last executing test programs: 7.694518494s ago: executing program 0 (id=2794): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) sendto$unix(r2, &(0x7f0000000200)="55ec49407210cc7b235e1cf6dfe7a2a0fb3272b8b61ddbe515a545a1868704d7cb2b6b3abc4b4ac72174c96266eec38f8bbafa525fd8702fa0b2582c614b51b496fca1ca9cb186dee58ceb25ec9d4c4bffd103c461c06e527437dcf6377f9d48a970644b558913a1fb2211644d90f9f72f51290860a9cefbc1669614c4725ab7662f838e4c42030bcad1c85e00", 0x8d, 0x24040851, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket(0x2c, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000200)) recvmsg$can_j1939(r6, &(0x7f0000000680)={&(0x7f0000000480)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/64, 0x40}, 0x100) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x24048000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4004040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000e3", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250f00000008000b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r11 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r11, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="7911bf87e318844b7b7ece8fe95693844ba2b4c29049c749521cf970374e19e3e0eb47e456c6b48e9e6cbd7bf0c99099ca842917790c07a3922b2732c0b26c06681e5f6eeb013cae354f9e4cbdb1e2740ed027e6cea3bf48243cf3a4dfea964f056d9750a3845e1afa1cd4746ed1de3dcd86984fcb49e380144defb2648b5d28438225bdb08ba43fde421a07274d5d77389ddda7dbfec5ce2019fb2b85555c3adbf6812125af1e846cf1c0e4b88a751c58dfad1d210fbec40a1b21115f69230ca80b3ed558b27f6c46fe25c01fe4c18c0ba7d1e6861f6eb75b6f4903971921f799a56c12097998d9cfdce430335046f02dd1fef77b36c617b8b67621", 0xfc}, {&(0x7f0000002300)="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", 0xf11}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 7.375070373s ago: executing program 0 (id=2799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000901}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r4, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}}, 0x64000040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0x1, &(0x7f0000000140)="b604a8e892325e606797aa4013592b1ded6dfe5aedc3241b24f7fd6fb09e5be985250e7f0aa18dd697a278c28a778b34045bc9bad1d04aa4369603b753f594f517ac6a4337943e900d97f5978ff305a5cdf0d2427040cdedd9c9c65851efbcd36af2b3506e454d312ac349892ae2186746abf2abbc0c058ec2ddb4caf5a37e86317532dfcad9aa2b851143bc4755354891c7097af9aee86c3016aaf39f4233c35dfdaf8963fc4326041d067b7df03404ae08f550d9882895bcac6e2d7de0e7070edf4db0c9b614cdb4224a6e522eff12164e7304", &(0x7f0000000040)=""/37}, 0x20) 7.280723791s ago: executing program 0 (id=2803): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x62}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000f1ff010000000a1c0000bc4bd820ef00120a01010000000000000000020000000800034000000002140000001100010000000000000000000000000a"], 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0xc3}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x1000000000000}, {0x0, 0x8}, {}, 0x0, 0x0, 0x2, 0x3}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="b2dfd32936ad234ced2e74e4ad6ea7dc496faeafc97b7e6c44a2ae9df7c3dc2ee589a220431da3889f2a8617e3ee2e6252399cbfaab83bfe7c05ec25b9816da44387027b7ab4d6bde8ec960f7bc1363de2cd59ca6081bdfd1440b92b196ddc631e1405c2b1751059bac64e882735ee5d1f01f1766c9212853b51fe09df9c4dafcd4756a7c9553fa2ac7038dcd44574a62a564f9a2f3674fcf8768a7d9618395b1c5e9698951427297c35dbcefc9f6821bd8d78c6ed2911", 0xb7}, {&(0x7f00000006c0)="68b48f6e8fcedde03262d09e8336fe0925b41aec1e5c1dd66e7df0", 0x1b}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x8081) recvmmsg(r4, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/41, 0x29}], 0x3}}], 0x1, 0x2001, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x200, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r8, r7, 0x25, 0x2, @val=@tcx={@void, @value=r8}}, 0x1c) 5.344625197s ago: executing program 0 (id=2809): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="55cb0400110018006d50667d2c92280000000200000000fdff0000", @ANYRES32, @ANYBLOB="08008900", @ANYRES32=r2, @ANYRESDEC=r3], 0x24}}, 0x0) r4 = accept4(r0, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80, 0x400) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0x84) 4.747094004s ago: executing program 0 (id=2817): recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/235, 0xeb, 0x120, &(0x7f0000000280)=@caif=@dbg={0x25, 0xf7, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x61, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x61, '\x00', 0x0, @sk_msg}, 0x94) 4.744564138s ago: executing program 0 (id=2819): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x240000c1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x4, 0x1, 0x4b, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x700, 0x80000001}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x2, 0x6, {{0x1f, 0x4, 0x3, 0x3, 0x7c, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@end, @noop, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x4b, [@multicast2, @remote, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x29}, {@loopback, 0x7}, {@local, 0xcb6}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0xffff}]}, @ssrr={0x89, 0x1b, 0x93, [@rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @multicast1]}, @ssrr={0x89, 0x7, 0x68, [@empty]}, @lsrr={0x83, 0x7, 0xc3, [@empty]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xba6efc48d4ebe719}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x19, 0xc}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8a3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x805) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7d85, 0x12}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) write(r0, &(0x7f0000000800)="5fb5c198e3ce696c114bfa446fef866d8a01451c3c302a6eefa5acd95bceb52ea63fb64e0de02914dc836d4083bc7e9bfc6c95a66d709272ff2bdf3f13e906a31161e078268727e0b3522c3bd43fd4ec8ba5ba12adfe028541f44059fad4d2e69ae200d05e254b7367106dbf3ebf361c431f", 0x72) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8e225c13, 0x3c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x62b721f97c6dafb5}, 0x44) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000b80)=0xffffffffffffffff) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000bc0)={@empty, 0x0}, &(0x7f0000000c00)=0x14) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004014) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xde77fdeb373af686}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, r11, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x18, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x72, &(0x7f0000001140)=""/114, 0x100, 0x40, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0xffffffffffffffff, 0x1], &(0x7f0000001240)=[{0x1, 0x3, 0xb, 0xb}], 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000001000)='afs_silly_rename\x00', r12, 0x0, 0x6}, 0x18) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000001440)={&(0x7f0000001380), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, r2, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x20, 0x10, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfcd, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}]}, &(0x7f0000001500)='GPL\x00', 0x100, 0xd0, &(0x7f0000001540)=""/208, 0x40f00, 0x33, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x5, 0x10, 0x0, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x4, 0x1, 0xd, 0x6}, {0x0, 0x4, 0x2, 0x9}, {0x5, 0x1, 0xd, 0x2}], 0x10, 0x9}, 0x94) 2.051603312s ago: executing program 3 (id=2853): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2400c001, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x2400c001, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.044781687s ago: executing program 4 (id=2854): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x30}}, 0x0) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ff000000000200000400010000002800018014000400000000000f00fdffffffffffac1414aa060001000a008000080006dd024e4fec83848ea0992b000800000000000066902e4aa1925d538da89d1c4d4c208b42c82d0b50f20d1bc8318cdd776b6a1e6bc9dbdfd71dd262fc350f3db222ff4fbf608a8f3461d0769e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.353555448s ago: executing program 1 (id=2857): syz_emit_ethernet(0x2b, &(0x7f00000000c0)={@random="8cff00000065", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x6, 0x1}}, {@mpls_uc={0x8847, {[{0x1, 0x0, 0x1}, {0xd87, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x200}, {0x5, 0x0, 0x1}], @generic="20338cfcef"}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.271046822s ago: executing program 2 (id=2858): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)={'caif0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x2d) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.222962768s ago: executing program 1 (id=2859): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000840)="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", &(0x7f0000001840)=""/4096, &(0x7f0000000000)="7500c19bee05f120d344", &(0x7f0000000040)="4b8c9e76a991d79380eac837d09c1b394c0c0c5503595c6ed077d7cb2e6996e10b2eea1116355105b19cc8a8ca9b0958ebce67d75969", 0x9c, r1, 0x4}, 0x38) 1.130742325s ago: executing program 1 (id=2860): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000002, 0xb4, 0xda}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.050556332s ago: executing program 3 (id=2861): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='writeback_bdi_register\x00', r0}, 0x18) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.049442212s ago: executing program 4 (id=2862): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x101, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400b0}, 0x4009090) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) 933.759743ms ago: executing program 3 (id=2863): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fa8c830115ba7e985c1b02e1fb69080100ee", @ANYRES16=r2, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x40001}, 0x20040040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1c}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c008000", @ANYRES16=r2, @ANYBLOB="05002ebd7000fcdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="0a00340001010101010100000400fa00"], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x4800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="dd898a14fc589ed3a704eb0b9ea120e8368e0dca3eb8d331bd29c3bdc5ea9422d9ebea1ed02850419e865e681461d29151ff189124de9653b71b64ef9209438d77220078e601915f98299db15b254e900cef294ab9d82453f92c224b32d1795a7bed1a57a853a9a0636d868ebf01fbc39556587f8d70e8a10953678d8b19c1f586ccb49e37a7d8af9470eefb2b1a1f48e43c9c57a5d428fb03a49ad4fddd46a7e5e4942ca03418c9a7986d5b499af7f01c227da9b91e09a323619196981a3b8dd9b181532a45678028679d05855b66e5af20f2c3c6d7f8a17f5d42a7fa47a1ec235c9bc744f3ac5e83b36e029789bc0b0188fabdb38178", 0xf7}], 0x1, 0x0, 0x0, 0x5865}, 0x24004810) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000700)="0000000009000000cfcfd5866c4675d6ade056da9ceee074a0a6b20163d85488a7d1ec11828e43e6bd16489a71879aeb7ffe75b61374bef95b226f923d282cb662713541bc7cbe7bd7aa4ea3110aca1e77b0a2b52c6d1831ebbfca", 0x5b) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x44004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(r10, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r9) socket$nl_generic(0x10, 0x3, 0x10) 913.461129ms ago: executing program 4 (id=2864): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r3}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600010000000000000000000a00c3"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}}, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xc]}, &(0x7f0000000000)=0x100) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x5}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r6, 0x3, 0x24, 0x5}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000240)={0x0, 0x4, [@multicast, @local, @multicast, @remote]}) r8 = socket$inet(0x2, 0x800, 0x33) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 683.050931ms ago: executing program 3 (id=2865): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c8000001300000008000340000020029f1e993bd8a1a364729c20f0d25a009c858249a2a702396bb39a721d"], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001080)={0x7fff}, 0x8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x1}, 0x8) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000040), 0x12) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000080), 0x12) close(r6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r8, @ANYBLOB="001e00"/25], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001140)={r4, 0x9, 0x10}, &(0x7f0000001180)=0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000040007801c000200ffffffffffffffeff02093904d6444f1e7e426dfbad477f5f7ab40ad8f44d54717efebe0a5aec6ff51de23022eee1e3ae505ad8fbbf0829758"], 0x24}}, 0x0) 682.328478ms ago: executing program 2 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x4}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f00000000c0), 0x4) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x40000c4) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x244, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x233, 0xb, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="80475085cc6c64452866dbb382171cd2ca4e4a03e5aca899babcb7513add515d23ab1f1e880cafd0120f4e9ebe59b20ef6df7ebaa4b002586d8615f1a3f454ef48e9678ae6ccbbaa3391e17019a5d62a2931e95f593a617d72552608a3ea9be71f1318f84e13566ccf442bba1e0991bce802b38d20cfc1e3bd0aaf83c1a4e284a6488db99481dd102449c682f64170ccea76b874621fc235ab48e1036ea9656d0d46ccc448d5a6d943c3635703d04fec34eb8829ae1f82ba9c0c3e8cb38e548c5a32a6", @nested={0x14c, 0xa8, 0x0, 0x1, [@typed={0x4, 0xee}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r7}, @typed={0x8, 0xf1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x117, 0x77, 0x0, 0x1, [@typed={0x4, 0x12e}, @nested={0x4, 0xf8}, @typed={0x8, 0xc9, 0x0, 0x0, @str='GPL\x00'}, @generic="dd634f4df606f253d5b92781e9ea9fc596b0539011b279d34d12efc12f88c59e1b68d30bccc51266b7c0f6de9cc54816fa3dfff8560f3e811a2bc1b8fe4be1e8122c457a4f1bda53ecc3a740fe90b6ad1de8e4d0211f66c05e6c8d115c3d45ee35b190a9374950597909545c9f0e32deca2534c9b17c517b0f722337e0a8d7fe98f1dfd9ae17509d77d1bf6b9d9db53ef5767c24b01ab2ce6e2aecca1d00e21395e35ff9728fdf63fecfa8e0acc1bfd56a825407e107da875f55a8a6d3a97975bc7f420300a426a1d79a4aaecb0e08eb829adffba081208ead3bf0199a8763596a0740fb78dc2b089775e7accd238e0b156a8969fd18e3", @nested={0x4, 0x2b}, @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x63, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x38, 0x0, 0x0, @str='&@\\\x00'}, @typed={0xc, 0xa6, 0x0, 0x0, @u64=0x9}]}]}]}, 0x244}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x90, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x89c58ce}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2d18c946}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x1620}}, 0x10) 627.353434ms ago: executing program 1 (id=2867): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1256, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="23602ea3729e"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 560.240047ms ago: executing program 4 (id=2868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x7f) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x8080) 511.179886ms ago: executing program 2 (id=2869): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060200000800020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFMTU(r1, 0x8943, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) 500.55707ms ago: executing program 3 (id=2870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) close(r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) 416.616752ms ago: executing program 4 (id=2871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async, rerun: 64) r1 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) listen(r2, 0x8) (async, rerun: 32) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000280)=[{r2, 0x3206}, {r1}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 311.190893ms ago: executing program 3 (id=2872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x8091}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x29, 0x2, 0x4000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x280) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 309.713412ms ago: executing program 1 (id=2873): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c000000fc0200000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002dbd700000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040003004e204e22000020010000000000000000000000000002"], 0x154}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="050000001d00000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x3, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0}, 0x9c) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000180)=0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESDEC=r7], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) r9 = accept4$rose(r1, &(0x7f00000001c0)=@full={0xb, @remote, @null, 0x0, [@bcast, @default, @default, @rose, @bcast, @default]}, &(0x7f0000000240)=0x40, 0x80000) r10 = accept4$rose(r1, 0x0, &(0x7f00000002c0), 0x800) tee(r9, r10, 0x6, 0x5) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r12 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async) r13 