last executing test programs: 8.380692723s ago: executing program 2 (id=2093): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0xfffffffd, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x261, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880) 7.448305136s ago: executing program 2 (id=2101): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x38, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x1b, 0x2f, 0x22, 0x40, 0x1d, 0x18, 0xb, 0x2e, 0x29, 0x2a, 0x12, 0x2, 0x1a, 0x32, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec", 0x77}], 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000440000000800", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff4100", @ANYRES32=0x0, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x3, 0x96, &(0x7f00000015c0)=""/150}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.019987778s ago: executing program 2 (id=2104): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$inet6(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x28000600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e21, 0x0, @loopback, 0x1c}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c01"], 0x50}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0x2}, 0x6) write(r6, &(0x7f0000000040)="05000000", 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRES64=r4, @ANYRESOCT=r1], 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a000000050004"], 0x4c}}, 0x0) 6.791017802s ago: executing program 2 (id=2106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="250300000000fcdfdd2504"], 0x14}, 0x1, 0x4000000, 0x0, 0x44801}, 0x0) 6.663535696s ago: executing program 2 (id=2108): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) sendmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="2856d9e498fe5fbf0cdbabf0260a4d148a038581eae4860bc9c578174dcf1830f09e269abd418c1cce84e74e5ba58b3fffa8c2c3f8717c33fb20d6cb0f8ffd1af273e0d9a27968880e784501ddb3a7d4d53e680c2645ba32460e2c3c497421083703a15bc1846562eaf4f3da19e783f4605d87d857b4825db1fd9749a90174e16a7586869dc5fd09f0232d0292959888e885d823750c8268293324d9a6d72276aa131181bbecb7b8458daf22404c2bb83b9a3abb3c68be28f8c1502729d0258fce879c0d26ed304cb7be6fc2a766f2a37a9caa228dbeb2823bf554502ffa4b2b877fb2aa27", 0xe5}, {0x0}, {&(0x7f0000001700)="312c3d8ad7477cf13df7b67a35a15073bfce1ce714d5b5a22e1d3e082d9dc532946db5a1aad6ddb7aaec5bfcb780cfc7d96bfee27057841bafcb111398122c5636907bb1bbeccb907dd45d4de391101fce9174c625ed686580ae9b6038924b0d7108140fd8c69425611edaf0cda72a45509e2b3f6536b4c725e0cda7f1c762f5dc224db7612674f80e5e9bd2a52121dd70ba02841836358099afe55dd77e09775897b28c81cf36fa1c588fcc42cb21e294aa54b9408b2a2780cf0d1d776f16f360e788b37f077afdb9873b5cd620ba78cb387bfefcb46670c6b0e420db84876b805d63e73f7e95a5337b1445f053", 0xee}, {&(0x7f0000000140)="74452ad699216b87699dfffd48ec324679e30cdc5a36b8da23d2870789e62ddca2ee20e32b085c782021c003fae6d5fdbb0153b32e6040fb82f4999f28cbb0bba8a8e156d253bf2b4b236b", 0x4b}, {&(0x7f0000001900)="499d8b09320f3a2b7505f67f1d8474a21de0c195213811de9c5e1c916e1a32153fa6ecbffb1db1b8795688e23c4f2530c9105b63de5a2dc054673fd35d6a1ee58f42887bd8b1492946433bcc91372f48b29f2187654acaf826e1dbe0c87791079aa2c5b41c6d5eb6b6222ea4b77e2dffedf23c9559568fc23ab354c65245332f7d31b823b4b51508a55782c7e09f09d251f27a8b97469ff315ac1f1fc8696098fa7c87e4ca9b6837052ac22b154628ddaefe35039321a6ed0b52cfa42942e969b58695fd79ea58cabf1173adfb2554fc065ff7990d0cbca264504d39d61e5dd4817c9ffb8368012298217925382236da50a31f30075166cefc29ca78f1e6ca2ff174f3eb4bb6209665a4d38335236cd3c71c914b91120db55aab21ecc73045deaa94d04881a22ad136b96a863dbaa25c5b3d5201df6d654d18577479716a955479f978e7c55b6675c647e768abb20c4442edc65da9adbccfec76e19c5deeee2543dbf6fa6bfd4829b733bd87d0ef82df1c25a64a360751e4c280e8a7bb054e452fdd91633016971cdf09373b14aeeabe6f7cd97be6ac27913ba0775893ef2e06ec43655a643abf087c24256421a61d086cd0bbeff0f0e0226a4b38ef685ebb4ae6e602d75f55a60b50f546c27e422a6d5d15e31dd5d09edb27710e0bf7a526c9dd70d57e1fabd1b9ac55737b3b68b3f55c6902781ef974838bc1549effdff95950fbb730b1c33e1d8642b7799b3233f6e72c0e2da6881fdebe5e6523aa5ef3926296a32e58b8003d01126990ae6e97378125317a6a0f60dd5371aebfd66cb4ed87e3bd04ab07b10ee2b98b667447a7f64b35365ca05ac61a4d8f39b529019655e2cdf6f86de4d932d5e2f6fe20d1900c06047117337cdce588d4c42ba10204c18508e4a167e7c0cb3b4a6325f6e035", 0x28f}], 0x5}}], 0x1, 0x4000040) 5.694542385s ago: executing program 2 (id=2114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 3.666083612s ago: executing program 3 (id=2128): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x9}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0xff000000, 0x4007}}) 3.276401611s ago: executing program 3 (id=2132): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESDEC], 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000596000/0x1000)=nil, 0x1000, 0xb635773f05ebbee1, 0x8031, r3, 0xffffe000) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x618e, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newqdisc={0x154, 0x24, 0x903, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xfff1}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x100, 0xfffffffd, 0x7fffff7f}}}}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0xecf6, 0x400, 0x0, 0x3, 0xfffff88f, 0xe}}, {0xe, 0x2, [0xfff7, 0x5a74, 0x9, 0x5, 0xfbae]}}, {{0x1c, 0x1, {0x8, 0x4, 0xf1eb, 0xf, 0x2, 0x4ff, 0xfffffffe, 0x7}}, {0x12, 0x2, [0x1000, 0xffff, 0x9, 0x2, 0x2, 0xff97, 0x7]}}, {{0x1c, 0x1, {0x3, 0xfc, 0xa, 0x7fffffff, 0x0, 0x3, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x3, 0x7, 0x7, 0x36ee409b80e3f683, 0x6, 0x0, 0x9}}, {0x16, 0x2, [0x2, 0x9, 0x2, 0x9, 0x9, 0x7, 0x7, 0xd, 0x0]}}, {{0x1c, 0x1, {0x7, 0x0, 0x3, 0xef, 0x2, 0xa, 0x9, 0x4}}, {0xc, 0x2, [0x7, 0xa, 0x5, 0x8]}}, {{0x1c, 0x1, {0xc2, 0x5b, 0x2, 0x2, 0x1, 0x7, 0x7, 0x2}}, {0x8, 0x2, [0x7fff, 0x2c9]}}]}, @TCA_RATE={0x6, 0x5, {0x10, 0x38}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x9}, {0x2, 0xb}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x61}, 0x14815) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtclass={0x4c, 0x28, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xe}, {0x10, 0xfff3}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x81, 0x2d}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x2}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x2d) 2.811725802s ago: executing program 3 (id=2136): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f0000004940)=""/4043, 0xfcb}, {&(0x7f00000028c0)=""/4102, 0x1006}, {&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000380)=""/165, 0xa5}], 0x9}, 0x100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x0) 2.490283982s ago: executing program 3 (id=2140): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000010301010000000000000000010000000c000200ffffffff000000010c000f8008000940000000092c0023800600014088a80000060002400003000006000240000800000600014088a8000006000140810000000d000a00a7b3ba3b5fef71c6bf0000001c000a008d4f78b619cf15706b42a3fbfb1d2015a8f1f211cf0bea4f"], 0x84}, 0x1, 0x0, 0x0, 0xc884}, 0x40) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @mcast2}, 0x1c) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004019, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) sendmsg$nl_crypto(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090026bd7000fddbdf25f82090ef2269ff00b00d000000", @ANYRES32=r8, @ANYBLOB="0400cc0008000500030000001400040076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x8481}, 0x24044884) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="e0aab06a2836f76037a396762e0ee032ad881ebcd250e8d56b1e918f61060aa1fb79af058b9d"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 2.488876117s ago: executing program 1 (id=2141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000d58114ca2615b230232e1047beeaf7fb160800044000000004050003000100000008000240000000030900010073797a30000000000900020073797a320000000014"], 0x8c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x76, 0x0, 0x6a, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000, 0x8040, 0x8, 0x44}}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000180000042bbd7000ffdbdf251c108080fc04ff060026000031a7568b1344b35390c59530cce4ab121b84e80f8bd885916976ab4e45fd78ac064b91b719b5d08383091d25b62aa279a074b202f315430081d987b3cc083b7e40876adb2db0fdc6cbd6e3b6180a32c3d6ced1"], 0x1c}}, 0x8000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x40, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x20, @from_mac}, @NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3, {0x9, 0xe, 0xff}}]}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES64=r9, @ANYRES64=r5], 0x30}}, 0x4000090) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 2.164471079s ago: executing program 0 (id=2143): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000480)=0x100001, 0x67) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000600)=""/87, 0x0, 0x0, 0x40000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_proto_private(r6, 0x89ed, &(0x7f0000000740)="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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42ee01, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xfff2, 0x6}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.774025613s ago: executing program 1 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fbffffff059193c18d000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3b81f8baf", 0x7}], 0x1}}], 0x2, 0x404c041) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.597862883s ago: executing program 0 (id=2147): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x47fe, 0x6, 0x5]}, &(0x7f0000000100)=0xa) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0xfffffffa, 0xfffffffffffffccd) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc048885}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x11d, 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) 1.440940741s ago: executing program 4 (id=2148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r4}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="050009000400000006000e000200000006000f0001000000060011004e21000008000300"], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)="e6dc27813d8ec7955384d3223330617bb1675a097f6e3ba2ba7071d2970c4d2fbc2fe58ac1b3a8e89dbebbf60aef0485cb44b0991c49e07f992385366003f23c1052c576c77def0dbd5efa21c4b3584a3d7853961de18acce870fefc28d7e0be09a01b5a729bbc33b81ec332b29e", 0x6e) 1.340072403s ago: executing program 1 (id=2149): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') close(0xffffffffffffffff) pipe(&(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0040000", @ANYRES16=0x0, @ANYBLOB="000409000000fcdbdf253900000034015a8070000180e500070001000000300002000048014c3735442a573423041f0848212917482738201b1a4d150948374c101956362e214b49413c00492f0005000600010000001400030000010b000600aeb00400090004000600050006000000000005000600000000000600010004240000480002802c0002002a522317272e470619342340473a17404441560e2c2c4f2106014217452411412d3a02223a262d2005000700010000000d000100160c24360230042f1b0000000c00018005000400000000006c0002800d000200420b0f31152d2c3a5300000005000400020000004d0002001739101121400a3d0a550905362a1d292c0b21274951382d0027140a0835213625490644324b0607281031190b223c431b2d37380922003b1747000f292c14080a2a383e003a202a520000001c005a801800008014000300fc0fff030700f9a809000000050085b238015a8018000380140005000900ff0f0500f6d3bb43b8ae800404005c000180050006000100000005000600000000000500040002000000140005000100070009000500ff7f0900030007002c0002002a0100201f553c29431126200f262e101b103a18424f2c1038514e000f1033084816185249025350c00001800500040002000000480002002f074517254a0a170a033f233f4d321a3d343f50354825002633233a1e400b4928282753520e0a180f55080444143a3a194503340937092d382a51992616293c425006500500070002000000140005000300080000000500ff7f0700ffff008005000600020000000500040000000000360002000b1750062c41312f10234d080049014c212b4d493918063b33520f2a251a123413310c080c28323e18243836532d40554d4800000800010018366c6c04025a80d400038014000500040006000000040006000200020006001400030005000f0003000300060008008f0e008006000200432a000041000200552411060126374a31514b472f154e0807005556291e1c510c2b192527534a2c48462d193e4227014c114a091e051f364a5042535430531e50331c364f0000000500040000000000420002002f5017414f392e371e3e1f1806154a361901482e361a3a27424a3b3f35031848401a39053b3b131004110c1e1155552450392f091e4f061b4641530b052200000500060000000000050007000200000080000280140003005925bcccfeff4a0200040400440009000d0001006c0c020b30481b0660000000140005000700080005000e0000073b510010000814000500070009000300f16500800b008100030005000600000000001400050004000d00010006000300ff0f7f000000140003000700000040000b00bd226ddc0800070054000380050007000100000005000400020000001900010048600324360602306c066c30180624166c033018050000000500070000000000050004000200000014000300ff0f090001000c0002000300020009005800008014000500aa02000004000c0004000400800000801b000200393315091f14442118341f511654270946521b2520523600140005000000f9ffff7f0e0008000300f90004000d000100050304186002056c02000000"], 0x4a0}, 0x1, 0x0, 0x0, 0x40001}, 0x4040040) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1.339491711s ago: executing program 0 (id=2150): socket(0x27, 0x1, 0xffff8001) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x2, 0x25dfdbfc, {0x1c}}, 0x14}}, 0x4000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x0, @empty, 0xd}, @in6={0xa, 0x4e22, 0x1, @remote, 0xd}], 0x38) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x2404c085}, 0x20040000) read(r3, &(0x7f0000000080)=""/38, 0x26) 1.240543414s ago: executing program 4 (id=2151): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0x2}, @generic={0x5, 0x0, 0x0, 0x2, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0xfffffffe, 0x6, 0x80, 0x7346f017}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'caif0\x00', 0x0}) connect$packet(r1, &(0x7f0000000980)={0x11, 0x19, r2, 0x1, 0x6, 0x6, @random="7e03f2ebe79c"}, 0x14) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x8, &(0x7f0000000000)="11000000", 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "95d875db896271d922"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000400)={0x8000, 0x9, 0x3, 0xfffffffd, 0x80000001}) openat$nci(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x95}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1876}, @call={0x85, 0x0, 0x0, 0x26}, @exit, @ringbuf_query, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xa, &(0x7f0000000040)=""/10, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{0x0, 0x4, 0x5, 0xc}, {0x1, 0x3, 0x9, 0xd}, {0x0, 0x5, 0x1, 0x1}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x0, 0xea, 0xc0, &(0x7f0000000540)="0f57a6ca489879d5ac65489b705c1bfd8773b31741a01bd912b4fe75dc3a0b0dee3135fceadb6420d49846e5d7098e54f2346dcccd7f312a39d59174784176c40d6f8140f2f9aa6e5b1f0f2b21474fe3db2fc3154c5ef89b82996873f89c4f1f90191db0723cbc5ca4b782f3f82cc267f867b4fbefe3b4f428498749704f335613ed10d024a351556c75639c54d2acc34cb830a1f62c87569d5ced5673c4b4b574694b16309a95eb4a7745f96a7bab27829abe729db43bd3360de86c437130652c97ada1a39c72de0a4461d3d6f60d51c561b4f6a084cda6f210281ad97c9461ab1e267e0e986e76b9bc", &(0x7f0000000640)=""/192, 0x0, 0x0, 0x22, 0xd3, &(0x7f0000000100)="76c71bb8a23a3f89b61f6f5a593ccbeee914d203325878f56aa5f7ff2b917003f37c", &(0x7f0000000700)="818a043c8846b64b88c398159a73fa0c4b0ad42af4ba4c85482bebd35fe34a5b0746a5b4b410db4336068353dcf160c873d69fd56f4005692d56e2b5f226b43d570704e10293d4734dfd194e75812a137829409ab278ed9373bb022341c439105456ee1e78518481eeeaad666c82a6f57e682e8b14085cd1b3a781ed56e6de1251a01301f3a3199f0123f7e61df92439b87e10802b0e8d24d9920243ee2c0e13905539a9029347e2b40856c2b0867f2d6e033e61e0c4725869937ffbaf2a2550892acb229a0fa3e278d1d280fa70f10ee742b6", 0x5, 0x0, 0x3}, 0x50) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000240)=0x80000000, 0x4) close(0x3) 1.180403565s ago: executing program 0 (id=2152): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 1.108351943s ago: executing program 1 (id=2153): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000840)=""/255, 0xff}, {&(0x7f0000000940)=""/201, 0xc9}, {0x0}, {&(0x7f0000000b40)=""/237, 0xed}, {&(0x7f0000000c40)=""/221, 0xdd}], 0x6}, 0xe}], 0x1, 0x10002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_emit_ethernet(0xe43, &(0x7f0000001bc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd628067c10e8720fcf5f0016dafa53e9a9c41b85f330d06fffe880000000000000000000000000101fc00000000040000000000c6750fade7e450d4e4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000790780001865a2e5138df23ced027eb7fb8584bbc5ab2d9655b7361669042b19950291a45c1a7d4f8ffd728f5a02236e81346a4880c47b55e77c5be1e158b8eacf8b2924b38d1e6e0e374efd37cbd26d0754d6f6820df0972565625dbcb31a05e4fa04fb8667c6c44d154f61dcda0b2515d8cc7d9a613e84d2f29533b81ab0d8c740e3bb8593ea6b71cde62b54960f90bd853508716e2d2dab4b6a5089fc9b2a71f0e6c475338955d1e62fdbc1ee28ff1081ff81347c99c0094a9ded7755ed298ea5e63c67f00fa7a1f84617ba41f6427e8e2d1cec8294ddc7d04482b2dc89e50fe05e930c121beb0500f11456f124bfd05c7b3bec293f0f256cafad57c37e4d80d48bc62308515a92fd0b04a66ff60570ade7c6a734516b6732a5df5f904275762b0a46e23cb03146e48975be5f5945f26102718d818a68d012549fefd7db13b6a52b4defe65f419b91fb7a5233159cc0a5a698a42ad21174084835bf93d619e6f92affd2b18eba348369f8a53e45ef0259f9d75ce14b64f62a987ed39dbc00391748f2ade7fbb2c2c000fea7ac471e8bbfa069e894c2f84b88b7809c49f180e2eda7fb3b6ac1ce8696d5406b0ef90f9d822cdd525ad0f260ac7d4471da27c745857c45d359720a652ecaebf593cbb3792f09e7f3a51d3212d2d442bf579b17e04e27713da72a6324d5ae9b13bc79af63dd8fed565cb6f14e24a72d5b050e9d91c97b2795e2ee7a584d459198251096a8a9d7b315312419bf90279881b140f0d678403514d2a92f43cd27586541abee146ce18cae687cc8b23bf59ee0146f5294388b673037769e1e3f8807504e437a0fc177ac26379dd77b2d5d00202c2d71c9f0db6f0e571ff59f663535483e4bc1af7bb4f0ab0047e4716a99c2fcc057eae1a3fe45e1da30cb5278a9f270f70c3d44a35fc9b7294de32f1eb1e257609716a9a4e463f70702d13f9a75ef5c7eb6f8d5c9d439f92c01f723f8f491f38504de09927db335292f2e17b01e5a2e7d0f3d90020316a701de44fcfa628306b67c82f45cea8f7bee008f0ff90e28e8cef8489d2546a8df5ac4c5be8f363887bee6eba05aa1f520efb288e76df0690b74042f2f914aaf943fa2f7c4e63accf7754e9f3c8ee64fb324e8d601f5b7e1da7803bf8ef3852cc7b9a070ff885fea34ff36abde630ffd9eba4381d9a3405c8014c44faf0f6477906f46ac0abdecdfcace9bc45e8b979aa4779220d48622036026319e2fb1c782935fc28728453584c58aa3c1eca9b2a72d5b318ec8fae0581246165a4be4158bc77c3300ddb70899da4c1ab2d26ff14fb0166ae9752a9914257cfd57cc504d889ed91876d977c0358322989df1f0b9b6eb87e6368a8de199d039641737f369daa4708e1558b02ee1f7da7d3844d8f4a10e92c491150df90a3f5dc4f842a4b6d3243ee65c07b789aa62da4feb3645207203a1194b6c83dfa13780ce746ddd27f45001d2133554b27243233b49a4abd72e09063a18168fd23050b338b7be3666d9e4c066fba8d6486749759ff3fda664b2c3e22cc556ae237396aeae9a896e50665a45bb91a670c0ab619eb266092a270a5a8ed99ef9505f74f4db55447e264ebcdbd88141b0fc1eb3c4a11708066fe6ec554c7f06445fadaad66168c83ede26610faa23f3cace99d06c81a8aa82d75b45c34e0a514065be58d81dc61a845a0c17874dfde606d22ab93042fec758a7bf4befbeceb7dd1ead1863def43809a6e164b7236c57a11450ee6a282455bb36495ba4e54bd08e02a29fe8f407c1eba4a2bbca4c75e3bfc6e0506ac6646ead2718bdda270015f68da6d62919d315a50a7f19ae15a84d446125c3264c6ec816eb905d1d7f2ff9c343aed0ef4260db4ba7b27e3fd75b37027912d8e6cd362d04a8c5e2c7f54f76f4a6ff212631be2d19445f340d98b7db548cd6bb227d9a4ef