last executing test programs: 4.727210805s ago: executing program 4 (id=5277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe, 0xf00}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4.359419337s ago: executing program 4 (id=5283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000400)={r4, 0xa}, &(0x7f0000000440)=0x8) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x800) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000880)={0x0, 0xef, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="01002abd7000ffdbdf254f00001408000300", @ANYRES32=r6, @ANYBLOB="38007a801400020019aa6e325fd4877adebf53b46bdf46820c0003001ba6ca830bf5ed2a140001"], 0x54}, 0x1, 0x0, 0x0, 0x4008840}, 0x40018e0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000040)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000002044000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="07000000050000000200000000000000c38ab80400aa15562916163de70eb2d43e2e720c8f71b4ce0236eda423bb90b667eedb064e889876df23978619eac9d4a46c8d9b9cb6d4f3a94d12bb8c6da9a6e6b29acc274ec615934204fccd042aea25721bffe831bf230152301f2a51ee84912a1df4e1aecc5a367c5aac5b77520414947c310c8eab5f400dfe85df79b5e68b5676871ed1a3e0cedd65443cd8b90bfdec62a8641f7b220571"], 0x50) 4.357348543s ago: executing program 3 (id=5284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001400e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.955850262s ago: executing program 3 (id=5287): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x11, 0x67, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4008001) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1, 0x4, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 3.678787361s ago: executing program 3 (id=5292): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="20000000170a0102000000000000000002000002090001001badd7847b3058d281e6d79f01df957f9d685d0e108ead6f77ebbb7f4c1f831cb812b9213b1bc4c52cc3a11f217de18323546349f13c59c13d24ecbba74090126c9f9911241612f742fc3263a35ec5ef8444ef588c07c9d1af71b0882fe53eb2"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) close(r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00010300000000480000000101"], 0x114}], 0x1}, 0x24044010) recvmmsg(r5, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) unshare(0x20000400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r6, 0x86a) poll(&(0x7f00000003c0)=[{r6, 0x44}], 0x1, 0x3) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x1178, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1150, 0x3, 0x0, 0x1, [{0x114c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x1144, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "f5cbd1d0c12cd0832174786c09cd1396e112f3c14e487069049afe6b536df1275f22786757ccfcb6bf9718b31c14b843a6c7c519bbcd7ca8c58cd4fedd87cabcebf3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "09e7f451b1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "5a8682a6b2374fe50a5114b4f7689d7e433c4243c3d482cc6b9c05f6fbaafe13c3570ee3d38a5df512f27a3b05921bbca8bd7663345ef10f370886"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfb412a783014ba90}]}, @NFTA_DATA_VALUE={0x13, 0x1, "9ad59dff35c38fad598e2f8ad11ac8"}]}]}]}]}], {0x14, 0x10}}, 0x11fc}}, 0x0) 3.479832082s ago: executing program 3 (id=5296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x8}, 0x9c) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r5, 0xfffc}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={r5, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x8ecc}}, 0x7, 0x9, 0x0, 0xb40c, 0x80, 0x6, 0x5}, &(0x7f0000000700)=0x9c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80200a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x0, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffc, 0x365400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000400)={0x40, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x40}}, 0x4040004) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.337360259s ago: executing program 0 (id=5300): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63b", 0x95}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6", 0x2d}, {0x0}, {&(0x7f0000000900)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xf5802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 3.33369883s ago: executing program 1 (id=5301): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 3.215630445s ago: executing program 1 (id=5302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0x3}, 0x20) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r4}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x60600) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x2a}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x2000003, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 3.21246362s ago: executing program 0 (id=5303): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)={0x16}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0800000004000000040000000200000000f00000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x11, 0x3, 0xd) accept4$unix(r2, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3283}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006118b8000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x801) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x5) close(r5) 3.194140876s ago: executing program 4 (id=5304): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000700)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r3}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb673468a1d4", 0x6}], 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (fail_nth: 2) 2.754926053s ago: executing program 1 (id=5305): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x22020600) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r0) (async) 2.754592068s ago: executing program 4 (id=5306): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0xfffffcf9) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d", 0xdd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4235", 0x7d}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53433dfe15559c287c995119", 0xca}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 2.567433414s ago: executing program 1 (id=5307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in6=@mcast1, 0x200, 0x0, 0x4e24, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7ffffffffffffffe, 0xc, 0x0, 0x3ff, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x2000007, 0x0, 0x1, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x8040040) socket(0x1e, 0x5, 0x20000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040400) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0x5, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xffffffffffffff87}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x3, 'dh\x00', 0x1, 0x5, 0x6e}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 2.487547061s ago: executing program 3 (id=5308): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (fail_nth: 7) 2.407789636s ago: executing program 2 (id=5309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\b\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25140000000c0007800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.363647388s ago: executing program 1 (id=5310): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af365132112fbb0001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}, {&(0x7f0000000000)="e0a6d2ff9430c0cfa0d682eb00c508f36a2aafa827a8e96f121e2a80164c734d8442520b8fd41f122551096ac18607c34313ffdddc9a49b7f6a9a9356153dc5d1b81f45074b2d886e8", 0x49}, {&(0x7f0000000540)="fc6be3a200b73f72abde38184d17f3ff10b6394b15aed701009f1d2537d5d0be1d38da84988e3b827e3a7be87db2a0d2332eb05411d99dc239f1b07c9b2b8e342883a0541502aa1b32a67f0d0d85dba76c8b4668bf252f0f2fc16012988ddfd1790cd2323cf904ddc39998331fc86eb57de90c04beb9e9b9c42e16ecf326cf171152771084acbc4e", 0x88}, {&(0x7f0000000940)="210e9fda08f1fcf8b4bc99eda18142330231fc77d99c715d48634f723c157355d145c27d0f1fb7f7c474848ae41467cc8fa017a9d3875ee6ebc9ea0cba506089927ccd3ac3186cda153a58fd960eb2d57875be24b722b6fc7fe010736430b5dbfe7b2aa3723865c56a7a429083605141c0e8ac2673ad81d8a140d9f994eed113cfccf11436238ee3630abb524411e00084b8", 0x92}, {&(0x7f0000000a00)="987ca86748d906317d829f3c409e6a9e54f1101ba60fe305161ae5c8c1120a82096f4dc999c0", 0x26}, {&(0x7f0000000b80)="fd259d7367a9d47bf5c5a7dadfececf3d35e04120141bae711", 0x19}], 0x6, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000a40)=""/279, 0x117}, {&(0x7f0000000d00)=""/4056, 0xfd8}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f0000000780)=""/200, 0xc8}], 0x8}, 0x10182) 2.307767996s ago: executing program 0 (id=5311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14, 0xfffe}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0xe07, 0x68, 0x0, 0xb, 0x32, 0x0, @private=0xa010100, @broadcast}, "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"}}, 0xe15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, {0xa, 0x4e23, 0x7, @local, 0x3}, 0x0, {[0x7, 0x6, 0x8, 0x3b9, 0x7, 0x8, 0x7, 0xb]}}, 0x5c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd832}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x720}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10001}]}, 0x94}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 1.635799375s ago: executing program 2 (id=5312): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 1.63536643s ago: executing program 4 (id=5313): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63b", 0x95}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6", 