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r14 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r12, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="6e1ca385ad9e8d0075073490eb547921f50ed0d42c73020639664baa14fa08520d69a2952f48604c5da05d067cc4639b16bff91f630410085e13475a47964d3ff11ad7a9c7822e568440d80f3cb8a3c46c4b08387ab15941ed24fd6edd589423812d6a3fb96108e6823b2d38c39920f84e114b4d13feeec12e8261d87c7975eb0a7a16028f5b2f5d82752ab789b6c511d513477ea36d2e59aa71e2cd2621e8074c9dd0f7abadec031ff193d770c5330750c1cedc2450efb36513ad0b05b6", 0xbe) 230.338646ms ago: executing program 2 (id=2874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60480) connect$netlink(r0, &(0x7f0000000300)=@unspec, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xffffff98}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x6, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 217.984439ms ago: executing program 4 (id=2875): socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r1, 0x0) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6ed31ebc6e1f7ce7a537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 51.145935ms ago: executing program 2 (id=2876): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) bind$rds(r2, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="330a020900000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbff02000000000000000000000000000100000000000000000000ffff00000000ff020000018000000000000000000001"], 0x58) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40151}, 0x40000) 44.559252ms ago: executing program 2 (id=2877): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r0, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50fe040028d432be0fe923b006000000525d670e4bc572c48b6b620000082abdafc810ab1aa021b0bcc0e54576"], 0x30}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x400454da, &(0x7f0000000000)) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x22, 0x0, &(0x7f0000000280)) bind$tipc(r6, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 0s ago: executing program 1 (id=2878): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) kernel console output (not intermixed with test programs): 184.358321][T11605] FAULT_INJECTION: forcing a failure. [ 184.358321][T11605] name failslab, interval 1, probability 0, space 0, times 0 [ 184.381107][T11605] CPU: 0 UID: 0 PID: 11605 Comm: syz.3.1704 Not tainted syzkaller #0 PREEMPT(full) [ 184.381136][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.381146][T11605] Call Trace: [ 184.381154][T11605] [ 184.381162][T11605] dump_stack_lvl+0x189/0x250 [ 184.381189][T11605] ? __pfx____ratelimit+0x10/0x10 [ 184.381212][T11605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.381233][T11605] ? __pfx__printk+0x10/0x10 [ 184.381267][T11605] should_fail_ex+0x414/0x560 [ 184.381297][T11605] should_failslab+0xa8/0x100 [ 184.381316][T11605] __kmalloc_cache_noprof+0x6f/0x6f0 [ 184.381338][T11605] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 184.381360][T11605] ? sctp_add_bind_addr+0x8c/0x370 [ 184.381388][T11605] sctp_add_bind_addr+0x8c/0x370 [ 184.381413][T11605] sctp_copy_local_addr_list+0x30b/0x4e0 [ 184.381440][T11605] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 184.381462][T11605] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 184.381486][T11605] ? sctp_v6_is_any+0x64/0x80 [ 184.381510][T11605] ? sctp_copy_one_addr+0x93/0x360 [ 184.381536][T11605] sctp_bind_addr_copy+0xb3/0x3c0 [ 184.381558][T11605] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 184.381582][T11605] sctp_connect_new_asoc+0x2e0/0x690 [ 184.381604][T11605] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 184.381627][T11605] ? sctp_get_af_specific+0x29/0x80 [ 184.381647][T11605] ? sctp_inet6_send_verify+0x80/0x300 [ 184.381667][T11605] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 184.381688][T11605] __sctp_connect+0x5ba/0xd50 [ 184.381718][T11605] ? __pfx___sctp_connect+0x10/0x10 [ 184.381740][T11605] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 184.381758][T11605] ? security_sctp_bind_connect+0x7e/0x2e0 [ 184.381781][T11605] sctp_getsockopt_connectx3+0x2c4/0x440 [ 184.381808][T11605] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 184.381849][T11605] ? __local_bh_enable_ip+0x12d/0x1c0 [ 184.381869][T11605] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 184.381898][T11605] sctp_getsockopt+0x98a/0xb60 [ 184.381913][T11605] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 184.381939][T11605] do_sock_getsockopt+0x372/0x450 [ 184.381960][T11605] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 184.381977][T11605] ? do_syscall_64+0xa0/0xfa0 [ 184.382006][T11605] ? __fget_files+0x2a/0x420 [ 184.382021][T11605] ? __fget_files+0x3a0/0x420 [ 184.382036][T11605] ? __fget_files+0x2a/0x420 [ 184.382061][T11605] __x64_sys_getsockopt+0x1a5/0x250 [ 184.382078][T11605] ? do_syscall_64+0xa0/0xfa0 [ 184.382101][T11605] ? do_syscall_64+0xa0/0xfa0 [ 184.382126][T11605] do_syscall_64+0xfa/0xfa0 [ 184.382146][T11605] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.382170][T11605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.382186][T11605] ? clear_bhb_loop+0x60/0xb0 [ 184.382207][T11605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.382223][T11605] RIP: 0033:0x7f147cd8f6c9 [ 184.382238][T11605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.382252][T11605] RSP: 002b:00007f147dc7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 184.382271][T11605] RAX: ffffffffffffffda RBX: 00007f147cfe5fa0 RCX: 00007f147cd8f6c9 [ 184.382283][T11605] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 184.382293][T11605] RBP: 00007f147dc7a090 R08: 0000200000000240 R09: 0000000000000000 [ 184.382305][T11605] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.382316][T11605] R13: 00007f147cfe6038 R14: 00007f147cfe5fa0 R15: 00007ffe00abd848 [ 184.382349][T11605] [ 185.006062][T11629] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 185.552168][T11664] block nbd0: Unsupported socket: should be TCP or UNIX. [ 185.616452][T11670] netlink: 'syz.1.1725': attribute type 13 has an invalid length. [ 185.659334][T11670] netlink: 'syz.1.1725': attribute type 17 has an invalid length. [ 185.832680][T11670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.858682][T11670] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.874325][T11670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.998347][T11689] syzkaller0: entered promiscuous mode [ 186.008913][T11689] syzkaller0: entered allmulticast mode [ 186.045089][T11692] netlink: 'syz.4.1731': attribute type 1 has an invalid length. [ 186.082363][T11692] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 186.094090][T11692] bond4 (unregistering): Released all slaves [ 186.167393][T11701] __nla_validate_parse: 16 callbacks suppressed [ 186.167415][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 186.196627][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 186.276339][T11708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1736'. [ 186.363958][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1738'. [ 186.525239][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 186.535645][T11729] batadv_slave_1: entered promiscuous mode [ 186.573706][T11731] batadv_slave_1: left promiscuous mode [ 186.640801][T11739] netlink: 'syz.4.1744': attribute type 83 has an invalid length. [ 186.682684][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1745'. [ 186.765523][T11747] xt_hashlimit: size too large, truncated to 1048576 [ 187.227876][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 187.237223][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1755'. [ 187.259788][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 187.268698][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1755'. [ 187.420584][T11799] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 187.464420][T11800] : entered promiscuous mode [ 187.852589][T11828] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20003 [ 188.083215][T11846] netlink: 'syz.1.1777': attribute type 21 has an invalid length. [ 188.125727][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 188.145216][T11843] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig [ 188.392017][T11882] netlink: 'syz.2.1785': attribute type 6 has an invalid length. [ 188.413092][T11885] netlink: 'syz.2.1785': attribute type 6 has an invalid length. [ 188.573277][T11895] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 188.581361][T11895] netlink: 'syz.2.1788': attribute type 7 has an invalid length. [ 188.589187][T11895] netlink: 'syz.2.1788': attribute type 8 has an invalid length. [ 189.495202][T11949] netlink: 'syz.4.1804': attribute type 12 has an invalid length. [ 189.516885][T11949] netlink: 'syz.4.1804': attribute type 29 has an invalid length. [ 189.527083][T11955] xt_bpf: check failed: parse error [ 189.539491][T11949] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 190.402124][T11987] FAULT_INJECTION: forcing a failure. [ 190.402124][T11987] name failslab, interval 1, probability 0, space 0, times 0 [ 190.417491][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.4.1816 Not tainted syzkaller #0 PREEMPT(full) [ 190.417516][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.417538][T11987] Call Trace: [ 190.417546][T11987] [ 190.417554][T11987] dump_stack_lvl+0x189/0x250 [ 190.417580][T11987] ? __pfx____ratelimit+0x10/0x10 [ 190.417603][T11987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.417625][T11987] ? __pfx__printk+0x10/0x10 [ 190.417660][T11987] should_fail_ex+0x414/0x560 [ 190.417690][T11987] should_failslab+0xa8/0x100 [ 190.417710][T11987] __kmalloc_cache_noprof+0x6f/0x6f0 [ 190.417734][T11987] ? sctp_add_bind_addr+0x8c/0x370 [ 190.417754][T11987] ? sctp_add_bind_addr+0xb0/0x370 [ 190.417781][T11987] sctp_add_bind_addr+0x8c/0x370 [ 190.417808][T11987] sctp_copy_local_addr_list+0x30b/0x4e0 [ 190.417834][T11987] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 190.417856][T11987] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.417881][T11987] ? sctp_v6_is_any+0x64/0x80 [ 190.417906][T11987] ? sctp_copy_one_addr+0x93/0x360 [ 190.417933][T11987] sctp_bind_addr_copy+0xb3/0x3c0 [ 190.417957][T11987] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 190.417981][T11987] sctp_connect_new_asoc+0x2e0/0x690 [ 190.418003][T11987] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.418027][T11987] ? sctp_get_af_specific+0x29/0x80 [ 190.418048][T11987] ? sctp_inet6_send_verify+0x80/0x300 [ 190.418068][T11987] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 190.418089][T11987] __sctp_connect+0x5ba/0xd50 [ 190.418119][T11987] ? __pfx___sctp_connect+0x10/0x10 [ 190.418141][T11987] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 190.418160][T11987] ? security_sctp_bind_connect+0x7e/0x2e0 [ 190.418184][T11987] sctp_getsockopt_connectx3+0x2c4/0x440 [ 190.418211][T11987] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 190.418235][T11987] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.418254][T11987] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 190.418285][T11987] sctp_getsockopt+0x98a/0xb60 [ 190.418300][T11987] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 190.418326][T11987] do_sock_getsockopt+0x372/0x450 [ 190.418349][T11987] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 190.418366][T11987] ? do_syscall_64+0xa0/0xfa0 [ 190.418388][T11987] ? __fget_files+0x2a/0x420 [ 190.418404][T11987] ? __fget_files+0x3a0/0x420 [ 190.418419][T11987] ? __fget_files+0x2a/0x420 [ 190.418444][T11987] __x64_sys_getsockopt+0x1a5/0x250 [ 190.418461][T11987] ? do_syscall_64+0xa0/0xfa0 [ 190.418485][T11987] ? do_syscall_64+0xa0/0xfa0 [ 190.418511][T11987] do_syscall_64+0xfa/0xfa0 [ 190.418537][T11987] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.418560][T11987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.418578][T11987] ? clear_bhb_loop+0x60/0xb0 [ 190.418599][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.418616][T11987] RIP: 0033:0x7fd65038f6c9 [ 190.418632][T11987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.418647][T11987] RSP: 002b:00007fd651307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 190.418667][T11987] RAX: ffffffffffffffda RBX: 00007fd6505e5fa0 RCX: 00007fd65038f6c9 [ 190.418679][T11987] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 190.418690][T11987] RBP: 00007fd651307090 R08: 0000200000000240 R09: 0000000000000000 [ 190.418702][T11987] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.418713][T11987] R13: 00007fd6505e6038 R14: 00007fd6505e5fa0 R15: 00007ffec58e6038 [ 190.418746][T11987] [ 191.263332][T12027] __nla_validate_parse: 16 callbacks suppressed [ 191.263350][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1828'. [ 191.288761][T12027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1828'. [ 191.408541][T12038] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1831'. [ 191.445459][T12038] v: renamed from vlan0 [ 191.460575][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.481793][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.497436][T12044] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1834'. [ 191.512187][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.557763][T12047] syzkaller1: entered promiscuous mode [ 191.563812][T12047] syzkaller1: entered allmulticast mode [ 191.606393][T12049] xt_hashlimit: size too large, truncated to 1048576 [ 191.723581][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 191.866637][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 191.978919][T12074] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 192.376161][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1847'. [ 192.439638][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1847'. [ 192.602365][T12097] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 192.676562][T12101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1849'. [ 192.796519][T12107] validate_nla: 2 callbacks suppressed [ 192.796537][T12107] netlink: 'syz.3.1852': attribute type 4 has an invalid length. [ 192.831032][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 192.935636][T12122] syzkaller0: entered promiscuous mode [ 192.944879][T12122] syzkaller0: entered allmulticast mode [ 193.493951][T12150] netlink: 'syz.4.1864': attribute type 16 has an invalid length. [ 193.502279][T12150] netlink: 'syz.4.1864': attribute type 3 has an invalid length. [ 193.732870][T12170] xt_hashlimit: size too large, truncated to 1048576 [ 193.748146][T12170] syz.2.1870: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 193.767097][T12170] CPU: 0 UID: 0 PID: 12170 Comm: syz.2.1870 Not tainted syzkaller #0 PREEMPT(full) [ 193.767121][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.767131][T12170] Call Trace: [ 193.767139][T12170] [ 193.767147][T12170] dump_stack_lvl+0x189/0x250 [ 193.767177][T12170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.767199][T12170] ? __pfx__printk+0x10/0x10 [ 193.767218][T12170] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.767241][T12170] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.767266][T12170] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 193.767293][T12170] warn_alloc+0x214/0x310 [ 193.767324][T12170] ? __pfx_warn_alloc+0x10/0x10 [ 193.767359][T12170] ? __get_vm_area_node+0x28f/0x300 [ 193.767382][T12170] ? htable_create+0x101/0x7a0 [ 193.767409][T12170] __vmalloc_node_range_noprof+0x690/0x12d0 [ 193.767466][T12170] ? alloc_pages_mpol+0x3cd/0x4a0 [ 193.767486][T12170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.767514][T12170] ? rcu_is_watching+0x15/0xb0 [ 193.767533][T12170] ? htable_create+0x101/0x7a0 [ 193.767554][T12170] __kvmalloc_node_noprof+0x674/0x910 [ 193.767577][T12170] ? htable_create+0x101/0x7a0 [ 193.767595][T12170] ? hashlimit_pernet+0x23/0x240 [ 193.767616][T12170] ? hashlimit_pernet+0x23/0x240 [ 193.767634][T12170] ? hashlimit_pernet+0x23/0x240 [ 193.767661][T12170] htable_create+0x101/0x7a0 [ 193.767686][T12170] hashlimit_mt_check_common+0x719/0xa10 [ 193.767713][T12170] xt_check_match+0x3d1/0xab0 [ 193.767734][T12170] ? __pfx_xt_check_match+0x10/0x10 [ 193.767753][T12170] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 193.767778][T12170] ? xt_find_match+0x1f7/0x250 [ 193.767797][T12170] translate_table+0x1553/0x2040 [ 193.767841][T12170] ? __pfx_translate_table+0x10/0x10 [ 193.767865][T12170] ? __might_fault+0xb0/0x130 [ 193.767909][T12170] ? _copy_from_user+0x94/0xb0 [ 193.767935][T12170] do_ip6t_set_ctl+0x970/0xce0 [ 193.767963][T12170] ? rcu_is_watching+0x15/0xb0 [ 193.767982][T12170] ? trace_contention_end+0x39/0x120 [ 193.768003][T12170] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 193.768050][T12170] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.768086][T12170] ? __lock_acquire+0xab9/0xd20 [ 193.768108][T12170] nf_setsockopt+0x26f/0x290 [ 193.768136][T12170] rawv6_setsockopt+0x23b/0x5b0 [ 193.768157][T12170] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 193.768174][T12170] ? aa_sock_opt_perm+0xff/0x1b0 [ 193.768200][T12170] ? sock_common_setsockopt+0x36/0xc0 [ 193.768221][T12170] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 193.768246][T12170] do_sock_setsockopt+0x17c/0x1b0 [ 193.768269][T12170] __x64_sys_setsockopt+0x13f/0x1b0 [ 193.768293][T12170] do_syscall_64+0xfa/0xfa0 [ 