last executing test programs: 2.628095191s ago: executing program 3 (id=5550): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @initdev, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x5, r1}) 2.518584223s ago: executing program 3 (id=5553): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/160, 0xa0}], 0x1}, 0x40012042) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026"], 0x80}}, 0x0) close(r0) socket$inet(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000600"}) (fail_nth: 1) 2.019810053s ago: executing program 3 (id=5563): syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0x9, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x14, 0x0, &(0x7f0000000100)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2700800001010000ff7f00000800001013000115", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000884c000000000000bbbbbbbbbbb988a83d00810066000805030405333d62f894d8d33eb18aa487c04154f0ab40da33c6df581ba0f32a6667a0cde1cba65df5293883db00beacbfacc0c61d0218598c6d5fe9a04f2d15816029c077eb244ca14b54ddc1135b1913a9bcac035572b3716428737e1f6e52d47a771f02bfc8f0ed343031e3091000afd2da9d8580ad183489639a88d54d254b973a8bc08df9de861d31d9fa7c6c4be27556f330837cf2db20737dc4f80ea1741eb531"], 0x5b) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.658598057s ago: executing program 4 (id=5571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x0, 0x20, 0x2}, 0x2f) 1.519781163s ago: executing program 3 (id=5574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd8, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1}, 0x101}], 0x1, 0x60, 0x0) unshare(0x22020400) r2 = socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1.519458258s ago: executing program 4 (id=5575): r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b'], 0x28}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000040)="180000006a00f96b1324", 0xa}, {&(0x7f0000000480)="f29e9891e0dff57c1a5185ea35f7732db8f1b7b0a01c0eb781aea153ece1d25408d498215f0acc84f6e3fe19b14fec9c238093736bfb4ece39ed6c4cf30039a5f6bc085d095ed995b7712b882ff0588258e5aac5685679a2df6dd081ed220a", 0x5f}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="2c0cd0c481ec2644825f3f29a284c7460504538802a6986e0aded415de214f7db85427a035f52b527c64ff2b3ca216b34f5ce720894135ee1bc2cf3bf61861c75bc16d1c167b91cfb24ef0dfee74d56309af3385db946fa49f7c07ac9af638701b4c", 0x62}], 0x4}, 0x4080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="60000000d5fce0fce92690ac961e0a2f2c7015c5ab6349a89b5da2b9a57d656ff6f8a4d0017f4ae109dce96a404df866cff3e1569bec85bdeabf0b9d6a7b3ae62aafc274d9386859f4c46073655dbbd63c9637c8e936db2a280930255195d574569493f4074e575163b36f4b5504cb6fd1344b1c12ac73e4a6a588d71271b721929a695dc1f3a7f5eba86051f562aee4040cbb2ab344cb4ab4b64e444d3b70ece70dd9db5e98e5d291287b3336032dc5e62aad373fdacb6e5e2f12733ca018041adca90df3ea558c07aaddd0edfd0c4c02dd9c60829e43d89c3b86a592562af2d641f80e5e5313d838533b"], 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b26, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000900)) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000019cc8cdcc4c515d120800084000000001140000001100010000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000210000000000000000000500000a400000000c0a010100000000000000000a0000060100020082797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a554d6161fe2381e0b8e8cce942c8b450f248b2bcb47dac4a4d57a2085ade266b366507211a7b7b87b3beed649d6b3cfc5dae6f6e8d30d96340ce329e85b0c52ccb711b8f4c2cc2ff5a16567da4a722b19123a61ec78cb9818bec65a4decd2b8f8fa270cbf17da6f87f1d9bcd00a3f33f70a53a3d1e"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1.362623132s ago: executing program 3 (id=5580): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.120024949s ago: executing program 0 (id=5583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x2, 0x81) 1.116983882s ago: executing program 4 (id=5584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x8c}, 0x1, 0xf00000000000000}, 0x0) 1.105433405s ago: executing program 2 (id=5585): syz_emit_ethernet(0x2ce, &(0x7f00000008c0)={@empty, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x298, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@dstopts={0x33, 0x1b, '\x00', [@generic={0x0, 0xc8, "8978719e3c76d6c33261c92a13f616436d7c03aeef542cc3fe9d45c65758fed99e14e2d1ee4982e080fda80b1eb7504838ca29e248f190d024e8259f1626685fb86685bcca3d4761e0bcb17b2776d69de7facb8082690bf40a5eebc1b7f45091421055b41a1b5e0cda0f2a3ceeccdb6fa4701e3d1731d35a8a67d93c40e1a9fdd39d08896a1d9a4a3b0ca829475d82de0db54596e630c0365a6446abce2f5b0091dba451f08cb42adfb461178e73be4ecf532a180da64e8e0025a59f489d7814a463c1567ebf1d67"}, @pad1, @hao={0xc9, 0x10, @private0}]}, @srh={0x16, 0xe, 0x4, 0x7, 0x19, 0x30, 0x9, [@empty, @local, @local, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x3a, 0x10, 0x4, 0x8, 0x4f, 0x38, 0xfffe, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}, @fragment={0x2b, 0x0, 0xc, 0x0, 0x0, 0x3, 0x65}, @dstopts={0xc, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xd}, @pad1]}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0xf, "36dad83aea8df15d20889b6a4b488367e6c6cba5844d6d576950aae4e0af85d7922746edc7abaa7b25516c034d4b8474b922a5df0be178ccb65ae4eaabef5f63a5df9cc8e9b0c9fef787cb50058e6375665a79abec0a2808518db033c86bb7e1be26e4ef08f20bfb122d51786403c40883d6626b35a9"}]}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r1, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x101, 0x7ffe, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), 0x0}, 0x20) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) close(r3) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="002bbd7000ffdbdf250100000014000700fe8800000000000000000000000001010046296eba19f320c5ef244d830d64fc62d1c29dee86489cda8c4ccbabf8"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.039743747s ago: executing program 0 (id=5586): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0x3}, 0x4f) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x91) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x20040891) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWFLOWTABLE={0x1ac, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.038798518s ago: executing program 1 (id=5587): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 963.39738ms ago: executing program 4 (id=5588): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r0, 0x1d02f000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x8, 0x1, 0x10, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x2, 0x6}}) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x104) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x74}}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r6) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000700)={{r0, &(0x7f0000000440)='ip6gre0\x00', 0x801, &(0x7f0000000480)={@align=0x9, {0x9, 0x8, 0xe3, 0x7}}, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x2}, 0x2, &(0x7f00000006c0)=[{0x2, 0x6, &(0x7f0000000540)='\x00', &(0x7f0000000580)="c0d74ef4319ae8cc400fd866410f63817652fa5142bc27e6d864e16e1c915c5ddb090a4045475f3d1fba1f3af4641d46d7dbe31bbced4dd55957dca6fefb79856370096d37c0403b60fb6ccd92ca94b697703bb54098df7eeef7632e324e54180d0c31ba7e6848298c0986b833c82af663522b3f4aa0ed19e2dc5f7fc5da147d676a45452c58b8e7a01cb2c30abc2011b60e5c3380330a4a01ac062fadc25ba45ba85a91474740081bdd293b577df69e74bbc29073f601fb7f86d0", 0xbb, 0x32}, {0x1, 0xa, &(0x7f0000000640)='\x00', &(0x7f0000000680)="2f3a13b0d334944504e4d6ef2ff63e7e7fc5ec0135eae9723df3516ce2edadba58722275bb9e8f9246c28df73b", 0x2d, 0x8}]}) sendmsg$kcm(r7, &(0x7f0000001d40)={&(0x7f0000000780)=@can={0x1d, r2}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)="eb6d6457562e1cc2dfcb6c62c4efbc23e9fdfe8a65675f5177ff57f36b12c714034d1eecbb6431925682cceb633ca3c63555fb64d5bb30fafb4ad05a49a7cd870e503e100fa480f6423c904ba330f3bfd97309086a9ae15af52d28079586968d45a009368b1e578545b1b5bc8837d5941880a650fd299a8dd4f58b036886ca23137c30f5ae90b885783296abf655f74089ebc6ea9f211eeebfe8facb6496026576af4e79c98f65dedbad9aa9", 0xac}, {&(0x7f00000008c0)="13c1f69fa9eaad665168de9ce8f3b5e178eda6da6a5f301b28b0a33428c4e62efcbae18740e1eba4cc2756041a0e6655583f85760c57213a1a4136343aea0896d252e9c175743eb04ff5881835db57bdf645c1719c2413247ca1c79e67b6e7", 0x5f}, {&(0x7f0000000940)="734db1e6dfdf898fe739d7b78325b19b79e8f0a9cb0c382191edd58a37c2070462e2ca8f7915ed522dd0c11cfd247007452d61a5e41fb1714e45219c05cfb3607331ac2ca001ddd14c46d190ea8f31df939243fccfb82832d01043c382d36be69c7cb0348798dce9b5bb22f3497711f413ed73e3c8bd", 0x76}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="816bca99fb04a9b78c464ba9938a5331cc316633486668ca49787c73abad2da3", 0x20}, {&(0x7f0000001a00)="30c28226b9352d44c16318e8d8ef73720cf79974f18fa86c5849c0e90a7cba3c93895e2fee02417d451cf95e42d5e7a600195fa34c228ea0cd14dd6b0f24c7bd54dc9cbe70a356070917085932ae79a40e0e46801347730f6887e29861e261f33a4e0b33b2733f788d290c851371603603f8dd5c9ecb3e6f219f1936c7a3cd9e1e90b6e63ee0d798976f9619837221cc8acae85e4797aacede98a1fa168d7ed327b0fe3bb950b6d1fdbad593ff368dd4c42a", 0xb2}], 0x6, &(0x7f0000001b40)=[{0x58, 0x108, 0x76, "4fdd0b28853f3fca8db9bb49f37cae831ea310e5e34581d94cdf2ac12ee72ec04130ebea0e4f4b25cf6e3a185d9045ab9a619f98a9b35e8f720fd5985c5755c3f3941137f0"}, {0xa8, 0x104, 0x2, "d8b44420ce635b2fbfc4caeff2c51f71c54f36688beaee6de8f15c1452f7720547e46daf577d530f1c14fd776fec015acc7a5f134d1285f3d6860359b8051f467e96e4a7b3f174d5623930206684abef0f095ab80ea93a1f3f75e0e279a7095124255a1ddfd09ef9f75f68d020e708720fe868b6335dffcc2bf8790f7c127be31b1556cb0bad7fa69aec25efba348d7dd59c30ab92"}, {0xe0, 0x117, 0x5, "79c8bc6d31f91a2b231e788c43c76614c324050ff123c13632817d7dac51c6daf84d8f6f25d4a45ca5cc2363f69cf185c0847b770af3a92a771b0542e7908b90602a6eaa897c2591e4680db1d0e74e45a979cbda88250717d6a23ce5d1414028a1bff94c99e35134ac20a31e4f3f7a256f4e94fb1b5b417bbe61919b19936d8d7a14b720c6c48d695c26ad4dfc1cbdd42ab858ea08a741e84663aab853692415f3db87f8c0b297f15fb6897b874600b3c32968160a5dae51ada22c5e1d20e19fb1c71057692429bc2f1c750305"}], 0x1e0}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000003340)={{r3, &(0x7f0000001ec0)='nfc\x00', 0x4a2540, &(0x7f0000001f00)={@_ha_fsid={[0xfffffff9, 0x9a1]}, {0x6, 0x4, 0x6, 0x6}}, 0xffff, &(0x7f0000001f40), &(0x7f0000001f80)}, 0x5, &(0x7f0000003280)=[{0x2, 0x9, &(0x7f0000001fc0)='/dev/virtual_nci\x00', &(0x7f0000002000)="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", 0x1000, 0x20}, {0x1, 0x4, &(0x7f0000003000)='*%![$@[\x00', &(0x7f0000003040)="2fb6bfeabf990eb587b14c5f4c863a75e235824bddad06401da1f739f3", 0x1d, 0x8}, {0x3, 0x80000000, &(0x7f0000003080)='.\x00', &(0x7f00000030c0)="bc964fd6844c0d02a18083c380156bd6db66bb53529bd355eb878c267139cfa7c6d234c6cb0745e5ce3d07f374a74bff59cfa9d908f126eee53a28c825596b904c3992443cdb9cdd062f7416ced1505fa4974445cb69249ca2921610628d3faa60afdbb76cfdd67a58bdabace516", 0x6e}, {0x3, 0x4, &(0x7f0000003140)='(+(}[!/(-.-\x00', &(0x7f0000003180)="23d41ae6cec4445291c1325bc426aa7db863ab2e89dce076ee930d6109233664f20089763dc3747044e55ad06e9df2963cd7013bab9a010dd69b96430f4db256c8bb9c815401", 0x46, 0x20}, {0x2, 0x8, &(0x7f0000003200)='\x00', &(0x7f0000003240)="46329d5149c7ac0b545b3a12ed064b9f25ec4150ccd4595761d18e5b37441a238250e7caab65067a", 0x28}]}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003400), r7) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x8b68eb3a512d65d7}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x68, r10, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003540), r11) sendmsg$inet6(r9, &(0x7f0000005b00)={&(0x7f0000003580)={0xa, 0x4e20, 0x9, @mcast2, 0x7f}, 0x1c, &(0x7f0000005980)=[{&(0x7f00000035c0)="38053c731988efd712b1a43fd685a4d1a3ee9896d39a53966f797e6cf614f548c775b898ff72727cc5af09dca33e7e959b55e6115d75ae8d4fb4efd60f074b1f80b522a8337e3233654682fd761be909be0961e9320cccf75114b0853d9bdd94475bd5b26fa19c08ae7372f0b300ccc7bc16d5f43a324c7b7177fe8e455649c554f27e8a", 0x84}, {&(0x7f0000003680)="bdaf2dfcba91615d44b39d0af0c890cdfdb6ad5cf33d08f31699600a3ad4aa7bd1a5e59170fd3b3084dc5c8e18bc497adb73ae5f2de5", 0x36}, {&(0x7f00000036c0)="765b5338a9ac6235f80c428bc498b24258304f62d30fd624cf633a25529ac746dbb09044aabc0c5326cfd9545aba3253a584c0b9e4fe9dae9279ee8302332313f88849b5ef1256dc1ce8ecaada3ed0fec88a97fea5754d1582906908eb050e80b119dd2ba434a376ccd36c7ef66d52b9bd37b99ef3cfe10f6e5bece1dddee91997a92c81a7a084fb", 0x88}, {&(0x7f0000003780)}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f00000047c0)="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", 0x1000}, {&(0x7f00000057c0)="4269ab6d8c8d8d4c90eeac54cfd2e7f0b5c64e2fd3f9cb965084393a8bff28941d565066ebfe5dc3b21de4fbb6e6a4a5e305ba100ab8f8c19753a8501c39d1a534e651134c98804dac32c80cfc7693b2d1d5ff7cc3938272e318ea3cd62ae07a91479401543b131a2c", 0x69}, {&(0x7f0000005840)="48a941f5e6489b8ffb4cfacd3ed0f52b90c42f378e94a722a80cd6217570adc5", 0x20}, {&(0x7f0000005880)="13a36b7ba2c2a80cbf87c2ad5a24b37ef592313786a6f9e9e74d2ceef258f580b8ade3974edf71c6039f52dc384bfde28e5944bdc7520c099f3c3e7970193ea5eb837e001b7e49e761cb845f40572e71936a07ed6c1e367fd6fde9c2181288e91e177394175808480608bffb492a702d6224e4ee3e43025100aaf12eae00815188f4d79d4959d20081c05286e4315f1d9b1a2a6df7306bef87e73bf0f758dba403a47cb71ad1ac306520a831c199a2ce3cf4f12200529dbfbcaa3f2542a6625ea9cb1ab74fbb0546cb9adce5450561374867a20c5b5f45d10ac9f16cef218a3ccc501cb2ec1007c0a403a8a1cabbea7a", 0xf0}], 0x9, &(0x7f0000005a40)=[@flowinfo={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x4cb}}, @dontfrag={{0x14, 0x29, 0x3e, 0x677}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0xb, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x98}, 0x20040000) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000005b80), r6) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000005c40)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x14, r12, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20044084) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000005c80), 0x4) recvfrom$packet(r9, &(0x7f0000005cc0)=""/63, 0x3f, 0x2, &(0x7f0000005d00)={0x11, 0x16, r2, 0x1, 0xcb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000005d40)={0x0, @l2tp={0x2, 0x0, @remote, 0x1}, @isdn={0x22, 0x5, 0xbf, 0x6, 0x2}, @isdn={0x22, 0x5, 0x5, 0x4c, 0x40}, 0xbb0, 0x0, 0x0, 0x0, 0xec, 0x0, 0xb, 0xffff, 0xfff9}) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000005dc0)={0x1, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x5}}, {{0xa, 0x4e22, 0xb2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffc0}}}, 0x108) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005f40), r6) sendmsg$NL802154_CMD_GET_SEC_KEY(r13, &(0x7f0000006000)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x2c, r14, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x14000040) 963.008312ms ago: executing program 2 (id=5589): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x24044044}, 0x14) socket(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 795.385715ms ago: executing program 4 (id=5590): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x4000090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0021056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 785.341899ms ago: executing program 3 (id=5591): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000100)="9159808921de22b86c0b7c80adfcfa5acf0ebfff5fb043693bf53d680ca5b88dad91afc36835e6245c7229097282533a84d832ec11665a9eac6e8d86f85f172517ba9c656a121ff701", 0x49}, {&(0x7f0000000180)="1a840b9aab7312ac8d1d8ca4714218c56da7a4b5c83a502a1732a6f6114678b529f2ef6d59a7c860e2f5b5d56b67b209780cfc6ef804e69b72d261fb9b3c2db8d9806146cfa531f18ef4bbe1d95279ed187cc0cabc134c8376ba9505a045052a8c4e58601d20a5ce4998f68797a628e0ed3ef6c41381547e487937866c1a3153a52c9017a167c687e1c07ee9358921b7be102fef36b2bd0289e2dfc70f2baa30fcad0fa4fd9fbe5d1820b46e", 0xac}, {&(0x7f0000000240)="5a1676c4ad9d0f", 0x7}, {&(0x7f0000001d00)="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", 0x31c}], 0x4, &(0x7f00000007c0)=[{0x180, 0x84, 0x1, "55d8ede0a38a43d4d7eca438936843f295bc3d00365c0a0dba463c22e4a325962860a6bb6dcaa370535b21d301616956407e4a8da73101000000000000006a5b0b31d25d829f387db48e24609d75f59b1bcc11425c733eb1a7344c09ddc9bba71e7e0fbfe79b0b0b442d5e01304accef99af19a6ce20e824c3896a74e3d471183d632270e4e79c2d0e627fc1beb6555d3945b95003ce1d557d4f4c2d54d3771a4ae29894d64edb9d69695cf24e0352e93b725fe96c2428396211710631e932f5c92da7c85c36e8e22b69bf1e5cc5509329acc5d3a243a8507a28010000000000000000000000000000005e18dd5db1643f9bd2e1aa0ff32b659dea441f56e076f26e8c6c376ef441c988777bb26042f2ed915f808449fe44aa5d837bf895f16213d95b6b9d1f7ec991d12517da73647bda956f0dfdf66cef6371dfe0e230c39695998ebe8556ed1add2a2bf59ac6d6ad11280092c59381b7588fe33ffa7d446022a9eac4c253b64a8a"}, {0x50, 0x110, 0x13e, "f9dd1043c49eb4c81fec62bb01de28b10a76b9c67c441073119013b3b4b5c9ad89a5f5e14da1266b5223ba7d8a07b5285f44b8c06c31bff418fc186b7dba2b9b"}, {0x10, 0xff, 0x4b}], 0x1e0}}], 0x1, 0x8000) 675.579282ms ago: executing program 2 (id=5592): r0 = socket(0x22, 0x2, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x8080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x6}}}}, 0x30}, 0x1, 0x0, 0x0, 0x240000a1}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f6, 0x4, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x81) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x2, 0xf4180000, 0x14, @empty, @private2, 0x8, 0x700, 0xa3, 0x5}}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000640)={0x51c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x384, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "5bd20f459d91f9c08f8707af0bd884d5a1cc18defdd67a8c579507be58c1717b13aa7d7a4c7744569ff839c7603299e8a3754db9d49498679cce67b85e0315b2517f95c53cfbf946537706b0105382c3fa6c0e3ada4e1eef5522f8ea79a74d2a26c48ef063c2b23de815dd6be3fd574359ad073f09e5e3f128d7d41ac30c0437041b57515f336b760ede2ba1d51953fcc818f7c58537c0ea20903061455e852d25a4d5dbd47ba109bd38ca08928c3edf9383976b8e780c8d606e6430d29127a97d61873c29e55dba2399c8031bda1efb8731fd1a2daf9f88c58d865b9472f8c406d95621ab7c9bb8f763ac3d7e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa71}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}]}, @ETHTOOL_A_BITSET_BITS={0x1e0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7d90}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '-!+!