0x2d}, {0x0}, {&(0x7f0000000900)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xf5802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 1.615446255s ago: executing program 2 (id=5314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x4]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x1001}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffd38, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001400)=""/170}, {&(0x7f00000014c0)=""/186}, {&(0x7f0000001580)=""/162}, {&(0x7f0000001640)=""/200}, {&(0x7f0000001740)=""/208}, {&(0x7f0000001840)=""/206}, {&(0x7f0000001940)=""/211}, {&(0x7f0000001a40)=""/170}]}, 0x7f}, {{&(0x7f0000001b80), 0x0, &(0x7f0000004300)=[{&(0x7f0000001c00)=""/2}, {&(0x7f0000001c40)=""/195}, {&(0x7f0000001d40)=""/208}, {&(0x7f0000001e40)=""/100}, {&(0x7f0000001ec0)=""/4096}, {&(0x7f0000002ec0)=""/201}, {&(0x7f0000002fc0)=""/164}, {&(0x7f0000003080)=""/252}, {&(0x7f0000003180)=""/32}, {&(0x7f0000003300)=""/4096}], 0x0, &(0x7f00000043c0)=""/69}, 0x2}], 0x400000000000262, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="d8"]}]}]}, @typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0x10d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000280)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @remote}, 0x26, {0x2, 0x4e24, @remote}, 'wlan0\x00'}) unshare(0xe040400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x40800) r6 = socket(0x1d, 0x2, 0x6) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000805) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000100001070000000008001a00", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000140)={@private2, 0xd8ca, 0x1, 0x3, 0x2, 0x4, 0x9}, &(0x7f00000001c0)=0x20) socket$xdp(0x2c, 0x3, 0x0) 698.229729ms ago: executing program 2 (id=5315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 6) 255.229113ms ago: executing program 1 (id=5316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0x9}, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0x2a}, {&(0x7f0000000340)="448b7cff000000000000", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b88695211f0", 0x11}], 0x3) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a000100fcffffff000000011c1400000000fe0b002100003844084d5539856deb354075"], 0x1c}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0], 0x50) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f00000000000000020100001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400008db7030000000700008500000086000000bf09000000000000550901000201000095000000000000002500feff0800000018140000", @ANYRES32=r8, @ANYBLOB="0000000000000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000480)=0x3) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040), 0x4) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000003c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x80000001, 0x401, {{0xe, 0x4, 0x3, 0x22, 0x38, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty, {[@end, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "e8f21cd2c5d2d3f799736f2a54"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) 254.376438ms ago: executing program 4 (id=5317): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 252.838226ms ago: executing program 2 (id=5318): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000003f40)=""/41, 0x29}, {&(0x7f0000003f80)=""/135, 0x87}, {&(0x7f00000014c0)=""/200, 0xc8}], 0x5}, 0x7fff}], 0x3, 0x12, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 188.480041ms ago: executing program 0 (id=5319): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x1e) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="8fc5dfb9e898", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 24) 163.063578ms ago: executing program 3 (id=5320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in6=@mcast1, 0x200, 0x0, 0x4e24, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7ffffffffffffffe, 0xc, 0x0, 0x3ff, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x2000007, 0x0, 0x1, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x8040040) socket(0x1e, 0x5, 0x20000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040400) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0x5, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xffffffffffffff87}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x3, 'dh\x00', 0x1, 0x5, 0x6e}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 138.657962ms ago: executing program 2 (id=5321): r0 = socket$inet6(0xa, 0x80d, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [0xffff00, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff, 0xffffff00], 'syz_tun\x00', 'macvtap0\x00', {0xff}, {}, 0xff, 0x7, 0x2, 0x4f}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x77, 0x2, 0x1, [0x8, 0x1000, 0x40, 0x9, 0xfff8, 0x1, 0x6, 0x2, 0x6, 0x7, 0xfee2, 0x2, 0xfff1, 0x2, 0x6, 0x9], 0x3}}, @common=@ah={{0x30}, {[0x3, 0x4d6], 0x8, 0x2, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @remote, [0xff, 0x0, 0xffffff00, 0xffff00], [0xff, 0xff000000, 0xff, 0xff], 'nr0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x6c, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x0, 0x2}, {0x1, 0x5}}}}, {{@ipv6={@private1, @remote, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xff, 0x0, 0xff000000], 'vcan0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x84, 0x2, 0x1, 0x40}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x6], 0x6, 0x22, 0x1}}, @common=@dst={{0x48}, {0x1, 0x4, 0x0, [0xfffe, 0xd, 0x5, 0x7, 0x0, 0x5, 0x6, 0xf, 0x200, 0x1, 0x8, 0x0, 0x2, 0x2, 0x98a, 0x3], 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010004000000fbe7df2501000000080001064f80a8c01f1515ef53bb59529c811900001400048005000300010000000500030006000000"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0xc040814}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, 0x0, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r2) sendmsg$NFC_CMD_SE_IO(r3, 0x0, 0x48094) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xa, 0x15e, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r10, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) 15.998126ms ago: executing program 0 (id=5322): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf8, 0x3, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000023c0)="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", 0x2e7}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x1200) 0s ago: executing program 0 (id=5323): unshare(0x28000600) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8901, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) unshare(0x28000600) (async) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x8901, &(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) (async) kernel console output (not intermixed with test programs): onnections per device. [ 606.179911][T20579] block nbd2: shutting down sockets [ 606.455901][T20592] syzkaller0: entered promiscuous mode [ 606.483578][T20592] syzkaller0: entered allmulticast mode [ 606.687149][T20605] netlink: 'syz.3.4425': attribute type 13 has an invalid length. [ 606.695889][T20604] netlink: 'syz.3.4425': attribute type 13 has an invalid length. [ 606.728314][T20605] netlink: 'syz.3.4425': attribute type 17 has an invalid length. [ 606.783535][T20604] netlink: 'syz.3.4425': attribute type 17 has an invalid length. [ 607.165673][T20605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.196814][T20605] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.217799][T20605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.240563][T20604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.286727][T20635] __nla_validate_parse: 1 callbacks suppressed [ 607.286750][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4433'. [ 607.364312][T20635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.394789][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4433'. [ 607.475723][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4429'. [ 607.576458][T20643] netlink: 'syz.4.4429': attribute type 1 has an invalid length. [ 607.584451][T20629] syzkaller0: entered promiscuous mode [ 607.584483][T20629] syzkaller0: entered allmulticast mode [ 607.615966][T20642] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 607.625465][T20643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4429'. [ 610.578111][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'. [ 610.579461][T20681] FAULT_INJECTION: forcing a failure. [ 610.579461][T20681] name failslab, interval 1, probability 0, space 0, times 0 [ 610.630816][T20681] CPU: 0 UID: 0 PID: 20681 Comm: syz.3.4445 Not tainted syzkaller #0 PREEMPT(full) [ 610.630846][T20681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.630860][T20681] Call Trace: [ 610.630869][T20681] [ 610.630884][T20681] dump_stack_lvl+0xe8/0x150 [ 610.630924][T20681] should_fail_ex+0x412/0x560 [ 610.630961][T20681] should_failslab+0xa8/0x100 [ 610.630990][T20681] __kmalloc_cache_noprof+0x88/0x660 [ 610.631017][T20681] ? __hw_addr_create+0x60/0x250 [ 610.631047][T20681] __hw_addr_create+0x60/0x250 [ 610.631067][T20681] ? stack_depot_init+0x36/0x1a0 [ 610.631092][T20681] __hw_addr_add_ex+0x1c2/0x520 [ 610.631122][T20681] dev_addr_init+0x15e/0x240 [ 610.631150][T20681] ? __pfx_dev_addr_init+0x10/0x10 [ 610.631176][T20681] ? alloc_netdev_mqs+0xa8/0x1210 [ 610.631212][T20681] alloc_netdev_mqs+0x2b3/0x1210 [ 610.631237][T20681] ? __pfx_vlan_setup+0x10/0x10 [ 610.631276][T20681] rtnl_create_link+0x31f/0xd70 [ 610.631312][T20681] rtnl_newlink_create+0x277/0xb70 [ 610.631335][T20681] ? __pfx___nla_validate_parse+0x10/0x10 [ 610.631371][T20681] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 