193.768314][T12170] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.768336][T12170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.768353][T12170] ? clear_bhb_loop+0x60/0xb0 [ 193.768374][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.768391][T12170] RIP: 0033:0x7ff528b8f6c9 [ 193.768407][T12170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.768422][T12170] RSP: 002b:00007ff526df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.768448][T12170] RAX: ffffffffffffffda RBX: 00007ff528de5fa0 RCX: 00007ff528b8f6c9 [ 193.768461][T12170] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 193.768471][T12170] RBP: 00007ff528c11f91 R08: 0000000000000588 R09: 0000000000000000 [ 193.768482][T12170] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 193.768493][T12170] R13: 00007ff528de6038 R14: 00007ff528de5fa0 R15: 00007ffc9bfb0078 [ 193.768524][T12170] [ 193.768530][T12170] Mem-Info: [ 194.134393][T12170] active_anon:3955 inactive_anon:0 isolated_anon:0 [ 194.134393][T12170] active_file:3141 inactive_file:39922 isolated_file:0 [ 194.134393][T12170] unevictable:768 dirty:95 writeback:0 [ 194.134393][T12170] slab_reclaimable:11993 slab_unreclaimable:147133 [ 194.134393][T12170] mapped:29992 shmem:1356 pagetables:1046 [ 194.134393][T12170] sec_pagetables:0 bounce:0 [ 194.134393][T12170] kernel_misc_reclaimable:0 [ 194.134393][T12170] free:1280576 free_pcp:13633 free_cma:0 [ 194.184206][T12170] Node 0 active_anon:15820kB inactive_anon:0kB active_file:12564kB inactive_file:159488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119968kB dirty:276kB writeback:100kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11536kB pagetables:4052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.230298][T12170] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.267192][T12170] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.301685][T12170] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 194.307597][T12170] Node 0 DMA32 free:1214564kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15820kB inactive_anon:0kB active_file:12564kB inactive_file:159488kB unevictable:1536kB writepending:276kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:36696kB local_pcp:21728kB free_cma:0kB [ 194.344068][T12170] lowmem_reserve[]: 0 0 0 0 0 [ 194.349929][T12170] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.380030][T12170] lowmem_reserve[]: 0 0 0 0 0 [ 194.385975][T12170] Node 1 Normal free:3892180kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:8416kB free_cma:0kB [ 194.442846][T12170] lowmem_reserve[]: 0 0 0 0 0 [ 194.447623][T12170] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 194.495908][T12193] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 194.506456][T12170] Node 0 DMA32: 882*4kB (UME) 690*8kB (UME) 452*16kB (UM) 459*32kB (UME) 113*64kB (UM) 60*128kB (UME) 21*256kB (UME) 5*512kB (U) 7*1024kB (UME) 7*2048kB (UME) 278*4096kB (M) = 1214008kB [ 194.528628][T12193] bond2 (unregistering): Released all slaves [ 194.546944][T12170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 194.559851][T12170] Node 1 Normal: 209*4kB (UME) 46*8kB (UME) 44*16kB (UME) 69*32kB (UME) 33*64kB (UME) 7*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3892180kB [ 194.590120][T12170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.602011][T12170] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.611602][T12170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.621965][T12170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.637183][T12170] 44416 total pagecache pages [ 194.642434][T12170] 0 pages in swap cache [ 194.647207][T12170] Free swap = 124996kB [ 194.652939][T12170] Total swap = 124996kB [ 194.657701][T12170] 2097051 pages RAM [ 194.661977][T12170] 0 pages HighMem/MovableOnly [ 194.671079][T12170] 424119 pages reserved [ 194.674309][T12202] bond0: left promiscuous mode [ 194.675700][T12170] 0 pages cma reserved [ 194.681061][T12202] bond0: left allmulticast mode [ 194.695172][T12202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.843224][T12207] tipc: Enabled bearer , priority 0 [ 194.850988][T12207] syzkaller0: entered promiscuous mode [ 194.856479][T12207] syzkaller0: entered allmulticast mode [ 194.899791][T12207] tipc: Resetting bearer [ 194.934612][T12206] tipc: Resetting bearer [ 195.017489][T12206] tipc: Disabling bearer [ 195.065793][T12220] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.093426][T12222] tipc: Bearer : already 2 bearers with priority 10 [ 195.103357][T12222] tipc: Bearer : trying with adjusted priority [ 195.110972][T12222] tipc: Enabling of bearer rejected, failed to enable media [ 195.191951][T12226] netlink: 'syz.3.1886': attribute type 10 has an invalid length. [ 195.403111][T12234] syzkaller0: entered promiscuous mode [ 195.417020][T12234] syzkaller0: entered allmulticast mode [ 195.499084][T12243] FAULT_INJECTION: forcing a failure. [ 195.499084][T12243] name failslab, interval 1, probability 0, space 0, times 0 [ 195.526782][T12243] CPU: 0 UID: 0 PID: 12243 Comm: syz.0.1891 Not tainted syzkaller #0 PREEMPT(full) [ 195.526809][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.526819][T12243] Call Trace: [ 195.526826][T12243] [ 195.526834][T12243] dump_stack_lvl+0x189/0x250 [ 195.526861][T12243] ? __pfx____ratelimit+0x10/0x10 [ 195.526883][T12243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.526906][T12243] ? __pfx__printk+0x10/0x10 [ 195.526941][T12243] should_fail_ex+0x414/0x560 [ 195.526971][T12243] should_failslab+0xa8/0x100 [ 195.526992][T12243] __kmalloc_cache_noprof+0x6f/0x6f0 [ 195.527014][T12243] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 195.527036][T12243] ? sctp_add_bind_addr+0x8c/0x370 [ 195.527064][T12243] sctp_add_bind_addr+0x8c/0x370 [ 195.527092][T12243] sctp_copy_local_addr_list+0x30b/0x4e0 [ 195.527118][T12243] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 195.527140][T12243] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 195.527165][T12243] ? sctp_v6_is_any+0x64/0x80 [ 195.527189][T12243] ? sctp_copy_one_addr+0x93/0x360 [ 195.527216][T12243] sctp_bind_addr_copy+0xb3/0x3c0 [ 195.527239][T12243] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 195.527264][T12243] sctp_connect_new_asoc+0x2e0/0x690 [ 195.527286][T12243] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 195.527316][T12243] ? sctp_get_af_specific+0x29/0x80 [ 195.527336][T12243] ? sctp_inet6_send_verify+0x80/0x300 [ 195.527357][T12243] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 195.527378][T12243] __sctp_connect+0x5ba/0xd50 [ 195.527410][T12243] ? __pfx___sctp_connect+0x10/0x10 [ 195.527432][T12243] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 195.527451][T12243] ? security_sctp_bind_connect+0x7e/0x2e0 [ 195.527475][T12243] sctp_getsockopt_connectx3+0x2c4/0x440 [ 195.527507][T12243] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 195.527531][T12243] ? __local_bh_enable_ip+0x12d/0x1c0 [ 195.527550][T12243] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 195.527581][T12243] sctp_getsockopt+0x98a/0xb60 [ 195.527597][T12243] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 195.527624][T12243] do_sock_getsockopt+0x372/0x450 [ 195.527646][T12243] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 195.527663][T12243] ? do_syscall_64+0xa0/0xfa0 [ 195.527685][T12243] ? __fget_files+0x2a/0x420 [ 195.527700][T12243] ? __fget_files+0x3a0/0x420 [ 195.527716][T12243] ? __fget_files+0x2a/0x420 [ 195.527740][T12243] __x64_sys_getsockopt+0x1a5/0x250 [ 195.527758][T12243] ? do_syscall_64+0xa0/0xfa0 [ 195.527782][T12243] ? do_syscall_64+0xa0/0xfa0 [ 195.527808][T12243] do_syscall_64+0xfa/0xfa0 [ 195.527829][T12243] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.527851][T12243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.527868][T12243] ? clear_bhb_loop+0x60/0xb0 [ 195.527890][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.527907][T12243] RIP: 0033:0x7fcf1c38f6c9 [ 195.527923][T12243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.527937][T12243] RSP: 002b:00007fcf1d28a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 195.527956][T12243] RAX: ffffffffffffffda RBX: 00007fcf1c5e5fa0 RCX: 00007fcf1c38f6c9 [ 195.527969][T12243] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 195.527980][T12243] RBP: 00007fcf1d28a090 R08: 0000200000000240 R09: 0000000000000000 [ 195.527991][T12243] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.528002][T12243] R13: 00007fcf1c5e6038 R14: 00007fcf1c5e5fa0 R15: 00007ffdfcfcc9a8 [ 195.528036][T12243] [ 196.255996][T12270] FAULT_INJECTION: forcing a failure. [ 196.255996][T12270] name failslab, interval 1, probability 0, space 0, times 0 [ 196.257890][T12271] netlink: 'syz.0.1905': attribute type 1 has an invalid length. [ 196.278898][T12270] CPU: 1 UID: 0 PID: 12270 Comm: syz.2.1903 Not tainted syzkaller #0 PREEMPT(full) [ 196.278923][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.278934][T12270] Call Trace: [ 196.278942][T12270] [ 196.278949][T12270] dump_stack_lvl+0x189/0x250 [ 196.278974][T12270] ? __pfx____ratelimit+0x10/0x10 [ 196.278997][T12270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.279020][T12270] ? __pfx__printk+0x10/0x10 [ 196.279052][T12270] should_fail_ex+0x414/0x560 [ 196.279084][T12270] should_failslab+0xa8/0x100 [ 196.279104][T12270] __kmalloc_cache_noprof+0x6f/0x6f0 [ 196.279127][T12270] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 196.279151][T12270] ? sctp_add_bind_addr+0x8c/0x370 [ 196.279179][T12270] sctp_add_bind_addr+0x8c/0x370 [ 196.279215][T12270] sctp_copy_local_addr_list+0x30b/0x4e0 [ 196.279240][T12270] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 196.279263][T12270] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 196.279284][T12270] ? sctp_v6_is_any+0x64/0x80 [ 196.279306][T12270] ? sctp_copy_one_addr+0x93/0x360 [ 196.279327][T12270] sctp_bind_addr_copy+0xb3/0x3c0 [ 196.279349][T12270] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 196.279372][T12270] sctp_connect_new_asoc+0x2e0/0x690 [ 196.279392][T12270] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.279416][T12270] ? sctp_get_af_specific+0x29/0x80 [ 196.279437][T12270] ? sctp_inet6_send_verify+0x80/0x300 [ 196.279456][T12270] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 196.279477][T12270] __sctp_connect+0x5ba/0xd50 [ 196.279506][T12270] ? __pfx___sctp_connect+0x10/0x10 [ 196.279528][T12270] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 196.279546][T12270] ? security_sctp_bind_connect+0x7e/0x2e0 [ 196.279570][T12270] sctp_getsockopt_connectx3+0x2c4/0x440 [ 196.279596][T12270] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 196.279620][T12270] ? __local_bh_enable_ip+0x12d/0x1c0 [ 196.279638][T12270] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 196.279669][T12270] sctp_getsockopt+0x98a/0xb60 [ 196.279684][T12270] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 196.279711][T12270] do_sock_getsockopt+0x372/0x450 [ 196.279733][T12270] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 196.279750][T12270] ? do_syscall_64+0xa0/0xfa0 [ 196.279771][T12270] ? __fget_files+0x2a/0x420 [ 196.279785][T12270] ? __fget_files+0x3a0/0x420 [ 196.279799][T12270] ? __fget_files+0x2a/0x420 [ 196.279821][T12270] __x64_sys_getsockopt+0x1a5/0x250 [ 196.279839][T12270] ? do_syscall_64+0xa0/0xfa0 [ 196.279862][T12270] ? do_syscall_64+0xa0/0xfa0 [ 196.279887][T12270] do_syscall_64+0xfa/0xfa0 [ 196.279908][T12270] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.279930][T12270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.279947][T12270] ? clear_bhb_loop+0x60/0xb0 [ 196.279967][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.279984][T12270] RIP: 0033:0x7ff528b8f6c9 [ 196.280000][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.280015][T12270] RSP: 002b:00007ff526df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 196.280034][T12270] RAX: ffffffffffffffda RBX: 00007ff528de5fa0 RCX: 00007ff528b8f6c9 [ 196.280047][T12270] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 196.280058][T12270] RBP: 00007ff526df6090 R08: 0000200000000240 R09: 0000000000000000 [ 196.280069][T12270] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.280080][T12270] R13: 00007ff528de6038 R14: 00007ff528de5fa0 R15: 00007ffc9bfb0078 [ 196.280113][T12270] [ 196.634576][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.640781][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 196.646908][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 196.675772][T12278] __nla_validate_parse: 40 callbacks suppressed [ 196.675790][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1905'. [ 196.699018][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 196.738823][T12271] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.780020][T12274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.787222][T12274] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 196.798867][T12274] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 196.820535][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'. [ 196.884952][T12271] veth7: entered promiscuous mode [ 196.926088][T12278] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.966158][T12285] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 196.982298][T12285] bond4 (unregistering): Released all slaves [ 197.120103][T12298] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1910'. [ 197.193707][T12298] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1910'. [ 197.257911][T12314] netlink: 'syz.4.1915': attribute type 178 has an invalid length. [ 197.269808][T12316] FAULT_INJECTION: forcing a failure. [ 197.269808][T12316] name failslab, interval 1, probability 0, space 0, times 0 [ 197.282907][T12316] CPU: 0 UID: 0 PID: 12316 Comm: syz.1.1916 Not tainted syzkaller #0 PREEMPT(full) [ 197.282931][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.282941][T12316] Call Trace: [ 197.282949][T12316] [ 197.282956][T12316] dump_stack_lvl+0x189/0x250 [ 197.282983][T12316] ? __pfx____ratelimit+0x10/0x10 [ 197.283006][T12316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.283027][T12316] ? __pfx__printk+0x10/0x10 [ 197.283062][T12316] should_fail_ex+0x414/0x560 [ 197.283091][T12316] should_failslab+0xa8/0x100 [ 197.283111][T12316] __kmalloc_cache_noprof+0x6f/0x6f0 [ 197.283142][T12316] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 197.283163][T12316] ? sctp_add_bind_addr+0x8c/0x370 [ 197.283183][T12316] ? sctp_add_bind_addr+0xb0/0x370 [ 197.283208][T12316] sctp_add_bind_addr+0x8c/0x370 [ 197.283234][T12316] sctp_copy_local_addr_list+0x30b/0x4e0 [ 197.283260][T12316] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 197.283293][T12316] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 197.283317][T12316] ? sctp_v6_is_any+0x64/0x80 [ 197.283342][T12316] ? sctp_copy_one_addr+0x93/0x360 [ 197.283368][T12316] sctp_bind_addr_copy+0xb3/0x3c0 [ 197.283397][T12316] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 197.283422][T12316] sctp_connect_new_asoc+0x2e0/0x690 [ 197.283443][T12316] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 197.283467][T12316] ? sctp_get_af_specific+0x29/0x80 [ 197.283488][T12316] ? sctp_inet6_send_verify+0x80/0x300 [ 197.283508][T12316] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 197.283529][T12316] __sctp_connect+0x5ba/0xd50 [ 197.283561][T12316] ? __pfx___sctp_connect+0x10/0x10 [ 197.283582][T12316] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 197.283600][T12316] ? security_sctp_bind_connect+0x7e/0x2e0 [ 197.283623][T12316] sctp_getsockopt_connectx3+0x2c4/0x440 [ 197.283649][T12316] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 197.283673][T12316] ? __local_bh_enable_ip+0x12d/0x1c0 [ 197.283693][T12316] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 197.283723][T12316] sctp_getsockopt+0x98a/0xb60 [ 197.283738][T12316] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 197.283765][T12316] do_sock_getsockopt+0x372/0x450 [ 197.283787][T12316] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 197.283804][T12316] ? do_syscall_64+0xa0/0xfa0 [ 197.283825][T12316] ? __fget_files+0x2a/0x420 [ 197.283841][T12316] ? __fget_files+0x3a0/0x420 [ 197.283861][T12316] ? __fget_files+0x2a/0x420 [ 197.283892][T12316] __x64_sys_getsockopt+0x1a5/0x250 [ 197.283909][T12316] ? do_syscall_64+0xa0/0xfa0 [ 197.283932][T12316] ? do_syscall_64+0xa0/0xfa0 [ 197.283959][T12316] do_syscall_64+0xfa/0xfa0 [ 197.283979][T12316] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.284001][T12316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.284018][T12316] ? clear_bhb_loop+0x60/0xb0 [ 197.284039][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.284056][T12316] RIP: 0033:0x7f5d8ed8f6c9 [ 197.284072][T12316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.284087][T12316] RSP: 002b:00007f5d8fc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 197.284105][T12316] RAX: ffffffffffffffda RBX: 00007f5d8efe5fa0 RCX: 00007f5d8ed8f6c9 [ 197.284118][T12316] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 197.284134][T12316] RBP: 00007f5d8fc18090 R08: 0000200000000240 R09: 0000000000000000 [ 197.284145][T12316] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.284156][T12316] R13: 00007f5d8efe6038 R14: 00007f5d8efe5fa0 R15: 00007fff7f4ad118 [ 197.284187][T12316] [ 197.642326][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 