$&&%\\#)\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-h)]}-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffa9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')%\':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b11}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "379dec459a239a1f65d92107447f76cb01bd44ba6c592eb2dcb4d1f5e37d9825127927fd00489bab543dae3b401c8db0d892ae445ed3b21f0ed31ae4cbca27a47e94ce08a0dcf846b8e9a1bcefc8df6682b923b67db414ca930492342968da8486fbf5c7a4115fb54b1d0e0ca3b3eacc1bb27b9ec78c2a79929ed668df1fec557394da4f2fc938c0afd87cae5491ed541fbea763c269c26c8da0843f8f73346a34e60bc8a400d1ff121578c6214d26ab4e17f112000bdef0ae0b4a052ac4f2ec6f33df5199cf78"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x51c}}, 0x8000) 669.669805ms ago: executing program 4 (id=5593): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="7105097f01a000010f01"], 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff565e1, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xc}, {0xb, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54070}, 0x400c840) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) 668.144699ms ago: executing program 0 (id=5594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e22, @private=0xa010101}, 0x22, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000000, 0x8}) 571.685099ms ago: executing program 0 (id=5595): r0 = socket(0x11, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8, 0x9, 0x9, 0x7}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000380)}, 0x40012042) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="32000400000000000000070502000900"], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r4, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x12a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x24048080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b26, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 463.607425ms ago: executing program 1 (id=5596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWFLOWTABLE={0x1ac, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 413.796716ms ago: executing program 1 (id=5597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="0e9b6fbfda90bfd37e79", 0xa}, {&(0x7f0000000080)='\x00\x00', 0x2}, {&(0x7f0000000140)="517c732d7d324028028f477fbf4a03e4d5cea30f02beca97509732e90e12165064f1f75c4faba093c187d24b95611a5edb272cd8e46a95be64b46678164bc0c0d8a412", 0x43}], 0x3) 403.194746ms ago: executing program 2 (id=5598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept$inet6(r3, 0x0, 0x0) socket(0x2, 0xa, 0x8) 355.964376ms ago: executing program 0 (id=5599): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 314.633255ms ago: executing program 0 (id=5600): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/160, 0xa0}], 0x1}, 0x40012042) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026"], 0x80}}, 0x0) close(r0) socket$inet(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="000000000600"}) 229.809873ms ago: executing program 1 (id=5601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0xf1ff}, 0x4000010) 122.499598ms ago: executing program 1 (id=5602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14, 0x3}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x202, 0x1ff}}}}, 0x3e) 74.159193ms ago: executing program 2 (id=5603): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x62, 0x5, 0x3c8, 0x190, 0x190, 0xffffffff, 0x0, 0xe8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xb0, 0xe8, 0x0, {0x22e}, [@common=@set={{0x40}, {{0x0, [0x8, 0x2, 0x2, 0x1, 0x4], 0x0, 0xc}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x11, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 6.174576ms ago: executing program 2 (id=5604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x9}}]}, 0x50}}, 0x48000) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) splice(r3, 0x0, r2, &(0x7f0000000080), 0x6, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 0s ago: executing program 1 (id=5605): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x6001}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8000000003fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000013f80c02621825a416734c8bc83d00010000000200000f02000000040000000000000002000000f841000000000000000f020000001ba400610000"], &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) kernel console output (not intermixed with test programs): hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.354232][T18704] openvswitch: netlink: Key type 2064 is out of range max 32 [ 459.745710][ T51] Bluetooth: hci4: link tx timeout [ 459.751042][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.976646][T18750] set match dimension is over the limit! [ 460.170381][T18760] __nla_validate_parse: 5 callbacks suppressed [ 460.170402][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'. [ 460.302940][T18771] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3904'. [ 460.339182][T18771] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3904'. [ 460.407523][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'. [ 460.434420][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3908'. [ 460.592657][T18797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3912'. [ 460.594195][T18798] netlink: 'syz.3.3913': attribute type 4 has an invalid length. [ 460.697397][T18808] openvswitch: netlink: Multiple metadata blocks provided [ 460.751955][T18810] syzkaller0: entered promiscuous mode [ 460.822205][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 460.865696][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3918'. [ 460.875204][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3918'. [ 460.882647][T18818] syzkaller0: entered promiscuous mode [ 460.891867][T18818] syzkaller0: entered allmulticast mode [ 460.899865][T18815] netlink: 'syz.2.3918': attribute type 10 has an invalid length. [ 460.928294][T18815] veth0_vlan: left promiscuous mode [ 460.938708][T18815] veth0_vlan: entered promiscuous mode [ 460.946669][T18815] team0: Device veth0_vlan failed to register rx_handler [ 461.171958][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3928'. [ 461.274997][T18846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3931'. [ 461.292097][T18849] netlink: 'syz.2.3932': attribute type 21 has an invalid length. [ 461.340698][T18852] openvswitch: netlink: Multiple metadata blocks provided [ 461.386374][T18856] syzkaller0: entered promiscuous mode [ 461.433047][T18858] bond4: left promiscuous mode [ 461.438946][T18858] mac80211_hwsim hwsim35 wlan3: entered allmulticast mode [ 461.446659][T18858] veth4: entered allmulticast mode [ 461.452243][T18858] veth5: entered allmulticast mode [ 461.459028][T18858] mac80211_hwsim hwsim36 wlan4: entered allmulticast mode [ 461.466642][T18858] gtp0: entered allmulticast mode [ 461.716446][T18874] netlink: 'syz.3.3941': attribute type 21 has an invalid length. [ 461.898111][T18885] syzkaller0: entered promiscuous mode [ 462.405409][T18921] syzkaller0: entered promiscuous mode [ 462.576968][T18927] bond10: entered promiscuous mode [ 462.582539][T18927] bond10: entered allmulticast mode [ 462.723346][T18944] openvswitch: netlink: Multiple metadata blocks provided [ 463.007300][T18957] tipc: Enabled bearer , priority 0 [ 463.039694][T18956] syzkaller0: entered promiscuous mode [ 463.045294][T18956] syzkaller0: entered allmulticast mode [ 463.070112][T18955] tipc: Resetting bearer [ 463.127868][T18955] tipc: Disabling bearer [ 463.137182][T18970] x_tables: unsorted entry at hook 3 [ 463.168388][T18969] syzkaller0: entered promiscuous mode [ 463.389517][T18978] openvswitch: netlink: Multiple metadata blocks provided [ 463.500309][T18988] veth1_macvtap: left promiscuous mode [ 463.506418][T18988] macsec0: entered promiscuous mode [ 463.512809][T18988] macsec0: entered allmulticast mode [ 463.526585][T18988] veth1_macvtap: entered promiscuous mode [ 463.532732][T18988] veth1_macvtap: entered allmulticast mode [ 463.540202][T18988] macsec0: left promiscuous mode [ 463.545679][T18988] macsec0: left allmulticast mode [ 463.551667][T18988] veth1_macvtap: left allmulticast mode [ 463.721301][T19000] openvswitch: netlink: Message has 154 unknown bytes. [ 463.824165][T19007] syzkaller0: entered promiscuous mode [ 463.968959][T19017] openvswitch: netlink: Multiple metadata blocks provided [ 464.114723][T19027] openvswitch: netlink: VXLAN extension 16128 out of range max 1 [ 464.333026][T19040] syzkaller0: entered promiscuous mode [ 464.836366][T19073] netlink: 'syz.4.4022': attribute type 10 has an invalid length. [ 464.878449][T19074] macsec1: entered allmulticast mode [ 464.885448][T19074] bridge3: entered allmulticast mode [ 465.118357][T19086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.134127][T19088] set match dimension is over the limit! [ 465.231866][T19092] __nla_validate_parse: 18 callbacks suppressed [ 465.231886][T19092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4029'. [ 465.247897][T19092] openvswitch: netlink: Flow key attr not present in new flow. [ 465.381029][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4033'. [ 465.393345][T19104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4033'. [ 465.463516][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4034'. [ 465.503181][T19111] mac80211_hwsim hwsim3 pimreg: entered allmulticast mode [ 465.613706][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4039'. [ 465.649169][T19115] openvswitch: netlink: Flow actions attr not present in new flow. [ 465.730752][T19132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4039'. [ 465.738304][T19133] FAULT_INJECTION: forcing a failure. [ 465.738304][T19133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.790937][T19133] CPU: 1 UID: 0 PID: 19133 Comm: syz.1.4042 Not tainted syzkaller #0 PREEMPT(full) [ 465.790963][T19133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.790974][T19133] Call Trace: [ 465.790981][T19133] [ 465.790988][T19133] dump_stack_lvl+0xe8/0x150 [ 465.791018][T19133] should_fail_ex+0x412/0x560 [ 465.791054][T19133] _copy_from_user+0x2d/0xb0 [ 465.791078][T19133] ___sys_sendmsg+0x1c6/0x360 [ 465.791108][T19133] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.791164][T19133] ? __fget_files+0x2a/0x420 [ 465.791181][T19133] ? __fget_files+0x3a0/0x420 [ 465.791207][T19133] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.791231][T19133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.791260][T19133] ? __pfx_ksys_write+0x10/0x10 [ 465.791289][T19133] do_syscall_64+0x14d/0xf80 [ 465.791311][T19133] ? trace_irq_disable+0x3b/0x150 [ 465.791326][T19133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.791345][T19133] ? clear_bhb_loop+0x40/0x90 [ 465.791366][T19133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.791384][T19133] RIP: 0033:0x7ff30219c819 [ 465.791401][T19133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.791416][T19133] RSP: 002b:00007ff303046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.791436][T19133] RAX: ffffffffffffffda RBX: 00007ff302415fa0 RCX: 00007ff30219c819 [ 465.791449][T19133] RDX: 0000000004000074 RSI: 0000200000000080 RDI: 0000000000000003 [ 465.791461][T19133] RBP: 00007ff303046090 R08: 0000000000000000 R09: 0000000000000000 [ 465.791473][T19133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.791483][T19133] R13: 00007ff302416038 R14: 00007ff302415fa0 R15: 00007ffc5aea9b28 [ 465.791513][T19133] [ 466.210564][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4047'. [ 466.362851][T19156] netlink: 'syz.4.4050': attribute type 10 has an invalid length. [ 466.371295][T19156] netlink: 396 bytes leftover after parsing attributes in process `syz.4.4050'. [ 466.431098][T19158] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4051'. [ 466.979914][T19188] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 466.998710][T19188] syzkaller1: Linktype set failed because interface is up [ 467.047981][ T796] syzkaller1: tun_net_xmit 90 [ 467.096542][T19172] ip6tnl4: entered allmulticast mode [ 467.501526][ T796] syzkaller1: tun_net_xmit 90 [ 468.808341][ T7175] syzkaller1: tun_net_xmit 86 [ 468.872493][T19209] netlink: 'syz.3.4061': attribute type 10 has an invalid length. [ 468.887713][T19209] netlink: 396 bytes leftover after parsing attributes in process `syz.3.4061'. [ 468.897707][T19207] syzkaller0: entered promiscuous mode [ 468.907966][T19207] syzkaller0: entered allmulticast mode [ 469.295320][T19229] syzkaller1: entered promiscuous mode [ 469.301448][T19229] syzkaller1: entered allmulticast mode [ 469.363361][T19233] netlink: 'syz.3.4072': attribute type 1 has an invalid length. [ 469.484817][T19239] netlink: 'syz.0.4075': attribute type 10 has an invalid length. [ 469.680874][T19252] vlan2: entered promiscuous mode [ 469.686145][T19252] geneve1: entered promiscuous mode [ 469.692508][T19252] vlan2: entered allmulticast mode [ 469.700810][T19252] geneve1: entered allmulticast mode [ 470.091019][T19275] set match dimension is over the limit! [ 470.156876][T19276] syzkaller0: entered promiscuous mode [ 470.166705][T19276] syzkaller0: entered allmulticast mode [ 470.167675][T19278] FAULT_INJECTION: forcing a failure. [ 470.167675][T19278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.194336][T19278] CPU: 0 UID: 0 PID: 19278 Comm: syz.2.4090 Not tainted syzkaller #0 PREEMPT(full) [ 470.194362][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 470.194373][T19278] Call Trace: [ 470.194380][T19278] [ 470.194387][T19278] dump_stack_lvl+0xe8/0x150 [ 470.194414][T19278] should_fail_ex+0x412/0x560 [ 470.194445][T19278] _copy_from_user+0x2d/0xb0 [ 470.194466][T19278] kstrtouint_from_user+0xd6/0x180 [ 470.194485][T19278] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 470.194516][T19278] proc_fail_nth_write+0x8e/0x210 [ 470.194540][T19278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 470.194568][T19278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 470.194594][T19278] vfs_write+0x29a/0xb90 [ 470.194619][T19278] ? __pfx_vfs_write+0x10/0x10 [ 470.194632][T19278] ? __fget_files+0x2a/0x420 [ 470.194644][T19278] ? __fget_files+0x3a0/0x420 [ 470.194652][T19278] ? __fget_files+0x2a/0x420 [ 470.194666][T19278] ksys_write+0x150/0x270 [ 470.194679][T19278] ? __pfx_ksys_write+0x10/0x10 [ 470.194697][T19278] do_syscall_64+0x14d/0xf80 [ 470.194711][T19278] ? trace_irq_disable+0x3b/0x150 [ 470.194720][T19278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.194730][T19278] ? clear_bhb_loop+0x40/0x90 [ 470.194743][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.194753][T19278] RIP: 0033:0x7fa15375d04e [ 470.194764][T19278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 470.194772][T19278] RSP: 002b:00007fa1519f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 470.194784][T19278] RAX: ffffffffffffffda RBX: 00007fa1519f66c0 RCX: 00007fa15375d04e [ 470.194791][T19278] RDX: 0000000000000001 RSI: 00007fa1519f60a0 RDI: 0000000000000004 [ 470.194797][T19278] RBP: 00007fa1519f6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.194803][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.194808][T19278] R13: 00007fa153a16038 R14: 00007fa153a15fa0 R15: 00007ffc35090a58 [ 470.194824][T19278] [ 470.765644][T19299] bond0: entered promiscuous mode [ 470.807311][T19299] bond_slave_0: entered promiscuous mode [ 470.835357][T19304] openvswitch: netlink: Multiple metadata blocks provided [ 470.880395][T19299] bond_slave_1: entered promiscuous mode [ 470.898049][T19306] set match dimension is over the limit! [ 470.909139][T19299] bond0: left allmulticast mode [ 471.046944][T19311] netlink: 'syz.4.4102': attribute type 29 has an invalid length. [ 471.071866][T19311] __nla_validate_parse: 4 callbacks suppressed [ 471.071885][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'. [ 471.134299][T19323] netlink: 'syz.4.4102': attribute type 29 has an invalid length. [ 471.163282][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'. [ 471.313542][T19332] gre1: entered allmulticast mode [ 471.451892][T19343] openvswitch: netlink: Multiple metadata blocks provided [ 471.536179][T19347] netlink: 'syz.4.4116': attribute type 10 has an invalid length. [ 471.546612][T19347] netlink: 396 bytes leftover after parsing attributes in process `syz.4.4116'. [ 471.725195][T19359] tunl0: entered allmulticast mode [ 471.734162][T19359] gre0: entered allmulticast mode [ 471.748298][T19359] gretap0: entered allmulticast mode [ 471.758346][T19359] erspan0: entered allmulticast mode [ 471.769035][T19359] ip_vti0: entered allmulticast mode [ 471.781494][T19359] ip6_vti0: entered allmulticast mode [ 471.792351][T19359] sit0: entered allmulticast mode [ 471.802215][T19359] ip6tnl0: entered allmulticast mode [ 471.811387][T19359] ip6gre0: entered allmulticast mode [ 471.875741][T19359] syz_tun: entered allmulticast mode [ 471.887223][T19359] ip6gretap0: entered allmulticast mode [ 471.898135][T19359] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.906585][T19359] bridge0: entered allmulticast mode [ 471.920932][T19359] bond0: entered allmulticast mode [ 471.926544][T19359] bond_slave_0: entered allmulticast mode [ 471.933459][T19359] bond_slave_1: entered allmulticast mode [ 471.944525][T19359] team0: entered allmulticast mode [ 471.950785][T19359] team_slave_0: entered allmulticast mode [ 471.956828][T19359] team_slave_1: entered allmulticast mode [ 471.965830][T19359] nlmon0: entered allmulticast mode [ 471.972925][T19359] caif0: entered allmulticast mode [ 471.978667][T19359] batadv0: entered allmulticast mode [ 471.986054][T19359] vxcan0: entered allmulticast mode [ 471.992581][T19359] vxcan1: entered allmulticast mode [ 472.000597][T19359] veth0: entered allmulticast mode [ 472.008178][T19359] veth1: entered allmulticast mode [ 472.015683][T19359] wg0: entered allmulticast mode [ 472.022947][T19359] wg1: entered allmulticast mode [ 472.030669][T19359] wg2: entered allmulticast mode [ 472.037173][T19359] veth0_to_bridge: entered allmulticast mode [ 472.047214][T19359] veth1_to_bridge: entered allmulticast mode [ 472.058599][T19359] veth0_to_bond: entered allmulticast mode [ 472.069431][T19359] veth1_to_bond: entered allmulticast mode [ 472.080911][T19359] veth0_to_team: entered allmulticast mode [ 472.092379][T19359] veth1_to_team: entered allmulticast mode [ 472.103580][T19359] veth0_to_batadv: entered allmulticast mode [ 472.122929][T19359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.131183][T19359] batadv_slave_0: entered allmulticast mode [ 472.142587][T19359] veth1_to_batadv: entered allmulticast mode [ 472.150805][T19359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.158779][T19359] batadv_slave_1: entered allmulticast mode [ 472.166532][T19359] xfrm0: entered allmulticast mode [ 472.174297][T19359] veth0_to_hsr: entered allmulticast mode [ 472.184443][T19359] veth1_to_hsr: entered allmulticast mode [ 472.196652][T19359] veth1_virt_wifi: entered allmulticast mode [ 472.205162][T19359] veth0_virt_wifi: entered allmulticast mode [ 472.214136][T19359] virt_wifi0: entered allmulticast mode [ 472.220205][T19359] veth1_vlan: entered allmulticast mode [ 472.228947][T19359] veth0_vlan: entered allmulticast mode [ 472.237392][T19359] tipc: Resetting bearer [ 472.243448][T19359] vlan0: entered allmulticast mode [ 472.250877][T19359] macvlan0: entered allmulticast mode [ 472.256725][T19359] macvlan1: entered allmulticast mode [ 472.269523][T19359] ipvlan0: entered allmulticast mode [ 472.275587][T19359] ipvlan1: entered allmulticast mode [ 472.282181][T19359] veth1_macvtap: entered allmulticast mode [ 472.290941][T19359] veth0_macvtap: entered allmulticast mode [ 472.300348][T19359] macvtap0: entered allmulticast mode [ 472.308004][T19359] macsec0: entered allmulticast mode [ 472.315520][T19359] geneve0: entered allmulticast mode [ 472.326667][T19359] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 472.340692][T19359] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 472.351167][T19359] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 472.360851][T19359] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 472.374770][T19359] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 472.387470][T19359] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 472.397081][T19359] batadv1: entered allmulticast mode [ 472.406810][T19359] @: entered allmulticast mode [ 472.413396][T19359] veth2: entered allmulticast mode [ 472.418847][T19359] veth3: entered allmulticast mode [ 472.424421][T19359] bond1: left promiscuous mode [ 472.429310][T19359] bridge1: left promiscuous mode [ 472.434559][T19359] bond1: entered allmulticast mode [ 472.440424][T19359] bridge1: entered allmulticast mode [ 472.449060][T19359] bond2: left promiscuous mode [ 472.454207][T19359] bridge2: left promiscuous mode [ 472.459484][T19359] bond2: entered allmulticast mode [ 472.464881][T19359] bridge2: entered allmulticast mode [ 472.473728][T19359] mac80211_hwsim hwsim1 wlan2: entered allmulticast mode [ 472.481792][T19359] bridge3: entered allmulticast mode [ 472.489149][T19359] mac80211_hwsim hwsim13 wlan3: entered allmulticast mode [ 472.497431][T19359] bond3: entered allmulticast mode [ 472.504391][T19359] bond4: left promiscuous mode [ 472.509433][T19359] bond4: entered allmulticast mode [ 472.516558][T19359] vxlan0: entered allmulticast mode [ 472.525236][T19359] bond5: entered allmulticast mode [ 472.530702][T19359] bridge4: entered allmulticast mode [ 472.538262][T19359] gre1: entered allmulticast mode [ 472.546660][T19359] mac80211_hwsim hwsim21 wlan4: entered allmulticast mode [ 472.552115][T19374] openvswitch: netlink: Multiple metadata blocks provided [ 472.561364][T19359] bond6: left promiscuous mode [ 472.566391][T19359] ip6gre1: left promiscuous mode [ 472.572679][T19359] bond6: entered allmulticast mode [ 472.578171][T19359] ip6gre1: entered allmulticast mode [ 472.586698][T19359] bridge5: entered allmulticast mode [ 472.593569][T19359] bond7: entered allmulticast mode [ 472.600153][T19359] mac80211_hwsim hwsim31 wlan5: entered allmulticast mode [ 472.608761][T19359] gtp0: entered allmulticast mode [ 472.614607][T19359] bond8: entered allmulticast mode [ 472.614706][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4127'. [ 472.620312][T19359] bond9: entered allmulticast mode [ 472.620438][T19359] bridge6: entered allmulticast mode [ 472.642371][T19359] bond10: left promiscuous mode [ 472.647711][T19359] bridge7: left promiscuous mode [ 472.656365][T19359] geneve2: left promiscuous mode [ 472.663336][T19359] bond11: left promiscuous mode [ 472.669277][T19359] vlan4094: entered allmulticast mode [ 472.676166][T19359] ip6gre2: left promiscuous mode [ 472.684702][T19359] bridge8: entered allmulticast mode [ 472.691979][T19359] vlan2: left promiscuous mode [ 472.696794][T19359] geneve1: left promiscuous mode [ 472.707848][ T7165] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.729210][ T7165] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.754079][ T7165] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 472.801424][ T7165] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.831832][ T7165] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.844521][ T7165] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 472.884907][T19381] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4130'. [ 472.907941][ T7165] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.917486][ T7165] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.954643][ T7165] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 472.994906][T19383] syzkaller0: entered promiscuous mode [ 473.022103][T19383] syzkaller0: entered allmulticast mode [ 473.038487][ T7165] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.049093][ T7165] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.063351][ T7165] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 473.318199][T19415] bond0: left promiscuous mode [ 473.337359][T19415] bond_slave_0: left promiscuous mode [ 473.343174][T19415] bond_slave_1: left promiscuous mode [ 473.354432][T19415] bond0: entered allmulticast mode [ 473.473642][T19425] openvswitch: netlink: Multiple metadata blocks provided [ 473.578362][T19436] syzkaller0: entered promiscuous mode [ 473.584056][T19436] syzkaller0: entered allmulticast mode [ 473.643864][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4151'. [ 473.683588][T19439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.697981][T19439] netlink: 'syz.4.4151': attribute type 1 has an invalid length. [ 473.828421][T19448] netlink: 'syz.3.4155': attribute type 3 has an invalid length. [ 473.947229][T19455] xt_hashlimit: size too large, truncated to 1048576 [ 474.013147][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4159'. [ 474.293949][T19467] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 474.521068][T19475] Cannot find add_set index 3 as target [ 474.563785][T19476] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4166'. [ 474.610084][T19476] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4166'. [ 474.864514][T19496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4175'. [ 476.171199][T19562] syzkaller0: entered promiscuous mode [ 476.176830][T19562] syzkaller0: entered allmulticast mode [ 478.151747][T19619] __nla_validate_parse: 7 callbacks suppressed [ 478.151768][T19619] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4223'. [ 478.603518][T19655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4233'. [ 478.627457][T19655] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4233'. [ 478.646912][T19655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4233'. [ 478.677075][T19654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4233'. [ 478.701496][T19654] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4233'. [ 478.725644][T19654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4233'. [ 478.966103][T19662] syzkaller0: entered promiscuous mode [ 478.972779][T19662] syzkaller0: entered allmulticast mode [ 479.632685][T19691] netlink: 'syz.1.4245': attribute type 10 has an invalid length. [ 480.460522][T19690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.843907][T19689] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 480.870116][T19691] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 480.918281][T19691] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 480.936213][T19691] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 481.078708][T19698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4246'. [ 481.116958][T19695] syzkaller0: entered promiscuous mode [ 481.500218][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 481.625586][T19710] tipc: Failed to remove unknown binding: 66,1,1/0:568010979/568010981 [ 483.313916][T19733] syzkaller0: entered promiscuous mode [ 483.337846][T19733] syzkaller0: entered allmulticast mode [ 483.510472][T19748] Cannot find add_set index 3 as target [ 483.614063][T19750] netlink: 'syz.2.4262': attribute type 10 has an invalid length. [ 483.622789][T19750] netlink: 396 bytes leftover after parsing attributes in process `syz.2.4262'. [ 483.702515][T19752] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4263'. [ 485.420634][T19780] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4271'. [ 485.433018][T19780] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4271'. [ 485.519935][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4273'. [ 485.524847][T19778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4268'. [ 485.543242][T19785] macsec2: entered promiscuous mode [ 485.549431][T19785] bridge0: entered promiscuous mode [ 485.562241][T19788] Cannot find add_set index 3 as target [ 485.567517][T19785] macsec2: entered allmulticast mode [ 485.574081][T19785] bridge0: port 1(macsec2) entered blocking state [ 485.584617][T19785] bridge0: port 1(macsec2) entered disabled state [ 485.599994][T19785] bridge0: left promiscuous mode [ 485.746517][T19798] syzkaller0: entered promiscuous mode [ 485.752185][T19798] syzkaller0: entered allmulticast mode [ 486.254524][T19805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4281'. [ 486.399223][T19810] netlink: 'syz.4.4283': attribute type 10 has an invalid length. [ 486.407537][T19810] netlink: 396 bytes leftover after parsing attributes in process `syz.4.4283'. [ 486.904817][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4292'. [ 487.000104][T19842] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4293'. [ 487.952356][ T7168] wlan1: Trigger new scan to find an IBSS to join [ 488.106727][T19870] bond12: entered promiscuous mode [ 488.156753][T19870] 8021q: adding VLAN 0 to HW filter on device bond12 [ 488.240629][T19874] 8021q: adding VLAN 0 to HW filter on device bond12 [ 488.249112][T19874] bond12: (slave sit1): The slave device specified does not support setting the MAC address [ 488.272904][T19874] bond12: (slave sit1): Error -95 calling set_mac_address [ 488.300666][T19883] syzkaller0: entered promiscuous mode [ 488.312482][T19883] syzkaller0: entered allmulticast mode [ 488.644596][T19911] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 488.764259][T19922] __nla_validate_parse: 5 callbacks suppressed [ 488.764280][T19922] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4325'. [ 488.783104][T19924] netlink: 'syz.1.4327': attribute type 10 has an invalid length. [ 488.796863][T19922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4325'. [ 488.809638][T19922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4325'. [ 488.813107][T19924] bridge_slave_1: left allmulticast mode [ 488.832686][T19924] bridge_slave_1: left promiscuous mode [ 488.847974][T19924] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.862291][T19924] bridge_slave_1: entered allmulticast mode [ 488.869239][T19924] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 488.882449][T19924] syzkaller0: entered promiscuous mode [ 488.889457][T19924] syzkaller0: entered allmulticast mode [ 488.895662][T19933] netlink: 424 bytes leftover after parsing attributes in process `syz.4.4330'. [ 488.997498][T19939] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4331'. [ 489.152330][T19945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4334'. [ 489.170768][T19951] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 489.232245][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4334'. [ 489.372801][T19965] netlink: 'syz.3.4344': attribute type 10 has an invalid length. [ 489.381944][T19965] netlink: 396 bytes leftover after parsing attributes in process `syz.3.4344'. [ 489.596168][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4349'. [ 489.608377][T19978] openvswitch: netlink: Flow actions attr not present in new flow. [ 489.695115][T19987] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4353'. [ 489.895380][T19999] Cannot find set identified by id 65534 to match [ 489.990939][T20005] Cannot find add_set index 3 as target [ 490.464796][T20043] netlink: 'syz.4.4371': attribute type 10 has an invalid length. [ 490.556154][T20050] Cannot find add_set index 3 as target [ 490.580416][T20047] syzkaller0: entered promiscuous mode [ 490.598626][T20047] 0: reclassify loop, rule prio 0, protocol 800 [ 490.682090][T20059] ipt_ECN: cannot use operation on non-tcp rule [ 490.983761][ T7175] wlan1: Trigger new scan to find an IBSS to join [ 491.122391][T20091] syzkaller0: entered promiscuous mode [ 491.130447][T20091] 0: reclassify loop, rule prio 0, protocol 800 [ 491.216546][T20097] syzkaller0: entered promiscuous mode [ 491.235542][T20097] syzkaller0: entered allmulticast mode [ 491.304346][T20105] lo: Caught tx_queue_len zero misconfig [ 491.721939][T20122] netlink: 'syz.0.4402': attribute type 10 has an invalid length. [ 492.118785][T20107] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 492.282550][T20131] openvswitch: netlink: Flow key attr not present in new flow. [ 492.285181][T20139] Cannot find add_set index 3 as target [ 492.772919][T20166] syzkaller0: entered promiscuous mode [ 492.779112][T20166] syzkaller0: entered allmulticast mode [ 493.316457][T20203] netlink: 'syz.0.4433': attribute type 1 has an invalid length. [ 493.731705][T20232] FAULT_INJECTION: forcing a failure. [ 493.731705][T20232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.746119][T20232] CPU: 1 UID: 0 PID: 20232 Comm: syz.0.4444 Not tainted syzkaller #0 PREEMPT(full) [ 493.746147][T20232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.746158][T20232] Call Trace: [ 493.746165][T20232] [ 493.746172][T20232] dump_stack_lvl+0xe8/0x150 [ 493.746202][T20232] should_fail_ex+0x412/0x560 [ 493.746233][T20232] _copy_from_user+0x2d/0xb0 [ 493.746260][T20232] ___sys_sendmsg+0x1c6/0x360 [ 493.746290][T20232] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.746318][T20232] ? kstrtouint+0x6e/0xe0 [ 493.746369][T20232] ? __fget_files+0x2a/0x420 [ 493.746385][T20232] ? __fget_files+0x3a0/0x420 [ 493.746411][T20232] __sys_sendmmsg+0x27c/0x4e0 [ 493.746440][T20232] ? __pfx___sys_sendmmsg+0x10/0x10 [ 493.746461][T20232] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 493.746509][T20232] ? ksys_write+0x242/0x270 [ 493.746530][T20232] ? __pfx_ksys_write+0x10/0x10 [ 493.746555][T20232] __x64_sys_sendmmsg+0xa0/0xc0 [ 493.746580][T20232] do_syscall_64+0x14d/0xf80 [ 493.746603][T20232] ? trace_irq_disable+0x3b/0x150 [ 493.746619][T20232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.746637][T20232] ? clear_bhb_loop+0x40/0x90 [ 493.746659][T20232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.746677][T20232] RIP: 0033:0x7f9c5839c819 [ 493.746695][T20232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.746710][T20232] RSP: 002b:00007f9c565d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 493.746730][T20232] RAX: ffffffffffffffda RBX: 00007f9c58616090 RCX: 00007f9c5839c819 [ 493.746743][T20232] RDX: 0000000000000001 RSI: 0000200000001cc0 RDI: 0000000000000004 [ 493.746755][T20232] RBP: 00007f9c565d5090 R08: 0000000000000000 R09: 0000000000000000 [ 493.746767][T20232] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 493.746778][T20232] R13: 00007f9c58616128 R14: 00007f9c58616090 R15: 00007fff9d21ba98 [ 493.746807][T20232] [ 493.969081][ T7175] wlan1: Creating new IBSS network, BSSID 82:54:28:21:5f:d1 [ 494.054119][T20239] FAULT_INJECTION: forcing a failure. [ 494.054119][T20239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.091714][T20239] CPU: 1 UID: 0 PID: 20239 Comm: syz.2.4447 Not tainted syzkaller #0 PREEMPT(full) [ 494.091746][T20239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.091757][T20239] Call Trace: [ 494.091765][T20239] [ 494.091773][T20239] dump_stack_lvl+0xe8/0x150 [ 494.091802][T20239] should_fail_ex+0x412/0x560 [ 494.091833][T20239] _copy_to_user+0x31/0xb0 [ 494.091858][T20239] simple_read_from_buffer+0xe1/0x170 [ 494.091888][T20239] proc_fail_nth_read+0x1bb/0x230 [ 494.091917][T20239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.091946][T20239] ? rw_verify_area+0x2a6/0x4d0 [ 494.091966][T20239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.091999][T20239] vfs_read+0x20c/0xa70 [ 494.092017][T20239] ? fdget_pos+0x246/0x320 [ 494.092039][T20239] ? __pfx___mutex_lock+0x10/0x10 [ 494.092065][T20239] ? __pfx_vfs_read+0x10/0x10 [ 494.092085][T20239] ? __fget_files+0x2a/0x420 [ 494.092105][T20239] ? __fget_files+0x3a0/0x420 [ 494.092119][T20239] ? __fget_files+0x2a/0x420 [ 494.092142][T20239] ksys_read+0x150/0x270 [ 494.092163][T20239] ? __pfx_ksys_read+0x10/0x10 [ 494.092192][T20239] do_syscall_64+0x14d/0xf80 [ 494.092213][T20239] ? trace_irq_disable+0x3b/0x150 [ 494.092228][T20239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.092245][T20239] ? clear_bhb_loop+0x40/0x90 [ 494.092266][T20239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.092284][T20239] RIP: 0033:0x7fa15375d04e [ 494.092301][T20239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.092316][T20239] RSP: 002b:00007fa1519d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.092334][T20239] RAX: ffffffffffffffda RBX: 00007fa1519d56c0 RCX: 00007fa15375d04e [ 494.092348][T20239] RDX: 000000000000000f RSI: 00007fa1519d50a0 RDI: 0000000000000003 [ 494.092359][T20239] RBP: 00007fa1519d5090 R08: 0000000000000000 R09: 0000000000000000 [ 494.092370][T20239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.092380][T20239] R13: 00007fa153a16128 R14: 00007fa153a16090 R15: 00007ffc35090a58 [ 494.092410][T20239] [ 494.109138][T20243] __nla_validate_parse: 15 callbacks suppressed [ 494.109158][T20243] netlink: 416 bytes leftover after parsing attributes in process `syz.1.4450'. [ 494.228803][T20245] FAULT_INJECTION: forcing a failure. [ 494.228803][T20245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.315057][T20247] netlink: 'syz.4.4452': attribute type 21 has an invalid length. [ 494.320775][T20245] CPU: 1 UID: 0 PID: 20245 Comm: syz.2.4451 Not tainted syzkaller #0 PREEMPT(full) [ 494.320801][T20245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.320812][T20245] Call Trace: [ 494.320819][T20245] [ 494.320826][T20245] dump_stack_lvl+0xe8/0x150 [ 494.320856][T20245] should_fail_ex+0x412/0x560 [ 494.320885][T20245] _copy_from_iter+0x1d3/0x1670 [ 494.320908][T20245] ? rcu_is_watching+0x15/0xb0 [ 494.320937][T20245] ? __pfx__copy_from_iter+0x10/0x10 [ 494.320962][T20245] ? netlink_sendmsg+0x650/0xb40 [ 494.320981][T20245] ? skb_put+0x11b/0x210 [ 494.321006][T20245] netlink_sendmsg+0x6c0/0xb40 [ 494.321033][T20245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.321056][T20245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.321082][T20245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.321105][T20245] ____sys_sendmsg+0x972/0x9f0 [ 494.321143][T20245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.321173][T20245] ? import_iovec+0x73/0xa0 [ 494.321196][T20245] ___sys_sendmsg+0x2a5/0x360 [ 494.321223][T20245] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.321276][T20245] ? __fget_files+0x2a/0x420 [ 494.321292][T20245] ? __fget_files+0x3a0/0x420 [ 494.321317][T20245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.321342][T20245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.321373][T20245] ? __pfx_ksys_write+0x10/0x10 [ 494.321402][T20245] do_syscall_64+0x14d/0xf80 [ 494.321426][T20245] ? trace_irq_disable+0x3b/0x150 [ 494.321440][T20245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.321458][T20245] ? clear_bhb_loop+0x40/0x90 [ 494.321478][T20245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.321495][T20245] RIP: 0033:0x7fa15379c819 [ 494.321513][T20245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.321528][T20245] RSP: 