52b6381460cde930f96e9cc2f65cdd1f753c9cb3a0d76ae75341d46fa337a81c35465f1d1b4ae834768ede92bc86095fb9b9cbe95f5bd7e9e9439d29a1d1d373b4edbc51b432bfd971b1b29e530c157a9f74efbb509ea050f3d35792773e214a61bf4b08f196ec26c38d58adf71d11e79102a42aba235f70d029362931790e0e1cc5e1ebff8b22552917c733470826049d0c210c7e7f62987969c7cebf3a6ea21dce452c23535fb0e58eb05cd682e30beeabfb786f29de98dc6b32a08b1b7d5166ec15aa1945c22cb25faf60c8a5396bb80b634ddab9488a9f23596ab6c8aa5b44058c110f47860350b834226bbb578c1cb7bea21ae51473e7e5161fb661ce46239c652e526d4246f243e1e3be0f1f82c1d2fb383281003f7b2193cff6abf627dde71c2d174159d2e57647dfa32eb38c83a3e5ac248b057698fd0275ecbbc6e4c605e50a0c2cb142cc207d08138a7a6958ba5260ad6d4c26e67c67cc897a6da71d0f1a97a9e98e3656eb22a547cb8504ae4c8c089006b1fce8aecaa3bf679e77e600c7f8f2aa87a46aabd79d3fbdfdfcf182d5db8d3ec8cf3fc61e8f4dd1b05479526855ed239368f35ff749ab20e3b443de46b90b02b3ccd29021b58bc2f76d87e269f6645ba7af83adf16f90cf9c18c07c3788e1dec0d472c14552e20e01edd04dc5b1a198c228b4c922e9ab32e765a56fc131d96e83837255bfe089b1a62afea89561131c447d4d5547a8bde8bc1fee15364788d64288584f7545aaaa918d3bc7a4d32b311e357a682f88f50360b1a305ca1aa2cab281641205b3b305fffd18e2d065001bfa4fe58a106591ce8d5a29b945be958ae2f91037d3a5e1b87acd1f91ceb22d969d4695833e5e28679ae2e3b9c3bb6f13d1e1772a5ac6dcf0e7bb4b0e6aa852793a288ac6408629c9c75830b1ea2754ca9471e808d4786f1230b2e9add48a0e4d173a80f165729c624c4fc9680eb8f48e74863b4bf16e87cd6b44738ee6384ff82876592b3e19d39caa896f2b0c2319c3cb77d9bad622e99edeb9dda16836140434e9eb39f48d5a09129ff9f159443004303c927c97e1241ad50434ea9be584381e681123b195636cbd94d5f920058bf1b521e880f6d3c33a39220b03c04f8c4a03f4e807af3eebe31649999f147f8d73bbbe59d3d3e550a05ea4b62f16da6229cd023a9835716f0a921cb5d784eb4a158ee135fcaac7c76015b1f68fe8982cd7d0d43cf11b91b5013a3b9f1bca01342ed51967285235091f8e77c900e7dafdc9e6b658be09fef58f7c6b5e31ba8e3357efd2268c3c2d42efad8d5d16bbf653050c60926610e703e97c896c3b0d81f75a73feb7e7beefec0909695fe300b7a282c4ca725ef039390cd119910097773e01f4102424cefd81721490893724ffcea1683623b05715e0e79acf3cb27df674ddd373af09c9425e0b5d8bf161474767c46c249b89c6420207cf18e27aa4a7e73704f1f933d83d585ada44773fef856032a138cedaf086a36052f99f438ca12e4d1f75b62e5a914cecd0e7975f51b6174f9c70877bbd7f18380504147860f048e5ad3f58f979bf22153590c54b3997078f92dc367ca467af838003c72dd7706e6e602923b237c53c468f760244eff5325363508197b0483869d1327c941b89a5b04a4ac95e72bc03f58d954d2f96bbaa2da7d55c36f2cefbd04ad747a3d5518035ff1c98650cf1a07db69b1a3bee3b1895a10881f545e75686ebed23239f6fca73643cf4cc24cd2921c81d28fba9e9f0782a7ed765aaf7c748ca4541745e79c96313513ef729c7281099847c103c8b438c175365147b65a5aa5b26f4ff1a3bd5db4ba8708df74d0f6d4b42a7c9b3f39f10ae5e1d384cabda02e44970836308492caa7af2a5fdda2581192f9b0879a1a562360aaeabbbb49a5f8bcad8f0a382ba478b2eed1e5de199ed3c39eeb05ee528674ebe620a8fdc2ce0aa0b89e550c489bcb07b5c2d5068a2e9a68c07877c64bb71634830d3f122a9538f281617c37c69ee11bc23557c01e8970e8762926e7db372b384e3ffcfe2c79611436dd11ae1d0380fddd207fdb92e118240672f3b0129510a3c0eb4f7c1f2dbb956b7e43c2369eeae0830d32b4f06e5fdb5ee0afd9d38b02abcfafecb1a5da68c274ee28adc41e04a500b1492ede674d6275bfd6ab27fd5c4a5b74edf2cb0a59906c08a9234e6b78acf3b2303686faf14ba0af5b7bcbe99a6bd0760c7315ae187dd433e40f1f59321d382eb36cd1dee936e80958332aab162cd2a4abbddc1c05055e218ffee7e78d6e51477ed19bff8eb7d2b1f370a46276c27b7b36160e868061fb49257451c2d5848f23b47e8370625214a796ab1f72af57f554db3f3c8f5e346cf9428abb1dae619768a643e0f793a268767cddacc055e9838e1d49539ee9b2300c283b66360b20b7e5cbef2f8fd26d68ea669217163144659766fad3daf15496e3ea0a970897a2eef457a34088151bb9ba6da6f76cd3e309fe01c64b9d7177a490994a24d83fbf41a6dbbce0feb3cda56e59d340ae9b6a787fee28ebe314c1dcb314eebe87ff25d0bc3407fa96641b441afc6abca87c00cc5810a5aee5b9c37dda965813023d59b8a2c2ef05222ffafd8ec2731692012f9382de3fd16e834d5e2df0f4c95bd02a0c55312e3ed5b45cd651fa4437a96cc3bfa90dd92c41a1edf7d465b0de692cfdcb5af0071cd34abade86786f756cb8c75813fe622ea1b5096a5ae82b3dda1a4e8245228d974e1257e4f4835ce0de7e595c5313fff9d9b4313172ae9872258344cb795c26e8275288ad35ea8ab1db21f15160d39ebd2a208b0bcdf6bf2dd21de7173aadf1196e43b1cd1eba35b1bd4d1aa01e068238798aa67d25e22435d888a62861ce104fbc75f790db88747150007def3e94f8364202ea9ab70c76e6c1ac688af84b7119f4072b44d0633773cf3bb00110385325a62bdf8987ed23099798ff0e0f0d0113fec108b41db469d325adfd09955468c97df494e9262c96912b4701e0dcb1bca72ec0f90d24d918e225963baeea480c28987610557f8548afb0565075ffef84d42d8d528d534031aa68d50d63d7ce05b525511eeeb29597c8b779e0f61b70d0411"], 0x0) 912.276725ms ago: executing program 4 (id=2154): r0 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x28000600) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\xeb\x8d\xd4\xf0\xa34\x8bW\x1d\x18v\xd6h\xa8?\x83\xf7\x8fCf<\xf2\xbc\x81\xd0\xe4\x06\xbbu\x01r\x94U\xcc\xb5{Q\x8e\x86\x9a]\x06\xe7\x94\xa0\xd5\xb8\x00\xed\xa0\x96\x84k\x9a\t\x9e\xecK\xa0\x19\x8e\xc5\xec=\x1f)u]\x04:7;Z\x03\xc3\xa3\x12&\xb1;Z-\xbf\xc1\xabO\x16\xc8\x84\xde\x1a\b\xe6\x02\xf8\x8a\x85\x9e\xa8\xe2Z\x14\xee\xdevTj\xe8\x12A\xa6\xab\x80\xd6\xc5\x1da\xa2\x10\xd5\xd0\xf0\x8f\xed\xb7\xa4;c\xa5\xe3*\x97ua\x05Q\x91\xd1\xe5rjp\xb4\x13\"\xb5<\xd5#\x01u0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x76, 0x0, 0x6a, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000, 0x8040, 0x8, 0x44}}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000180000042bbd7000ffdbdf251c108080fc04ff060026000031a7568b1344b35390c59530cce4ab121b84e80f8bd885916976ab4e45fd78ac064b91b719b5d08383091d25b62aa279a074b202f315430081d987b3cc083b7e40876adb2db0fdc6cbd6e3b6180a32c3d6ced1"], 0x1c}}, 0x8000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x40, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x20, @from_mac}, @NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3, {0x9, 0xe, 0xff}}]}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES64=r9, @ANYRES64=r5], 0x30}}, 0x4000090) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 759.152046ms ago: executing program 4 (id=2156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xb0, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfd3a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1260}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x440) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 611.696006ms ago: executing program 4 (id=2157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x5, 0x3}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "81c4"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 306.267195ms ago: executing program 0 (id=2158): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0x60}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, 0x0, 0xffffffffffffff79) 300.887421ms ago: executing program 1 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x80002, 0x88) (rerun: 64) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000080)=0x81, 0x4) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0xf856, @none, 0x0, 0x1}, 0xe) (async, rerun: 32) sendmsg$nl_route(r0, 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) 137.096748ms ago: executing program 3 (id=2160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x4040845) (fail_nth: 2) 31.967944ms ago: executing program 4 (id=2161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r4}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="050009000400000006000e000200000006000f0001000000060011004e21000008000300"], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)="e6dc27813d8ec7955384d3223330617bb1675a097f6e3ba2ba7071d2970c4d2fbc2fe58ac1b3a8e89dbebbf60aef0485cb44b0991c49e07f992385366003f23c1052c576c77def0dbd5efa21c4b3584a3d7853961de18acce870fefc28d7e0be09a01b5a729bbc33b81ec332b29e", 0x6e) 30.718411ms ago: executing program 0 (id=2162): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffff33, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x4, 0x1000, 0x11, @loopback, @mcast2, 0x80, 0x7800, 0x4, 0x1}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r12}, @IFLA_HSR_SLAVE2={0x8, 0x2, r13}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x24000010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) r18 = socket$unix(0x1, 0x1, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r19, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xa, 0x7, 0x4, @empty, @private2, 0x8, 0x80, 0x3, 0x7fff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f00000007c0)={0x620, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8020, 0xd, 0x1, 0xfffffffa}, {0xdb, 0xc, 0x6, 0x4}, {0x0, 0xff, 0x1, 0x1}, {0xe9d9, 0x8, 0x3, 0x10000}, {0xff, 0x6, 0x80, 0x200}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1000, 0x9, 0x0, 0x8001}, {0xff, 0x0, 0x4, 0x9}, {0xf800, 0x40, 0x6, 0xfffffffc}, {0x3, 0x9, 0xfa, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa00}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x843b, 0x6}, {0x0, 0x6, 0x0, 0x7}, {0x1, 0x1b, 0x4b, 0xb9}, {0x2, 0x0, 0x7, 0x1}, {0x1, 0x1, 0x89, 0xf}, {0x2e40, 0x1, 0x1, 0x8}, {0x959, 0x1, 0x3, 0x9}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x363}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r15}, {0x4}}, {{0x8, 0x1, r17}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x15}}}]}}]}, 0x620}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xff90}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=2163): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x68, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0x2}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={0x0}}, 0x20000884) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000140)=""/19, &(0x7f0000000200)=0x13) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070607bd700afddbdf252d00000008002f00000000000a0001007770616e310000000c0005000203aaaaaaaaaaaa05002b00a6149eb8038843f47adb7b3d144ee96b0000cfe1fb8c1321cb27ab7cc11a698b1961e97c976da01ae3da90d429b37995ecb54dc1d9e8e23d9852acdc306ea563288a"], 0x3c}}, 0x4008400) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x51c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4f0, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'macvtap0\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'xfrm0\x00'}, @TCA_U32_SEL={0x494, 0x5, {0x8, 0x1, 0x0, 0x2, 0xfff8, 0x8, 0xff, 0xb, [{0x98, 0x3, 0xffff, 0x1000}, {0x8001, 0x2, 0x10001, 0x7f}, {0x5, 0xfffffffd, 0x80000000, 0xef}, {0x1, 0x1, 0x3, 0x1}, {0xaed, 0x6, 0x3, 0xfffffffc}, {0x3, 0xfff, 0x5a05, 0x5}, {0xf5, 0x1, 0x9, 0x3}, {0x7f, 0xfffffff2, 0x8, 0x10000}, {0xfd, 0x10000, 0x8, 0x4}, {0x2, 0x2c4, 0x3, 0x1}, {0x3, 0x6, 0x3ff, 0x6}, {0x1, 0xffffffff, 0x0, 0x8}, {0x1, 0x4, 0x1, 0x7f}, {0x6, 0x8, 0x7, 0xc}, {0x5, 0x6, 0x9, 0x5}, {0x8, 0xb52e, 0xffffffff, 0x3ff}, {0xfffffff7, 0x5, 0xfffffffb, 0x6}, {0x9, 0x40, 0x6, 0x9}, {0x5, 0x7, 0x4, 0x1000}, {0x4, 0x6, 0x7ff, 0x3}, {0x7, 0x7, 0x0, 0x6}, {0x6, 0x40, 0x7fff, 0x2}, {0x3, 0x2e, 0xffffffff, 0x3}, {0x9, 0x4, 0xffff, 0x3}, {0x80000000, 0x7, 0xb5e, 0xa0}, {0x8, 0x101, 0x8, 0x7}, {0x5ebf, 0x0, 0x3, 0xb21b}, {0x200, 0x4, 0x2, 0xc81}, {0x36, 0x9, 0xf, 0x8}, {0x10, 0x4, 0xa, 0x8b5}, {0x9, 0xfffffff4, 0xffff, 0xd}, {0x772b, 0x1ff, 0x1, 0x2}, {0x9, 0x3, 0x7fff, 0xffff85eb}, {0x0, 0x2, 0x7, 0x1}, {0x100, 0x5, 0x4, 0x8001}, {0x6, 0x6, 0x9, 0xffffffff}, {0x30, 0x4, 0x2, 0xfea3}, {0x5, 0xfffff25a, 0x9, 0x2}, {0xb7, 0x91d2, 0x4, 0x7fff}, {0x2, 0xca, 0x40, 0x5bd4c7fe}, {0x5, 0x8000, 0xb64, 0x98}, {0x1d, 0x1, 0xd, 0xf9}, {0x1, 0x5, 0x9b6, 0x8001}, {0x10000, 0xfff, 0x1, 0x6}, {0x0, 0x6, 0xfffffffe, 0x4}, {0x1, 0x4, 0x0, 0x8}, {0x692, 0xffffffff, 0x9, 0x800}, {0x4, 0x9, 0x6, 0xc}, {0x0, 0x0, 0xd40, 0x7}, {0x27, 0x952, 0x3, 0x9}, {0x2, 0x10000, 0x5, 0x1}, {0x0, 0xa7c3, 0x0, 0xec}, {0x101, 0x0, 0x7, 0x6}, {0xfffffff8, 0x1, 0x7fffffff}, {0x80, 0x7, 0x1, 0x401}, {0x8, 0xc, 0x4, 0x9}, {0x1, 0x8, 0xc7, 0x5}, {0x30, 0x10, 0xc2b8, 0x4}, {0x3, 0x1, 0x7, 0x4df4}, {0x4, 0x2, 0x5, 0x101}, {0x9, 0x0, 0x7, 0x3}, {0x5, 0x100, 0x2, 0x101}, {0x80000001, 0x5, 0x6, 0x6}, {0x7, 0x7, 0x2, 0x60}, {0x7f, 0x10001, 0x7b53, 0x63}, {0x3, 0x4, 0x9c77, 0x4}, {0xe, 0x6, 0x8, 0x5}, {0x772, 0x6, 0x6, 0x9}, {0x7, 0x9, 0x1, 0x800}, {0x2, 0x6, 0x4, 0x9}, {0x8, 0x6000000, 0xa, 0x9}, {0xbad, 0x7, 0x5, 0x6}]}}, @TCA_U32_MARK={0x10, 0xa, {0x40, 0x93b}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa8}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xf}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x70}, @TCA_U32_DIVISOR={0x8, 0x4, 0x47}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): l) [ 194.895832][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.895844][ T9798] Call Trace: [ 194.895853][ T9798] [ 194.895862][ T9798] dump_stack_lvl+0x189/0x250 [ 194.895893][ T9798] ? __pfx____ratelimit+0x10/0x10 [ 194.895915][ T9798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.895941][ T9798] ? __pfx__printk+0x10/0x10 [ 194.895964][ T9798] ? __lock_acquire+0xab9/0xd20 [ 194.895994][ T9798] should_fail_ex+0x414/0x560 [ 194.896029][ T9798] get_futex_key+0x1a8/0x1660 [ 194.896055][ T9798] ? look_up_lock_class+0x74/0x170 [ 194.896088][ T9798] ? __pfx_get_futex_key+0x10/0x10 [ 194.896112][ T9798] ? __lock_acquire+0xab9/0xd20 [ 194.896143][ T9798] futex_wake+0xf8/0x560 [ 194.896162][ T9798] ? __pfx___mutex_trylock_common+0x10/0x10 [ 194.896191][ T9798] ? __pfx_futex_wake+0x10/0x10 [ 194.896214][ T9798] ? __lock_acquire+0xab9/0xd20 [ 194.896241][ T9798] do_futex+0x395/0x420 [ 194.896272][ T9798] ? __pfx_do_futex+0x10/0x10 [ 194.896302][ T9798] ? __might_fault+0xb0/0x130 [ 194.896332][ T9798] mm_release+0x188/0x390 [ 194.896355][ T9798] ? __pfx_mm_release+0x10/0x10 [ 194.896375][ T9798] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.896409][ T9798] exit_mm+0xa8/0x2c0 [ 194.896435][ T9798] ? __pfx_exit_mm+0x10/0x10 [ 194.896465][ T9798] ? rcu_is_watching+0x15/0xb0 [ 194.896492][ T9798] do_exit+0x648/0x2300 [ 194.896526][ T9798] ? do_raw_spin_lock+0x121/0x290 [ 194.896555][ T9798] ? __pfx_do_exit+0x10/0x10 [ 194.896599][ T9798] do_group_exit+0x21c/0x2d0 [ 194.896626][ T9798] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.896652][ T9798] get_signal+0x1285/0x1340 [ 194.896702][ T9798] arch_do_signal_or_restart+0xa0/0x790 [ 194.896733][ T9798] ? __fget_files+0x3a0/0x420 [ 194.896753][ T9798] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.896801][ T9798] ? exit_to_user_mode_loop+0x40/0x130 [ 194.896824][ T9798] exit_to_user_mode_loop+0x72/0x130 [ 194.896844][ T9798] do_syscall_64+0x2bd/0xfa0 [ 194.896866][ T9798] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.896888][ T9798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.896908][ T9798] ? clear_bhb_loop+0x60/0xb0 [ 194.896932][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.896951][ T9798] RIP: 0033:0x7f2c0bb8f749 [ 194.896967][ T9798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.896985][ T9798] RSP: 002b:00007f2c0c998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 194.897006][ T9798] RAX: 0000000000000030 RBX: 00007f2c0bde5fa0 RCX: 00007f2c0bb8f749 [ 194.897020][ T9798] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 194.897033][ T9798] RBP: 00007f2c0c998090 R08: 0000000000000000 R09: 0000000000000000 [ 194.897046][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.897058][ T9798] R13: 00007f2c0bde6038 R14: 00007f2c0bde5fa0 R15: 00007ffcfff9edc8 [ 194.897092][ T9798] [ 195.734267][ T9840] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 195.750609][ T9841] netlink: zone id is out of range [ 195.756984][ T9841] netlink: zone id is out of range [ 195.763067][ T9841] netlink: zone id is out of range [ 195.768949][ T9841] netlink: zone id is out of range [ 195.774516][ T9841] netlink: zone id is out of range [ 195.782610][ T9841] netlink: zone id is out of range [ 195.789160][ T9841] netlink: zone id is out of range [ 195.794608][ T9841] netlink: zone id is out of range [ 195.803555][ T9841] netlink: zone id is out of range [ 195.810056][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 195.866201][ T9840] 8021q: adding VLAN 0 to HW filter on device bond10 [ 195.879674][ T9844] bond10: entered allmulticast mode [ 196.002285][ T9835] syzkaller0: entered promiscuous mode [ 196.008721][ T9835] syzkaller0: entered allmulticast mode [ 196.031737][ T9846] bond10: (slave ip6gretap1): making interface the new active one [ 196.041494][ T9846] ip6gretap1: entered allmulticast mode [ 196.050997][ T9846] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 196.246624][ T9853] syzkaller1: entered promiscuous mode [ 196.252133][ T9853] syzkaller1: entered allmulticast mode [ 196.651680][ T9860] FAULT_INJECTION: forcing a failure. [ 196.651680][ T9860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.670611][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT(full) [ 196.670639][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.670651][ T9860] Call Trace: [ 196.670659][ T9860] [ 196.670666][ T9860] dump_stack_lvl+0x189/0x250 [ 196.670697][ T9860] ? __pfx____ratelimit+0x10/0x10 [ 196.670717][ T9860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.670742][ T9860] ? __pfx__printk+0x10/0x10 [ 196.670761][ T9860] ? __might_fault+0xb0/0x130 [ 196.670798][ T9860] should_fail_ex+0x414/0x560 [ 196.670838][ T9860] _copy_from_iter+0x1de/0x1790 [ 196.670857][ T9860] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 196.670882][ T9860] ? kmalloc_reserve+0xbd/0x290 [ 196.670915][ T9860] ? __pfx__copy_from_iter+0x10/0x10 [ 196.670932][ T9860] ? __alloc_skb+0x2f1/0x430 [ 196.670956][ T9860] ? __pfx___alloc_skb+0x10/0x10 [ 196.670973][ T9860] ? netlink_autobind+0xdb/0x300 [ 196.670999][ T9860] ? netlink_sendmsg+0x642/0xb30 [ 196.671022][ T9860] ? skb_put+0x11b/0x210 [ 196.671047][ T9860] netlink_sendmsg+0x6b2/0xb30 [ 196.671079][ T9860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.671106][ T9860] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.671136][ T9860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.671154][ T9860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.671176][ T9860] __sock_sendmsg+0x21c/0x270 [ 196.671204][ T9860] ____sys_sendmsg+0x505/0x830 [ 196.671234][ T9860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.671261][ T9860] ? import_iovec+0x74/0xa0 [ 196.671296][ T9860] ___sys_sendmsg+0x21f/0x2a0 [ 196.671318][ T9860] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.671364][ T9860] ? __fget_files+0x2a/0x420 [ 196.671380][ T9860] ? __fget_files+0x3a0/0x420 [ 196.671403][ T9860] __x64_sys_sendmsg+0x19b/0x260 [ 196.671426][ T9860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.671471][ T9860] do_syscall_64+0xfa/0xfa0 [ 196.671493][ T9860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.671509][ T9860] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 196.671525][ T9860] ? clear_bhb_loop+0x60/0xb0 [ 196.671544][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.671561][ T9860] RIP: 0033:0x7fca9178f749 [ 196.671576][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.671590][ T9860] RSP: 002b:00007fca92689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.671608][ T9860] RAX: ffffffffffffffda RBX: 00007fca919e5fa0 RCX: 00007fca9178f749 [ 196.671619][ T9860] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 196.671629][ T9860] RBP: 00007fca92689090 R08: 0000000000000000 R09: 0000000000000000 [ 196.671639][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.671648][ T9860] R13: 00007fca919e6038 R14: 00007fca919e5fa0 R15: 00007fffe144c338 [ 196.671677][ T9860] [ 196.732860][ T9864] Cannot find set identified by id 65534 to match [ 196.868437][ T9862] wg1 speed is unknown, defaulting to 1000 [ 196.892633][ T9868] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1092'. [ 197.188814][ T9871] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 197.215478][ T9871] netlink: 'syz.1.1093': attribute type 11 has an invalid length. [ 197.238886][ T9871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1093'. [ 197.294694][ T9874] netlink: 'syz.0.1094': attribute type 3 has an invalid length. [ 197.303257][ T9874] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 197.317588][ T9874] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1094'. [ 198.233407][ T9901] bridge0: entered promiscuous mode [ 198.277601][ T9901] macsec1: entered promiscuous mode [ 198.288560][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 198.304341][ T9901] bridge0: port 3(macsec1) entered blocking state [ 198.313449][ T9901] bridge0: port 3(macsec1) entered disabled state [ 198.343918][ T9901] macsec1: entered allmulticast mode [ 198.359669][ T9901] bridge0: entered allmulticast mode [ 198.381259][ T9901] macsec1: left allmulticast mode [ 198.405751][ T9901] bridge0: left allmulticast mode [ 198.463247][ T9901] bridge0: left promiscuous mode [ 198.576451][ T9902] wg1 speed is unknown, defaulting to 1000 [ 198.906578][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 198.931376][ T9916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1106'. [ 201.364143][ T9929] wg1 speed is unknown, defaulting to 1000 [ 201.537690][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 201.544481][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 201.544504][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 201.930608][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 201.967246][ T9968] FAULT_INJECTION: forcing a failure. [ 201.967246][ T9968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.983011][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.1.1119 Not tainted syzkaller #0 PREEMPT(full) [ 201.983040][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.983052][ T9968] Call Trace: [ 201.983060][ T9968] [ 201.983070][ T9968] dump_stack_lvl+0x189/0x250 [ 201.983107][ T9968] ? __pfx____ratelimit+0x10/0x10 [ 201.983130][ T9968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.983157][ T9968] ? __pfx__printk+0x10/0x10 [ 201.983194][ T9968] should_fail_ex+0x414/0x560 [ 201.983230][ T9968] _copy_to_user+0x31/0xb0 [ 201.983259][ T9968] mptcp_getsockopt+0x171d/0x1be0 [ 201.983307][ T9968] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 201.983335][ T9968] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 201.983362][ T9968] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 201.983416][ T9968] ? __lock_acquire+0xab9/0xd20 [ 201.983451][ T9968] ? __lock_acquire+0xab9/0xd20 [ 201.983498][ T9968] ? __lock_acquire+0xab9/0xd20 [ 201.983621][ T9968] ? __might_fault+0xb0/0x130 [ 201.983668][ T9968] ? sock_common_getsockopt+0x2d/0xb0 [ 201.983699][ T9968] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 201.983732][ T9968] do_sock_getsockopt+0x372/0x450 [ 201.983760][ T9968] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 201.983790][ T9968] ? do_syscall_64+0xa0/0xfa0 [ 201.983813][ T9968] ? __fget_files+0x2a/0x420 [ 201.983831][ T9968] ? __fget_files+0x3a0/0x420 [ 201.983849][ T9968] ? __fget_files+0x2a/0x420 [ 201.983877][ T9968] __x64_sys_getsockopt+0x1a5/0x250 [ 201.983900][ T9968] ? do_syscall_64+0xa0/0xfa0 [ 201.983925][ T9968] ? do_syscall_64+0xa0/0xfa0 [ 201.983953][ T9968] do_syscall_64+0xfa/0xfa0 [ 201.983974][ T9968] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.983998][ T9968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.984019][ T9968] ? clear_bhb_loop+0x60/0xb0 [ 201.984042][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.984061][ T9968] RIP: 0033:0x7f5e32b8f749 [ 201.984080][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.984098][ T9968] RSP: 002b:00007f5e30df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 201.984120][ T9968] RAX: ffffffffffffffda RBX: 00007f5e32de5fa0 RCX: 00007f5e32b8f749 [ 201.984135][ T9968] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 201.984148][ T9968] RBP: 00007f5e30df6090 R08: 00002000000005c0 R09: 0000000000000000 [ 201.984162][ T9968] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.984175][ T9968] R13: 00007f5e32de6038 R14: 00007f5e32de5fa0 R15: 00007ffeb07e6718 [ 201.984211][ T9968] [ 202.414416][ T9978] IPv6: Can't replace route, no match found [ 202.641612][ T9984] wg1 speed is unknown, defaulting to 1000 [ 202.827826][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1126'. [ 202.914245][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 202.928465][ T9994] tap0: tun_chr_ioctl cmd 2148553947 [ 202.937051][ T9994] tap0: tun_chr_ioctl cmd 2147767521 [ 202.945732][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 202.954798][ T9994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.963640][ T9994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.146845][ T9973] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 203.218599][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 203.261323][T10001] macvtap1: entered promiscuous mode [ 203.266987][T10001] ip6gretap0: entered promiscuous mode [ 203.273326][T10001] macvtap1: entered allmulticast mode [ 203.279204][T10001] ip6gretap0: entered allmulticast mode [ 203.588176][T10013] wg1 speed is unknown, defaulting to 1000 [ 203.647360][T10014] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1132'. [ 203.672313][T10014] net_ratelimit: 45 callbacks suppressed [ 203.672335][T10014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.775184][T10009] wg1 speed is unknown, defaulting to 1000 [ 204.076147][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'. [ 204.137854][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 204.542393][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 204.612587][T10055] ip6gretap0: entered promiscuous mode [ 204.632101][T10055] macvtap2: entered promiscuous mode [ 204.645496][T10055] macvtap2: entered allmulticast mode [ 204.670315][T10055] ip6gretap0: entered allmulticast mode [ 204.795232][T10064] wg1 speed is unknown, defaulting to 1000 [ 205.713176][T10085] FAULT_INJECTION: forcing a failure. [ 205.713176][T10085] name failslab, interval 1, probability 0, space 0, times 0 [ 205.745714][T10085] CPU: 0 UID: 0 PID: 10085 Comm: syz.2.1151 Not tainted syzkaller #0 PREEMPT(full) [ 205.745763][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.745775][T10085] Call Trace: [ 205.745783][T10085] [ 205.745792][T10085] dump_stack_lvl+0x189/0x250 [ 205.745860][T10085] ? __pfx____ratelimit+0x10/0x10 [ 205.745883][T10085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.745909][T10085] ? __pfx__printk+0x10/0x10 [ 205.745930][T10085] ? __pfx___might_resched+0x10/0x10 [ 205.745951][T10085] ? fs_reclaim_acquire+0x7d/0x100 [ 205.745973][T10085] should_fail_ex+0x414/0x560 [ 205.746008][T10085] should_failslab+0xa8/0x100 [ 205.746031][T10085] kmem_cache_alloc_node_noprof+0x77/0x710 [ 205.746059][T10085] ? __alloc_skb+0x255/0x430 [ 205.746078][T10085] ? napi_skb_cache_get+0x4a5/0x790 [ 205.746097][T10085] ? napi_skb_cache_get+0x151/0x790 [ 205.746123][T10085] __alloc_skb+0x255/0x430 [ 205.746146][T10085] ? __pfx___alloc_skb+0x10/0x10 [ 205.746169][T10085] ? netlink_autobind+0xdb/0x300 [ 205.746193][T10085] ? netlink_autobind+0x2c2/0x300 [ 205.746223][T10085] netlink_sendmsg+0x5c6/0xb30 [ 205.746258][T10085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.746287][T10085] ? aa_sock_msg_perm+0xf1/0x1d0 [ 205.746317][T10085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.746336][T10085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.746361][T10085] __sock_sendmsg+0x21c/0x270 [ 205.746391][T10085] ____sys_sendmsg+0x505/0x830 [ 205.746420][T10085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.746453][T10085] ? import_iovec+0x74/0xa0 [ 205.746481][T10085] ___sys_sendmsg+0x21f/0x2a0 [ 205.746507][T10085] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.746568][T10085] ? __fget_files+0x2a/0x420 [ 205.746586][T10085] ? __fget_files+0x3a0/0x420 [ 205.746615][T10085] __x64_sys_sendmsg+0x19b/0x260 [ 205.746643][T10085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.746681][T10085] ? __pfx_ksys_write+0x10/0x10 [ 205.746712][T10085] ? do_syscall_64+0xbe/0xfa0 [ 205.746739][T10085] do_syscall_64+0xfa/0xfa0 [ 205.746760][T10085] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.746783][T10085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.746802][T10085] ? clear_bhb_loop+0x60/0xb0 [ 205.746832][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.746851][T10085] RIP: 0033:0x7fa8d418f749 [ 205.746869][T10085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.746886][T10085] RSP: 002b:00007fa8d500b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.746907][T10085] RAX: ffffffffffffffda RBX: 00007fa8d43e5fa0 RCX: 00007fa8d418f749 [ 205.746922][T10085] RDX: 0000000020000880 RSI: 0000200000000200 RDI: 0000000000000003 [ 205.746935][T10085] RBP: 00007fa8d500b090 R08: 0000000000000000 R09: 0000000000000000 [ 205.746947][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.746959][T10085] R13: 00007fa8d43e6038 R14: 00007fa8d43e5fa0 R15: 00007ffca79abcd8 [ 205.746992][T10085] [ 206.184196][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 206.678556][T10099] wg1 speed is unknown, defaulting to 1000 [ 206.809655][T10113] Cannot find add_set index 4 as target [ 206.838415][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1158'. [ 207.011819][T10126] macsec1: entered promiscuous mode [ 207.017585][T10126] bridge0: entered promiscuous mode [ 207.024809][T10126] bridge0: port 1(macsec1) entered blocking state [ 207.035760][T10126] bridge0: port 1(macsec1) entered disabled state [ 207.043217][T10126] macsec1: entered allmulticast mode [ 207.049024][T10126] bridge0: entered allmulticast mode [ 207.061303][T10126] macsec1: left allmulticast mode [ 207.075428][T10126] bridge0: left allmulticast mode [ 207.087910][T10126] bridge0: left promiscuous mode [ 207.298619][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 207.719563][T10153] netlink: 'syz.2.1171': attribute type 3 has an invalid length. [ 207.849791][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 207.961980][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 208.218157][T10175] macsec1: entered promiscuous mode [ 208.223522][T10175] bridge0: entered promiscuous mode [ 208.231664][T10175] bridge0: port 1(macsec1) entered blocking state [ 208.238771][T10175] bridge0: port 1(macsec1) entered disabled state [ 208.246314][T10175] macsec1: entered allmulticast mode [ 208.252964][T10175] bridge0: entered allmulticast mode [ 208.264062][T10175] macsec1: left allmulticast mode [ 208.276598][T10175] bridge0: left allmulticast mode [ 208.286198][T10175] bridge0: left promiscuous mode [ 208.385884][T10173] wg1 speed is unknown, defaulting to 1000 [ 208.784501][T10195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.808468][T10195] FAULT_INJECTION: forcing a failure. [ 208.808468][T10195] name failslab, interval 1, probability 0, space 0, times 0 [ 208.825110][T10195] CPU: 0 UID: 0 PID: 10195 Comm: syz.0.1184 Not tainted syzkaller #0 PREEMPT(full) [ 208.825138][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.825151][T10195] Call Trace: [ 208.825159][T10195] [ 208.825168][T10195] dump_stack_lvl+0x189/0x250 [ 208.825197][T10195] ? __pfx____ratelimit+0x10/0x10 [ 208.825218][T10195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.825244][T10195] ? __pfx__printk+0x10/0x10 [ 208.825268][T10195] ? __pfx___might_resched+0x10/0x10 [ 208.825288][T10195] ? fs_reclaim_acquire+0x7d/0x100 [ 208.825311][T10195] should_fail_ex+0x414/0x560 [ 208.825345][T10195] ? __pfx_sock_alloc_inode+0x10/0x10 [ 208.825370][T10195] should_failslab+0xa8/0x100 [ 208.825391][T10195] ? __pfx_sock_alloc_inode+0x10/0x10 [ 208.825416][T10195] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 208.825443][T10195] ? sock_alloc_inode+0x28/0xc0 [ 208.825468][T10195] ? format_decode+0x5a3/0xe30 [ 208.825519][T10195] ? __pfx_sock_alloc_inode+0x10/0x10 [ 208.825553][T10195] sock_alloc_inode+0x28/0xc0 [ 208.825579][T10195] alloc_inode+0x6a/0x1b0 [ 208.825611][T10195] __sock_create+0x12d/0x9f0 [ 208.825651][T10195] mptcp_subflow_create_socket+0xf0/0x7d0 [ 208.825682][T10195] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 208.825713][T10195] ? tomoyo_check_inet_address+0x275/0x8c0 [ 208.825748][T10195] __mptcp_nmpc_sk+0x148/0x760 [ 208.825776][T10195] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 208.825802][T10195] ? look_up_lock_class+0x74/0x170 [ 208.825834][T10195] mptcp_connect+0x71/0x830 [ 208.825861][T10195] __inet_stream_connect+0x2ae/0xe70 [ 208.825897][T10195] ? __local_bh_enable_ip+0x12d/0x1c0 [ 208.825919][T10195] ? __pfx___inet_stream_connect+0x10/0x10 [ 208.825944][T10195] ? __local_bh_enable_ip+0x12d/0x1c0 [ 208.825965][T10195] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 208.825999][T10195] inet_stream_connect+0x66/0xa0 [ 208.826025][T10195] __sys_connect+0x316/0x440 [ 208.826044][T10195] ? __fget_files+0x3a0/0x420 [ 208.826063][T10195] ? __pfx___sys_connect+0x10/0x10 [ 208.826095][T10195] ? __pfx_ksys_write+0x10/0x10 [ 208.826131][T10195] __x64_sys_connect+0x7a/0x90 [ 208.826154][T10195] do_syscall_64+0xfa/0xfa0 [ 208.826176][T10195] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.826199][T10195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.826218][T10195] ? clear_bhb_loop+0x60/0xb0 [ 208.826242][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.826261][T10195] RIP: 0033:0x7fca9178f749 [ 208.826280][T10195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.826298][T10195] RSP: 002b:00007fca92689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 208.826319][T10195] RAX: ffffffffffffffda RBX: 00007fca919e5fa0 RCX: 00007fca9178f749 [ 208.826334][T10195] RDX: 000000000000001c RSI: 0000200000000840 RDI: 000000000000000b [ 208.826347][T10195] RBP: 00007fca92689090 R08: 0000000000000000 R09: 0000000000000000 [ 208.826359][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.826371][T10195] R13: 00007fca919e6038 R14: 00007fca919e5fa0 R15: 00007fffe144c338 [ 208.826407][T10195] [ 209.202551][T10195] socket: no more sockets [ 209.445133][T10200] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 209.449768][T10198] netlink: 'syz.3.1185': attribute type 3 has an invalid length. [ 209.548514][T10203] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1186'. [ 209.796067][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 209.836507][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 211.826841][T10215] syzkaller0: entered promiscuous mode [ 211.832353][T10215] syzkaller0: entered allmulticast mode [ 212.119834][T10241] netlink: 'syz.3.1196': attribute type 3 has an invalid length. [ 212.126546][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.138474][T10241] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 212.166330][T10241] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1196'. [ 212.181305][T10242] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1194'. [ 212.220690][T10242] netlink: 'syz.1.1194': attribute type 5 has an invalid length. [ 212.266547][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 212.280402][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1194'. [ 212.299956][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 212.320864][T10242] ip6erspan0: entered promiscuous mode [ 212.815562][T10270] netlink: 'syz.1.1203': attribute type 3 has an invalid length. [ 213.001618][T10273] __nla_validate_parse: 2 callbacks suppressed [ 213.001637][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1205'. [ 213.028119][T10273] mac80211_hwsim hwsim15 wlan1: Master is either lo or non-ether device [ 213.039036][T10275] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 213.090669][T10275] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.129675][T10277] syzkaller0: entered promiscuous mode [ 213.147157][T10277] syzkaller0: entered allmulticast mode [ 213.479596][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 213.546068][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 213.742808][T10305] bridge0: entered promiscuous mode [ 213.749468][T10305] macsec1: entered promiscuous mode [ 213.759535][T10305] bridge0: port 3(macsec1) entered blocking state [ 213.766226][T10305] bridge0: port 3(macsec1) entered disabled state [ 213.773041][T10305] macsec1: entered allmulticast mode [ 213.779140][T10305] bridge0: entered allmulticast mode [ 213.789733][T10305] macsec1: left allmulticast mode [ 213.794966][T10305] bridge0: left allmulticast mode [ 213.803996][T10305] bridge0: left promiscuous mode [ 214.020624][T10315] Cannot find set identified by id 65534 to match [ 214.062529][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 214.114785][T10321] syzkaller0: entered promiscuous mode [ 214.120740][T10321] syzkaller0: entered allmulticast mode [ 214.495828][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 214.689436][T10333] wg1 speed is unknown, defaulting to 1000 [ 214.931697][T10338] 8021q: VLANs not supported on caif0 [ 215.009759][T10343] wg1 speed is unknown, defaulting to 1000 [ 215.094008][T10359] netlink: 'syz.2.1227': attribute type 8 has an invalid length. [ 215.251776][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1230'. [ 215.363125][T10374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.475101][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 215.550333][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 215.690005][T10381] IPv6: Can't replace route, no match found [ 215.970799][T10391] syzkaller0: entered promiscuous mode [ 215.986022][T10391] syzkaller0: entered allmulticast mode [ 216.430114][T10397] wg1 speed is unknown, defaulting to 1000 [ 216.508226][T10400] wg1 speed is unknown, defaulting to 1000 [ 216.515027][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 216.621287][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.766480][T10407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.929744][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 217.024333][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1244'. [ 217.624086][T10454] Cannot find set identified by id 65534 to match [ 217.975757][T10465] wg1 speed is unknown, defaulting to 1000 [ 218.326338][T10478] wg1 speed is unknown, defaulting to 1000 [ 218.501436][T10489] __nla_validate_parse: 3 callbacks suppressed [ 218.501457][T10489] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1262'. [ 218.663734][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1253'. [ 218.970225][T10512] tipc: Started in network mode [ 218.985445][T10512] tipc: Node identity be7e5201c707, cluster identity 4711 [ 218.993796][T10512] tipc: Enabled bearer , priority 0 [ 