last executing test programs: 17.022572916s ago: executing program 2 (id=16534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf8, 0x3, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000023c0)="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", 0x2e7}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0xdf00) 16.100995149s ago: executing program 2 (id=16547): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40280d5}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x1200, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x0) 15.857562001s ago: executing program 2 (id=16551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0xffffffff, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 15.669532255s ago: executing program 2 (id=16554): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000500)={{r3, &(0x7f0000000200)='\x00', 0x40000, &(0x7f0000000240)={@_ha_fsid={[0x8, 0xb6]}, {0x0, 0x5, 0x8000000, 0x10001}}, 0x459, &(0x7f0000000280), &(0x7f00000002c0)=0x3}, 0x1, &(0x7f0000000400)=[{0x1, 0xe, &(0x7f0000000300)='),\'(^-*[$!\x9d)[C)+\x00', &(0x7f0000000340)="a8f97f26aafdcef8ae7cda97e4af3d4fd8a77d003c5b1359b40d4ad2962c6593312942d8e59bf7c239cdb2dc25d9638628ad08062c1ea5d6ea2b04dd4ff18232dbb9b08b78cfd1c330d7cb5e97f86597fd5e4b5cf7987d053dfbf8e6b5c6ba1a365c4958894d19b08a92074036594c473c59f2e403805288c6ca7d0e67fb090c5db6ca529a080b44f3388170fcb590e735ef24f8d5bdc7a1e7681445243c6ea4e2598f7d", 0xa4}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x27, &(0x7f0000000b40)=@raw=[@alu={0x4, 0x1, 0xa, 0x3, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000680)='GPL\x00', 0x2, 0xa5, &(0x7f00000006c0)=""/165, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x8005, 0x3, 0xed1a, 0x5}, 0x10, 0x1c5db, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r3, r3, r3, r3], 0x0, 0x10, 0x7e}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r1, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @random='\x00\x00\x00 \x00', @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) 15.515417037s ago: executing program 2 (id=16556): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6erspan0\x00', 0x0}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 14.879159148s ago: executing program 2 (id=16562): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) unshare(0x8040480) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x156, &(0x7f0000000700)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40018022, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r5, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000080)="b4e82fe47379c34ebfa35285f2156cd9a83ba568d0d28fe4407ef2aff7", 0x1d}, {&(0x7f00000001c0)="1a416739c519016bb3a8031f701076d1e1800be875f9dda96c55434c7eb88c40e7f5860a280a7d5e46eb5b6e53cf751056b248303c35ddfcd97676cc956ddf57fd1f8f3a969cc4b80d656c7e11020ab963976159f9027db246561ab3523857aa99d821b646fab513e91fb406d9ebdd13718c88a1fea4", 0x76}, {&(0x7f0000000240)="334d58ea73b4cc354b185f4a", 0xc}, {&(0x7f0000000380)="17e924e07467b56e92b9910e613bc40502ff0d2bb7aa390e44f9c36d1203c6f1068494979552f91ae071e922b83a47220768eeb6075d38a853fb32e37a7b238141091546f98b8420cd2bcfb20b552c89bb854df87ec098fdc9df277eecb3cdc7507ae6cfd2d887c297dc9235f236d9a9f66af66d7a37fef888e94f7cf8024b82f77fe2d271cf", 0x86}, {&(0x7f00000004c0)="e8c5479da5095be5c45c152126aea03707829940b670dc38dac449840606aa989246720753901b4a34e93969be88bce47fea6c5479863dcfaef72c1bcc8af582394e53effaba4df2ad2af8617c45e92b6f9729d50b6605d72bb7d9fc74214a2dc12be150bd94c65cdcf775812e8a3d092c4dea892fa569a3dfe8f1c6f977244992900f49dd6246d0a3fbc7ef72fa8b611dd1aac5bef6d78fabfafef5d4e4b98f83599b48683bd6f9d71389bd3e06ca3e451a1d1d04f4c14b58f80805a05c8d5f6f30a544241553c9ee4759362999adf4fa1669f1de1ad079c38db933bb639471c3e1b2c12cb424e2", 0xe8}, {&(0x7f00000005c0)="c942128faa57347b9040c4910420f1c1e8bc40991a0de90244", 0x19}, {&(0x7f0000000600)="cfb4dd60308fe1fa648c65675c9ac60cdde5672a7c493eb151e045", 0x1b}, {&(0x7f0000000640)="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", 0x1000}], 0x8, &(0x7f00000016c0)=[@hopopts={{0x270, 0x29, 0x36, {0x2b, 0x4a, '\x00', [@generic={0x0, 0xb1, "9346286077569a90e687a385373e0194e0ecde01734f472ef0a3afc6c5e8376bd5889b5fbbef4c1f6229a549ee783d87debfb088ee5282c70a6a4d1654d98c23e1570eb988e3e79805695165cbb4556d20a079bf44e5b831b1f19ef16dac136604cb3cb73098a0cf5e4812c739406617953f2f0f4fef127b7efb8034a56dd92be3c8ad3e7ebfdb1365edda2715b775798fa57362e70b009728c5163035615ec2b3c0ad32827de010bbe0486786073bcc8c"}, @generic={0x8, 0x34, "6b00bdd166a1a1bed133522eb7274e342ed06810dd496594e828ce028cad6314aed5b953ac8213b04bd1d1914ec7f59990078328"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x5a, 0x8f, "6377842995c0616d8c872ce04fd82978cc7691d05f5ec16a710bfacf3d12d6789ca1b64f6103ef431d16f79ccf9a648dff4131d87f27e59e2baed32e9d3adc2c27a206550fd34b5daf518c869ae78869e8ffcecaee23c185271cecc20780a817f6549a0cc0728fe36d771990f973f32641a84e4da7d54a8c9975cfc828b3514a60e1a8b5085413de9ae2bed90b969a"}, @generic={0x7, 0x7f, "a71a08a7d760e67114d1f3d72591e0d4aa976e0c9d081bcfeafdf94c63da1995a78c6f253b515f6a184ad6ad5ef63a231de78aea6446e05d2b2435a7fdd07e59d33b3582ad7489080cbcc0f0609546f3d52274da9f9cc4911e740022ff94f54b726f4d2925c4fcfc1d681e0244ba5d256b97d012ebdeacae753ba6921b9ed0"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x646, [0x11f0, 0x3, 0xb6, 0x7]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x15}}, @padn]}}}], 0x270}}, {{&(0x7f0000001940)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000001980)="c2a0633d9ac7377432e3634706af9211fae9cffa37cf5f7e2bb13798662f78f1978f45dc965f85106b6d728cb55391b44bb21c0b4a12869b355f7a4a1b81d3b539b07dfb7ae8f3ef9e375e7bb776ff5879e5fd4d08b6a11967be90d1200c41f3d17325bdab91bec1165c9865ea0298b12f23d76c95de1b9a38a510", 0x7b}, {&(0x7f0000001a00)="45de2233a47d75060652b7b5b02dffc9896d34aceb303504279f03d0cfbc444d4f330ddae54955f8d33eb8c9236ac4379fc7861ee0a9beddf29ce5a192dee107647bc7e72df8811527fd519e260cfe84789bd7d3a5d1185e1efff88a355a8dafe6ef9854b08edbbb5cbb938278947425c547452419d68226e87c53237c913c9a14fd35ac4728ec", 0x87}, {&(0x7f0000001ac0)="498ad00c9c2cf349bdf378e3657f65632305120182e2dcbab3013fdece832c0fcfb737d280ef9860f1655933ff58e4ac2d572f7a0d5d6b8709e5bfdc7ddaf5f3134fef74bd0fa8145e88fe25d1c5748d656e00872f09c15f39219a06a21c943cfc26989c68ba9517b0ca22ec3c53abc768edbd7ed6fed38b8955b5b84140768a", 0x80}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="0fa7f45d467d3fdd1e9d3b0ea1bba262bad5258f3843d960506bb7f25df7ba0d36396d42d93a4636d26407", 0x2b}], 0x5, &(0x7f00000031c0)=[@hopopts={{0x158, 0x29, 0x36, {0x16, 0x27, '\x00', [@generic={0x5, 0x8f, "fb90a65a87dd08f594c6b445577cbdcf9bdd12fc33e5d85e5d1db1bcedd29d21ceb64befffe271de3d86f03ce6b0a05263af7200e54084cdd80361d37ded20b374062ab412ef9ba343bbef63bfde27b918779082f4bc331e56ca77a2cb5abb8a3b821009492b7ab5157325433a420761cad82426f9304d316f20bb2ef783e973a098a66177eff6a16c2171dfbc67c0"}, @ra={0x5, 0x2, 0x5}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @local}, @generic={0x0, 0x7c, "9d779b4e857fb30df1b5ce7c9e15d088b004eb9b4c58756711aece5dfd2807ee693ec25801b7b2514fb497c12b51f6d780e82dfa24a87c88b8bd819c2cc5c5de79a7e57d227d2b7976a24b068ef4d39412102864f2429716833941d7be6275176b1c4094410c702e73bde656d515bb38774551e481e70987291ee3b5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r1}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x5e, 0xa, 0x1, 0x4, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty]}}}, @dstopts={{0xe0, 0x29, 0x37, {0x2f, 0x18, '\x00', [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x1, [0x0]}, @generic={0x7, 0x2f, "2efefb6572c09ce98fec99cce297d8b996ad7d0002fb298f0c716ea13d7a9a34c4c7d1b9a2cc3a12ee9ffc7416bf07"}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0xa62}, @hao={0xc9, 0x10, @mcast2}, @generic={0x6, 0x68, "906563bbe8a10613d2019d08993553aa79622356c5bcfd7a21db858755c5491ab41d17e99e59cc973cbbd2f313bc7b1e8241a82a981a38c659e3cafe615b7b7adce23ffdabb12c5543a80b1146f603ce0a6975b299807260aaac3d147889b990eae1c7b0882a45d1"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x16, 0x8, 0x3, 0x4, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x33, 0x10, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x411f}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x58, {0x3, 0x14, 0x8, 0x3, [0x3, 0x4, 0x7fff, 0x100000001, 0x4, 0x8, 0x1, 0x1ff, 0x3, 0x0]}}, @generic={0x1}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x4, 0x10, 0x1, 0x4, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x73, 0x0, '\x00', [@ra={0x5, 0x2, 0x7f}]}}}, @dstopts={{0xc8, 0x29, 0x37, {0x84, 0x15, '\x00', [@generic={0x10, 0x89, "1b73c684e2f5c6b52a9a1fb844791d99ebd44b99997bff714c038de72b99f70aa1bd5457d96f441e0abc73a7370b9a3724b2f960d4d6a4daaf686ac9f5aaacd2c15a0a7efb24426388f51106f6a85f17a7d1aa78f3867b4c2bf279f31196c8379a204216ca013b5e8e12919396ede4e64f29cfa8f16b70a0108acac545fdf40f0fd49d02f7e05fc64f"}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @pad1, @pad1]}}}], 0x540}}], 0x2, 0xc000000) 4.364141401s ago: executing program 3 (id=16591): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="8299", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="6310", 0x2}], 0x1}, 0x300}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="ff5f", 0x2}], 0x1}}], 0x3, 0x4400c800) 4.248864368s ago: executing program 3 (id=16594): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6a, &(0x7f0000000740)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x7, 0x0, 0x9, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xffffffffffffe}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast2={0xff, 0x3}, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0xce, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x98, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x4fe, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x4, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x40, 0x2, [0x4, 0x85cd, 0x3]}}]}, @srh={0xc, 0x6, 0x4, 0x3, 0x9, 0x20, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) 4.180429903s ago: executing program 1 (id=16595): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e31, 0x0, @remote, 0x1}, 0x6d) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x110, r6, 0x4b54b000) bind$packet(r0, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 4.068015099s ago: executing program 3 (id=16596): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424, 0x1040}, [@IFLA_CARRIER={0x5, 0x21, 0xfc}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) (async) r1 = socket(0x8, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a8806558a18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) ioctl$IMGETCOUNT(r1, 0x61e3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r4, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2f0000001000000004"], 0x20) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x2}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r8 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000900000000000000"], 0x48) 3.835228476s ago: executing program 3 (id=16598): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x20, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000026008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe1f) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000000), 0x0}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) gettid() r6 = socket$kcm(0xa, 0x7, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.217415954s ago: executing program 4 (id=16601): r0 = socket(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xf, 0x0, &(0x7f0000000000)="d172e1526b3f75c88baf73b93b7050", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "503e6fc6184f1d69", "2965b264d234f4e10dd2545bbc54fbc8", "0fb5c73e", "da809ba719883567"}, 0x28) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x78) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x3, 0x2}, 0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000002c0)="c3f0", 0x2, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='veno', 0x4) shutdown(r2, 0x1) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1}, 0x9}], 0x1, 0x40002122, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}}, 0x24000881) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r1, 0x0, 0x1000, 0x96, &(0x7f0000000680)="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", &(0x7f0000001680)=""/150, 0x1ff, 0x0, 0xf0, 0xc, &(0x7f0000001740)="7d68921687a5fdafb0b7e3d27faee7b4ef46845919344fd80679530aebd9e2e74091f8c8b8f448e5be915df9c5f0743fe6e4fce8dd3c7f5827c34bcf56c3dc8640d6120e0847f5bff9adbb6bc62069b630567d804d7c32c4171e4015bff9737534cb7c319aae0033cad55f0ad7f732792f9be1b6dd3beedd2659e45c03c5ab54aa8014f158def9d064ac0c3cd879374a36082fd12691f8104e936b5372b8ce6123bf7748fe7491356eb283612e648cbfd0d20f44f4a001a35c3bc16ba0599fea483c6922f778cd85b97b9dbca7e4c3d4a2257db1c5c13121c46887f8af20fc5dfa88620390c7e858b70a7d10d6481009", &(0x7f0000001840)="58e49cce98cf15200fa5f3de", 0x0, 0x0, 0x8000}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 3.142216609s ago: executing program 1 (id=16602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x77, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf1e220d57978068146922f833c9f7b98662fa078b985c1345326a269fa00500009ae5c619a8c629339f619d5d6821e5b2020000004e8f4aa477b4c3549c4465d34d4f68aa2a51f6e5abe0322acb9154b24acb9318048d03e701529ab8bd5ca6846618f41a74b742fe8b328c617a00", 0x0, 0xffffff5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001100030425bd706b0000000000000000", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f00000000c0)={0x5, 0xffff, 0x9, 0x2, 0x4}) 2.865525632s ago: executing program 4 (id=16603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r3) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time_for_children\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x4000880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.679540481s ago: executing program 1 (id=16604): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6", 0x2d}, {0x0}, {&(0x7f0000000900)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.548435039s ago: executing program 0 (id=16605): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xfffffffb, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 2.029491666s ago: executing program 4 (id=16606): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0xfffffdef}], 0x4000095, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.555175442s ago: executing program 1 (id=16607): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000300e9ff"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f00000002c0)={0x6, 0x60000000}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 1.554724606s ago: executing program 4 (id=16608): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a115ffff000008002600b409"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) 1.500683794s ago: executing program 0 (id=16609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x66, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0x14}}}}}}, 0x0) 1.321529293s ago: executing program 0 (id=16610): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) close(r0) r4 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010160, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r7}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r7, &(0x7f0000000400)="3515686117b164bc7ab6846d7f5d69e93bc809daf36cf8cb94a37954856cc96778e30a02d2c2291ccd79c5d59007adb32ebedcb46a2bd35079e72e3c513f27fefc6a1fd1661067e7ff486a7bbaae5053cafecf524956aa811467673a72c65dce28195057bfe6555b3c15edb647d831f04a2db27334fc0112221d2e8a8be51b98c943f68aabdc52844afcf88af9ef4828c2", &(0x7f0000000580)=""/113}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0xfffffc97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbfffffffffdff6558"], 0x12) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000000)={0x0, 0x2, 0x7fffffff, 0x8, 0x9, 0x200}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0xfc, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) 1.20002911s ago: executing program 4 (id=16611): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x81}, &(0x7f0000000040)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r1, 0x1ad0}, &(0x7f0000000440)=0x8) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000004c0)={r4}) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2}, 0xc) 1.194476226s ago: executing program 3 (id=16612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB="0000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x1003, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe2d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) unshare(0x20000400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) bind$inet(r3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) recvfrom$l2tp(r3, &(0x7f0000000280)=""/223, 0xdf, 0x13000, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x24}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x2, 0x4, {{0x32, 0x4, 0x1, 0x8, 0xc8, 0x68, 0x0, 0x6, 0x2f, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0x50, 0x3, 0x6, [{@empty, 0x1}, {@multicast2, 0x8000}, {@local, 0x126b9e28}, {@multicast2, 0x8}, {@multicast2, 0xb577}, {@loopback}, {@empty, 0x6}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x8001}]}, @lsrr={0x83, 0x27, 0xd9, [@multicast1, @loopback, @broadcast, @remote, @rand_addr=0x64010101, @private=0xa010100, @multicast2, @empty, @broadcast]}, @lsrr={0x83, 0x7, 0xac, [@rand_addr=0x64010102]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x3e, 0x0, 0x6, [0x6, 0x80000001, 0xab5, 0x4, 0x7, 0x9, 0x8, 0x0, 0xfffffffa]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getqdisc={0x44, 0x26, 0x9a9a609999532149, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xf}, {0xffe0, 0xfff2}, {0x10, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0xffffffffffffff06}, {0x4}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000043001b0027bd7100fddbdf250a0000000000010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x40010132, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x1170, 0x1398, 0x110, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0x0, 0xff], [], 'ip6tnl0\x00', 'xfrm0\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x10, 'system_u:object_r:sysfs_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) 751.367089ms ago: executing program 0 (id=16613): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001080)={&(0x7f0000000140)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000000)={&(0x7f0000000080)="cdbc1e731f055433bbd0c8e102565a4372", 0x11}, 0x1, 0x0, 0x0, 0x2404c080}, 0x48842) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x3, 0x65, "69fabdf4f04723a4f7bae176448593f88c43ae986c494282d07ea161829edb6cae6ce05912b1f79db55bc3d2cc169d3e5bda2de61aa88fc300ea935b31c4b21d0b438dc036f413f33af77a20690cf14f40e139e9056bf16b8a1fe0b46fbabd523b10995d7a"}) 657.465764ms ago: executing program 3 (id=16614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x48c0}, 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback={0xff000000}, 0x4}, 0x1c) 473.665736ms ago: executing program 0 (id=16615): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000200010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 471.865879ms ago: executing program 1 (id=16616): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x50, r2, 0x1fe27000) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = accept4$netrom(r2, &(0x7f0000000040)={{}, [@null, @null, @remote, @netrom, @netrom, @rose, @rose, @null]}, &(0x7f00000000c0)=0x48, 0x80000) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000140)=0x3, 0x4) 99.084372ms ago: executing program 0 (id=16617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18090000000000000000000000000000181200e4", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 96.154812ms ago: executing program 4 (id=16618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0x2a}, {&(0x7f0000000340)="448b7cff000000000000", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b88695211f0", 0x11}], 0x3) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0xfffffffc, 0x1000000, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xb, 0x2100}}, 0x1c}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f00000000000000020100001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400008db7030000000700008500000086000000bf09000000000000550901000201000095000000000000002500feff0800000018140000", @ANYRES32=r8, @ANYBLOB="0000000000000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x80000001, 0x401, {{0xe, 0x4, 0x3, 0x22, 0x38, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty, {[@end, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "e8f21cd2c5d2d3f799736f2a54"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) 0s ago: executing program 1 (id=16619): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e597"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc4}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func={0xb, 0x0, 0x0, 0xc, 0x1}, @fwd={0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000140)=""/137, 0x3f, 0x89, 0x0, 0x23}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1867.109189][T24426] ___sys_sendmsg+0x2a5/0x360 [ 1867.109209][T24426] ? __lock_acquire+0x6b5/0x2cf0 [ 1867.109243][T24426] ? __pfx____sys_sendmsg+0x10/0x10 [ 1867.109304][T24426] ? __fget_files+0x2a/0x420 [ 1867.109323][T24426] ? __fget_files+0x3a0/0x420 [ 1867.109354][T24426] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1867.109380][T24426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1867.109411][T24426] ? __pfx_ksys_write+0x10/0x10 [ 1867.109447][T24426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.109468][T24426] do_syscall_64+0x15f/0xf80 [ 1867.109494][T24426] ? trace_irq_disable+0x3b/0x140 [ 1867.109520][T24426] ? clear_bhb_loop+0x40/0x90 [ 1867.109553][T24426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.109572][T24426] RIP: 0033:0x7efcdad9cdd9 [ 1867.109592][T24426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.109609][T24426] RSP: 002b:00007efcdbbc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1867.109632][T24426] RAX: ffffffffffffffda RBX: 00007efcdb015fa0 RCX: 00007efcdad9cdd9 [ 1867.109647][T24426] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1867.109660][T24426] RBP: 00007efcdbbc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.109672][T24426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.109684][T24426] R13: 00007efcdb016038 R14: 00007efcdb015fa0 R15: 00007ffceb740dd8 [ 1867.109717][T24426] [ 1867.527771][T24434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15721'. [ 1867.537681][T24434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1867.544997][T24434] IPv6: NLM_F_CREATE should be set when creating new route [ 1867.552447][T24434] IPv6: NLM_F_CREATE should be set when creating new route [ 1867.891153][T24454] tipc: Enabling of bearer rejected, already enabled [ 1868.079904][T24462] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15734'. [ 1868.081101][T24464] --map-set only usable from mangle table [ 1868.127934][T24466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15732'. [ 1868.141260][T24462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15734'. [ 1868.153293][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15732'. [ 1868.166572][T24469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15733'. [ 1868.276748][T24462] netlink: 'syz.1.15734': attribute type 2 has an invalid length. [ 1868.284646][T24462] netlink: 'syz.1.15734': attribute type 2 has an invalid length. [ 1868.293136][T24462] netlink: 'syz.1.15734': attribute type 1 has an invalid length. [ 1868.300984][T24462] netlink: 'syz.1.15734': attribute type 1 has an invalid length. [ 1868.386244][T24475] xt_hashlimit: size too large, truncated to 1048576 [ 1868.528771][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15737'. [ 1868.586481][T24486] netlink: 276 bytes leftover after parsing attributes in process `syz.1.15739'. [ 1868.759212][T24488] netlink: 'syz.1.15740': attribute type 3 has an invalid length. [ 1868.777952][T24488] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15740'. [ 1869.226549][T24496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1869.428015][T24508] syzkaller0: entered promiscuous mode [ 1869.457323][T24508] syzkaller0: entered allmulticast mode [ 1869.968150][T24530] FAULT_INJECTION: forcing a failure. [ 1869.968150][T24530] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.001363][T24530] CPU: 1 UID: 0 PID: 24530 Comm: syz.3.15752 Not tainted syzkaller #0 PREEMPT(full) [ 1870.001395][T24530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1870.001408][T24530] Call Trace: [ 1870.001417][T24530] [ 1870.001426][T24530] dump_stack_lvl+0xe8/0x150 [ 1870.001464][T24530] should_fail_ex+0x412/0x560 [ 1870.001503][T24530] should_failslab+0xa8/0x100 [ 1870.001531][T24530] ? skb_clone+0x212/0x3a0 [ 1870.001556][T24530] kmem_cache_alloc_noprof+0x87/0x650 [ 1870.001582][T24530] ? __netlink_lookup+0xc6/0x8b0 [ 1870.001621][T24530] skb_clone+0x212/0x3a0 [ 1870.001648][T24530] __netlink_deliver_tap+0x404/0x850 [ 1870.001684][T24530] ? netlink_deliver_tap+0x2e/0x1b0 [ 1870.001708][T24530] netlink_deliver_tap+0x19c/0x1b0 [ 1870.001732][T24530] netlink_unicast+0x730/0x8e0 [ 1870.001775][T24530] netlink_sendmsg+0x813/0xb40 [ 1870.001808][T24530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1870.001835][T24530] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1870.001858][T24530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1870.001887][T24530] ____sys_sendmsg+0x972/0x9f0 [ 1870.001910][T24530] ? __might_fault+0xaf/0x130 [ 1870.001941][T24530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1870.001974][T24530] ? import_iovec+0x73/0xa0 [ 1870.002003][T24530] ___sys_sendmsg+0x2a5/0x360 [ 1870.002031][T24530] ? __lock_acquire+0x6b5/0x2cf0 [ 1870.002068][T24530] ? __pfx____sys_sendmsg+0x10/0x10 [ 1870.002131][T24530] ? __fget_files+0x2a/0x420 [ 1870.002153][T24530] ? __fget_files+0x3a0/0x420 [ 1870.002186][T24530] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1870.002213][T24530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1870.002247][T24530] ? __pfx_ksys_write+0x10/0x10 [ 1870.002283][T24530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.002307][T24530] do_syscall_64+0x15f/0xf80 [ 1870.002334][T24530] ? trace_irq_disable+0x3b/0x140 [ 1870.002362][T24530] ? clear_bhb_loop+0x40/0x90 [ 1870.002388][T24530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.002410][T24530] RIP: 0033:0x7efcdad9cdd9 [ 1870.002431][T24530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.002450][T24530] RSP: 002b:00007efcdbbc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1870.002473][T24530] RAX: ffffffffffffffda RBX: 00007efcdb015fa0 RCX: 00007efcdad9cdd9 [ 1870.002489][T24530] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1870.002502][T24530] RBP: 00007efcdbbc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.002516][T24530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.002528][T24530] R13: 00007efcdb016038 R14: 00007efcdb015fa0 R15: 00007ffceb740dd8 [ 1870.002563][T24530] [ 1870.275198][T24530] tipc: Resetting bearer [ 1870.398492][T24530] ip6tnl0: left promiscuous mode [ 1870.417359][T24530] bridge0: port 3(dummy0) entered disabled state [ 1870.432767][T24530] ip6gre2: left promiscuous mode [ 1870.439362][T24530] bond3: left promiscuous mode [ 1870.557665][T24545] tipc: Started in network mode [ 1870.564683][T24545] tipc: Node identity c6964fc70c65, cluster identity 4711 [ 1870.574407][T24545] tipc: Enabled bearer , priority 0 [ 1870.669930][T24545] syzkaller0: entered promiscuous mode [ 1870.708299][T24545] syzkaller0: entered allmulticast mode [ 1870.717814][T24545] tipc: Resetting bearer [ 1870.767815][T24551] netlink: 'syz.4.15758': attribute type 3 has an invalid length. [ 1873.542216][ T1585] tipc: Resetting bearer [ 1873.548614][T24548] syzkaller1: entered promiscuous mode [ 1873.555449][T24548] syzkaller1: entered allmulticast mode [ 1873.563792][ T24] tipc: Node number set to 3404943303 [ 1873.668824][T24538] tipc: Resetting bearer [ 1877.973423][T24538] tipc: Disabling bearer [ 1877.991164][T24580] dummy0: entered allmulticast mode [ 1877.996725][T24568] dummy0: left allmulticast mode [ 1878.110476][T24588] netlink: 'syz.0.15767': attribute type 1 has an invalid length. [ 1878.118510][T24588] __nla_validate_parse: 2 callbacks suppressed [ 1878.118528][T24588] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15767'. [ 1878.171146][T24586] netlink: 'syz.2.15766': attribute type 21 has an invalid length. [ 1878.179197][T24586] IPv6: NLM_F_CREATE should be specified when creating new route [ 1878.187034][T24586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1878.194261][T24586] IPv6: NLM_F_CREATE should be set when creating new route [ 1878.201609][T24586] IPv6: NLM_F_CREATE should be set when creating new route [ 1878.208864][T24586] IPv6: NLM_F_CREATE should be set when creating new route [ 1878.224933][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.231891][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.238849][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.252610][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.260370][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.262311][T24594] netlink: 'syz.4.15769': attribute type 3 has an invalid length. [ 1878.270847][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.274852][T24594] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15769'. [ 1878.292759][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.299703][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.307385][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.316263][T24587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1878.503939][T24601] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.15771'. [ 1879.005681][T24618] netlink: 'syz.4.15777': attribute type 4 has an invalid length. [ 1879.024439][T24618] netlink: 'syz.4.15777': attribute type 8 has an invalid length. [ 1879.039527][T24618] netlink: 212 bytes leftover after parsing attributes in process `syz.4.15777'. [ 1879.372285][T24632] netlink: 'syz.2.15780': attribute type 1 has an invalid length. [ 1879.380555][T24632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15780'. [ 1879.391879][T24624] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1879.400081][T24633] netlink: 'syz.0.15781': attribute type 1 has an invalid length. [ 1879.413071][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1879.429371][T24624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15778'. [ 1879.588954][T24638] mac80211_hwsim hwsim140 syzkaller0: entered promiscuous mode [ 1879.596611][T24638] mac80211_hwsim hwsim140 syzkaller0: entered allmulticast mode [ 1879.734387][T24643] netlink: 'syz.4.15784': attribute type 3 has an invalid length. [ 1879.743003][T24643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15784'. [ 1880.171291][T24658] geneve1: Caught tx_queue_len zero misconfig [ 1880.287322][T24658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15791'. [ 1880.304566][T24665] Cannot find del_set index 1 as target [ 1880.570183][T24675] netlink: 'syz.4.15795': attribute type 3 has an invalid length. [ 1880.578161][T24675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15795'. [ 1880.821064][T24682] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15798'. [ 1881.228263][T24701] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1881.241076][T24701] netlink: 'syz.1.15808': attribute type 1 has an invalid length. [ 1881.457631][T24715] batman_adv: batadv0: Adding interface: ipvlan2 [ 1881.486394][T24715] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1881.547594][T24715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1881.566086][T24715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.580871][T24715] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1883.231751][T24786] __nla_validate_parse: 7 callbacks suppressed [ 1883.231773][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15831'. [ 1883.248844][T24786] validate_nla: 7 callbacks suppressed [ 1883.248864][T24786] netlink: 'syz.2.15831': attribute type 2 has an invalid length. [ 1883.453550][T24795] netlink: 'syz.3.15835': attribute type 39 has an invalid length. [ 1883.462903][T24795] FAULT_INJECTION: forcing a failure. [ 1883.462903][T24795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1883.496096][T24795] CPU: 0 UID: 0 PID: 24795 Comm: syz.3.15835 Not tainted syzkaller #0 PREEMPT(full) [ 1883.496124][T24795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1883.496136][T24795] Call Trace: [ 1883.496143][T24795] [ 1883.496151][T24795] dump_stack_lvl+0xe8/0x150 [ 1883.496185][T24795] should_fail_ex+0x412/0x560 [ 1883.496223][T24795] _copy_from_user+0x2d/0xb0 [ 1883.496247][T24795] kstrtouint_from_user+0xd6/0x180 [ 1883.496279][T24795] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1883.496329][T24795] proc_fail_nth_write+0x8e/0x210 [ 1883.496350][T24795] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1883.496378][T24795] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1883.496412][T24795] vfs_write+0x29a/0xb90 [ 1883.496446][T24795] ? __pfx_vfs_write+0x10/0x10 [ 1883.496473][T24795] ? __fget_files+0x2a/0x420 [ 1883.496500][T24795] ? __fget_files+0x3a0/0x420 [ 1883.496519][T24795] ? __fget_files+0x2a/0x420 [ 1883.496548][T24795] ksys_write+0x150/0x270 [ 1883.496576][T24795] ? __pfx_ksys_write+0x10/0x10 [ 1883.496607][T24795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.496627][T24795] do_syscall_64+0x15f/0xf80 [ 1883.496654][T24795] ? trace_irq_disable+0x3b/0x140 [ 1883.496681][T24795] ? clear_bhb_loop+0x40/0x90 [ 1883.496707][T24795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.496727][T24795] RIP: 0033:0x7efcdad5d60e [ 1883.496748][T24795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1883.496765][T24795] RSP: 002b:00007efcdbbc1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1883.496789][T24795] RAX: ffffffffffffffda RBX: 00007efcdbbc26c0 RCX: 00007efcdad5d60e [ 1883.496804][T24795] RDX: 0000000000000001 RSI: 00007efcdbbc20a0 RDI: 0000000000000009 [ 1883.496818][T24795] RBP: 00007efcdbbc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.496831][T24795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.496843][T24795] R13: 00007efcdb016038 R14: 00007efcdb015fa0 R15: 00007ffceb740dd8 [ 1883.496878][T24795] [ 1883.796428][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15837'. [ 1883.834308][T24801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15837'. [ 1883.845739][T24806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15840'. [ 1883.880041][T24806] netlink: 'syz.4.15840': attribute type 1 has an invalid length. [ 1883.887915][T24806] netlink: 'syz.4.15840': attribute type 2 has an invalid length. [ 1883.908394][T24808] dvmrp6: left allmulticast mode [ 1884.289464][T24820] FAULT_INJECTION: forcing a failure. [ 1884.289464][T24820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.319973][T24820] CPU: 1 UID: 0 PID: 24820 Comm: syz.1.15844 Not tainted syzkaller #0 PREEMPT(full) [ 1884.320003][T24820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1884.320016][T24820] Call Trace: [ 1884.320025][T24820] [ 1884.320035][T24820] dump_stack_lvl+0xe8/0x150 [ 1884.320074][T24820] should_fail_ex+0x412/0x560 [ 1884.320113][T24820] _copy_to_user+0x31/0xb0 [ 1884.320141][T24820] bpf_test_finish+0x1db/0x6b0 [ 1884.320171][T24820] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1884.320197][T24820] ? __pfx_bpf_test_finish+0x10/0x10 [ 1884.320226][T24820] ? _copy_from_user+0x94/0xb0 [ 1884.320251][T24820] ? bpf_test_init+0x113/0x150 [ 1884.320275][T24820] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1884.320316][T24820] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1884.320368][T24820] ? __fget_files+0x2a/0x420 [ 1884.320396][T24820] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1884.320420][T24820] bpf_prog_test_run+0x2c7/0x340 [ 1884.320453][T24820] __sys_bpf+0x643/0x950 [ 1884.320484][T24820] ? __pfx___sys_bpf+0x10/0x10 [ 1884.320528][T24820] ? ksys_write+0x242/0x270 [ 1884.320557][T24820] ? __pfx_ksys_write+0x10/0x10 [ 1884.320595][T24820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.320619][T24820] __x64_sys_bpf+0x7c/0x90 [ 1884.320645][T24820] do_syscall_64+0x15f/0xf80 [ 1884.320679][T24820] ? trace_irq_disable+0x3b/0x140 [ 1884.320706][T24820] ? clear_bhb_loop+0x40/0x90 [ 