002b:00007fa1519f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.321547][T20245] RAX: ffffffffffffffda RBX: 00007fa153a15fa0 RCX: 00007fa15379c819 [ 494.321558][T20245] RDX: 0000000044040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 494.321569][T20245] RBP: 00007fa1519f6090 R08: 0000000000000000 R09: 0000000000000000 [ 494.321580][T20245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.321589][T20245] R13: 00007fa153a16038 R14: 00007fa153a15fa0 R15: 00007ffc35090a58 [ 494.321617][T20245] [ 494.604585][T20247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4452'. [ 494.661565][T20259] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4456'. [ 494.723918][T20261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4457'. [ 494.822998][T20267] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4461'. [ 494.850665][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4463'. [ 494.877012][T20271] xt_TPROXY: Can be used only with -p tcp or -p udp [ 494.912780][T20276] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 494.935990][T20267] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 494.967369][T20267] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4461'. [ 495.054932][T20278] syzkaller0: entered promiscuous mode [ 495.062272][T20280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.067873][T20278] syzkaller0: entered allmulticast mode [ 495.081779][T20280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.183780][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 495.902445][T20329] Cannot find add_set index 3 as target [ 496.123898][T20346] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4490'. [ 496.321285][T20361] syzkaller0: entered promiscuous mode [ 496.335373][T20361] syzkaller0: entered allmulticast mode [ 496.342438][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4496'. [ 496.463985][T20368] tipc: Enabled bearer , priority 25 [ 496.529326][T20373] Cannot find add_set index 3 as target [ 496.613961][T20382] xt_l2tp: v2 sid > 0xffff: 1114112 [ 496.641711][T20382] syzkaller0: entered promiscuous mode [ 496.658276][T20382] syzkaller0: entered allmulticast mode [ 496.914923][T20402] syzkaller0: entered promiscuous mode [ 496.935600][T20402] syzkaller0: entered allmulticast mode [ 496.975912][T20405] syzkaller0: entered promiscuous mode [ 496.983029][T20405] syzkaller0: entered allmulticast mode [ 497.214184][T20423] bond9: entered promiscuous mode [ 497.219641][T20423] bond9: entered allmulticast mode [ 497.292731][T20429] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 497.536561][T20445] syzkaller0: entered promiscuous mode [ 497.545685][T20445] syzkaller0: entered allmulticast mode [ 497.587442][ T929] tipc: Node number set to 1125740362 [ 497.810502][T20462] bond7: entered promiscuous mode [ 497.819495][T20462] bond7: entered allmulticast mode [ 498.057839][T20478] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 498.071563][T20480] 8021q: VLANs not supported on gre0 [ 498.096948][T20483] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 498.232349][T20492] syzkaller0: entered promiscuous mode [ 498.243828][T20492] syzkaller0: entered allmulticast mode [ 498.390442][T20504] syzkaller0: entered promiscuous mode [ 498.396137][T20504] syzkaller0: entered allmulticast mode [ 498.544416][T20521] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 498.912309][T20531] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 499.130583][T20542] __nla_validate_parse: 13 callbacks suppressed [ 499.130597][T20542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4557'. [ 499.864287][T20546] syzkaller0: entered promiscuous mode [ 499.870955][T20546] syzkaller0: entered allmulticast mode [ 500.174480][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4563'. [ 500.220199][T20558] bond14: entered promiscuous mode [ 500.225609][T20558] bond14: entered allmulticast mode [ 501.174011][T20569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4567'. [ 501.184212][T20570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4567'. [ 501.365794][T20504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.542396][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.551310][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.749475][T20601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4577'. [ 501.907713][T20612] IPVS: set_ctl: invalid protocol: 135 172.30.1.4:20001 [ 502.072182][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4584'. [ 502.200179][T20622] bond9: entered promiscuous mode [ 502.215170][T20622] bond9: entered allmulticast mode [ 502.217776][T20637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4586'. [ 502.249946][T20632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4586'. [ 502.262093][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4586'. [ 502.272914][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4586'. [ 502.534153][T20655] syzkaller0: entered promiscuous mode [ 502.542231][T20655] syzkaller0: entered allmulticast mode [ 503.000246][T20670] bond9: entered promiscuous mode [ 503.038404][T20670] bond9: entered allmulticast mode [ 503.100978][T20690] FAULT_INJECTION: forcing a failure. [ 503.100978][T20690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.145789][T20690] CPU: 1 UID: 0 PID: 20690 Comm: syz.2.4605 Not tainted syzkaller #0 PREEMPT(full) [ 503.145814][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 503.145826][T20690] Call Trace: [ 503.145834][T20690] [ 503.145843][T20690] dump_stack_lvl+0xe8/0x150 [ 503.145873][T20690] should_fail_ex+0x412/0x560 [ 503.145903][T20690] _copy_from_user+0x2d/0xb0 [ 503.145926][T20690] ___sys_sendmsg+0x1c6/0x360 [ 503.145957][T20690] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.146013][T20690] ? __fget_files+0x2a/0x420 [ 503.146030][T20690] ? __fget_files+0x3a0/0x420 [ 503.146057][T20690] __x64_sys_sendmsg+0x1bd/0x2a0 [ 503.146084][T20690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.146118][T20690] ? __pfx_ksys_write+0x10/0x10 [ 503.146151][T20690] do_syscall_64+0x14d/0xf80 [ 503.146175][T20690] ? trace_irq_disable+0x3b/0x150 [ 503.146192][T20690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.146210][T20690] ? clear_bhb_loop+0x40/0x90 [ 503.146233][T20690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.146252][T20690] RIP: 0033:0x7fa15379c819 [ 503.146270][T20690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.146286][T20690] RSP: 002b:00007fa1519f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.146307][T20690] RAX: ffffffffffffffda RBX: 00007fa153a15fa0 RCX: 00007fa15379c819 [ 503.146321][T20690] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 503.146333][T20690] RBP: 00007fa1519f6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.146345][T20690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.146357][T20690] R13: 00007fa153a16038 R14: 00007fa153a15fa0 R15: 00007ffc35090a58 [ 503.146387][T20690] [ 503.542253][T20706] Cannot find add_set index 3 as target [ 503.619357][T20711] ip6_vti0: entered promiscuous mode [ 503.624691][T20711] ip6_vti0: left allmulticast mode [ 503.650267][T20709] delete_channel: no stack [ 503.781276][T20727] xt_l2tp: v2 sid > 0xffff: 1114112 [ 504.029237][T20738] bond0: left allmulticast mode [ 504.034674][T20738] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 504.059907][T20738] bridge_slave_1: left allmulticast mode [ 504.075602][T20738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.111475][ T7175] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 504.125768][ T7175] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 504.149360][ T7175] bond0: now running without any active interface! [ 504.172209][T20751] netlink: 'syz.3.4629': attribute type 10 has an invalid length. [ 504.185531][T20751] __nla_validate_parse: 7 callbacks suppressed [ 504.185551][T20751] netlink: 396 bytes leftover after parsing attributes in process `syz.3.4629'. [ 504.204477][T20754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.318881][T20759] Cannot find add_set index 3 as target [ 504.505539][T20772] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4637'. [ 504.515333][T20766] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4635'. [ 504.584711][T20775] netlink: 'syz.3.4639': attribute type 10 has an invalid length. [ 504.593080][T20775] hsr0: left allmulticast mode [ 504.602436][T20775] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 504.641671][T20777] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4640'. [ 504.758446][T20785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4643'. [ 504.764910][T20784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4643'. [ 504.954769][T20799] bond0: Caught tx_queue_len zero misconfig [ 504.976751][T20802] FAULT_INJECTION: forcing a failure. [ 504.976751][T20802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.995890][T20805] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4650'. [ 505.007380][T20802] CPU: 0 UID: 0 PID: 20802 Comm: syz.4.4649 Not tainted syzkaller #0 PREEMPT(full) [ 505.007407][T20802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.007418][T20802] Call Trace: [ 505.007427][T20802] [ 505.007434][T20802] dump_stack_lvl+0xe8/0x150 [ 505.007465][T20802] should_fail_ex+0x412/0x560 [ 505.007497][T20802] _copy_to_user+0x31/0xb0 [ 505.007522][T20802] simple_read_from_buffer+0xe1/0x170 [ 505.007556][T20802] proc_fail_nth_read+0x1bb/0x230 [ 505.007583][T20802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.007609][T20802] ? rw_verify_area+0x2a6/0x4d0 [ 505.007626][T20802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.007654][T20802] vfs_read+0x20c/0xa70 [ 505.007672][T20802] ? fdget_pos+0x246/0x320 [ 505.007695][T20802] ? __pfx___mutex_lock+0x10/0x10 [ 505.007721][T20802] ? __pfx_vfs_read+0x10/0x10 [ 505.007743][T20802] ? __fget_files+0x2a/0x420 [ 505.007765][T20802] ? __fget_files+0x3a0/0x420 [ 505.007782][T20802] ? __fget_files+0x2a/0x420 [ 505.007808][T20802] ksys_read+0x150/0x270 [ 505.007831][T20802] ? __pfx_ksys_read+0x10/0x10 [ 505.007848][T20802] ? fput+0xa0/0xd0 [ 505.007884][T20802] do_syscall_64+0x14d/0xf80 [ 505.007906][T20802] ? trace_irq_disable+0x3b/0x150 [ 505.007921][T20802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.007938][T20802] ? clear_bhb_loop+0x40/0x90 [ 505.007961][T20802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.007977][T20802] RIP: 0033:0x7fa5ba15d04e [ 505.007995][T20802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 505.008010][T20802] RSP: 002b:00007fa5baf99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.008029][T20802] RAX: ffffffffffffffda RBX: 00007fa5baf9a6c0 RCX: 00007fa5ba15d04e [ 505.008041][T20802] RDX: 000000000000000f RSI: 00007fa5baf9a0a0 RDI: 0000000000000004 [ 505.008053][T20802] RBP: 00007fa5baf9a090 R08: 0000000000000000 R09: 0000000000000000 [ 505.008064][T20802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.008073][T20802] R13: 00007fa5ba416038 R14: 00007fa5ba415fa0 R15: 00007ffd901c2928 [ 505.008104][T20802] [ 505.274995][T20808] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4654'. [ 505.401971][T20815] xt_hashlimit: size too large, truncated to 1048576 [ 505.557176][T20824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4660'. [ 505.583451][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4660'. [ 505.682375][T20834] netlink: 'syz.4.4664': attribute type 10 has an invalid length. [ 505.706161][T20832] bond10: entered promiscuous mode [ 505.713985][T20832] bond10: entered allmulticast mode [ 505.753582][T20837] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 506.174606][T20869] netlink: 'syz.4.4679': attribute type 10 has an invalid length. [ 506.185730][T20870] netlink: 'syz.0.4682': attribute type 10 has an invalid length. [ 506.195659][T20870] veth0_vlan: left promiscuous mode [ 506.216928][T20870] team0: Device veth0_vlan failed to register rx_handler [ 506.287333][T20872] bond11: entered promiscuous mode [ 506.293393][T20872] bond11: entered allmulticast mode [ 506.313104][T20882] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 506.411106][T20891] syzkaller0: entered promiscuous mode [ 506.416978][T20891] syzkaller0: entered allmulticast mode [ 506.522583][T20895] syzkaller0: entered promiscuous mode [ 506.534115][T20895] syzkaller0: entered allmulticast mode [ 506.897596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.905861][ C1] lec:lec_tx_timeout: lec0 [ 506.910887][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 507.019239][T20932] syzkaller0: entered promiscuous mode [ 507.025048][T20932] syzkaller0: entered allmulticast mode [ 507.174346][T20941] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 507.187802][T20941] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 507.296895][T20952] Cannot find add_set index 3 as target [ 507.553691][T20971] syzkaller0: entered promiscuous mode [ 507.573839][T20971] syzkaller0: entered allmulticast mode [ 507.999549][T21010] Cannot find add_set index 3 as target [ 508.719177][T21061] Cannot find add_set index 3 as target [ 508.792442][T21063] bond10: entered promiscuous mode [ 508.807940][T21063] bond10: entered allmulticast mode [ 508.979838][T21078] netlink: 'syz.4.4753': attribute type 10 has an invalid length. [ 508.999525][T21078] veth0_vlan: left promiscuous mode [ 509.021715][T21078] veth0_vlan: entered promiscuous mode [ 509.031519][T21078] team0: Device veth0_vlan failed to register rx_handler [ 509.218580][T21097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.232067][T21095] __nla_validate_parse: 24 callbacks suppressed [ 509.232090][T21095] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4757'. [ 509.249433][T21095] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4757'. [ 509.395045][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4759'. [ 509.419301][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4759'. [ 509.438987][T21106] netlink: 'syz.0.4759': attribute type 15 has an invalid length. [ 509.455262][ T7160] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 509.455348][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4759'. [ 509.495172][ T7160] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 509.512002][T21116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4761'. [ 509.515845][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4759'. [ 509.535792][ T7160] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 509.548933][T21106] netlink: 'syz.0.4759': attribute type 15 has an invalid length. [ 509.565637][ T7160] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 509.657786][T21121] bond11: entered promiscuous mode [ 509.664440][T21121] bond11: entered allmulticast mode [ 509.694375][T21124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4765'. [ 509.760431][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 509.788120][T21124] openvswitch: netlink: Flow actions attr not present in new flow. [ 509.940123][T21144] netlink: 'syz.2.4771': attribute type 1 has an invalid length. [ 509.951031][T21144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4771'. [ 510.156564][T21160] syzkaller0: entered promiscuous mode [ 510.183756][T21160] syzkaller0: entered allmulticast mode [ 510.355425][T21172] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.896732][T21217] xt_hashlimit: size too large, truncated to 1048576 [ 511.405390][T21240] netlink: 'syz.3.4798': attribute type 29 has an invalid length. [ 511.478197][T21227] syzkaller0: entered promiscuous mode [ 511.937626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 511.945758][ C1] lec:lec_tx_timeout: lec0 [ 513.562687][T21254] syz_tun: left promiscuous mode [ 513.568171][T21254] bridge0: port 2(syz_tun) entered disabled state [ 513.576465][T21254] team0: left promiscuous mode [ 513.582140][T21254] team_slave_1: left promiscuous mode [ 513.587993][T21254] bridge1: left promiscuous mode [ 513.593515][T21254] bridge0: port 3(team0) entered disabled state [ 513.603986][T21254] bridge_slave_0: left promiscuous mode [ 513.611097][T21254] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.623678][T21254] bond0: (slave bridge_slave_1): Releasing backup interface [ 513.633641][T21254] bond0: (slave bond_slave_0): Releasing backup interface [ 513.644568][T21254] bond0: (slave bond_slave_1): Releasing backup interface [ 513.655763][T21254] team0: Port device team_slave_1 removed [ 513.663544][T21254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.798995][T21288] xt_hashlimit: size too large, truncated to 1048576 [ 513.941903][T21297] openvswitch: netlink: Multiple metadata blocks provided [ 514.089348][T21305] bond0: Caught tx_queue_len zero misconfig [ 514.122516][T21307] syzkaller0: entered promiscuous mode [ 514.129823][T21305] sctp: [Deprecated]: syz.4.4815 (pid 21305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.129823][T21305] Use struct sctp_sack_info instead [ 514.131165][T21307] 0: reclassify loop, rule prio 0, protocol 800 [ 514.626024][T21335] openvswitch: netlink: Multiple metadata blocks provided [ 514.675484][T21339] Cannot find add_set index 3 as target [ 514.736532][T21343] xt_hashlimit: size too large, truncated to 1048576 [ 514.922868][T21351] syzkaller0: entered promiscuous mode [ 514.933223][T21351] 0: reclassify loop, rule prio 0, protocol 800 [ 516.657978][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 516.664165][T21279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.753039][T21371] sctp: [Deprecated]: syz.4.4838 (pid 21371) Use of int in max_burst socket option. [ 516.753039][T21371] Use struct sctp_assoc_value instead [ 516.936391][T21382] syzkaller0: entered promiscuous mode [ 516.966839][T21382] 0: reclassify loop, rule prio 0, protocol 800 [ 517.250385][T21399] syzkaller0: entered promiscuous mode [ 517.270642][T21399] syzkaller0: entered allmulticast mode [ 517.346594][T21408] __nla_validate_parse: 6 callbacks suppressed [ 517.346619][T21408] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4850'. [ 517.363140][T21408] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4850'. [ 517.544182][T21419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4854'. [ 517.554191][T21419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4854'. [ 517.673136][T21429] syzkaller0: entered promiscuous mode [ 517.689196][T21429] 0: reclassify loop, rule prio 0, protocol 800 [ 517.853738][T21447] netlink: 'syz.1.4862': attribute type 21 has an invalid length. [ 517.853738][T21445] netlink: 'syz.1.4862': attribute type 21 has an invalid length. [ 517.853762][T21445] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4862'. [ 517.867078][T21446] syzkaller0: entered promiscuous mode [ 517.885372][T21446] syzkaller0: entered allmulticast mode [ 517.891457][T21447] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4862'. [ 517.893754][T21445] netlink: 'syz.1.4862': attribute type 4 has an invalid length. [ 517.911399][T21445] netlink: 'syz.1.4862': attribute type 