197.656179][T12309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.731090][T12324] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 197.790786][T12324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.088999][T12353] netlink: 'syz.0.1926': attribute type 32 has an invalid length. [ 198.170187][T12331] wg1: left promiscuous mode [ 198.174922][T12331] wg1: left allmulticast mode [ 198.273263][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.304940][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.465876][T12331] tipc: Resetting bearer [ 198.616553][T12331] veth5: left promiscuous mode [ 198.630885][T12331] geneve2: left promiscuous mode [ 198.636143][T12331] geneve2: left allmulticast mode [ 198.648041][T12331] hsr0: left promiscuous mode [ 198.771712][ T79] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.823550][ T79] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.850742][ T79] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 198.882612][ T79] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.893603][T12374] FAULT_INJECTION: forcing a failure. [ 198.893603][T12374] name failslab, interval 1, probability 0, space 0, times 0 [ 198.899553][ T79] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.925550][ T79] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 198.925631][T12377] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 198.942933][ T79] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.952827][T12374] CPU: 0 UID: 0 PID: 12374 Comm: syz.2.1928 Not tainted syzkaller #0 PREEMPT(full) [ 198.952858][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.952868][T12374] Call Trace: [ 198.952876][T12374] [ 198.952883][T12374] dump_stack_lvl+0x189/0x250 [ 198.952909][T12374] ? __pfx____ratelimit+0x10/0x10 [ 198.952931][T12374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.952953][T12374] ? __pfx__printk+0x10/0x10 [ 198.952986][T12374] should_fail_ex+0x414/0x560 [ 198.953016][T12374] should_failslab+0xa8/0x100 [ 198.953037][T12374] __kmalloc_cache_noprof+0x6f/0x6f0 [ 198.953058][T12374] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 198.953080][T12374] ? sctp_add_bind_addr+0x8c/0x370 [ 198.953108][T12374] sctp_add_bind_addr+0x8c/0x370 [ 198.953133][T12374] sctp_copy_local_addr_list+0x30b/0x4e0 [ 198.953158][T12374] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 198.953180][T12374] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 198.953203][T12374] ? sctp_v6_is_any+0x64/0x80 [ 198.953225][T12374] ? sctp_copy_one_addr+0x93/0x360 [ 198.953250][T12374] sctp_bind_addr_copy+0xb3/0x3c0 [ 198.953274][T12374] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 198.953297][T12374] sctp_connect_new_asoc+0x2e0/0x690 [ 198.953319][T12374] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 198.953342][T12374] ? sctp_get_af_specific+0x29/0x80 [ 198.953363][T12374] ? sctp_inet6_send_verify+0x80/0x300 [ 198.953382][T12374] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 198.953403][T12374] __sctp_connect+0x5ba/0xd50 [ 198.953433][T12374] ? __pfx___sctp_connect+0x10/0x10 [ 198.953455][T12374] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 198.953472][T12374] ? security_sctp_bind_connect+0x7e/0x2e0 [ 198.953495][T12374] sctp_getsockopt_connectx3+0x2c4/0x440 [ 198.953522][T12374] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 198.953545][T12374] ? __local_bh_enable_ip+0x12d/0x1c0 [ 198.953564][T12374] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 198.953593][T12374] sctp_getsockopt+0x98a/0xb60 [ 198.953609][T12374] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 198.953635][T12374] do_sock_getsockopt+0x372/0x450 [ 198.953657][T12374] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 198.953674][T12374] ? do_syscall_64+0xa0/0xfa0 [ 198.953692][T12374] ? __fget_files+0x2a/0x420 [ 198.953716][T12374] ? __fget_files+0x3a0/0x420 [ 198.953730][T12374] ? __fget_files+0x2a/0x420 [ 198.953755][T12374] __x64_sys_getsockopt+0x1a5/0x250 [ 198.953772][T12374] ? do_syscall_64+0xa0/0xfa0 [ 198.953795][T12374] ? do_syscall_64+0xa0/0xfa0 [ 198.953821][T12374] do_syscall_64+0xfa/0xfa0 [ 198.953842][T12374] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.953864][T12374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.953881][T12374] ? clear_bhb_loop+0x60/0xb0 [ 198.953902][T12374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.953918][T12374] RIP: 0033:0x7ff528b8f6c9 [ 198.953934][T12374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.953949][T12374] RSP: 002b:00007ff526df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 198.953967][T12374] RAX: ffffffffffffffda RBX: 00007ff528de5fa0 RCX: 00007ff528b8f6c9 [ 198.953980][T12374] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 198.953991][T12374] RBP: 00007ff526df6090 R08: 0000200000000240 R09: 0000000000000000 [ 198.954002][T12374] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.954013][T12374] R13: 00007ff528de6038 R14: 00007ff528de5fa0 R15: 00007ffc9bfb0078 [ 198.954045][T12374] [ 198.993604][T12381] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1932'. [ 199.007744][ T79] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.016954][T12381] openvswitch: netlink: Flow key attr not present in new flow. [ 199.020352][ T79] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 199.124069][T12391] netlink: 'syz.2.1933': attribute type 28 has an invalid length. [ 199.129866][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 199.133755][T12391] netlink: 'syz.2.1933': attribute type 3 has an invalid length. [ 199.195764][T12393] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1933'. [ 199.204558][T12391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1933'. [ 199.399733][T12377] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 199.400725][ T79] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.418239][ T79] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.438508][ T79] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 199.750884][T12425] netlink: 'syz.3.1939': attribute type 23 has an invalid length. [ 199.836587][T12431] FAULT_INJECTION: forcing a failure. [ 199.836587][T12431] name failslab, interval 1, probability 0, space 0, times 0 [ 199.849431][T12431] CPU: 0 UID: 0 PID: 12431 Comm: syz.0.1943 Not tainted syzkaller #0 PREEMPT(full) [ 199.849455][T12431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.849466][T12431] Call Trace: [ 199.849474][T12431] [ 199.849482][T12431] dump_stack_lvl+0x189/0x250 [ 199.849510][T12431] ? __pfx____ratelimit+0x10/0x10 [ 199.849532][T12431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.849554][T12431] ? __pfx__printk+0x10/0x10 [ 199.849588][T12431] should_fail_ex+0x414/0x560 [ 199.849618][T12431] should_failslab+0xa8/0x100 [ 199.849638][T12431] __kmalloc_cache_noprof+0x6f/0x6f0 [ 199.849660][T12431] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 199.849682][T12431] ? sctp_add_bind_addr+0x8c/0x370 [ 199.849711][T12431] sctp_add_bind_addr+0x8c/0x370 [ 199.849737][T12431] sctp_copy_local_addr_list+0x30b/0x4e0 [ 199.849764][T12431] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 199.849786][T12431] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 199.849811][T12431] ? sctp_v6_is_any+0x64/0x80 [ 199.849835][T12431] ? sctp_copy_one_addr+0x93/0x360 [ 199.849860][T12431] sctp_bind_addr_copy+0xb3/0x3c0 [ 199.849881][T12431] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 199.849904][T12431] sctp_connect_new_asoc+0x2e0/0x690 [ 199.849933][T12431] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 199.849957][T12431] ? sctp_get_af_specific+0x29/0x80 [ 199.849976][T12431] ? sctp_inet6_send_verify+0x80/0x300 [ 199.849996][T12431] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 199.850017][T12431] __sctp_connect+0x5ba/0xd50 [ 199.850048][T12431] ? __pfx___sctp_connect+0x10/0x10 [ 199.850068][T12431] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 199.850086][T12431] ? security_sctp_bind_connect+0x7e/0x2e0 [ 199.850110][T12431] sctp_getsockopt_connectx3+0x2c4/0x440 [ 199.850137][T12431] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 199.850161][T12431] ? __local_bh_enable_ip+0x12d/0x1c0 [ 199.850179][T12431] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 199.850210][T12431] sctp_getsockopt+0x98a/0xb60 [ 199.850225][T12431] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 199.850252][T12431] do_sock_getsockopt+0x372/0x450 [ 199.850273][T12431] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 199.850291][T12431] ? do_syscall_64+0xa0/0xfa0 [ 199.850312][T12431] ? __fget_files+0x2a/0x420 [ 199.850328][T12431] ? __fget_files+0x3a0/0x420 [ 199.850343][T12431] ? __fget_files+0x2a/0x420 [ 199.850368][T12431] __x64_sys_getsockopt+0x1a5/0x250 [ 199.850385][T12431] ? do_syscall_64+0xa0/0xfa0 [ 199.850408][T12431] ? do_syscall_64+0xa0/0xfa0 [ 199.850435][T12431] do_syscall_64+0xfa/0xfa0 [ 199.850454][T12431] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.850476][T12431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.850493][T12431] ? clear_bhb_loop+0x60/0xb0 [ 199.850513][T12431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.850529][T12431] RIP: 0033:0x7fcf1c38f6c9 [ 199.850545][T12431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.850559][T12431] RSP: 002b:00007fcf1d28a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 199.850578][T12431] RAX: ffffffffffffffda RBX: 00007fcf1c5e5fa0 RCX: 00007fcf1c38f6c9 [ 199.850591][T12431] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 199.850601][T12431] RBP: 00007fcf1d28a090 R08: 0000200000000240 R09: 0000000000000000 [ 199.850613][T12431] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.850624][T12431] R13: 00007fcf1c5e6038 R14: 00007fcf1c5e5fa0 R15: 00007ffdfcfcc9a8 [ 199.850656][T12431] [ 199.905673][T12434] netlink: 'syz.3.1944': attribute type 3 has an invalid length. [ 200.506401][T12466] FAULT_INJECTION: forcing a failure. [ 200.506401][T12466] name failslab, interval 1, probability 0, space 0, times 0 [ 200.513379][T12463] tipc: Enabled bearer , priority 0 [ 200.522383][T12466] CPU: 1 UID: 0 PID: 12466 Comm: syz.2.1956 Not tainted syzkaller #0 PREEMPT(full) [ 200.522407][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.522418][T12466] Call Trace: [ 200.522425][T12466] [ 200.522434][T12466] dump_stack_lvl+0x189/0x250 [ 200.522465][T12466] ? __pfx____ratelimit+0x10/0x10 [ 200.522491][T12466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.522516][T12466] ? __pfx__printk+0x10/0x10 [ 200.522548][T12466] should_fail_ex+0x414/0x560 [ 200.522577][T12466] should_failslab+0xa8/0x100 [ 200.522596][T12466] __kmalloc_cache_noprof+0x6f/0x6f0 [ 200.522624][T12466] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 200.522646][T12466] ? sctp_add_bind_addr+0x8c/0x370 [ 200.522674][T12466] sctp_add_bind_addr+0x8c/0x370 [ 200.522703][T12466] sctp_copy_local_addr_list+0x30b/0x4e0 [ 200.522728][T12466] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 200.522749][T12466] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 200.522773][T12466] ? sctp_v6_is_any+0x64/0x80 [ 200.522797][T12466] ? sctp_copy_one_addr+0x93/0x360 [ 200.522821][T12466] sctp_bind_addr_copy+0xb3/0x3c0 [ 200.522843][T12466] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 200.522866][T12466] sctp_connect_new_asoc+0x2e0/0x690 [ 200.522884][T12466] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 200.522907][T12466] ? sctp_get_af_specific+0x29/0x80 [ 200.522927][T12466] ? sctp_inet6_send_verify+0x80/0x300 [ 200.522946][T12466] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 200.522965][T12466] __sctp_connect+0x5ba/0xd50 [ 200.522995][T12466] ? __pfx___sctp_connect+0x10/0x10 [ 200.523015][T12466] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 200.523033][T12466] ? security_sctp_bind_connect+0x7e/0x2e0 [ 200.523055][T12466] sctp_getsockopt_connectx3+0x2c4/0x440 [ 200.523080][T12466] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 200.523103][T12466] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.523122][T12466] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 200.523150][T12466] sctp_getsockopt+0x98a/0xb60 [ 200.523164][T12466] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 200.523189][T12466] do_sock_getsockopt+0x372/0x450 [ 200.523210][T12466] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 200.523226][T12466] ? do_syscall_64+0xa0/0xfa0 [ 200.523246][T12466] ? __fget_files+0x2a/0x420 [ 200.523260][T12466] ? __fget_files+0x3a0/0x420 [ 200.523275][T12466] ? __fget_files+0x2a/0x420 [ 200.523298][T12466] __x64_sys_getsockopt+0x1a5/0x250 [ 200.523314][T12466] ? do_syscall_64+0xa0/0xfa0 [ 200.523336][T12466] ? do_syscall_64+0xa0/0xfa0 [ 200.523361][T12466] do_syscall_64+0xfa/0xfa0 [ 200.523381][T12466] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.523402][T12466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.523419][T12466] ? clear_bhb_loop+0x60/0xb0 [ 200.523438][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.523454][T12466] RIP: 0033:0x7ff528b8f6c9 [ 200.523469][T12466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.523483][T12466] RSP: 002b:00007ff526df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 200.523502][T12466] RAX: ffffffffffffffda RBX: 00007ff528de5fa0 RCX: 00007ff528b8f6c9 [ 200.523513][T12466] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 200.523524][T12466] RBP: 00007ff526df6090 R08: 0000200000000240 R09: 0000000000000000 [ 200.523535][T12466] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.523545][T12466] R13: 00007ff528de6038 R14: 00007ff528de5fa0 R15: 00007ffc9bfb0078 [ 200.523576][T12466] [ 200.743145][T12482] netlink: 'syz.2.1959': attribute type 14 has an invalid length. [ 200.833870][T12471] tipc: Enabling of bearer rejected, failed to enable media [ 200.898844][T12482] netlink: 'syz.2.1959': attribute type 13 has an invalid length. [ 200.928456][T12476] syzkaller0: entered promiscuous mode [ 200.934313][T12476] syzkaller0: entered allmulticast mode [ 201.000227][T12463] tipc: Resetting bearer [ 201.296406][T12489] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 201.323747][T12491] set match dimension is over the limit! [ 201.496995][T12493] bond4: (slave gretap1): making interface the new active one [ 201.518161][T12497] openvswitch: netlink: Message has 6 unknown bytes. [ 201.526170][T12493] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 201.549229][T12462] tipc: Resetting bearer [ 201.594979][T12462] tipc: Disabling bearer [ 201.940546][T12518] __nla_validate_parse: 14 callbacks suppressed [ 201.940565][T12518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1971'. [ 202.124868][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 202.241688][T12528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.408530][T12550] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1980'. [ 202.464658][T12558] FAULT_INJECTION: forcing a failure. [ 202.464658][T12558] name failslab, interval 1, probability 0, space 0, times 0 [ 202.497917][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.0.1983 Not tainted syzkaller #0 PREEMPT(full) [ 202.497940][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.497950][T12558] Call Trace: [ 202.497956][T12558] [ 202.497964][T12558] dump_stack_lvl+0x189/0x250 [ 202.497991][T12558] ? __pfx____ratelimit+0x10/0x10 [ 202.498013][T12558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.498034][T12558] ? __pfx__printk+0x10/0x10 [ 202.498068][T12558] should_fail_ex+0x414/0x560 [ 202.498098][T12558] should_failslab+0xa8/0x100 [ 202.498117][T12558] __kmalloc_cache_noprof+0x6f/0x6f0 [ 202.498138][T12558] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 202.498159][T12558] ? sctp_add_bind_addr+0x8c/0x370 [ 202.498187][T12558] sctp_add_bind_addr+0x8c/0x370 [ 202.498211][T12558] sctp_copy_local_addr_list+0x30b/0x4e0 [ 202.498235][T12558] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 202.498255][T12558] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 202.498279][T12558] ? sctp_v6_is_any+0x64/0x80 [ 202.498302][T12558] ? sctp_copy_one_addr+0x93/0x360 [ 202.498327][T12558] sctp_bind_addr_copy+0xb3/0x3c0 [ 202.498351][T12558] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 202.498376][T12558] sctp_connect_new_asoc+0x2e0/0x690 [ 202.498398][T12558] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 202.498422][T12558] ? sctp_get_af_specific+0x29/0x80 [ 202.498440][T12558] ? sctp_inet6_send_verify+0x80/0x300 [ 202.498459][T12558] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 202.498480][T12558] __sctp_connect+0x5ba/0xd50 [ 202.498509][T12558] ? __pfx___sctp_connect+0x10/0x10 [ 202.498531][T12558] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 202.498549][T12558] ? security_sctp_bind_connect+0x7e/0x2e0 [ 202.498573][T12558] sctp_getsockopt_connectx3+0x2c4/0x440 [ 202.498599][T12558] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 202.498622][T12558] ? __local_bh_enable_ip+0x12d/0x1c0 [ 202.498641][T12558] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 202.498717][T12558] sctp_getsockopt+0x98a/0xb60 [ 202.498733][T12558] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 202.498759][T12558] do_sock_getsockopt+0x372/0x450 [ 202.498781][T12558] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 202.498798][T12558] ? do_syscall_64+0xa0/0xfa0 [ 202.498819][T12558] ? __fget_files+0x2a/0x420 [ 202.498834][T12558] ? __fget_files+0x3a0/0x420 [ 202.498849][T12558] ? __fget_files+0x2a/0x420 [ 202.498874][T12558] __x64_sys_getsockopt+0x1a5/0x250 [ 202.498891][T12558] ? do_syscall_64+0xa0/0xfa0 [ 202.498914][T12558] ? do_syscall_64+0xa0/0xfa0 [ 202.498939][T12558] do_syscall_64+0xfa/0xfa0 [ 202.498959][T12558] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.498981][T12558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.499002][T12558] ? clear_bhb_loop+0x60/0xb0 [ 202.499022][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.499037][T12558] RIP: 0033:0x7fcf1c38f6c9 [ 202.499053][T12558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.499065][T12558] RSP: 002b:00007fcf1d28a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 202.499082][T12558] RAX: ffffffffffffffda RBX: 00007fcf1c5e5fa0 RCX: 00007fcf1c38f6c9 [ 202.499092][T12558] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 202.499101][T12558] RBP: 00007fcf1d28a090 R08: 0000200000000240 R09: 0000000000000000 [ 202.499111][T12558] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.499122][T12558] R13: 00007fcf1c5e6038 R14: 00007fcf1c5e5fa0 R15: 00007ffdfcfcc9a8 [ 202.499151][T12558] [ 203.413333][T12603] FAULT_INJECTION: forcing a failure. [ 203.413333][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 203.427511][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.2.1996 Not tainted syzkaller #0 PREEMPT(full) [ 203.427535][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.427546][T12603] Call Trace: [ 203.427553][T12603] [ 203.427560][T12603] dump_stack_lvl+0x189/0x250 [ 203.427587][T12603] ? __pfx____ratelimit+0x10/0x10 [ 203.427609][T12603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.427631][T12603] ? __pfx__printk+0x10/0x10 [ 203.427664][T12603] should_fail_ex+0x414/0x560 [ 203.427694][T12603] should_failslab+0xa8/0x100 [ 203.427713][T12603] __kmalloc_cache_noprof+0x6f/0x6f0 [ 203.427736][T12603] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 203.427758][T12603] ? sctp_add_bind_addr+0x8c/0x370 [ 203.427786][T12603] sctp_add_bind_addr+0x8c/0x370 [ 203.427811][T12603] sctp_copy_local_addr_list+0x30b/0x4e0 [ 203.427834][T12603] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 203.427856][T12603] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 203.427880][T12603] ? sctp_v6_is_any+0x64/0x80 [ 203.427899][T12603] ? sctp_copy_one_addr+0x93/0x360 [ 203.427925][T12603] sctp_bind_addr_copy+0xb3/0x3c0 [ 203.427948][T12603] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 203.427972][T12603] sctp_connect_new_asoc+0x2e0/0x690 [ 203.427993][T12603] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.428017][T12603] ? sctp_get_af_specific+0x29/0x80 [ 203.428037][T12603] ? sctp_inet6_send_verify+0x80/0x300 [ 203.428055][T12603] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 203.428074][T12603] __sctp_connect+0x5ba/0xd50 [ 203.428103][T12603] ? __pfx___sctp_connect+0x10/0x10 [ 203.428121][T12603] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 203.428133][T12603] ? security_sctp_bind_connect+0x7e/0x2e0 [ 203.428146][T12603] sctp_getsockopt_connectx3+0x2c4/0x440 [ 203.428162][T12603] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 203.428176][T12603] ? __local_bh_enable_ip+0x12d/0x1c0 [ 203.428187][T12603] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 203.428203][T12603] sctp_getsockopt+0x98a/0xb60 [ 203.428212][T12603] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 203.428226][T12603] do_sock_getsockopt+0x372/0x450 [ 203.428239][T12603] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 203.428249][T12603] ? do_syscall_64+0xa0/0xfa0 [ 203.428261][T12603] ? __fget_files+0x2a/0x420 [ 203.428271][T12603] ? __fget_files+0x3a0/0x420 [ 203.428279][T12603] ? __fget_files+0x2a/0x420 [ 203.428292][T12603] __x64_sys_getsockopt+0x1a5/0x250 [ 203.428302][T12603] ? do_syscall_64+0xa0/0xfa0 [ 203.428315][T12603] ? do_syscall_64+0xa0/0xfa0 [ 203.428335][T12603] do_syscall_64+0xfa/0xfa0 [ 203.428347][T12603] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.428360][T12603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.428370][T12603] ? clear_bhb_loop+0x60/0xb0 [ 203.428382][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.428391][T12603] RIP: 0033:0x7ff528b8f6c9 [ 203.428400][T12603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.428409][T12603] RSP: 002b:00007ff526df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 203.428421][T12603] RAX: ffffffffffffffda RBX: 00007ff528de5fa0 RCX: 00007ff528b8f6c9 [ 203.428428][T12603] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 203.428434][T12603] RBP: 00007ff526df6090 R08: 0000200000000240 R09: 0000000000000000 [ 203.428440][T12603] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.428446][T12603] R13: 00007ff528de6038 R14: 00007ff528de5fa0 R15: 00007ffc9bfb0078 [ 203.428464][T12603] [ 203.774104][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 203.869692][T12607] C: renamed from lo (while UP) [ 203.910123][T12607] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 203.997814][T12610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.052372][T12617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'. [ 204.126597][T12624] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2003'. [ 204.185082][T12624] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2003'. [ 204.229790][T12624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2003'. [ 204.240162][T12625] netlink: 'syz.1.2005': attribute type 4 has an invalid length. [ 204.271131][T12632] FAULT_INJECTION: forcing a failure. [ 204.271131][T12632] name failslab, interval 1, probability 0, space 0, times 0 [ 204.293897][T12632] CPU: 0 UID: 0 PID: 12632 Comm: syz.0.2007 Not tainted syzkaller #0 PREEMPT(full) [ 204.293920][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.293929][T12632] Call Trace: [ 204.293935][T12632] [ 204.293943][T12632] dump_stack_lvl+0x189/0x250 [ 204.293970][T12632] ? __pfx____ratelimit+0x10/0x10 [ 204.293992][T12632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.294013][T12632] ? __pfx__printk+0x10/0x10 [ 204.294045][T12632] should_fail_ex+0x414/0x560 [ 204.294075][T12632] should_failslab+0xa8/0x100 [ 204.294095][T12632] __kmalloc_cache_noprof+0x6f/0x6f0 [ 204.294114][T12632] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 204.294135][T12632] ? sctp_add_bind_addr+0x8c/0x370 [ 204.294160][T12632] sctp_add_bind_addr+0x8c/0x370 [ 204.294184][T12632] sctp_copy_local_addr_list+0x30b/0x4e0 [ 204.294209][T12632] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 204.294228][T12632] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 204.294250][T12632] ? sctp_v6_is_any+0x64/0x80 [ 204.294272][T12632] ? sctp_copy_one_addr+0x93/0x360 [ 204.294296][T12632] sctp_bind_addr_copy+0xb3/0x3c0 [ 204.294318][T12632] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 204.294340][T12632] sctp_connect_new_asoc+0x2e0/0x690 [ 204.294361][T12632] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 204.294386][T12632] ? sctp_get_af_specific+0x29/0x80 [ 204.294405][T12632] ? sctp_inet6_send_verify+0x80/0x300 [ 204.294424][T12632] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 204.294443][T12632] __sctp_connect+0x5ba/0xd50 [ 204.294486][T12632] ? __pfx___sctp_connect+0x10/0x10 [ 204.294507][T12632] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 204.294524][T12632] ? security_sctp_bind_connect+0x7e/0x2e0 [ 204.294548][T12632] sctp_getsockopt_connectx3+0x2c4/0x440 [ 204.294574][T12632] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 204.294599][T12632] ? __local_bh_enable_ip+0x12d/0x1c0 [ 204.294617][T12632] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 204.294645][T12632] sctp_getsockopt+0x98a/0xb60 [ 204.294661][T12632] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 204.294686][T12632] do_sock_getsockopt+0x372/0x450 [ 204.294708][T12632] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 204.294723][T12632] ? do_syscall_64+0xa0/0xfa0 [ 204.294743][T12632] ? __fget_files+0x2a/0x420 [ 204.294758][T12632] ? __fget_files+0x3a0/0x420 [ 204.294772][T12632] ? __fget_files+0x2a/0x420 [ 204.294796][T12632] __x64_sys_getsockopt+0x1a5/0x250 [ 204.294811][T12632] ? do_syscall_64+0xa0/0xfa0 [ 204.294834][T12632] ? do_syscall_64+0xa0/0xfa0 [ 204.294860][T12632] do_syscall_64+0xfa/0xfa0 [ 204.294880][T12632] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.294903][T12632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.294919][T12632] ? clear_bhb_loop+0x60/0xb0 [ 204.294941][T12632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.294957][T12632] RIP: 0033:0x7fcf1c38f6c9 [ 204.294974][T12632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.294988][T12632] RSP: 002b:00007fcf1d28a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 204.295007][T12632] RAX: ffffffffffffffda RBX: 00007fcf1c5e5fa0 RCX: 00007fcf1c38f6c9 [ 204.295020][T12632] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 204.295030][T12632] RBP: 00007fcf1d28a090 R08: 0000200000000240 R09: 0000000000000000 [ 204.295042][T12632] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.295052][T12632] R13: 00007fcf1c5e6038 R14: 00007fcf1c5e5fa0 R15: 00007ffdfcfcc9a8 [ 204.295084][T12632] [ 204.304158][T12625] netlink: 'syz.1.2005': attribute type 3 has an invalid length. [ 204.463321][T12644] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 204.582930][T12643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2013'. [ 204.609180][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 205.050731][T12674] raw_sendmsg: syz.4.2016 forgot to set AF_INET. Fix it! [ 205.066349][T12673] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2020'. [ 205.166403][T12679] FAULT_INJECTION: forcing a failure. [ 205.166403][T12679] name failslab, interval 1, probability 0, space 0, times 0 [ 205.216400][T12679] CPU: 1 UID: 0 PID: 12679 Comm: syz.2.2022 Not tainted syzkaller #0 PREEMPT(full) [ 205.216425][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.216436][T12679] Call Trace: [ 205.216443][T12679] [ 205.216451][T12679] dump_stack_lvl+0x189/0x250 [ 205.216478][T12679] ? __pfx____ratelimit+0x10/0x10 [ 205.216500][T12679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.216523][T12679] ? __pfx__printk+0x10/0x10 [ 205.216555][T12679] should_fail_ex+0x414/0x560 [ 205.216587][T12679] should_failslab+0xa8/0x100 [ 205.216607][T12679] __kmalloc_cache_noprof+0x6f/0x6f0 [ 205.216629][T12679] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 205.216652][T12679] ? sctp_add_bind_addr+0x8c/0x370 [ 205.216672][T12679] ? sctp_add_bind_addr+0xb0/0x370 [ 205.216694][T12679] sctp_add_bind_addr+0x8c/0x370 [ 205.216718][T12679] sctp_copy_local_addr_list+0x30b/0x4e0 [ 205.216743][T12679] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 205.216765][T12679] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 205.216789][T12679] ? sctp_v6_is_any+0x64/0x80 [ 205.216812][T12679] ? sctp_copy_one_addr+0x93/0x360 [ 205.216838][T12679] sctp_bind_addr_copy+0xb3/0x3c0 [ 205.216861][T12679] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 205.216885][T12679] sctp_connect_new_asoc+0x2e0/0x690 [ 205.216907][T12679] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 205.216931][T12679] ? sctp_get_af_specific+0x29/0x80 [ 205.216952][T12679] ? sctp_inet6_send_verify+0x80/0x300 [ 205.216972][T12679] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 205.216992][T12679] __sctp_connect+0x5ba/0xd50 [ 205.217023][T12679] ? __pfx___sctp_connect+0x10/0x10 [ 205.217046][T12679] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 205.217063][T12679] ? security_sctp_bind_connect+0x7e/0x2e0 [ 205.217086][T12679] sctp_getsockopt_connectx3+0x2c4/0x440 [ 205.217113][T12679] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 205.217138][T12679] ? __local_bh_enable_ip+0x12d/0x1c0 [ 205.217156][T12679] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 205.217187][T12679] sctp_getsockopt+0x98a/0xb60 [ 205.217202][T12679] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 205.217234][T12679] do_sock_getsockopt+0x372/0x450 [ 205.217257][T12679] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 205.217274][T12679] ? do_syscall_64+0xa0/0xfa0 [ 205.217295][T12679] ? __fget_files+0x2a/0x420 [ 205.217309][T12679] ? __fget_files+0x3a0/0x420 [ 205.217323][T12679] ? __fget_files+0x2a/0x420 [ 205.217345][T12679] __x64_sys_getsockopt+0x1a5/0x250 [ 205.217361][T12679] ? do_syscall_64+0xa0/0xfa0 [ 205.217381][T12679] ? do_syscall_64+0xa0/0xfa0 [ 205.217406][T12679] do_syscall_64+0xfa/0xfa0 [ 205.217430][T12679] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.217450][T12679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.217470][T12679] ? clear_bhb_loop+0x60/0xb0 [ 205.217489][T12679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.217503][T12679] RIP: 0033:0x7ff528b8f6c9 [ 205.217518][T12679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.217532][T12679] RSP: 002b:00007ff526df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 205.217550][T12679] RAX: ffffffffffffffda RBX: 00007ff528de5fa0 RCX: 00007ff528b8f6c9 [ 205.217561][T12679] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 205.217571][T12679] RBP: 00007ff526df6090 R08: 0000200000000240 R09: 0000000000000000 [ 205.217583][T12679] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.217593][T12679] R13: 00007ff528de6038 R14: 00007ff528de5fa0 R15: 00007ffc9bfb0078 [ 205.217623][T12679] [ 205.602184][T12684] sit0: Caught tx_queue_len zero misconfig [ 205.722851][T12687] Cannot find add_set index 1 as target [ 205.843887][T12703] tipc: Enabled bearer , priority 13 [ 205.860962][T12703] xt_hashlimit: max too large, truncated to 1048576 [ 206.016626][T12716] netlink: 'syz.2.2032': attribute type 13 has an invalid length. [ 206.068093][T12716] gretap0: refused to change device tx_queue_len [ 206.106083][T12716] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 206.161396][T12724] FAULT_INJECTION: forcing a failure. [ 206.161396][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 206.174443][T12724] CPU: 1 UID: 0 PID: 12724 Comm: syz.4.2035 Not tainted syzkaller #0 PREEMPT(full) [ 206.174465][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.174474][T12724] Call Trace: [ 206.174482][T12724] [ 206.174490][T12724] dump_stack_lvl+0x189/0x250 [ 206.174517][T12724] ? __pfx____ratelimit+0x10/0x10 [ 206.174541][T12724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.174562][T12724] ? __pfx__printk+0x10/0x10 [ 206.174593][T12724] should_fail_ex+0x414/0x560 [ 206.174634][T12724] should_failslab+0xa8/0x100 [ 206.174654][T12724] __kmalloc_cache_noprof+0x6f/0x6f0 [ 206.174677][T12724] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 206.174696][T12724] ? sctp_add_bind_addr+0x8c/0x370 [ 206.174714][T12724] ? sctp_add_bind_addr+0xb0/0x370 [ 206.174738][T12724] sctp_add_bind_addr+0x8c/0x370 [ 206.174763][T12724] sctp_copy_local_addr_list+0x30b/0x4e0 [ 206.174788][T12724] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 206.174810][T12724] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 206.174835][T12724] ? sctp_v6_is_any+0x64/0x80 [ 206.174860][T12724] ? sctp_copy_one_addr+0x93/0x360 [ 206.174886][T12724] sctp_bind_addr_copy+0xb3/0x3c0 [ 206.174909][T12724] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 206.174932][T12724] sctp_connect_new_asoc+0x2e0/0x690 [ 206.174953][T12724] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 206.174977][T12724] ? sctp_get_af_specific+0x29/0x80 [ 206.174998][T12724] ? sctp_inet6_send_verify+0x80/0x300 [ 206.175018][T12724] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 206.175039][T12724] __sctp_connect+0x5ba/0xd50 [ 206.175070][T12724] ? __pfx___sctp_connect+0x10/0x10 [ 206.175092][T12724] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 206.175116][T12724] ? security_sctp_bind_connect+0x7e/0x2e0 [ 206.175140][T12724] sctp_getsockopt_connectx3+0x2c4/0x440 [ 206.175167][T12724] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 206.175191][T12724] ? __local_bh_enable_ip+0x12d/0x1c0 [ 206.175208][T12724] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 206.175238][T12724] sctp_getsockopt+0x98a/0xb60 [ 206.175253][T12724] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 206.175279][T12724] do_sock_getsockopt+0x372/0x450 [ 206.175301][T12724] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 206.175318][T12724] ? do_syscall_64+0xa0/0xfa0 [ 206.175340][T12724] ? __fget_files+0x2a/0x420 [ 206.175354][T12724] ? __fget_files+0x3a0/0x420 [ 206.175369][T12724] ? __fget_files+0x2a/0x420 [ 206.175393][T12724] __x64_sys_getsockopt+0x1a5/0x250 [ 206.175410][T12724] ? do_syscall_64+0xa0/0xfa0 [ 206.175432][T12724] ? do_syscall_64+0xa0/0xfa0 [ 206.175457][T12724] do_syscall_64+0xfa/0xfa0 [ 206.175477][T12724] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.175500][T12724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.175516][T12724] ? clear_bhb_loop+0x60/0xb0 [ 206.175538][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.175554][T12724] RIP: 0033:0x7fd65038f6c9 [ 206.175570][T12724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.175584][T12724] RSP: 002b:00007fd651307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 206.175604][T12724] RAX: ffffffffffffffda RBX: 