: (slave geneve2): making interface the new active one [ 421.403743][T16724] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 421.434791][T16715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3355'. [ 421.452234][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 421.461259][T16728] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 421.576613][T16730] netlink: 'syz.4.3359': attribute type 3 has an invalid length. [ 421.664998][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3361'. [ 421.684473][T16740] gretap0: entered promiscuous mode [ 421.689921][T16740] vlan2: entered promiscuous mode [ 421.702431][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 421.712285][T16738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3362'. [ 421.778033][T16745] wg1 speed is unknown, defaulting to 1000 [ 422.002146][T16756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3366'. [ 422.016705][T16756] vlan0: entered promiscuous mode [ 422.643715][T16780] netlink: 'syz.0.3373': attribute type 1 has an invalid length. [ 422.656650][T16780] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3373'. [ 422.668812][T16779] tipc: Started in network mode [ 422.675697][T16779] tipc: Node identity a688cbc0f473, cluster identity 4711 [ 422.697956][T16779] tipc: Enabled bearer , priority 0 [ 422.706309][T16781] syzkaller0: entered promiscuous mode [ 422.712102][T16781] syzkaller0: entered allmulticast mode [ 422.736454][T16781] tipc: Resetting bearer [ 422.764665][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 422.802041][T16781] tipc: Resetting bearer [ 422.827954][T16781] tipc: Disabling bearer [ 423.100504][T16807] vlan0: entered promiscuous mode [ 423.116514][T16807] team0: Port device vlan0 added [ 423.215652][T16812] FAULT_INJECTION: forcing a failure. [ 423.215652][T16812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.230492][T16812] CPU: 1 UID: 0 PID: 16812 Comm: syz.0.3386 Not tainted syzkaller #0 PREEMPT(full) [ 423.230517][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.230528][T16812] Call Trace: [ 423.230535][T16812] [ 423.230543][T16812] dump_stack_lvl+0x189/0x250 [ 423.230569][T16812] ? __pfx____ratelimit+0x10/0x10 [ 423.230589][T16812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.230611][T16812] ? __pfx__printk+0x10/0x10 [ 423.230628][T16812] ? __might_fault+0xb0/0x130 [ 423.230661][T16812] should_fail_ex+0x414/0x560 [ 423.230692][T16812] _copy_from_user+0x2d/0xb0 [ 423.230714][T16812] ___sys_sendmsg+0x158/0x2a0 [ 423.230735][T16812] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.230790][T16812] ? __fget_files+0x2a/0x420 [ 423.230806][T16812] ? __fget_files+0x3a0/0x420 [ 423.230833][T16812] __x64_sys_sendmsg+0x19b/0x260 [ 423.230854][T16812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.230881][T16812] ? __pfx_ksys_write+0x10/0x10 [ 423.230907][T16812] ? do_syscall_64+0xbe/0xfa0 [ 423.230932][T16812] do_syscall_64+0xfa/0xfa0 [ 423.230950][T16812] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.230971][T16812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.230986][T16812] ? clear_bhb_loop+0x60/0xb0 [ 423.231006][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.231023][T16812] RIP: 0033:0x7f663cd8efc9 [ 423.231039][T16812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.231055][T16812] RSP: 002b:00007f663dc99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.231075][T16812] RAX: ffffffffffffffda RBX: 00007f663cfe5fa0 RCX: 00007f663cd8efc9 [ 423.231088][T16812] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 423.231100][T16812] RBP: 00007f663dc99090 R08: 0000000000000000 R09: 0000000000000000 [ 423.231111][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.231132][T16812] R13: 00007f663cfe6038 R14: 00007f663cfe5fa0 R15: 00007ffff609fae8 [ 423.231164][T16812] [ 423.437419][ T5829] Bluetooth: hci2: command tx timeout [ 423.577137][T16816] bridge_slave_0: left allmulticast mode [ 423.590078][T16816] bridge_slave_0: left promiscuous mode [ 423.607776][T16816] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.632578][T16816] bridge_slave_1: left allmulticast mode [ 423.648184][T16816] bridge_slave_1: left promiscuous mode [ 423.671093][T16816] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.723671][T16816] bond0: (slave bond_slave_0): Releasing backup interface [ 423.768263][T16816] bond0: (slave bond_slave_1): Releasing backup interface [ 423.849644][T16816] team0: Port device team_slave_0 removed [ 423.912740][T16816] team0: Port device team_slave_1 removed [ 423.920160][T16816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.924641][T16836] openvswitch: netlink: Message has 572 unknown bytes. [ 423.934720][T16836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.942235][T16816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.964518][T16816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.976070][T16816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.989374][T16816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.038590][T16851] netlink: 'syz.0.3394': attribute type 2 has an invalid length. [ 424.073911][T16832] vlan0: entered promiscuous mode [ 424.288984][T16861] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 424.345131][T16863] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 424.459298][T16868] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 424.785345][T16895] netlink: 'syz.1.3405': attribute type 4 has an invalid length. [ 424.839375][T16898] netlink: 'syz.1.3405': attribute type 4 has an invalid length. [ 424.858077][T16478] udevd[16478]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 424.881062][T16894] wg1 speed is unknown, defaulting to 1000 [ 424.891721][T16477] udevd[16477]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 425.163660][T16914] FAULT_INJECTION: forcing a failure. [ 425.163660][T16914] name failslab, interval 1, probability 0, space 0, times 0 [ 425.176546][T16914] CPU: 1 UID: 0 PID: 16914 Comm: syz.0.3415 Not tainted syzkaller #0 PREEMPT(full) [ 425.176570][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.176579][T16914] Call Trace: [ 425.176586][T16914] [ 425.176593][T16914] dump_stack_lvl+0x189/0x250 [ 425.176621][T16914] ? __pfx____ratelimit+0x10/0x10 [ 425.176641][T16914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.176662][T16914] ? __pfx__printk+0x10/0x10 [ 425.176686][T16914] ? __pfx___might_resched+0x10/0x10 [ 425.176710][T16914] should_fail_ex+0x414/0x560 [ 425.176740][T16914] should_failslab+0xa8/0x100 [ 425.176759][T16914] kmem_cache_alloc_node_noprof+0x77/0x710 [ 425.176781][T16914] ? stack_trace_save+0x9c/0xe0 [ 425.176802][T16914] ? __alloc_skb+0x112/0x2d0 [ 425.176832][T16914] __alloc_skb+0x112/0x2d0 [ 425.176861][T16914] netlink_ack+0x146/0xa50 [ 425.176883][T16914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 425.176919][T16914] netlink_rcv_skb+0x28c/0x470 [ 425.176950][T16914] ? __lock_acquire+0xab9/0xd20 [ 425.176969][T16914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 425.176990][T16914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.177036][T16914] ? down_read+0x1ad/0x2e0 [ 425.177061][T16914] genl_rcv+0x28/0x40 [ 425.177079][T16914] netlink_unicast+0x82f/0x9e0 [ 425.177115][T16914] ? __pfx_netlink_unicast+0x10/0x10 [ 425.177138][T16914] ? netlink_sendmsg+0x642/0xb30 [ 425.177153][T16914] ? skb_put+0x11b/0x210 [ 425.177179][T16914] netlink_sendmsg+0x805/0xb30 [ 425.177205][T16914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.177224][T16914] ? aa_sock_msg_perm+0xf1/0x1d0 [ 425.177251][T16914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.177267][T16914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.177285][T16914] __sock_sendmsg+0x21c/0x270 [ 425.177310][T16914] __sys_sendto+0x3bd/0x520 [ 425.177337][T16914] ? __pfx___sys_sendto+0x10/0x10 [ 425.177358][T16914] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 425.177393][T16914] ? __fget_files+0x3a0/0x420 [ 425.177419][T16914] ? ksys_write+0x22a/0x250 [ 425.177445][T16914] ? __pfx_ksys_write+0x10/0x10 [ 425.177472][T16914] __x64_sys_sendto+0xde/0x100 [ 425.177500][T16914] do_syscall_64+0xfa/0xfa0 [ 425.177519][T16914] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.177538][T16914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.177555][T16914] ? clear_bhb_loop+0x60/0xb0 [ 425.177576][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.177593][T16914] RIP: 0033:0x7f663cd90e5c [ 425.177610][T16914] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 425.177626][T16914] RSP: 002b:00007f663dc97ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 425.177646][T16914] RAX: ffffffffffffffda RBX: 00007f663dc97fc0 RCX: 00007f663cd90e5c [ 425.177659][T16914] RDX: 0000000000000020 RSI: 00007f663dc98010 RDI: 0000000000000003 [ 425.177670][T16914] RBP: 0000000000000000 R08: 00007f663dc97f14 R09: 000000000000000c [ 425.177682][T16914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 425.177692][T16914] R13: 00007f663dc97f68 R14: 00007f663dc98010 R15: 0000000000000000 [ 425.177724][T16914] [ 425.884888][T16930] FAULT_INJECTION: forcing a failure. [ 425.884888][T16930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.902599][T16930] CPU: 1 UID: 0 