5 has an invalid length. [ 517.924980][T21445] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4862'. [ 517.935315][T21447] netlink: 'syz.1.4862': attribute type 4 has an invalid length. [ 517.943478][T21447] netlink: 'syz.1.4862': attribute type 5 has an invalid length. [ 517.951743][T21447] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4862'. [ 518.238209][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4871'. [ 518.289123][T21472] syzkaller0: entered promiscuous mode [ 518.314843][T21472] 0: reclassify loop, rule prio 0, protocol 800 [ 518.345896][T21476] Cannot find add_set index 3 as target [ 518.430872][T21484] lo: entered allmulticast mode [ 518.436795][T21484] tunl0: entered allmulticast mode [ 518.442517][T21484] gre0: entered allmulticast mode [ 518.458141][T21484] gretap0: entered allmulticast mode [ 518.486227][T21484] erspan0: entered allmulticast mode [ 518.501620][T21484] ip_vti0: entered allmulticast mode [ 518.517292][T21484] ip6_vti0: entered allmulticast mode [ 518.527823][T21484] sit0: entered allmulticast mode [ 518.536015][T21484] ip6tnl0: entered allmulticast mode [ 518.542796][T21484] ip6gre0: entered allmulticast mode [ 518.555278][T21484] syz_tun: entered allmulticast mode [ 518.561181][T21484] ip6gretap0: entered allmulticast mode [ 518.567056][T21484] team0: entered allmulticast mode [ 518.577697][T21484] team_slave_1: entered allmulticast mode [ 518.583819][T21484] dummy0: entered allmulticast mode [ 518.591564][T21484] nlmon0: entered allmulticast mode [ 518.598303][T21484] caif0: entered allmulticast mode [ 518.604260][T21484] vxcan0: entered allmulticast mode [ 518.610425][T21484] vxcan1: entered allmulticast mode [ 518.615957][T21484] veth0: entered allmulticast mode [ 518.621674][T21484] veth1: entered allmulticast mode [ 518.627869][T21484] wg0: entered allmulticast mode [ 518.633921][T21484] wg1: entered allmulticast mode [ 518.639342][T21484] wg2: entered allmulticast mode [ 518.644639][T21484] veth0_to_bridge: entered allmulticast mode [ 518.652016][T21484] bridge_slave_0: entered allmulticast mode [ 518.658800][T21484] veth1_to_bridge: entered allmulticast mode [ 518.665092][T21484] bridge_slave_1: entered allmulticast mode [ 518.671659][T21484] veth0_to_bond: entered allmulticast mode [ 518.678229][T21484] veth1_to_bond: entered allmulticast mode [ 518.684516][T21484] veth1_to_team: entered allmulticast mode [ 518.692109][T21484] veth0_to_batadv: entered allmulticast mode [ 518.699438][T21484] batadv_slave_0: entered allmulticast mode [ 518.707198][T21484] veth1_to_batadv: entered allmulticast mode [ 518.715456][T21484] batadv_slave_1: entered allmulticast mode [ 518.725214][T21484] xfrm0: entered allmulticast mode [ 518.731412][T21484] veth0_to_hsr: entered allmulticast mode [ 518.738436][T21484] hsr_slave_0: entered allmulticast mode [ 518.744705][T21484] veth1_to_hsr: entered allmulticast mode [ 518.751212][T21484] hsr_slave_1: entered allmulticast mode [ 518.757102][T21484] veth1_virt_wifi: entered allmulticast mode [ 518.764891][T21484] veth0_virt_wifi: entered allmulticast mode [ 518.771974][T21484] virt_wifi0: entered allmulticast mode [ 518.778142][T21484] veth1_vlan: entered allmulticast mode [ 518.783881][T21484] veth0_vlan: entered allmulticast mode [ 518.790582][T21484] vlan0: entered allmulticast mode [ 518.796113][T21484] vlan1: entered allmulticast mode [ 518.802896][T21484] macvlan0: entered allmulticast mode [ 518.809629][T21484] macvlan1: entered allmulticast mode [ 518.815360][T21484] ipvlan0: entered allmulticast mode [ 518.821646][T21484] ipvlan1: entered allmulticast mode [ 518.837430][T21484] veth1_macvtap: entered allmulticast mode [ 518.846789][T21484] veth0_macvtap: entered allmulticast mode [ 518.855912][T21484] macvtap0: entered allmulticast mode [ 518.862465][T21484] macsec0: entered allmulticast mode [ 518.880908][T21484] geneve0: entered allmulticast mode [ 518.895493][T21484] geneve1: entered allmulticast mode [ 518.910690][T21484] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 518.933116][T21484] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 518.950544][T21484] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 518.973576][T21484] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 518.982062][T21484] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 518.997393][T21484] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 519.005911][T21484] @: entered allmulticast mode [ 519.011181][T21484] ip6erspan0: entered allmulticast mode [ 519.017010][T21484] veth2: entered allmulticast mode [ 519.023202][T21484] veth3: entered allmulticast mode [ 519.029219][T21484] bond1: entered allmulticast mode [ 519.034744][T21484] geneve2: entered allmulticast mode [ 519.043233][T21484] macvlan2: entered allmulticast mode [ 519.049511][T21484] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 519.057155][T21484] bond2: entered allmulticast mode [ 519.067867][T21484] vxlan0: entered allmulticast mode [ 519.073243][T21484] bond3: entered allmulticast mode [ 519.078705][T21484] geneve3: entered allmulticast mode [ 519.084213][T21484] bond4: entered allmulticast mode [ 519.089970][T21484] netdevsim0.2: entered allmulticast mode [ 519.102162][T21484] bond5: entered allmulticast mode [ 519.107624][T21484] bond6: entered allmulticast mode [ 519.113167][T21484] gretap1: entered allmulticast mode [ 519.119047][T21484] bond7: entered allmulticast mode [ 519.124672][T21484] ipvlan2: entered allmulticast mode [ 519.130306][T21484] mac80211_hwsim hwsim25 wlan3: entered allmulticast mode [ 519.138086][T21484] ip6tnl1: entered allmulticast mode [ 519.143758][T21484] bond8: entered allmulticast mode [ 519.149510][T21484] ip6tnl2: entered allmulticast mode [ 519.155703][T21484] ip6tnl3: entered allmulticast mode [ 519.167874][T21484] ipip0: entered allmulticast mode [ 519.173460][T21484] bridge0: entered allmulticast mode [ 519.180815][T21484] bridge2: entered allmulticast mode [ 519.191837][T21484] mac80211_hwsim hwsim37 wlan4: entered allmulticast mode [ 519.204892][T21484] bond9: entered allmulticast mode [ 519.218066][T21484] bond10: left promiscuous mode [ 519.234114][T21484] gre1: entered allmulticast mode [ 519.254154][T21484] bridge3: entered allmulticast mode [ 519.298308][T21484] bond11: entered allmulticast mode [ 519.304234][T21484] bridge4: entered allmulticast mode [ 519.311193][T21484] mac80211_hwsim hwsim39 wlan5: entered allmulticast mode [ 519.319722][T21484] mac80211_hwsim hwsim40 wlan6: entered allmulticast mode [ 519.327080][T21484] bridge5: entered allmulticast mode [ 519.333398][T21484] macsec1: entered allmulticast mode [ 519.342030][T21484] syztnl2: entered allmulticast mode [ 519.422353][T21506] syzkaller0: entered promiscuous mode [ 519.435031][T21506] syzkaller0: entered allmulticast mode [ 519.451897][T21534] openvswitch: netlink: Multiple metadata blocks provided [ 519.498021][T21512] syzkaller0: entered promiscuous mode [ 519.503547][T21512] syzkaller0: entered allmulticast mode [ 519.571407][T21538] Cannot find add_set index 3 as target [ 521.118104][T21508] netlink: 'syz.3.4882': attribute type 1 has an invalid length. [ 521.142867][T21508] netlink: 'syz.3.4882': attribute type 3 has an invalid length. [ 521.160418][T21508] netlink: 'syz.3.4882': attribute type 7 has an invalid length. [ 521.169277][T21508] netlink: 'syz.3.4882': attribute type 8 has an invalid length. [ 521.177031][T21508] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4882'. [ 521.186686][T21508] NCSI netlink: No device for ifindex 131092 [ 522.665767][T21574] bridge2: entered allmulticast mode [ 522.676626][T21574] bond5: entered allmulticast mode [ 522.687745][T21574] syztnl0: entered allmulticast mode [ 522.693331][T21574] bond6: entered allmulticast mode [ 522.702392][T21574] erspan2: entered allmulticast mode [ 522.708383][T21574] bond7: left promiscuous mode [ 522.713574][T21574] bond8: entered allmulticast mode [ 522.719419][T21574] bond9: left promiscuous mode [ 522.724689][T21574] bond10: left promiscuous mode [ 522.735301][T21574] bond11: left promiscuous mode [ 522.761256][T21577] __nla_validate_parse: 1 callbacks suppressed [ 522.761280][T21577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4895'. [ 523.009082][T21599] netlink: 'syz.3.4904': attribute type 3 has an invalid length. [ 523.174279][T21608] openvswitch: netlink: Multiple metadata blocks provided [ 523.385030][T21620] syzkaller0: entered promiscuous mode [ 523.398571][T21620] 0: reclassify loop, rule prio 0, protocol 800 [ 523.497455][T21627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4914'. [ 523.577218][T21624] syzkaller0: entered promiscuous mode [ 523.606554][T21624] syzkaller0: entered allmulticast mode [ 523.670991][T21636] syzkaller1: entered promiscuous mode [ 523.697329][T21636] syzkaller1: entered allmulticast mode [ 523.804718][T21648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4922'. [ 525.245446][T21651] ip6tnl1: entered allmulticast mode [ 525.581822][T21681] openvswitch: netlink: Multiple metadata blocks provided [ 525.587766][T21682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4933'. [ 525.615118][T21678] xt_hashlimit: size too large, truncated to 1048576 [ 525.659432][T21685] syzkaller0: entered promiscuous mode [ 525.683116][T21687] : renamed from bond0 [ 525.688360][T21685] 0: reclassify loop, rule prio 0, protocol 800 [ 525.878090][T21694] bond0: entered allmulticast mode [ 525.883351][T21694] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 525.901608][T21694] bridge_slave_1: entered allmulticast mode [ 525.975494][T21694] mac80211_hwsim hwsim38 wlan10: entered allmulticast mode [ 525.983433][T21694] mac80211_hwsim hwsim5 t: entered allmulticast mode [ 525.998346][T21694] bond8: entered allmulticast mode [ 526.006989][T21694] bond9: left promiscuous mode [ 526.015490][T21706] openvswitch: netlink: Flow actions attr not present in new flow. [ 526.028749][T21694] mac80211_hwsim hwsim41 wlan11: entered allmulticast mode [ 526.038233][T21694] gtp0: entered allmulticast mode [ 526.067839][T21694] mac80211_hwsim hwsim42 wlan12: entered allmulticast mode [ 526.209703][T21696] syzkaller0: entered promiscuous mode [ 526.215398][T21696] syzkaller0: entered allmulticast mode [ 526.450366][T21736] openvswitch: netlink: Flow actions attr not present in new flow. [ 526.550628][T21742] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4954'. [ 526.560842][T21742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4954'. [ 526.632779][T21746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4953'. [ 528.039725][T21757] Cannot find add_set index 3 as target [ 528.110226][T21759] syztnl1: entered allmulticast mode [ 528.124402][T21763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4960'. [ 528.188703][T21763] bond10: entered promiscuous mode [ 528.193880][T21763] bond10: entered allmulticast mode [ 528.269877][T21776] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4965'. [ 528.307774][T21776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4965'. [ 528.404858][T21784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4967'. [ 528.472028][T21789] Cannot find add_set index 3 as target [ 528.568464][T21795] syzkaller0: entered promiscuous mode [ 528.576527][T21795] syzkaller0: entered allmulticast mode [ 528.585469][T21798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4974'. [ 528.590137][T21795] netlink: 'syz.1.4975': attribute type 8 has an invalid length. [ 528.610125][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4975'. [ 528.641109][T21795] bond0: entered promiscuous mode [ 528.656748][T21795] bond_slave_0: entered promiscuous mode [ 528.663824][T21804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4977'. [ 528.670208][T21795] bond_slave_1: entered promiscuous mode [ 528.683801][T21795] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 528.692143][T21795] bridge_slave_1: entered promiscuous mode [ 528.700361][T21795] ip6gretap0: entered promiscuous mode [ 528.707066][T21795] debugfs: 'hsr0' already exists in 'hsr' [ 528.713721][T21795] Cannot create hsr debugfs directory [ 528.719538][T21795] hsr0: entered promiscuous mode [ 528.725676][T21808] netlink: 'syz.4.4979': attribute type 2 has an invalid length. [ 528.739518][T21808] netlink: 'syz.4.4979': attribute type 1 has an invalid length. [ 528.763130][T21808] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4979'. [ 528.820806][T21813] netlink: 'syz.3.4980': attribute type 3 has an invalid length. [ 528.979790][T21822] syzkaller0: entered promiscuous mode [ 528.996513][T21822] syzkaller0: entered allmulticast mode [ 529.066547][T21828] mac80211_hwsim hwsim44 wlan7: entered allmulticast mode [ 529.169663][T21838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4990'. [ 529.178921][T21840] netlink: 'syz.1.4991': attribute type 1 has an invalid length. [ 529.231349][T21837] xfrm2: entered allmulticast mode [ 529.333158][T21848] TC_ACT_REPEAT abuse ? [ 529.474536][T21862] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4999'. [ 529.513928][T21862] netlink: Conntrack attr has 3 unknown bytes [ 529.683806][T21876] netlink: 'syz.1.5005': attribute type 1 has an invalid length. [ 529.712995][T21875] xt_hashlimit: size too large, truncated to 1048576 [ 529.715574][T21866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.759544][T21876] 8021q: adding VLAN 0 to HW filter on device bond12 [ 530.130104][T21897] syzkaller0: entered promiscuous mode [ 530.135722][T21897] syzkaller0: entered allmulticast mode [ 530.159960][T21903] bond12: entered allmulticast mode [ 530.165750][T21903] veth4: entered allmulticast mode [ 530.180959][T21903] veth5: entered allmulticast mode [ 530.206213][T21903] bond13: entered allmulticast mode [ 530.225393][T21903] bond14: left promiscuous mode [ 530.234142][T21903] ip6erspan0: entered allmulticast mode [ 530.262337][T21903] vxlan1: entered allmulticast mode [ 530.278880][T21903] mac80211_hwsim hwsim43 wlan6: entered allmulticast mode [ 530.290480][T21903] mac80211_hwsim hwsim45 wlan7: entered allmulticast mode [ 530.329431][ T7168] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 530.394676][ T7168] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 530.424328][ T7168] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 530.445700][ T7168] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 530.506625][T21913] bond13: entered promiscuous mode [ 530.553710][T21913] bond13: entered allmulticast mode [ 530.558752][T21920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.752279][T21942] ip6_vti0: left promiscuous mode [ 530.802201][T21942] ip6_vti0: entered allmulticast mode [ 530.829512][T21942] hsr0: entered allmulticast mode [ 530.843270][T21942] bond8: entered allmulticast mode [ 530.849764][T21942] bond9: left promiscuous mode [ 530.855636][T21942] bond10: left promiscuous mode [ 530.862394][T21942] bond11: left promiscuous mode [ 530.867511][T21942] gretap1: entered allmulticast mode [ 530.873180][T21942] bond12: entered allmulticast mode [ 530.878683][T21942] sit2: entered allmulticast mode [ 530.883947][T21942] erspan1: entered allmulticast mode [ 530.990011][T21946] syzkaller0: entered promiscuous mode [ 530.995500][T21946] syzkaller0: entered allmulticast mode [ 531.083712][T21962] netlink: 'syz.4.5031': attribute type 58 has an invalid length. [ 532.865168][T22001] Cannot find add_set index 3 as target [ 532.986379][T22011] xt_hashlimit: size too large, truncated to 1048576 [ 533.071029][T22004] syzkaller0: entered promiscuous mode [ 533.082400][T22004] syzkaller0: entered allmulticast mode [ 533.370101][T22036] x_tables: duplicate underflow at hook 1 [ 535.058044][T22061] syzkaller0: entered promiscuous mode [ 535.063666][T22061] syzkaller0: entered allmulticast mode [ 535.128087][T22072] __nla_validate_parse: 12 callbacks suppressed [ 535.128111][T22072] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5062'. [ 535.184848][T22074] ieee802154 phy1 wpan1: encryption failed: -90 [ 535.407492][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5070'. [ 535.428807][T22096] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5070'. [ 535.445421][T22096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5070'. [ 535.565106][T22102] bond14: Unable to set peer notification delay as MII monitoring is disabled [ 535.712684][T22106] ip6t_srh: unknown srh match flags 4000 [ 535.722185][T22106] netlink: 'syz.0.5071': attribute type 4 has an invalid length. [ 535.731000][T22106] netlink: 'syz.0.5071': attribute type 1 has an invalid length. [ 535.739605][T22106] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5071'. [ 536.202462][T22102] bond14 (unregistering): Released all slaves [ 536.485330][T22124] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5076'. [ 536.554198][T22111] syzkaller0: entered promiscuous mode [ 536.564504][T22111] syzkaller0: entered allmulticast mode [ 536.648698][T22119] syzkaller0: entered promiscuous mode [ 536.654218][T22119] syzkaller0: entered allmulticast mode [ 539.649240][T22150] team0 (unregistering): Port device bridge1 removed [ 556.681712][T22159] syzkaller0: entered promiscuous mode [ 556.687494][T22159] syzkaller0: entered allmulticast mode [ 556.798850][T22177] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5091'. [ 556.808674][T22176] netlink: 'syz.4.5090': attribute type 32 has an invalid length. [ 556.816877][T22176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5090'. [ 556.991229][T22176] bond12: Setting coupled_control to off (0) [ 557.110038][T22197] syzkaller0: entered promiscuous mode [ 557.116980][T22197] syzkaller0: entered allmulticast mode [ 557.128351][T22188] syzkaller0: entered promiscuous mode [ 557.134150][T22188] syzkaller0: entered allmulticast mode [ 559.166909][T22236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5106'. [ 559.200071][T22236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5106'. [ 559.213345][T22241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5108'. [ 559.231691][T22236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5106'. [ 559.258329][T22236] netlink: 'syz.0.5106': attribute type 1 has an invalid length. [ 559.299068][T22236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5106'. [ 559.531656][T22254] syzkaller0: entered promiscuous mode [ 559.552462][T22264] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5118'. [ 559.561832][T22254] syzkaller0: entered allmulticast mode [ 559.593944][T22263] syzkaller0: entered promiscuous mode [ 559.608523][T22263] syzkaller0: entered allmulticast mode [ 560.790470][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5124'. [ 561.723497][T22319] xt_hashlimit: size too large, truncated to 1048576 [ 561.769130][T22325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.172065][T22345] syzkaller0: entered promiscuous mode [ 562.186491][T22345] syzkaller0: entered allmulticast mode [ 562.204247][T22353] syzkaller0: entered promiscuous mode [ 562.211042][T22353] syzkaller0: entered allmulticast mode [ 562.984601][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.993673][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 564.413048][T22406] tipc: Enabling of bearer rejected, failed to enable media [ 564.432500][T22410] IPVS: ip_vs_add_dest(): server weight less than zero [ 564.490696][T22413] tipc: Enabling of bearer rejected, failed to enable media [ 564.630280][T22413] syzkaller0: entered promiscuous mode [ 564.635804][T22413] syzkaller0: entered allmulticast mode [ 564.655994][T22424] x_tables: duplicate underflow at hook 1 [ 566.388182][T22439] veth6: entered allmulticast mode [ 566.393675][T22439] veth7: entered allmulticast mode [ 566.408451][T22439] bond12: entered allmulticast mode [ 566.541161][T22461] netlink: 'syz.2.5168': attribute type 10 has an invalid length. [ 566.571314][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5168'. [ 566.645933][T22473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5170'. [ 566.680855][T22473] bond13: entered promiscuous mode [ 566.686017][T22473] bond13: entered allmulticast mode [ 566.817064][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5176'. [ 566.970825][T22495] tipc: Enabling of bearer rejected, failed to enable media [ 567.025386][T22501] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5180'. [ 567.090564][T22495] syzkaller0: entered promiscuous mode [ 567.096175][T22495] syzkaller0: entered allmulticast mode [ 567.160898][T22512] netlink: 'syz.2.5184': attribute type 2 has an invalid length. [ 567.319823][T22521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.331512][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5188'. [ 568.017926][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.026197][ C1] lec:lec_tx_timeout: lec0 [ 568.242255][T22529] Cannot find add_set index 3 as target [ 568.305718][T22531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5191'. [ 569.059447][T22540] bond10: left promiscuous mode [ 569.064571][T22540] hsr0: left promiscuous mode [ 569.074250][T22540] hsr0: entered allmulticast mode [ 569.081771][T22540] bond11: entered allmulticast mode [ 569.088580][T22540] bond12: entered allmulticast mode [ 569.101132][T22540] bond13: left promiscuous mode [ 569.106249][T22540] veth6: entered allmulticast mode [ 569.113778][T22540] veth7: entered allmulticast mode [ 569.133538][T22546] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5197'. [ 569.239319][T22553] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5200'. [ 569.250972][T22553] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5200'. [ 569.330367][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5202'. [ 569.496235][T22574] tipc: Enabling of bearer rejected, failed to enable media [ 569.552466][T22574] syzkaller0: entered promiscuous mode [ 569.560445][T22574] syzkaller0: entered allmulticast mode [ 569.602864][T22587] FAULT_INJECTION: forcing a failure. [ 569.602864][T22587] name failslab, interval 1, probability 0, space 0, times 0 [ 569.616441][T22587] CPU: 0 UID: 0 PID: 22587 Comm: syz.4.5210 Not tainted syzkaller #0 PREEMPT(full) [ 569.616467][T22587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 569.616479][T22587] Call Trace: [ 569.616486][T22587] [ 569.616494][T22587] dump_stack_lvl+0xe8/0x150 [ 569.616525][T22587] should_fail_ex+0x412/0x560 [ 569.616556][T22587] should_failslab+0xa8/0x100 [ 569.616582][T22587] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 569.616604][T22587] ? __alloc_skb+0x186/0x7d0 [ 569.616625][T22587] ? __alloc_skb+0x1d0/0x7d0 [ 569.616655][T22587] ? __local_bh_enable_ip+0xd0/0x130 [ 569.616680][T22587] __alloc_skb+0x1d0/0x7d0 [ 569.616698][T22587] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 569.616720][T22587] netlink_sendmsg+0x5d4/0xb40 [ 569.616746][T22587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.616766][T22587] ? aa_sock_msg_perm+0xf1/0x1b0 [ 569.616791][T22587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.616811][T22587] ____sys_sendmsg+0x972/0x9f0 [ 569.616838][T22587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.616866][T22587] ? import_iovec+0x73/0xa0 [ 569.616887][T22587] ___sys_sendmsg+0x2a5/0x360 [ 569.616914][T22587] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.616962][T22587] ? __fget_files+0x2a/0x420 [ 569.616977][T22587] ? __fget_files+0x3a0/0x420 [ 569.617000][T22587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 569.617028][T22587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.617056][T22587] ? rcu_is_watching+0x15/0xb0 [ 569.617089][T22587] do_syscall_64+0x14d/0xf80 [ 569.617110][T22587] ? trace_irq_disable+0x3b/0x150 [ 569.617124][T22587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.617140][T22587] ? clear_bhb_loop+0x40/0x90 [ 569.617160][T22587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.617177][T22587] RIP: 0033:0x7fa5ba19c819 [ 569.617194][T22587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.617209][T22587] RSP: 002b:00007fa5baf9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.617227][T22587] RAX: ffffffffffffffda RBX: 00007fa5ba415fa0 RCX: 00007fa5ba19c819 [ 569.617239][T22587] RDX: 00000000000440c0 RSI: 0000200000000900 RDI: 0000000000000006 [ 569.617249][T22587] RBP: 00007fa5baf9a090 R08: 0000000000000000 R09: 0000000000000000 [ 569.617259][T22587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.617269][T22587] R13: 00007fa5ba416038 R14: 00007fa5ba415fa0 R15: 00007ffd901c2928 [ 569.617296][T22587] [ 570.272861][T22607] netlink: 'syz.0.5216': attribute type 20 has an invalid length. [ 570.281140][T22607] IPv6: NLM_F_CREATE should be specified when creating new route [ 570.295094][T22609] netlink: 'syz.0.5216': attribute type 20 has an invalid length. [ 570.518421][T11215] lec:lec_start_xmit: lec0:No lecd attached [ 571.570897][T22613] vcan0: entered promiscuous mode [ 571.575992][T22613] vcan0: entered allmulticast mode [ 571.616123][T22616] __nla_validate_parse: 3 callbacks suppressed [ 571.616147][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5219'. [ 571.791591][T22631] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5226'. [ 571.822504][T22631] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5226'. [ 571.854552][T22636] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5229'. [ 572.119035][T22654] FAULT_INJECTION: forcing a failure. [ 572.119035][T22654] name failslab, interval 1, probability 0, space 0, times 0 [ 572.173061][T22654] CPU: 1 UID: 0 PID: 22654 Comm: syz.2.5236 Not tainted syzkaller #0 PREEMPT(full) [ 572.173088][T22654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.173099][T22654] Call Trace: [ 572.173106][T22654] [ 572.173115][T22654] dump_stack_lvl+0xe8/0x150 [ 572.173144][T22654] should_fail_ex+0x412/0x560 [ 572.173175][T22654] should_failslab+0xa8/0x100 [ 572.173199][T22654] __kmalloc_noprof+0xe8/0x760 [ 572.173219][T22654] ? rcu_is_watching+0x15/0xb0 [ 572.173242][T22654] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 572.173273][T22654] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 572.173306][T22654] genl_family_rcv_msg_doit+0xd9/0x330 [ 572.173331][T22654] ? __asan_memcpy+0x40/0x70 [ 572.173354][T22654] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.173387][T22654] ? apparmor_capable+0x126/0x170 [ 572.173412][T22654] ? bpf_lsm_capable+0x9/0x20 [ 572.173435][T22654] ? security_capable+0x7e/0x2c0 [ 572.173467][T22654] genl_rcv_msg+0x61c/0x7a0 [ 572.173499][T22654] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.173522][T22654] ? __pfx_nfc_genl_enable_se+0x10/0x10 [ 572.173543][T22654] ? __lock_acquire+0x6b5/0x2cf0 [ 572.173579][T22654] netlink_rcv_skb+0x232/0x4b0 [ 572.173601][T22654] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.173627][T22654] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.173667][T22654] ? down_read+0x272/0x2e0 [ 572.173683][T22654] ? genl_rcv+0xd/0x40 [ 572.173715][T22654] genl_rcv+0x28/0x40 [ 572.173737][T22654] netlink_unicast+0x80f/0x9b0 [ 572.173766][T22654] ? __pfx_netlink_unicast+0x10/0x10 [ 572.173786][T22654] ? netlink_sendmsg+0x650/0xb40 [ 572.173805][T22654] ? skb_put+0x11b/0x210 [ 572.173832][T22654] netlink_sendmsg+0x813/0xb40 [ 572.173859][T22654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.173881][T22654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 572.173909][T22654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.173934][T22654] ____sys_sendmsg+0x972/0x9f0 [ 572.173968][T22654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.174002][T22654] ? import_iovec+0x73/0xa0 [ 572.174028][T22654] ___sys_sendmsg+0x2a5/0x360 [ 572.174058][T22654] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.174120][T22654] ? __fget_files+0x2a/0x420 [ 572.174138][T22654] ? __fget_files+0x3a0/0x420 [ 572.174166][T22654] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.174192][T22654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.174223][T22654] ? __pfx_ksys_write+0x10/0x10 [ 572.174253][T22654] do_syscall_64+0x14d/0xf80 [ 572.174276][T22654] ? trace_irq_disable+0x3b/0x150 [ 572.174292][T22654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.174310][T22654] ? clear_bhb_loop+0x40/0x90 [ 572.174332][T22654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.174350][T22654] RIP: 0033:0x7fa15379c819 [ 572.174367][T22654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.174382][T22654] RSP: 002b:00007fa1519f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.174401][T22654] RAX: ffffffffffffffda RBX: 00007fa153a15fa0 RCX: 00007fa15379c819 [ 572.174414][T22654] RDX: 00000000000440c0 RSI: 0000200000000900 RDI: 0000000000000006 [ 572.174425][T22654] RBP: 00007fa1519f6090 R08: 0000000000000000 R09: 0000000000000000 [ 572.174437][T22654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.174447][T22654] R13: 00007fa153a16038 R14: 00007fa153a15fa0 R15: 00007ffc35090a58 [ 572.174477][T22654] [ 572.575761][T22663] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 572.638366][T22663] bond13: (slave lo): Enslaving as an active interface with an up link [ 572.647333][T22663] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 572.650278][T22674] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5242'. [ 572.664043][T22668] gretap2: entered allmulticast mode [ 572.675325][T22675] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 572.677725][T22668] bond13: left promiscuous mode [ 572.693571][T22668] xfrm3: entered allmulticast mode [ 572.727692][T22674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5242'. [ 573.045991][T22697] lo: left allmulticast mode [ 573.048758][T22699] ip6t_srh: unknown srh match flags 4000 [ 573.057453][T22696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5249'. [ 573.075258][T22697] tunl0: left allmulticast mode [ 573.083887][T22700] FAULT_INJECTION: forcing a failure. [ 573.083887][T22700] name failslab, interval 1, probability 0, space 0, times 0 [ 573.090234][T22699] netlink: 'syz.0.5247': attribute type 4 has an invalid length. [ 573.097268][T22697] gre0: left allmulticast mode [ 573.110189][T22700] CPU: 0 UID: 0 PID: 22700 Comm: syz.3.5251 Not tainted syzkaller #0 PREEMPT(full) [ 573.110216][T22700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 573.110232][T22700] Call Trace: [ 573.110242][T22700] [ 573.110252][T22700] dump_stack_lvl+0xe8/0x150 [ 573.110283][T22700] should_fail_ex+0x412/0x560 [ 573.110315][T22700] should_failslab+0xa8/0x100 [ 573.110343][T22700] __kmalloc_noprof+0xe8/0x760 [ 573.110365][T22700] ? rcu_is_watching+0x15/0xb0 [ 573.110388][T22700] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 573.110421][T22700] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 573.110455][T22700] genl_family_rcv_msg_doit+0xd9/0x330 [ 573.110481][T22700] ? __asan_memcpy+0x40/0x70 [ 573.110504][T22700] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 573.110537][T22700] ? apparmor_capable+0x126/0x170 [ 573.110562][T22700] ? bpf_lsm_capable+0x9/0x20 [ 573.110585][T22700] ? security_capable+0x7e/0x2c0 [ 573.110619][T22700] genl_rcv_msg+0x61c/0x7a0 [ 573.110657][T22700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.110681][T22700] ? __pfx_nfc_genl_enable_se+0x10/0x10 [ 573.110701][T22700] ? __lock_acquire+0x6b5/0x2cf0 [ 573.110737][T22700] netlink_rcv_skb+0x232/0x4b0 [ 573.110759][T22700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.110785][T22700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.110825][T22700] ? down_read+0x272/0x2e0 [ 573.110841][T22700] ? genl_rcv+0xd/0x40 [ 573.110866][T22700] genl_rcv+0x28/0x40 [ 573.110889][T22700] netlink_unicast+0x80f/0x9b0 [ 573.110917][T22700] ? __pfx_netlink_unicast+0x10/0x10 [ 573.110938][T22700] ? netlink_sendmsg+0x650/0xb40 [ 573.110958][T22700] ? skb_put+0x11b/0x210 [ 573.110984][T22700] netlink_sendmsg+0x813/0xb40 [ 573.111016][T22700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.111041][T22700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 573.111069][T22700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.111094][T22700] ____sys_sendmsg+0x972/0x9f0 [ 573.111128][T22700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.111162][T22700] ? import_iovec+0x73/0xa0 [ 573.111188][T22700] ___sys_sendmsg+0x2a5/0x360 [ 573.111218][T22700] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.111280][T22700] ? __fget_files+0x2a/0x420 [ 573.111297][T22700] ? __fget_files+0x3a0/0x420 [ 573.111326][T22700] __x64_sys_sendmsg+0x1bd/0x2a0 [ 573.111353][T22700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.111387][T22700] ? __pfx_ksys_write+0x10/0x10 [ 573.111421][T22700] do_syscall_64+0x14d/0xf80 [ 573.111445][T22700] ? trace_irq_disable+0x3b/0x150 [ 573.111462][T22700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.111481][T22700] ? clear_bhb_loop+0x40/0x90 [ 573.111504][T22700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.111523][T22700] RIP: 0033:0x7f035899c819 [ 573.111542][T22700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.111558][T22700] RSP: 002b:00007f03598f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.111578][T22700] RAX: ffffffffffffffda RBX: 00007f0358c15fa0 RCX: 00007f035899c819 [ 573.111591][T22700] RDX: 00000000000440c0 RSI: 0000200000000900 RDI: 0000000000000006 [ 573.111604][T22700] RBP: 00007f03598f0090 R08: 0000000000000000 R09: 0000000000000000 [ 573.111616][T22700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.111633][T22700] R13: 00007f0358c16038 R14: 00007f0358c15fa0 R15: 00007fff428300b8 [ 573.111665][T22700] [ 573.115312][T22699] netlink: 'syz.0.5247': attribute type 1 has an invalid length. [ 573.133566][T22697] gretap0: left allmulticast mode [ 573.228468][T22699] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5247'. [ 573.295752][T22697] erspan0: left allmulticast mode [ 573.494640][T22697] ip_vti0: left allmulticast mode [ 573.524093][T22697] ip6_vti0: left allmulticast mode [ 573.540817][T22697] sit0: left allmulticast mode [ 573.545912][T22697] ip6tnl0: left allmulticast mode [ 573.552703][T22697] ip6gre0: left allmulticast mode [ 573.568138][T22697] syz_tun: left allmulticast mode [ 573.573416][T22697] ip6gretap0: left allmulticast mode [ 573.579721][T22697] team0: left allmulticast mode [ 573.584928][T22697] dummy0: left allmulticast mode [ 573.591576][T22697] nlmon0: left allmulticast mode [ 573.621032][T22697] caif0: left allmulticast mode [ 573.626408][T22697] vxcan0: left allmulticast mode [ 573.639491][T22697] vxcan1: left allmulticast mode [ 573.649574][T22697] veth0: left allmulticast mode [ 573.665185][T22697] veth1: left allmulticast mode [ 573.670574][T22697] wg0: left allmulticast mode [ 573.680711][T22697] wg1: left allmulticast mode [ 573.688333][T22697] wg2: left allmulticast mode [ 573.694431][T22720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5254'. [ 573.697825][T22697] veth0_to_bridge: left allmulticast mode [ 573.711077][T22697] bridge_slave_0: left allmulticast mode [ 573.717786][T22697] veth1_to_bridge: left allmulticast mode [ 573.724366][T22697] bridge_slave_1: left allmulticast mode [ 573.730847][T22697] veth0_to_bond: left allmulticast mode [ 573.736897][T22697] veth1_to_bond: left allmulticast mode [ 573.752583][T22697] veth1_to_team: left allmulticast mode [ 573.762942][T22697] team_slave_1: left allmulticast mode [ 573.769062][T22697] veth0_to_batadv: left allmulticast mode [ 573.775054][T22697] batadv_slave_0: left allmulticast mode [ 573.781175][T22697] veth1_to_batadv: left allmulticast mode [ 573.787297][T22697] xfrm0: left allmulticast mode [ 573.792787][T22697] veth0_to_hsr: left allmulticast mode [ 573.799493][T22697] hsr_slave_0: left allmulticast mode [ 573.805008][T22697] veth1_to_hsr: left allmulticast mode [ 573.810912][T22697] hsr_slave_1: left allmulticast mode [ 573.816517][T22697] veth1_virt_wifi: left allmulticast mode [ 573.823313][T22697] veth0_virt_wifi: left allmulticast mode [ 573.829761][T22697] virt_wifi0: left allmulticast mode [ 573.835217][T22697] veth1_vlan: left allmulticast mode [ 573.840972][T22697] vlan0: left allmulticast mode [ 573.846145][T22697] vlan1: left allmulticast mode [ 573.851470][T22697] macvlan0: left allmulticast mode [ 573.856883][T22697] macvlan1: left allmulticast mode [ 573.862473][T22697] ipvlan0: left allmulticast mode [ 573.868055][T22697] ipvlan1: left allmulticast mode [ 573.873116][T22697] veth0_vlan: left allmulticast mode [ 573.878732][T22697] veth1_macvtap: left allmulticast mode [ 573.884671][T22697] veth0_macvtap: left allmulticast mode [ 573.890773][T22697] macvtap0: left allmulticast mode [ 573.896017][T22697] macsec0: left allmulticast mode [ 573.901363][T22697] geneve0: left allmulticast mode [ 573.906632][T22697] geneve1: left allmulticast mode [ 573.912372][T22697] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 573.919898][T22697] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 573.927431][T22697] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 573.935289][T22697] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 573.942366][T22697] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 573.949659][T22697] @: left allmulticast mode [ 573.954442][T22697] ip6erspan0: left allmulticast mode [ 573.960026][T22697] veth2: left allmulticast mode [ 573.965098][T22697] veth3: left allmulticast mode [ 573.970224][T22697] bond1: left allmulticast mode [ 573.975439][T22697] geneve2: left allmulticast mode [ 573.981067][T22697] macvlan2: left allmulticast mode [ 573.986464][T22697] mac80211_hwsim hwsim14 wlan2: left allmulticast mode [ 573.993566][T22697] bond2: left allmulticast mode [ 573.998589][T22697] vxlan0: left allmulticast mode [ 574.003848][T22697] bond3: left allmulticast mode [ 574.009229][T22697] geneve3: left allmulticast mode [ 574.014495][T22697] bond4: left allmulticast mode [ 574.019601][T22697] netdevsim0.2: left allmulticast mode [ 