00007fd6505e5fa0 RCX: 00007fd65038f6c9 [ 206.175616][T12724] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 206.175627][T12724] RBP: 00007fd651307090 R08: 0000200000000240 R09: 0000000000000000 [ 206.175638][T12724] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.175648][T12724] R13: 00007fd6505e6038 R14: 00007fd6505e5fa0 R15: 00007ffec58e6038 [ 206.175680][T12724] [ 206.575696][T12728] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 206.587946][T12728] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 206.944567][T12756] openvswitch: netlink: Duplicate or invalid key (type 0). [ 206.966725][T12756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.224287][T12769] __nla_validate_parse: 5 callbacks suppressed [ 207.224305][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 207.288258][T12779] FAULT_INJECTION: forcing a failure. [ 207.288258][T12779] name failslab, interval 1, probability 0, space 0, times 0 [ 207.324906][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.3.2051 Not tainted syzkaller #0 PREEMPT(full) [ 207.324933][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.324943][T12779] Call Trace: [ 207.324950][T12779] [ 207.324959][T12779] dump_stack_lvl+0x189/0x250 [ 207.324987][T12779] ? __pfx____ratelimit+0x10/0x10 [ 207.325010][T12779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.325030][T12779] ? __pfx__printk+0x10/0x10 [ 207.325063][T12779] should_fail_ex+0x414/0x560 [ 207.325093][T12779] should_failslab+0xa8/0x100 [ 207.325114][T12779] __kmalloc_cache_noprof+0x6f/0x6f0 [ 207.325143][T12779] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 207.325164][T12779] ? sctp_add_bind_addr+0x8c/0x370 [ 207.325184][T12779] ? sctp_add_bind_addr+0xb0/0x370 [ 207.325212][T12779] sctp_add_bind_addr+0x8c/0x370 [ 207.325238][T12779] sctp_copy_local_addr_list+0x30b/0x4e0 [ 207.325270][T12779] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 207.325291][T12779] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 207.325313][T12779] ? sctp_v6_is_any+0x64/0x80 [ 207.325338][T12779] ? sctp_copy_one_addr+0x93/0x360 [ 207.325363][T12779] sctp_bind_addr_copy+0xb3/0x3c0 [ 207.325384][T12779] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 207.325408][T12779] sctp_connect_new_asoc+0x2e0/0x690 [ 207.325430][T12779] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 207.325455][T12779] ? sctp_get_af_specific+0x29/0x80 [ 207.325472][T12779] ? sctp_inet6_send_verify+0x80/0x300 [ 207.325507][T12779] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 207.325526][T12779] __sctp_connect+0x5ba/0xd50 [ 207.325553][T12779] ? __pfx___sctp_connect+0x10/0x10 [ 207.325573][T12779] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 207.325590][T12779] ? security_sctp_bind_connect+0x7e/0x2e0 [ 207.325613][T12779] sctp_getsockopt_connectx3+0x2c4/0x440 [ 207.325639][T12779] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 207.325663][T12779] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.325682][T12779] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 207.325713][T12779] sctp_getsockopt+0x98a/0xb60 [ 207.325728][T12779] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 207.325754][T12779] do_sock_getsockopt+0x372/0x450 [ 207.325776][T12779] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 207.325793][T12779] ? do_syscall_64+0xa0/0xfa0 [ 207.325815][T12779] ? __fget_files+0x2a/0x420 [ 207.325831][T12779] ? __fget_files+0x3a0/0x420 [ 207.325846][T12779] ? __fget_files+0x2a/0x420 [ 207.325871][T12779] __x64_sys_getsockopt+0x1a5/0x250 [ 207.325887][T12779] ? do_syscall_64+0xa0/0xfa0 [ 207.325911][T12779] ? do_syscall_64+0xa0/0xfa0 [ 207.325940][T12779] do_syscall_64+0xfa/0xfa0 [ 207.325960][T12779] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.325983][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.325998][T12779] ? clear_bhb_loop+0x60/0xb0 [ 207.326014][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.326027][T12779] RIP: 0033:0x7f147cd8f6c9 [ 207.326040][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.326056][T12779] RSP: 002b:00007f147dc7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 207.326075][T12779] RAX: ffffffffffffffda RBX: 00007f147cfe5fa0 RCX: 00007f147cd8f6c9 [ 207.326087][T12779] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 207.326098][T12779] RBP: 00007f147dc7a090 R08: 0000200000000240 R09: 0000000000000000 [ 207.326109][T12779] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.326120][T12779] R13: 00007f147cfe6038 R14: 00007f147cfe5fa0 R15: 00007ffe00abd848 [ 207.326152][T12779] [ 207.786026][T12774] team0: Device gtp1 is of different type [ 207.846280][T12787] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.257586][T12814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2061'. [ 208.267968][T12815] netlink: 'syz.4.2062': attribute type 4 has an invalid length. [ 208.287610][T12815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2062'. [ 208.289989][T12817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 208.364537][T12820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2064'. [ 208.376727][T12821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2065'. [ 208.388466][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2065'. [ 208.389992][T12820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2064'. [ 208.575148][T12842] netlink: 'syz.0.2070': attribute type 1 has an invalid length. [ 208.861856][T12863] netlink: 'syz.4.2075': attribute type 2 has an invalid length. [ 208.922674][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 208.944124][T12862] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.113765][T12882] bridge0: port 3(veth0_to_bridge) entered blocking state [ 209.122339][T12882] bridge0: port 3(veth0_to_bridge) entered disabled state [ 209.130084][T12882] veth0_to_bridge: entered allmulticast mode [ 209.131592][T12884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.138610][T12882] veth0_to_bridge: entered promiscuous mode [ 209.143537][T12885] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.180923][T12882] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.231761][T12882] bridge0: port 3(veth0_to_bridge) entered blocking state [ 209.239369][T12882] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 209.261421][T12889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2084'. [ 209.276788][T12884] syzkaller0: entered promiscuous mode [ 209.282622][T12884] syzkaller0: entered allmulticast mode [ 209.301229][T12889] sctp: [Deprecated]: syz.4.2084 (pid 12889) Use of int in maxseg socket option. [ 209.301229][T12889] Use struct sctp_assoc_value instead [ 209.601674][T12920] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 209.630303][T12920] 0ªî{X¹¦: entered allmulticast mode [ 209.636483][T12920] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 210.044729][T12963] veth0: entered promiscuous mode [ 210.054752][T12962] veth0: left promiscuous mode [ 210.172184][T12967] netlink: 'syz.4.2106': attribute type 11 has an invalid length. [ 210.711926][T13010] syzkaller0: entered promiscuous mode [ 210.719363][T13010] syzkaller0: entered allmulticast mode [ 211.032049][T13027] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 211.221694][T13038] netlink: 'syz.3.2127': attribute type 3 has an invalid length. [ 211.237729][T13038] netlink: 'syz.3.2127': attribute type 1 has an invalid length. [ 211.526382][T13030] tipc: Enabled bearer , priority 0 [ 211.535987][T13030] syzkaller0: entered promiscuous mode [ 211.560263][T13030] syzkaller0: entered allmulticast mode [ 211.694084][T13030] tipc: Resetting bearer [ 211.753131][T13029] tipc: Resetting bearer [ 211.767201][T13066] netlink: 'syz.1.2134': attribute type 10 has an invalid length. [ 211.775779][T13029] tipc: Disabling bearer [ 211.789045][T13066] veth0_virt_wifi: entered allmulticast mode [ 211.800039][T13066] team0: Port device veth0_virt_wifi added [ 211.908416][T13078] netlink: 'syz.0.2136': attribute type 5 has an invalid length. [ 211.908416][T13075] netlink: 'syz.0.2136': attribute type 5 has an invalid length. [ 211.915256][T13078] geneve2: entered promiscuous mode [ 211.970312][T13078] geneve2: entered allmulticast mode [ 211.977409][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 211.986278][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 212.017204][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 212.028916][T13080] tipc: Enabled bearer , priority 0 [ 212.037497][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 212.092735][T13080] syzkaller0: entered promiscuous mode [ 212.104691][T13080] syzkaller0: entered allmulticast mode [ 212.112374][T13088] netlink: 'syz.1.2138': attribute type 11 has an invalid length. [ 212.121334][T13080] tipc: Resetting bearer [ 212.138312][T13089] batadv_slave_1: entered allmulticast mode [ 212.141858][T13088] netlink: 'syz.1.2138': attribute type 11 has an invalid length. [ 212.164878][T13079] tipc: Resetting bearer [ 213.490225][T13079] tipc: Disabling bearer [ 213.510108][T13109] netlink: 'syz.0.2145': attribute type 14 has an invalid length. [ 213.527690][ T5964] tipc: Node number set to 3535854895 [ 213.552862][T13084] __nla_validate_parse: 22 callbacks suppressed [ 213.552882][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2140'. [ 213.590443][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2140'. [ 213.649424][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 213.710848][T13118] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2149'. [ 213.737526][T13122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2148'. [ 213.771094][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 213.984227][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 213.997336][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 214.166786][T13151] syzkaller0: entered promiscuous mode [ 214.178554][T13151] syzkaller0: entered allmulticast mode [ 214.384813][T13166] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 214.426517][T13165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.728633][T13186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.974921][T13204] tipc: Enabled bearer , priority 0 [ 215.022794][T13213] syzkaller0: entered promiscuous mode [ 215.028724][T13213] syzkaller0: entered allmulticast mode [ 215.122887][T13203] tipc: Resetting bearer [ 215.205120][T13203] tipc: Disabling bearer [ 215.361084][T13236] nbd: must specify a size in bytes for the device [ 215.513332][T13248] netlink: 'syz.0.2181': attribute type 10 has an invalid length. [ 215.567476][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 215.578199][T13248] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 215.579990][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 215.603157][T13248] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 216.056387][T13281] netlink: 'syz.0.2190': attribute type 5 has an invalid length. [ 216.202005][T13293] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.208892][T13293] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 216.390870][T13308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.600876][T13328] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 217.752356][ T5833] block nbd3: Receive control failed (result -1) [ 217.861824][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805717c400: rx timeout, send abort [ 217.914147][T13382] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 218.047346][T13388] netlink: 'syz.1.2222': attribute type 18 has an invalid length. [ 218.058803][T13388] netlink: 'syz.1.2222': attribute type 18 has an invalid length. [ 218.197083][T13392] 0ªî{X¹¦: left allmulticast mode [ 218.371236][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805717c400: abort rx timeout. Force session deactivation [ 218.584409][T13414] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 218.759974][T13420] bridge0: port 3(batadv1) entered blocking state [ 218.772137][T13420] bridge0: port 3(batadv1) entered disabled state [ 218.801095][T13420] batadv1: entered allmulticast mode [ 218.816826][T13420] batadv1: entered promiscuous mode [ 218.843487][T13422] netlink: 'syz.3.2233': attribute type 8 has an invalid length. [ 219.071755][T13433] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 219.092794][T13434] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 219.262139][ T1149] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 219.271993][ T1149] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 219.473144][T13456] FAULT_INJECTION: forcing a failure. [ 219.473144][T13456] name failslab, interval 1, probability 0, space 0, times 0 [ 219.493491][T13456] CPU: 0 UID: 0 PID: 13456 Comm: syz.1.2240 Not tainted syzkaller #0 PREEMPT(full) [ 219.493515][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.493526][T13456] Call Trace: [ 219.493534][T13456] [ 219.493541][T13456] dump_stack_lvl+0x189/0x250 [ 219.493568][T13456] ? __pfx____ratelimit+0x10/0x10 [ 219.493591][T13456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.493613][T13456] ? __pfx__printk+0x10/0x10 [ 219.493647][T13456] should_fail_ex+0x414/0x560 [ 219.493677][T13456] should_failslab+0xa8/0x100 [ 219.493698][T13456] __kmalloc_cache_noprof+0x6f/0x6f0 [ 219.493721][T13456] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 219.493741][T13456] ? sctp_add_bind_addr+0x8c/0x370 [ 219.493761][T13456] ? sctp_add_bind_addr+0xb0/0x370 [ 219.493787][T13456] sctp_add_bind_addr+0x8c/0x370 [ 219.493814][T13456] sctp_copy_local_addr_list+0x30b/0x4e0 [ 219.493839][T13456] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 219.493861][T13456] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 219.493884][T13456] ? sctp_v6_is_any+0x64/0x80 [ 219.493909][T13456] ? sctp_copy_one_addr+0x93/0x360 [ 219.493944][T13456] sctp_bind_addr_copy+0xb3/0x3c0 [ 219.493967][T13456] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 219.493991][T13456] sctp_connect_new_asoc+0x2e0/0x690 [ 219.494012][T13456] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 219.494036][T13456] ? sctp_get_af_specific+0x29/0x80 [ 219.494056][T13456] ? sctp_inet6_send_verify+0x80/0x300 [ 219.494076][T13456] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 219.494097][T13456] __sctp_connect+0x5ba/0xd50 [ 219.494128][T13456] ? __pfx___sctp_connect+0x10/0x10 [ 219.494150][T13456] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 219.494168][T13456] ? security_sctp_bind_connect+0x7e/0x2e0 [ 219.494190][T13456] sctp_getsockopt_connectx3+0x2c4/0x440 [ 219.494217][T13456] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 219.494240][T13456] ? __local_bh_enable_ip+0x12d/0x1c0 [ 219.494259][T13456] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 219.494289][T13456] sctp_getsockopt+0x98a/0xb60 [ 219.494304][T13456] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 219.494330][T13456] do_sock_getsockopt+0x372/0x450 [ 219.494352][T13456] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.494369][T13456] ? do_syscall_64+0xa0/0xfa0 [ 219.494390][T13456] ? __fget_files+0x2a/0x420 [ 219.494405][T13456] ? __fget_files+0x3a0/0x420 [ 219.494421][T13456] ? __fget_files+0x2a/0x420 [ 219.494445][T13456] __x64_sys_getsockopt+0x1a5/0x250 [ 219.494462][T13456] ? do_syscall_64+0xa0/0xfa0 [ 219.494485][T13456] ? do_syscall_64+0xa0/0xfa0 [ 219.494511][T13456] do_syscall_64+0xfa/0xfa0 [ 219.494532][T13456] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.494553][T13456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.494570][T13456] ? clear_bhb_loop+0x60/0xb0 [ 219.494591][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.494607][T13456] RIP: 0033:0x7f5d8ed8f6c9 [ 219.494623][T13456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.494638][T13456] RSP: 002b:00007f5d8fc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.494657][T13456] RAX: ffffffffffffffda RBX: 00007f5d8efe5fa0 RCX: 00007f5d8ed8f6c9 [ 219.494670][T13456] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 219.494680][T13456] RBP: 00007f5d8fc18090 R08: 0000200000000240 R09: 0000000000000000 [ 219.494691][T13456] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.494702][T13456] R13: 00007f5d8efe6038 R14: 00007f5d8efe5fa0 R15: 00007fff7f4ad118 [ 219.494734][T13456] [ 219.864555][T13462] x_tables: unsorted underflow at hook 2 [ 219.989185][T13467] tipc: Enabled bearer , priority 0 [ 219.996984][T13467] syzkaller0: entered promiscuous mode [ 220.003222][T13467] syzkaller0: entered allmulticast mode [ 220.016683][T13467] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 220.149039][T13467] tipc: Resetting bearer [ 220.185904][T13467] __nla_validate_parse: 18 callbacks suppressed [ 220.185920][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2244'. [ 220.257924][T13477] bond6: Unable to set up delay as MII monitoring is disabled [ 220.303587][T13477] bond6 (unregistering): Released all slaves [ 220.373489][T13466] tipc: Resetting bearer [ 220.383158][T13480] IPVS: set_ctl: invalid protocol: 263 172.20.20.170:20003 [ 220.411722][T13466] tipc: Disabling bearer [ 220.439902][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2251'. [ 220.460484][T13486] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 220.599080][T13492] tipc: Enabling of bearer rejected, failed to enable media [ 221.749192][T13555] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 