PID: 16930 Comm: syz.2.3419 Not tainted syzkaller #0 PREEMPT(full) [ 425.902624][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.902636][T16930] Call Trace: [ 425.902643][T16930] [ 425.902650][T16930] dump_stack_lvl+0x189/0x250 [ 425.902679][T16930] ? __pfx____ratelimit+0x10/0x10 [ 425.902700][T16930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.902723][T16930] ? __pfx__printk+0x10/0x10 [ 425.902754][T16930] should_fail_ex+0x414/0x560 [ 425.902785][T16930] _copy_to_user+0x31/0xb0 [ 425.902809][T16930] simple_read_from_buffer+0xe1/0x170 [ 425.902838][T16930] proc_fail_nth_read+0x1b3/0x220 [ 425.902866][T16930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 425.902890][T16930] ? rw_verify_area+0x2a6/0x4d0 [ 425.902911][T16930] ? __lock_acquire+0xab9/0xd20 [ 425.902926][T16930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 425.902949][T16930] vfs_read+0x200/0xa30 [ 425.902971][T16930] ? fdget_pos+0x247/0x320 [ 425.902991][T16930] ? __pfx___mutex_lock+0x10/0x10 [ 425.903014][T16930] ? __pfx_vfs_read+0x10/0x10 [ 425.903038][T16930] ? __fget_files+0x2a/0x420 [ 425.903059][T16930] ? __fget_files+0x3a0/0x420 [ 425.903074][T16930] ? __fget_files+0x2a/0x420 [ 425.903099][T16930] ksys_read+0x145/0x250 [ 425.903128][T16930] ? __pfx_ksys_read+0x10/0x10 [ 425.903149][T16930] ? do_syscall_64+0xbe/0xfa0 [ 425.903170][T16930] do_syscall_64+0xfa/0xfa0 [ 425.903186][T16930] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.903205][T16930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.903220][T16930] ? clear_bhb_loop+0x60/0xb0 [ 425.903239][T16930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.903254][T16930] RIP: 0033:0x7fc655d8d9dc [ 425.903269][T16930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 425.903282][T16930] RSP: 002b:00007fc656cc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.903299][T16930] RAX: ffffffffffffffda RBX: 00007fc655fe6090 RCX: 00007fc655d8d9dc [ 425.903311][T16930] RDX: 000000000000000f RSI: 00007fc656cc70a0 RDI: 0000000000000003 [ 425.903322][T16930] RBP: 00007fc656cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 425.903333][T16930] R10: 0000000040002042 R11: 0000000000000246 R12: 0000000000000001 [ 425.903344][T16930] R13: 00007fc655fe6128 R14: 00007fc655fe6090 R15: 00007ffc1ebe57c8 [ 425.903375][T16930] [ 426.188113][T16922] __nla_validate_parse: 8 callbacks suppressed [ 426.188132][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3418'. [ 426.305774][T16938] netlink: 'syz.2.3422': attribute type 4 has an invalid length. [ 426.364169][T16939] netlink: 'syz.2.3422': attribute type 4 has an invalid length. [ 428.863055][T16955] netlink: 'syz.1.3428': attribute type 10 has an invalid length. [ 428.948971][T16957] FAULT_INJECTION: forcing a failure. [ 428.948971][T16957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.997635][T16957] CPU: 1 UID: 0 PID: 16957 Comm: syz.2.3426 Not tainted syzkaller #0 PREEMPT(full) [ 428.997662][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 428.997673][T16957] Call Trace: [ 428.997680][T16957] [ 428.997688][T16957] dump_stack_lvl+0x189/0x250 [ 428.997717][T16957] ? __pfx____ratelimit+0x10/0x10 [ 428.997738][T16957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.997761][T16957] ? __pfx__printk+0x10/0x10 [ 428.997780][T16957] ? __might_fault+0xb0/0x130 [ 428.997815][T16957] should_fail_ex+0x414/0x560 [ 428.997846][T16957] _copy_from_user+0x2d/0xb0 [ 428.997869][T16957] kstrtouint_from_user+0xc4/0x170 [ 428.997899][T16957] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 428.997936][T16957] proc_fail_nth_write+0x88/0x200 [ 428.997958][T16957] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 428.997985][T16957] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 428.998008][T16957] vfs_write+0x27e/0xb30 [ 428.998042][T16957] ? __pfx_vfs_write+0x10/0x10 [ 428.998067][T16957] ? __fget_files+0x2a/0x420 [ 428.998089][T16957] ? __fget_files+0x3a0/0x420 [ 428.998104][T16957] ? __fget_files+0x2a/0x420 [ 428.998130][T16957] ksys_write+0x145/0x250 [ 428.998157][T16957] ? __pfx_ksys_write+0x10/0x10 [ 428.998185][T16957] ? do_syscall_64+0xbe/0xfa0 [ 428.998209][T16957] do_syscall_64+0xfa/0xfa0 [ 428.998228][T16957] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.998249][T16957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.998267][T16957] ? clear_bhb_loop+0x60/0xb0 [ 428.998287][T16957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.998303][T16957] RIP: 0033:0x7fc655d8da7f [ 428.998320][T16957] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 428.998334][T16957] RSP: 002b:00007fc656cc7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 428.998354][T16957] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc655d8da7f [ 428.998367][T16957] RDX: 0000000000000001 RSI: 00007fc656cc70a0 RDI: 0000000000000003 [ 428.998378][T16957] RBP: 00007fc656cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 428.998388][T16957] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 428.998398][T16957] R13: 00007fc655fe6128 R14: 00007fc655fe6090 R15: 00007ffc1ebe57c8 [ 428.998431][T16957] [ 429.241372][T16959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3430'. [ 429.250703][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3430'. [ 429.320758][T16966] netlink: 'syz.4.3429': attribute type 1 has an invalid length. [ 429.374785][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 429.512333][T16966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.534287][T16977] FAULT_INJECTION: forcing a failure. [ 429.534287][T16977] name failslab, interval 1, probability 0, space 0, times 0 [ 429.547252][T16977] CPU: 0 UID: 0 PID: 16977 Comm: syz.3.3434 Not tainted syzkaller #0 PREEMPT(full) [ 429.547276][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.547287][T16977] Call Trace: [ 429.547294][T16977] [ 429.547301][T16977] dump_stack_lvl+0x189/0x250 [ 429.547319][T16977] ? __pfx____ratelimit+0x10/0x10 [ 429.547331][T16977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.547344][T16977] ? __pfx__printk+0x10/0x10 [ 429.547357][T16977] ? __lock_acquire+0xab9/0xd20 [ 429.547371][T16977] should_fail_ex+0x414/0x560 [ 429.547388][T16977] should_failslab+0xa8/0x100 [ 429.547399][T16977] kmem_cache_alloc_noprof+0x74/0x6e0 [ 429.547412][T16977] ? skb_clone+0x212/0x3a0 [ 429.547426][T16977] skb_clone+0x212/0x3a0 [ 429.547437][T16977] __netlink_deliver_tap+0x404/0x850 [ 429.547459][T16977] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.547474][T16977] netlink_deliver_tap+0x19c/0x1b0 [ 429.547488][T16977] netlink_unicast+0x7fa/0x9e0 [ 429.547506][T16977] ? __pfx_netlink_unicast+0x10/0x10 [ 429.547519][T16977] ? netlink_sendmsg+0x642/0xb30 [ 429.547527][T16977] ? skb_put+0x11b/0x210 [ 429.547543][T16977] netlink_sendmsg+0x805/0xb30 [ 429.547563][T16977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.547574][T16977] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.547590][T16977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.547599][T16977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.547609][T16977] __sock_sendmsg+0x21c/0x270 [ 429.547623][T16977] ____sys_sendmsg+0x505/0x830 [ 429.547636][T16977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.547651][T16977] ? import_iovec+0x74/0xa0 [ 429.547665][T16977] ___sys_sendmsg+0x21f/0x2a0 [ 429.547676][T16977] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.547706][T16977] ? __fget_files+0x2a/0x420 [ 429.547715][T16977] ? __fget_files+0x3a0/0x420 [ 429.547729][T16977] __x64_sys_sendmsg+0x19b/0x260 [ 429.547741][T16977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.547756][T16977] ? __pfx_ksys_write+0x10/0x10 [ 429.547772][T16977] ? do_syscall_64+0xbe/0xfa0 [ 429.547786][T16977] do_syscall_64+0xfa/0xfa0 [ 429.547796][T16977] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.547808][T16977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.547818][T16977] ? clear_bhb_loop+0x60/0xb0 [ 429.547830][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.547839][T16977] RIP: 0033:0x7f497118efc9 [ 429.547849][T16977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.547858][T16977] RSP: 002b:00007f49720fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.547870][T16977] RAX: ffffffffffffffda RBX: 00007f49713e5fa0 RCX: 00007f497118efc9 [ 429.547877][T16977] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 429.547883][T16977] RBP: 00007f49720fd090 R08: 0000000000000000 R09: 0000000000000000 [ 429.547889][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.547895][T16977] R13: 00007f49713e6038 R14: 00007f49713e5fa0 R15: 00007ffc0cfffe68 [ 429.547912][T16977] [ 429.560183][T16967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.870631][T16967] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 429.888857][T16967] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 429.948431][T16979] tipc: Enabled bearer , priority 0 [ 430.001029][T16974] wg1 speed is unknown, defaulting to 1000 [ 430.192181][T16987] wg1 speed is unknown, defaulting to 1000 [ 430.251187][T16982] wg1 speed is unknown, defaulting to 1000 [ 430.281859][T16986] wg1 speed is unknown, defaulting to 1000 [ 430.391326][T16971] tipc: Disabling bearer [ 