610.631407][T20681] ? __pfx___mutex_lock+0x10/0x10 [ 610.631451][T20681] ? ns_capable+0x89/0xe0 [ 610.631486][T20681] rtnl_newlink+0x166a/0x1bb0 [ 610.631526][T20681] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.631544][T20681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.631610][T20681] ? kasan_quarantine_put+0xbb/0x1f0 [ 610.631634][T20681] ? lockdep_hardirqs_on+0x7a/0x110 [ 610.631668][T20681] ? nlmon_xmit+0xb0/0x100 [ 610.631697][T20681] ? kmem_cache_free+0x182/0x650 [ 610.631737][T20681] ? __lock_acquire+0x6b5/0x2cf0 [ 610.631774][T20681] ? __dev_queue_xmit+0x2b6/0x3950 [ 610.631803][T20681] ? __local_bh_enable_ip+0xd0/0x130 [ 610.631834][T20681] ? lockdep_hardirqs_on+0x7a/0x110 [ 610.631879][T20681] ? __dev_queue_xmit+0x2b6/0x3950 [ 610.631901][T20681] ? __local_bh_enable_ip+0xd0/0x130 [ 610.631929][T20681] ? __dev_queue_xmit+0x2b6/0x3950 [ 610.631962][T20681] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 610.632011][T20681] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.632031][T20681] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 610.632067][T20681] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 610.632098][T20681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.632127][T20681] ? ref_tracker_free+0x693/0x840 [ 610.632152][T20681] ? __pfx_ref_tracker_free+0x10/0x10 [ 610.632187][T20681] netlink_rcv_skb+0x232/0x4b0 [ 610.632211][T20681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.632245][T20681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.632282][T20681] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.632303][T20681] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.632332][T20681] netlink_unicast+0x75c/0x8e0 [ 610.632374][T20681] netlink_sendmsg+0x813/0xb40 [ 610.632415][T20681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.632442][T20681] ? aa_sock_msg_perm+0xf1/0x1b0 [ 610.632467][T20681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.632497][T20681] ____sys_sendmsg+0x972/0x9f0 [ 610.632519][T20681] ? __might_fault+0xaf/0x130 [ 610.632549][T20681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.632580][T20681] ? import_iovec+0x73/0xa0 [ 610.632610][T20681] ___sys_sendmsg+0x2a5/0x360 [ 610.632632][T20681] ? __lock_acquire+0x6b5/0x2cf0 [ 610.632668][T20681] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.632733][T20681] ? __fget_files+0x2a/0x420 [ 610.632754][T20681] ? __fget_files+0x3a0/0x420 [ 610.632789][T20681] __x64_sys_sendmsg+0x1bd/0x2a0 [ 610.632816][T20681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.632851][T20681] ? __pfx_ksys_write+0x10/0x10 [ 610.632888][T20681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.632911][T20681] do_syscall_64+0x15f/0xf80 [ 610.632937][T20681] ? trace_irq_disable+0x3b/0x140 [ 610.632965][T20681] ? clear_bhb_loop+0x40/0x90 [ 610.632991][T20681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.633013][T20681] RIP: 0033:0x7fae2559cdd9 [ 610.633035][T20681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.633052][T20681] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.633075][T20681] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 610.633090][T20681] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 610.633104][T20681] RBP: 00007fae26482090 R08: 0000000000000000 R09: 0000000000000000 [ 610.633117][T20681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.633130][T20681] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 610.633164][T20681] [ 613.026418][T20749] syzkaller0: entered promiscuous mode [ 613.043613][T20749] syzkaller0: entered allmulticast mode [ 613.150657][T20754] tipc: Enabled bearer , priority 0 [ 613.303113][T20751] syzkaller0: entered promiscuous mode [ 613.309930][T20751] syzkaller0: entered allmulticast mode [ 613.316863][T20761] FAULT_INJECTION: forcing a failure. [ 613.316863][T20761] name failslab, interval 1, probability 0, space 0, times 0 [ 613.320556][T20751] tipc: Resetting bearer [ 613.330899][T20761] CPU: 1 UID: 0 PID: 20761 Comm: syz.3.4471 Not tainted syzkaller #0 PREEMPT(full) [ 613.330925][T20761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.330937][T20761] Call Trace: [ 613.330945][T20761] [ 613.330959][T20761] dump_stack_lvl+0xe8/0x150 [ 613.330994][T20761] should_fail_ex+0x412/0x560 [ 613.331029][T20761] should_failslab+0xa8/0x100 [ 613.331057][T20761] __kmalloc_cache_noprof+0x88/0x660 [ 613.331080][T20761] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 613.331113][T20761] ? sctp_add_bind_addr+0x8c/0x370 [ 613.331142][T20761] sctp_add_bind_addr+0x8c/0x370 [ 613.331170][T20761] sctp_copy_local_addr_list+0x314/0x4f0 [ 613.331198][T20761] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 613.331223][T20761] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 613.331250][T20761] ? sctp_v6_is_any+0x64/0x80 [ 613.331277][T20761] ? sctp_copy_one_addr+0x93/0x360 [ 613.331304][T20761] sctp_bind_addr_copy+0xb3/0x3c0 [ 613.331336][T20761] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 613.331362][T20761] sctp_connect_new_asoc+0x2ff/0x6b0 [ 613.331385][T20761] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 613.331410][T20761] ? __local_bh_enable_ip+0xd0/0x130 [ 613.331436][T20761] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 613.331460][T20761] ? security_sctp_bind_connect+0x7e/0x2c0 [ 613.331490][T20761] sctp_sendmsg+0x1528/0x2c10 [ 613.331533][T20761] ? __pfx_sctp_sendmsg+0x10/0x10 [ 613.331565][T20761] ? aa_sk_perm+0x6d5/0x900 [ 613.331593][T20761] ? __might_fault+0xaf/0x130 [ 613.331621][T20761] ? __pfx_aa_sk_perm+0x10/0x10 [ 613.331652][T20761] ? sock_rps_record_flow+0x19/0x350 [ 613.331674][T20761] ? __pfx_inet_sendmsg+0x10/0x10 [ 613.331697][T20761] ? inet_sendmsg+0x2f4/0x370 [ 613.331729][T20761] ? __pfx_inet_sendmsg+0x10/0x10 [ 613.331758][T20761] __sys_sendto+0x5de/0x710 [ 613.331780][T20761] ? __pfx___sys_sendto+0x10/0x10 [ 613.331796][T20761] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 613.331836][T20761] ? __fget_files+0x3a0/0x420 [ 613.331868][T20761] ? ksys_write+0x242/0x270 [ 613.331894][T20761] ? __pfx_ksys_write+0x10/0x10 [ 613.331922][T20761] __x64_sys_sendto+0xde/0x100 [ 613.331942][T20761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.331963][T20761] do_syscall_64+0x15f/0xf80 [ 613.331987][T20761] ? trace_irq_disable+0x3b/0x140 [ 613.332012][T20761] ? clear_bhb_loop+0x40/0x90 [ 613.332035][T20761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.332054][T20761] RIP: 0033:0x7fae2559cdd9 [ 613.332073][T20761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.332097][T20761] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 613.332119][T20761] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 613.332133][T20761] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 613.332146][T20761] RBP: 00007fae26482090 R08: 0000200000000100 R09: 000000000000001c [ 613.332158][T20761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.332170][T20761] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 613.332201][T20761] [ 613.734287][T20771] netlink: 'syz.3.4475': attribute type 3 has an invalid length. [ 613.778071][T20773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4474'. [ 613.795317][T20750] tipc: Resetting bearer [ 613.934145][T20784] netlink: 'syz.2.4477': attribute type 28 has an invalid length. [ 613.960008][T20784] SET target dimension over the limit! [ 614.068598][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4476'. [ 616.306599][T20750] tipc: Disabling bearer [ 616.327325][T20780] lo speed is unknown, defaulting to 1000 [ 616.335788][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4474'. [ 616.345562][T20791] bridge_slave_1: default FDB implementation only supports local addresses [ 616.376180][T20780] lo speed is unknown, defaulting to 1000 [ 616.488447][T20780] lo speed is unknown, defaulting to 1000 [ 616.509476][T20780] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 616.549115][T20803] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4482'. [ 616.550595][T20780] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 616.622660][T20780] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 616.677421][T20805] wg1 speed is unknown, defaulting to 1000 [ 616.686781][T20780] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 616.694215][T20808] bridge0: port 1(bond0) entered blocking state [ 616.697088][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 616.701319][T20808] bridge0: port 1(bond0) entered disabled state [ 616.750305][T20808] bond0: entered allmulticast mode [ 616.830178][T20808] bond0: entered promiscuous mode [ 616.857462][T20780] lo speed is unknown, defaulting to 1000 [ 616.885850][T20780] lo speed is unknown, defaulting to 1000 [ 616.910301][T20780] lo speed is unknown, defaulting to 1000 [ 616.927720][T20780] lo speed is unknown, defaulting to 1000 [ 616.947896][T20780] lo speed is unknown, defaulting to 1000 [ 616.985675][T20780] lo speed is unknown, defaulting to 1000 [ 617.005061][T20780] lo speed is unknown, defaulting to 1000 [ 617.027478][T20780] lo speed is unknown, defaulting to 1000 [ 617.047670][T20780] lo speed is unknown, defaulting to 1000 [ 617.448458][T20830] syzkaller0: entered promiscuous mode [ 617.461194][T20830] syzkaller0: entered allmulticast mode [ 617.719755][T20833] hmó3)óÿ: entered promiscuous mode [ 617.859287][T20834] syzkaller0: entered promiscuous mode [ 617.871311][T20834] syzkaller0: entered allmulticast mode [ 617.892230][T20845] netlink: 'syz.1.4494': attribute type 1 has