221.843885][T13564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.862807][T13567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2269'. [ 222.195155][T13588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.275640][T13591] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 222.292742][T13591] bond6 (unregistering): Released all slaves [ 222.395029][T13604] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2280'. [ 222.448398][T13607] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2281'. [ 222.461464][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 222.476287][T13607] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2281'. [ 222.652039][T13621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2286'. [ 222.722590][ T1081] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 222.780717][T13628] xt_l2tp: v2 doesn't support IP mode [ 222.787029][T13628] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 222.914406][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 223.492735][T13637] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 223.510937][T13637] netlink: 9188 bytes leftover after parsing attributes in process `syz.3.2291'. [ 223.684193][T13666] netlink: 'syz.2.2297': attribute type 21 has an invalid length. [ 224.225578][T13705] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 224.293165][T13698] "syz.3.2304" (13698) uses obsolete ecb(arc4) skcipher [ 224.380490][T13713] x_tables: ip_tables: mac.0 match: invalid size 16 (kernel) != (user) 24 [ 224.562301][T13721] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 224.583802][T13721] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 224.620497][T13732] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 224.676483][T13732] team0: Port device geneve0 added [ 225.174117][T13771] openvswitch: netlink: Key type 303 is out of range max 32 [ 225.355053][T13780] syzkaller0: entered promiscuous mode [ 225.360771][T13780] syzkaller0: entered allmulticast mode [ 225.484157][T13798] __nla_validate_parse: 7 callbacks suppressed [ 225.484176][T13798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2330'. [ 225.534111][T13801] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2331'. [ 225.552211][T13801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.569076][T13802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.747247][T13817] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 225.760944][T13817] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 225.886780][T13824] tipc: Enabling of bearer rejected, failed to enable media [ 226.076099][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2339'. [ 226.120028][T13841] netlink: 'syz.4.2341': attribute type 1 has an invalid length. [ 226.172981][T13841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.235794][T13845] veth15: entered promiscuous mode [ 226.245905][T13845] bond6: (slave veth15): Enslaving as an active interface with an up link [ 226.613036][T13866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'. [ 226.743162][T13872] 8021q: VLANs not supported on wg1 [ 226.949060][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 227.035753][T13900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.170175][ T5895] IPVS: starting estimator thread 0... [ 227.250704][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 227.265439][T13910] IPVS: using max 31 ests per chain, 74400 per kthread [ 227.285890][T13919] netlink: 'syz.4.2366': attribute type 1 has an invalid length. [ 227.320456][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 227.375888][T13924] bridge0: port 3(veth0_to_bridge) entered disabled state [ 227.383558][T13924] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.452475][T13927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2369'. [ 227.462086][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'. [ 227.475382][T13919] gretap2: entered promiscuous mode [ 227.484405][T13919] bond7: (slave gretap2): making interface the new active one [ 227.493521][T13919] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 227.507265][T13935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2371'. [ 227.647313][T13941] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 227.663229][T13941] bond2 (unregistering): Released all slaves [ 227.803589][T13953] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 227.809512][T13952] nbd: nbd3 already in use [ 227.887544][T13961] netlink: 'syz.1.2380': attribute type 10 has an invalid length. [ 227.900163][T13955] block nbd3: NBD_DISCONNECT [ 227.904823][T13955] block nbd3: Send disconnect failed -32 [ 227.917922][T13955] block nbd3: shutting down sockets [ 228.327113][T13988] netlink: 'syz.2.2386': attribute type 9 has an invalid length. [ 228.638431][T14022] netlink: 'syz.0.2396': attribute type 1 has an invalid length. [ 228.674802][T14016] tipc: Enabled bearer , priority 0 [ 228.682316][T14016] syzkaller0: entered promiscuous mode [ 228.688360][T14016] syzkaller0: entered allmulticast mode [ 228.737343][T14022] 8021q: adding VLAN 0 to HW filter on device bond9 [ 228.754311][T14024] bond9: entered promiscuous mode [ 228.760508][T14024] bond9: entered allmulticast mode [ 228.775086][T14033] tipc: Resetting bearer [ 228.777491][T14034] netlink: 'syz.4.2399': attribute type 1 has an invalid length. [ 228.863591][T14034] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.874352][T14016] tipc: Resetting bearer [ 228.969876][T14024] bond9 (unregistering): Released all slaves [ 229.028795][T14038] bond8: (slave veth17): Enslaving as an active interface with a down link [ 229.095838][T14034] bond8: (slave veth19): Enslaving as an active interface with a down link [ 229.164721][T14045] syzkaller0: entered promiscuous mode [ 229.171011][T14045] syzkaller0: entered allmulticast mode [ 229.376377][T14056] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 229.410150][T14012] tipc: Resetting bearer [ 229.430063][T14012] tipc: Disabling bearer [ 229.606517][T14069] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.626216][T14069] bond5: (slave bond6): making interface the new active one [ 229.638741][T14069] bond5: (slave bond6): Enslaving as an active interface with an up link [ 229.650659][T14079] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 229.671946][T14056] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.685833][T14056] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 230.720957][T14158] tc_dump_action: action bad kind [ 230.851940][T14168] __nla_validate_parse: 22 callbacks suppressed [ 230.851957][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 230.870953][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.889968][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.908095][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.917905][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.927934][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.939859][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.949159][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.959526][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.978289][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 231.099907][T14181] syzkaller0: entered promiscuous mode [ 231.107433][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 231.120417][T14181] syzkaller0: entered allmulticast mode [ 231.458634][T14202] netlink: 'syz.3.2455': attribute type 21 has an invalid length. [ 231.468366][T14205] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 231.477876][T14197] tipc: Enabled bearer , priority 0 [ 231.543186][T14197] syzkaller0: entered promiscuous mode [ 231.550955][T14197] syzkaller0: entered allmulticast mode [ 231.561602][T14205] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 231.562168][T14202] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 231.630086][T14214] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2459'. [ 231.702992][T14214] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2459'. [ 231.858597][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031c94000: rx timeout, send abort [ 231.868485][T14233] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2464'. [ 231.902887][T14231] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2464'. [ 231.963110][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 232.023100][T14196] tipc: Resetting bearer [ 232.358726][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880786d6000: rx timeout, send abort [ 232.367241][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031c94000: abort rx timeout. Force session deactivation [ 232.857703][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554f2800: rx timeout, send abort [ 232.867218][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880786d6000: abort rx timeout. Force session deactivation [ 232.991889][T14248] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2466'. [ 233.368792][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554f2800: abort rx timeout. Force session deactivation [ 233.522993][T14196] tipc: Disabling bearer [ 233.563098][T14250] syzkaller0: entered promiscuous mode [ 233.568708][T14250] syzkaller0: entered allmulticast mode [ 233.654625][T14265] netlink: 'syz.2.2470': attribute type 3 has an invalid length. [ 233.663188][T14265] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2470'. [ 233.670575][T14267] netlink: 'syz.4.2471': attribute type 1 has an invalid length. [ 233.676309][T14265] netlink: 'syz.2.2470': attribute type 3 has an invalid length. [ 233.758149][T14274] xt_bpf: check failed: parse error [ 233.992623][T14291] erspan0: entered promiscuous mode [ 237.029643][T14305] __nla_validate_parse: 3 callbacks suppressed [ 237.029661][T14305] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2479'. [ 237.057267][T14308] netlink: 'syz.4.2480': attribute type 4 has an invalid length. [ 237.079661][T14308] netlink: 'syz.4.2480': attribute type 4 has an invalid length. [ 237.661863][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 237.753733][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'. [ 237.767951][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 238.125363][T14378] netlink: 'syz.2.2497': attribute type 21 has an invalid length. [ 238.143190][T14378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2497'. [ 238.170518][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 238.432041][T14408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2508'. [ 238.467955][T14408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2508'. [ 238.496157][T14408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2508'. [ 238.508197][T14408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2508'. [ 238.629645][T14413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.644625][T14413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.663845][T14413] bond0 (unregistering): Released all slaves [ 238.694582][ T5833] Bluetooth: hci4: link tx timeout [ 238.702595][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.128018][T14461] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 239.752323][T14506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.885992][T14540] netlink: 'syz.1.2545': attribute type 3 has an invalid length. [ 239.912304][T14506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.167040][T14551] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 240.191839][T14551] bond9 (unregistering): Released all slaves [ 240.238424][T14559] delete_channel: no stack [ 240.719392][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 241.199534][ T5151] Bluetooth: hci0: command tx timeout [ 268.524367][T14571] netlink: 'syz.0.2556': attribute type 1 has an invalid length. [ 268.554867][T14573] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.579493][T14573] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.674554][T14573] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.704792][T14573] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.790579][T14573] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.792959][T14588] __nla_validate_parse: 41 callbacks suppressed [ 268.792975][T14588] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2563'. [ 268.830860][T14573] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.872384][T14593] net_ratelimit: 57 callbacks suppressed [ 268.872401][T14593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.968165][T14573] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.987451][T14573] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.077046][T14609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'. [ 269.095772][T14610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'. [ 269.152310][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.161357][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.223449][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.232025][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.297108][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.310698][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.369952][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.378578][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.453819][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'. [ 269.662498][T14646] xt_time: unknown flags 0xf4 [ 269.785676][T14642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'. [ 269.937985][T14662] netlink: 'syz.0.2587': attribute type 1 has an invalid length. [ 270.051339][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2588'. [ 270.190033][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.197257][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.332469][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 270.341803][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 270.355598][T14683] netlink: 'syz.1.2589': attribute type 14 has an invalid length. [ 270.364297][T14683] netlink: 'syz.1.2589': attribute type 13 has an invalid length. [ 270.449056][T14660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.471545][T14660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.658508][T14662] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.695199][T14668] bond9: (slave gretap1): making interface the new active one [ 270.704298][T14668] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 270.798718][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.811307][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.825317][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.839510][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.847930][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.889565][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.909797][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.918180][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.146526][T14715] sctp: [Deprecated]: syz.4.2599 (pid 14715) Use of int in max_burst socket option. [ 271.146526][T14715] Use struct sctp_assoc_value instead [ 271.175736][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 271.250934][T14710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.344036][T14728] netlink: 'syz.2.2602': attribute type 1 has an invalid length. [ 271.396453][T14721] openvswitch: netlink: Flow key attr not present in new flow. [ 271.532298][T14741] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 271.686528][T14749] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2608'. [ 271.908262][T14765] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 271.917574][T14765] netlink: 'syz.3.2614': attribute type 2 has an invalid length. [ 271.983579][T14771] netlink: 'syz.0.2616': attribute type 1 has an invalid length. [ 272.061533][T14771] gretap2: entered promiscuous mode [ 272.062030][T14777] sctp: [Deprecated]: syz.1.2619 (pid 14777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.062030][T14777] Use struct sctp_sack_info instead [ 272.075738][T14771] bond10: (slave gretap2): making interface the new active one [ 272.092837][T14771] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 272.238232][T14790] 8021q: VLANs not supported on ip_vti0 [ 272.305186][T14795] tipc: Enabling of bearer rejected, already enabled [ 272.382516][T14799] tipc: Enabled bearer , priority 0 [ 272.390391][T14799] syzkaller0: entered promiscuous mode [ 272.396101][T14799] syzkaller0: entered allmulticast mode [ 272.411640][T14799] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 272.442055][T14799] tipc: Resetting bearer [ 272.452180][T14798] tipc: Resetting bearer [ 272.475044][T14798] tipc: Disabling bearer [ 272.655957][T14809] 8021q: adding VLAN 0 to HW filter on device bond11 [ 272.734836][T14818] netlink: 'syz.0.2632': attribute type 5 has an invalid length. [ 272.984648][T14836] sock: sock_timestamping_bind_phc: sock not bind to device [ 272.994544][T14835] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.274251][T14858] tipc: Enabled bearer , priority 0 [ 273.284870][T14858] syzkaller0: entered promiscuous mode [ 273.291086][T14858] syzkaller0: entered allmulticast mode [ 273.329949][T14858] tipc: Resetting bearer [ 273.338714][T14857] tipc: Resetting bearer [ 273.363862][T14857] tipc: Disabling bearer [ 273.507930][T14869] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.635333][T14881] validate_nla: 1 callbacks suppressed [ 273.635350][T14881] netlink: 