430.570866][T17007] "syz.4.3440" (17007) uses obsolete ecb(arc4) skcipher [ 430.828808][T17021] netlink: 'syz.4.3444': attribute type 3 has an invalid length. [ 430.852214][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3443'. [ 431.128637][T17025] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 431.147332][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3450'. [ 431.166770][T17038] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 431.213120][T17038] bond0: option xmit_hash_policy: invalid value (9) [ 431.238883][T17039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3445'. [ 431.293911][T17048] pimreg3: entered allmulticast mode [ 431.312694][T17050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3450'. [ 431.330332][T17050] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 431.590024][T17059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.591079][ T1089] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6 [ 431.617317][T17064] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 431.783564][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 431.786862][T17067] wg1 speed is unknown, defaulting to 1000 [ 432.188174][T17086] openvswitch: netlink: Message has 8 unknown bytes. [ 432.261024][T17088] wg1 speed is unknown, defaulting to 1000 [ 432.295994][T17087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 432.394778][T17094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3463'. [ 432.536869][T17104] Cannot find set identified by id 65534 to match [ 432.601466][T17108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3470'. [ 432.611609][T17108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3470'. [ 432.871598][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 432.881352][T17106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3469'. [ 432.972722][T17111] lo speed is unknown, defaulting to 1000 [ 432.979056][T17111] lo speed is unknown, defaulting to 1000 [ 432.991188][T17111] lo speed is unknown, defaulting to 1000 [ 433.053655][T17111] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 433.098065][T17111] lo speed is unknown, defaulting to 1000 [ 433.155479][T17111] lo speed is unknown, defaulting to 1000 [ 433.194665][T17114] netlink: 'syz.1.3472': attribute type 3 has an invalid length. [ 433.212583][T17111] lo speed is unknown, defaulting to 1000 [ 433.239051][T17116] wg1 speed is unknown, defaulting to 1000 [ 433.241060][T17111] lo speed is unknown, defaulting to 1000 [ 433.256255][T17111] lo speed is unknown, defaulting to 1000 [ 433.265336][T17111] lo speed is unknown, defaulting to 1000 [ 433.274561][T17111] lo speed is unknown, defaulting to 1000 [ 433.282070][T17111] lo speed is unknown, defaulting to 1000 [ 433.300546][T17111] lo speed is unknown, defaulting to 1000 [ 433.315065][T17111] lo speed is unknown, defaulting to 1000 [ 433.323891][T17116] lo speed is unknown, defaulting to 1000 [ 433.444165][T17131] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3474'. [ 433.943202][T17111] lo speed is unknown, defaulting to 1000 [ 434.032658][T17111] lo speed is unknown, defaulting to 1000 [ 434.068943][T17111] lo speed is unknown, defaulting to 1000 [ 434.101335][T17111] lo speed is unknown, defaulting to 1000 [ 434.128013][T17111] lo speed is unknown, defaulting to 1000 [ 434.172671][T17111] lo speed is unknown, defaulting to 1000 [ 434.214451][T17111] lo speed is unknown, defaulting to 1000 [ 434.222016][T17111] lo speed is unknown, defaulting to 1000 [ 434.302797][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3482'. [ 434.321412][T17151] openvswitch: netlink: Message has 8 unknown bytes. [ 434.324086][T17150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3482'. [ 434.360474][T17111] lo speed is unknown, defaulting to 1000 [ 434.369511][T17152] bridge_slave_0: left allmulticast mode [ 434.380519][T17152] bridge_slave_0: left promiscuous mode [ 434.391764][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.408152][T17152] bridge_slave_1: left allmulticast mode [ 434.425024][T17152] bridge_slave_1: left promiscuous mode [ 434.431980][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.465768][T17152] bond0: (slave bond_slave_0): Releasing backup interface [ 434.480520][T17152] bond0: (slave bond_slave_1): Releasing backup interface [ 434.504947][T17152] team0: Port device team_slave_0 removed [ 434.517925][T17152] team0: Port device team_slave_1 removed [ 434.528511][T17152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.537521][T17152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.546585][T17152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.554323][T17152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.566355][T17152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 434.590367][T17111] lo speed is unknown, defaulting to 1000 [ 434.620786][T17111] lo speed is unknown, defaulting to 1000 [ 434.634900][T17111] lo speed is unknown, defaulting to 1000 [ 434.645623][T17111] lo speed is unknown, defaulting to 1000 [ 434.660254][T17111] lo speed is unknown, defaulting to 1000 [ 434.670887][T17111] lo speed is unknown, defaulting to 1000 [ 434.679890][T17111] lo speed is unknown, defaulting to 1000 [ 434.704118][T17111] lo speed is unknown, defaulting to 1000 [ 434.711677][T17111] lo speed is unknown, defaulting to 1000 [ 434.735310][T17111] lo speed is unknown, defaulting to 1000 [ 434.744367][T17111] lo speed is unknown, defaulting to 1000 [ 434.753443][T17111] lo speed is unknown, defaulting to 1000 [ 434.762348][T17111] lo speed is unknown, defaulting to 1000 [ 434.772172][T17111] lo speed is unknown, defaulting to 1000 [ 434.781194][T17111] lo speed is unknown, defaulting to 1000 [ 437.952317][T17167] vlan2: entered promiscuous mode [ 437.993129][T17167] gretap0: entered promiscuous mode [ 438.051385][T17171] netlink: 'syz.3.3487': attribute type 3 has an invalid length. [ 438.364572][T17190] syzkaller0: entered promiscuous mode [ 438.370345][T17190] syzkaller0: entered allmulticast mode [ 438.386074][T17190] tipc: Started in network mode [ 438.392083][T17190] tipc: Node identity daeb25de5436, cluster identity 4711 [ 438.400279][T17190] tipc: Enabled bearer , priority 0 [ 438.408981][T17189] digital: digital_start_poll: Unknown protocol [ 438.411456][T17190] netlink: 'syz.4.3497': attribute type 7 has an invalid length. [ 438.437711][T17190] tipc: Resetting bearer [ 438.511037][T17192] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 438.587833][T17192] __nla_validate_parse: 1 callbacks suppressed [ 438.587851][T17192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3495'. [ 438.629575][T17195] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 438.740785][T17200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3500'. [ 438.871063][T17206] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3503'. [ 438.880658][T17206] netlink: 'syz.2.3503': attribute type 9 has an invalid length. [ 438.888781][T17206] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3503'. [ 438.898215][T17206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3503'. [ 438.987818][T17209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3504'. [ 439.166953][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3505'. [ 439.280182][T17221] digital: digital_start_poll: Unknown protocol [ 439.433844][ T5914] tipc: Node number set to 2396857822 [ 439.458444][T17228] wg1 speed is unknown, defaulting to 1000 [ 439.471822][T17224] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 439.491676][T17228] lo speed is unknown, defaulting to 1000 [ 439.528252][T17235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3514'. [ 439.576111][T17224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3510'. [ 439.598833][T17232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3513'. [ 440.001676][T17257] FAULT_INJECTION: forcing a failure. [ 440.001676][T17257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.033786][T17257] CPU: 1 UID: 0 PID: 17257 Comm: syz.4.3522 Not tainted syzkaller #0 PREEMPT(full) [ 440.033814][T17257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.033826][T17257] Call Trace: [ 440.033833][T17257] [ 440.033840][T17257] dump_stack_lvl+0x189/0x250 [ 440.033870][T17257] ? __pfx____ratelimit+0x10/0x10 [ 440.033891][T17257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.033914][T17257] ? __pfx__printk+0x10/0x10 [ 440.033946][T17257] should_fail_ex+0x414/0x560 [ 440.033976][T17257] _copy_from_user+0x2d/0xb0 [ 440.033998][T17257] __copy_msghdr+0x3c5/0x5b0 [ 440.034022][T17257] ___sys_sendmsg+0x1a5/0x2a0 [ 440.034042][T17257] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.034098][T17257] ? __fget_files+0x2a/0x420 [ 440.034114][T17257] ? __fget_files+0x3a0/0x420 [ 440.034141][T17257] __sys_sendmmsg+0x227/0x430 [ 440.034165][T17257] ? __pfx___sys_sendmmsg+0x10/0x10 [ 440.034192][T17257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 440.034234][T17257] ? ksys_write+0x22a/0x250 [ 440.034259][T17257] ? __pfx_ksys_write+0x10/0x10 [ 440.034287][T17257] __x64_sys_sendmmsg+0xa0/0xc0 [ 440.034308][T17257] do_syscall_64+0xfa/0xfa0 [ 440.034327][T17257] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.034347][T17257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.034365][T17257] ? clear_bhb_loop+0x60/0xb0 [ 440.034386][T17257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.034403][T17257] RIP: 0033:0x7fdcb938efc9 [ 440.034419][T17257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.034435][T17257] RSP: 002b:00007fdcb75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 440.034455][T17257] RAX: ffffffffffffffda RBX: 00007fdcb95e5fa0 RCX: 00007fdcb938efc9 [ 440.034468][T17257] RDX: 0000000000000001 RSI: 0000200000001dc0 RDI: 0000000000000005 [ 440.034479][T17257] RBP: 00007fdcb75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 440.034490][T17257] R10: 0000000020044044 R11: 0000000000000246 R12: 0000000000000001 [ 440.034501][T17257] R13: 00007fdcb95e6038 R14: 00007fdcb95e5fa0 R15: 00007fff63b7b6a8 [ 440.034533][T17257] [ 440.921918][T17275] vlan2: entered allmulticast mode [ 440.928185][T17275] bridge0: entered allmulticast mode [ 440.935721][T17275] bridge2: port 1(vlan2) entered blocking state [ 440.942161][T17275] bridge2: port 1(vlan2) entered disabled state [ 440.969986][T17275] vlan2: entered promiscuous mode [ 440.983725][T17275] bridge0: entered promiscuous mode [ 441.011503][T17275] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 441.067048][T17278] netlink: 'syz.1.3529': attribute type 10 has an invalid length. [ 441.407173][T17286] wg1 speed is unknown, defaulting to 1000 [ 441.435816][T17286] lo speed is unknown, defaulting to 1000 [ 441.681323][T17302] wg1 speed is unknown, defaulting to 1000 [ 441.719838][T17302] lo speed is unknown, defaulting to 1000 [ 442.556076][ T5914] IPVS: starting estimator thread 0... [ 442.663136][T17328] IPVS: using max 38 ests per chain, 91200 per kthread [ 444.489876][T17337] pimreg3: entered allmulticast mode [ 444.524432][T17339] vlan2: entered promiscuous mode [ 444.727570][T17347] wg1 speed is unknown, defaulting to 1000 [ 444.738364][T17358] wg1 speed is unknown, defaulting to 1000 [ 444.745151][T17347] lo speed is unknown, defaulting to 1000 [ 444.809165][T17358] lo speed is unknown, defaulting to 1000 [ 444.881779][T17366] netlink: 'syz.1.3551': attribute type 4 has an invalid length. [ 444.929228][T17366] netlink: 'syz.1.3551': attribute type 4 has an invalid length. [ 445.060639][T17369] wg1 speed is unknown, defaulting to 1000 [ 445.071321][T17350] wg1 speed is unknown, defaulting to 1000 [ 445.080531][T17350] lo speed is unknown, defaulting to 1000 [ 445.149646][T17369] lo speed is unknown, defaulting to 1000 [ 445.882788][T17383] macvtap0: entered promiscuous mode [ 445.896424][T17383] macvtap0: entered allmulticast mode [ 445.913743][T17385] netlink: 'syz.0.3556': attribute type 4 has an invalid length. [ 445.965598][T17390] netlink: 'syz.0.3556': attribute type 4 has an invalid length. [ 446.106640][T17387] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 446.167544][ T9250] lo speed is unknown, defaulting to 1000 [ 446.201555][ T9250] syz1: Port: 1 Link ACTIVE [ 446.308296][T17404] openvswitch: netlink: Message has 8 unknown bytes. [ 446.830187][T17424] wg1 speed is unknown, defaulting to 1000 [ 446.838360][T17424] lo speed is unknown, defaulting to 1000 [ 447.048513][T17430] __nla_validate_parse: 10 callbacks suppressed [ 447.048531][T17430] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3568'. [ 447.086578][T17430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3568'. [ 447.446648][T17438] digital: digital_start_poll: Unknown protocol [ 447.662288][T17450] netlink: 'syz.0.3575': attribute type 1 has an invalid length. [ 447.696877][T17450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.816019][T17456] netlink: 'syz.2.3577': attribute type 21 has an invalid length. [ 447.950590][T17458] syz.1.3579 (17458) used greatest stack depth: 16952 bytes left [ 448.099213][T17463] infiniband !yz!: set down [ 448.104361][T17463] infiniband !yz!: added team_slave_0 [ 448.192072][T17463] RDS/IB: !yz!: added [ 448.219682][T17463] smc: adding ib device !yz! with port count 1 [ 448.243965][T17463] smc: ib device !yz! port 1 has no pnetid [ 448.800754][T17487] netlink: 'syz.0.3585': attribute type 4 has an invalid length. [ 448.825130][T17487] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3585'. [ 448.852560][T17490] digital: digital_start_poll: Unknown protocol [ 449.581221][T17488] wg1 speed is unknown, defaulting to 1000 [ 449.591182][T17488] lo speed is unknown, defaulting to 1000 [ 449.875086][T17516] vlan2: entered promiscuous mode [ 450.472073][T17535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.501186][T17554] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3602'. [ 451.565934][T17556] digital: digital_start_poll: Unknown protocol [ 452.706476][T17570] openvswitch: netlink: Message has 8 unknown bytes. [ 454.581769][T17583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3611'. [ 456.573778][T17539] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 456.637726][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3612'. [ 456.780271][T17588] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3614'. [ 456.942340][T17602] wg1 speed is unknown, defaulting to 1000 [ 456.963350][T17602] lo speed is unknown, defaulting to 1000 [ 457.846534][T17613] netlink: 'syz.4.3619': attribute type 4 has an invalid length. [ 457.897184][T17613] netlink: 'syz.4.3619': attribute type 4 has an invalid length. [ 458.081619][T17620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3623'. [ 458.404173][T17627] digital: digital_start_poll: Unknown protocol [ 458.559291][T17630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3622'. [ 458.860756][T17638] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3629'. [ 459.389080][T17628] syzkaller0: entered promiscuous mode [ 459.395448][T17628] syzkaller0: entered allmulticast mode [ 459.477881][T17643] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 459.487421][T17636] wg1 speed is unknown, defaulting to 1000 [ 459.510422][T17636] lo speed is unknown, defaulting to 1000 [ 459.560370][T17645] wg1 speed is unknown, defaulting to 1000 [ 459.582098][T17645] lo speed is unknown, defaulting to 1000 [ 459.781546][T17661] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3634'. [ 460.935467][T17674] siw: device registration error -23 [ 460.984519][T17676] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3641'. [ 461.009945][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.020057][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.036588][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.045834][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.054851][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.064364][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.072503][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.082269][T17678] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 461.698649][T17690] Cannot find set identified by id 65534 to match [ 461.811815][T17687] team0: Port device vlan0 removed [ 461.986208][T17702] wg1 speed is unknown, defaulting to 1000 [ 462.060798][T17712] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 462.062142][T17702] lo speed is unknown, defaulting to 1000 [ 462.738362][T17719] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3652'. [ 463.002692][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'. [ 463.056510][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'. [ 463.301829][ T5829] Bluetooth: hci2: link tx timeout [ 463.315779][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 463.499551][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'. [ 463.651596][T17745] validate_nla: 18 callbacks suppressed [ 463.651616][T17745] netlink: 'syz.1.3661': attribute type 12 has an invalid length. [ 463.677225][T17746] bridge_slave_0: left allmulticast mode [ 463.683111][T17746] bridge_slave_0: left promiscuous mode [ 463.688894][T17746] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.708841][T17746] bridge_slave_1: left allmulticast mode [ 463.720935][T17746] bridge_slave_1: left promiscuous mode [ 463.736423][T17746] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.765698][T17746] bond0: (slave bond_slave_0): Releasing backup interface [ 463.788684][T17746] bond0: (slave bond_slave_1): Releasing backup interface [ 463.802158][T17742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3660'. [ 463.829938][T17746] team0: Port device team_slave_0 removed [ 464.008988][T17764] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3664'. [ 464.452220][T17746] team0: Port device team_slave_1 removed [ 464.459155][T17746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.466742][T17746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.476077][T17746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.484526][T17746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.494955][T17746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.799292][T17770] wg1 speed is unknown, defaulting to 1000 [ 464.805350][T17776] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 464.820510][ T5841] Bluetooth: hci2: link tx timeout [ 464.827815][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 464.838272][T17770] lo speed is unknown, defaulting