1884.320732][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.320753][T24820] RIP: 0033:0x7f135299cdd9 [ 1884.320773][T24820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1884.320791][T24820] RSP: 002b:00007f13538ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1884.320815][T24820] RAX: ffffffffffffffda RBX: 00007f1352c15fa0 RCX: 00007f135299cdd9 [ 1884.320830][T24820] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1884.320844][T24820] RBP: 00007f13538ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.320857][T24820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1884.320869][T24820] R13: 00007f1352c16038 R14: 00007f1352c15fa0 R15: 00007ffc5c0eb008 [ 1884.320903][T24820] [ 1884.552207][T24822] FAULT_INJECTION: forcing a failure. [ 1884.552207][T24822] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.565024][T24822] CPU: 1 UID: 0 PID: 24822 Comm: syz.0.15845 Not tainted syzkaller #0 PREEMPT(full) [ 1884.565052][T24822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1884.565065][T24822] Call Trace: [ 1884.565075][T24822] [ 1884.565084][T24822] dump_stack_lvl+0xe8/0x150 [ 1884.565124][T24822] should_fail_ex+0x412/0x560 [ 1884.565164][T24822] should_failslab+0xa8/0x100 [ 1884.565195][T24822] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1884.565223][T24822] ? __alloc_skb+0x1d0/0x7d0 [ 1884.565242][T24822] ? __local_bh_enable_ip+0xd0/0x130 [ 1884.565279][T24822] __alloc_skb+0x1d0/0x7d0 [ 1884.565306][T24822] create_monitor_ctrl_event+0x38/0x480 [ 1884.565333][T24822] ? skb_put+0x11b/0x210 [ 1884.565358][T24822] mgmt_cmd_status+0x1cb/0x530 [ 1884.565395][T24822] get_connections+0x19b/0x680 [ 1884.565430][T24822] hci_mgmt_cmd+0xa14/0xfa0 [ 1884.565476][T24822] hci_sock_sendmsg+0x6dd/0xf40 [ 1884.565504][T24822] ? __pfx_aa_sk_perm+0x10/0x10 [ 1884.565541][T24822] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1884.565570][T24822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1884.565602][T24822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1884.565629][T24822] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1884.565657][T24822] sock_write_iter+0x49b/0x4f0 [ 1884.565687][T24822] ? __pfx_sock_write_iter+0x10/0x10 [ 1884.565727][T24822] ? bpf_lsm_file_permission+0x9/0x20 [ 1884.565752][T24822] ? security_file_permission+0x75/0x260 [ 1884.565791][T24822] vfs_write+0x61d/0xb90 [ 1884.565828][T24822] ? __pfx_vfs_write+0x10/0x10 [ 1884.565867][T24822] ? __fget_files+0x2a/0x420 [ 1884.565900][T24822] ksys_write+0x150/0x270 [ 1884.565929][T24822] ? __pfx_ksys_write+0x10/0x10 [ 1884.565966][T24822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.565989][T24822] do_syscall_64+0x15f/0xf80 [ 1884.566018][T24822] ? trace_irq_disable+0x3b/0x140 [ 1884.566045][T24822] ? clear_bhb_loop+0x40/0x90 [ 1884.566073][T24822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.566095][T24822] RIP: 0033:0x7f573079cdd9 [ 1884.566116][T24822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1884.566133][T24822] RSP: 002b:00007f572e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1884.566157][T24822] RAX: ffffffffffffffda RBX: 00007f5730a15fa0 RCX: 00007f573079cdd9 [ 1884.566172][T24822] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 1884.566186][T24822] RBP: 00007f572e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.566199][T24822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.566212][T24822] R13: 00007f5730a16038 R14: 00007f5730a15fa0 R15: 00007fffa2904218 [ 1884.566248][T24822] [ 1884.905590][T24828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1885.598174][T24847] lo speed is unknown, defaulting to 1000 [ 1885.604051][T24847] lo speed is unknown, defaulting to 1000 [ 1885.610270][T24847] lo speed is unknown, defaulting to 1000 [ 1885.617655][T24847] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1885.631859][T24847] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1885.648750][T24847] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1885.674115][T24848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15854'. [ 1885.689819][T24847] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1885.709747][T24847] lo speed is unknown, defaulting to 1000 [ 1885.717550][T24847] lo speed is unknown, defaulting to 1000 [ 1885.725371][T24847] lo speed is unknown, defaulting to 1000 [ 1885.735481][T24847] lo speed is unknown, defaulting to 1000 [ 1885.742309][T24847] lo speed is unknown, defaulting to 1000 [ 1885.749093][T24847] lo speed is unknown, defaulting to 1000 [ 1885.896151][T24854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15858'. [ 1886.276990][T24869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15859'. [ 1886.291569][T24876] netlink: 'syz.1.15863': attribute type 2 has an invalid length. [ 1887.944161][T24908] netlink: 'syz.1.15874': attribute type 2 has an invalid length. [ 1888.021216][T24912] xt_hashlimit: size too large, truncated to 1048576 [ 1888.044778][T24912] xt_hashlimit: max too large, truncated to 1048576 [ 1888.075939][T24912] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1888.161538][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15875'. [ 1888.195213][T24918] netlink: 'syz.3.15875': attribute type 13 has an invalid length. [ 1888.203193][T24918] netlink: 'syz.3.15875': attribute type 17 has an invalid length. [ 1888.348438][T24918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1888.359418][T24918] bridge0: port 3(dummy0) entered blocking state [ 1888.365927][T24918] bridge0: port 3(dummy0) entered forwarding state [ 1888.433862][T24918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1888.457350][T12710] lo speed is unknown, defaulting to 1000 [ 1888.463157][T12710] syz2: Port: 1 Link ACTIVE [ 1888.571658][T24918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15875'. [ 1888.665382][T24927] tipc: Enabling of bearer rejected, failed to enable media [ 1889.069420][T24939] Cannot find set identified by id 65534 to match [ 1889.280442][T24943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15881'. [ 1889.371112][T24946] openvswitch: netlink: Missing valid actions attribute. [ 1889.378244][T24946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1889.455407][T24946] syzkaller0: entered promiscuous mode [ 1889.460954][T24946] syzkaller0: entered allmulticast mode [ 1889.765786][T24958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15887'. [ 1893.483234][T24973] mac80211_hwsim hwsim131 syzkaller0: left promiscuous mode [ 1893.492033][T24973] mac80211_hwsim hwsim131 syzkaller0: left allmulticast mode [ 1893.532211][T24981] FAULT_INJECTION: forcing a failure. [ 1893.532211][T24981] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.559294][T24981] CPU: 1 UID: 0 PID: 24981 Comm: syz.1.15893 Not tainted syzkaller #0 PREEMPT(full) [ 1893.559326][T24981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1893.559338][T24981] Call Trace: [ 1893.559347][T24981] [ 1893.559356][T24981] dump_stack_lvl+0xe8/0x150 [ 1893.559394][T24981] should_fail_ex+0x412/0x560 [ 1893.559434][T24981] should_failslab+0xa8/0x100 [ 1893.559463][T24981] __kmalloc_cache_noprof+0x88/0x660 [ 1893.559490][T24981] ? garp_init_applicant+0x181/0x430 [ 1893.559518][T24981] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1893.559546][T24981] garp_init_applicant+0x181/0x430 [ 1893.559578][T24981] register_vlan_dev+0x223/0x800 [ 1893.559618][T24981] vlan_newlink+0x4b2/0x610 [ 1893.559645][T24981] ? __pfx_vlan_newlink+0x10/0x10 [ 1893.559671][T24981] rtnl_newlink_create+0x329/0xb70 [ 1893.559696][T24981] ? __pfx___nla_validate_parse+0x10/0x10 [ 1893.559732][T24981] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1893.559760][T24981] ? __pfx___mutex_lock+0x10/0x10 [ 1893.559801][T24981] ? ns_capable+0x89/0xe0 [ 1893.559836][T24981] rtnl_newlink+0x166a/0x1bb0 [ 1893.559873][T24981] ? __pfx_rtnl_newlink+0x10/0x10 [ 1893.559890][T24981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.559951][T24981] ? kasan_quarantine_put+0xbb/0x1f0 [ 1893.559976][T24981] ? lockdep_hardirqs_on+0x7a/0x110 [ 1893.560008][T24981] ? nlmon_xmit+0xb0/0x100 [ 1893.560036][T24981] ? kmem_cache_free+0x182/0x650 [ 1893.560074][T24981] ? __lock_acquire+0x6b5/0x2cf0 [ 1893.560111][T24981] ? __dev_queue_xmit+0x2b6/0x3950 [ 1893.560139][T24981] ? __local_bh_enable_ip+0xd0/0x130 [ 1893.560169][T24981] ? lockdep_hardirqs_on+0x7a/0x110 [ 1893.560194][T24981] ? __dev_queue_xmit+0x2b6/0x3950 [ 1893.560216][T24981] ? __local_bh_enable_ip+0xd0/0x130 [ 1893.560264][T24981] ? __dev_queue_xmit+0x2b6/0x3950 [ 1893.560304][T24981] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1893.560352][T24981] ? __pfx_rtnl_newlink+0x10/0x10 [ 1893.560372][T24981] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1893.560407][T24981] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1893.560437][T24981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1893.560466][T24981] ? ref_tracker_free+0x693/0x840 [ 1893.560492][T24981] ? __pfx_ref_tracker_free+0x10/0x10 [ 1893.560527][T24981] netlink_rcv_skb+0x232/0x4b0 [ 1893.560550][T24981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1893.560583][T24981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1893.560620][T24981] ? netlink_deliver_tap+0x2e/0x1b0 [ 1893.560640][T24981] ? netlink_deliver_tap+0x2e/0x1b0 [ 1893.560673][T24981] netlink_unicast+0x75c/0x8e0 [ 1893.560713][T24981] netlink_sendmsg+0x813/0xb40 [ 1893.560743][T24981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1893.560770][T24981] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1893.560791][T24981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1893.560818][T24981] ____sys_sendmsg+0x972/0x9f0 [ 1893.560842][T24981] ? __might_fault+0xaf/0x130 [ 1893.560872][T24981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1893.560906][T24981] ? import_iovec+0x73/0xa0 [ 1893.560934][T24981] ___sys_sendmsg+0x2a5/0x360 [ 1893.560956][T24981] ? __lock_acquire+0x6b5/0x2cf0 [ 1893.560991][T24981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1893.561054][T24981] ? __fget_files+0x2a/0x420 [ 1893.561075][T24981] ? __fget_files+0x3a0/0x420 [ 1893.561109][T24981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1893.561136][T24981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1893.561171][T24981] ? __pfx_ksys_write+0x10/0x10 [ 1893.561216][T24981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.561239][T24981] do_syscall_64+0x15f/0xf80 [ 1893.561267][T24981] ? trace_irq_disable+0x3b/0x140 [ 1893.561303][T24981] ? clear_bhb_loop+0x40/0x90 [ 1893.561330][T24981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.561351][T24981] RIP: 0033:0x7f135299cdd9 [ 1893.561372][T24981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1893.561391][T24981] RSP: 002b:00007f13538ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1893.561414][T24981] RAX: ffffffffffffffda RBX: 00007f1352c15fa0 RCX: 00007f135299cdd9 [ 1893.561429][T24981] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1893.561443][T24981] RBP: 00007f13538ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1893.561456][T24981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1893.561469][T24981] R13: 00007f1352c16038 R14: 00007f1352c15fa0 R15: 00007ffc5c0eb008 [ 1893.561505][T24981] [ 1894.194230][T24994] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15899'. [ 1894.202476][T24995] only policy match revision 0 supported [ 1894.203357][T24995] unable to load match [ 1894.292130][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15900'. [ 1895.267040][T25001] ip6tnl0: Caught tx_queue_len zero misconfig [ 1895.530778][T25016] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15907'. [ 1895.616559][T25025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15910'. [ 1895.761728][T25036] FAULT_INJECTION: forcing a failure. [ 1895.761728][T25036] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.774406][T25036] CPU: 0 UID: 0 PID: 25036 Comm: syz.4.15914 Not tainted syzkaller #0 PREEMPT(full) [ 1895.774435][T25036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1895.774447][T25036] Call Trace: [ 1895.774455][T25036] [ 1895.774464][T25036] dump_stack_lvl+0xe8/0x150 [ 1895.774501][T25036] should_fail_ex+0x412/0x560 [ 1895.774549][T25036] should_failslab+0xa8/0x100 [ 1895.774578][T25036] __kmalloc_cache_noprof+0x88/0x660 [ 1895.774604][T25036] ? nfnetlink_rcv+0xfdf/0x27b0 [ 1895.774640][T25036] nfnetlink_rcv+0xfdf/0x27b0 [ 1895.774706][T25036] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1895.774753][T25036] ? ref_tracker_free+0x693/0x840 [ 1895.774807][T25036] ? __netlink_deliver_tap+0x807/0x850 [ 1895.774838][T25036] ? netlink_deliver_tap+0x2e/0x1b0 [ 1895.774857][T25036] ? netlink_deliver_tap+0x2e/0x1b0 [ 1895.774884][T25036] netlink_unicast+0x75c/0x8e0 [ 1895.774925][T25036] netlink_sendmsg+0x813/0xb40 [ 1895.774956][T25036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1895.774980][T25036] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1895.775003][T25036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1895.775030][T25036] ____sys_sendmsg+0x972/0x9f0 [ 1895.775052][T25036] ? __might_fault+0xaf/0x130 [ 1895.775081][T25036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1895.775112][T25036] ? import_iovec+0x73/0xa0 [ 1895.775139][T25036] ___sys_sendmsg+0x2a5/0x360 [ 1895.775160][T25036] ? __lock_acquire+0x6b5/0x2cf0 [ 1895.775194][T25036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1895.775255][T25036] ? __fget_files+0x2a/0x420 [ 1895.775274][T25036] ? __fget_files+0x3a0/0x420 [ 1895.775304][T25036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1895.775329][T25036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1895.775361][T25036] ? __pfx_ksys_write+0x10/0x10 [ 1895.775396][T25036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1895.775418][T25036] do_syscall_64+0x15f/0xf80 [ 1895.775445][T25036] ? trace_irq_disable+0x3b/0x140 [ 1895.775472][T25036] ? clear_bhb_loop+0x40/0x90 [ 1895.775498][T25036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1895.775519][T25036] RIP: 0033:0x7fb475f9cdd9 [ 1895.775549][T25036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1895.775567][T25036] RSP: 002b:00007fb476e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1895.775590][T25036] RAX: ffffffffffffffda RBX: 00007fb476215fa0 RCX: 00007fb475f9cdd9 [ 1895.775605][T25036] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1895.775618][T25036] RBP: 00007fb476e44090 R08: 0000000000000000 R09: 0000000000000000 [ 1895.775631][T25036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1895.775644][T25036] R13: 00007fb476216038 R14: 00007fb476215fa0 R15: 00007fffe4dc6b48 [ 1895.775678][T25036] [ 1896.220875][T25045] team_slave_1: Caught tx_queue_len zero misconfig [ 1896.278308][T25047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1896.287101][T25041] mac80211_hwsim hwsim131 syzkaller0: entered promiscuous mode [ 1896.314605][T25041] mac80211_hwsim hwsim131 syzkaller0: entered allmulticast mode [ 1896.348793][T25038] lo speed is unknown, defaulting to 1000 [ 1896.557815][T25059] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15922'. [ 1897.049025][T25069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15924'. [ 1897.337591][T25072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15926'. [ 1897.409537][T25073] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20004 [ 1897.409848][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15926'. [ 1897.491161][T25080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15928'. [ 1897.677950][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15928'. [ 1897.875472][T28844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1897.947632][T28844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1897.959581][T28844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1897.968278][T28844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1897.977482][T28844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1898.181314][T25085] tipc: Resetting bearer [ 1898.189813][T25085] tipc: Resetting bearer [ 1898.277345][T25085] lo speed is unknown, defaulting to 1000 [ 1898.540151][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808643e000: rx timeout, send abort [ 1898.548810][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88808643e000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1898.761316][T25085] chnl_net:caif_netlink_parms(): no params data found [ 1898.856318][T25104] lo speed is unknown, defaulting to 1000 [ 1898.977063][T25102] syzkaller0: entered promiscuous mode [ 1898.982607][T25102] syzkaller0: entered allmulticast mode [ 1899.050807][T25085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.058020][T25085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.065209][T25085] bridge_slave_0: entered allmulticast mode [ 1899.072672][T25085] bridge_slave_0: entered promiscuous mode [ 1899.086182][T25085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.093440][T25085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.100728][T25085] bridge_slave_1: entered allmulticast mode [ 1899.108904][T25085] bridge_slave_1: entered promiscuous mode [ 1899.178718][T25085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1899.194456][T25085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1899.262273][T25085] team0: Port device team_slave_0 added [ 1899.272207][T25085] team0: Port device team_slave_1 added [ 1899.311769][T25085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.318777][T25085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.358762][T25085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.374311][T25085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.381332][T25085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.407239][T25085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.999046][T25136] __nla_validate_parse: 4 callbacks suppressed [ 1899.999062][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15943'. [ 1900.056974][ T3388] Bluetooth: hci2: command tx timeout [ 1902.192084][T28844] Bluetooth: hci2: command tx timeout [ 1903.989210][T25136] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1904.060609][T25142] netlink: 'syz.2.15944': attribute type 1 has an