'syz.3.2652': attribute type 9 has an invalid length. [ 273.874226][T14907] __nla_validate_parse: 14 callbacks suppressed [ 273.874243][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 273.890155][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 273.899196][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 273.908726][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 273.921934][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 273.931029][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 274.022070][T14917] tipc: Enabled bearer , priority 0 [ 274.032236][T14916] tipc: Disabling bearer [ 274.661435][T14958] netlink: 'syz.4.2674': attribute type 13 has an invalid length. [ 274.674507][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 274.694482][T14958] netlink: 'syz.4.2674': attribute type 13 has an invalid length. [ 274.699673][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.704474][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 274.721723][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.721765][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.721796][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.752168][T14962] Cannot find set identified by id 1 to match [ 274.777866][T14963] netlink: 'syz.4.2674': attribute type 13 has an invalid length. [ 274.813510][T14965] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 274.816551][T14963] gretap0: refused to change device tx_queue_len [ 274.841717][T14963] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 275.216335][T14990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2682'. [ 275.553803][T15019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2693'. [ 276.556639][T15093] tap1: tun_chr_ioctl cmd 2148553947 [ 276.619719][T15101] netlink: 'syz.2.2715': attribute type 1 has an invalid length. [ 276.641518][T15099] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 276.651532][T15099] nbd: error processing sock list [ 276.656751][T15099] block nbd3: shutting down sockets [ 277.138494][T15149] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 277.146427][T15149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.842094][T15195] syzkaller0: entered promiscuous mode [ 277.847612][T15195] syzkaller0: entered allmulticast mode [ 278.003539][T15208] bridge0: port 4(syz_tun) entered blocking state [ 278.010312][T15208] bridge0: port 4(syz_tun) entered disabled state [ 278.017013][T15208] syz_tun: entered allmulticast mode [ 278.036638][T15208] syz_tun: entered promiscuous mode [ 278.089810][T15218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.256898][T15231] xt_bpf: check failed: parse error [ 278.269390][T15230] xt_bpf: check failed: parse error [ 278.286787][ T79] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 278.286954][T15228] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.296681][ T79] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 278.359335][ T79] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 278.378159][ T79] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 278.401601][T15228] team0: No ports can be present during mode change [ 278.596506][T15255] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 278.615535][T15257] syzkaller0: entered promiscuous mode [ 278.621302][T15257] syzkaller0: entered allmulticast mode [ 278.815133][T15268] netlink: 'syz.2.2766': attribute type 16 has an invalid length. [ 278.828777][T15268] netlink: 'syz.2.2766': attribute type 17 has an invalid length. [ 278.871929][T15268] erspan0: left promiscuous mode [ 278.951246][T15268] bridge0: port 4(syz_tun) entered blocking state [ 278.957857][T15268] bridge0: port 4(syz_tun) entered listening state [ 278.982451][T15268] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.992531][T15268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.038592][T15279] __nla_validate_parse: 7 callbacks suppressed [ 279.038609][T15279] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2769'. [ 279.058130][T15279] syzkaller1: entered promiscuous mode [ 279.064066][T15279] syzkaller1: entered allmulticast mode [ 279.197906][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 279.318244][T15295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2773'. [ 279.332566][T15297] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2774'. [ 279.395118][T15299] sctp: [Deprecated]: syz.4.2775 (pid 15299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.395118][T15299] Use struct sctp_sack_info instead [ 279.413146][T15299] netlink: 'syz.4.2775': attribute type 2 has an invalid length. [ 279.424691][T15299] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2775'. [ 279.835269][T15327] netlink: 'syz.4.2781': attribute type 12 has an invalid length. [ 279.888263][T15327] bond11: option primary_reselect: invalid value (255) [ 279.900819][T15327] bond11 (unregistering): Released all slaves [ 280.108568][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 280.417010][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 280.442130][T15372] netlink: 'syz.1.2792': attribute type 3 has an invalid length. [ 280.826491][T15403] tipc: Enabled bearer , priority 0 [ 280.917797][T15410] xt_hashlimit: size too large, truncated to 1048576 [ 280.992513][T15403] syzkaller0: entered promiscuous mode [ 281.008371][T15403] syzkaller0: entered allmulticast mode [ 281.029179][T15403] tipc: Resetting bearer [ 281.176146][T15396] netlink: 'syz.4.2801': attribute type 10 has an invalid length. [ 281.176955][T15391] tipc: Resetting bearer [ 281.211014][T15396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2801'. [ 281.383781][T15434] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 281.743859][T15441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2807'. [ 282.651322][T15391] tipc: Disabling bearer [ 282.661392][T15396] bridge0: port 3(batadv0) entered blocking state [ 282.668026][T15396] bridge0: port 3(batadv0) entered disabled state [ 282.677296][T15396] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 282.699978][T15437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2807'. [ 282.845090][T15447] 8021q: VLANs not supported on sit0 [ 283.126526][T15472] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 284.020158][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.030894][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.039280][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.047549][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.055829][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.294327][T15529] tap0: tun_chr_ioctl cmd 1074025672 [ 284.301224][T15529] tap0: ignored: set checksum disabled [ 284.327681][T15529] tipc: Enabled bearer , priority 0 [ 284.342080][T15529] syzkaller0: entered promiscuous mode [ 284.347710][T15529] syzkaller0: entered allmulticast mode [ 284.397368][T15536] __nla_validate_parse: 5 callbacks suppressed [ 284.397385][T15536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'. [ 284.474837][T15529] tipc: Resetting bearer [ 284.537063][T15517] chnl_net:caif_netlink_parms(): no params data found [ 284.557037][T15541] IPVS: Error connecting to the multicast addr [ 284.597521][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 284.606731][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 284.612537][T15528] tipc: Resetting bearer [ 284.685271][T15528] tipc: Disabling bearer [ 284.735331][T15553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2841'. [ 284.751429][T15553] IPVS: Error connecting to the multicast addr [ 285.060772][T15517] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.068955][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.078723][T15517] bridge_slave_0: entered allmulticast mode [ 285.090507][T15517] bridge_slave_0: entered promiscuous mode [ 285.164138][T15517] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.176044][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.185302][T15517] bridge_slave_1: entered allmulticast mode [ 285.194172][T15517] bridge_slave_1: entered promiscuous mode [ 285.247283][T15567] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2842'. [ 285.271503][T15517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.302709][T15517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.408313][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2846'. [ 285.431178][T15517] team0: Port device team_slave_0 added [ 285.443185][T15517] team0: Port device team_slave_1 added [ 285.457283][T15580] syzkaller1: entered promiscuous mode [ 285.471195][T15580] syzkaller1: entered allmulticast mode [ 285.497785][T15592] netlink: 'syz.3.2848': attribute type 2 has an invalid length. [ 285.526237][T15592] syzkaller0: entered promiscuous mode [ 285.532549][T15592] syzkaller0: entered allmulticast mode [ 285.566116][T15517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.573589][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.601301][T15517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.615022][T15517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.622692][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.649788][T15517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.740683][T15517] hsr_slave_0: entered promiscuous mode [ 285.747780][T15517] hsr_slave_1: entered promiscuous mode [ 285.756090][T15517] debugfs: 'hsr0' already exists in 'hsr' [ 285.762993][T15517] Cannot create hsr debugfs directory [ 285.772187][T15599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2850'. [ 285.875736][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 285.911798][T15603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.089872][ T5151] Bluetooth: hci3: command tx timeout [ 286.167690][T15517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.181010][T15517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 286.254947][T15517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.265551][T15517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 286.291032][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 286.300418][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 286.332437][T15517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.342813][T15517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 286.408831][T15517] bond0: (slave netdevsim0): Releasing backup interface [ 286.421029][T15517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.433082][T15517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 286.587097][T15517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.598236][T15517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.612509][T15517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.623163][T15517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.718459][T15517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.764683][T15517] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.786703][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.793939][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.810941][T15627] netlink: 'syz.2.2858': attribute type 1 has an invalid length. [ 286.826707][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.833941][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.901903][T15627] gretap2: entered promiscuous mode [ 286.912335][T15627] bond8: (slave gretap2): making interface the new active one [ 286.920980][T15627] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 286.997771][T15627] bond8: entered promiscuous mode [ 287.020705][T15627] macvlan4: entered promiscuous mode [ 287.036902][T15627] macvlan4: entered allmulticast mode [ 287.056805][T15627] bond8: entered allmulticast mode [ 287.069750][T15627] gretap2: entered allmulticast mode [ 287.076468][T15627] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 287.086160][T15627] bond8: left promiscuous mode [ 287.462950][T15662] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 287.478222][T15662] xt_TCPMSS: Only works on TCP SYN packets [ 287.512415][T15659] nbd: must specify a size in bytes for the device [ 287.702482][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.825971][T15517] veth0_vlan: entered promiscuous mode [ 287.882026][T15517] veth1_vlan: entered promiscuous mode [ 287.910080][T15688] netlink: 'syz.1.2873': attribute type 1 has an invalid length. [ 287.952746][T15691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.960122][T15691] IPv6: NLM_F_CREATE should be set when creating new route [ 288.023631][T15688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.081175][ T5841] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 288.093230][ T5841] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 288.101674][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 288.111156][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.121231][ T5841] Workqueue: events l2cap_info_timeout [ 288.126731][ T5841] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 288.132640][ T5841] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 84 23 09 cc 66 66 66 66 66 66 2e [ 288.152391][ T5841] RSP: 0018:ffffc9000426f788 EFLAGS: 00010202 [ 288.158453][ T5841] RAX: dffffc0000000000 RBX: ffffffff891f0a58 RCX: dbf675282c03f300 [ 288.166409][ T5841] RDX: 0000000000000000 RSI: ffffffff891f0a58 RDI: 000000000000004c [ 288.174452][ T5841] RBP: ffffffff8a4ffaf5 R08: 0000000000000001 R09: 0000000000000000 [ 288.182410][ T5841] R10: dffffc0000000000 R11: ffffffff8a4ffab0 R12: 0000000000000000 [ 288.190367][ T5841] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 288.198322][ T5841] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 288.207234][ T5841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.213801][ T5841] CR2: 00007fff7f4abbf8 CR3: 000000005e5f2000 CR4: 00000000003526f0 [ 288.221858][ T5841] Call Trace: [ 288.225121][ T5841] [ 288.228033][ T5841] __kasan_check_byte+0x12/0x40 [ 288.232882][ T5841] lock_acquire+0x8d/0x360 [ 288.237286][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.242485][ T5841] ? __cancel_work+0x254/0x2e0 [ 288.247238][ T5841] lock_sock_nested+0x48/0x100 [ 288.252005][ T5841] ? l2cap_sock_ready_cb+0x45/0x140 [ 288.257190][ T5841] l2cap_sock_ready_cb+0x45/0x140 [ 288.262206][ T5841] l2cap_conn_start+0x76d/0xe50 [ 288.267053][ T5841] ? __pfx_l2cap_conn_start+0x10/0x10 [ 288.272414][ T5841] ? __lock_acquire+0xab9/0xd20 [ 288.277250][ T5841] ? __pfx___mutex_lock+0x10/0x10 [ 288.282270][ T5841] ? process_scheduled_works+0x9ef/0x17b0 [ 288.287975][ T5841] l2cap_info_timeout+0x68/0xa0 [ 288.292817][ T5841] ? process_scheduled_works+0x9ef/0x17b0 [ 288.298522][ T5841] process_scheduled_works+0xae1/0x17b0 [ 288.304588][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.310556][ T5841] worker_thread+0x8a0/0xda0 [ 288.315130][ T5841] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 288.321459][ T5841] ? __kthread_parkme+0x7b/0x200 [ 288.326383][ T5841] kthread+0x711/0x8a0 [ 288.330442][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 288.335554][ T5841] ? __pfx_kthread+0x10/0x10 [ 288.340136][ T5841] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.345318][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.350624][ T5841] ? __pfx_kthread+0x10/0x10 [ 288.355198][ T5841] ret_from_fork+0x4bc/0x870 [ 288.359888][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 288.364985][ T5841] ? __switch_to_asm+0x39/0x70 [ 288.369734][ T5841] ? __switch_to_asm+0x33/0x70 [ 288.374497][ T5841] ? __pfx_kthread+0x10/0x10 [ 288.379075][ T5841] ret_from_fork_asm+0x1a/0x30 [ 288.383827][ T5841] [ 288.386830][ T5841] Modules linked in: [ 288.391004][ T5841] ---[ end trace 0000000000000000 ]--- [ 288.400385][ T5151] Bluetooth: hci3: command tx timeout [ 288.418923][T15517] veth0_macvtap: entered promiscuous mode [ 288.428180][T15517] veth1_macvtap: entered promiscuous mode [ 288.444300][T15517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.457262][ T5841] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 288.463914][ T5841] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 84 23 09 cc 66 66 66 66 66 66 2e [ 288.491652][T15517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.502671][ T5841] RSP: 0018:ffffc9000426f788 EFLAGS: 00010202 [ 288.508363][ T1081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.508953][ T5841] RAX: dffffc0000000000 RBX: ffffffff891f0a58 RCX: dbf675282c03f300 [ 288.520852][ T1081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.526594][ T5841] RDX: 0000000000000000 RSI: ffffffff891f0a58 RDI: 000000000000004c [ 288.545648][ T5841] RBP: ffffffff8a4ffaf5 R08: 0000000000000001 R09: 0000000000000000 [ 288.554548][ T5841] R10: dffffc0000000000 R11: ffffffff8a4ffab0 R12: 0000000000000000 [ 288.562537][ T1081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.562573][ T1081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.581245][ T5841] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 288.590166][ T5841] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 288.596403][T15517] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 288.599524][ T5841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.614045][ T5841] CR2: 000020000000cf3d CR3: 000000007c032000 CR4: 00000000003526f0 [ 288.622340][ T5841] Kernel panic - not syncing: Fatal exception [ 288.628786][ T5841] Kernel Offset: disabled [ 288.633099][ T5841] Rebooting in 86400 seconds..