an invalid length. [ 618.826977][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4498'. [ 620.452587][T20859] FAULT_INJECTION: forcing a failure. [ 620.452587][T20859] name failslab, interval 1, probability 0, space 0, times 0 [ 620.474541][T20859] CPU: 1 UID: 0 PID: 20859 Comm: syz.1.4499 Not tainted syzkaller #0 PREEMPT(full) [ 620.474572][T20859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.474585][T20859] Call Trace: [ 620.474594][T20859] [ 620.474604][T20859] dump_stack_lvl+0xe8/0x150 [ 620.474641][T20859] should_fail_ex+0x412/0x560 [ 620.474679][T20859] should_failslab+0xa8/0x100 [ 620.474709][T20859] __kvmalloc_node_noprof+0x178/0x8a0 [ 620.474734][T20859] ? nla_strcmp+0x106/0x140 [ 620.474756][T20859] ? nf_tables_newset+0x1354/0x2580 [ 620.474787][T20859] ? nft_set_lookup+0x128/0x150 [ 620.474814][T20859] ? nft_rhash_estimate+0x8f/0xa0 [ 620.474836][T20859] nf_tables_newset+0x1354/0x2580 [ 620.474875][T20859] ? __pfx_nf_tables_newset+0x10/0x10 [ 620.474924][T20859] ? __nla_parse+0x40/0x60 [ 620.474976][T20859] nfnetlink_rcv+0x123e/0x27b0 [ 620.475045][T20859] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 620.475128][T20859] ? netlink_deliver_tap+0x2e/0x1b0 [ 620.475162][T20859] ? netlink_deliver_tap+0x2e/0x1b0 [ 620.475183][T20859] ? netlink_deliver_tap+0x2e/0x1b0 [ 620.475210][T20859] netlink_unicast+0x75c/0x8e0 [ 620.475261][T20859] netlink_sendmsg+0x813/0xb40 [ 620.475294][T20859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.475321][T20859] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.475345][T20859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.475373][T20859] ____sys_sendmsg+0x972/0x9f0 [ 620.475395][T20859] ? __might_fault+0xaf/0x130 [ 620.475426][T20859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.475459][T20859] ? import_iovec+0x73/0xa0 [ 620.475487][T20859] ___sys_sendmsg+0x2a5/0x360 [ 620.475509][T20859] ? __lock_acquire+0x6b5/0x2cf0 [ 620.475544][T20859] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.475606][T20859] ? __fget_files+0x2a/0x420 [ 620.475627][T20859] ? __fget_files+0x3a0/0x420 [ 620.475661][T20859] __x64_sys_sendmsg+0x1bd/0x2a0 [ 620.475688][T20859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.475723][T20859] ? __pfx_ksys_write+0x10/0x10 [ 620.475759][T20859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.475783][T20859] do_syscall_64+0x15f/0xf80 [ 620.475811][T20859] ? trace_irq_disable+0x3b/0x140 [ 620.475837][T20859] ? clear_bhb_loop+0x40/0x90 [ 620.475863][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.475885][T20859] RIP: 0033:0x7f5af939cdd9 [ 620.475906][T20859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.475925][T20859] RSP: 002b:00007f5afa171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.475950][T20859] RAX: ffffffffffffffda RBX: 00007f5af9615fa0 RCX: 00007f5af939cdd9 [ 620.475965][T20859] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 620.475978][T20859] RBP: 00007f5afa171090 R08: 0000000000000000 R09: 0000000000000000 [ 620.475990][T20859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.476003][T20859] R13: 00007f5af9616038 R14: 00007f5af9615fa0 R15: 00007ffeab900598 [ 620.476044][T20859] [ 621.188936][T20884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4508'. [ 621.314177][T20894] netlink: 'syz.2.4511': attribute type 39 has an invalid length. [ 621.383291][T20897] tipc: New replicast peer: 255.255.255.255 [ 621.390299][T20897] tipc: Enabled bearer , priority 10 [ 621.502812][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 621.526902][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4513'. [ 621.954001][T20913] tipc: Enabled bearer , priority 0 [ 622.065928][T20913] syzkaller0: entered promiscuous mode [ 622.079388][T20913] syzkaller0: entered allmulticast mode [ 622.097563][T20913] tipc: Resetting bearer [ 622.138554][T20911] tipc: Resetting bearer [ 622.261551][T20923] netlink: 'syz.3.4522': attribute type 39 has an invalid length. [ 622.403605][T20927] netlink: 'syz.2.4523': attribute type 62 has an invalid length. [ 622.474972][T20928] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4523'. [ 622.484965][T20928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4523'. [ 624.468773][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.477669][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.567791][T20911] tipc: Disabling bearer [ 624.579694][ T24] tipc: Node number set to 3826042809 [ 624.696050][T20931] netlink: 'syz.4.4524': attribute type 21 has an invalid length. [ 624.756826][T20936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4527'. [ 624.783131][T20936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.790464][T20936] IPv6: NLM_F_CREATE should be set when creating new route [ 624.797798][T20936] IPv6: NLM_F_CREATE should be set when creating new route [ 625.009799][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4526'. [ 625.035436][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4526'. [ 625.377542][T20958] wg1 speed is unknown, defaulting to 1000 [ 625.448375][T20968] team_slave_1: Caught tx_queue_len zero misconfig [ 625.801150][T20975] netlink: 'syz.4.4536': attribute type 39 has an invalid length. [ 626.030649][T20979] netlink: 'syz.4.4537': attribute type 21 has an invalid length. [ 626.100391][T20978] netlink: 'syz.4.4537': attribute type 13 has an invalid length. [ 626.143523][T20978] netlink: 'syz.4.4537': attribute type 17 has an invalid length. [ 626.148503][T20958] lo speed is unknown, defaulting to 1000 [ 626.152648][ T9686] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.158430][T20979] netlink: 'syz.4.4537': attribute type 13 has an invalid length. [ 626.197631][T20979] netlink: 'syz.4.4537': attribute type 17 has an invalid length. [ 626.202464][ T9686] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.342372][T20983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4540'. [ 626.352787][T20978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.373963][T20978] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.399157][T20978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.439406][T20979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.456290][ T9686] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.468626][ T9686] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.499673][T20988] netlink: 'syz.2.4542': attribute type 4 has an invalid length. [ 626.529502][T20988] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4542'. [ 626.975186][T20996] smc: net device wlan0 erased user defined pnetid SYZ0 [ 627.014118][T21010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4546'. [ 627.046413][T21010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4546'. [ 627.433396][T21018] netlink: 'syz.2.4550': attribute type 4 has an invalid length. [ 627.599079][T21027] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4553'. [ 627.604127][T21016] wg1 speed is unknown, defaulting to 1000 [ 627.781328][T21035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4556'. [ 627.882978][T21038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4557'. [ 628.274681][T21049] x_tables: duplicate underflow at hook 2 [ 628.560153][T21016] lo speed is unknown, defaulting to 1000 [ 628.725287][T21061] syzkaller1: entered promiscuous mode [ 628.740900][T21061] syzkaller1: entered allmulticast mode [ 629.532465][T21060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.647341][T21060] ip6tnl2: entered allmulticast mode [ 629.974967][T21075] __nla_validate_parse: 1 callbacks suppressed [ 629.974989][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4568'. [ 630.106499][T21078] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4570'. [ 630.127436][T21079] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 630.130325][T21078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4570'. [ 630.169558][T21078] xt_hashlimit: size too large, truncated to 1048576 [ 630.214379][T21083] netlink: 'syz.2.4571': attribute type 4 has an invalid length. [ 630.228583][T21084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4570'. [ 630.258011][T21079] syzkaller0: entered promiscuous mode [ 630.281855][T21079] syzkaller0: entered allmulticast mode [ 630.879505][T21108] openvswitch: netlink: Invalid VLAN frame [ 631.177778][T21122] netlink: 'syz.1.4586': attribute type 4 has an invalid length. [ 631.213594][T21122] netlink: 'syz.1.4586': attribute type 8 has an invalid length. [ 631.238789][T21122] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4586'. [ 631.281713][T21126] syzkaller0: entered promiscuous mode [ 631.292296][T21126] syzkaller0: entered allmulticast mode [ 631.335781][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 631.352246][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 631.432873][T21129] vxlan2: entered promiscuous mode [ 631.459600][T21129] vxlan2: entered allmulticast mode [ 631.478753][ T9686] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.513303][ T9686] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.524607][ T9686] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.541948][ T9686] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.630941][T21139] wg1 speed is unknown, defaulting to 1000 [ 631.638601][T21137] tipc: Enabled bearer , priority 0 [ 631.690265][T21148] syz.0.4595 uses old SIOCAX25GETINFO [ 631.729186][T21151] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 631.754944][T21149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4595'. [ 631.785062][T21148] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4595'. [ 