219.022394][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'. [ 219.081602][T10512] 8021q: adding VLAN 0 to HW filter on device bond11 [ 219.131464][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 219.152977][T10514] 8021q: adding VLAN 0 to HW filter on device bond11 [ 219.163827][T10514] bond11: (slave sit1): The slave device specified does not support setting the MAC address [ 219.176811][T10514] bond11: (slave sit1): Error -95 calling set_mac_address [ 219.208314][T10512] syzkaller0: entered promiscuous mode [ 219.226719][T10512] syzkaller0: entered allmulticast mode [ 219.371273][T10512] sch_fq: defrate 346 ignored. [ 219.380032][T10514] tipc: Resetting bearer [ 219.390064][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 219.401372][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 219.431118][T10510] tipc: Resetting bearer [ 219.470415][T10510] tipc: Disabling bearer [ 219.483202][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 219.493229][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 219.682300][T10543] syzkaller0: entered promiscuous mode [ 219.688084][T10543] syzkaller0: entered allmulticast mode [ 219.781873][T10546] netlink: 'syz.4.1278': attribute type 10 has an invalid length. [ 219.793226][T10546] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 219.801415][T10546] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 219.810879][T10546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 219.919409][T10556] wg1 speed is unknown, defaulting to 1000 [ 219.929805][T10558] netlink: 'syz.4.1282': attribute type 3 has an invalid length. [ 220.078901][T10567] bridge0: entered promiscuous mode [ 220.084792][T10567] macsec1: entered promiscuous mode [ 220.092491][T10567] bridge0: port 3(macsec1) entered blocking state [ 220.104068][T10567] bridge0: port 3(macsec1) entered disabled state [ 220.111797][T10567] macsec1: entered allmulticast mode [ 220.117600][T10567] bridge0: entered allmulticast mode [ 220.126504][T10567] macsec1: left allmulticast mode [ 220.131659][T10567] bridge0: left allmulticast mode [ 220.138611][T10567] bridge0: left promiscuous mode [ 220.296446][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 220.394148][T10581] wg1 speed is unknown, defaulting to 1000 [ 220.516371][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1288'. [ 220.569474][T10590] FAULT_INJECTION: forcing a failure. [ 220.569474][T10590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.589819][T10590] CPU: 0 UID: 0 PID: 10590 Comm: syz.1.1288 Not tainted syzkaller #0 PREEMPT(full) [ 220.589848][T10590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.589860][T10590] Call Trace: [ 220.589868][T10590] [ 220.589877][T10590] dump_stack_lvl+0x189/0x250 [ 220.589908][T10590] ? __pfx____ratelimit+0x10/0x10 [ 220.589930][T10590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.589956][T10590] ? __pfx__printk+0x10/0x10 [ 220.589976][T10590] ? __might_fault+0xb0/0x130 [ 220.590015][T10590] should_fail_ex+0x414/0x560 [ 220.590048][T10590] _copy_from_user+0x2d/0xb0 [ 220.590073][T10590] ___sys_sendmsg+0x158/0x2a0 [ 220.590099][T10590] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.590159][T10590] ? __fget_files+0x2a/0x420 [ 220.590177][T10590] ? __fget_files+0x3a0/0x420 [ 220.590205][T10590] __x64_sys_sendmsg+0x19b/0x260 [ 220.590232][T10590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.590266][T10590] ? __pfx_ksys_write+0x10/0x10 [ 220.590297][T10590] ? do_syscall_64+0xbe/0xfa0 [ 220.590324][T10590] do_syscall_64+0xfa/0xfa0 [ 220.590345][T10590] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.590367][T10590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.590385][T10590] ? clear_bhb_loop+0x60/0xb0 [ 220.590409][T10590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.590428][T10590] RIP: 0033:0x7f5e32b8f749 [ 220.590445][T10590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.590461][T10590] RSP: 002b:00007f5e30dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.590483][T10590] RAX: ffffffffffffffda RBX: 00007f5e32de6090 RCX: 00007f5e32b8f749 [ 220.590497][T10590] RDX: 0000000004040845 RSI: 0000200000000680 RDI: 0000000000000003 [ 220.590510][T10590] RBP: 00007f5e30dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 220.590523][T10590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.590534][T10590] R13: 00007f5e32de6128 R14: 00007f5e32de6090 R15: 00007ffeb07e6718 [ 220.590567][T10590] [ 221.395168][T10604] netlink: 'syz.1.1293': attribute type 3 has an invalid length. [ 221.938563][T10624] wg1 speed is unknown, defaulting to 1000 [ 222.166362][T10631] erspan0: left allmulticast mode [ 222.899328][T10634] infiniband syz2: set active [ 222.911451][T10659] netlink: 'syz.4.1310': attribute type 3 has an invalid length. [ 222.925179][T10634] infiniband syz2: added veth0_to_bond [ 223.045070][T10634] RDS/IB: syz2: added [ 223.050880][T10634] smc: adding ib device syz2 with port count 1 [ 223.057599][T10634] smc: ib device syz2 port 1 has no pnetid [ 223.248242][T10671] Cannot find set identified by id 65534 to match [ 223.796111][ T25] block nbd0: Possible stuck request ffff888024d0e000: control (read@0,1024B). Runtime 120 seconds [ 223.809210][ T25] block nbd0: Possible stuck request ffff888024d0e1c0: control (read@1024,1024B). Runtime 120 seconds [ 223.820624][ T25] block nbd0: Possible stuck request ffff888024d0e380: control (read@2048,1024B). Runtime 120 seconds [ 223.831729][ T25] block nbd0: Possible stuck request ffff888024d0e540: control (read@3072,1024B). Runtime 120 seconds [ 224.178351][T10698] netlink: 'syz.0.1324': attribute type 3 has an invalid length. [ 224.612023][T10716] __nla_validate_parse: 5 callbacks suppressed [ 224.612044][T10716] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1327'. [ 224.631172][T10716] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 224.662798][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 224.774866][T10718] bond0: (slave bond_slave_1): Releasing backup interface [ 224.802489][T10723] FAULT_INJECTION: forcing a failure. [ 224.802489][T10723] name failslab, interval 1, probability 0, space 0, times 0 [ 224.815197][T10723] CPU: 1 UID: 0 PID: 10723 Comm: syz.0.1330 Not tainted syzkaller #0 PREEMPT(full) [ 224.815226][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.815238][T10723] Call Trace: [ 224.815247][T10723] [ 224.815258][T10723] dump_stack_lvl+0x189/0x250 [ 224.815288][T10723] ? __pfx____ratelimit+0x10/0x10 [ 224.815309][T10723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.815334][T10723] ? __pfx__printk+0x10/0x10 [ 224.815358][T10723] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 224.815389][T10723] should_fail_ex+0x414/0x560 [ 224.815424][T10723] should_failslab+0xa8/0x100 [ 224.815447][T10723] kmem_cache_alloc_noprof+0x74/0x6e0 [ 224.815474][T10723] ? skb_clone+0x212/0x3a0 [ 224.815505][T10723] skb_clone+0x212/0x3a0 [ 224.815534][T10723] bpf_clone_redirect+0xad/0x3d0 [ 224.815560][T10723] ? bpf_test_run+0x192/0x7a0 [ 224.815583][T10723] bpf_prog_9299a0b1a05450b6+0x5f/0x68 [ 224.815616][T10723] ? preempt_schedule+0xae/0xc0 [ 224.815636][T10723] ? bpf_test_run+0x192/0x7a0 [ 224.815660][T10723] ? preempt_schedule_common+0x83/0xd0 [ 224.815683][T10723] ? preempt_schedule+0xae/0xc0 [ 224.815704][T10723] ? __pfx_preempt_schedule+0x10/0x10 [ 224.815728][T10723] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 224.815761][T10723] ? __local_bh_disable_ip+0xf1/0x190 [ 224.815783][T10723] ? __pfx___cant_migrate+0x10/0x10 [ 224.815803][T10723] ? __local_bh_enable_ip+0x12d/0x1c0 [ 224.815825][T10723] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 224.815851][T10723] ? bpf_test_timer_continue+0x10d/0x320 [ 224.815880][T10723] bpf_test_run+0x313/0x7a0 [ 224.815924][T10723] ? __pfx_bpf_test_run+0x10/0x10 [ 224.815963][T10723] ? eth_type_trans+0x35e/0x6d0 [ 224.815997][T10723] ? convert___skb_to_skb+0x3d/0x590 [ 224.816024][T10723] bpf_prog_test_run_skb+0xb4e/0x1550 [ 224.816055][T10723] ? __fget_files+0x2a/0x420 [ 224.816077][T10723] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 224.816100][T10723] bpf_prog_test_run+0x2c7/0x340 [ 224.816124][T10723] __sys_bpf+0x562/0x860 [ 224.816144][T10723] ? __pfx___sys_bpf+0x10/0x10 [ 224.816180][T10723] ? ksys_write+0x22a/0x250 [ 224.816210][T10723] ? __pfx_ksys_write+0x10/0x10 [ 224.816244][T10723] __x64_sys_bpf+0x7c/0x90 [ 224.816273][T10723] do_syscall_64+0xfa/0xfa0 [ 224.816295][T10723] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.816318][T10723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.816337][T10723] ? clear_bhb_loop+0x60/0xb0 [ 224.816360][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.816379][T10723] RIP: 0033:0x7fca9178f749 [ 224.816397][T10723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.816414][T10723] RSP: 002b:00007fca92689038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.816436][T10723] RAX: ffffffffffffffda RBX: 00007fca919e5fa0 RCX: 00007fca9178f749 [ 224.816451][T10723] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 224.816464][T10723] RBP: 00007fca92689090 R08: 0000000000000000 R09: 0000000000000000 [ 224.816476][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.816488][T10723] R13: 00007fca919e6038 R14: 00007fca919e5fa0 R15: 00007fffe144c338 [ 224.816522][T10723] [ 225.180869][T10718] bond_slave_1 (unregistering): left promiscuous mode [ 225.194741][T10718] bond_slave_1 (unregistering): left allmulticast mode [ 225.406112][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'. [ 225.703162][T10744] netlink: 'syz.1.1337': attribute type 3 has an invalid length. [ 227.205798][T10705] wg1 speed is unknown, defaulting to 1000 [ 227.223856][T10757] wg1 speed is unknown, defaulting to 1000 [ 227.249122][T10773] wg1 speed is unknown, defaulting to 1000 [ 227.321593][T10710] wg1 speed is unknown, defaulting to 1000 [ 227.558448][T10777] wg1 speed is unknown, defaulting to 1000 [ 227.890505][T10782] wg1 speed is unknown, defaulting to 1000 [ 229.497158][T10817] wg1 speed is unknown, defaulting to 1000 [ 229.737317][T10833] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1358'. [ 229.985025][T10843] FAULT_INJECTION: forcing a failure. [ 229.985025][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 229.998368][T10843] CPU: 0 UID: 0 PID: 10843 Comm: syz.2.1360 Not tainted syzkaller #0 PREEMPT(full) [ 229.998396][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.998409][T10843] Call Trace: [ 229.998417][T10843] [ 229.998426][T10843] dump_stack_lvl+0x189/0x250 [ 229.998458][T10843] ? __pfx____ratelimit+0x10/0x10 [ 229.998481][T10843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.998508][T10843] ? __pfx__printk+0x10/0x10 [ 229.998545][T10843] should_fail_ex+0x414/0x560 [ 229.998581][T10843] should_failslab+0xa8/0x100 [ 229.998605][T10843] __kmalloc_cache_noprof+0x6f/0x6f0 [ 229.998632][T10843] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 229.998652][T10843] ? sctp_v6_cmp_addr+0x15/0xd0 [ 229.998671][T10843] ? sctp_add_bind_addr+0x8c/0x370 [ 229.998698][T10843] sctp_add_bind_addr+0x8c/0x370 [ 229.998723][T10843] sctp_copy_local_addr_list+0x30b/0x4e0 [ 229.998748][T10843] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 229.998768][T10843] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 229.998791][T10843] ? sctp_v6_is_any+0x64/0x80 [ 229.998815][T10843] ? sctp_copy_one_addr+0x93/0x360 [ 229.998839][T10843] sctp_bind_addr_copy+0xb3/0x3c0 [ 229.998861][T10843] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 229.998894][T10843] sctp_connect_new_asoc+0x2e0/0x690 [ 229.998923][T10843] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 229.998945][T10843] ? __local_bh_enable_ip+0x12d/0x1c0 [ 229.998975][T10843] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 229.998997][T10843] ? security_sctp_bind_connect+0x7e/0x2e0 [ 229.999025][T10843] sctp_sendmsg+0x155c/0x2810 [ 229.999063][T10843] ? __pfx_sctp_sendmsg+0x10/0x10 [ 229.999092][T10843] ? aa_sk_perm+0x81e/0x950 [ 229.999123][T10843] ? __pfx_aa_sk_perm+0x10/0x10 [ 229.999153][T10843] ? sock_rps_record_flow+0x19/0x410 [ 229.999188][T10843] ? inet_sendmsg+0x2f4/0x370 [ 229.999216][T10843] __sock_sendmsg+0x19c/0x270 [ 229.999249][T10843] __sys_sendto+0x3bd/0x520 [ 229.999274][T10843] ? __pfx___sys_sendto+0x10/0x10 [ 229.999293][T10843] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 229.999338][T10843] ? __fget_files+0x3a0/0x420 [ 229.999369][T10843] ? ksys_write+0x22a/0x250 [ 229.999400][T10843] ? __pfx_ksys_write+0x10/0x10 [ 229.999432][T10843] __x64_sys_sendto+0xde/0x100 [ 229.999458][T10843] do_syscall_64+0xfa/0xfa0 [ 229.999480][T10843] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.999503][T10843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.999522][T10843] ? clear_bhb_loop+0x60/0xb0 [ 229.999547][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.999567][T10843] RIP: 0033:0x7fa8d418f749 [ 229.999584][T10843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.999602][T10843] RSP: 002b:00007fa8d500b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.999624][T10843] RAX: ffffffffffffffda RBX: 00007fa8d43e5fa0 RCX: 00007fa8d418f749 [ 229.999639][T10843] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 229.999652][T10843] RBP: 00007fa8d500b090 R08: 0000200000000100 R09: 000000000000001c [ 229.999665][T10843] R10: 0000000008044004 R11: 0000000000000246 R12: 0000000000000002 [ 229.999678][T10843] R13: 00007fa8d43e6038 R14: 00007fa8d43e5fa0 R15: 00007ffca79abcd8 [ 229.999713][T10843] [ 230.631713][T10850] Cannot find set identified by id 65534 to match [ 230.914785][T10865] bridge0: entered promiscuous mode [ 230.956052][T10865] macsec1: entered promiscuous mode [ 230.973317][T10865] bridge0: port 3(macsec1) entered blocking state [ 230.992498][T10865] bridge0: port 3(macsec1) entered disabled state [ 231.036992][T10865] macsec1: entered allmulticast mode [ 231.054836][T10865] bridge0: entered allmulticast mode [ 231.078509][T10865] macsec1: left allmulticast mode [ 231.090047][T10865] bridge0: left allmulticast mode [ 231.124344][T10883] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 231.132765][T10865] bridge0: left promiscuous mode [ 231.306220][T10876] wg1 speed is unknown, defaulting to 1000 [ 231.687004][T10901] wg1 speed is unknown, defaulting to 1000 [ 231.911236][T10917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1378'. [ 231.968284][T10917] Cannot find set identified by id 65534 to match [ 231.981424][T10925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1379'. [ 232.202765][T10936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1382'. [ 232.543571][T10947] macsec2: entered promiscuous mode [ 232.549284][T10947] bridge0: entered promiscuous mode [ 232.557760][T10947] bridge0: port 1(macsec2) entered blocking state [ 232.564521][T10947] bridge0: port 1(macsec2) entered disabled state [ 232.571739][T10947] macsec2: entered allmulticast mode [ 232.577460][T10947] bridge0: entered allmulticast mode [ 232.600818][T10947] macsec2: left allmulticast mode [ 232.625485][T10947] bridge0: left allmulticast mode [ 232.639632][T10947] bridge0: left promiscuous mode [ 233.110866][T10963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1391'. [ 233.143290][T10963] Cannot find set identified by id 65534 to match [ 233.258425][ T58] IPVS: starting estimator thread 0... [ 233.352474][T10967] IPVS: using max 31 ests per chain, 74400 per kthread [ 233.708519][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 233.713525][T10989] netlink: 'syz.3.1396': attribute type 2 has an invalid length. [ 233.747380][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'. [ 233.948411][T11001] wg1 speed is unknown, defaulting to 1000 [ 234.090118][T11012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1402'. [ 234.131992][T11012] Cannot find set identified by id 65534 to match [ 234.639352][T11033] macsec2: entered promiscuous mode [ 234.644768][T11033] bridge0: entered promiscuous mode [ 234.651836][T11033] bridge0: port 1(macsec2) entered blocking state [ 234.658667][T11033] bridge0: port 1(macsec2) entered disabled state [ 234.666812][T11033] macsec2: entered allmulticast mode [ 234.672289][T11033] bridge0: entered allmulticast mode [ 234.684613][T11037] openvswitch: netlink: nsh attribute has 31087 unknown bytes. [ 234.694441][T11037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.701629][T11033] macsec2: left allmulticast mode [ 234.708957][T11033] bridge0: left allmulticast mode [ 234.715865][T11033] bridge0: left promiscuous mode [ 234.832920][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 234.848304][T11041] netlink: 'syz.1.1410': attribute type 3 has an invalid length. [ 235.133016][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 235.302520][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1415'. [ 235.349352][T11065] Cannot find set identified by id 65534 to match [ 235.409449][T11068] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 235.559467][T11068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.569704][T11072] erspan0: entered allmulticast mode [ 235.594756][T11072] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 236.004081][T11090] bridge0: entered promiscuous mode [ 236.051389][T11090] macsec1: entered promiscuous mode [ 236.093591][T11090] bridge0: port 3(macsec1) entered blocking state [ 236.107791][T11090] bridge0: port 3(macsec1) entered disabled state [ 236.131546][T11090] macsec1: entered allmulticast mode [ 236.143170][T11090] bridge0: entered allmulticast mode [ 236.168449][T11090] macsec1: left allmulticast mode [ 236.180623][T11090] bridge0: left allmulticast mode [ 236.188999][T11090] bridge0: left promiscuous mode [ 236.195111][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'. [ 236.228321][T11106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1426'. [ 236.254195][T11106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1426'. [ 236.263735][T11106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1426'. [ 236.293636][T11106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1426'. [ 236.378012][T11113] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1427'. [ 236.416112][T11113] FAULT_INJECTION: forcing a failure. [ 236.416112][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 236.432229][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1428'. [ 236.448539][T11115] Cannot find set identified by id 65534 to match [ 236.464992][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.1.1427 Not tainted syzkaller #0 PREEMPT(full) [ 236.465020][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.465033][T11113] Call Trace: [ 236.465041][T11113] [ 236.465049][T11113] dump_stack_lvl+0x189/0x250 [ 236.465082][T11113] ? __pfx____ratelimit+0x10/0x10 [ 236.465105][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.465132][T11113] ? __pfx__printk+0x10/0x10 [ 236.465164][T11113] should_fail_ex+0x414/0x560 [ 236.465198][T11113] should_failslab+0xa8/0x100 [ 236.465218][T11113] kmem_cache_alloc_noprof+0x74/0x6e0 [ 236.465246][T11113] ? skb_clone+0x212/0x3a0 [ 236.465277][T11113] skb_clone+0x212/0x3a0 [ 