invalid length. [ 1904.097366][T25142] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15944'. [ 1904.099706][T25144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15945'. [ 1904.111397][T25085] hsr_slave_0: entered promiscuous mode [ 1904.137906][T25085] hsr_slave_1: entered promiscuous mode [ 1904.206552][T25149] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15947'. [ 1904.277072][T28844] Bluetooth: hci2: command tx timeout [ 1904.494684][T25158] FAULT_INJECTION: forcing a failure. [ 1904.494684][T25158] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.507632][T25158] CPU: 1 UID: 0 PID: 25158 Comm: syz.2.15950 Not tainted syzkaller #0 PREEMPT(full) [ 1904.507661][T25158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1904.507674][T25158] Call Trace: [ 1904.507683][T25158] [ 1904.507693][T25158] dump_stack_lvl+0xe8/0x150 [ 1904.507732][T25158] should_fail_ex+0x412/0x560 [ 1904.507771][T25158] should_failslab+0xa8/0x100 [ 1904.507802][T25158] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1904.507827][T25158] ? __alloc_skb+0x186/0x7d0 [ 1904.507847][T25158] ? __alloc_skb+0x1d0/0x7d0 [ 1904.507864][T25158] ? __local_bh_enable_ip+0xd0/0x130 [ 1904.507900][T25158] __alloc_skb+0x1d0/0x7d0 [ 1904.507926][T25158] netlink_sendmsg+0x5d4/0xb40 [ 1904.507959][T25158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1904.507984][T25158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1904.508008][T25158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1904.508036][T25158] ____sys_sendmsg+0x972/0x9f0 [ 1904.508060][T25158] ? __might_fault+0xaf/0x130 [ 1904.508090][T25158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1904.508123][T25158] ? import_iovec+0x73/0xa0 [ 1904.508152][T25158] ___sys_sendmsg+0x2a5/0x360 [ 1904.508173][T25158] ? __lock_acquire+0x6b5/0x2cf0 [ 1904.508218][T25158] ? __pfx____sys_sendmsg+0x10/0x10 [ 1904.508280][T25158] ? __fget_files+0x2a/0x420 [ 1904.508300][T25158] ? __fget_files+0x3a0/0x420 [ 1904.508332][T25158] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1904.508358][T25158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1904.508393][T25158] ? __pfx_ksys_write+0x10/0x10 [ 1904.508429][T25158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.508452][T25158] do_syscall_64+0x15f/0xf80 [ 1904.508480][T25158] ? trace_irq_disable+0x3b/0x140 [ 1904.508507][T25158] ? clear_bhb_loop+0x40/0x90 [ 1904.508533][T25158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.508554][T25158] RIP: 0033:0x7f3ab719cdd9 [ 1904.508580][T25158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.508603][T25158] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.508627][T25158] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 1904.508643][T25158] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1904.508657][T25158] RBP: 00007f3ab8077090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.508670][T25158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.508683][T25158] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 1904.508718][T25158] [ 1905.120429][T25174] lo speed is unknown, defaulting to 1000 [ 1905.258482][T25169] syzkaller0: entered promiscuous mode [ 1905.264048][T25169] syzkaller0: entered allmulticast mode [ 1905.281107][T25180] netlink: 'syz.4.15959': attribute type 1 has an invalid length. [ 1905.281134][T25180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15959'. [ 1905.324887][T25173] lo speed is unknown, defaulting to 1000 [ 1905.484855][T25178] syzkaller1: entered promiscuous mode [ 1905.500233][T25178] syzkaller1: entered allmulticast mode [ 1906.333521][T28844] Bluetooth: hci2: command tx timeout [ 1911.025479][T25222] geneve2: entered promiscuous mode [ 1911.042407][T25222] geneve2: entered allmulticast mode [ 1911.232969][T25227] x_tables: duplicate underflow at hook 1 [ 1911.527612][T25085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1911.539716][T25234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15975'. [ 1911.553511][T25085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1911.572245][T25085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1911.591650][T25085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1911.626444][T25085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1911.651834][T25085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1911.661484][T25085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1911.678979][T25085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1911.742549][T25248] lo speed is unknown, defaulting to 1000 [ 1912.013231][T25248] syzkaller0: entered promiscuous mode [ 1912.018771][T25248] syzkaller0: entered allmulticast mode [ 1914.511730][T25234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1914.831334][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1917.037893][T25292] lo speed is unknown, defaulting to 1000 [ 1917.096460][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15990'. [ 1917.248241][T25085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1917.445827][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15995'. [ 1917.516236][T25313] netlink: 'syz.1.15997': attribute type 1 has an invalid length. [ 1917.566063][T25313] bond2: entered promiscuous mode [ 1917.571763][T25313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1917.585848][T25301] lo speed is unknown, defaulting to 1000 [ 1917.655479][T25309] netlink: 830 bytes leftover after parsing attributes in process `syz.3.15995'. [ 1917.675673][T25318] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1917.688463][T25318] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1917.698873][T25318] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1917.770518][T25085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1917.875723][T25323] lo speed is unknown, defaulting to 1000 [ 1917.908501][T22922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.915805][T22922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.016323][T25320] syzkaller0: entered promiscuous mode [ 1918.030742][T25320] syzkaller0: entered allmulticast mode [ 1918.141948][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.149100][T12084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.369507][T25339] lo: Caught tx_queue_len zero misconfig [ 1918.519007][T25343] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16005'. [ 1918.634498][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16006'. [ 1918.829450][T25348] netlink: 'syz.1.16006': attribute type 13 has an invalid length. [ 1918.837598][T25348] netlink: 'syz.1.16006': attribute type 17 has an invalid length. [ 1918.986137][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16006'. [ 1920.030721][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5210 ms [ 1920.038799][ C1] lec:lec_tx_timeout: lec0 [ 1921.084872][ T6734] lec:lec_start_xmit: lec0:No lecd attached [ 1922.884498][T25348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1923.011973][T25085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1923.081669][T25362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16009'. [ 1923.155623][T25085] veth0_vlan: entered promiscuous mode [ 1923.220729][T25364] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.16010'. [ 1923.223590][T25085] veth1_vlan: entered promiscuous mode [ 1923.310066][T25085] veth0_macvtap: entered promiscuous mode [ 1923.323415][T25085] veth1_macvtap: entered promiscuous mode [ 1923.339290][T25370] syzkaller0: entered promiscuous mode [ 1923.353043][T25373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16012'. [ 1923.354105][T25370] syzkaller0: entered allmulticast mode [ 1923.398629][T25085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1923.420867][T25085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1923.444965][T22922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.469730][T22922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.505274][T22922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.529122][T22922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.626901][T25378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16014'. [ 1923.660302][T25378] veth1_to_bond: entered promiscuous mode [ 1923.692588][T25378] veth1_to_bond: entered allmulticast mode [ 1923.699473][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16014'. [ 1923.714254][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1923.737273][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1923.756343][T25378] veth1_to_bond (unregistering): left promiscuous mode [ 1923.763623][T25378] veth1_to_bond (unregistering): left allmulticast mode [ 1923.780534][T25378] bond0: (slave bond_slave_1): Releasing backup interface [ 1923.832766][T12086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1923.903300][T12086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1924.239831][T25383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15929'. [ 1924.305074][T25384] netlink: 'syz.3.16015': attribute type 1 has an invalid length. [ 1926.110217][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1926.118388][ C1] lec:lec_tx_timeout: lec0 [ 1928.298322][T25384] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1928.399369][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16020'. [ 1928.416786][T25406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16020'. [ 1928.426135][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16020'. [ 1928.435144][T25406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16020'. [ 1928.490302][T25411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16022'. [ 1928.717917][T25419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16026'. [ 1928.783928][T25424] netlink: 'syz.1.16024': attribute type 1 has an invalid length. [ 1928.791809][T25424] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16024'. [ 1929.348269][T25448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16035'. [ 1929.498318][T25456] x_tables: duplicate underflow at hook 2 [ 1929.976656][T25465] lo speed is unknown, defaulting to 1000 [ 1930.223404][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16041'. [ 1930.257775][T25477] netlink: 'syz.2.16041': attribute type 13 has an invalid length. [ 1930.280727][T25477] netlink: 'syz.2.16041': attribute type 17 has an invalid length. [ 1930.388150][T25482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16041'. [ 1930.390618][T25485] netlink: 'syz.3.16044': attribute type 1 has an invalid length. [ 1930.634795][T25477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1930.653545][T25477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1930.682591][T25477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1930.727920][T25488] vlan2: entered allmulticast mode [ 1931.092783][ T1585] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.105442][ T1585] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.118486][ T1585] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.127259][ T1585] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.531684][T25534] netlink: 'syz.0.16059': attribute type 1 has an invalid length. [ 1931.687320][T25540] vxlan0: entered promiscuous mode [ 1931.692961][T25540] vxlan0: entered allmulticast mode [ 1931.870730][T25524] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1931.905317][ T1585] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.917065][ T1585] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.984678][ T1585] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.999807][ T1585] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1932.025408][T25547] netlink: 'syz.0.16064': attribute type 9 has an invalid length. [ 1932.523777][T25571] tipc: Enabled bearer , priority 0 [ 1932.575359][T25571] syzkaller0: entered promiscuous mode [ 1932.580898][T25571] syzkaller0: entered allmulticast mode [ 1932.587125][T25571] tipc: Resetting bearer [ 1934.180454][T25582] netlink: 'syz.4.16074': attribute type 1 has an invalid length. [ 1934.188627][T25582] __nla_validate_parse: 5 callbacks suppressed [ 1934.188645][T25582] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16074'. [ 1935.606255][T22922] tipc: Resetting bearer [ 1935.623251][T25563] tipc: Resetting bearer [ 1938.488912][T25612] netlink: 'syz.4.16082': attribute type 1 has an invalid length. [ 1938.496840][T25612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1938.570797][T25614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16083'. [ 1938.659693][T25615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16083'. [ 1940.219916][T25563] tipc: Disabling bearer [ 1940.313103][T25600] vlan2: entered promiscuous mode [ 1940.331712][T25600] bridge0: entered promiscuous mode [ 1940.370009][T25619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16084'. [ 1940.771477][T25630] netlink: 'syz.1.16089': attribute type 1 has an invalid length. [ 1940.810799][T25630] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16089'. [ 1941.083111][T25641] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1941.274489][T25643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1941.544547][T25656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16097'. [ 1941.729848][T25663] tipc: Enabled bearer , priority 10 [ 1941.882636][T25668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16101'. [ 1941.896136][T25669] netlink: 'syz.1.16101': attribute type 49 has an invalid length. [ 1942.167511][T25679] netlink: 'syz.0.16105': attribute type 1 has an invalid length. [ 1942.180474][T25679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16105'. [ 1942.253217][T25685] --map-set only usable from mangle table [ 1942.475137][T25699] syzkaller0: entered promiscuous mode [ 1942.485724][T25699] syzkaller0: entered allmulticast mode [ 1942.643988][T25706] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16116'. [ 1942.897385][T25713] lo speed is unknown, defaulting to 1000 [ 1943.033846][T25719] FAULT_INJECTION: forcing a failure. [ 1943.033846][T25719] name failslab, interval 1, probability 0, space 0, times 0 [ 1943.063096][T25719] CPU: 1 UID: 0 PID: 25719 Comm: syz.2.16121 Not tainted syzkaller #0 PREEMPT(full) [ 1943.063126][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1943.063138][T25719] Call Trace: [ 1943.063146][T25719] [ 1943.063155][T25719] dump_stack_lvl+0xe8/0x150 [ 1943.063192][T25719] should_fail_ex+0x412/0x560 [ 1943.063229][T25719] should_failslab+0xa8/0x100 [ 1943.063257][T25719] __kmalloc_cache_noprof+0x88/0x660 [ 1943.063282][T25719] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1943.063308][T25719] ? sctp_add_bind_addr+0x8c/0x370 [ 1943.063338][T25719] sctp_add_bind_addr+0x8c/0x370 [ 1943.063368][T25719] sctp_copy_local_addr_list+0x314/0x4f0 [ 1943.063397][T25719] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1943.063422][T25719] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1943.063455][T25719] ? sctp_v6_is_any+0x64/0x80 [ 1943.063483][T25719] ? sctp_copy_one_addr+0x93/0x360 [ 1943.063512][T25719] sctp_bind_addr_copy+0xb3/0x3c0 [ 1943.063538][T25719] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1943.063565][T25719] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1943.063588][T25719] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1943.063615][T25719] ? __local_bh_enable_ip+0xd0/0x130 [ 1943.063642][T25719] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1943.063666][T25719] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1943.063696][T25719] sctp_sendmsg+0x1528/0x2c10 [ 1943.063752][T25719] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1943.063786][T25719] ? aa_sk_perm+0x6d5/0x900 [ 1943.063814][T25719] ? __might_fault+0xaf/0x130 [ 1943.063843][T25719] ? __pfx_aa_sk_perm+0x10/0x10 [ 1943.063878][T25719] ? sock_rps_record_flow+0x19/0x350 [ 1943.063903][T25719] ? __pfx_inet_sendmsg+0x10/0x10 [ 1943.063928][T25719] ? inet_sendmsg+0x2f4/0x370 [ 1943.063952][T25719] ? __pfx_inet_sendmsg+0x10/0x10 [ 1943.063977][T25719] __sys_sendto+0x5de/0x710 [ 1943.064001][T25719] ? __pfx___sys_sendto+0x10/0x10 [ 1943.064018][T25719] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1943.064062][T25719] ? __fget_files+0x3a0/0x420 [ 1943.064096][T25719] ? ksys_write+0x242/0x270 [ 1943.064125][T25719] ? __pfx_ksys_write+0x10/0x10 [ 1943.064156][T25719] __x64_sys_sendto+0xde/0x100 [ 1943.064178][T25719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.064201][T25719] do_syscall_64+0x15f/0xf80 [ 1943.064227][T25719] ? trace_irq_disable+0x3b/0x140 [ 1943.064254][T25719] ? clear_bhb_loop+0x40/0x90 [ 1943.064280][T25719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.064300][T25719] RIP: 0033:0x7f3ab719cdd9 [ 1943.064320][T25719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.064338][T25719] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1943.064362][T25719] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 1943.064377][T25719] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1943.064391][T25719] RBP: 00007f3ab8077090 R08: 0000200000000240 R09: 000000000000001c [ 1943.064404][T25719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1943.064416][T25719] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 1943.064452][T25719] [ 1943.549203][T25728] FAULT_INJECTION: forcing a failure. [ 1943.549203][T25728] name failslab, interval 1, probability 0, space 0, times 0 [ 1943.562075][T25728] CPU: 1 UID: 0 PID: 25728 Comm: syz.2.16123 Not tainted syzkaller #0 PREEMPT(full) [ 1943.562105][T25728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1943.562118][T25728] Call Trace: [ 1943.562127][T25728] [ 1943.562136][T25728] dump_stack_lvl+0xe8/0x150 [ 1943.562176][T25728] should_fail_ex+0x412/0x560 [ 1943.562215][T25728] should_failslab+0xa8/0x100 [ 1943.562244][T25728] __kmalloc_cache_noprof+0x88/0x660 [ 1943.562269][T25728] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1943.562294][T25728] ? sctp_add_bind_addr+0x8c/0x370 [ 1943.562327][T25728] sctp_add_bind_addr+0x8c/0x370 [ 1943.562358][T25728] sctp_copy_local_addr_list+0x314/0x4f0 [ 1943.562389][T25728] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1943.562415][T25728] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1943.562444][T25728] ? sctp_v6_is_any+0x64/0x80 [ 