631.897738][T21137] syzkaller0: entered promiscuous mode [ 631.922075][T21137] syzkaller0: entered allmulticast mode [ 631.948242][T21137] tipc: Resetting bearer [ 632.024757][T21163] netlink: 'syz.1.4601': attribute type 4 has an invalid length. [ 632.042865][T21163] netlink: 'syz.1.4601': attribute type 8 has an invalid length. [ 632.057470][T21163] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4601'. [ 632.168959][ T9686] tipc: Resetting bearer [ 632.285362][T21136] tipc: Resetting bearer [ 634.904002][T21136] tipc: Disabling bearer [ 634.913533][T21139] lo speed is unknown, defaulting to 1000 [ 634.913853][T21167] tipc: New replicast peer: 255.255.255.255 [ 634.926046][T21167] tipc: Enabled bearer , priority 10 [ 634.933211][T21181] FAULT_INJECTION: forcing a failure. [ 634.933211][T21181] name failslab, interval 1, probability 0, space 0, times 0 [ 634.945967][T21181] CPU: 0 UID: 0 PID: 21181 Comm: syz.3.4608 Not tainted syzkaller #0 PREEMPT(full) [ 634.945996][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.946007][T21181] Call Trace: [ 634.946015][T21181] [ 634.946024][T21181] dump_stack_lvl+0xe8/0x150 [ 634.946070][T21181] should_fail_ex+0x412/0x560 [ 634.946105][T21181] ? alloc_inode+0x6a/0x1b0 [ 634.946137][T21181] should_failslab+0xa8/0x100 [ 634.946167][T21181] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 634.946193][T21181] ? simple_start_creating+0xcc/0x110 [ 634.946225][T21181] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 634.946256][T21181] alloc_inode+0x6a/0x1b0 [ 634.946289][T21181] new_inode+0x22/0x170 [ 634.946315][T21181] __debugfs_create_file+0xb8/0x400 [ 634.946349][T21181] debugfs_create_file_full+0x3f/0x60 [ 634.946381][T21181] ref_tracker_dir_debugfs+0x197/0x360 [ 634.946405][T21181] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 634.946459][T21181] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 634.946486][T21181] ? alloc_netdev_mqs+0xa8/0x1210 [ 634.946516][T21181] ? __raw_spin_lock_init+0x45/0x100 [ 634.946547][T21181] alloc_netdev_mqs+0x274/0x1210 [ 634.946571][T21181] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 634.946600][T21181] rtnl_create_link+0x31f/0xd70 [ 634.946636][T21181] rtnl_newlink_create+0x277/0xb70 [ 634.946660][T21181] ? __pfx___nla_validate_parse+0x10/0x10 [ 634.946691][T21181] ? __mutex_lock+0x606/0x1550 [ 634.946721][T21181] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 634.946748][T21181] ? __pfx___mutex_lock+0x10/0x10 [ 634.946785][T21181] ? ns_capable+0x89/0xe0 [ 634.946818][T21181] rtnl_newlink+0x166a/0x1bb0 [ 634.946841][T21181] ? __lock_acquire+0x6b5/0x2cf0 [ 634.946884][T21181] ? __pfx_rtnl_newlink+0x10/0x10 [ 634.946911][T21181] ? __lock_acquire+0x6b5/0x2cf0 [ 634.946945][T21181] ? __lock_acquire+0x6b5/0x2cf0 [ 634.946986][T21181] ? unwind_next_frame+0xa6/0x2550 [ 634.947018][T21181] ? unwind_next_frame+0xa6/0x2550 [ 634.947043][T21181] ? is_bpf_text_address+0x26/0x2b0 [ 634.947097][T21181] ? is_bpf_text_address+0x26/0x2b0 [ 634.947152][T21181] ? __lock_acquire+0x6b5/0x2cf0 [ 634.947187][T21181] ? kernel_text_address+0xa5/0xe0 [ 634.947215][T21181] ? __kernel_text_address+0xd/0x30 [ 634.947240][T21181] ? unwind_get_return_address+0x4d/0x90 [ 634.947262][T21181] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.947290][T21181] ? arch_stack_walk+0xfb/0x150 [ 634.947326][T21181] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 634.947374][T21181] ? __pfx_rtnl_newlink+0x10/0x10 [ 634.947393][T21181] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 634.947423][T21181] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 634.947448][T21181] ? netlink_sendmsg+0x5d4/0xb40 [ 634.947470][T21181] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 634.947502][T21181] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 634.947536][T21181] ? __lock_acquire+0x6b5/0x2cf0 [ 634.947583][T21181] netlink_rcv_skb+0x232/0x4b0 [ 634.947605][T21181] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 634.947638][T21181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.947676][T21181] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.947696][T21181] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.947723][T21181] netlink_unicast+0x75c/0x8e0 [ 634.947766][T21181] netlink_sendmsg+0x813/0xb40 [ 634.947815][T21181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.947843][T21181] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.947868][T21181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.947898][T21181] ____sys_sendmsg+0x972/0x9f0 [ 634.947921][T21181] ? __might_fault+0xaf/0x130 [ 634.947952][T21181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.947988][T21181] ? import_iovec+0x73/0xa0 [ 634.948017][T21181] ___sys_sendmsg+0x2a5/0x360 [ 634.948039][T21181] ? __lock_acquire+0x6b5/0x2cf0 [ 634.948082][T21181] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.948113][T21181] ? kstrtouint+0x6e/0xe0 [ 634.948172][T21181] ? __fget_files+0x2a/0x420 [ 634.948194][T21181] ? __fget_files+0x3a0/0x420 [ 634.948229][T21181] __sys_sendmmsg+0x27c/0x4e0 [ 634.948259][T21181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 634.948280][T21181] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 634.948339][T21181] ? ksys_write+0x242/0x270 [ 634.948368][T21181] ? __pfx_ksys_write+0x10/0x10 [ 634.948400][T21181] __x64_sys_sendmmsg+0xa0/0xc0 [ 634.948424][T21181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.948447][T21181] do_syscall_64+0x15f/0xf80 [ 634.948474][T21181] ? trace_irq_disable+0x3b/0x140 [ 634.948500][T21181] ? clear_bhb_loop+0x40/0x90 [ 634.948526][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.948547][T21181] RIP: 0033:0x7fae2559cdd9 [ 634.948568][T21181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.948587][T21181] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 634.948610][T21181] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 634.948626][T21181] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 634.948640][T21181] RBP: 00007fae26482090 R08: 0000000000000000 R09: 0000000000000000 [ 634.948654][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.948666][T21181] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 634.948700][T21181] [ 634.948710][T21181] debugfs: out of free dentries, can not create file 'netdev@ffff888055c2e660' [ 635.646193][T21195] netlink: 'syz.0.4612': attribute type 4 has an invalid length. [ 635.671170][T21195] netlink: 'syz.0.4612': attribute type 8 has an invalid length. [ 635.689345][T21199] __nla_validate_parse: 2 callbacks suppressed [ 635.689367][T21199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4614'. [ 635.692856][T21195] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4612'. [ 636.005043][T21209] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4615'. [ 636.043640][T21205] syzkaller0: entered promiscuous mode [ 636.061599][T21205] syzkaller0: entered allmulticast mode [ 636.733584][T21248] FAULT_INJECTION: forcing a failure. [ 636.733584][T21248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.755675][T21248] CPU: 1 UID: 0 PID: 21248 Comm: syz.3.4624 Not tainted syzkaller #0 PREEMPT(full) [ 636.755707][T21248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 636.755719][T21248] Call Trace: [ 636.755727][T21248] [ 636.755736][T21248] dump_stack_lvl+0xe8/0x150 [ 636.755772][T21248] should_fail_ex+0x412/0x560 [ 636.755810][T21248] _copy_from_user+0x2d/0xb0 [ 636.755836][T21248] do_bnep_sock_ioctl+0x293/0x650 [ 636.755873][T21248] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 636.755905][T21248] ? tomoyo_path_number_perm+0x219/0x630 [ 636.755951][T21248] sock_do_ioctl+0x101/0x320 [ 636.755981][T21248] ? __pfx_sock_do_ioctl+0x10/0x10 [ 636.756005][T21248] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 636.756052][T21248] sock_ioctl+0x5c6/0x7f0 [ 636.756077][T21248] ? __pfx_sock_ioctl+0x10/0x10 [ 636.756102][T21248] ? __fget_files+0x2a/0x420 [ 636.756121][T21248] ? __fget_files+0x3a0/0x420 [ 636.756140][T21248] ? __fget_files+0x2a/0x420 [ 636.756162][T21248] ? bpf_lsm_file_ioctl+0x9/0x20 [ 636.756189][T21248] ? __pfx_sock_ioctl+0x10/0x10 [ 636.756213][T21248] __se_sys_ioctl+0xfc/0x170 [ 636.756239][T21248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.756262][T21248] do_syscall_64+0x15f/0xf80 [ 636.756288][T21248] ? trace_irq_disable+0x3b/0x140 [ 636.756314][T21248] ? clear_bhb_loop+0x40/0x90 [ 636.756337][T21248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.756356][T21248] RIP: 0033:0x7fae2559cdd9 [ 636.756376][T21248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.756393][T21248] RSP: 002b:00007fae26461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.756416][T21248] RAX: ffffffffffffffda RBX: 00007fae25816090 RCX: 00007fae2559cdd9 [ 636.756431][T21248] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000005 [ 636.756444][T21248] RBP: 00007fae26461090 R08: 0000000000000000 R09: 0000000000000000 [ 636.756456][T21248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.756468][T21248] R13: 00007fae25816128 R14: 00007fae25816090 R15: 00007fff25cf7758 [ 636.756499][T21248] [ 637.007331][T21250] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4625'. [ 637.103645][T21254] netlink: 'syz.1.4626': attribute type 4 has an invalid length. [ 637.111646][T21254] netlink: 'syz.1.4626': attribute type 8 has an invalid length. [ 637.119410][T21254] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4626'. [ 637.248350][T21261] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4628'. [ 