574.025360][T22697] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 574.032894][T22697] bond5: left allmulticast mode [ 574.038209][T22697] bridge1: left allmulticast mode [ 574.043461][T22697] bond6: left allmulticast mode [ 574.048730][T22697] gretap1: left allmulticast mode [ 574.054300][T22697] bond7: left allmulticast mode [ 574.059387][T22697] ipvlan2: left allmulticast mode [ 574.064519][T22697] batadv_slave_1: left allmulticast mode [ 574.070735][T22697] mac80211_hwsim hwsim25 wlan3: left allmulticast mode [ 574.077892][T22697] ip6tnl1: left allmulticast mode [ 574.083046][T22697] bond8: left allmulticast mode [ 574.088196][T22697] ip6tnl2: left allmulticast mode [ 574.093415][T22697] ip6tnl3: left allmulticast mode [ 574.099134][T22697] ipip0: left allmulticast mode [ 574.104185][T22697] bridge0: left allmulticast mode [ 574.109493][T22697] bridge2: left allmulticast mode [ 574.114822][T22697] mac80211_hwsim hwsim37 wlan4: left allmulticast mode [ 574.122027][T22697] bond9: left allmulticast mode [ 574.126994][T22697] bond10: left allmulticast mode [ 574.132409][T22697] ip6tnl4: left allmulticast mode [ 574.137525][T22697] gre1: left allmulticast mode [ 574.142721][T22697] bridge3: left allmulticast mode [ 574.148090][T22697] bond11: left allmulticast mode [ 574.153501][T22697] bridge4: left allmulticast mode [ 574.159050][T22697] mac80211_hwsim hwsim39 wlan5: left allmulticast mode [ 574.166275][T22697] mac80211_hwsim hwsim40 wlan6: left allmulticast mode [ 574.173761][T22697] bridge5: left allmulticast mode [ 574.179250][T22697] macsec1: left allmulticast mode [ 574.184441][T22697] syztnl2: left allmulticast mode [ 574.189904][T22697] syztnl1: left allmulticast mode [ 574.195247][T22697] mac80211_hwsim hwsim44 wlan7: left allmulticast mode [ 574.251693][T22722] bond14: entered promiscuous mode [ 574.256883][T22722] bond14: entered allmulticast mode [ 574.370039][T22725] ip6gretap1: entered allmulticast mode [ 574.413590][T22735] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5258'. [ 574.415024][T22739] netlink: 'syz.2.5260': attribute type 4 has an invalid length. [ 574.619998][T22746] netlink: 'syz.4.5262': attribute type 6 has an invalid length. [ 574.667187][T22746] netlink: 'syz.4.5262': attribute type 5 has an invalid length. [ 574.787926][T22757] ip6t_srh: unknown srh match flags 4000 [ 574.809192][T22756] netlink: 'syz.0.5265': attribute type 4 has an invalid length. [ 574.823147][T22756] netlink: 'syz.0.5265': attribute type 1 has an invalid length. [ 575.242002][T22790] netlink: 'syz.1.5275': attribute type 83 has an invalid length. [ 575.365371][T22786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.937608][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 575.945675][ C1] lec:lec_tx_timeout: lec0 [ 576.172904][T22872] FAULT_INJECTION: forcing a failure. [ 576.172904][T22872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.196162][T22872] CPU: 1 UID: 0 PID: 22872 Comm: syz.4.5300 Not tainted syzkaller #0 PREEMPT(full) [ 576.196189][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 576.196201][T22872] Call Trace: [ 576.196208][T22872] [ 576.196215][T22872] dump_stack_lvl+0xe8/0x150 [ 576.196245][T22872] should_fail_ex+0x412/0x560 [ 576.196278][T22872] _copy_from_user+0x2d/0xb0 [ 576.196301][T22872] kstrtouint_from_user+0xd6/0x180 [ 576.196321][T22872] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 576.196354][T22872] proc_fail_nth_write+0x8e/0x210 [ 576.196381][T22872] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 576.196411][T22872] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 576.196439][T22872] vfs_write+0x29a/0xb90 [ 576.196469][T22872] ? __pfx_vfs_write+0x10/0x10 [ 576.196491][T22872] ? __fget_files+0x2a/0x420 [ 576.196514][T22872] ? __fget_files+0x3a0/0x420 [ 576.196528][T22872] ? __fget_files+0x2a/0x420 [ 576.196554][T22872] ksys_write+0x150/0x270 [ 576.196578][T22872] ? __pfx_ksys_write+0x10/0x10 [ 576.196611][T22872] do_syscall_64+0x14d/0xf80 [ 576.196635][T22872] ? trace_irq_disable+0x3b/0x150 [ 576.196653][T22872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.196672][T22872] ? clear_bhb_loop+0x40/0x90 [ 576.196695][T22872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.196714][T22872] RIP: 0033:0x7fa5ba15d04e [ 576.196732][T22872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 576.196748][T22872] RSP: 002b:00007fa5baf78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.196767][T22872] RAX: ffffffffffffffda RBX: 00007fa5baf796c0 RCX: 00007fa5ba15d04e [ 576.196778][T22872] RDX: 0000000000000001 RSI: 00007fa5baf790a0 RDI: 0000000000000005 [ 576.196789][T22872] RBP: 00007fa5baf79090 R08: 0000000000000000 R09: 0000000000000000 [ 576.196800][T22872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.196811][T22872] R13: 00007fa5ba416128 R14: 00007fa5ba416090 R15: 00007ffd901c2928 [ 576.196840][T22872] [ 576.503928][T22883] netlink: 'syz.0.5303': attribute type 2 has an invalid length. [ 579.045576][T22854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.182504][T22890] __nla_validate_parse: 14 callbacks suppressed [ 579.182523][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 579.200561][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 579.239634][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 579.289062][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 579.313744][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 579.326140][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5310'. [ 579.329867][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 579.366616][T22902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5311'. [ 579.389447][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5304'. [ 579.427433][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5310'. [ 579.444200][T22903] bond12: entered promiscuous mode [ 579.453886][T22903] 8021q: adding VLAN 0 to HW filter on device bond12 [ 579.498559][T22910] syzkaller0: entered promiscuous mode [ 579.504421][T22910] syzkaller0: entered allmulticast mode [ 579.760187][T22929] FAULT_INJECTION: forcing a failure. [ 579.760187][T22929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.832377][T22929] CPU: 1 UID: 0 PID: 22929 Comm: syz.2.5322 Not tainted syzkaller #0 PREEMPT(full) [ 579.832403][T22929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.832415][T22929] Call Trace: [ 579.832424][T22929] [ 579.832432][T22929] dump_stack_lvl+0xe8/0x150 [ 579.832463][T22929] should_fail_ex+0x412/0x560 [ 579.832495][T22929] _copy_from_user+0x2d/0xb0 [ 579.832519][T22929] ___sys_sendmsg+0x1c6/0x360 [ 579.832548][T22929] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.832603][T22929] ? __fget_files+0x2a/0x420 [ 579.832620][T22929] ? __fget_files+0x3a0/0x420 [ 579.832647][T22929] __x64_sys_sendmsg+0x1bd/0x2a0 [ 579.832673][T22929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.832706][T22929] ? __pfx_ksys_write+0x10/0x10 [ 579.832737][T22929] do_syscall_64+0x14d/0xf80 [ 579.832760][T22929] ? trace_irq_disable+0x3b/0x150 [ 579.832777][T22929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.832794][T22929] ? clear_bhb_loop+0x40/0x90 [ 579.832816][T22929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.832833][T22929] RIP: 0033:0x7fa15379c819 [ 579.832851][T22929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.832867][T22929] RSP: 002b:00007fa1519f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.832887][T22929] RAX: ffffffffffffffda RBX: 00007fa153a15fa0 RCX: 00007fa15379c819 [ 579.832901][T22929] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 579.832912][T22929] RBP: 00007fa1519f6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.832922][T22929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.832931][T22929] R13: 00007fa153a16038 R14: 00007fa153a15fa0 R15: 00007ffc35090a58 [ 579.832960][T22929] [ 580.088137][T22937] syzkaller0: entered promiscuous mode [ 580.093919][T22937] syzkaller0: entered allmulticast mode [ 580.522242][T22944] can: request_module (can-proto-3) failed. [ 581.911898][T22963] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 581.913003][T22965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.064252][T22981] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20000 [ 582.375530][T22999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.394035][T23006] macvtap1: entered allmulticast mode [ 582.969393][T23048] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 583.040465][T23052] netlink: 'syz.4.5361': attribute type 7 has an invalid length. [ 583.218848][T23067] syzkaller0: entered promiscuous mode [ 583.224638][T23067] syzkaller0: entered allmulticast mode [ 583.298499][T23074] syzkaller0: entered promiscuous mode [ 583.306590][T23074] 0: reclassify loop, rule prio 0, protocol 800 [ 583.342844][T23076] netlink: 'syz.4.5370': attribute type 30 has an invalid length. [ 583.532402][T23089] syzkaller0: entered promiscuous mode [ 583.540277][T23089] syzkaller0: entered allmulticast mode [ 583.597773][T23095] tipc: Cannot configure node identity twice [ 583.893864][T23116] netlink: 'syz.4.5383': attribute type 5 has an invalid length. [ 584.224931][T23145] __nla_validate_parse: 61 callbacks suppressed [ 584.224954][T23145] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5393'. [ 584.265951][T23145] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5393'. [ 584.493236][T23164] netlink: 'syz.3.5400': attribute type 21 has an invalid length. [ 584.501802][T23164] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5400'. [ 584.514895][T23164] netlink: 'syz.3.5400': attribute type 4 has an invalid length. [ 584.548353][T23164] netlink: 'syz.3.5400': attribute type 5 has an invalid length. [ 584.556149][T23164] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5400'. [ 584.570492][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5400'. [ 584.653690][T23178] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5402'. [ 584.810839][T23183] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5410'. [ 584.863192][T23183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5410'. [ 585.040220][T23204] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5416'. [ 585.153758][T23197] syzkaller0: entered promiscuous mode [ 585.175810][T23197] syzkaller0: entered allmulticast mode [ 585.233690][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5418'. [ 586.911703][T23226] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 587.051116][T23232] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 588.269292][T23276] netlink: 'syz.1.5438': attribute type 1 has an invalid length. [ 588.311649][T23277] bond14: (slave geneve4): making interface the new active one [ 588.320128][T23277] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 588.329527][ T7168] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 588.338767][ T7168] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 588.347080][ T7168] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 588.356016][ T7168] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 590.116221][T23243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.126359][T23257] netlink: 'syz.4.5434': attribute type 1 has an invalid length. [ 590.138945][T23257] __nla_validate_parse: 4 callbacks suppressed [ 590.138963][T23257] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5434'. [ 590.155400][T23257] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5434'. [ 590.166380][T23257] netlink: 'syz.4.5434': attribute type 1 has an invalid length. [ 590.174656][T23257] netlink: 634 bytes leftover after parsing attributes in process `syz.4.5434'. [ 590.433730][T23306] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 590.632212][T23320] syzkaller1: entered promiscuous mode [ 590.671655][T23320] syzkaller1: entered allmulticast mode [ 590.684287][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5454'. [ 590.935763][T23335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5457'. [ 591.234565][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5465'. [ 591.438607][T23356] netlink: 'syz.1.5467': attribute type 10 has an invalid length. [ 591.592762][T23366] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5471'. [ 591.628965][T23366] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5471'. [ 591.763098][T23377] syzkaller0: entered promiscuous mode [ 591.782365][T23377] syzkaller0: entered allmulticast mode [ 592.064873][T23391] veth0: entered promiscuous mode [ 592.072551][T23384] veth0: left promiscuous mode [ 592.348781][T23395] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5483'. [ 592.440608][T23394] lec:lec_atm_close: lec0: Shut down! [ 592.619011][T23423] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5488'. [ 593.047323][T23450] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 593.293907][T23470] netlink: 'syz.2.5502': attribute type 1 has an invalid length. [ 593.315560][T23470] netlink: 'syz.2.5502': attribute type 2 has an invalid length. [ 593.736155][T23505] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 593.758612][T23505] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 593.826882][T23510] netlink: 'syz.0.5517': attribute type 1 has an invalid length. [ 593.850699][T23510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.065185][T23526] Cannot find set identified by id 1 to match [ 594.115109][T23538] netlink: 'syz.4.5524': attribute type 1 has an invalid length. [ 594.342994][T23543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.357171][T23556] FAULT_INJECTION: forcing a failure. [ 594.357171][T23556] name failslab, interval 1, probability 0, space 0, times 0 [ 594.389966][T23556] CPU: 1 UID: 0 PID: 23556 Comm: syz.4.5529 Not tainted syzkaller #0 PREEMPT(full) [ 594.389994][T23556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 594.390006][T23556] Call Trace: [ 594.390014][T23556] [ 594.390022][T23556] dump_stack_lvl+0xe8/0x150 [ 594.390053][T23556] should_fail_ex+0x412/0x560 [ 594.390085][T23556] should_failslab+0xa8/0x100 [ 594.390111][T23556] __kmalloc_noprof+0xe8/0x760 [ 594.390132][T23556] ? iovec_from_user+0x87/0x250 [ 594.390151][T23556] ? __lock_acquire+0x6b5/0x2cf0 [ 594.390177][T23556] iovec_from_user+0x87/0x250 [ 594.390202][T23556] __import_iovec+0x163/0x7e0 [ 594.390233][T23556] import_iovec+0x73/0xa0 [ 594.390258][T23556] ___sys_recvmsg+0x4bd/0x590 [ 594.390287][T23556] ? __pfx____sys_recvmsg+0x10/0x10 [ 594.390334][T23556] ? __fget_files+0x3a0/0x420 [ 594.390362][T23556] do_recvmmsg+0x334/0x800 [ 594.390391][T23556] ? __pfx_do_recvmmsg+0x10/0x10 [ 594.390423][T23556] ? _copy_from_user+0x94/0xb0 [ 594.390459][T23556] __x64_sys_recvmmsg+0x1b7/0x250 [ 594.390487][T23556] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 594.390522][T23556] do_syscall_64+0x14d/0xf80 [ 594.390544][T23556] ? trace_irq_disable+0x3b/0x150 [ 594.390558][T23556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.390575][T23556] ? clear_bhb_loop+0x40/0x90 [ 594.390596][T23556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.390613][T23556] RIP: 0033:0x7fa5ba19c819 [ 594.390630][T23556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.390644][T23556] RSP: 002b:00007fa5baf9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 594.390662][T23556] RAX: ffffffffffffffda RBX: 00007fa5ba415fa0 RCX: 00007fa5ba19c819 [ 594.390676][T23556] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 594.390687][T23556] RBP: 00007fa5baf9a090 R08: 0000200000003700 R09: 0000000000000000 [ 594.390699][T23556] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 594.390710][T23556] R13: 00007fa5ba416038 R14: 00007fa5ba415fa0 R15: 00007ffd901c2928 [ 594.390737][T23556] [ 594.959169][T23577] netlink: 'syz.4.5538': attribute type 1 has an invalid length. [ 595.010157][T23577] bond17: entered promiscuous mode [ 595.016479][T23577] 8021q: adding VLAN 0 to HW filter on device bond17 [ 595.054397][T23584] 8021q: adding VLAN 0 to HW filter on device bond15 [ 595.070446][T23593] lo: entered allmulticast mode [ 595.075545][T23593] tunl0: entered allmulticast mode [ 595.086506][T23593] gre0: entered allmulticast mode [ 595.092230][T23593] gretap0: entered allmulticast mode [ 595.098682][T23593] erspan0: entered allmulticast mode [ 595.104484][T23593] ip_vti0: entered allmulticast mode [ 595.110918][T23593] ip6_vti0: entered allmulticast mode [ 595.116655][T23593] sit0: entered allmulticast mode [ 595.124864][T23593] ip6tnl0: entered allmulticast mode [ 595.133588][T23593] ip6gre0: entered allmulticast mode [ 595.141858][T23593] syz_tun: entered allmulticast mode [ 595.148334][T23593] ip6gretap0: entered allmulticast mode [ 595.154235][T23593] team0: entered allmulticast mode [ 595.159932][T23593] team_slave_1: entered allmulticast mode [ 595.165879][T23593] dummy0: entered allmulticast mode [ 595.177828][T23593] nlmon0: entered allmulticast mode [ 595.183717][T23593] caif0: entered allmulticast mode [ 595.191157][T23593] vxcan0: entered allmulticast mode [ 595.198247][T23593] vxcan1: entered allmulticast mode [ 595.203908][T23593] veth0: entered allmulticast mode [ 595.228209][T23593] veth1: entered allmulticast mode [ 595.240419][T23593] wg0: entered allmulticast mode [ 595.254856][T23593] wg1: entered allmulticast mode [ 595.264388][T23593] wg2: entered allmulticast mode [ 595.271953][T23593] veth0_to_bridge: entered allmulticast mode [ 595.298598][T23593] bridge_slave_0: entered allmulticast mode [ 595.315342][T23593] veth1_to_bridge: entered allmulticast mode [ 595.331619][T23593] bridge_slave_1: entered allmulticast mode [ 595.339991][T23593] veth0_to_bond: entered allmulticast mode [ 595.346825][T23593] veth1_to_bond: entered allmulticast mode [ 595.353554][T23593] veth1_to_team: entered allmulticast mode [ 595.363780][T23593] veth0_to_batadv: entered allmulticast mode [ 595.370733][T23593] batadv_slave_0: entered allmulticast mode [ 595.377071][T23593] veth1_to_batadv: entered allmulticast mode [ 595.383836][T23593] batadv_slave_1: entered allmulticast mode [ 595.390391][T23593] xfrm0: entered allmulticast mode [ 595.396034][T23593] veth0_to_hsr: entered allmulticast mode [ 595.402710][T23593] hsr_slave_0: entered allmulticast mode [ 595.408917][T23593] veth1_to_hsr: entered allmulticast mode [ 595.415008][T23593] hsr_slave_1: entered allmulticast mode [ 595.420988][T23593] veth1_virt_wifi: entered allmulticast mode [ 595.427366][T23593] veth0_virt_wifi: entered allmulticast mode [ 595.434877][T23593] virt_wifi0: entered allmulticast mode [ 595.442294][T23593] veth1_vlan: entered allmulticast mode [ 595.449130][T23593] veth0_vlan: entered allmulticast mode [ 595.455194][T23593] vlan0: entered allmulticast mode [ 595.461194][T23593] vlan1: entered allmulticast mode [ 595.466872][T23593] macvlan0: entered allmulticast mode [ 595.472795][T23593] macvlan1: entered allmulticast mode [ 595.478714][T23593] ipvlan0: entered allmulticast mode [ 595.484793][T23593] ipvlan1: entered allmulticast