1943.562473][T25728] ? sctp_copy_one_addr+0x93/0x360 [ 1943.562504][T25728] sctp_bind_addr_copy+0xb3/0x3c0 [ 1943.562533][T25728] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1943.562562][T25728] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1943.562587][T25728] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1943.562616][T25728] ? __local_bh_enable_ip+0xd0/0x130 [ 1943.562644][T25728] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1943.562671][T25728] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1943.562702][T25728] sctp_sendmsg+0x1528/0x2c10 [ 1943.562759][T25728] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1943.562795][T25728] ? aa_sk_perm+0x6d5/0x900 [ 1943.562825][T25728] ? __might_fault+0xaf/0x130 [ 1943.562856][T25728] ? __pfx_aa_sk_perm+0x10/0x10 [ 1943.562891][T25728] ? sock_rps_record_flow+0x19/0x350 [ 1943.562915][T25728] ? __pfx_inet_sendmsg+0x10/0x10 [ 1943.562940][T25728] ? inet_sendmsg+0x2f4/0x370 [ 1943.562965][T25728] ? __pfx_inet_sendmsg+0x10/0x10 [ 1943.562991][T25728] __sys_sendto+0x5de/0x710 [ 1943.563015][T25728] ? __pfx___sys_sendto+0x10/0x10 [ 1943.563032][T25728] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1943.563069][T25728] ? __fget_files+0x3a0/0x420 [ 1943.563095][T25728] ? ksys_write+0x242/0x270 [ 1943.563122][T25728] ? __pfx_ksys_write+0x10/0x10 [ 1943.563151][T25728] __x64_sys_sendto+0xde/0x100 [ 1943.563172][T25728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.563194][T25728] do_syscall_64+0x15f/0xf80 [ 1943.563222][T25728] ? trace_irq_disable+0x3b/0x140 [ 1943.563249][T25728] ? clear_bhb_loop+0x40/0x90 [ 1943.563275][T25728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.563296][T25728] RIP: 0033:0x7f3ab719cdd9 [ 1943.563318][T25728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.563335][T25728] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1943.563358][T25728] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 1943.563374][T25728] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1943.563387][T25728] RBP: 00007f3ab8077090 R08: 0000200000000080 R09: 000000000000001c [ 1943.563400][T25728] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1943.563412][T25728] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 1943.563447][T25728] [ 1943.927557][T25730] tipc: Enabled bearer , priority 0 [ 1943.997721][T25730] syzkaller0: entered promiscuous mode [ 1944.003320][T25730] syzkaller0: entered allmulticast mode [ 1944.009651][T25730] tipc: Resetting bearer [ 1944.021123][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16129'. [ 1944.030606][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16129'. [ 1944.198608][T25747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16132'. [ 1944.210119][T25729] tipc: Resetting bearer [ 1944.342713][T25755] netlink: 'syz.0.16134': attribute type 1 has an invalid length. [ 1948.898041][T25729] tipc: Disabling bearer [ 1949.370097][T25794] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1949.741361][T25806] FAULT_INJECTION: forcing a failure. [ 1949.741361][T25806] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.754038][T25806] CPU: 0 UID: 0 PID: 25806 Comm: syz.2.16152 Not tainted syzkaller #0 PREEMPT(full) [ 1949.754068][T25806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1949.754081][T25806] Call Trace: [ 1949.754090][T25806] [ 1949.754099][T25806] dump_stack_lvl+0xe8/0x150 [ 1949.754138][T25806] should_fail_ex+0x412/0x560 [ 1949.754177][T25806] should_failslab+0xa8/0x100 [ 1949.754210][T25806] __kmalloc_cache_noprof+0x88/0x660 [ 1949.754236][T25806] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1949.754264][T25806] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1949.754291][T25806] ? sctp_add_bind_addr+0x8c/0x370 [ 1949.754325][T25806] sctp_add_bind_addr+0x8c/0x370 [ 1949.754358][T25806] sctp_copy_local_addr_list+0x314/0x4f0 [ 1949.754392][T25806] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1949.754420][T25806] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1949.754452][T25806] ? sctp_v4_is_any+0x35/0x60 [ 1949.754479][T25806] ? sctp_copy_one_addr+0x93/0x360 [ 1949.754509][T25806] sctp_bind_addr_copy+0xb3/0x3c0 [ 1949.754538][T25806] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1949.754568][T25806] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1949.754594][T25806] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1949.754617][T25806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1949.754659][T25806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1949.754689][T25806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1949.754721][T25806] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1949.754746][T25806] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1949.754778][T25806] sctp_sendmsg+0x1528/0x2c10 [ 1949.754827][T25806] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1949.754863][T25806] ? aa_sk_perm+0x6d5/0x900 [ 1949.754894][T25806] ? __might_fault+0xaf/0x130 [ 1949.754926][T25806] ? __pfx_aa_sk_perm+0x10/0x10 [ 1949.754960][T25806] ? sock_rps_record_flow+0x19/0x350 [ 1949.754986][T25806] ? __pfx_inet_sendmsg+0x10/0x10 [ 1949.755012][T25806] ? inet_sendmsg+0x2f4/0x370 [ 1949.755036][T25806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1949.755059][T25806] ? __pfx_inet_sendmsg+0x10/0x10 [ 1949.755085][T25806] __sys_sendto+0x5de/0x710 [ 1949.755111][T25806] ? __pfx___sys_sendto+0x10/0x10 [ 1949.755130][T25806] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1949.755176][T25806] ? __fget_files+0x3a0/0x420 [ 1949.755211][T25806] ? ksys_write+0x242/0x270 [ 1949.755241][T25806] ? __pfx_ksys_write+0x10/0x10 [ 1949.755273][T25806] __x64_sys_sendto+0xde/0x100 [ 1949.755295][T25806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.755318][T25806] do_syscall_64+0x15f/0xf80 [ 1949.755346][T25806] ? trace_irq_disable+0x3b/0x140 [ 1949.755373][T25806] ? clear_bhb_loop+0x40/0x90 [ 1949.755400][T25806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.755421][T25806] RIP: 0033:0x7f3ab719cdd9 [ 1949.755443][T25806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1949.755461][T25806] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1949.755484][T25806] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 1949.755499][T25806] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1949.755513][T25806] RBP: 00007f3ab8077090 R08: 0000200000000240 R09: 000000000000001c [ 1949.755528][T25806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.755540][T25806] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 1949.755577][T25806] [ 1950.584602][T25816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16156'. [ 1950.720283][T25827] netlink: 216 bytes leftover after parsing attributes in process `syz.2.16156'. [ 1950.729687][T25827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16156'. [ 1950.738759][T25827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16156'. [ 1950.994366][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16166'. [ 1951.090349][T25845] FAULT_INJECTION: forcing a failure. [ 1951.090349][T25845] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.103016][T25845] CPU: 0 UID: 0 PID: 25845 Comm: syz.3.16168 Not tainted syzkaller #0 PREEMPT(full) [ 1951.103041][T25845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1951.103053][T25845] Call Trace: [ 1951.103062][T25845] [ 1951.103071][T25845] dump_stack_lvl+0xe8/0x150 [ 1951.103108][T25845] should_fail_ex+0x412/0x560 [ 1951.103145][T25845] should_failslab+0xa8/0x100 [ 1951.103171][T25845] ? skb_clone+0x212/0x3a0 [ 1951.103194][T25845] kmem_cache_alloc_noprof+0x87/0x650 [ 1951.103227][T25845] skb_clone+0x212/0x3a0 [ 1951.103253][T25845] bpf_clone_redirect+0x16a/0x4b0 [ 1951.103290][T25845] ? bpf_test_run+0x1d1/0x830 [ 1951.103311][T25845] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1951.103340][T25845] ? __page_table_check_zero+0x6a/0x3e0 [ 1951.103368][T25845] ? __page_table_check_zero+0x397/0x3e0 [ 1951.103396][T25845] ? __pfx___schedule+0x10/0x10 [ 1951.103421][T25845] ? ktime_get+0x45/0x220 [ 1951.103462][T25845] ? preempt_schedule_thunk+0x16/0x30 [ 1951.103491][T25845] ? preempt_schedule_common+0x82/0xd0 [ 1951.103517][T25845] ? bpf_test_run+0x1d1/0x830 [ 1951.103542][T25845] ? bpf_test_timer_continue+0x10c/0x320 [ 1951.103569][T25845] bpf_test_run+0x354/0x830 [ 1951.103614][T25845] ? __pfx_bpf_test_run+0x10/0x10 [ 1951.103657][T25845] ? eth_type_trans+0x348/0x7e0 [ 1951.103701][T25845] ? skb_dst_set+0x72/0x140 [ 1951.103726][T25845] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1951.103782][T25845] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1951.103805][T25845] bpf_prog_test_run+0x2c7/0x340 [ 1951.103840][T25845] __sys_bpf+0x643/0x950 [ 1951.103869][T25845] ? __pfx___sys_bpf+0x10/0x10 [ 1951.103914][T25845] ? ksys_write+0x242/0x270 [ 1951.103943][T25845] ? __pfx_ksys_write+0x10/0x10 [ 1951.103975][T25845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.103999][T25845] __x64_sys_bpf+0x7c/0x90 [ 1951.104026][T25845] do_syscall_64+0x15f/0xf80 [ 1951.104053][T25845] ? trace_irq_disable+0x3b/0x140 [ 1951.104082][T25845] ? clear_bhb_loop+0x40/0x90 [ 1951.104107][T25845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.104129][T25845] RIP: 0033:0x7efcdad9cdd9 [ 1951.104149][T25845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.104167][T25845] RSP: 002b:00007efcdbbc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1951.104190][T25845] RAX: ffffffffffffffda RBX: 00007efcdb015fa0 RCX: 00007efcdad9cdd9 [ 1951.104205][T25845] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1951.104218][T25845] RBP: 00007efcdbbc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.104230][T25845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.104242][T25845] R13: 00007efcdb016038 R14: 00007efcdb015fa0 R15: 00007ffceb740dd8 [ 1951.104276][T25845] [ 1951.472485][ T3388] Bluetooth: hci2: command 0x0405 tx timeout [ 1951.649519][T25855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16172'. [ 1951.730546][T25856] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16169'. [ 1951.809372][T25856] netlink: 188 bytes leftover after parsing attributes in process `syz.0.16169'. [ 1951.926953][T25862] netlink: 'syz.3.16174': attribute type 9 has an invalid length. [ 1951.993046][T25868] netlink: 'syz.3.16174': attribute type 1 has an invalid length. [ 1952.000940][T25868] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16174'. [ 1952.517177][T25889] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16182'. [ 1952.695021][T25897] netlink: 'syz.2.16185': attribute type 3 has an invalid length. [ 1952.855857][T25902] netlink: 'syz.0.16188': attribute type 27 has an invalid length. [ 1952.864261][T25902] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1953.544118][T25934] tipc: Enabled bearer , priority 10 [ 1953.773527][T25943] syzkaller0: entered promiscuous mode [ 1953.779423][T25943] syzkaller0: entered allmulticast mode [ 1955.581286][T26003] FAULT_INJECTION: forcing a failure. [ 1955.581286][T26003] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.632570][T26003] CPU: 0 UID: 0 PID: 26003 Comm: syz.2.16219 Not tainted syzkaller #0 PREEMPT(full) [ 1955.632601][T26003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1955.632612][T26003] Call Trace: [ 1955.632621][T26003] [ 1955.632630][T26003] dump_stack_lvl+0xe8/0x150 [ 1955.632669][T26003] should_fail_ex+0x412/0x560 [ 1955.632708][T26003] should_failslab+0xa8/0x100 [ 1955.632738][T26003] __kmalloc_cache_noprof+0x88/0x660 [ 1955.632764][T26003] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1955.632791][T26003] ? sctp_add_bind_addr+0x8c/0x370 [ 1955.632825][T26003] sctp_add_bind_addr+0x8c/0x370 [ 1955.632856][T26003] sctp_copy_local_addr_list+0x314/0x4f0 [ 1955.632896][T26003] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1955.632924][T26003] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1955.632953][T26003] ? sctp_v6_is_any+0x64/0x80 [ 1955.632983][T26003] ? sctp_copy_one_addr+0x93/0x360 [ 1955.633015][T26003] sctp_bind_addr_copy+0xb3/0x3c0 [ 1955.633043][T26003] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1955.633072][T26003] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1955.633097][T26003] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1955.633126][T26003] ? __local_bh_enable_ip+0xd0/0x130 [ 1955.633154][T26003] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1955.633181][T26003] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1955.633214][T26003] sctp_sendmsg+0x1528/0x2c10 [ 1955.633262][T26003] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1955.633297][T26003] ? aa_sk_perm+0x6d5/0x900 [ 1955.633328][T26003] ? __might_fault+0xaf/0x130 [ 1955.633359][T26003] ? __pfx_aa_sk_perm+0x10/0x10 [ 1955.633394][T26003] ? sock_rps_record_flow+0x19/0x350 [ 1955.633418][T26003] ? __pfx_inet_sendmsg+0x10/0x10 [ 1955.633443][T26003] ? inet_sendmsg+0x2f4/0x370 [ 1955.633468][T26003] ? __pfx_inet_sendmsg+0x10/0x10 [ 1955.633493][T26003] __sys_sendto+0x5de/0x710 [ 1955.633518][T26003] ? __pfx___sys_sendto+0x10/0x10 [ 1955.633536][T26003] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1955.633581][T26003] ? __fget_files+0x3a0/0x420 [ 1955.633613][T26003] ? ksys_write+0x242/0x270 [ 1955.633642][T26003] ? __pfx_ksys_write+0x10/0x10 [ 1955.633675][T26003] __x64_sys_sendto+0xde/0x100 [ 1955.633696][T26003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.633720][T26003] do_syscall_64+0x15f/0xf80 [ 1955.633747][T26003] ? trace_irq_disable+0x3b/0x140 [ 1955.633774][T26003] ? clear_bhb_loop+0x40/0x90 [ 1955.633801][T26003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.633821][T26003] RIP: 0033:0x7f3ab719cdd9 [ 1955.633842][T26003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.633869][T26003] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1955.633892][T26003] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 1955.633908][T26003] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1955.633921][T26003] RBP: 00007f3ab8077090 R08: 0000200000000240 R09: 000000000000001c [ 1955.633935][T26003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1955.633947][T26003] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 1955.633983][T26003] [ 1955.699979][T26005] syzkaller0: entered promiscuous mode [ 1956.026384][T26005] syzkaller0: entered allmulticast mode [ 1956.464548][T26032] netlink: 'syz.1.16231': attribute type 1 has an invalid length. [ 1956.499783][T26032] bond3: entered promiscuous mode [ 1956.505624][T26032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1956.529698][T26034] tipc: Enabling of bearer rejected, already enabled [ 1956.556519][T26034] tipc: Resetting bearer [ 1956.577414][T26040] netlink: 'syz.3.16234': attribute type 2 has an invalid length. [ 1957.341890][T26061] netlink: 'syz.4.16241': attribute type 1 has an invalid length. [ 1957.351778][T26061] __nla_validate_parse: 6 callbacks suppressed [ 1957.351801][T26061] netlink: 228 bytes leftover after parsing attributes in process `syz.4.16241'. [ 1957.585110][T26068] netlink: 'syz.2.16244': attribute type 4 has an invalid length. [ 1957.604576][T26068] netlink: 'syz.2.16244': attribute type 4 has an invalid length. [ 1957.823201][T26078] vlan2: entered allmulticast mode [ 1957.843826][T26074] ip6_vti0: entered promiscuous mode [ 1958.814321][T26112] lo speed is unknown, defaulting to 1000 [ 1958.863803][T26117] FAULT_INJECTION: forcing a failure. [ 1958.863803][T26117] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.896169][T26117] CPU: 1 UID: 0 PID: 26117 Comm: syz.3.16263 Not tainted syzkaller #0 PREEMPT(full) [ 1958.896200][T26117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1958.896213][T26117] Call Trace: [ 1958.896222][T26117] [ 1958.896231][T26117] dump_stack_lvl+0xe8/0x150 [ 1958.896268][T26117] should_fail_ex+0x412/0x560 [ 1958.896305][T26117] should_failslab+0xa8/0x100 [ 1958.896335][T26117] __kmalloc_cache_noprof+0x88/0x660 [ 1958.896360][T26117] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1958.896388][T26117] ? sctp_add_bind_addr+0x8c/0x370 [ 1958.896420][T26117] sctp_add_bind_addr+0x8c/0x370 [ 1958.896452][T26117] sctp_copy_local_addr_list+0x314/0x4f0 [ 1958.896483][T26117] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1958.896511][T26117] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1958.896539][T26117] ? sctp_v6_is_any+0x64/0x80 [ 1958.896569][T26117] ? sctp_copy_one_addr+0x93/0x360 [ 1958.896608][T26117] sctp_bind_addr_copy+0xb3/0x3c0 [ 1958.896634][T26117] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1958.896662][T26117] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1958.896686][T26117] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1958.896713][T26117] ? __local_bh_enable_ip+0xd0/0x130 [ 1958.896741][T26117] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1958.896767][T26117] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1958.896799][T26117] sctp_sendmsg+0x1528/0x2c10 [ 1958.896843][T26117] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1958.896877][T26117] ? aa_sk_perm+0x6d5/0x900 [ 1958.896907][T26117] ? __might_fault+0xaf/0x130 [ 1958.896937][T26117] ? __pfx_aa_sk_perm+0x10/0x10 [ 1958.896971][T26117] ? sock_rps_record_flow+0x19/0x350 [ 1958.896995][T26117] ? __pfx_inet_sendmsg+0x10/0x10 [ 1958.897021][T26117] ? inet_sendmsg+0x2f4/0x370 [ 1958.897043][T26117] ? __pfx_inet_sendmsg+0x10/0x10 [ 1958.897067][T26117] __sys_sendto+0x5de/0x710 [ 1958.897091][T26117] ? __pfx___sys_sendto+0x10/0x10 [ 1958.897110][T26117] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1958.897154][T26117] ? __fget_files+0x3a0/0x420 [ 1958.897188][T26117] ? ksys_write+0x242/0x270 [ 1958.897217][T26117] ? __pfx_ksys_write+0x10/0x10 [ 1958.897248][T26117] __x64_sys_sendto+0xde/0x100 [ 1958.897270][T26117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.897294][T26117] do_syscall_64+0x15f/0xf80 [ 1958.897320][T26117] ? trace_irq_disable+0x3b/0x140 [ 1958.897346][T26117] ? clear_bhb_loop+0x40/0x90 [ 1958.897372][T26117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.897392][T26117] RIP: 0033:0x7efcdad9cdd9 [ 1958.897413][T26117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1958.897432][T26117] RSP: 