637.587684][T21273] wg1 speed is unknown, defaulting to 1000 [ 637.611758][T21269] tipc: Enabled bearer , priority 0 [ 637.699664][T21282] netlink: 'syz.2.4635': attribute type 3 has an invalid length. [ 637.775608][T21269] syzkaller0: entered promiscuous mode [ 637.781671][T21269] syzkaller0: entered allmulticast mode [ 637.788267][T21269] tipc: Resetting bearer [ 638.066959][T21294] netlink: 'syz.2.4640': attribute type 4 has an invalid length. [ 638.083906][T21273] lo speed is unknown, defaulting to 1000 [ 638.091949][T21294] netlink: 'syz.2.4640': attribute type 8 has an invalid length. [ 638.111557][T21294] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4640'. [ 638.132301][T21296] netlink: 'syz.4.4641': attribute type 1 has an invalid length. [ 638.147226][T21296] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4641'. [ 638.215016][T21267] tipc: Resetting bearer [ 638.303615][T21306] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4643'. [ 638.423143][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4645'. [ 640.757102][T21267] tipc: Disabling bearer [ 640.975220][T21324] netlink: 'syz.3.4649': attribute type 3 has an invalid length. [ 640.984013][T21323] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4648'. [ 641.245431][T21332] netlink: 'syz.1.4653': attribute type 4 has an invalid length. [ 641.264914][T21332] netlink: 'syz.1.4653': attribute type 8 has an invalid length. [ 641.290609][T21332] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4653'. [ 641.498895][T21349] FAULT_INJECTION: forcing a failure. [ 641.498895][T21349] name failslab, interval 1, probability 0, space 0, times 0 [ 641.544578][T21349] CPU: 0 UID: 0 PID: 21349 Comm: syz.3.4657 Not tainted syzkaller #0 PREEMPT(full) [ 641.544609][T21349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.544622][T21349] Call Trace: [ 641.544631][T21349] [ 641.544640][T21349] dump_stack_lvl+0xe8/0x150 [ 641.544680][T21349] should_fail_ex+0x412/0x560 [ 641.544720][T21349] should_failslab+0xa8/0x100 [ 641.544751][T21349] __kmalloc_cache_noprof+0x88/0x660 [ 641.544787][T21349] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 641.544814][T21349] ? sctp_add_bind_addr+0x8c/0x370 [ 641.544847][T21349] sctp_add_bind_addr+0x8c/0x370 [ 641.544879][T21349] sctp_copy_local_addr_list+0x314/0x4f0 [ 641.544911][T21349] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 641.544938][T21349] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 641.544969][T21349] ? sctp_v6_is_any+0x64/0x80 [ 641.544999][T21349] ? sctp_copy_one_addr+0x93/0x360 [ 641.545030][T21349] sctp_bind_addr_copy+0xb3/0x3c0 [ 641.545058][T21349] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 641.545087][T21349] sctp_connect_new_asoc+0x2ff/0x6b0 [ 641.545112][T21349] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 641.545142][T21349] ? __local_bh_enable_ip+0xd0/0x130 [ 641.545171][T21349] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 641.545196][T21349] ? security_sctp_bind_connect+0x7e/0x2c0 [ 641.545227][T21349] sctp_sendmsg+0x1528/0x2c10 [ 641.545273][T21349] ? __pfx_sctp_sendmsg+0x10/0x10 [ 641.545305][T21349] ? aa_sk_perm+0x6d5/0x900 [ 641.545334][T21349] ? __might_fault+0xaf/0x130 [ 641.545365][T21349] ? __pfx_aa_sk_perm+0x10/0x10 [ 641.545398][T21349] ? sock_rps_record_flow+0x19/0x350 [ 641.545422][T21349] ? __pfx_inet_sendmsg+0x10/0x10 [ 641.545447][T21349] ? inet_sendmsg+0x2f4/0x370 [ 641.545472][T21349] ? __pfx_inet_sendmsg+0x10/0x10 [ 641.545497][T21349] __sys_sendto+0x5de/0x710 [ 641.545521][T21349] ? __pfx___sys_sendto+0x10/0x10 [ 641.545540][T21349] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 641.545583][T21349] ? __fget_files+0x3a0/0x420 [ 641.545618][T21349] ? ksys_write+0x242/0x270 [ 641.545647][T21349] ? __pfx_ksys_write+0x10/0x10 [ 641.545679][T21349] __x64_sys_sendto+0xde/0x100 [ 641.545701][T21349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.545725][T21349] do_syscall_64+0x15f/0xf80 [ 641.545753][T21349] ? trace_irq_disable+0x3b/0x140 [ 641.545789][T21349] ? clear_bhb_loop+0x40/0x90 [ 641.545815][T21349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.545836][T21349] RIP: 0033:0x7fae2559cdd9 [ 641.545858][T21349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.545884][T21349] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 641.545908][T21349] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 641.545924][T21349] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 641.545938][T21349] RBP: 00007fae26482090 R08: 0000200000000100 R09: 000000000000001c [ 641.545951][T21349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.545964][T21349] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 641.546000][T21349] [ 641.566025][T21344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4655'. [ 641.730774][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4658'. [ 641.964904][T21364] tipc: Enabled bearer , priority 0 [ 642.024008][T21360] wg1 speed is unknown, defaulting to 1000 [ 642.035418][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'. [ 642.097120][T21371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4661'. [ 642.113778][T21371] wg1: entered promiscuous mode [ 642.119589][T21371] wg1: entered allmulticast mode [ 642.426093][T21378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4662'. [ 642.512578][T21353] tipc: Disabling bearer [ 642.765353][T21391] FAULT_INJECTION: forcing a failure. [ 642.765353][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 642.778445][T21391] CPU: 0 UID: 0 PID: 21391 Comm: syz.3.4665 Not tainted syzkaller #0 PREEMPT(full) [ 642.778475][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.778487][T21391] Call Trace: [ 642.778495][T21391] [ 642.778505][T21391] dump_stack_lvl+0xe8/0x150 [ 642.778545][T21391] should_fail_ex+0x412/0x560 [ 642.778582][T21391] should_failslab+0xa8/0x100 [ 642.778611][T21391] ? alloc_empty_file+0x5b/0x1d0 [ 642.778632][T21391] kmem_cache_alloc_noprof+0x87/0x650 [ 642.778666][T21391] alloc_empty_file+0x5b/0x1d0 [ 642.778688][T21391] alloc_file_pseudo+0x155/0x240 [ 642.778708][T21391] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 642.778734][T21391] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 642.778753][T21391] ? evm_inode_alloc_security+0x40/0xb0 [ 642.778781][T21391] ? security_inode_alloc+0xd5/0x310 [ 642.778825][T21391] sock_alloc_file+0xb8/0x2e0 [ 642.778857][T21391] do_accept+0x3a0/0x760 [ 642.778893][T21391] ? __pfx_do_accept+0x10/0x10 [ 642.778947][T21391] __sys_accept4+0x139/0x230 [ 642.778980][T21391] ? __pfx___sys_accept4+0x10/0x10 [ 642.779011][T21391] ? __pfx_ksys_write+0x10/0x10 [ 642.779045][T21391] __x64_sys_accept4+0x9a/0xb0 [ 642.779074][T21391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.779096][T21391] do_syscall_64+0x15f/0xf80 [ 642.779124][T21391] ? trace_irq_disable+0x3b/0x140 [ 642.779151][T21391] ? clear_bhb_loop+0x40/0x90 [ 642.779176][T21391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.779197][T21391] RIP: 0033:0x7fae2559cdd9 [ 642.779217][T21391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.779235][T21391] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 642.779259][T21391] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 642.779275][T21391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 642.779287][T21391] RBP: 00007fae26482090 R08: 0000000000000000 R09: 0000000000000000 [ 642.779300][T21391] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 642.779312][T21391] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 642.779345][T21391] [ 642.781659][T21360] lo speed is unknown, defaulting to 1000 [ 642.940889][T21398] FAULT_INJECTION: forcing a failure. [ 642.940889][T21398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.034585][T21398] CPU: 0 UID: 0 PID: 21398 Comm: syz.3.4668 Not tainted syzkaller #0 PREEMPT(full) [ 643.034616][T21398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.034628][T21398] Call Trace: [ 643.034636][T21398] [ 643.034646][T21398] dump_stack_lvl+0xe8/0x150 [ 643.034685][T21398] should_fail_ex+0x412/0x560 [ 643.034747][T21398] _copy_from_iter+0x1d3/0x1670 [ 643.034773][T21398] ? rcu_is_watching+0x15/0xb0 [ 643.034801][T21398] ? __pfx__copy_from_iter+0x10/0x10 [ 643.034837][T21398] ? netlink_sendmsg+0x650/0xb40 [ 643.034856][T21398] ? skb_put+0x11b/0x210 [ 643.034881][T21398] netlink_sendmsg+0x6c0/0xb40 [ 643.034914][T21398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.034939][T21398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 643.034964][T21398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.034993][T21398] ____sys_sendmsg+0x972/0x9f0 [ 643.035017][T21398] ? __might_fault+0xaf/0x130 [ 643.035047][T21398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.035078][T21398] ? import_iovec+0x73/0xa0 [ 643.035105][T21398] ___sys_sendmsg+0x2a5/0x360 [ 643.035126][T21398] ? __lock_acquire+0x6b5/0x2cf0 [ 643.035161][T21398] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.035215][T21398] ? __fget_files+0x2a/0x420 [ 643.035236][T21398] ? __fget_files+0x3a0/0x420 [ 643.035267][T21398] __x64_sys_sendmsg+0x1bd/0x2a0 [ 643.035293][T21398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.035326][T21398] ? __pfx_ksys_write+0x10/0x10 [ 643.035359][T21398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.035383][T21398] do_syscall_64+0x15f/0xf80 [ 643.035409][T21398] ? trace_irq_disable+0x3b/0x140 [ 643.035436][T21398] ? clear_bhb_loop+0x40/0x90 [ 643.035461][T21398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.035481][T21398] RIP: 