to 1000 [ 464.888509][T17782] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 464.896864][ T5841] Bluetooth: hci2: link tx timeout [ 464.902043][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 464.906666][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3672'. [ 464.958464][T17785] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3673'. [ 464.984429][T17782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.061181][T17786] bond3: (slave geneve2): making interface the new active one [ 465.094250][T17786] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 465.289246][T17800] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3677'. [ 465.391056][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 465.450771][T17795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.549527][T17795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3676'. [ 465.550648][T17814] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3683'. [ 465.568056][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 465.627693][T17816] Cannot find set identified by id 65534 to match [ 465.714624][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'. [ 465.905543][T17834] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3690'. [ 466.048061][T17845] pim6reg1: entered promiscuous mode [ 466.054809][T17845] pim6reg1: entered allmulticast mode [ 466.080802][T17849] netlink: 'syz.4.3696': attribute type 1 has an invalid length. [ 466.090131][T17849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3696'. [ 466.220629][T17854] netlink: 'syz.4.3698': attribute type 4 has an invalid length. [ 466.241462][T17854] netlink: 'syz.4.3698': attribute type 4 has an invalid length. [ 466.452070][T17869] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3705'. [ 466.528101][T17873] netlink: 'syz.0.3707': attribute type 10 has an invalid length. [ 466.536580][T17873] dummy0: left promiscuous mode [ 466.548446][T17873] team0: Device dummy0 failed to register rx_handler [ 466.549948][T17875] netlink: 'syz.2.3708': attribute type 3 has an invalid length. [ 466.569226][T17873] netlink: 'syz.0.3707': attribute type 10 has an invalid length. [ 466.578177][T17873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.024699][T17903] netlink: 'syz.3.3713': attribute type 4 has an invalid length. [ 467.087097][T17906] netlink: 'syz.3.3713': attribute type 4 has an invalid length. [ 467.424858][T17931] syzkaller0: left promiscuous mode [ 467.430116][T17931] syzkaller0: left allmulticast mode [ 467.571523][T17937] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 467.595039][T17938] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 468.020348][T17948] wg1 speed is unknown, defaulting to 1000 [ 468.060184][T17948] lo speed is unknown, defaulting to 1000 [ 468.566594][T17968] wg1 speed is unknown, defaulting to 1000 [ 468.668191][T17968] lo speed is unknown, defaulting to 1000 [ 468.698360][T17975] batman_adv: batadv0: Adding interface: vlan2 [ 468.709724][T17975] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.738274][T17584] udevd[17584]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 468.760454][T17715] udevd[17715]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 468.779631][T17975] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 468.795969][T17970] wg1 speed is unknown, defaulting to 1000 [ 468.807800][T17982] Bluetooth: MGMT ver 1.23 [ 468.830672][T17982] validate_nla: 1 callbacks suppressed [ 468.830689][T17982] netlink: 'syz.2.3743': attribute type 4 has an invalid length. [ 468.854078][T17970] lo speed is unknown, defaulting to 1000 [ 469.234953][T17988] digital: digital_start_poll: Unknown protocol [ 469.509567][T17990] netlink: 'syz.2.3745': attribute type 21 has an invalid length. [ 469.663721][T17997] ip6tnl1: entered promiscuous mode [ 469.680052][T17997] ip6tnl1: entered allmulticast mode [ 469.687119][T17997] team0: Device ip6tnl1 is of different type [ 470.648853][T18007] __nla_validate_parse: 15 callbacks suppressed [ 470.648882][T18007] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3751'. [ 470.757558][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3753'. [ 470.830616][T18012] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 470.853489][T18012] netlink: 'syz.1.3753': attribute type 5 has an invalid length. [ 470.992350][T18024] digital: digital_start_poll: Unknown protocol [ 471.100198][T18029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3759'. [ 471.197664][T18028] wg1 speed is unknown, defaulting to 1000 [ 471.239060][T18028] lo speed is unknown, defaulting to 1000 [ 471.290285][T18032] wg1 speed is unknown, defaulting to 1000 [ 471.303714][T18032] lo speed is unknown, defaulting to 1000 [ 471.469462][T18034] wg1 speed is unknown, defaulting to 1000 [ 471.494844][T18034] lo speed is unknown, defaulting to 1000 [ 471.719328][T18042] netlink: 'syz.0.3762': attribute type 4 has an invalid length. [ 471.770551][T18042] netlink: 'syz.0.3762': attribute type 4 has an invalid length. [ 471.825732][ T5905] lo speed is unknown, defaulting to 1000 [ 471.859816][ T9262] lo speed is unknown, defaulting to 1000 [ 471.860019][T18040] wg1 speed is unknown, defaulting to 1000 [ 471.916351][T18040] lo speed is unknown, defaulting to 1000 [ 472.801641][T18057] FAULT_INJECTION: forcing a failure. [ 472.801641][T18057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.823175][T18057] CPU: 1 UID: 0 PID: 18057 Comm: syz.4.3766 Not tainted syzkaller #0 PREEMPT(full) [ 472.823202][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.823214][T18057] Call Trace: [ 472.823222][T18057] [ 472.823231][T18057] dump_stack_lvl+0x189/0x250 [ 472.823261][T18057] ? __pfx____ratelimit+0x10/0x10 [ 472.823282][T18057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.823306][T18057] ? __pfx__printk+0x10/0x10 [ 472.823338][T18057] should_fail_ex+0x414/0x560 [ 472.823370][T18057] _copy_to_user+0x31/0xb0 [ 472.823394][T18057] simple_read_from_buffer+0xe1/0x170 [ 472.823425][T18057] proc_fail_nth_read+0x1b3/0x220 [ 472.823451][T18057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.823476][T18057] ? rw_verify_area+0x2a6/0x4d0 [ 472.823499][T18057] ? __lock_acquire+0xab9/0xd20 [ 472.823515][T18057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.823539][T18057] vfs_read+0x200/0xa30 [ 472.823561][T18057] ? fdget_pos+0x247/0x320 [ 472.823584][T18057] ? __pfx___mutex_lock+0x10/0x10 [ 472.823608][T18057] ? __pfx_vfs_read+0x10/0x10 [ 472.823633][T18057] ? __fget_files+0x2a/0x420 [ 472.823655][T18057] ? __fget_files+0x3a0/0x420 [ 472.823671][T18057] ? __fget_files+0x2a/0x420 [ 472.823704][T18057] ksys_read+0x145/0x250 [ 472.823730][T18057] ? __pfx_ksys_read+0x10/0x10 [ 472.823758][T18057] ? do_syscall_64+0xbe/0xfa0 [ 472.823784][T18057] do_syscall_64+0xfa/0xfa0 [ 472.823803][T18057] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.823824][T18057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.823843][T18057] ? clear_bhb_loop+0x60/0xb0 [ 472.823865][T18057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.823883][T18057] RIP: 0033:0x7fdcb938d9dc [ 472.823900][T18057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.823916][T18057] RSP: 002b:00007fdcb75f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.823937][T18057] RAX: ffffffffffffffda RBX: 00007fdcb95e5fa0 RCX: 00007fdcb938d9dc [ 472.823951][T18057] RDX: 000000000000000f RSI: 00007fdcb75f60a0 RDI: 0000000000000006 [ 472.823963][T18057] RBP: 00007fdcb75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.823974][T18057] R10: 0000000020044044 R11: 0000000000000246 R12: 0000000000000001 [ 472.823987][T18057] R13: 00007fdcb95e6038 R14: 00007fdcb95e5fa0 R15: 00007fff63b7b6a8 [ 472.824020][T18057] [ 473.376604][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 473.400964][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 473.947194][T18065] wg1 speed is unknown, defaulting to 1000 [ 473.997850][T18074] veth1_to_hsr: entered promiscuous mode [ 474.009516][T18074] macvtap0: entered promiscuous mode [ 474.025773][T18074] macvtap0: entered allmulticast mode [ 474.031288][T18074] veth1_to_hsr: entered allmulticast mode [ 474.043211][T18065] lo speed is unknown, defaulting to 1000 [ 474.110990][T17715] udevd[17715]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 474.157404][T18004] Set syz1 is full, maxelem 65536 reached [ 474.356816][T18082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3775'. [ 474.381935][T18082] !: entered promiscuous mode [ 474.390492][T18082] !: left promiscuous mode [ 474.660575][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'. [ 475.051287][T18077] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 475.278225][T18102] wg1 speed is unknown, defaulting to 1000 [ 475.367962][T18112] macvtap1: entered promiscuous mode [ 475.379701][T18112] macvtap1: entered allmulticast mode [ 475.410238][T18102] lo speed is unknown, defaulting to 1000 [ 475.995850][T18138] wg1 speed is unknown, defaulting to 1000 [ 476.011441][T18138] lo speed is unknown, defaulting to 1000 [ 476.260496][T18144] wg1 speed is unknown, defaulting to 1000 [ 476.277107][T18144] lo speed is unknown, defaulting to 1000 [ 