mode [ 595.490859][T23593] veth1_macvtap: entered allmulticast mode [ 595.496818][T23593] veth0_macvtap: entered allmulticast mode [ 595.503087][T23593] macvtap0: entered allmulticast mode [ 595.508878][T23593] macsec0: entered allmulticast mode [ 595.514290][T23593] geneve0: entered allmulticast mode [ 595.520925][T23593] geneve1: entered allmulticast mode [ 595.526448][T23593] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 595.534171][T23593] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 595.541861][T23593] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 595.550067][T23593] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 595.557794][T23593] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 595.564993][T23593] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 595.572495][T23593] @: entered allmulticast mode [ 595.577396][T23593] ip6erspan0: entered allmulticast mode [ 595.583337][T23593] veth2: entered allmulticast mode [ 595.588701][T23593] veth3: entered allmulticast mode [ 595.594086][T23593] bond1: entered allmulticast mode [ 595.599438][T23593] geneve2: entered allmulticast mode [ 595.605277][T23593] macvlan2: entered allmulticast mode [ 595.611263][T23593] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 595.618762][T23593] bond2: entered allmulticast mode [ 595.624208][T23593] vxlan0: entered allmulticast mode [ 595.629864][T23593] bond3: entered allmulticast mode [ 595.635208][T23593] geneve3: entered allmulticast mode [ 595.641211][T23593] bond4: entered allmulticast mode [ 595.646619][T23593] netdevsim0.2: entered allmulticast mode [ 595.652829][T23593] bond5: entered allmulticast mode [ 595.658213][T23593] bridge1: entered allmulticast mode [ 595.663639][T23593] bond6: entered allmulticast mode [ 595.669213][T23593] gretap1: entered allmulticast mode [ 595.674735][T23593] bond7: entered allmulticast mode [ 595.680209][T23593] ipvlan2: entered allmulticast mode [ 595.685848][T23593] mac80211_hwsim hwsim25 wlan3: entered allmulticast mode [ 595.693335][T23593] ip6tnl1: entered allmulticast mode [ 595.699331][T23593] bond8: entered allmulticast mode [ 595.704881][T23593] ip6tnl2: entered allmulticast mode [ 595.710613][T23593] ip6tnl3: entered allmulticast mode [ 595.716047][T23593] ipip0: entered allmulticast mode [ 595.721511][T23593] bridge0: entered allmulticast mode [ 595.727033][T23593] bridge2: entered allmulticast mode [ 595.732871][T23593] mac80211_hwsim hwsim37 wlan4: entered allmulticast mode [ 595.740778][T23593] bond9: entered allmulticast mode [ 595.746000][T23593] bond10: entered allmulticast mode [ 595.751661][T23593] ip6tnl4: entered allmulticast mode [ 595.757076][T23593] gre1: entered allmulticast mode [ 595.762707][T23593] bridge3: entered allmulticast mode [ 595.768204][T23593] bond11: entered allmulticast mode [ 595.773698][T23593] bridge4: entered allmulticast mode [ 595.779317][T23593] mac80211_hwsim hwsim39 wlan5: entered allmulticast mode [ 595.786592][T23593] mac80211_hwsim hwsim40 wlan6: entered allmulticast mode [ 595.794236][T23593] bridge5: entered allmulticast mode [ 595.799755][T23593] macsec1: entered allmulticast mode [ 595.805587][T23593] syztnl2: entered allmulticast mode [ 595.811829][T23593] syztnl1: entered allmulticast mode [ 595.818499][T23593] mac80211_hwsim hwsim44 wlan7: entered allmulticast mode [ 595.825919][T23593] bond0: entered allmulticast mode [ 595.831777][T23593] mac80211_hwsim hwsim46 wlan8: entered allmulticast mode [ 595.839376][T23593] bridge6: entered allmulticast mode [ 595.846000][T23593] bond12: left promiscuous mode [ 595.851278][T23593] bond12: entered allmulticast mode [ 595.861373][T23593] mac80211_hwsim hwsim47 wlan9: entered allmulticast mode [ 595.869152][T23593] vxcan2: entered allmulticast mode [ 595.874933][T23593] vxcan3: entered allmulticast mode [ 595.881152][T23593] macvlan3: entered allmulticast mode [ 595.886842][T23593] macvlan4: entered allmulticast mode [ 595.929544][T23577] 8021q: adding VLAN 0 to HW filter on device bond17 [ 595.936806][T23577] bond17: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 595.967964][T23577] bond17: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 595.986224][T23577] bond17: (slave ip6gre2): making interface the new active one [ 595.998246][T23577] ip6gre2: entered promiscuous mode [ 596.005255][T23577] bond17: (slave ip6gre2): Enslaving as an active interface with an up link [ 596.134965][T23621] __nla_validate_parse: 16 callbacks suppressed [ 596.134983][T23621] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5554'. [ 596.193832][T23625] FAULT_INJECTION: forcing a failure. [ 596.193832][T23625] name failslab, interval 1, probability 0, space 0, times 0 [ 596.195651][T23621] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5554'. [ 596.221514][T23625] CPU: 0 UID: 0 PID: 23625 Comm: syz.3.5553 Not tainted syzkaller #0 PREEMPT(full) [ 596.221542][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 596.221554][T23625] Call Trace: [ 596.221562][T23625] [ 596.221571][T23625] dump_stack_lvl+0xe8/0x150 [ 596.221600][T23625] should_fail_ex+0x412/0x560 [ 596.221633][T23625] should_failslab+0xa8/0x100 [ 596.221659][T23625] __kmalloc_noprof+0xe8/0x760 [ 596.221682][T23625] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 596.221715][T23625] tomoyo_realpath_from_path+0xe3/0x5d0 [ 596.221746][T23625] ? tomoyo_path_number_perm+0x219/0x630 [ 596.221771][T23625] tomoyo_path_number_perm+0x246/0x630 [ 596.221798][T23625] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 596.221825][T23625] ? __lock_acquire+0x6b5/0x2cf0 [ 596.221859][T23625] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 596.221905][T23625] ? __fget_files+0x2a/0x420 [ 596.221926][T23625] ? __fget_files+0x2a/0x420 [ 596.221942][T23625] ? __fget_files+0x3a0/0x420 [ 596.221959][T23625] ? __fget_files+0x2a/0x420 [ 596.221981][T23625] security_file_ioctl+0xc3/0x2a0 [ 596.222007][T23625] __se_sys_ioctl+0x47/0x170 [ 596.222033][T23625] do_syscall_64+0x14d/0xf80 [ 596.222057][T23625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.222076][T23625] ? clear_bhb_loop+0x40/0x90 [ 596.222099][T23625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.222118][T23625] RIP: 0033:0x7f035899c819 [ 596.222137][T23625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.222153][T23625] RSP: 002b:00007f03598cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.222174][T23625] RAX: ffffffffffffffda RBX: 00007f0358c16090 RCX: 00007f035899c819 [ 596.222188][T23625] RDX: 0000200000000140 RSI: 0000000000008b26 RDI: 0000000000000007 [ 596.222200][T23625] RBP: 00007f03598cf090 R08: 0000000000000000 R09: 0000000000000000 [ 596.222212][T23625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.222224][T23625] R13: 00007f0358c16128 R14: 00007f0358c16090 R15: 00007fff428300b8 [ 596.222256][T23625] [ 596.222265][T23625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 596.437247][T23635] netlink: 'syz.2.5557': attribute type 29 has an invalid length. [ 596.623617][T23646] bond13: entered allmulticast mode [ 596.630214][T23653] openvswitch: netlink: IP tunnel dst address not specified [ 596.637865][T23646] bond14: left promiscuous mode [ 596.638136][T23646] vti1: entered allmulticast mode [ 596.644440][T23646] bond15: entered allmulticast mode [ 596.671408][T23646] bond16: entered allmulticast mode [ 596.682764][T23646] bond17: left promiscuous mode [ 596.691884][T23646] ip6gre2: left promiscuous mode [ 596.697379][T23646] bond17: entered allmulticast mode [ 596.715829][T23646] ip6gre2: entered allmulticast mode [ 596.820855][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5563'. [ 597.167471][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5575'. [ 597.190112][T23691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5575'. [ 597.369706][T23706] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5582'. [ 597.419778][T23706] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5582'. [ 597.448999][T23704] netlink: 'syz.1.5581': attribute type 3 has an invalid length. [ 597.478020][T23704] netlink: 'syz.1.5581': attribute type 2 has an invalid length. [ 597.500463][T23699] netlink: 'syz.3.5580': attribute type 32 has an invalid length. [ 597.511679][T23704] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5581'. [ 597.524014][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5580'. [ 597.611478][T23699] bond14: option coupled_control: invalid value (48) [ 597.622559][T23699] bond14 (unregistering): Released all slaves [ 597.708579][T23719] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.5586'. [ 597.939983][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 597.948531][ C1] lec:lec_tx_timeout: lec0 [ 597.974284][T23740] netlink: 'syz.0.5594': attribute type 1 has an invalid length. [ 598.131080][T23742] syzkaller0: entered promiscuous mode [ 598.138092][T23742] syzkaller0: entered allmulticast mode [ 598.315557][T23759] IPv6: sit1: Disabled Multicast RS [ 598.336260][T23759] syzkaller1: entered promiscuous mode [ 598.357637][T23759] syzkaller1: entered allmulticast mode [ 598.463750][T23767] syzkaller1: entered promiscuous mode [ 598.470666][T23767] syzkaller1: entered allmulticast mode [ 598.625769][T23774] ------------[ cut here ]------------ [ 598.631997][T23774] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 598.645303][T23774] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.1.5605/23774 [ 598.655604][T23774] Modules linked in: [ 598.660828][T23774] CPU: 1 UID: 0 PID: 23774 Comm: syz.1.5605 Not tainted syzkaller #0 PREEMPT(full) [ 598.670765][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 598.681332][T23774] RIP: 0010:u32_change+0x1daf/0x2720 [ 598.686702][T23774] Code: 3d a6 c1 42 06 01 75 33 e8 de c0 0c f8 eb 50 e8 d7 c0 0c f8 48 8d 3d a0 f4 67 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 c0 ae e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 b2 c0 0c f8 eb 24 e8 ab c0 0c f8 [ 598.707713][T23774] RSP: 0018:ffffc90004d7efc0 EFLAGS: 00010287 [ 598.713905][T23774] RAX: ffffffff89b8ff19 RBX: ffff888056245000 RCX: 0000000000000010 [ 598.722999][T23774] RDX: ffffffff8ce1aec0 RSI: 0000000000000020 RDI: ffffffff9020f3c0 [ 598.731336][T23774] RBP: ffffc90004d7f178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 598.739817][T23774] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff88807df3d0e8 [ 598.748382][T23774] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 598.756657][T23774] FS: 00007ff3030466c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 598.766012][T23774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.772795][T23774] CR2: 0000200000006040 CR3: 0000000075a7a000 CR4: 00000000003526f0 [ 598.781256][T23774] Call Trace: [ 598.784555][T23774] [ 598.787509][T23774] ? __pfx_u32_change+0x10/0x10 [ 598.792580][T23774] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 598.798552][T23774] tc_new_tfilter+0xff8/0x1780 [ 598.803469][T23774] ? __pfx_tc_new_tfilter+0x10/0x10 [ 598.809784][T23774] ? is_bpf_text_address+0x26/0x2b0 [ 598.815214][T23774] ? __pfx_tc_new_tfilter+0x10/0x10 [ 598.820722][T23774] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 598.825730][T23774] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 598.831035][T23774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.836734][T23774] ? __lock_acquire+0x6b5/0x2cf0 [ 598.842141][T23774] netlink_rcv_skb+0x232/0x4b0 [ 598.847126][T23774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.853155][T23774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.858573][T23774] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.864140][T23774] netlink_unicast+0x80f/0x9b0 [ 598.869483][T23774] ? __pfx_netlink_unicast+0x10/0x10 [ 598.874819][T23774] ? netlink_sendmsg+0x650/0xb40 [ 598.879877][T23774] ? skb_put+0x11b/0x210 [ 598.884153][T23774] netlink_sendmsg+0x813/0xb40 [ 598.889105][T23774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.894631][T23774] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.899973][T23774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.905410][T23774] ____sys_sendmsg+0x972/0x9f0 [ 598.910369][T23774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.916049][T23774] ? import_iovec+0x73/0xa0 [ 598.920749][T23774] ___sys_sendmsg+0x2a5/0x360 [ 598.925762][T23774] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.931274][T23774] ? __pfx_futex_wake_mark+0x10/0x10 [ 598.936728][T23774] ? __fget_files+0x2a/0x420 [ 598.941419][T23774] ? __fget_files+0x3a0/0x420 [ 598.946260][T23774] __sys_sendmmsg+0x27c/0x4e0 [ 598.951043][T23774] ? __pfx___sys_sendmmsg+0x10/0x10 [ 598.956446][T23774] ? do_futex+0x333/0x420 [ 598.961236][T23774] ? rcu_is_watching+0x15/0xb0 [ 598.966293][T23774] __x64_sys_sendmmsg+0xa0/0xc0 [ 598.971309][T23774] do_syscall_64+0x14d/0xf80 [ 598.976015][T23774] ? trace_irq_disable+0x3b/0x150 [ 598.983436][T23774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.990021][T23774] ? clear_bhb_loop+0x40/0x90 [ 598.994717][T23774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.001131][T23774] RIP: 0033:0x7ff30219c819 [ 599.005567][T23774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.026120][T23774] RSP: 002b:00007ff303046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 599.034837][T23774] RAX: ffffffffffffffda RBX: 00007ff302415fa0 RCX: 00007ff30219c819 [ 599.043403][T23774] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 599.051963][T23774] RBP: 00007ff302232c91 R08: 0000000000000000 R09: 0000000000000000 [ 599.059998][T23774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.068164][T23774] R13: 00007ff302416038 R14: 00007ff302415fa0 R15: 00007ffc5aea9b28 [ 599.076263][T23774] [ 599.079897][T23774] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 599.087203][T23774] CPU: 1 UID: 0 PID: 23774 Comm: syz.1.5605 Not tainted syzkaller #0 PREEMPT(full) [ 599.096869][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 599.107456][T23774] Call Trace: [ 599.110922][T23774] [ 599.114107][T23774] vpanic+0x56c/0xa60 [ 599.118286][T23774] ? __pfx__printk+0x10/0x10 [ 599.123044][T23774] ? __pfx_vpanic+0x10/0x10 [ 599.127716][T23774] ? is_bpf_text_address+0x292/0x2b0 [ 599.133252][T23774] ? is_bpf_text_address+0x26/0x2b0 [ 599.138543][T23774] panic+0xc5/0xd0 [ 599.142362][T23774] ? __pfx_panic+0x10/0x10 [ 599.146969][T23774] __warn+0x315/0x4f0 [ 599.151154][T23774] ? u32_change+0x1da0/0x2720 [ 599.155837][T23774] ? u32_change+0x1da0/0x2720 [ 599.160562][T23774] __report_bug+0x29a/0x540 [ 599.165141][T23774] ? ___sys_sendmsg+0x2a5/0x360 [ 599.170188][T23774] ? __sys_sendmmsg+0x27c/0x4e0 [ 599.175215][T23774] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 599.180239][T23774] ? u32_change+0x1da0/0x2720 [ 599.184920][T23774] ? __pfx___report_bug+0x10/0x10 [ 599.189956][T23774] report_bug_entry+0x19a/0x290 [ 599.195002][T23774] ? u32_change+0x1daf/0x2720 [ 599.199933][T23774] ? u32_change+0x1db4/0x2720 [ 599.204869][T23774] handle_bug+0xce/0x200 [ 599.209377][T23774] exc_invalid_op+0x1a/0x50 [ 599.213970][T23774] asm_exc_invalid_op+0x1a/0x20 [ 599.218992][T23774] RIP: 0010:u32_change+0x1daf/0x2720 [ 599.224299][T23774] Code: 3d a6 c1 42 06 01 75 33 e8 de c0 0c f8 eb 50 e8 d7 c0 0c f8 48 8d 3d a0 f4 67 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 c0 ae e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 b2 c0 0c f8 eb 24 e8 ab c0 0c f8 [ 599.244162][T23774] RSP: 0018:ffffc90004d7efc0 EFLAGS: 00010287 [ 599.250508][T23774] RAX: ffffffff89b8ff19 RBX: ffff888056245000 RCX: 0000000000000010 [ 599.258566][T23774] RDX: ffffffff8ce1aec0 RSI: 0000000000000020 RDI: ffffffff9020f3c0 [ 599.266617][T23774] RBP: ffffc90004d7f178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 599.274672][T23774] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff88807df3d0e8 [ 599.282726][T23774] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 599.290877][T23774] ? u32_change+0x1d99/0x2720 [ 599.295579][T23774] ? __pfx_u32_change+0x10/0x10 [ 599.300678][T23774] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 599.306333][T23774] tc_new_tfilter+0xff8/0x1780 [ 599.311210][T23774] ? __pfx_tc_new_tfilter+0x10/0x10 [ 599.316491][T23774] ? is_bpf_text_address+0x26/0x2b0 [ 599.321802][T23774] ? __pfx_tc_new_tfilter+0x10/0x10 [ 599.327025][T23774] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 599.332051][T23774] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 599.337217][T23774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.342676][T23774] ? __lock_acquire+0x6b5/0x2cf0 [ 599.347712][T23774] netlink_rcv_skb+0x232/0x4b0 [ 599.352475][T23774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.357933][T23774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.363402][T23774] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.368602][T23774] netlink_unicast+0x80f/0x9b0 [ 599.373464][T23774] ? __pfx_netlink_unicast+0x10/0x10 [ 599.378827][T23774] ? netlink_sendmsg+0x650/0xb40 [ 599.383756][T23774] ? skb_put+0x11b/0x210 [ 599.388093][T23774] netlink_sendmsg+0x813/0xb40 [ 599.393041][T23774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.398431][T23774] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.403460][T23774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.408937][T23774] ____sys_sendmsg+0x972/0x9f0 [ 599.413734][T23774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.419133][T23774] ? import_iovec+0x73/0xa0 [ 599.423640][T23774] ___sys_sendmsg+0x2a5/0x360 [ 599.428510][T23774] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.433837][T23774] ? __pfx_futex_wake_mark+0x10/0x10 [ 599.439254][T23774] ? __fget_files+0x2a/0x420 [ 599.443937][T23774] ? __fget_files+0x3a0/0x420 [ 599.448619][T23774] __sys_sendmmsg+0x27c/0x4e0 [ 599.453319][T23774] ? __pfx___sys_sendmmsg+0x10/0x10 [ 599.458701][T23774] ? do_futex+0x333/0x420 [ 599.463073][T23774] ? rcu_is_watching+0x15/0xb0 [ 599.467943][T23774] __x64_sys_sendmmsg+0xa0/0xc0 [ 599.472983][T23774] do_syscall_64+0x14d/0xf80 [ 599.477679][T23774] ? trace_irq_disable+0x3b/0x150 [ 599.482817][T23774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.488892][T23774] ? clear_bhb_loop+0x40/0x90 [ 599.493572][T23774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.499571][T23774] RIP: 0033:0x7ff30219c819 [ 599.504073][T23774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.524208][T23774] RSP: 002b:00007ff303046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 599.532715][T23774] RAX: ffffffffffffffda RBX: 00007ff302415fa0 RCX: 00007ff30219c819 [ 599.540711][T23774] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 599.548952][T23774] RBP: 00007ff302232c91 R08: 0000000000000000 R09: 0000000000000000 [ 599.556970][T23774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.565293][T23774] R13: 00007ff302416038 R14: 00007ff302415fa0 R15: 00007ffc5aea9b28 [ 599.573454][T23774] [ 599.577226][T23774] Kernel Offset: disabled [ 599.581658][T23774] Rebooting in 86400 seconds..