0033:0x7fae2559cdd9 [ 643.035502][T21398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.035518][T21398] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.035541][T21398] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 643.035556][T21398] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 643.035569][T21398] RBP: 00007fae26482090 R08: 0000000000000000 R09: 0000000000000000 [ 643.035581][T21398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.035594][T21398] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 643.035627][T21398] [ 643.386929][T21404] netlink: 'syz.3.4669': attribute type 4 has an invalid length. [ 643.395339][T21404] netlink: 'syz.3.4669': attribute type 8 has an invalid length. [ 643.403284][T21404] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4669'. [ 643.530221][T21402] tipc: New replicast peer: 255.255.255.255 [ 643.537337][T21402] tipc: Enabled bearer , priority 10 [ 643.546134][T21405] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.561482][T21402] netlink: 'syz.2.4670': attribute type 15 has an invalid length. [ 643.569487][T21402] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4670'. [ 643.645818][T21410] dvmrp6: entered allmulticast mode [ 643.807750][T21420] netlink: 'syz.4.4676': attribute type 1 has an invalid length. [ 643.844494][T21416] xt_connbytes: Forcing CT accounting to be enabled [ 643.904685][T21410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.913884][T21410] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.939554][T21424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4676'. [ 643.961817][T21410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.001320][ T808] lo speed is unknown, defaulting to 1000 [ 644.008538][ T808] syz2: Port: 1 Link ACTIVE [ 644.137571][T21423] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 644.148796][T21423] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 644.190345][T21424] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 644.397700][T21435] gre0: entered promiscuous mode [ 644.410308][T21435] gre0: entered allmulticast mode [ 644.584091][T21447] wg1 speed is unknown, defaulting to 1000 [ 644.651404][T21439] tipc: Enabled bearer , priority 0 [ 644.822294][T21439] syzkaller0: entered promiscuous mode [ 644.841697][T21439] syzkaller0: entered allmulticast mode [ 644.852041][T21439] tipc: Resetting bearer [ 645.114747][T21447] lo speed is unknown, defaulting to 1000 [ 645.116848][T21464] wg1 speed is unknown, defaulting to 1000 [ 645.185936][T21467] netlink: 'syz.1.4691': attribute type 1 has an invalid length. [ 645.309328][T21470] netlink: 'syz.2.4692': attribute type 1 has an invalid length. [ 645.382318][T21473] netlink: 'syz.1.4693': attribute type 3 has an invalid length. [ 645.584088][ T9685] tipc: Resetting bearer [ 645.594342][T21437] tipc: Resetting bearer [ 648.180869][T21437] tipc: Disabling bearer [ 648.192324][T21476] __nla_validate_parse: 4 callbacks suppressed [ 648.192345][T21476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4696'. [ 648.271239][T21464] lo speed is unknown, defaulting to 1000 [ 648.629856][T21504] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 648.669084][T21506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4706'. [ 648.675055][T21503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4703'. [ 648.721385][T21510] netlink: 'syz.1.4705': attribute type 3 has an invalid length. [ 649.258041][T21531] tipc: Enabled bearer , priority 0 [ 649.398089][T21519] syzkaller0: entered promiscuous mode [ 649.426181][T21519] syzkaller0: entered allmulticast mode [ 649.441598][T21519] tipc: Resetting bearer [ 649.456476][T21525] wg1 speed is unknown, defaulting to 1000 [ 649.687299][T21537] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4712'. [ 649.807596][T21518] tipc: Resetting bearer [ 649.986051][T21544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4713'. [ 652.561646][T21518] tipc: Disabling bearer [ 652.576557][T21525] lo speed is unknown, defaulting to 1000 [ 652.680544][T21558] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 652.729558][T21560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.934535][T21563] bond4: left promiscuous mode [ 652.946101][ T7069] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.965987][ T7069] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.988772][ T7069] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.010087][ T7069] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.326484][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4723'. [ 653.469191][T21555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.689216][T21589] netlink: 'syz.3.4728': attribute type 62 has an invalid length. [ 653.742726][T21591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4727'. [ 653.789081][T21589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4728'. [ 654.144055][T21603] wg1: left promiscuous mode [ 654.153383][T21603] wg1: left allmulticast mode [ 654.182308][ T5902] lo speed is unknown, defaulting to 1000 [ 654.190423][ T5902] syz2: Port: 1 Link DOWN [ 654.322311][T21614] wg1 speed is unknown, defaulting to 1000 [ 654.354723][T21611] tipc: Enabled bearer , priority 0 [ 654.529728][T21611] syzkaller0: entered promiscuous mode [ 654.555029][T21611] syzkaller0: entered allmulticast mode [ 654.573570][T21611] tipc: Resetting bearer [ 654.609631][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 654.835874][ T9685] tipc: Resetting bearer [ 654.889652][T21631] xt_ecn: cannot match TCP bits for non-tcp packets [ 654.931494][T21614] lo speed is unknown, defaulting to 1000 [ 655.050666][T21610] tipc: Resetting bearer [ 657.846344][T21610] tipc: Disabling bearer [ 658.515462][T21681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4751'. [ 658.530662][T21692] x_tables: duplicate underflow at hook 3 [ 658.564048][T21691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.213220][T21726] netlink: 'syz.0.4761': attribute type 4 has an invalid length. [ 659.237916][T21726] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4761'. [ 659.308791][T21732] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 659.837797][T21744] wg1 speed is unknown, defaulting to 1000 [ 659.857603][T21742] tipc: Enabled bearer , priority 0 [ 659.956697][T21758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4770'. [ 660.121275][T21742] syzkaller0: entered promiscuous mode [ 660.141167][T21742] syzkaller0: entered allmulticast mode [ 660.162026][T21742] tipc: Resetting bearer [ 660.184189][ T9686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.205349][ T9686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.499001][T21741] tipc: Resetting bearer [ 660.827905][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4778'. [ 660.856605][T21784] netlink: 'syz.4.4777': attribute type 62 has an invalid length. [ 661.232688][T21795] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 663.188482][T21741] tipc: Disabling bearer [ 663.197845][T21744] lo speed is unknown, defaulting to 1000 [ 663.211705][T21783] ipvlan1: entered promiscuous mode [ 663.218548][T21783] ipvlan1: left promiscuous mode [ 663.239105][T21794] ip6tnl0: Caught tx_queue_len zero misconfig [ 663.368710][T21800] veth0_macvtap: Caught tx_queue_len zero misconfig [ 663.903131][T21830] gre0: left promiscuous mode [ 663.929319][T21830] gre0: left allmulticast mode [ 664.024604][T21830] ip6tnl2: left allmulticast mode [ 664.272854][T21843] netlink: 'syz.2.4790': attribute type 1 has an invalid length. [ 664.305535][T21847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4793'. [ 664.312475][T21843] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4790'. [ 664.370585][T21845] netlink: 'syz.1.4792': attribute type 1 has an invalid length. [ 664.393401][T21845] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4792'. [ 664.550596][T21864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4793'. [ 664.565236][T21867] netlink: 'syz.4.4795': attribute type 4 has an invalid length. [ 664.575802][T21864] netlink: 'syz.0.4793': attribute type 7 has an invalid length. [ 664.597101][T21864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4793'. [ 664.771706][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 664.780879][T21879] bridge_slave_1: default FDB implementation only supports local addresses [ 664.792136][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 664.801743][T21878] bridge_slave_1: default FDB implementation only supports local addresses [ 665.363654][T21891] wg1 speed is unknown, defaulting to 1000 [ 665.549473][T21894] syzkaller0: entered promiscuous mode [ 665.569020][T21894] syzkaller0: entered allmulticast mode [ 665.587639][T21891] lo speed is unknown, defaulting to 1000 [ 665.598317][T21897] tipc: Resetting bearer [ 665.674592][T21899] tipc: Resetting bearer [ 665.942869][T21906] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 667.307943][T21852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.006846][T21928] syzkaller0: entered promiscuous mode [ 669.013315][T21928] syzkaller0: entered allmulticast mode [ 669.044225][T21930] netlink: 'syz.3.4813': attribute type 3 has an invalid length. [ 669.309772][T21941] tipc: Enabled bearer , priority 0 [ 669.343323][T21943] FAULT_INJECTION: forcing a failure. [ 669.343323][T21943] name failslab, interval 1, probability 0, space 0, times 0 [ 669.363680][T21943] CPU: 0 UID: 0 PID: 21943 Comm: syz.2.4818 Not tainted syzkaller #0 PREEMPT(full) [ 669.363711][T21943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.363723][T21943] Call