476.281780][T18145] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3797'. [ 476.348331][T18145] wg1 speed is unknown, defaulting to 1000 [ 476.378918][T18145] lo speed is unknown, defaulting to 1000 [ 476.519988][T18155] netlink: 'syz.1.3801': attribute type 10 has an invalid length. [ 476.832836][T18169] FAULT_INJECTION: forcing a failure. [ 476.832836][T18169] name failslab, interval 1, probability 0, space 0, times 0 [ 476.846883][T18169] CPU: 1 UID: 0 PID: 18169 Comm: syz.3.3805 Not tainted syzkaller #0 PREEMPT(full) [ 476.846909][T18169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.846921][T18169] Call Trace: [ 476.846929][T18169] [ 476.846937][T18169] dump_stack_lvl+0x189/0x250 [ 476.846965][T18169] ? __pfx____ratelimit+0x10/0x10 [ 476.846987][T18169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.847010][T18169] ? __pfx__printk+0x10/0x10 [ 476.847034][T18169] ? __pfx___might_resched+0x10/0x10 [ 476.847054][T18169] ? fs_reclaim_acquire+0x7d/0x100 [ 476.847085][T18169] should_fail_ex+0x414/0x560 [ 476.847115][T18169] should_failslab+0xa8/0x100 [ 476.847135][T18169] kmem_cache_alloc_node_noprof+0x77/0x710 [ 476.847160][T18169] ? __alloc_skb+0x112/0x2d0 [ 476.847183][T18169] ? netlink_autobind+0xdb/0x300 [ 476.847205][T18169] __alloc_skb+0x112/0x2d0 [ 476.847234][T18169] netlink_sendmsg+0x5c6/0xb30 [ 476.847267][T18169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.847288][T18169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 476.847315][T18169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.847332][T18169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.847351][T18169] __sock_sendmsg+0x21c/0x270 [ 476.847377][T18169] ____sys_sendmsg+0x505/0x830 [ 476.847401][T18169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.847428][T18169] ? import_iovec+0x74/0xa0 [ 476.847454][T18169] ___sys_sendmsg+0x21f/0x2a0 [ 476.847474][T18169] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.847529][T18169] ? __fget_files+0x2a/0x420 [ 476.847545][T18169] ? __fget_files+0x3a0/0x420 [ 476.847573][T18169] __x64_sys_sendmsg+0x19b/0x260 [ 476.847594][T18169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.847623][T18169] ? __pfx_ksys_write+0x10/0x10 [ 476.847651][T18169] ? do_syscall_64+0xbe/0xfa0 [ 476.847676][T18169] do_syscall_64+0xfa/0xfa0 [ 476.847695][T18169] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.847716][T18169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.847734][T18169] ? clear_bhb_loop+0x60/0xb0 [ 476.847756][T18169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.847773][T18169] RIP: 0033:0x7f497118efc9 [ 476.847790][T18169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.847806][T18169] RSP: 002b:00007f49720fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.847826][T18169] RAX: ffffffffffffffda RBX: 00007f49713e5fa0 RCX: 00007f497118efc9 [ 476.847839][T18169] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000f [ 476.847851][T18169] RBP: 00007f49720fd090 R08: 0000000000000000 R09: 0000000000000000 [ 476.847863][T18169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.847874][T18169] R13: 00007f49713e6038 R14: 00007f49713e5fa0 R15: 00007ffc0cfffe68 [ 476.847906][T18169] [ 477.010138][T18172] netlink: 'syz.0.3807': attribute type 3 has an invalid length. [ 477.636897][T18183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3809'. [ 478.202798][T18202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3814'. [ 478.342272][T18202] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 478.399937][T18204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3815'. [ 478.433022][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3815'. [ 478.451288][T18205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3815'. [ 478.460610][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3815'. [ 478.675818][T18208] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3816'. [ 478.715269][T18213] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3817'. [ 478.739976][T18213] netlink: 'syz.3.3817': attribute type 9 has an invalid length. [ 478.771870][T18213] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3817'. [ 479.215795][T18229] batman_adv: batadv0: Removing interface: vlan2 [ 479.258529][T18244] netlink: 'syz.0.3827': attribute type 4 has an invalid length. [ 479.286318][ T9250] lo speed is unknown, defaulting to 1000 [ 479.297910][T18244] netlink: 'syz.0.3827': attribute type 4 has an invalid length. [ 479.323242][ T9250] syz1: Port: 1 Link DOWN [ 479.349497][ T9250] lo speed is unknown, defaulting to 1000 [ 479.363758][ T9250] syz1: Port: 1 Link ACTIVE [ 479.471697][T18250] netlink: 'syz.2.3830': attribute type 2 has an invalid length. [ 479.575175][T18256] netlink: 'syz.1.3832': attribute type 1 has an invalid length. [ 479.728787][T18256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 479.877837][T18266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 479.938641][T18266] netlink: 'syz.1.3835': attribute type 1 has an invalid length. [ 480.165318][T18273] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 480.181853][T17715] udevd[17715]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 480.205566][T18273] Set syz1 is full, maxelem 65536 reached [ 480.366771][T18279] vlan2: entered promiscuous mode [ 480.371851][T18279] team0: entered promiscuous mode [ 480.435493][T18290] xt_hashlimit: max too large, truncated to 1048576 [ 480.449066][T18285] wg1 speed is unknown, defaulting to 1000 [ 480.464876][T18285] lo speed is unknown, defaulting to 1000 [ 480.810599][T18300] wg1 speed is unknown, defaulting to 1000 [ 480.837026][T18300] lo speed is unknown, defaulting to 1000 [ 481.591417][T18316] __nla_validate_parse: 13 callbacks suppressed [ 481.591436][T18316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3853'. [ 481.677092][T18314] macvtap1: entered promiscuous mode [ 481.690432][T18318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3851'. [ 481.693852][T18314] macvtap1: entered allmulticast mode [ 482.026095][T18330] netlink: 'syz.0.3855': attribute type 10 has an invalid length. [ 482.048325][T18330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3855'. [ 482.072509][T18330] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 482.125135][T18330] syzkaller0: entered promiscuous mode [ 482.133968][T18330] syzkaller0: entered allmulticast mode [ 482.285676][T18340] netlink: 'syz.1.3860': attribute type 6 has an invalid length. [ 482.355211][T18343] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3859'. [ 482.673899][T18368] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 482.796276][T18372] wg1 speed is unknown, defaulting to 1000 [ 482.890841][T18372] lo speed is unknown, defaulting to 1000 [ 483.114869][T18384] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 483.166429][T18384] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 483.261002][T18388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3873'. [ 483.338031][T18387] wg1 speed is unknown, defaulting to 1000 [ 483.386488][T18387] lo speed is unknown, defaulting to 1000 [ 484.123256][T18407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3879'. [ 484.132248][T18407] openvswitch: netlink: Flow key attr not present in new flow. [ 484.323771][T18422] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3882'. [ 484.334040][T18422] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 484.440212][T18427] wg1 speed is unknown, defaulting to 1000 [ 484.448686][T18427] lo speed is unknown, defaulting to 1000 [ 484.662728][T18436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3889'. [ 484.817083][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3891'. [ 484.820654][T18441] wg1 speed is unknown, defaulting to 1000 [ 484.836275][T18443] !: entered promiscuous mode [ 484.844312][T18443] !: left promiscuous mode [ 484.879305][T18441] lo speed is unknown, defaulting to 1000 [ 485.144686][T18445] wg1 speed is unknown, defaulting to 1000 [ 485.194453][T18445] lo speed is unknown, defaulting to 1000 [ 485.275276][T18454] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 485.650789][T18454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.951403][T18473] pim6reg: entered allmulticast mode [ 485.991119][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'. [ 486.015375][T18477] openvswitch: netlink: Flow key attr not present in new flow. [ 486.553846][T18503] netlink: 'syz.1.3909': attribute type 4 has an invalid length. [ 486.613223][T18504] netlink: 'syz.1.3909': attribute type 4 has an invalid length. [ 489.982701][T18514] wg1 speed is unknown, defaulting to 1000 [ 489.991507][T18514] lo speed is unknown, defaulting to 1000 [ 490.135188][T18528] netlink: 'syz.0.3917': attribute type 1 has an invalid length. [ 490.171266][T18528] __nla_validate_parse: 1 callbacks suppressed [ 490.171286][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'. [ 490.389429][T18539] veth0_to_batadv: left allmulticast mode [ 490.409341][T18539] syzkaller0: left promiscuous mode [ 490.416641][T18539] syzkaller0: left allmulticast mode [ 490.443701][ T9262] lo speed is unknown, defaulting to 1000 [ 490.495918][T18544] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3923'. [ 490.542536][T18544] netlink: 