002b:00007efcdbbc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1958.897457][T26117] RAX: ffffffffffffffda RBX: 00007efcdb015fa0 RCX: 00007efcdad9cdd9 [ 1958.897472][T26117] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1958.897486][T26117] RBP: 00007efcdbbc2090 R08: 0000200000000100 R09: 000000000000001c [ 1958.897501][T26117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.897513][T26117] R13: 00007efcdb016038 R14: 00007efcdb015fa0 R15: 00007ffceb740dd8 [ 1958.897549][T26117] [ 1959.232397][T26104] netlink: 'syz.1.16258': attribute type 1 has an invalid length. [ 1959.283246][T12710] IPVS: starting estimator thread 0... [ 1959.338356][T26127] tipc: Started in network mode [ 1959.343979][T26127] tipc: Node identity d6414ceed406, cluster identity 4711 [ 1959.356914][T26127] tipc: Enabled bearer , priority 0 [ 1959.366003][T26127] syzkaller0: entered promiscuous mode [ 1959.371752][T26127] syzkaller0: entered allmulticast mode [ 1959.386458][T26127] tipc: Resetting bearer [ 1959.398751][T26126] tipc: Resetting bearer [ 1959.456139][T26126] tipc: Disabling bearer [ 1959.561681][T26122] IPVS: using max 28 ests per chain, 67200 per kthread [ 1960.502992][T26176] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.16285'. [ 1960.514532][T26176] siw: device registration error -23 [ 1960.624228][T26179] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16286'. [ 1960.667453][T26179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1960.744189][T26193] FAULT_INJECTION: forcing a failure. [ 1960.744189][T26193] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.796092][T26193] CPU: 0 UID: 0 PID: 26193 Comm: syz.0.16290 Not tainted syzkaller #0 PREEMPT(full) [ 1960.796122][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1960.796135][T26193] Call Trace: [ 1960.796144][T26193] [ 1960.796153][T26193] dump_stack_lvl+0xe8/0x150 [ 1960.796191][T26193] should_fail_ex+0x412/0x560 [ 1960.796229][T26193] should_failslab+0xa8/0x100 [ 1960.796256][T26193] ? skb_clone+0x212/0x3a0 [ 1960.796279][T26193] kmem_cache_alloc_noprof+0x87/0x650 [ 1960.796305][T26193] ? __netlink_lookup+0xc6/0x8b0 [ 1960.796335][T26193] skb_clone+0x212/0x3a0 [ 1960.796361][T26193] __netlink_deliver_tap+0x404/0x850 [ 1960.796396][T26193] ? netlink_deliver_tap+0x2e/0x1b0 [ 1960.796419][T26193] netlink_deliver_tap+0x19c/0x1b0 [ 1960.796441][T26193] netlink_unicast+0x730/0x8e0 [ 1960.796483][T26193] netlink_sendmsg+0x813/0xb40 [ 1960.796513][T26193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1960.796539][T26193] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1960.796566][T26193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1960.796594][T26193] ____sys_sendmsg+0x972/0x9f0 [ 1960.796617][T26193] ? __might_fault+0xaf/0x130 [ 1960.796646][T26193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1960.796678][T26193] ? import_iovec+0x73/0xa0 [ 1960.796707][T26193] ___sys_sendmsg+0x2a5/0x360 [ 1960.796730][T26193] ? __lock_acquire+0x6b5/0x2cf0 [ 1960.796764][T26193] ? __pfx____sys_sendmsg+0x10/0x10 [ 1960.796832][T26193] ? __fget_files+0x2a/0x420 [ 1960.796854][T26193] ? __fget_files+0x3a0/0x420 [ 1960.796888][T26193] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1960.796915][T26193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1960.796949][T26193] ? __pfx_ksys_write+0x10/0x10 [ 1960.796985][T26193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.797009][T26193] do_syscall_64+0x15f/0xf80 [ 1960.797037][T26193] ? trace_irq_disable+0x3b/0x140 [ 1960.797062][T26193] ? clear_bhb_loop+0x40/0x90 [ 1960.797089][T26193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.797110][T26193] RIP: 0033:0x7f35d0d9cdd9 [ 1960.797130][T26193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1960.797147][T26193] RSP: 002b:00007f35d1ca2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1960.797171][T26193] RAX: ffffffffffffffda RBX: 00007f35d1015fa0 RCX: 00007f35d0d9cdd9 [ 1960.797186][T26193] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 1960.797200][T26193] RBP: 00007f35d1ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.797213][T26193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.797226][T26193] R13: 00007f35d1016038 R14: 00007f35d1015fa0 R15: 00007ffffcf417e8 [ 1960.797262][T26193] [ 1960.797343][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16290'. [ 1961.108780][T26193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.371344][T22922] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1961.389787][T22922] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.535524][T26215] Bluetooth: MGMT ver 1.23 [ 1961.611861][T26221] FAULT_INJECTION: forcing a failure. [ 1961.611861][T26221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.625486][T26221] CPU: 0 UID: 0 PID: 26221 Comm: syz.0.16298 Not tainted syzkaller #0 PREEMPT(full) [ 1961.625515][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1961.625528][T26221] Call Trace: [ 1961.625536][T26221] [ 1961.625545][T26221] dump_stack_lvl+0xe8/0x150 [ 1961.625592][T26221] should_fail_ex+0x412/0x560 [ 1961.625631][T26221] _copy_from_user+0x2d/0xb0 [ 1961.625658][T26221] bpf_test_init+0xd8/0x150 [ 1961.625685][T26221] bpf_prog_test_run_xdp+0x529/0x1160 [ 1961.625725][T26221] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1961.625754][T26221] ? __fget_files+0x2a/0x420 [ 1961.625782][T26221] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1961.625805][T26221] bpf_prog_test_run+0x2c7/0x340 [ 1961.625839][T26221] __sys_bpf+0x643/0x950 [ 1961.625868][T26221] ? __pfx___sys_bpf+0x10/0x10 [ 1961.625912][T26221] ? ksys_write+0x242/0x270 [ 1961.625940][T26221] ? __pfx_ksys_write+0x10/0x10 [ 1961.625970][T26221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.625993][T26221] __x64_sys_bpf+0x7c/0x90 [ 1961.626019][T26221] do_syscall_64+0x15f/0xf80 [ 1961.626047][T26221] ? trace_irq_disable+0x3b/0x140 [ 1961.626073][T26221] ? clear_bhb_loop+0x40/0x90 [ 1961.626100][T26221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.626121][T26221] RIP: 0033:0x7f35d0d9cdd9 [ 1961.626142][T26221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1961.626161][T26221] RSP: 002b:00007f35d1ca2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1961.626185][T26221] RAX: ffffffffffffffda RBX: 00007f35d1015fa0 RCX: 00007f35d0d9cdd9 [ 1961.626201][T26221] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1961.626214][T26221] RBP: 00007f35d1ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.626227][T26221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.626240][T26221] R13: 00007f35d1016038 R14: 00007f35d1015fa0 R15: 00007ffffcf417e8 [ 1961.626275][T26221] [ 1962.308483][T26245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16304'. [ 1963.561631][T26261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16308'. [ 1963.572878][T26261] netlink: 'syz.3.16308': attribute type 13 has an invalid length. [ 1963.580846][T26261] netlink: 'syz.3.16308': attribute type 17 has an invalid length. [ 1963.592824][T26261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1963.641035][T28844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1963.643813][ T3388] Bluetooth: hci2: command 0x0405 tx timeout [ 1963.795482][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16308'. [ 1964.475884][T26214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1964.485617][T26215] netlink: 'syz.1.16297': attribute type 1 has an invalid length. [ 1964.493699][T26215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16297'. [ 1964.776078][T26279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1964.803488][T26279] team0: Failed to send port change of device bond4 via netlink (err -105) [ 1964.812336][T26279] team0: Failed to send options change via netlink (err -105) [ 1964.819844][T26279] team0: Port device bond4 added [ 1964.827872][T12090] team0: Failed to send port change of device bond4 via netlink (err -105) [ 1965.209826][T26296] lo speed is unknown, defaulting to 1000 [ 1965.549045][T26296] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1965.556196][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1965.948505][T26325] lo speed is unknown, defaulting to 1000 [ 1966.471078][T26331] tipc: Enabling of bearer rejected, failed to enable media [ 1966.624502][T26336] syzkaller0: entered promiscuous mode [ 1966.633232][T26336] syzkaller0: entered allmulticast mode [ 1966.808863][T26353] IPv6: NLM_F_CREATE should be specified when creating new route [ 1966.816814][T26354] IPv6: NLM_F_CREATE should be specified when creating new route [ 1966.824954][T26353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1966.832189][T26353] IPv6: NLM_F_CREATE should be set when creating new route [ 1966.839469][T26353] IPv6: NLM_F_CREATE should be set when creating new route [ 1966.846815][T26353] IPv6: NLM_F_CREATE should be set when creating new route [ 1966.854373][T26354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1966.862259][T26351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1968.576888][T26378] netlink: 'syz.2.16332': attribute type 1 has an invalid length. [ 1968.585295][T26378] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16332'. [ 1971.294788][T26375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16331'. [ 1971.422926][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16334'. [ 1971.433588][T26386] bridge_slave_1: default FDB implementation only supports local addresses [ 1971.631320][T26402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16340'. [ 1971.640797][T26402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1971.648093][T26402] IPv6: NLM_F_CREATE should be set when creating new route [ 1971.655620][T26402] IPv6: NLM_F_CREATE should be set when creating new route [ 1971.882336][T26408] syz_tun: entered allmulticast mode [ 1971.981724][T26419] netlink: 'syz.1.16346': attribute type 1 has an invalid length. [ 1972.085404][T12086] bridge_slave_1: left allmulticast mode [ 1972.091197][T12086] bridge_slave_1: left promiscuous mode [ 1972.097013][T12086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.098944][T26422] netlink: 'syz.0.16348': attribute type 3 has an invalid length. [ 1972.109598][T26427] FAULT_INJECTION: forcing a failure. [ 1972.109598][T26427] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.148384][T26427] CPU: 0 UID: 0 PID: 26427 Comm: syz.4.16349 Not tainted syzkaller #0 PREEMPT(full) [ 1972.148415][T26427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1972.148428][T26427] Call Trace: [ 1972.148445][T26427] [ 1972.148455][T26427] dump_stack_lvl+0xe8/0x150 [ 1972.148493][T26427] should_fail_ex+0x412/0x560 [ 1972.148532][T26427] should_failslab+0xa8/0x100 [ 1972.148563][T26427] __kmalloc_cache_noprof+0x88/0x660 [ 1972.148589][T26427] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1972.148616][T26427] ? sctp_add_bind_addr+0x8c/0x370 [ 1972.148649][T26427] sctp_add_bind_addr+0x8c/0x370 [ 1972.148682][T26427] sctp_copy_local_addr_list+0x314/0x4f0 [ 1972.148713][T26427] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1972.148740][T26427] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1972.148770][T26427] ? sctp_v6_is_any+0x64/0x80 [ 1972.148801][T26427] ? sctp_copy_one_addr+0x93/0x360 [ 1972.148833][T26427] sctp_bind_addr_copy+0xb3/0x3c0 [ 1972.148862][T26427] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1972.148891][T26427] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1972.148916][T26427] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1972.148945][T26427] ? __local_bh_enable_ip+0xd0/0x130 [ 1972.148973][T26427] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1972.149000][T26427] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1972.149032][T26427] sctp_sendmsg+0x1528/0x2c10 [ 1972.149081][T26427] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1972.149116][T26427] ? aa_sk_perm+0x6d5/0x900 [ 1972.149147][T26427] ? __might_fault+0xaf/0x130 [ 1972.149178][T26427] ? __pfx_aa_sk_perm+0x10/0x10 [ 1972.149213][T26427] ? sock_rps_record_flow+0x19/0x350 [ 1972.149237][T26427] ? __pfx_inet_sendmsg+0x10/0x10 [ 1972.149263][T26427] ? inet_sendmsg+0x2f4/0x370 [ 1972.149287][T26427] ? __pfx_inet_sendmsg+0x10/0x10 [ 1972.149313][T26427] __sys_sendto+0x5de/0x710 [ 1972.149338][T26427] ? __pfx___sys_sendto+0x10/0x10 [ 1972.149356][T26427] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1972.149401][T26427] ? __fget_files+0x3a0/0x420 [ 1972.149443][T26427] ? ksys_write+0x242/0x270 [ 1972.149472][T26427] ? __pfx_ksys_write+0x10/0x10 [ 1972.149505][T26427] __x64_sys_sendto+0xde/0x100 [ 1972.149527][T26427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.149550][T26427] do_syscall_64+0x15f/0xf80 [ 1972.149579][T26427] ? trace_irq_disable+0x3b/0x140 [ 1972.149607][T26427] ? clear_bhb_loop+0x40/0x90 [ 1972.149634][T26427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.149655][T26427] RIP: 0033:0x7fb475f9cdd9 [ 1972.149675][T26427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1972.149692][T26427] RSP: 002b:00007fb476e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1972.149716][T26427] RAX: ffffffffffffffda RBX: 00007fb476215fa0 RCX: 00007fb475f9cdd9 [ 1972.149731][T26427] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1972.149745][T26427] RBP: 00007fb476e44090 R08: 0000200000000240 R09: 000000000000001c [ 1972.149759][T26427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1972.149771][T26427] R13: 00007fb476216038 R14: 00007fb476215fa0 R15: 00007fffe4dc6b48 [ 1972.149807][T26427] [ 1972.151189][T12086] bridge_slave_0: left promiscuous mode [ 1972.509763][T12086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.626445][T12086] erspan0 (unregistering): left promiscuous mode [ 1972.668251][T12086] gretap0 (unregistering): left promiscuous mode [ 1972.856591][T12086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.870106][T12086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.882299][T12086] bond0 (unregistering): Released all slaves [ 1972.896397][T12086] bond1 (unregistering): Released all slaves [ 1972.922716][T12086] bond2 (unregistering): Released all slaves [ 1972.943899][T12086] bond3 (unregistering): Released all slaves [ 1972.979146][T12086] bond4 (unregistering): Released all slaves [ 1973.007146][T12086] bond5 (unregistering): Released all slaves [ 1973.030305][T12086] bond6 (unregistering): Released all slaves [ 1973.069247][T12086] bond7 (unregistering): Released all slaves [ 1973.095448][T12086] bond8 (unregistering): Released all slaves [ 1973.117363][T12086] bond9 (unregistering): (slave veth5): Releasing active interface [ 1973.127542][T12086] bond9 (unregistering): (slave veth7): Releasing active interface [ 1973.154662][T12086] bond9 (unregistering): Released all slaves [ 1973.175903][T12086] bond10 (unregistering): Released all slaves [ 1973.197233][T12086] bond11 (unregistering): Released all slaves [ 1973.287222][T26404] syz_tun: left allmulticast mode [ 1973.608321][T12086] tipc: Disabling bearer [ 1973.658831][T12086] tipc: Disabling bearer [ 1973.698532][T12086] tipc: Left network mode [ 1973.699937][T26449] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16352'. [ 1973.722565][T26449] netlink: 188 bytes leftover after parsing attributes in process `syz.0.16352'. [ 1974.621001][T26482] tipc: Enabling of bearer rejected, failed to enable media [ 1974.659960][T26479] lo speed is unknown, defaulting to 1000 [ 1974.689736][T26486] syzkaller0: entered promiscuous mode [ 1974.695594][T26486] syzkaller0: entered allmulticast mode [ 1974.783885][T26488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16367'. [ 1974.797445][T26488] netlink: 'syz.1.16367': attribute type 10 has an invalid length. [ 1975.821736][T26488] team0: Port device dummy0 added [ 1976.044500][T29525] IPVS: starting estimator thread 0... [ 1976.150806][T26498] IPVS: using max 26 ests per chain, 62400 per kthread [ 1976.294035][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1976.296408][T12086] hsr_slave_0: left promiscuous mode [ 1976.315814][T12086] hsr_slave_1: left promiscuous mode [ 1976.323165][T12086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1976.332962][T12086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1976.336099][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16374'. [ 1976.354725][T12086] batman_adv: batadv0: Interface deactivated: dummy0 [ 1976.361503][T12086] batman_adv: batadv0: Removing interface: dummy0 [ 1976.378893][T26508] netlink: 80 bytes leftover after parsing attributes in process `syz.2.16376'. [ 1976.390795][T26509] netlink: 'syz.0.16374': attribute type 13 has an invalid length. [ 1976.404099][T26509] netlink: 'syz.0.16374': attribute type 17 has an invalid length. [ 1976.522092][T26510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16374'. [ 1976.669030][T12086] team0 (unregistering): Port device team_slave_1 removed [ 1976.701558][T12086] team0 (unregistering): Port device team_slave_0 removed [ 1976.935608][T26509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1977.319858][T26529] lo speed is unknown, defaulting to 1000 [ 1977.407013][T26524] tipc: Enabling of bearer rejected, failed to enable media [ 1977.514792][T26524] syzkaller0: entered promiscuous mode [ 1977.521003][T26524] syzkaller0: entered allmulticast mode [ 1977.545680][T12086] IPVS: stop unused estimator thread 0... [ 1977.712525][T26544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16387'. [ 1981.920085][T26569] tipc: Enabling of bearer rejected, failed to enable media [ 1981.946841][T26580] netlink: 'syz.3.16393': attribute type 1 has an invalid length. [ 1981.965454][T26580] netlink: 'syz.3.16393': attribute type 3 has an invalid length. [ 1981.998556][T26580] netlink: 'syz.3.16393': attribute type 16 has an invalid length. [ 1982.030685][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1982.038760][ C1] lec:lec_tx_timeout: lec0 [ 1982.066106][T26580] netlink: 204 bytes leftover after parsing attributes in process `syz.3.16393'. [ 1982.170372][T26594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16397'. [ 1982.194693][T26586] netlink: 'syz.1.16395': attribute type 1 has an invalid length. [ 1982.222272][T26563] lo speed is