236.465303][T11113] __netlink_deliver_tap+0x404/0x850 [ 236.465339][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.465363][T11113] netlink_deliver_tap+0x19c/0x1b0 [ 236.465388][T11113] netlink_sendskb+0x68/0x140 [ 236.465409][T11113] netlink_unicast+0x397/0x9e0 [ 236.465426][T11113] ? __asan_memcpy+0x40/0x70 [ 236.465460][T11113] ? __pfx_netlink_unicast+0x10/0x10 [ 236.465492][T11113] netlink_rcv_skb+0x28c/0x470 [ 236.465518][T11113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.465542][T11113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.465579][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.465613][T11113] netlink_unicast+0x82f/0x9e0 [ 236.465644][T11113] ? __pfx_netlink_unicast+0x10/0x10 [ 236.465668][T11113] ? netlink_sendmsg+0x642/0xb30 [ 236.465697][T11113] ? skb_put+0x11b/0x210 [ 236.465724][T11113] netlink_sendmsg+0x805/0xb30 [ 236.465759][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.465788][T11113] ? aa_sock_msg_perm+0xf1/0x1d0 [ 236.465819][T11113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.465839][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.465865][T11113] __sock_sendmsg+0x21c/0x270 [ 236.465899][T11113] __sys_sendto+0x3bd/0x520 [ 236.465924][T11113] ? __pfx___sys_sendto+0x10/0x10 [ 236.465943][T11113] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 236.465984][T11113] ? __fget_files+0x3a0/0x420 [ 236.466016][T11113] ? ksys_write+0x22a/0x250 [ 236.466045][T11113] ? __pfx_ksys_write+0x10/0x10 [ 236.466077][T11113] __x64_sys_sendto+0xde/0x100 [ 236.466103][T11113] do_syscall_64+0xfa/0xfa0 [ 236.466125][T11113] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.466148][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.466168][T11113] ? clear_bhb_loop+0x60/0xb0 [ 236.466192][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.466211][T11113] RIP: 0033:0x7f5e32b8f749 [ 236.466229][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.466246][T11113] RSP: 002b:00007f5e30df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 236.466267][T11113] RAX: ffffffffffffffda RBX: 00007f5e32de5fa0 RCX: 00007f5e32b8f749 [ 236.466281][T11113] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 236.466293][T11113] RBP: 00007f5e30df6090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 236.466306][T11113] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 236.466318][T11113] R13: 00007f5e32de6038 R14: 00007f5e32de5fa0 R15: 00007ffeb07e6718 [ 236.466353][T11113] [ 237.439970][T11152] macsec2: entered promiscuous mode [ 237.445937][T11152] bridge0: entered promiscuous mode [ 237.473289][T11152] bridge0: port 1(macsec2) entered blocking state [ 237.660959][T11152] bridge0: port 1(macsec2) entered disabled state [ 237.675625][T11152] macsec2: entered allmulticast mode [ 237.705482][T11152] bridge0: entered allmulticast mode [ 237.726581][T11152] macsec2: left allmulticast mode [ 237.731667][T11152] bridge0: left allmulticast mode [ 237.784930][T11152] bridge0: left promiscuous mode [ 237.993411][T11169] Cannot find set identified by id 65534 to match [ 238.379505][T11184] netlink: 'syz.0.1445': attribute type 4 has an invalid length. [ 238.381319][T11186] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 238.442867][T11186] 8021q: adding VLAN 0 to HW filter on device bond12 [ 238.473966][T11186] bond12: (slave erspan0): Enslaving as an active interface with an up link [ 238.640537][T11200] tap0: tun_chr_ioctl cmd 1074025673 [ 238.662194][T11193] erspan0: entered promiscuous mode [ 238.668470][T11193] erspan0: left allmulticast mode [ 238.711862][T11193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.721270][T11193] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.739211][T11193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.216979][T11215] Cannot find set identified by id 65534 to match [ 240.082889][T11266] __nla_validate_parse: 7 callbacks suppressed [ 240.082907][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 240.103917][T11266] Cannot find set identified by id 65534 to match [ 240.215172][T11274] netlink: 'syz.3.1468': attribute type 6 has an invalid length. [ 240.278776][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 240.310777][T11279] erspan0: left allmulticast mode [ 240.336337][T11279] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.343683][T11279] bridge0: port 2(bridge_slave_1) entered listening state [ 240.351154][T11279] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.358363][T11279] bridge0: port 1(bridge_slave_0) entered listening state [ 240.385762][T11279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.619677][T11290] netlink: 'syz.1.1473': attribute type 13 has an invalid length. [ 240.628165][T11290] netlink: 'syz.1.1473': attribute type 17 has an invalid length. [ 240.659298][T11290] erspan0: left allmulticast mode [ 240.785903][T11290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.873392][T11294] batadv_slave_0: entered promiscuous mode [ 240.904080][T11294] batman_adv: batadv0: Adding interface: macsec1 [ 240.911410][T11294] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.942834][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.953712][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.971996][T11294] batman_adv: batadv0: Interface activated: macsec1 [ 241.142879][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 241.160668][T11313] Cannot find set identified by id 65534 to match [ 241.341089][T11322] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 241.386805][T11322] 8021q: adding VLAN 0 to HW filter on device bond13 [ 241.431542][T11322] bond12: (slave erspan0): Releasing backup interface [ 241.452745][T11322] bond13: (slave erspan0): Enslaving as an active interface with an up link [ 241.459750][T11328] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 241.545946][T11328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.584451][T11331] erspan0: entered allmulticast mode [ 241.619623][T11331] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 241.787944][T11333] FAULT_INJECTION: forcing a failure. [ 241.787944][T11333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.815684][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.2.1486 Not tainted syzkaller #0 PREEMPT(full) [ 241.815715][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.815727][T11333] Call Trace: [ 241.815736][T11333] [ 241.815744][T11333] dump_stack_lvl+0x189/0x250 [ 241.815776][T11333] ? __pfx____ratelimit+0x10/0x10 [ 241.815797][T11333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.815824][T11333] ? __pfx__printk+0x10/0x10 [ 241.815859][T11333] should_fail_ex+0x414/0x560 [ 241.815894][T11333] _copy_from_user+0x2d/0xb0 [ 241.815920][T11333] __copy_msghdr+0x3c5/0x5b0 [ 241.815948][T11333] ___sys_sendmsg+0x1a5/0x2a0 [ 241.815976][T11333] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.816045][T11333] ? __fget_files+0x2a/0x420 [ 241.816063][T11333] ? __fget_files+0x3a0/0x420 [ 241.816092][T11333] __sys_sendmmsg+0x227/0x430 [ 241.816121][T11333] ? __pfx___sys_sendmmsg+0x10/0x10 [ 241.816155][T11333] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.816198][T11333] ? ksys_write+0x22a/0x250 [ 241.816229][T11333] ? __pfx_ksys_write+0x10/0x10 [ 241.816261][T11333] __x64_sys_sendmmsg+0xa0/0xc0 [ 241.816288][T11333] do_syscall_64+0xfa/0xfa0 [ 241.816311][T11333] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.816333][T11333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.816352][T11333] ? clear_bhb_loop+0x60/0xb0 [ 241.816376][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.816394][T11333] RIP: 0033:0x7fa8d418f749 [ 241.816412][T11333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.816430][T11333] RSP: 002b:00007fa8d500b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.816451][T11333] RAX: ffffffffffffffda RBX: 00007fa8d43e5fa0 RCX: 00007fa8d418f749 [ 241.816466][T11333] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000003 [ 241.816479][T11333] RBP: 00007fa8d500b090 R08: 0000000000000000 R09: 0000000000000000 [ 241.816492][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.816504][T11333] R13: 00007fa8d43e6038 R14: 00007fa8d43e5fa0 R15: 00007ffca79abcd8 [ 241.816536][T11333] [ 242.149950][T11347] netlink: 'syz.0.1490': attribute type 13 has an invalid length. [ 242.165238][T11347] netlink: 'syz.0.1490': attribute type 17 has an invalid length. [ 242.181578][T11350] bridge0: entered promiscuous mode [ 242.187827][T11350] macsec2: entered promiscuous mode [ 242.194900][T11350] bridge0: port 3(macsec2) entered blocking state [ 242.203271][T11350] bridge0: port 3(macsec2) entered disabled state [ 242.224819][T11350] macsec2: entered allmulticast mode [ 242.233689][T11350] bridge0: entered allmulticast mode [ 242.242193][T11350] macsec2: left allmulticast mode [ 242.247507][T11350] bridge0: left allmulticast mode [ 242.336414][T11364] SET target dimension over the limit! [ 242.401851][T11350] bridge0: left promiscuous mode [ 242.564393][T11347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.610762][T11358] batadv_slave_0: entered promiscuous mode [ 242.627811][T11358] batman_adv: batadv0: Adding interface: macsec1 [ 242.634278][T11358] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.660137][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.670884][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.680900][T11358] batman_adv: batadv0: Interface activated: macsec1 [ 242.718345][T11371] wg1 speed is unknown, defaulting to 1000 [ 242.853523][T11382] netlink: 'syz.1.1498': attribute type 1 has an invalid length. [ 242.977180][T11382] 8021q: adding VLAN 0 to HW filter on device bond8 [ 243.045737][T11386] bond7: (slave erspan0): Releasing backup interface [ 243.108561][T11386] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 244.401286][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 244.462910][T11424] macvlan0: entered allmulticast mode [ 245.150747][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 245.366981][T11455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.491686][T11460] wg1 speed is unknown, defaulting to 1000 [ 245.560348][T11463] wg1 speed is unknown, defaulting to 1000 [ 246.696065][T11491] smc: removing ib device syz2 [ 247.229028][T11516] FAULT_INJECTION: forcing a failure. [ 247.229028][T11516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.242742][T11516] CPU: 0 UID: 0 PID: 11516 Comm: syz.4.1540 Not tainted syzkaller #0 PREEMPT(full) [ 247.242770][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.242792][T11516] Call Trace: [ 247.242799][T11516] [ 247.242806][T11516] dump_stack_lvl+0x189/0x250 [ 247.242836][T11516] ? __pfx____ratelimit+0x10/0x10 [ 247.242859][T11516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.242885][T11516] ? __pfx__printk+0x10/0x10 [ 247.242918][T11516] should_fail_ex+0x414/0x560 [ 247.242953][T11516] copy_to_user_nofault+0x89/0x160 [ 247.242980][T11516] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 247.242999][T11516] bpf_trace_run3+0x298/0x4e0 [ 247.243027][T11516] ? kasan_quarantine_put+0xdd/0x220 [ 247.243054][T11516] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.243075][T11516] ? bpf_trace_run3+0x19a/0x4e0 [ 247.243105][T11516] ? __pfx_bpf_trace_run3+0x10/0x10 [ 247.243134][T11516] ? skb_release_data+0x62d/0x7c0 [ 247.243156][T11516] ? kmem_cache_free+0x19b/0x690 [ 247.243183][T11516] ? netlink_unicast+0x837/0x9e0 [ 247.243210][T11516] ? skb_release_data+0x62d/0x7c0 [ 247.243232][T11516] ? netlink_unicast+0x837/0x9e0 [ 247.243252][T11516] ? netlink_unicast+0x837/0x9e0 [ 247.243271][T11516] kmem_cache_free+0x5ee/0x690 [ 247.243306][T11516] netlink_unicast+0x837/0x9e0 [ 247.243337][T11516] ? __pfx_netlink_unicast+0x10/0x10 [ 247.243359][T11516] ? netlink_sendmsg+0x642/0xb30 [ 247.243380][T11516] ? skb_put+0x11b/0x210 [ 247.243405][T11516] netlink_sendmsg+0x805/0xb30 [ 247.243440][T11516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.243468][T11516] ? aa_sock_msg_perm+0xf1/0x1d0 [ 247.243498][T11516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.243517][T11516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.243549][T11516] __sock_sendmsg+0x21c/0x270 [ 247.243581][T11516] ____sys_sendmsg+0x505/0x830 [ 247.243611][T11516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.243644][T11516] ? import_iovec+0x74/0xa0 [ 247.243673][T11516] ___sys_sendmsg+0x21f/0x2a0 [ 247.243699][T11516] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.243761][T11516] ? __fget_files+0x2a/0x420 [ 247.243778][T11516] ? __fget_files+0x3a0/0x420 [ 247.243807][T11516] __x64_sys_sendmsg+0x19b/0x260 [ 247.243834][T11516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.243867][T11516] ? __pfx_ksys_write+0x10/0x10 [ 247.243898][T11516] ? do_syscall_64+0xbe/0xfa0 [ 247.243925][T11516] do_syscall_64+0xfa/0xfa0 [ 247.243946][T11516] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.243968][T11516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.243987][T11516] ? clear_bhb_loop+0x60/0xb0 [ 247.244009][T11516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.244025][T11516] RIP: 0033:0x7f2c0bb8f749 [ 247.244040][T11516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.244057][T11516] RSP: 002b:00007f2c0c998038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.244077][T11516] RAX: ffffffffffffffda RBX: 00007f2c0bde5fa0 RCX: 00007f2c0bb8f749 [ 247.244090][T11516] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 247.244100][T11516] RBP: 00007f2c0c998090 R08: 0000000000000000 R09: 0000000000000000 [ 247.244111][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.244121][T11516] R13: 00007f2c0bde6038 R14: 00007f2c0bde5fa0 R15: 00007ffcfff9edc8 [ 247.244152][T11516] [ 247.747703][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'. [ 247.757279][T11523] mac80211_hwsim hwsim7 wlan1: Device is already in use. [ 248.193506][T11523] bond0: (slave wlan1): Releasing backup interface [ 248.213791][T11523] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 248.222062][T11523] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 248.472620][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 248.844082][ T5835] Bluetooth: hci4: link tx timeout [ 248.849472][ T5835] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 248.926021][T11581] tipc: Cannot configure node identity twice [ 249.128597][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1555'. [ 250.068465][ T6502] IPVS: starting estimator thread 0... [ 250.076597][T11632] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 250.288445][T11634] IPVS: using max 26 ests per chain, 62400 per kthread [ 250.888776][T11643] wg1 speed is unknown, defaulting to 1000 [ 250.906372][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 250.978191][T11652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'. [ 251.409916][T11671] syzkaller0: entered promiscuous mode [ 251.415822][T11671] syzkaller0: entered allmulticast mode [ 251.526004][T11674] ip6gre1: entered promiscuous mode [ 251.532198][T11674] ip6gre1: entered allmulticast mode [ 251.533405][T11675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.547595][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.559612][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.576160][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.596949][T11671] tipc: Enabled bearer , priority 0 [ 251.628804][T11670] tipc: Resetting bearer [ 251.678750][T11670] tipc: Disabling bearer [ 251.826639][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.179679][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 252.276769][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 252.408410][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 252.578731][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.580352][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 253.870709][ T25] block nbd0: Possible stuck request ffff888024d0e000: control (read@0,1024B). Runtime 150 seconds [ 253.881914][ T25] block nbd0: Possible stuck request ffff888024d0e1c0: control (read@1024,1024B). Runtime 150 seconds [ 253.893597][ T25] block nbd0: Possible stuck request ffff888024d0e380: control (read@2048,1024B). Runtime 150 seconds [ 253.904851][ T25] block nbd0: Possible stuck request ffff888024d0e540: control (read@3072,1024B). Runtime 150 seconds [ 254.067592][T11768] erspan0: entered allmulticast mode [ 254.114310][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 254.851723][T11799] syzkaller0: entered promiscuous mode [ 254.864773][T11799] syzkaller0: entered allmulticast mode [ 254.993703][T11804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1616'. [ 255.163952][T11811] erspan0: entered allmulticast mode [ 255.936054][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.578530][T11850] Cannot find set identified by id 65534 to match [ 258.692045][T11838] syzkaller0: entered promiscuous mode [ 258.710314][T11838] syzkaller0: entered allmulticast mode [ 258.749264][T11851] bond8: (slave erspan0): Releasing backup interface [ 259.353536][T11884] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1644'. [ 259.502185][T11889] bridge0: entered promiscuous mode [ 259.510362][T11889] macsec2: entered promiscuous mode [ 259.519511][T11889] bridge0: port 3(macsec2) entered blocking state [ 259.528571][T11889] bridge0: port 3(macsec2) entered disabled state [ 259.537023][T11889] macsec2: entered allmulticast mode [ 259.542660][T11889] bridge0: entered allmulticast mode [ 259.553037][T11889] macsec2: left allmulticast mode [ 259.561965][T11889] bridge0: left allmulticast mode [ 259.582510][T11889] bridge0: left promiscuous mode [ 259.671173][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1648'. [ 259.882144][T11900] wg1 speed is unknown, defaulting to 1000 [ 260.008415][T11868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.337316][T11923] Cannot find set identified by id 65534 to match [ 260.438837][T11928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1659'. [ 260.449070][T11928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1659'. [ 260.533271][T11933] FAULT_INJECTION: forcing a failure. [ 260.533271][T11933] name failslab, interval 1, probability 0, space 0, times 0 [ 260.546140][T11933] CPU: 0 UID: 0 PID: 11933 Comm: syz.1.1663 Not tainted syzkaller #0 PREEMPT(full) [ 260.546164][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.546175][T11933] Call Trace: [ 260.546182][T11933] [ 260.546191][T11933] dump_stack_lvl+0x189/0x250 [ 260.546223][T11933] ? __pfx____ratelimit+0x10/0x10 [ 260.546246][T11933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.546273][T11933] ? __pfx__printk+0x10/0x10 [ 260.546297][T11933] ? __pfx_fib_validate_source+0x10/0x10 [ 260.546331][T11933] should_fail_ex+0x414/0x560 [ 260.546367][T11933] should_failslab+0xa8/0x100 [ 260.546389][T11933] kmem_cache_alloc_noprof+0x74/0x6e0 [ 260.546417][T11933] ? dst_alloc+0x105/0x170 [ 260.546449][T11933] dst_alloc+0x105/0x170 [ 260.546480][T11933] ip_route_input_rcu+0x1ec2/0x30d0 [ 260.546510][T11933] ? do_xdp_generic+0x11a/0x11a0 [ 260.546537][T11933] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 260.546590][T11933] ? ipt_do_table+0x13dd/0x1640 [ 260.546623][T11933] ? ip_route_input_noref+0x98/0x250 [ 260.546646][T11933] ip_route_input_noref+0x167/0x250 [ 260.546670][T11933] ? __pfx_ip_route_input_noref+0x10/0x10 [ 260.546699][T11933] ? ipt_do_table+0x2a3/0x1640 [ 260.546725][T11933] ? __pfx_ipt_do_table+0x10/0x10 [ 260.546757][T11933] ip_rcv_finish_core+0x5af/0x1c00 [ 260.546798][T11933] ip_rcv_finish+0x14c/0x2f0 [ 260.546826][T11933] NF_HOOK+0x30c/0x3a0 [ 260.546854][T11933] ? __pfx_ip_rcv_finish+0x10/0x10 [ 260.546878][T11933] ? NF_HOOK+0x9a/0x3a0 [ 260.546903][T11933] ? __pfx_NF_HOOK+0x10/0x10 [ 260.546925][T11933] ? ip_rcv_core+0x7f7/0xd00 [ 260.546952][T11933] ? __pfx_ip_rcv_finish+0x10/0x10 [ 260.546989][T11933] ? __pfx_ip_rcv+0x10/0x10 [ 260.547012][T11933] __netif_receive_skb+0x143/0x380 [ 260.547038][T11933] ? netif_receive_skb+0x115/0x790 [ 260.547066][T11933] netif_receive_skb+0x1cb/0x790 [ 260.547095][T11933] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 260.547118][T11933] ? __pfx_netif_receive_skb+0x10/0x10 [ 260.547153][T11933] ? tun_rx_batched+0x160/0x730 [ 260.547179][T11933] tun_rx_batched+0x1b9/0x730 [ 260.547202][T11933] ? __lock_acquire+0xab9/0xd20 [ 260.547226][T11933] ? __pfx_tun_rx_batched+0x10/0x10 [ 260.547252][T11933] ? tun_get_user+0x272f/0x3e90 [ 260.547286][T11933] tun_get_user+0x2b65/0x3e90 [ 260.547314][T11933] ? tun_get_user+0x6f6/0x3e90 [ 260.547338][T11933] ? tun_get_user+0x272f/0x3e90 [ 260.547364][T11933] ? aa_file_perm+0x44d/0x1550 [ 260.547384][T11933] ? __pfx_tun_get_user+0x10/0x10 [ 260.547416][T11933] ? __lock_acquire+0xab9/0xd20 [ 260.547441][T11933] ? ref_tracker_alloc+0x318/0x460 [ 260.547458][T11933] ? __lock_acquire+0xab9/0xd20 [ 260.547478][T11933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 260.547503][T11933] ? tun_get+0x1c/0x2f0 [ 260.547532][T11933] ? tun_get+0x1c/0x2f0 [ 260.547561][T11933] ? tun_get+0x1c/0x2f0 [ 260.547590][T11933] tun_chr_write_iter+0x113/0x200 [ 260.547617][T11933] vfs_write+0x5c9/0xb30 [ 260.547649][T11933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 260.547674][T11933] ? __pfx_vfs_write+0x10/0x10 [ 260.547708][T11933] ? __fget_files+0x2a/0x420 [ 260.547734][T11933] ksys_write+0x145/0x250 [ 260.547761][T11933] ? __pfx_ksys_write+0x10/0x10 [ 260.547789][T11933] ? do_syscall_64+0xbe/0xfa0 [ 260.547814][T11933] do_syscall_64+0xfa/0xfa0 [ 260.547833][T11933] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.547856][T11933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.547875][T11933] ? clear_bhb_loop+0x60/0xb0 [ 260.547900][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.547918][T11933] RIP: 0033:0x7f5e32b8e1ff [ 260.547936][T11933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 260.547952][T11933] RSP: 002b:00007f5e30df6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 260.547972][T11933] RAX: ffffffffffffffda RBX: 00007f5e32de5fa0 RCX: 00007f5e32b8e1ff [ 260.547986][T11933] RDX: 000000000000006f RSI: 00002000000000c0 RDI: 00000000000000c8 [ 260.547999][T11933] RBP: 00007f5e30df6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.548012][T11933] R10: 000000000000006f R11: 0000000000000293 R12: 0000000000000001 [ 260.548023][T11933] R13: 00007f5e32de6038 R14: 00007f5e32de5fa0 R15: 00007ffeb07e6718 [ 260.548058][T11933] [ 261.424085][T11964] Cannot find set identified by id 65534 to match [ 261.536718][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'. [ 261.842540][T11982] wg1 speed is unknown, defaulting to 1000 [ 261.865587][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 262.076258][T11990] netlink: 'syz.0.1676': attribute type 3 has an invalid length. [ 262.093937][T11992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1677'. [ 262.111518][T11992] bond3: (slave erspan0): Releasing backup interface [ 262.303741][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 262.397548][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1678'. [ 262.470121][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 262.653276][T12017] Cannot find set identified by id 65534 to match [ 262.893988][T12031] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 262.914403][T12031] bridge4: entered allmulticast mode [ 262.977522][T12037] syzkaller0: entered promiscuous mode [ 262.983291][T12037] syzkaller0: entered allmulticast mode [ 262.991048][ T6518] wg1 speed is unknown, defaulting to 1000 [ 263.000243][T12035] macsec2: entered promiscuous mode [ 263.006239][T12035] bridge0: entered promiscuous mode [ 263.013022][T12035] bridge0: port 1(macsec2) entered blocking state [ 263.019836][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 263.028726][T12035] bridge0: port 1(macsec2) entered disabled state [ 263.035856][T12035] macsec2: entered allmulticast mode [ 263.041249][T12035] bridge0: entered allmulticast mode [ 263.048424][T12035] macsec2: left allmulticast mode [ 263.053569][T12035] bridge0: left allmulticast mode [ 263.060157][T12035] bridge0: left promiscuous mode [ 263.415136][T12052] netlink: 'syz.1.1693': attribute type 33 has an invalid length. [ 263.423641][T12052] `: renamed from team0 (while UP) [ 263.685878][T12063] netlink: 'syz.0.1695': attribute type 3 has an invalid length. [ 263.710178][T12062] Cannot find set identified by id 65534 to match [ 263.936628][ T6502] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.403641][T12097] netlink: 'syz.0.1704': attribute type 1 has an invalid length. [ 264.544619][T12097] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.557387][T12115] Cannot find set identified by id 65534 to match [ 264.601900][T12097] __nla_validate_parse: 3 callbacks suppressed [ 264.601919][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1704'. [ 264.652323][T12107] wg1 speed is unknown, defaulting to 1000 [ 264.735614][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.217059][T12145] FAULT_INJECTION: forcing a failure. [ 265.217059][T12145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.240714][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.0.1719 Not tainted syzkaller #0 PREEMPT(full) [ 265.240743][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.240755][T12145] Call Trace: [ 265.240762][T12145] [ 265.240771][T12145] dump_stack_lvl+0x189/0x250 [ 265.240803][T12145] ? __pfx____ratelimit+0x10/0x10 [ 265.240825][T12145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.240848][T12145] ? __pfx__printk+0x10/0x10 [ 265.240870][T12145] ? __pfx___mutex_lock+0x10/0x10 [ 265.240901][T12145] should_fail_ex+0x414/0x560 [ 265.240933][T12145] _copy_to_user+0x31/0xb0 [ 265.240957][T12145] netns_bpf_prog_query+0x292/0x4f0 [ 265.240982][T12145] ? __pfx_netns_bpf_prog_query+0x10/0x10 [ 265.241016][T12145] __sys_bpf+0x7bd/0x860 [ 265.241037][T12145] ? __pfx___sys_bpf+0x10/0x10 [ 265.241073][T12145] ? ksys_write+0x22a/0x250 [ 265.241103][T12145] ? __pfx_ksys_write+0x10/0x10 [ 265.241154][T12145] __x64_sys_bpf+0x7c/0x90 [ 265.241184][T12145] do_syscall_64+0xfa/0xfa0 [ 265.241205][T12145] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.241230][T12145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.241248][T12145] ? clear_bhb_loop+0x60/0xb0 [ 265.241270][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.241287][T12145] RIP: 0033:0x7fca9178f749 [ 265.241304][T12145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.241320][T12145] RSP: 002b:00007fca92689038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.241341][T12145] RAX: ffffffffffffffda RBX: 00007fca919e5fa0 RCX: 00007fca9178f749 [ 265.241356][T12145] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 265.241368][T12145] RBP: 00007fca92689090 R08: 0000000000000000 R09: 0000000000000000 [ 265.241381][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.241393][T12145] R13: 00007fca919e6038 R14: 00007fca919e5fa0 R15: 00007fffe144c338 [ 265.241428][T12145] [ 265.483121][T12149] Cannot find set identified by id 65534 to match [ 265.649453][T12154] Bluetooth: MGMT ver 1.23 [ 265.812954][T12161] syzkaller0: entered promiscuous mode [ 265.820630][T12161] syzkaller0: entered allmulticast mode [ 265.836881][T12165] netlink: 'syz.3.1729': attribute type 1 has an invalid length. [ 265.873110][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 265.919087][T12165] 8021q: adding VLAN 0 to HW filter on device bond14 [ 265.938216][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 265.939009][T12169] bridge0: entered promiscuous mode [ 265.953919][T12169] macsec2: entered promiscuous mode [ 265.960792][T12169] bridge0: port 3(macsec2) entered blocking state [ 265.968314][T12169] bridge0: port 3(macsec2) entered disabled state [ 265.976894][T12169] macsec2: entered allmulticast mode [ 265.986832][T12169] bridge0: entered allmulticast mode [ 266.004035][T12169] macsec2: left allmulticast mode [ 266.044251][T12169] bridge0: left allmulticast mode [ 266.086897][T12169] bridge0: left promiscuous mode [ 266.097748][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1732'. [ 266.225155][T12172] bond14: (slave gretap1): making interface the new active one [ 266.238892][T12172] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 266.250924][T12170] syzkaller0: entered promiscuous mode [ 266.256748][T12170] syzkaller0: entered allmulticast mode [ 266.470485][T12174] wg1 speed is unknown, defaulting to 1000 [ 266.659025][T12202] tipc: Enabled bearer , priority 0 [ 266.808708][T12202] syzkaller0: entered promiscuous mode [ 266.814330][T12202] syzkaller0: entered allmulticast mode [ 266.820892][T12202] tipc: Resetting bearer [ 266.910769][T12212] ip6gretap0: left allmulticast mode [ 266.927347][T11544] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.936427][T11544] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.950705][T12200] tipc: Resetting bearer [ 267.753946][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 268.788674][T12200] tipc: Disabling bearer [ 268.798824][T11544] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.911065][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 268.926364][T12222] syzkaller0: entered promiscuous mode [ 268.931883][T12222] syzkaller0: entered allmulticast mode [ 268.939750][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 268.949106][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 268.958565][ T6518] tipc: Node number set to 4285629126 [ 269.013929][T11544] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.179734][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 269.240629][T12241] bridge0: entered promiscuous mode [ 269.275773][T12241] macsec1: entered promiscuous mode [ 269.292292][T12241] bridge0: port 3(macsec1) entered blocking state [ 269.306675][T12241] bridge0: port 3(macsec1) entered disabled state [ 269.323193][T12241] macsec1: entered allmulticast mode [ 269.329256][T12241] bridge0: entered allmulticast mode [ 269.350523][T12241] macsec1: left allmulticast mode [ 269.364784][T12241] bridge0: left allmulticast mode [ 269.389315][T12241] bridge0: left promiscuous mode [ 269.617431][T12270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1753'. [ 269.869368][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 270.148624][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1761'. [ 270.247739][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 270.273816][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 270.300803][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1765'. [ 270.321363][T12309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.321777][T12302] Cannot find set identified by id 65534 to match [ 270.441964][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1765'. [ 270.495367][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 270.503631][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 270.612325][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 270.644734][T12320] wg1 speed is unknown, defaulting to 1000 [ 270.660355][T12329] netlink: 'syz.2.1772': attribute type 3 has an invalid length. [ 271.278085][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1769'. [ 271.311089][T12353] wg1 speed is unknown, defaulting to 1000 [ 271.476506][T12361] Cannot find set identified by id 65534 to match [ 272.340041][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 273.851476][T12397] Cannot find set identified by id 65534 to match [ 274.096106][T12408] FAULT_INJECTION: forcing a failure. [ 274.096106][T12408] name failslab, interval 1, probability 0, space 0, times 0 [ 274.124034][T12408] CPU: 1 UID: 0 PID: 12408 Comm: syz.4.1796 Not tainted syzkaller #0 PREEMPT(full) [ 274.124064][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.124076][T12408] Call Trace: [ 274.124083][T12408] [ 274.124091][T12408] dump_stack_lvl+0x189/0x250 [ 274.124122][T12408] ? __pfx____ratelimit+0x10/0x10 [ 274.124145][T12408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.124172][T12408] ? __pfx__printk+0x10/0x10 [ 274.124199][T12408] ? __pfx___might_resched+0x10/0x10 [ 274.124226][T12408] should_fail_ex+0x414/0x560 [ 274.124262][T12408] should_failslab+0xa8/0x100 [ 274.124284][T12408] kmem_cache_alloc_noprof+0x74/0x6e0 [ 274.124312][T12408] ? security_inode_alloc+0x39/0x330 [ 274.124348][T12408] security_inode_alloc+0x39/0x330 [ 274.124380][T12408] inode_init_always_gfp+0x9ed/0xdc0 [ 274.124417][T12408] ? __pfx_sock_alloc_inode+0x10/0x10 [ 274.124446][T12408] alloc_inode+0x82/0x1b0 [ 274.124476][T12408] __sock_create+0x12d/0x9f0 [ 274.124505][T12408] ? fput+0xa0/0xd0 [ 274.124535][T12408] __sys_socket+0xd7/0x1b0 [ 274.124558][T12408] __x64_sys_socket+0x7a/0x90 [ 274.124583][T12408] do_syscall_64+0xfa/0xfa0 [ 274.124605][T12408] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.124628][T12408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.124648][T12408] ? clear_bhb_loop+0x60/0xb0 [ 274.124672][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.124691][T12408] RIP: 0033:0x7f2c0bb8f749 [ 274.124709][T12408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.124727][T12408] RSP: 002b:00007f2c0c998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 274.124747][T12408] RAX: ffffffffffffffda RBX: 00007f2c0bde5fa0 RCX: 00007f2c0bb8f749 [ 274.124827][T12408] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000023 [ 274.124839][T12408] RBP: 00007f2c0c998090 R08: 0000000000000000 R09: 0000000000000000 [ 274.124851][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.124863][T12408] R13: 00007f2c0bde6038 R14: 00007f2c0bde5fa0 R15: 00007ffcfff9edc8 [ 274.124898][T12408] [ 274.124934][T12408] socket: no more sockets [ 274.500264][T12418] wg1 speed is unknown, defaulting to 1000 [ 274.577293][T12425] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.753144][T12437] __nla_validate_parse: 3 callbacks suppressed [ 274.753164][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 274.970212][T12442] Cannot find add_set index 1 as target [ 275.418809][T12458] syzkaller0: entered promiscuous mode [ 275.424308][T12458] syzkaller0: entered allmulticast mode [ 275.462959][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 275.494328][T12462] veth5: entered promiscuous mode [ 275.530300][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.543917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.717026][T12472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1812'. [ 275.721815][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 275.799264][T12476] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 275.874131][T12476] bond5: entered promiscuous mode [ 275.879666][T12476] bond5: entered allmulticast mode [ 275.885481][T12476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.942655][T12476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.954761][T12476] bond6: entered promiscuous mode [ 275.960838][T12476] bond6: entered allmulticast mode [ 275.966916][T12476] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 276.080714][T12476] syzkaller1: entered promiscuous mode [ 276.102160][T12476] syzkaller1: entered allmulticast mode [ 276.114071][T12489] netlink: 'syz.1.1816': attribute type 3 has an invalid length. [ 276.117611][T12490] netlink: 'syz.0.1818': attribute type 11 has an invalid length. [ 276.152071][T12490] netlink: 'syz.0.1818': attribute type 11 has an invalid length. [ 276.160120][T12490] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1818'. [ 276.266238][T12491] bridge4: entered promiscuous mode [ 276.271692][T12491] bridge4: entered allmulticast mode [ 276.552473][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'. [ 276.643548][T12515] netlink: 416 bytes leftover after parsing attributes in process `syz.2.1823'. [ 276.866192][T12523] tipc: Enabled bearer , priority 0 [ 276.906505][T12523] syzkaller0: entered promiscuous mode [ 276.942631][T12523] syzkaller0: entered allmulticast mode [ 276.950596][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 277.000463][T12522] tipc: Resetting bearer [ 277.091877][T12522] tipc: Disabling bearer [ 277.299951][T12543] netem: change failed [ 277.329471][T12545] netlink: 'syz.4.1833': attribute type 11 has an invalid length. [ 277.356182][T12545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1833'. [ 277.429523][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 277.440459][T12550] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 277.453245][T12545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.490845][T12548] wg1 speed is unknown, defaulting to 1000 [ 277.527774][T12556] netlink: 'syz.2.1837': attribute type 3 has an invalid length. [ 278.440933][T12588] Cannot find set identified by id 65534 to match [ 278.752976][T12603] netlink: 'syz.1.1848': attribute type 3 has an invalid length. [ 278.912472][T12615] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 278.955149][T12615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.984869][T12615] bond5: (slave erspan0): making interface the new active one [ 278.994093][T12615] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 279.046806][T12615] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 279.183498][T12618] wg1 speed is unknown, defaulting to 1000 [ 279.311404][T12626] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.327595][T12626] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 279.350467][T12628] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 279.408372][T12632] vxcan2: entered allmulticast mode [ 279.739163][T12651] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 279.758404][T12653] __nla_validate_parse: 3 callbacks suppressed [ 279.758422][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 279.899256][T12651] 8021q: adding VLAN 0 to HW filter on device bond15 [ 279.919634][T12655] bond13: (slave erspan0): Releasing backup interface [ 279.953746][T12655] bond15: (slave erspan0): making interface the new active one [ 279.974855][T12655] bond15: (slave erspan0): Enslaving as an active interface with an up link [ 280.001237][T12662] netlink: 'syz.2.1863': attribute type 3 has an invalid length. [ 280.043803][T12659] bond15: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 280.216988][T12670] macsec2: entered promiscuous mode [ 280.236077][T12670] bridge0: entered promiscuous mode [ 280.249239][T12670] bridge0: port 1(macsec2) entered blocking state [ 280.266830][T12670] bridge0: port 1(macsec2) entered disabled state [ 280.276070][T12670] macsec2: entered allmulticast mode [ 280.288908][T12670] bridge0: entered allmulticast mode [ 280.312604][T12670] macsec2: left allmulticast mode [ 280.325014][T12670] bridge0: left allmulticast mode [ 280.354426][T12670] bridge0: left promiscuous mode [ 280.405826][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 280.783241][T12699] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1872'. [ 280.826282][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 280.892451][T12707] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 280.901183][T12707] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1875'. [ 280.962760][T12707] vxcan2: entered allmulticast mode [ 280.990042][T12712] netlink: 'syz.4.1876': attribute type 11 has an invalid length. [ 281.048127][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 281.154110][T12719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.192640][T12719] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 281.248275][T12719] bond9: (slave bridge3): making interface the new active one [ 281.257367][T12719] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 281.269796][T12719] atomic_op ffff8880294c2998 conn xmit_atomic 0000000000000000 [ 281.341118][T12727] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 281.379479][T12727] 8021q: adding VLAN 0 to HW filter on device bond16 [ 281.392866][T12727] bond15: (slave erspan0): Releasing active interface [ 281.409815][T12727] bond16: (slave erspan0): making interface the new active one [ 281.420796][T12727] bond16: (slave erspan0): Enslaving as an active interface with an up link [ 281.456067][T12727] bond16: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 281.686420][T12744] Cannot find set identified by id 65534 to match [ 281.741845][T12746] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 281.767325][T12746] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1887'. [ 281.774003][T12750] wg1 speed is unknown, defaulting to 1000 [ 281.831707][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 281.878481][T12755] vxcan2: entered allmulticast mode [ 281.921317][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1891'. [ 282.049538][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 282.407486][T12782] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 282.488737][T12782] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.540506][T12787] bond7: (slave erspan0): making interface the new active one [ 282.561507][T12787] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 282.601342][T12789] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 282.645379][T12791] Cannot find set identified by id 65534 to match [ 282.822377][T12801] FAULT_INJECTION: forcing a failure. [ 282.822377][T12801] name failslab, interval 1, probability 0, space 0, times 0 [ 282.848008][T12800] wg1 speed is unknown, defaulting to 1000 [ 282.862863][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.3.1903 Not tainted syzkaller #0 PREEMPT(full) [ 282.862891][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.862902][T12801] Call Trace: [ 282.862910][T12801] [ 282.862918][T12801] dump_stack_lvl+0x189/0x250 [ 282.862950][T12801] ? __pfx____ratelimit+0x10/0x10 [ 282.862973][T12801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.863000][T12801] ? __pfx__printk+0x10/0x10 [ 282.863023][T12801] ? __pfx___might_resched+0x10/0x10 [ 282.863052][T12801] ? fs_reclaim_acquire+0x7d/0x100 [ 282.863077][T12801] should_fail_ex+0x414/0x560 [ 282.863113][T12801] should_failslab+0xa8/0x100 [ 282.863135][T12801] kmem_cache_alloc_node_noprof+0x77/0x710 [ 282.863164][T12801] ? __alloc_skb+0x255/0x430 [ 282.863184][T12801] ? napi_skb_cache_get+0x4a5/0x790 [ 282.863204][T12801] ? napi_skb_cache_get+0x151/0x790 [ 282.863229][T12801] __alloc_skb+0x255/0x430 [ 282.863253][T12801] ? __pfx___alloc_skb+0x10/0x10 [ 282.863279][T12801] ? __pfx_get_current_settings+0x10/0x10 [ 282.863312][T12801] mgmt_cmd_complete+0x49/0x590 [ 282.863345][T12801] set_connectable+0x392/0x790 [ 282.863381][T12801] ? __pfx_set_connectable+0x10/0x10 [ 282.863423][T12801] hci_mgmt_cmd+0x9c9/0xef0 [ 282.863463][T12801] hci_sock_sendmsg+0x6ca/0xef0 [ 282.863494][T12801] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 282.863519][T12801] ? aa_sock_msg_perm+0xf1/0x1d0 [ 282.863550][T12801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.863569][T12801] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 282.863595][T12801] __sock_sendmsg+0x21c/0x270 [ 282.863628][T12801] sock_write_iter+0x279/0x360 [ 282.863660][T12801] ? __pfx_sock_write_iter+0x10/0x10 [ 282.863700][T12801] ? bpf_lsm_file_permission+0x9/0x20 [ 282.863722][T12801] ? security_file_permission+0x75/0x290 [ 282.863755][T12801] vfs_write+0x5c9/0xb30 [ 282.863786][T12801] ? __pfx_sock_write_iter+0x10/0x10 [ 282.863813][T12801] ? __pfx_vfs_write+0x10/0x10 [ 282.863853][T12801] ? __fget_files+0x2a/0x420 [ 282.863882][T12801] ksys_write+0x145/0x250 [ 282.863911][T12801] ? __pfx_ksys_write+0x10/0x10 [ 282.863943][T12801] ? do_syscall_64+0xbe/0xfa0 [ 282.863970][T12801] do_syscall_64+0xfa/0xfa0 [ 282.863991][T12801] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.864013][T12801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.864033][T12801] ? clear_bhb_loop+0x60/0xb0 [ 282.864062][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.864081][T12801] RIP: 0033:0x7f817178f749 [ 282.864098][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.864115][T12801] RSP: 002b:00007f81725f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.864136][T12801] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178f749 [ 282.864150][T12801] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000005 [ 282.864163][T12801] RBP: 00007f81725f8090 R08: 0000000000000000 R09: 0000000000000000 [ 282.864175][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.864187][T12801] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff8effacf8 [ 282.864221][T12801] [ 283.296416][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.314767][T12811] netlink: 'syz.1.1909': attribute type 1 has an invalid length. [ 283.334190][T12811] vxcan2: entered allmulticast mode [ 283.785448][T12828] Cannot find set identified by id 65534 to match [ 283.930723][T12838] syzkaller0: entered promiscuous mode [ 283.946947][T12838] syzkaller0: entered allmulticast mode [ 283.953543][ T25] block nbd0: Possible stuck request ffff888024d0e000: control (read@0,1024B). Runtime 180 seconds [ 283.966133][ T25] block nbd0: Possible stuck request ffff888024d0e1c0: control (read@1024,1024B). Runtime 180 seconds [ 283.979384][ T25] block nbd0: Possible stuck request ffff888024d0e380: control (read@2048,1024B). Runtime 180 seconds [ 283.990821][ T25] block nbd0: Possible stuck request ffff888024d0e540: control (read@3072,1024B). Runtime 180 seconds [ 284.242550][T12857] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 284.266825][T12857] vxcan0: entered allmulticast mode [ 284.293558][T12858] wg1 speed is unknown, defaulting to 1000 [ 284.763347][T12870] netlink: 'syz.4.1925': attribute type 3 has an invalid length. [ 284.940995][T12877] Cannot find set identified by id 65534 to match [ 285.167179][T12883] __nla_validate_parse: 5 callbacks suppressed [ 285.167198][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 285.188044][T12892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1930'. [ 285.334240][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 285.981561][T12924] tipc: Enabled bearer , priority 0 [ 285.996499][T12924] syzkaller0: entered promiscuous mode [ 286.002059][T12924] syzkaller0: entered allmulticast mode [ 286.046296][T12924] tipc: Resetting bearer [ 286.057798][T12923] tipc: Resetting bearer [ 286.080397][T12923] tipc: Disabling bearer [ 286.093384][T12926] wg1 speed is unknown, defaulting to 1000 [ 286.240606][T12934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1942'. [ 286.274106][T12934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1942'. [ 286.393960][T12944] tipc: Enabled bearer , priority 0 [ 286.402466][T12944] syzkaller0: entered promiscuous mode [ 286.409951][T12944] syzkaller0: entered allmulticast mode [ 286.467323][T12944] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 286.481670][T12944] tipc: Resetting bearer [ 286.489345][T12943] tipc: Resetting bearer [ 286.509015][T12943] tipc: Disabling bearer [ 286.723441][T12949] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1948'. [ 287.010050][T12962] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 287.021796][T12960] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 287.029903][T12960] netlink: 'syz.4.1952': attribute type 3 has an invalid length. [ 287.040162][T12962] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1953'. [ 287.049446][T12960] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1952'. [ 287.074742][T12962] vxcan2: entered allmulticast mode [ 287.333044][T12981] syzkaller1: entered promiscuous mode [ 287.346939][T12981] syzkaller1: entered allmulticast mode [ 287.692600][T12997] wg1 speed is unknown, defaulting to 1000 [ 287.910381][T13010] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1967'. [ 288.041379][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1969'. [ 288.249412][T13035] netlink: 'syz.4.1974': attribute type 3 has an invalid length. [ 288.387914][T13042] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 288.406099][T13042] tipc: Enabled bearer , priority 10 [ 288.533035][T13047] tipc: Enabled bearer , priority 0 [ 288.600808][T13042] macvlan0: entered allmulticast mode [ 288.623795][T13042] veth1_vlan: entered allmulticast mode [ 288.633097][T13047] syzkaller0: entered promiscuous mode [ 288.666164][T13047] syzkaller0: entered allmulticast mode [ 288.738897][T13059] tipc: Enabling of bearer rejected, failed to enable media [ 288.789507][T13047] tipc: Resetting bearer [ 288.912663][T13054] wg1 speed is unknown, defaulting to 1000 [ 289.009323][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.067695][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.104254][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.125529][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.153127][T13046] tipc: Resetting bearer [ 289.191870][T13087] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 289.200991][T13046] tipc: Disabling bearer [ 289.277387][T13087] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.313462][T13086] wg1 speed is unknown, defaulting to 1000 [ 289.498787][T13104] Cannot find set identified by id 65534 to match [ 289.548105][ T6532] tipc: Node number set to 3011126981 [ 289.688591][T13111] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 289.754684][T13111] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.788489][T13118] bond7: (slave erspan0): Releasing active interface [ 289.810243][T13118] bond8: (slave erspan0): making interface the new active one [ 289.834047][T13118] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 289.883238][T13111] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 290.451750][T13143] __nla_validate_parse: 8 callbacks suppressed [ 290.451770][T13143] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1998'. [ 290.479426][T13151] Cannot find set identified by id 65534 to match [ 290.514034][T13143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1998'. [ 290.818212][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 290.963816][T13173] wg1 speed is unknown, defaulting to 1000 [ 290.989769][T13176] raw_sendmsg: syz.0.2008 forgot to set AF_INET. Fix it! [ 291.312340][T13189] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 291.345476][T13189] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2013'. [ 291.364992][T13197] netlink: 'syz.1.2015': attribute type 1 has an invalid length. [ 291.471359][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 291.494561][T13197] 8021q: adding VLAN 0 to HW filter on device bond10 [ 291.524613][T13189] vxcan2: entered allmulticast mode [ 291.559952][T13204] bond10: (slave erspan0): making interface the new active one [ 291.570000][T13204] bond10: (slave erspan0): Enslaving as an active interface with an up link [ 291.596751][T13197] bond10: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 291.790072][T13219] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 291.843520][T13219] 8021q: adding VLAN 0 to HW filter on device bond17 [ 291.863043][T13219] bond16: (slave erspan0): Releasing active interface [ 291.894528][T13219] bond17: (slave erspan0): making interface the new active one [ 291.904653][T13219] bond17: (slave erspan0): Enslaving as an active interface with an up link [ 291.961444][T13224] syzkaller0: entered promiscuous mode [ 291.980863][T13224] syzkaller0: entered allmulticast mode [ 291.993776][T13226] bridge_slave_0: invalid flags given to default FDB implementation [ 292.087671][T13223] bond17: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 292.519781][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2027'. [ 292.775121][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 293.172343][T13277] Cannot find set identified by id 65534 to match [ 293.180000][T13274] wg1 speed is unknown, defaulting to 1000 [ 293.312579][T13285] netlink: 'syz.3.2036': attribute type 1 has an invalid length. [ 293.359670][T13285] 8021q: adding VLAN 0 to HW filter on device bond18 [ 293.389868][T13285] bond17: (slave erspan0): Releasing active interface [ 293.405836][T13285] bond18: (slave erspan0): making interface the new active one [ 293.415160][T13285] bond18: (slave erspan0): Enslaving as an active interface with an up link [ 293.586708][T13285] bond18: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 293.840489][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 294.097461][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 294.119854][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 294.201949][T13339] FAULT_INJECTION: forcing a failure. [ 294.201949][T13339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.216259][T13339] CPU: 1 UID: 0 PID: 13339 Comm: syz.3.2050 Not tainted syzkaller #0 PREEMPT(full) [ 294.216286][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.216296][T13339] Call Trace: [ 294.216303][T13339] [ 294.216312][T13339] dump_stack_lvl+0x189/0x250 [ 294.216342][T13339] ? __pfx____ratelimit+0x10/0x10 [ 294.216364][T13339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.216386][T13339] ? __pfx__printk+0x10/0x10 [ 294.216418][T13339] should_fail_ex+0x414/0x560 [ 294.216450][T13339] _copy_to_user+0x31/0xb0 [ 294.216475][T13339] simple_read_from_buffer+0xe1/0x170 [ 294.216508][T13339] proc_fail_nth_read+0x1b3/0x220 [ 294.216535][T13339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.216563][T13339] ? rw_verify_area+0x2a6/0x4d0 [ 294.216586][T13339] ? __lock_acquire+0xab9/0xd20 [ 294.216602][T13339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.216628][T13339] vfs_read+0x200/0xa30 [ 294.216652][T13339] ? fdget_pos+0x247/0x320 [ 294.216679][T13339] ? __pfx___mutex_lock+0x10/0x10 [ 294.216699][T13339] ? __pfx_vfs_read+0x10/0x10 [ 294.216722][T13339] ? __fget_files+0x2a/0x420 [ 294.216739][T13339] ? __fget_files+0x3a0/0x420 [ 294.216753][T13339] ? __fget_files+0x2a/0x420 [ 294.216774][T13339] ksys_read+0x145/0x250 [ 294.216797][T13339] ? __pfx_ksys_read+0x10/0x10 [ 294.216821][T13339] ? do_syscall_64+0xbe/0xfa0 [ 294.216842][T13339] do_syscall_64+0xfa/0xfa0 [ 294.216859][T13339] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.216876][T13339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.216891][T13339] ? clear_bhb_loop+0x60/0xb0 [ 294.216910][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.216925][T13339] RIP: 0033:0x7f817178e15c [ 294.216941][T13339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 294.216955][T13339] RSP: 002b:00007f81725f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.216977][T13339] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178e15c [ 294.216989][T13339] RDX: 000000000000000f RSI: 00007f81725f80a0 RDI: 0000000000000003 [ 294.216999][T13339] RBP: 00007f81725f8090 R08: 0000000000000000 R09: 0000000000000000 [ 294.217009][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.217018][T13339] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff8effacf8 [ 294.217043][T13339] [ 294.576991][T13346] wg1 speed is unknown, defaulting to 1000 [ 294.802864][T13347] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.920604][T13362] wg1 speed is unknown, defaulting to 1000 [ 295.013158][T13370] wg1 speed is unknown, defaulting to 1000 [ 295.426925][T13382] netlink: 'syz.4.2062': attribute type 29 has an invalid length. [ 295.580917][T13387] __nla_validate_parse: 7 callbacks suppressed [ 295.580937][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'. [ 295.780886][T13395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2064'. [ 296.528216][T13428] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:277 [ 296.555840][T13428] netlink: 'syz.3.2072': attribute type 2 has an invalid length. [ 296.613928][T13431] Cannot find set identified by id 65534 to match [ 296.712867][T13436] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 296.720964][T13436] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2074'. [ 296.799993][T13437] vxcan2: entered allmulticast mode [ 297.010238][T13444] wg1 speed is unknown, defaulting to 1000 [ 297.324703][T13458] wg1 speed is unknown, defaulting to 1000 [ 297.349005][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 297.367502][T13461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2081'. [ 297.388312][T13461] FAULT_INJECTION: forcing a failure. [ 297.388312][T13461] name failslab, interval 1, probability 0, space 0, times 0 [ 297.421042][T13461] CPU: 1 UID: 0 PID: 13461 Comm: syz.1.2081 Not tainted syzkaller #0 PREEMPT(full) [ 297.421069][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.421082][T13461] Call Trace: [ 297.421089][T13461] [ 297.421098][T13461] dump_stack_lvl+0x189/0x250 [ 297.421128][T13461] ? __pfx____ratelimit+0x10/0x10 [ 297.421151][T13461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.421177][T13461] ? __pfx__printk+0x10/0x10 [ 297.421199][T13461] ? fs_reclaim_acquire+0x7d/0x100 [ 297.421226][T13461] should_fail_ex+0x414/0x560 [ 297.421260][T13461] should_failslab+0xa8/0x100 [ 297.421282][T13461] kmem_cache_alloc_node_noprof+0x77/0x710 [ 297.421309][T13461] ? __alloc_skb+0x255/0x430 [ 297.421329][T13461] ? napi_skb_cache_get+0x4a5/0x790 [ 297.421348][T13461] ? napi_skb_cache_get+0x151/0x790 [ 297.421376][T13461] __alloc_skb+0x255/0x430 [ 297.421401][T13461] ? __pfx___alloc_skb+0x10/0x10 [ 297.421429][T13461] ? netlink_ack_tlv_len+0x6c/0x210 [ 297.421456][T13461] netlink_ack+0x146/0xa50 [ 297.421497][T13461] netlink_rcv_skb+0x28c/0x470 [ 297.421521][T13461] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 297.421546][T13461] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.421581][T13461] ? bpf_lsm_capable+0x9/0x20 [ 297.421604][T13461] ? security_capable+0x7e/0x2e0 [ 297.421638][T13461] nfnetlink_rcv+0x282/0x2590 [ 297.421658][T13461] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.421679][T13461] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.421707][T13461] ? __dev_queue_xmit+0x2ab/0x3180 [ 297.421731][T13461] ? __dev_queue_xmit+0x2ab/0x3180 [ 297.421758][T13461] ? __dev_queue_xmit+0x1987/0x3180 [ 297.421782][T13461] ? do_syscall_64+0xfa/0xfa0 [ 297.421811][T13461] ? __dev_queue_xmit+0x2ab/0x3180 [ 297.421843][T13461] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 297.421871][T13461] ? __pfx___dev_queue_xmit+0x10/0x10 [ 297.421910][T13461] ? ref_tracker_free+0x63a/0x7d0 [ 297.421930][T13461] ? __asan_memcpy+0x40/0x70 [ 297.421954][T13461] ? __pfx_ref_tracker_free+0x10/0x10 [ 297.421990][T13461] ? skb_clone+0x246/0x3a0 [ 297.422019][T13461] ? __netlink_deliver_tap+0x807/0x850 [ 297.422041][T13461] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.422069][T13461] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.422100][T13461] netlink_unicast+0x82f/0x9e0 [ 297.422130][T13461] ? __pfx_netlink_unicast+0x10/0x10 [ 297.422154][T13461] ? netlink_sendmsg+0x642/0xb30 [ 297.422176][T13461] ? skb_put+0x11b/0x210 [ 297.422202][T13461] netlink_sendmsg+0x805/0xb30 [ 297.422237][T13461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.422266][T13461] ? aa_sock_msg_perm+0xf1/0x1d0 [ 297.422296][T13461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.422315][T13461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.422341][T13461] __sock_sendmsg+0x21c/0x270 [ 297.422373][T13461] ____sys_sendmsg+0x505/0x830 [ 297.422403][T13461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.422437][T13461] ? import_iovec+0x74/0xa0 [ 297.422466][T13461] ___sys_sendmsg+0x21f/0x2a0 [ 297.422493][T13461] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.422553][T13461] ? __fget_files+0x2a/0x420 [ 297.422571][T13461] ? __fget_files+0x3a0/0x420 [ 297.422600][T13461] __x64_sys_sendmsg+0x19b/0x260 [ 297.422627][T13461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.422661][T13461] ? __pfx_ksys_write+0x10/0x10 [ 297.422693][T13461] ? do_syscall_64+0xbe/0xfa0 [ 297.422720][T13461] do_syscall_64+0xfa/0xfa0 [ 297.422741][T13461] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.422764][T13461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.422783][T13461] ? clear_bhb_loop+0x60/0xb0 [ 297.422807][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.422824][T13461] RIP: 0033:0x7f5e32b8f749 [ 297.422841][T13461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.422858][T13461] RSP: 002b:00007f5e30df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.422879][T13461] RAX: ffffffffffffffda RBX: 00007f5e32de5fa0 RCX: 00007f5e32b8f749 [ 297.422900][T13461] RDX: 0000000020000080 RSI: 0000200000006680 RDI: 0000000000000003 [ 297.422913][T13461] RBP: 00007f5e30df6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.422926][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.422938][T13461] R13: 00007f5e32de6038 R14: 00007f5e32de5fa0 R15: 00007ffeb07e6718 [ 297.422971][T13461] [ 298.018052][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2079'. [ 298.049842][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 298.137177][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 298.371348][T13492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'. [ 298.469602][T13490] bridge0: entered promiscuous mode [ 298.499052][T13490] macsec1: entered promiscuous mode [ 298.544755][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2088'. [ 298.589104][T13490] bridge0: port 3(macsec1) entered blocking state [ 298.608404][T13490] bridge0: port 3(macsec1) entered disabled state [ 298.630112][T13490] macsec1: entered allmulticast mode [ 298.659741][T13490] bridge0: entered allmulticast mode [ 298.885133][T13490] macsec1: left allmulticast mode [ 298.890879][T13490] bridge0: left allmulticast mode [ 298.934083][T13490] bridge0: left promiscuous mode [ 299.128439][T13517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.216827][T13517] netlink: 'syz.4.2090': attribute type 1 has an invalid length. [ 299.344844][T13522] bond11: (slave bridge1): making interface the new active one [ 299.351335][T13517] atomic_op ffff888027c06198 conn xmit_atomic 0000000000000000 [ 299.353445][T13522] bond11: (slave bridge1): Enslaving as an active interface with an up link [ 299.389260][T13527] netlink: 'syz.2.2093': attribute type 1 has an invalid length. [ 299.476305][T13528] vxcan2: entered allmulticast mode [ 300.242176][T13557] wg1 speed is unknown, defaulting to 1000 [ 300.489257][T13570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.575392][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.582685][ C1] bridge0: topology change detected, propagating [ 300.589417][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.596678][ C1] bridge0: topology change detected, propagating [ 300.873046][T13557] __nla_validate_parse: 5 callbacks suppressed [ 300.873065][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 300.958628][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2105'. [ 301.067701][T13589] sctp: [Deprecated]: syz.0.2107 (pid 13589) Use of int in max_burst socket option. [ 301.067701][T13589] Use struct sctp_assoc_value instead [ 301.147576][T13591] sch_fq: defrate 4294967293 ignored. [ 301.269917][T13591] tipc: Enabled bearer , priority 0 [ 301.282096][T13595] syzkaller0: entered promiscuous mode [ 301.315091][T13595] syzkaller0: entered allmulticast mode [ 301.369273][T13591] netlink: 'syz.4.2109': attribute type 29 has an invalid length. [ 301.380169][T13591] tipc: Resetting bearer [ 301.391275][T13590] tipc: Resetting bearer [ 301.413400][T13590] tipc: Disabling bearer [ 301.543003][T13600] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 301.563178][T13600] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2111'. [ 301.640280][T13603] vxcan2: entered allmulticast mode [ 301.911958][T13606] bridge0: entered promiscuous mode [ 301.921701][T13606] macsec2: entered promiscuous mode [ 301.930694][T13606] bridge0: port 3(macsec2) entered blocking state [ 301.940683][T13606] bridge0: port 3(macsec2) entered disabled state [ 301.947798][T13606] macsec2: entered allmulticast mode [ 301.953433][T13606] bridge0: entered allmulticast mode [ 301.978579][T13606] macsec2: left allmulticast mode [ 301.990423][T13606] bridge0: left allmulticast mode [ 302.011641][T13606] bridge0: left promiscuous mode [ 302.087110][T13608] dummy0: entered promiscuous mode [ 302.116064][T13608] dummy0: left promiscuous mode [ 302.478086][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.601887][T13617] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 302.727508][T13627] netlink: 'syz.4.2118': attribute type 3 has an invalid length. [ 302.745224][T13617] atomic_op ffff88807d41b998 conn xmit_atomic 0000000000000000 [ 302.769897][T13624] bond6: (slave bridge5): making interface the new active one [ 302.793989][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 302.814831][T13624] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 303.014000][T13640] wg1 speed is unknown, defaulting to 1000 [ 303.028855][T13642] Cannot find set identified by id 65534 to match [ 303.360422][T13649] wg1 speed is unknown, defaulting to 1000 [ 303.677954][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 303.737111][T13666] netlink: 'syz.0.2127': attribute type 3 has an invalid length. [ 303.990222][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 304.419856][T13696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.511442][T13696] netlink: 'syz.0.2131': attribute type 1 has an invalid length. [ 304.725907][T13707] bond7: (slave bridge6): making interface the new active one [ 304.761184][T13707] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 304.825969][T13716] netlink: 'syz.1.2134': attribute type 3 has an invalid length. [ 304.995955][T13727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2136'. [ 305.058533][T13727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2136'. [ 305.096347][T13727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2136'. [ 305.274970][T13739] netlink: 'syz.1.2141': attribute type 3 has an invalid length. [ 305.331209][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2139'. [ 305.360081][T13735] macvtap2: entered promiscuous mode [ 305.396455][T13735] team0: entered promiscuous mode [ 305.415489][T13735] team_slave_0: entered promiscuous mode [ 305.422112][T13735] team_slave_1: entered promiscuous mode [ 305.441897][T13735] macvtap2: entered allmulticast mode [ 305.475325][T13735] team0: entered allmulticast mode [ 305.488228][T13735] team_slave_0: entered allmulticast mode [ 305.526225][T13735] team_slave_1: entered allmulticast mode [ 305.547184][T13735] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 305.603117][T13743] macvtap2: left promiscuous mode [ 305.619394][T13743] team0: left promiscuous mode [ 305.634415][T13743] team_slave_0: left promiscuous mode [ 305.651128][T13743] team_slave_1: left promiscuous mode [ 305.690736][T13743] macvtap2: left allmulticast mode [ 305.705385][T13743] team0: left allmulticast mode [ 305.715550][T13743] team_slave_0: left allmulticast mode [ 305.734508][T13743] team_slave_1: left allmulticast mode [ 305.841483][T13741] wg1 speed is unknown, defaulting to 1000 [ 305.972478][T13766] __nla_validate_parse: 1 callbacks suppressed [ 305.972497][T13766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2144'. [ 306.279450][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'. [ 306.745937][T13798] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2152'. [ 307.000952][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'. [ 307.023190][T13807] Cannot find set identified by id 65534 to match [ 307.036006][T13805] netlink: 'syz.3.2155': attribute type 3 has an invalid length. [ 307.246662][T13813] syzkaller0: entered promiscuous mode [ 307.252181][T13813] syzkaller0: entered allmulticast mode [ 307.281346][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 307.378481][T13819] tipc: Enabled bearer , priority 0 [ 307.414953][T13810] tipc: Resetting bearer [ 307.500618][T13810] tipc: Disabling bearer [ 307.669559][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2160'. [ 307.717814][ T6518] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.729586][T13828] FAULT_INJECTION: forcing a failure. [ 307.729586][T13828] name failslab, interval 1, probability 0, space 0, times 0 [ 307.775483][T13828] CPU: 1 UID: 0 PID: 13828 Comm: syz.3.2160 Not tainted syzkaller #0 PREEMPT(full) [ 307.775510][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.775522][T13828] Call Trace: [ 307.775530][T13828] [ 307.775538][T13828] dump_stack_lvl+0x189/0x250 [ 307.775570][T13828] ? __pfx____ratelimit+0x10/0x10 [ 307.775593][T13828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.775619][T13828] ? __pfx__printk+0x10/0x10 [ 307.775646][T13828] ? __pfx___might_resched+0x10/0x10 [ 307.775667][T13828] ? fs_reclaim_acquire+0x7d/0x100 [ 307.775691][T13828] should_fail_ex+0x414/0x560 [ 307.775726][T13828] should_failslab+0xa8/0x100 [ 307.775748][T13828] __kmalloc_cache_noprof+0x6f/0x6f0 [ 307.775776][T13828] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.775797][T13828] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 307.775826][T13828] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 307.775857][T13828] mptcp_sendmsg_fastopen+0x17d/0x580 [ 307.775889][T13828] mptcp_sendmsg+0x1774/0x1980 [ 307.775911][T13828] ? __pfx___might_resched+0x10/0x10 [ 307.775946][T13828] ? aa_sk_perm+0x81e/0x950 [ 307.775977][T13828] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.776003][T13828] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 307.776033][T13828] ? inet6_sendmsg+0x101/0x120 [ 307.776062][T13828] __sock_sendmsg+0xe5/0x270 [ 307.776095][T13828] ____sys_sendmsg+0x505/0x830 [ 307.776124][T13828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.776158][T13828] ? import_iovec+0x74/0xa0 [ 307.776192][T13828] ___sys_sendmsg+0x21f/0x2a0 [ 307.776219][T13828] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.776281][T13828] ? __fget_files+0x2a/0x420 [ 307.776299][T13828] ? __fget_files+0x3a0/0x420 [ 307.776326][T13828] __x64_sys_sendmsg+0x19b/0x260 [ 307.776351][T13828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.776383][T13828] ? __pfx_ksys_write+0x10/0x10 [ 307.776414][T13828] ? do_syscall_64+0xbe/0xfa0 [ 307.776441][T13828] do_syscall_64+0xfa/0xfa0 [ 307.776462][T13828] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.776485][T13828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.776504][T13828] ? clear_bhb_loop+0x60/0xb0 [ 307.776532][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.776551][T13828] RIP: 0033:0x7f817178f749 [ 307.776568][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.776586][T13828] RSP: 002b:00007f81725f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.776607][T13828] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178f749 [ 307.776622][T13828] RDX: 0000000004040845 RSI: 0000200000000680 RDI: 0000000000000003 [ 307.776635][T13828] RBP: 00007f81725f8090 R08: 0000000000000000 R09: 0000000000000000 [ 307.776647][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.776659][T13828] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff8effacf8 [ 307.776693][T13828] [ 307.776916][T13828] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 308.062724][T13828] CPU: 1 UID: 0 PID: 13828 Comm: syz.3.2160 Not tainted syzkaller #0 PREEMPT(full) [ 308.072080][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.082120][T13828] RIP: 0010:__tcp_select_window+0x824/0x1320 [ 308.088097][T13828] Code: ff ff ff 44 89 f1 d3 e0 89 c1 f7 d1 41 01 cc 41 21 c4 e9 a9 00 00 00 e8 7a b3 00 f8 e9 9c 00 00 00 e8 70 b3 00 f8 44 89 e0 99 7c 24 1c 41 29 d4 48 bb 00 00 00 00 00 fc ff df e9 80 00 00 00 [ 308.107713][T13828] RSP: 0018:ffffc9001a8473a0 EFLAGS: 00010293 [ 308.113933][T13828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802eba0000 [ 308.121896][T13828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.129857][T13828] RBP: ffffc9001a847490 R08: ffff88805da80143 R09: 1ffff1100bb50028 [ 308.137822][T13828] R10: dffffc0000000000 R11: ffffed100bb50029 R12: 0000000000000000 [ 308.145807][T13828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.153779][T13828] FS: 00007f81725f86c0(0000) GS:ffff888126232000(0000) knlGS:0000000000000000 [ 308.162715][T13828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.169292][T13828] CR2: 0000200000fba030 CR3: 000000007177e000 CR4: 00000000003526f0 [ 308.177259][T13828] Call Trace: [ 308.180540][T13828] [ 308.183485][T13828] ? __pfx___tcp_select_window+0x10/0x10 [ 308.189121][T13828] __tcp_transmit_skb+0xbc7/0x3aa0 [ 308.194243][T13828] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 308.199791][T13828] ? read_tsc+0x9/0x20 [ 308.203864][T13828] ? ktime_get+0x1d2/0x200 [ 308.208277][T13828] tcp_send_active_reset+0x2d1/0x5b0 [ 308.213571][T13828] mptcp_do_fastclose+0x286/0x390 [ 308.218608][T13828] mptcp_disconnect+0x238/0x730 [ 308.223475][T13828] mptcp_sendmsg_fastopen+0x2f8/0x580 [ 308.229033][T13828] mptcp_sendmsg+0x1774/0x1980 [ 308.233810][T13828] ? __pfx___might_resched+0x10/0x10 [ 308.239095][T13828] ? aa_sk_perm+0x81e/0x950 [ 308.243688][T13828] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.248534][T13828] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 308.253641][T13828] ? inet6_sendmsg+0x101/0x120 [ 308.258403][T13828] __sock_sendmsg+0xe5/0x270 [ 308.263175][T13828] ____sys_sendmsg+0x505/0x830 [ 308.267933][T13828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.273215][T13828] ? import_iovec+0x74/0xa0 [ 308.277714][T13828] ___sys_sendmsg+0x21f/0x2a0 [ 308.282384][T13828] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.287589][T13828] ? __fget_files+0x2a/0x420 [ 308.292169][T13828] ? __fget_files+0x3a0/0x420 [ 308.296849][T13828] __x64_sys_sendmsg+0x19b/0x260 [ 308.301781][T13828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.307240][T13828] ? __pfx_ksys_write+0x10/0x10 [ 308.312083][T13828] ? do_syscall_64+0xbe/0xfa0 [ 308.316841][T13828] do_syscall_64+0xfa/0xfa0 [ 308.321333][T13828] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.326518][T13828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.332572][T13828] ? clear_bhb_loop+0x60/0xb0 [ 308.337238][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.343120][T13828] RIP: 0033:0x7f817178f749 [ 308.347522][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.367117][T13828] RSP: 002b:00007f81725f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.375525][T13828] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178f749 [ 308.383486][T13828] RDX: 0000000004040845 RSI: 0000200000000680 RDI: 0000000000000003 [ 308.391447][T13828] RBP: 00007f81725f8090 R08: 0000000000000000 R09: 0000000000000000 [ 308.399409][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.407366][T13828] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff8effacf8 [ 308.415335][T13828] [ 308.418340][T13828] Modules linked in: [ 308.422787][T13828] ---[ end trace 0000000000000000 ]--- [ 308.445869][T13834] bridge0: entered promiscuous mode [ 308.451572][T13834] macsec2: entered promiscuous mode [ 308.458440][T13834] bridge0: port 3(macsec2) entered blocking state [ 308.465093][T13834] bridge0: port 3(macsec2) entered disabled state [ 308.471655][T13828] RIP: 0010:__tcp_select_window+0x824/0x1320 [ 308.479947][T13834] macsec2: entered allmulticast mode [ 308.485629][T13834] bridge0: entered allmulticast mode [ 308.493308][T13834] macsec2: left allmulticast mode [ 308.498608][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.506973][T13834] bridge0: left allmulticast mode [ 308.512531][T13828] Code: ff ff ff 44 89 f1 d3 e0 89 c1 f7 d1 41 01 cc 41 21 c4 e9 a9 00 00 00 e8 7a b3 00 f8 e9 9c 00 00 00 e8 70 b3 00 f8 44 89 e0 99 7c 24 1c 41 29 d4 48 bb 00 00 00 00 00 fc ff df e9 80 00 00 00 [ 308.533113][T13834] bridge0: left promiscuous mode [ 308.559068][T13838] dummy0: entered promiscuous mode [ 308.565520][T13838] dummy0: left promiscuous mode [ 308.578864][T13828] RSP: 0018:ffffc9001a8473a0 EFLAGS: 00010293 [ 308.585093][T13828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802eba0000 [ 308.593213][T13828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.602300][T13828] RBP: ffffc9001a847490 R08: ffff88805da80143 R09: 1ffff1100bb50028 [ 308.611135][T13828] R10: dffffc0000000000 R11: ffffed100bb50029 R12: 0000000000000000 [ 308.619372][T13828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.627414][T13828] FS: 00007f81725f86c0(0000) GS:ffff888126232000(0000) knlGS:0000000000000000 [ 308.636518][T13828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.643119][T13828] CR2: 0000001b30e1cff8 CR3: 000000007177e000 CR4: 00000000003526f0 [ 308.651887][T13828] Kernel panic - not syncing: Fatal exception [ 308.658378][T13828] Kernel Offset: disabled [ 308.662693][T13828] Rebooting in 86400 seconds..