'syz.2.3923': attribute type 9 has an invalid length. [ 490.557571][T18544] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3923'. [ 490.592611][T18544] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3923'. [ 490.642423][ T9262] syz1: Port: 1 Link DOWN [ 490.768515][T18551] netlink: 'syz.1.3924': attribute type 4 has an invalid length. [ 490.937389][T18557] netlink: 'syz.4.3927': attribute type 3 has an invalid length. [ 491.165719][T18572] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1285 [ 491.204332][T18577] netlink: 'syz.2.3935': attribute type 4 has an invalid length. [ 491.259401][T18583] netlink: 'syz.2.3935': attribute type 4 has an invalid length. [ 491.831888][T18594] netlink: 'syz.4.3940': attribute type 10 has an invalid length. [ 491.961652][T18598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3942'. [ 492.096689][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 492.130134][T18604] openvswitch: netlink: Flow actions attr not present in new flow. [ 492.508809][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3953'. [ 492.539788][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3952'. [ 492.757614][T18634] wg1 speed is unknown, defaulting to 1000 [ 492.778024][T18634] lo speed is unknown, defaulting to 1000 [ 493.496576][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3960'. [ 493.512612][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3960'. [ 493.711862][T18674] sctp: [Deprecated]: syz.2.3969 (pid 18674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.711862][T18674] Use struct sctp_sack_info instead [ 493.863612][T18680] wg1 speed is unknown, defaulting to 1000 [ 493.871276][T18680] lo speed is unknown, defaulting to 1000 [ 494.124844][T18684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 494.813306][T18715] netlink: 'syz.4.3985': attribute type 19 has an invalid length. [ 494.821163][T18715] netlink: 'syz.4.3985': attribute type 20 has an invalid length. [ 495.080426][T18730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.189139][T18733] __nla_validate_parse: 8 callbacks suppressed [ 495.189157][T18733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3988'. [ 495.915371][T18751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3993'. [ 495.928557][T18751] FAULT_INJECTION: forcing a failure. [ 495.928557][T18751] name failslab, interval 1, probability 0, space 0, times 0 [ 495.976659][T18751] CPU: 0 UID: 0 PID: 18751 Comm: syz.1.3993 Not tainted syzkaller #0 PREEMPT(full) [ 495.976686][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.976697][T18751] Call Trace: [ 495.976704][T18751] [ 495.976713][T18751] dump_stack_lvl+0x189/0x250 [ 495.976741][T18751] ? __pfx____ratelimit+0x10/0x10 [ 495.976762][T18751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.976786][T18751] ? __pfx__printk+0x10/0x10 [ 495.976811][T18751] ? __pfx___might_resched+0x10/0x10 [ 495.976836][T18751] should_fail_ex+0x414/0x560 [ 495.976868][T18751] should_failslab+0xa8/0x100 [ 495.976888][T18751] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 495.976913][T18751] ? __d_alloc+0x36/0x7a0 [ 495.976939][T18751] __d_alloc+0x36/0x7a0 [ 495.976964][T18751] d_alloc_parallel+0xe1/0x1610 [ 495.976986][T18751] ? __lock_acquire+0xab9/0xd20 [ 495.977017][T18751] ? __lock_acquire+0xab9/0xd20 [ 495.977041][T18751] ? __pfx_d_alloc_parallel+0x10/0x10 [ 495.977067][T18751] ? __raw_spin_lock_init+0x45/0x100 [ 495.977093][T18751] ? __init_waitqueue_head+0xa9/0x150 [ 495.977122][T18751] __lookup_slow+0x116/0x3d0 [ 495.977146][T18751] ? __pfx___lookup_slow+0x10/0x10 [ 495.977179][T18751] ? d_lookup+0x8a/0xa0 [ 495.977199][T18751] ? lookup_noperm+0x112/0x220 [ 495.977232][T18751] simple_start_creating+0xfd/0x1e0 [ 495.977252][T18751] ? __pfx_simple_start_creating+0x10/0x10 [ 495.977284][T18751] debugfs_start_creating+0x10f/0x180 [ 495.977312][T18751] __debugfs_create_file+0x79/0x4f0 [ 495.977342][T18751] debugfs_create_file_full+0x3f/0x60 [ 495.977371][T18751] ref_tracker_dir_debugfs+0x14e/0x270 [ 495.977390][T18751] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 495.977439][T18751] ? trace_kmalloc+0x1f/0xd0 [ 495.977459][T18751] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 495.977490][T18751] ? __raw_spin_lock_init+0x45/0x100 [ 495.977516][T18751] alloc_netdev_mqs+0x272/0x11b0 [ 495.977537][T18751] ? __pfx_macvlan_setup+0x10/0x10 [ 495.977569][T18751] rtnl_create_link+0x31f/0xd10 [ 495.977598][T18751] rtnl_newlink_create+0x25c/0xb00 [ 495.977623][T18751] ? __lock_acquire+0xab9/0xd20 [ 495.977647][T18751] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 495.977669][T18751] ? __pfx___mutex_lock+0x10/0x10 [ 495.977704][T18751] ? ns_capable+0x8a/0xf0 [ 495.977727][T18751] rtnl_newlink+0x16e4/0x1c80 [ 495.977754][T18751] ? ____sys_sendmsg+0x505/0x830 [ 495.977786][T18751] ? __pfx_rtnl_newlink+0x10/0x10 [ 495.977833][T18751] ? kasan_quarantine_put+0xdd/0x220 [ 495.977857][T18751] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.977886][T18751] ? nlmon_xmit+0xb0/0x100 [ 495.977904][T18751] ? kmem_cache_free+0x19b/0x690 [ 495.977937][T18751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.977957][T18751] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.977980][T18751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.977999][T18751] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 495.978023][T18751] ? __dev_queue_xmit+0x284/0x3740 [ 495.978045][T18751] ? __dev_queue_xmit+0x284/0x3740 [ 495.978065][T18751] ? __dev_queue_xmit+0x1bfb/0x3740 [ 495.978094][T18751] ? __lock_acquire+0xab9/0xd20 [ 495.978141][T18751] ? __pfx_rtnl_newlink+0x10/0x10 [ 495.978165][T18751] rtnetlink_rcv_msg+0x7cf/0xb70 [ 495.978194][T18751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 495.978224][T18751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.978245][T18751] ? ref_tracker_free+0x63a/0x7d0 [ 495.978263][T18751] ? __asan_memcpy+0x40/0x70 [ 495.978285][T18751] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.978314][T18751] netlink_rcv_skb+0x208/0x470 [ 495.978341][T18751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.978368][T18751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.978407][T18751] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.978442][T18751] netlink_unicast+0x82f/0x9e0 [ 495.978476][T18751] ? __pfx_netlink_unicast+0x10/0x10 [ 495.978501][T18751] ? netlink_sendmsg+0x642/0xb30 [ 495.978516][T18751] ? skb_put+0x11b/0x210 [ 495.978546][T18751] netlink_sendmsg+0x805/0xb30 [ 495.978575][T18751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.978596][T18751] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.978623][T18751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.978641][T18751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.978660][T18751] __sock_sendmsg+0x21c/0x270 [ 495.978686][T18751] ____sys_sendmsg+0x505/0x830 [ 495.978712][T18751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.978742][T18751] ? import_iovec+0x74/0xa0 [ 495.978768][T18751] ___sys_sendmsg+0x21f/0x2a0 [ 495.978790][T18751] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.978852][T18751] ? __fget_files+0x2a/0x420 [ 495.978868][T18751] ? __fget_files+0x3a0/0x420 [ 495.978898][T18751] __x64_sys_sendmsg+0x19b/0x260 [ 495.978921][T18751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.978951][T18751] ? __pfx_ksys_write+0x10/0x10 [ 495.978981][T18751] ? do_syscall_64+0xbe/0xfa0 [ 495.979007][T18751] do_syscall_64+0xfa/0xfa0 [ 495.979025][T18751] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.979046][T18751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.979064][T18751] ? clear_bhb_loop+0x60/0xb0 [ 495.979087][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.979105][T18751] RIP: 0033:0x7fd0a7f8efc9 [ 495.979122][T18751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.979137][T18751] RSP: 002b:00007fd0a8e41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.979156][T18751] RAX: ffffffffffffffda RBX: 00007fd0a81e5fa0 RCX: 00007fd0a7f8efc9 [ 495.979169][T18751] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000f [ 495.979181][T18751] RBP: 00007fd0a8e41090 R08: 0000000000000000 R09: 0000000000000000 [ 495.979192][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.979204][T18751] R13: 00007fd0a81e6038 R14: 00007fd0a81e5fa0 R15: 00007ffc184a4658 [ 495.979244][T18751] [ 496.584265][T18751] dummy0: entered promiscuous mode [ 496.617501][T18751] syzkaller0: port 1(macvlan2) entered blocking state [ 496.655574][T18751] syzkaller0: port 1(macvlan2) entered disabled state [ 496.693519][T18751] macvlan2: entered allmulticast mode [ 496.713928][T18751] dummy0: entered allmulticast mode [ 496.734936][T18751] macvlan2: entered promiscuous mode [ 496.735252][T18757] netlink: 'syz.0.3995': attribute type 13 has an invalid length. [ 496.823727][ T2983] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.896657][ T2983] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.938323][ T2983] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.963114][ T2983] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.118309][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4001'. [ 497.137425][T18783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3997'. [ 