unknown, defaulting to 1000 [ 1982.328108][T26586] bond5: entered promiscuous mode [ 1982.335810][T26586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1982.417285][T26605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1982.428111][T26605] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 1982.440319][T26605] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1982.454026][T26605] bond5: (slave vcan1): making interface the new active one [ 1982.462317][T26605] vcan1: entered promiscuous mode [ 1982.470887][T26605] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 1982.541406][T26595] syzkaller0: entered promiscuous mode [ 1982.546982][T26595] syzkaller0: entered allmulticast mode [ 1983.003174][T26594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1984.215386][ T6734] lec:lec_start_xmit: lec0:No lecd attached [ 1986.532603][T26608] lo speed is unknown, defaulting to 1000 [ 1987.118371][T26661] netlink: 'syz.2.16412': attribute type 9 has an invalid length. [ 1987.154545][T26661] netlink: 'syz.2.16412': attribute type 11 has an invalid length. [ 1987.172979][T26661] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.16412'. [ 1988.207843][T26705] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1990.031004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 1990.039290][ C1] lec:lec_tx_timeout: lec0 [ 1991.923665][T26697] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1991.947083][T26697] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1991.986636][T26697] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1992.026458][T26709] lo speed is unknown, defaulting to 1000 [ 1992.788129][T26736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.858742][T26743] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16436'. [ 1993.035596][T26748] FAULT_INJECTION: forcing a failure. [ 1993.035596][T26748] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.048367][T26748] CPU: 0 UID: 0 PID: 26748 Comm: syz.2.16438 Not tainted syzkaller #0 PREEMPT(full) [ 1993.048397][T26748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1993.048410][T26748] Call Trace: [ 1993.048422][T26748] [ 1993.048431][T26748] dump_stack_lvl+0xe8/0x150 [ 1993.048469][T26748] should_fail_ex+0x412/0x560 [ 1993.048506][T26748] should_failslab+0xa8/0x100 [ 1993.048533][T26748] ? skb_clone+0x212/0x3a0 [ 1993.048556][T26748] kmem_cache_alloc_noprof+0x87/0x650 [ 1993.048581][T26748] ? __bpf_redirect+0xcb4/0x12a0 [ 1993.048614][T26748] skb_clone+0x212/0x3a0 [ 1993.048640][T26748] bpf_clone_redirect+0x16a/0x4b0 [ 1993.048678][T26748] ? bpf_test_run+0x1d1/0x830 [ 1993.048699][T26748] bpf_prog_9299a0b1a05450b6+0x5f/0x68 [ 1993.048725][T26748] ? arch_stack_walk+0xfb/0x150 [ 1993.048756][T26748] ? __pfx___schedule+0x10/0x10 [ 1993.048779][T26748] ? ktime_get+0x45/0x220 [ 1993.048818][T26748] ? preempt_schedule_thunk+0x16/0x30 [ 1993.048846][T26748] ? preempt_schedule_common+0x82/0xd0 [ 1993.048870][T26748] ? bpf_test_run+0x1d1/0x830 [ 1993.048893][T26748] ? bpf_test_timer_continue+0x10c/0x320 [ 1993.048918][T26748] bpf_test_run+0x354/0x830 [ 1993.048960][T26748] ? __pfx_bpf_test_run+0x10/0x10 [ 1993.048990][T26748] ? slab_build_skb+0x52/0x410 [ 1993.049025][T26748] ? eth_type_trans+0x348/0x7e0 [ 1993.049056][T26748] ? convert___skb_to_skb+0x3d/0x5b0 [ 1993.049079][T26748] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1993.049121][T26748] ? __fget_files+0x3a0/0x420 [ 1993.049141][T26748] ? __fget_files+0x2a/0x420 [ 1993.049166][T26748] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1993.049187][T26748] bpf_prog_test_run+0x2c7/0x340 [ 1993.049227][T26748] __sys_bpf+0x643/0x950 [ 1993.049256][T26748] ? __pfx___sys_bpf+0x10/0x10 [ 1993.049298][T26748] ? ksys_write+0x242/0x270 [ 1993.049326][T26748] ? __pfx_ksys_write+0x10/0x10 [ 1993.049354][T26748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.049376][T26748] __x64_sys_bpf+0x7c/0x90 [ 1993.049401][T26748] do_syscall_64+0x15f/0xf80 [ 1993.049427][T26748] ? trace_irq_disable+0x3b/0x140 [ 1993.049454][T26748] ? clear_bhb_loop+0x40/0x90 [ 1993.049479][T26748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.049500][T26748] RIP: 0033:0x7f3ab719cdd9 [ 1993.049519][T26748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.049537][T26748] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1993.049561][T26748] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 1993.049576][T26748] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1993.049589][T26748] RBP: 00007f3ab8077090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.049601][T26748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1993.049613][T26748] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 1993.049645][T26748] [ 1993.360575][T26736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.538011][T26752] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1993.724417][T26736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.936428][T26736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1994.179066][T11206] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.244498][T11206] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.279868][T11206] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.307040][T12086] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.962911][T26795] netlink: 'syz.0.16450': attribute type 13 has an invalid length. [ 1995.235737][T26793] lo speed is unknown, defaulting to 1000 [ 1995.932096][T26813] lo speed is unknown, defaulting to 1000 [ 1996.574397][T26852] mac80211_hwsim hwsim137 wlan0: Caught tx_queue_len zero misconfig [ 1996.671271][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1997.204309][T26878] lo speed is unknown, defaulting to 1000 [ 1997.239970][T26876] lo speed is unknown, defaulting to 1000 [ 1997.689752][T26895] siw: device registration error -23 [ 1997.730515][T26895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16478'. [ 1997.798779][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16480'. [ 1997.824648][T26899] FAULT_INJECTION: forcing a failure. [ 1997.824648][T26899] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.851193][T26899] CPU: 1 UID: 0 PID: 26899 Comm: syz.2.16480 Not tainted syzkaller #0 PREEMPT(full) [ 1997.851226][T26899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1997.851239][T26899] Call Trace: [ 1997.851248][T26899] [ 1997.851258][T26899] dump_stack_lvl+0xe8/0x150 [ 1997.851297][T26899] should_fail_ex+0x412/0x560 [ 1997.851337][T26899] should_failslab+0xa8/0x100 [ 1997.851368][T26899] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1997.851406][T26899] ? __alloc_skb+0x1d0/0x7d0 [ 1997.851425][T26899] ? __local_bh_enable_ip+0xd0/0x130 [ 1997.851461][T26899] __alloc_skb+0x1d0/0x7d0 [ 1997.851487][T26899] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1997.851527][T26899] rtmsg_ifinfo+0x8c/0x1a0 [ 1997.851562][T26899] __dev_notify_flags+0xf2/0x310 [ 1997.851587][T26899] ? __pfx___dev_notify_flags+0x10/0x10 [ 1997.851607][T26899] ? __dev_change_flags+0x5fe/0x7e0 [ 1997.851635][T26899] ? __pfx___dev_change_flags+0x10/0x10 [ 1997.851656][T26899] ? ktime_get+0x45/0x220 [ 1997.851687][T26899] ? ktime_get+0x1f5/0x220 [ 1997.851719][T26899] netif_change_flags+0xe8/0x1a0 [ 1997.851747][T26899] do_setlink+0xfa5/0x45a0 [ 1997.851788][T26899] ? __pfx_do_setlink+0x10/0x10 [ 1997.851812][T26899] ? finish_task_switch+0x41f/0xbe0 [ 1997.851841][T26899] ? lockdep_hardirqs_on+0x7a/0x110 [ 1997.851870][T26899] ? finish_task_switch+0x41f/0xbe0 [ 1997.851903][T26899] ? trace_sched_exit_tp+0x3a/0x130 [ 1997.851933][T26899] ? __schedule+0x17ca/0x5680 [ 1997.851973][T26899] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 1997.852014][T26899] ? __mutex_lock+0xef6/0x1550 [ 1997.852043][T26899] ? __pfx___nla_validate_parse+0x10/0x10 [ 1997.852069][T26899] ? __pfx___schedule+0x10/0x10 [ 1997.852099][T26899] ? br_setport+0x1294/0x1680 [ 1997.852134][T26899] ? preempt_schedule_thunk+0x16/0x30 [ 1997.852163][T26899] ? preempt_schedule_common+0x82/0xd0 [ 1997.852194][T26899] ? br_port_slave_changelink+0x139/0x150 [ 1997.852225][T26899] ? preempt_schedule_thunk+0x16/0x30 [ 1997.852257][T26899] ? __local_bh_enable_ip+0xe1/0x130 [ 1997.852287][T26899] ? br_port_slave_changelink+0x139/0x150 [ 1997.852322][T26899] rtnl_newlink+0x15ad/0x1bb0 [ 1997.852357][T26899] ? __pfx_rtnl_newlink+0x10/0x10 [ 1997.852384][T26899] ? __lock_acquire+0x6b5/0x2cf0 [ 1997.852426][T26899] ? __lock_acquire+0x6b5/0x2cf0 [ 1997.852468][T26899] ? unwind_next_frame+0xa6/0x2550 [ 1997.852500][T26899] ? unwind_next_frame+0xa6/0x2550 [ 1997.852526][T26899] ? is_bpf_text_address+0x26/0x2b0 [ 1997.852570][T26899] ? is_bpf_text_address+0x26/0x2b0 [ 1997.852605][T26899] ? __lock_acquire+0x6b5/0x2cf0 [ 1997.852640][T26899] ? kernel_text_address+0xa5/0xe0 [ 1997.852668][T26899] ? __kernel_text_address+0xd/0x30 [ 1997.852693][T26899] ? unwind_get_return_address+0x4d/0x90 [ 1997.852715][T26899] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1997.852743][T26899] ? arch_stack_walk+0xfb/0x150 [ 1997.852778][T26899] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1997.852827][T26899] ? __pfx_rtnl_newlink+0x10/0x10 [ 1997.852847][T26899] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1997.852877][T26899] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1997.852901][T26899] ? netlink_sendmsg+0x5d4/0xb40 [ 1997.852924][T26899] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1997.852954][T26899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1997.852987][T26899] ? __lock_acquire+0x6b5/0x2cf0 [ 1997.853033][T26899] netlink_rcv_skb+0x232/0x4b0 [ 1997.853056][T26899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1997.853090][T26899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1997.853127][T26899] ? netlink_deliver_tap+0x2e/0x1b0 [ 1997.853147][T26899] ? netlink_deliver_tap+0x2e/0x1b0 [ 1997.853176][T26899] netlink_unicast+0x75c/0x8e0 [ 1997.853218][T26899] netlink_sendmsg+0x813/0xb40 [ 1997.853249][T26899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1997.853276][T26899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1997.853301][T26899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1997.853330][T26899] ____sys_sendmsg+0x972/0x9f0 [ 1997.853353][T26899] ? __might_fault+0xaf/0x130 [ 1997.853392][T26899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1997.853425][T26899] ? import_iovec+0x73/0xa0 [ 1997.853452][T26899] ___sys_sendmsg+0x2a5/0x360 [ 1997.853473][T26899] ? __lock_acquire+0x6b5/0x2cf0 [ 1997.853507][T26899] ? __pfx____sys_sendmsg+0x10/0x10 [ 1997.853569][T26899] ? __fget_files+0x2a/0x420 [ 1997.853591][T26899] ? __fget_files+0x3a0/0x420 [ 1997.853625][T26899] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1997.853652][T26899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1997.853686][T26899] ? __pfx_ksys_write+0x10/0x10 [ 1997.853723][T26899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.853746][T26899] do_syscall_64+0x15f/0xf80 [ 1997.853774][T26899] ? trace_irq_disable+0x3b/0x140 [ 1997.853801][T26899] ? clear_bhb_loop+0x40/0x90 [ 1997.853826][T26899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.853845][T26899] RIP: 0033:0x7f3ab719cdd9 [ 1997.853865][T26899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1997.853882][T26899] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1997.853904][T26899] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 1997.853919][T26899] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 1997.853933][T26899] RBP: 00007f3ab8077090 R08: 0000000000000000 R09: 0000000000000000 [ 1997.853946][T26899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.853957][T26899] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 1997.853991][T26899] [ 1997.865077][T26901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16481'. [ 1997.963240][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16481'. [ 1998.806539][T26926] netlink: 'syz.4.16488': attribute type 39 has an invalid length. [ 1999.185462][T26944] netlink: 'syz.2.16492': attribute type 2 has an invalid length. [ 1999.198392][T26944] netlink: 'syz.2.16492': attribute type 8 has an invalid length. [ 1999.206720][T26944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16492'. [ 1999.644898][T26960] ipvlan9: entered promiscuous mode [ 1999.990077][T26968] netlink: 'syz.3.16501': attribute type 1 has an invalid length. [ 2000.001892][T26973] FAULT_INJECTION: forcing a failure. [ 2000.001892][T26973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2000.002901][T26966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16500'. [ 2000.024384][T26968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16501'. [ 2000.037960][T26973] CPU: 0 UID: 0 PID: 26973 Comm: syz.4.16504 Not tainted syzkaller #0 PREEMPT(full) [ 2000.037990][T26973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2000.038003][T26973] Call Trace: [ 2000.038012][T26973] [ 2000.038022][T26973] dump_stack_lvl+0xe8/0x150 [ 2000.038062][T26973] should_fail_ex+0x412/0x560 [ 2000.038101][T26973] _copy_from_user+0x2d/0xb0 [ 2000.038126][T26973] do_ipt_set_ctl+0x6a5/0xe00 [ 2000.038159][T26973] ? rcu_is_watching+0x15/0xb0 [ 2000.038182][T26973] ? trace_contention_end+0x3d/0x140 [ 2000.038208][T26973] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2000.038259][T26973] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2000.038289][T26973] ? __pfx___mutex_lock+0x10/0x10 [ 2000.038319][T26973] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2000.038356][T26973] ? __pfx_aa_sk_perm+0x10/0x10 [ 2000.038396][T26973] nf_setsockopt+0x26f/0x290 [ 2000.038434][T26973] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2000.038465][T26973] do_sock_setsockopt+0x17c/0x1b0 [ 2000.038492][T26973] __x64_sys_setsockopt+0x13d/0x1b0 [ 2000.038517][T26973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.038539][T26973] do_syscall_64+0x15f/0xf80 [ 2000.038564][T26973] ? trace_irq_disable+0x3b/0x140 [ 2000.038589][T26973] ? clear_bhb_loop+0x40/0x90 [ 2000.038621][T26973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.038641][T26973] RIP: 0033:0x7fb475f9cdd9 [ 2000.038661][T26973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2000.038679][T26973] RSP: 002b:00007fb476e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2000.038700][T26973] RAX: ffffffffffffffda RBX: 00007fb476215fa0 RCX: 00007fb475f9cdd9 [ 2000.038714][T26973] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2000.038726][T26973] RBP: 00007fb476e44090 R08: 0000000000000428 R09: 0000000000000000 [ 2000.038738][T26973] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2000.038751][T26973] R13: 00007fb476216038 R14: 00007fb476215fa0 R15: 00007fffe4dc6b48 [ 2000.038784][T26973] [ 2000.314657][T26981] netlink: 'syz.3.16505': attribute type 1 has an invalid length. [ 2000.393986][T26984] netlink: 80 bytes leftover after parsing attributes in process `syz.2.16506'. [ 2000.466305][T26986] netlink: 188 bytes leftover after parsing attributes in process `syz.2.16506'. [ 2000.627590][T26991] batadv_slave_0: Caught tx_queue_len zero misconfig [ 2000.934954][T26999] netlink: 200 bytes leftover after parsing attributes in process `syz.4.16511'. [ 2001.043856][T27002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16511'. [ 2001.191567][T27006] pim6reg99999991: entered allmulticast mode [ 2001.739394][T27019] vlan2: entered allmulticast mode [ 2001.871750][T27026] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 2001.894002][T27026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16520'. [ 2002.039322][T27038] FAULT_INJECTION: forcing a failure. [ 2002.039322][T27038] name failslab, interval 1, probability 0, space 0, times 0 [ 2002.102466][T27038] CPU: 0 UID: 0 PID: 27038 Comm: syz.2.16522 Not tainted syzkaller #0 PREEMPT(full) [ 2002.102498][T27038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2002.102511][T27038] Call Trace: [ 2002.102520][T27038] [ 2002.102529][T27038] dump_stack_lvl+0xe8/0x150 [ 2002.102570][T27038] should_fail_ex+0x412/0x560 [ 2002.102609][T27038] should_failslab+0xa8/0x100 [ 2002.102640][T27038] __kmalloc_cache_noprof+0x88/0x660 [ 2002.102666][T27038] ? sctp_v6_cmp_addr+0x15/0xd0 [ 2002.102693][T27038] ? sctp_add_bind_addr+0x8c/0x370 [ 2002.102726][T27038] sctp_add_bind_addr+0x8c/0x370 [ 2002.102759][T27038] sctp_copy_local_addr_list+0x314/0x4f0 [ 2002.102791][T27038] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2002.102818][T27038] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2002.102849][T27038] ? sctp_v6_is_any+0x64/0x80 [ 2002.102880][T27038] ? sctp_copy_one_addr+0x93/0x360 [ 2002.102911][T27038] sctp_bind_addr_copy+0xb3/0x3c0 [ 2002.102941][T27038] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2002.102969][T27038] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2002.102994][T27038] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2002.103020][T27038] ? __local_bh_enable_ip+0xd0/0x130 [ 2002.103049][T27038] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2002.103076][T27038] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2002.103107][T27038] sctp_sendmsg+0x1528/0x2c10 [ 2002.103135][T27038] ? unwind_next_frame+0xa6/0x2550 [ 2002.103183][T27038] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2002.103219][T27038] ? aa_sk_perm+0x6d5/0x900 [ 2002.103259][T27038] ? __pfx_aa_sk_perm+0x10/0x10 [ 2002.103295][T27038] ? sock_rps_record_flow+0x19/0x350 [ 2002.103323][T27038] ? inet_sendmsg+0x2f4/0x370 [ 2002.103351][T27038] ____sys_sendmsg+0x80a/0x9f0 [ 2002.103393][T27038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2002.103426][T27038] ? import_iovec+0x73/0xa0 [ 2002.103454][T27038] ___sys_sendmsg+0x2a5/0x360 [ 2002.103476][T27038] ? __lock_acquire+0x6b5/0x2cf0 [ 2002.103511][T27038] ? __pfx____sys_sendmsg+0x10/0x10 [ 2002.103573][T27038] ? __fget_files+0x2a/0x420 [ 2002.103596][T27038] ? __fget_files+0x3a0/0x420 [ 2002.103629][T27038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2002.103656][T27038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2002.103690][T27038] ? __pfx_ksys_write+0x10/0x10 [ 2002.103727][T27038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.103751][T27038] do_syscall_64+0x15f/0xf80 [ 2002.103779][T27038] ? trace_irq_disable+0x3b/0x140 [ 2002.103806][T27038] ? clear_bhb_loop+0x40/0x90 [ 2002.103832][T27038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.103853][T27038] RIP: 0033:0x7f3ab719cdd9 [ 2002.103873][T27038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2002.103891][T27038] RSP: 002b:00007f3ab8077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2002.103915][T27038] RAX: ffffffffffffffda RBX: 00007f3ab7415fa0 RCX: 00007f3ab719cdd9 [ 2002.103929][T27038] RDX: 0000000000040085 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 2002.103943][T27038] RBP: 00007f3ab8077090 R08: 0000000000000000 R09: 0000000000000000 [ 2002.103956][T27038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2002.103969][T27038] R13: 00007f3ab7416038 R14: 00007f3ab7415fa0 R15: 00007fffc9455318 [ 2002.104004][T27038] [ 2002.572570][T27048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2003.003564][T27061] __nla_validate_parse: 2 callbacks suppressed [ 2003.003588][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16530'. [ 2003.058775][T27061] netlink: 'syz.4.16530': attribute type 13 has an invalid length. [ 2003.089699][T27061] netlink: 'syz.4.16530': attribute type 17 has an invalid length. [ 2003.102382][T27061] ip6_vti0: left promiscuous mode [ 2003.189608][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16530'. [ 2003.232444][T27061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2003.289318][T27080] tipc: Enabled bearer , priority 10 [ 2003.424787][T27086] netlink: 42 bytes leftover after parsing attributes in process `syz.4.16538'. [ 2003.446519][T27084] lo speed is unknown, defaulting to 1000 [ 2003.854525][T27099] ip6gre4: entered promiscuous mode [ 2003.908405][T27104] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16542'. [ 2003.970286][T27107] netlink: 188 bytes leftover after parsing attributes in process `syz.0.16542'. [ 2004.111744][T27114] siw: device registration error -23 [ 2004.119887][T27114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16547'. [ 2004.326338][T27122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16552'. [ 2004.352992][T27122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16552'. [ 2004.411360][T12712] tipc: Node number set to 38227182 [ 2004.562791][T27129] FAULT_INJECTION: forcing a failure. [ 2004.562791][T27129] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.582510][T27129] CPU: 0 UID: 0 PID: 27129 Comm: syz.4.16555 Not tainted syzkaller #0 PREEMPT(full) [ 2004.582542][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2004.582555][T27129] Call Trace: [ 2004.582564][T27129] [ 2004.582573][T27129] dump_stack_lvl+0xe8/0x150 [ 2004.582613][T27129] should_fail_ex+0x412/0x560 [ 2004.582652][T27129] should_failslab+0xa8/0x100 [ 2004.582680][T27129] ? skb_clone+0x212/0x3a0 [ 2004.582704][T27129] kmem_cache_alloc_noprof+0x87/0x650 [ 2004.582731][T27129] ? __netlink_lookup+0xc6/0x8b0 [ 2004.582760][T27129] skb_clone+0x212/0x3a0 [ 2004.582789][T27129] __netlink_deliver_tap+0x404/0x850 [ 2004.582823][T27129] ? netlink_deliver_tap+0x2e/0x1b0 [ 2004.582846][T27129] netlink_deliver_tap+0x19c/0x1b0 [ 2004.582867][T27129] netlink_unicast+0x730/0x8e0 [ 2004.582908][T27129] netlink_sendmsg+0x813/0xb40 [ 2004.582938][T27129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2004.582963][T27129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2004.582990][T27129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2004.583017][T27129] ____sys_sendmsg+0x972/0x9f0 [ 2004.583039][T27129] ? __might_fault+0xaf/0x130 [ 2004.583075][T27129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2004.583106][T27129] ? import_iovec+0x73/0xa0 [ 2004.583134][T27129] ___sys_sendmsg+0x2a5/0x360 [ 2004.583153][T27129] ? __lock_acquire+0x6b5/0x2cf0 [ 2004.583187][T27129] ? __pfx____sys_sendmsg+0x10/0x10 [ 2004.583247][T27129] ? __fget_files+0x2a/0x420 [ 2004.583267][T27129] ? __fget_files+0x3a0/0x420 [ 2004.583297][T27129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2004.583322][T27129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2004.583354][T27129] ? __pfx_ksys_write+0x10/0x10 [ 2004.583388][T27129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.583409][T27129] do_syscall_64+0x15f/0xf80 [ 2004.583436][T27129] ? trace_irq_disable+0x3b/0x140 [ 2004.583462][T27129] ? clear_bhb_loop+0x40/0x90 [ 2004.583487][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.583506][T27129] RIP: 0033:0x7fb475f9cdd9 [ 2004.583526][T27129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2004.583543][T27129] RSP: 002b:00007fb476e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2004.583566][T27129] RAX: ffffffffffffffda RBX: 00007fb476215fa0 RCX: 00007fb475f9cdd9 [ 2004.583580][T27129] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2004.583593][T27129] RBP: 00007fb476e44090 R08: 0000000000000000 R09: 0000000000000000 [ 2004.583605][T27129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2004.583617][T27129] R13: 00007fb476216038 R14: 00007fb476215fa0 R15: 00007fffe4dc6b48 [ 2004.583650][T27129] [ 2005.016672][T27138] netlink: 'syz.3.16558': attribute type 8 has an invalid length. [ 2005.447412][T27146] lo speed is unknown, defaulting to 1000 [ 2005.541561][T27163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16564'. [ 2005.644865][T27167] netlink: 'syz.0.16566': attribute type 1 has an invalid length. [ 2005.906301][T27173] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2005.922605][T27173] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2005.931893][T27173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2005.948772][T27173] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2005.961039][T27173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2006.413575][T27186] tipc: Enabling of bearer rejected, already enabled [ 2006.434479][T27172] lo speed is unknown, defaulting to 1000 [ 2006.634193][T27195] netlink: 80 bytes leftover after parsing attributes in process `syz.4.16571'. [ 2008.031092][ T3388] Bluetooth: hci3: command tx timeout [ 2009.589083][ T3388] Bluetooth: hci2: link tx timeout [ 2009.596897][ T3388] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2009.635610][T27203] tipc: Enabled bearer , priority 0 [ 2009.653748][T27206] lo: Caught tx_queue_len zero misconfig [ 2009.729023][T27190] tipc: Disabling bearer [ 2009.901527][T27219] __nla_validate_parse: 1 callbacks suppressed [ 2009.901548][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16577'. [ 2009.955445][T27221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16578'. [ 2009.980833][T27173] Bluetooth: hci2: link tx timeout [ 2009.987804][T27173] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2010.017874][T27173] Bluetooth: hci2: link tx timeout [ 2010.023083][T27173] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2010.075428][T27224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16579'. [ 2010.111417][T27173] Bluetooth: hci3: command tx timeout [ 2010.424949][T27242] netlink: 80 bytes leftover after parsing attributes in process `syz.3.16583'. [ 2011.115905][T28844] Bluetooth: hci2: link tx timeout [ 2011.122742][T28844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2011.180800][T28844] Bluetooth: hci2: link tx timeout [ 2011.186326][T28844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2011.257766][T27221] macvlan2: entered promiscuous mode [ 2011.276035][T27221] macvlan2: entered allmulticast mode [ 2011.383927][T27232] syzkaller0: entered promiscuous mode [ 2011.635434][T28844] Bluetooth: hci2: command 0x0405 tx timeout [ 2011.908491][T27266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16589'. [ 2011.918179][T27266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2011.925537][T27266] IPv6: NLM_F_CREATE should be set when creating new route [ 2011.932919][T27266] IPv6: NLM_F_CREATE should be set when creating new route [ 2012.223987][ T3388] Bluetooth: hci3: command tx timeout [ 2014.270993][ T3388] Bluetooth: hci3: command tx timeout [ 2016.086852][ T1588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.462142][T27172] chnl_net:caif_netlink_parms(): no params data found [ 2016.736852][ T1585] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.860006][T22922] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.903722][T27310] lo speed is unknown, defaulting to 1000 [ 2017.033585][T27335] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2017.094960][T27335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16602'. [ 2017.118778][T27336] netlink: 774 bytes leftover after parsing attributes in process `syz.4.16601'. [ 2017.175342][T27339] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 2017.187247][T11989] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 2017.216190][T27335] bond6 (unregistering): (slave geneve2): Releasing backup interface [ 2017.237288][T27335] bond6 (unregistering): Released all slaves [ 2017.257247][T27172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.264831][T27172] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.272601][T27172] bridge_slave_0: entered allmulticast mode [ 2017.279836][T27172] bridge_slave_0: entered promiscuous mode [ 2017.328299][ T7355] bridge_slave_1: left promiscuous mode [ 2017.334792][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.345762][ T7355] bridge_slave_0: left promiscuous mode [ 2017.352112][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.378159][ T7355] dvmrp6: left allmulticast mode [ 2017.383848][ T7355] pimreg9: left allmulticast mode [ 2017.660053][ T7355] tipc: Disabling bearer [ 2017.810149][T27349] netlink: 'syz.0.16605': attribute type 4 has an invalid length. [ 2017.869850][T27351] netlink: 'syz.0.16605': attribute type 4 has an invalid length. [ 2017.904068][T11989] smbdirect: ib_dev[syz1] removed [ 2017.905264][ T7355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2017.926083][ T7355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2017.939168][ T7355] bond0 (unregistering): Released all slaves [ 2017.950440][ T7355] bond1 (unregistering): Released all slaves [ 2017.966237][ T7355] bond2 (unregistering): Released all slaves [ 2017.984761][ T7355] bond3 (unregistering): Released all slaves [ 2017.998943][T27172] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.008749][T27172] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.016741][T27172] bridge_slave_1: entered allmulticast mode [ 2018.029270][T27172] bridge_slave_1: entered promiscuous mode [ 2018.147677][T27355] netlink: 'syz.4.16606': attribute type 4 has an invalid length. [ 2018.300433][T27172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2018.318930][ T7355] tipc: Disabling bearer [ 2018.343875][ T7355] tipc: Left network mode [ 2018.455333][T27172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2018.582104][T27172] team0: Port device team_slave_0 added [ 2018.603807][T27172] team0: Port device team_slave_1 added [ 2018.647606][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16608'. [ 2018.755495][T27172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2018.790508][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16607'. [ 2018.793981][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2018.928273][T27172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2018.971190][T27172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2018.998435][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.056790][T27172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.120483][T27365] vxcan2: entered allmulticast mode [ 2019.179651][T27378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16612'. [ 2019.257179][T27373] No such timeout policy "syz1" [ 2019.517242][T27172] hsr_slave_0: entered promiscuous mode [ 2019.546746][T27172] hsr_slave_1: entered promiscuous mode [ 2019.577001][T27172] debugfs: 'hsr0' already exists in 'hsr' [ 2019.593214][T27172] Cannot create hsr debugfs directory [ 2019.725365][T27390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16615'. [ 2020.146375][T27403] netlink: 'syz.1.16619': attribute type 8 has an invalid length. [ 2020.155797][ T7355] ------------[ cut here ]------------ [ 2020.162880][ T7355] err [ 2020.162897][ T7355] WARNING: net/wireless/core.c:207 at cfg80211_switch_netns+0x574/0x5a0, CPU#1: kworker/u8:5/7355 [ 2020.176547][ T7355] Modules linked in: [ 2020.181134][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 2020.190891][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2020.201081][ T7355] Workqueue: netns cleanup_net [ 2020.205910][ T7355] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 2020.212111][ T7355] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 a8 ec 31 f7 eb 82 e8 01 b2 c6 f6 e9 63 fe ff ff e8 f7 b1 c6 f6 e9 59 fe ff ff e8 ed b1 c6 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 2020.231910][ T7355] RSP: 0018:ffffc90003d978a0 EFLAGS: 00010293 [ 2020.238038][ T7355] RAX: ffffffff8aff1f03 RBX: ffff888052e20df0 RCX: ffff888089995c40 [ 2020.246182][ T7355] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 2020.254279][ T7355] RBP: 00000000ffffffef R08: ffffffff903386f7 R09: 1ffffffff20670de [ 2020.264155][ T7355] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff888052e20720 [ 2020.272582][ T7355] R13: ffff888083af5e80 R14: dffffc0000000000 R15: ffff888052e20908 [ 2020.280611][ T7355] FS: 0000000000000000(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 2020.289669][ T7355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2020.296434][ T7355] CR2: 0000200000000080 CR3: 000000001db58000 CR4: 00000000003526f0 [ 2020.304526][ T7355] Call Trace: [ 2020.307832][ T7355] [ 2020.310887][ T7355] cfg80211_pernet_exit+0x92/0x120 [ 2020.316056][ T7355] ops_undo_list+0x49f/0x940 [ 2020.320806][ T7355] ? __pfx_ops_undo_list+0x10/0x10 [ 2020.325986][ T7355] ? idr_destroy+0x218/0x290 [ 2020.330737][ T7355] ? do_raw_spin_unlock+0xf5/0x210 [ 2020.335917][ T7355] cleanup_net+0x56b/0x800 [ 2020.340373][ T7355] ? __pfx_cleanup_net+0x10/0x10 [ 2020.345420][ T7355] ? process_scheduled_works+0xa70/0x1860 [ 2020.351494][ T7355] ? process_scheduled_works+0xa70/0x1860 [ 2020.357279][ T7355] process_scheduled_works+0xb5d/0x1860 [ 2020.362970][ T7355] ? __pfx_process_scheduled_works+0x10/0x10 [ 2020.369009][ T7355] ? assign_work+0x3d5/0x5e0 [ 2020.373919][ T7355] worker_thread+0xa53/0xfc0 [ 2020.378625][ T7355] kthread+0x388/0x470 [ 2020.382901][ T7355] ? __pfx_worker_thread+0x10/0x10 [ 2020.388085][ T7355] ? __pfx_kthread+0x10/0x10 [ 2020.392787][ T7355] ret_from_fork+0x514/0xb70 [ 2020.397422][ T7355] ? __pfx_ret_from_fork+0x10/0x10 [ 2020.402654][ T7355] ? __switch_to+0xc79/0x1410 [ 2020.407385][ T7355] ? __pfx_kthread+0x10/0x10 [ 2020.412176][ T7355] ret_from_fork_asm+0x1a/0x30 [ 2020.417035][ T7355] [ 2020.420089][ T7355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2020.427389][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 2020.436846][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2020.446901][ T7355] Workqueue: netns cleanup_net [ 2020.451680][ T7355] Call Trace: [ 2020.454974][ T7355] [ 2020.457923][ T7355] vpanic+0x56c/0xa60 [ 2020.461910][ T7355] ? __pfx__printk+0x10/0x10 [ 2020.466501][ T7355] ? __pfx_vpanic+0x10/0x10 [ 2020.471009][ T7355] ? is_bpf_text_address+0x292/0x2b0 [ 2020.476330][ T7355] ? is_bpf_text_address+0x26/0x2b0 [ 2020.481558][ T7355] panic+0xc5/0xd0 [ 2020.485291][ T7355] ? __pfx_panic+0x10/0x10 [ 2020.489720][ T7355] ? ret_from_fork_asm+0x1a/0x30 [ 2020.494668][ T7355] __warn+0x315/0x4c0 [ 2020.498659][ T7355] ? cfg80211_switch_netns+0x574/0x5a0 [ 2020.504133][ T7355] ? cfg80211_switch_netns+0x574/0x5a0 [ 2020.509607][ T7355] __report_bug+0x29a/0x540 [ 2020.514217][ T7355] ? cfg80211_switch_netns+0x574/0x5a0 [ 2020.519698][ T7355] ? __pfx___report_bug+0x10/0x10 [ 2020.524749][ T7355] ? cfg80211_switch_netns+0x574/0x5a0 [ 2020.530225][ T7355] report_bug+0x16a/0x220 [ 2020.534567][ T7355] ? cfg80211_switch_netns+0x574/0x5a0 [ 2020.540033][ T7355] ? cfg80211_switch_netns+0x576/0x5a0 [ 2020.545499][ T7355] handle_bug+0x9c/0x200 [ 2020.549789][ T7355] exc_invalid_op+0x1a/0x50 [ 2020.554299][ T7355] asm_exc_invalid_op+0x1a/0x20 [ 2020.559158][ T7355] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 2020.565239][ T7355] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 a8 ec 31 f7 eb 82 e8 01 b2 c6 f6 e9 63 fe ff ff e8 f7 b1 c6 f6 e9 59 fe ff ff e8 ed b1 c6 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 2020.584852][ T7355] RSP: 0018:ffffc90003d978a0 EFLAGS: 00010293 [ 2020.590933][ T7355] RAX: ffffffff8aff1f03 RBX: ffff888052e20df0 RCX: ffff888089995c40 [ 2020.598915][ T7355] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 2020.606889][ T7355] RBP: 00000000ffffffef R08: ffffffff903386f7 R09: 1ffffffff20670de [ 2020.614867][ T7355] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff888052e20720 [ 2020.622848][ T7355] R13: ffff888083af5e80 R14: dffffc0000000000 R15: ffff888052e20908 [ 2020.630838][ T7355] ? cfg80211_switch_netns+0x573/0x5a0 [ 2020.636322][ T7355] cfg80211_pernet_exit+0x92/0x120 [ 2020.641455][ T7355] ops_undo_list+0x49f/0x940 [ 2020.646062][ T7355] ? __pfx_ops_undo_list+0x10/0x10 [ 2020.651184][ T7355] ? idr_destroy+0x218/0x290 [ 2020.655785][ T7355] ? do_raw_spin_unlock+0xf5/0x210 [ 2020.660916][ T7355] cleanup_net+0x56b/0x800 [ 2020.665340][ T7355] ? __pfx_cleanup_net+0x10/0x10 [ 2020.670287][ T7355] ? process_scheduled_works+0xa70/0x1860 [ 2020.676020][ T7355] ? process_scheduled_works+0xa70/0x1860 [ 2020.681756][ T7355] process_scheduled_works+0xb5d/0x1860 [ 2020.687342][ T7355] ? __pfx_process_scheduled_works+0x10/0x10 [ 2020.693338][ T7355] ? assign_work+0x3d5/0x5e0 [ 2020.697942][ T7355] worker_thread+0xa53/0xfc0 [ 2020.702570][ T7355] kthread+0x388/0x470 [ 2020.706647][ T7355] ? __pfx_worker_thread+0x10/0x10 [ 2020.711782][ T7355] ? __pfx_kthread+0x10/0x10 [ 2020.716412][ T7355] ret_from_fork+0x514/0xb70 [ 2020.721061][ T7355] ? __pfx_ret_from_fork+0x10/0x10 [ 2020.726195][ T7355] ? __switch_to+0xc79/0x1410 [ 2020.730891][ T7355] ? __pfx_kthread+0x10/0x10 [ 2020.735500][ T7355] ret_from_fork_asm+0x1a/0x30 [ 2020.740291][ T7355] [ 2020.743722][ T7355] Kernel Offset: disabled [ 2020.748090][ T7355] Rebooting in 86400 seconds..