497.160262][T18784] netlink: 'syz.2.4002': attribute type 10 has an invalid length. [ 497.228161][T18783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 497.230116][T18786] netlink: 'syz.2.4002': attribute type 10 has an invalid length. [ 497.311384][T18784] !: entered promiscuous mode [ 497.335710][T18792] netlink: 'syz.1.4006': attribute type 1 has an invalid length. [ 497.358768][T18784] team0: Port device 0! added [ 497.393663][T18786] !: left promiscuous mode [ 497.405831][T18786] team0: Port device 0! removed [ 497.417768][T18786] bond0: (slave 0!): Enslaving as an active interface with an up link [ 497.462792][T18792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.488510][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'. [ 497.755746][T18817] wg1 speed is unknown, defaulting to 1000 [ 497.764583][T18817] lo speed is unknown, defaulting to 1000 [ 497.916664][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4017'. [ 497.950244][T18824] hsr_slave_0: left promiscuous mode [ 497.971055][T18824] hsr_slave_1: left promiscuous mode [ 498.165247][T18827] wg1 speed is unknown, defaulting to 1000 [ 498.185309][T18827] lo speed is unknown, defaulting to 1000 [ 498.457736][T18843] netlink: 'syz.3.4022': attribute type 21 has an invalid length. [ 498.465921][T18843] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4022'. [ 498.584929][T18855] netlink: 'syz.1.4024': attribute type 4 has an invalid length. [ 498.591770][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 498.635797][T18856] netlink: 'syz.1.4024': attribute type 4 has an invalid length. [ 499.171234][T18877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4030'. [ 499.451918][T18881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.546072][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4032'. [ 499.614303][T18893] netlink: 'syz.0.4036': attribute type 1 has an invalid length. [ 499.655004][T18893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.795523][T18894] bridge_slave_0: entered promiscuous mode [ 499.832258][T18906] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.916709][T18906] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.985921][T18915] wg1 speed is unknown, defaulting to 1000 [ 500.001680][T18915] lo speed is unknown, defaulting to 1000 [ 500.019190][T18906] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.159965][T18906] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.216095][T18924] netlink: 'syz.3.4047': attribute type 10 has an invalid length. [ 500.455478][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.500449][T18926] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 500.521512][ T6156] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.600930][ T6156] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.611556][ T6156] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.739018][T18939] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4054'. [ 500.762664][T18939] netlink: 'syz.1.4054': attribute type 9 has an invalid length. [ 500.780154][T18939] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4054'. [ 500.789653][T18939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4054'. [ 500.876833][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4056'. [ 501.008208][T18954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4060'. [ 501.033016][T18954] x_tables: duplicate underflow at hook 1 [ 501.208452][T18958] wg1 speed is unknown, defaulting to 1000 [ 501.281813][T18958] lo speed is unknown, defaulting to 1000 [ 501.732101][T18979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.935685][T18989] FAULT_INJECTION: forcing a failure. [ 501.935685][T18989] name failslab, interval 1, probability 0, space 0, times 0 [ 501.961986][T18989] CPU: 0 UID: 0 PID: 18989 Comm: syz.1.4072 Not tainted syzkaller #0 PREEMPT(full) [ 501.962013][T18989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.962026][T18989] Call Trace: [ 501.962033][T18989] [ 501.962042][T18989] dump_stack_lvl+0x189/0x250 [ 501.962070][T18989] ? __pfx____ratelimit+0x10/0x10 [ 501.962091][T18989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.962115][T18989] ? __pfx__printk+0x10/0x10 [ 501.962137][T18989] ? __pfx___might_resched+0x10/0x10 [ 501.962157][T18989] ? fs_reclaim_acquire+0x7d/0x100 [ 501.962190][T18989] should_fail_ex+0x414/0x560 [ 501.962221][T18989] should_failslab+0xa8/0x100 [ 501.962241][T18989] __kmalloc_noprof+0xcb/0x7f0 [ 501.962264][T18989] ? bpf_test_init+0x9f/0x150 [ 501.962294][T18989] bpf_test_init+0x9f/0x150 [ 501.962322][T18989] bpf_prog_test_run_xdp+0x503/0x10e0 [ 501.962362][T18989] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 501.962391][T18989] ? __fget_files+0x2a/0x420 [ 501.962414][T18989] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 501.962440][T18989] bpf_prog_test_run+0x2c7/0x340 [ 501.962464][T18989] __sys_bpf+0x562/0x860 [ 501.962483][T18989] ? __pfx___sys_bpf+0x10/0x10 [ 501.962517][T18989] ? ksys_write+0x22a/0x250 [ 501.962544][T18989] ? __pfx_ksys_write+0x10/0x10 [ 501.962573][T18989] __x64_sys_bpf+0x7c/0x90 [ 501.962598][T18989] do_syscall_64+0xfa/0xfa0 [ 501.962617][T18989] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.962638][T18989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.962664][T18989] ? clear_bhb_loop+0x60/0xb0 [ 501.962686][T18989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.962703][T18989] RIP: 0033:0x7fd0a7f8efc9 [ 501.962720][T18989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.962736][T18989] RSP: 002b:00007fd0a8e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.962756][T18989] RAX: ffffffffffffffda RBX: 00007fd0a81e5fa0 RCX: 00007fd0a7f8efc9 [ 501.962770][T18989] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 501.962782][T18989] RBP: 00007fd0a8e41090 R08: 0000000000000000 R09: 0000000000000000 [ 501.962794][T18989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.962805][T18989] R13: 00007fd0a81e6038 R14: 00007fd0a81e5fa0 R15: 00007ffc184a4658 [ 501.962838][T18989] [ 502.342434][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 502.370022][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4075'. [ 504.934737][T19003] Cannot find set identified by id 65534 to match [ 505.012014][T18995] wg1 speed is unknown, defaulting to 1000 [ 505.159345][T19007] bridge_slave_0: left promiscuous mode [ 505.249857][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4080'. [ 505.286999][T19007] vlan0: left promiscuous mode [ 505.396842][T19007] dummy0: left allmulticast mode [ 505.532292][T18995] lo speed is unknown, defaulting to 1000 [ 505.540144][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.576721][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.701865][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.720981][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.897295][T19033] validate_nla: 2 callbacks suppressed [ 505.897314][T19033] netlink: 'syz.1.4085': attribute type 16 has an invalid length. [ 505.951588][T19034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4085'. [ 505.973365][T19033] netlink: 'syz.1.4085': attribute type 3 has an invalid length. [ 506.005667][T19033] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4085'. [ 506.018836][T19036] Cannot find set identified by id 65534 to match [ 506.155027][T19038] tipc: Enabled bearer , priority 0 [ 506.166823][T19038] syzkaller0: entered promiscuous mode [ 506.201483][T19038] syzkaller0: entered allmulticast mode [ 506.430083][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4090'. [ 506.479973][T19047] 8021q: adding VLAN 0 to HW filter on device bond7 [ 507.041953][T19006] udevd[19006]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 507.213036][ T1163] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 507.246563][ T1163] ref_tracker: netdev@ffff88807753e618 has 1/1 users at [ 507.246563][ T1163] batadv_hard_if_event+0xf0f/0x1730 [ 507.246563][ T1163] notifier_call_chain+0x1b6/0x3e0 [ 507.246563][ T1163] register_netdevice+0x1608/0x1ae0 [ 507.246563][ T1163] veth_newlink+0x5d4/0xa60 [ 507.246563][ T1163] rtnl_newlink_create+0x310/0xb00 [ 507.246563][ T1163] rtnl_newlink+0x16e4/0x1c80 [ 507.246563][ T1163] rtnetlink_rcv_msg+0x7cf/0xb70 [ 507.246563][ T1163] netlink_rcv_skb+0x208/0x470 [ 507.246563][ T1163] netlink_unicast+0x82f/0x9e0 [ 507.246563][ T1163] netlink_sendmsg+0x805/0xb30 [ 507.246563][ T1163] __sock_sendmsg+0x21c/0x270 [ 507.246563][ T1163] __sys_sendto+0x3bd/0x520 [ 507.246563][ T1163] __x64_sys_sendto+0xde/0x100 [ 507.246563][ T1163] do_syscall_64+0xfa/0xfa0 [ 507.246563][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.246563][ T1163] [ 507.353740][ T9263] tipc: Node number set to 4042210949 [ 507.449729][T19080] netlink: 'syz.3.4098': attribute type 10 has an invalid length. [ 507.474853][T19080] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4098'. [ 507.513684][T19080] bridge0: port 1(team0) entered blocking state [ 507.529533][T19080] bridge0: port 1(team0) entered disabled state [ 507.538929][T19080] team0: entered allmulticast mode [ 507.547018][T19080] vlan0: entered allmulticast mode [ 507.552151][T19080] veth0_vlan: entered allmulticast mode