Trace: [ 669.363732][T21943] [ 669.363741][T21943] dump_stack_lvl+0xe8/0x150 [ 669.363780][T21943] should_fail_ex+0x412/0x560 [ 669.363819][T21943] should_failslab+0xa8/0x100 [ 669.363850][T21943] __kmalloc_cache_noprof+0x88/0x660 [ 669.363876][T21943] ? __asan_memset+0x22/0x50 [ 669.363897][T21943] ? alloc_netdev_mqs+0xc51/0x1210 [ 669.363922][T21943] ? __kmalloc_cache_noprof+0x15b/0x660 [ 669.363953][T21943] alloc_netdev_mqs+0xc51/0x1210 [ 669.363988][T21943] rtnl_create_link+0x31f/0xd70 [ 669.364024][T21943] rtnl_newlink_create+0x277/0xb70 [ 669.364050][T21943] ? __pfx___nla_validate_parse+0x10/0x10 [ 669.364081][T21943] ? __mutex_lock+0x606/0x1550 [ 669.364114][T21943] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 669.364142][T21943] ? __pfx___mutex_lock+0x10/0x10 [ 669.364183][T21943] ? ns_capable+0x89/0xe0 [ 669.364219][T21943] rtnl_newlink+0x166a/0x1bb0 [ 669.364258][T21943] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.364285][T21943] ? __lock_acquire+0x6b5/0x2cf0 [ 669.364325][T21943] ? __lock_acquire+0x6b5/0x2cf0 [ 669.364367][T21943] ? unwind_next_frame+0xa6/0x2550 [ 669.364397][T21943] ? unwind_next_frame+0xa6/0x2550 [ 669.364435][T21943] ? is_bpf_text_address+0x26/0x2b0 [ 669.364478][T21943] ? is_bpf_text_address+0x26/0x2b0 [ 669.364520][T21943] ? __lock_acquire+0x6b5/0x2cf0 [ 669.364556][T21943] ? kernel_text_address+0xa5/0xe0 [ 669.364584][T21943] ? __kernel_text_address+0xd/0x30 [ 669.364609][T21943] ? unwind_get_return_address+0x4d/0x90 [ 669.364630][T21943] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.364658][T21943] ? arch_stack_walk+0xfb/0x150 [ 669.364694][T21943] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 669.364743][T21943] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.364762][T21943] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 669.364791][T21943] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 669.364815][T21943] ? netlink_sendmsg+0x5d4/0xb40 [ 669.364839][T21943] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 669.364870][T21943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.364903][T21943] ? __lock_acquire+0x6b5/0x2cf0 [ 669.364947][T21943] netlink_rcv_skb+0x232/0x4b0 [ 669.364971][T21943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.365005][T21943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.365041][T21943] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.365063][T21943] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.365091][T21943] netlink_unicast+0x75c/0x8e0 [ 669.365134][T21943] netlink_sendmsg+0x813/0xb40 [ 669.365168][T21943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.365194][T21943] ? aa_sock_msg_perm+0xf1/0x1b0 [ 669.365218][T21943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.365246][T21943] ____sys_sendmsg+0x972/0x9f0 [ 669.365270][T21943] ? __might_fault+0xaf/0x130 [ 669.365301][T21943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.365335][T21943] ? import_iovec+0x73/0xa0 [ 669.365364][T21943] ___sys_sendmsg+0x2a5/0x360 [ 669.365387][T21943] ? __lock_acquire+0x6b5/0x2cf0 [ 669.365422][T21943] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.365481][T21943] ? __fget_files+0x2a/0x420 [ 669.365502][T21943] ? __fget_files+0x3a0/0x420 [ 669.365546][T21943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 669.365572][T21943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.365607][T21943] ? __pfx_ksys_write+0x10/0x10 [ 669.365645][T21943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.365668][T21943] do_syscall_64+0x15f/0xf80 [ 669.365696][T21943] ? trace_irq_disable+0x3b/0x140 [ 669.365723][T21943] ? clear_bhb_loop+0x40/0x90 [ 669.365750][T21943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.365770][T21943] RIP: 0033:0x7f1c7619cdd9 [ 669.365792][T21943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.365811][T21943] RSP: 002b:00007f1c770d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.365834][T21943] RAX: ffffffffffffffda RBX: 00007f1c76415fa0 RCX: 00007f1c7619cdd9 [ 669.365850][T21943] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 669.365864][T21943] RBP: 00007f1c770d3090 R08: 0000000000000000 R09: 0000000000000000 [ 669.365878][T21943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.365891][T21943] R13: 00007f1c76416038 R14: 00007f1c76415fa0 R15: 00007ffe582a3338 [ 669.365927][T21943] [ 669.809824][T21944] syzkaller0: mtu less than device minimum [ 669.942754][T21940] tipc: Disabling bearer [ 669.967281][T21952] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4819'. [ 669.994693][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4821'. [ 670.170313][T21956] wg1 speed is unknown, defaulting to 1000 [ 670.344784][T21959] tipc: Enabled bearer , priority 0 [ 670.603307][T21970] syzkaller0: entered promiscuous mode [ 670.625621][T21970] syzkaller0: entered allmulticast mode [ 670.645138][T21970] tipc: Resetting bearer [ 670.856823][T21991] netlink: 'syz.3.4829': attribute type 1 has an invalid length. [ 670.973736][T21955] tipc: Resetting bearer [ 671.395117][T22001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 671.742512][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4833'. [ 673.812538][T21955] tipc: Disabling bearer [ 673.825694][T21956] lo speed is unknown, defaulting to 1000 [ 673.831373][T22002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 673.840906][T22002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 673.854134][T22002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 673.863478][T22002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 673.872807][T22002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 673.882145][T22002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 673.945003][T22009] netlink: 'syz.4.4834': attribute type 66 has an invalid length. [ 674.249656][T22026] vxlan2: left promiscuous mode [ 674.256666][T22026] vxlan2: left allmulticast mode [ 674.327526][T21819] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.336689][T21819] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.351311][T21819] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.363599][T21819] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.145392][T22062] netlink: 'syz.0.4847': attribute type 13 has an invalid length. [ 675.796139][T22091] __nla_validate_parse: 158 callbacks suppressed [ 675.796160][T22091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4858'. [ 675.930754][T22097] wg1 speed is unknown, defaulting to 1000 [ 675.976260][T22094] tipc: Enabled bearer , priority 0 [ 676.080628][T22099] netlink: 'syz.4.4859': attribute type 1 has an invalid length. [ 676.104978][T22094] syzkaller0: entered promiscuous mode [ 676.110519][T22094] syzkaller0: entered allmulticast mode [ 676.146811][T22094] tipc: Resetting bearer [ 676.186313][T22105] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4861'. [ 676.322976][T22099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 676.387021][T22112] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 676.401280][T22112] bond4 (unregistering): Released all slaves [ 676.411161][T22099] netlink: 'syz.4.4859': attribute type 1 has an invalid length. [ 676.426781][T22099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4859'. [ 676.491588][T22114] batman_adv: batadv0: Adding interface: veth7 [ 676.498061][T22114] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.524792][T22114] batman_adv: batadv0: Interface activated: veth7 [ 676.623014][T22099] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 676.639954][T22099] bond6: (slave batadv1): making interface the new active one [ 676.649076][T22099] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 676.658969][T22097] lo speed is unknown, defaulting to 1000 [ 676.753951][T22092] tipc: Resetting bearer [ 677.127036][T22127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 677.136732][T22127] netlink: 'syz.2.4867': attribute type 5 has an invalid length. [ 677.442510][T22133] sctp: [Deprecated]: syz.2.4869 (pid 22133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 677.442510][T22133] Use struct sctp_sack_info instead [ 677.473010][T22133] sctp: [Deprecated]: syz.2.4869 (pid 22133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 677.473010][T22133] Use struct sctp_sack_info instead [ 677.569792][T22136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.608134][T22136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.464845][T22092] tipc: Disabling bearer [ 679.509744][T22123] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 679.521943][T22123] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 679.542054][T22123] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 679.822144][T22146] syzkaller0: entered promiscuous mode [ 679.832130][T22146] syzkaller0: entered allmulticast mode [ 679.870135][T22146] tipc: Started in network mode [ 679.894982][T22146] tipc: Node identity 120f63f91cd, cluster identity 4711 [ 679.936865][T22146] tipc: Enabled bearer , priority 0 [ 680.015518][T22153] sctp: [Deprecated]: syz.2.4876 (pid 22153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.015518][T22153] Use struct sctp_sack_info instead [ 680.032838][T22144] tipc: Resetting bearer [ 680.084200][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4875'. [ 680.096999][T22144] tipc: Disabling bearer [ 680.109566][T22156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4875'. [ 680.739068][T22177] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4882'. [ 680.936168][T22187] netlink: 'syz.3.4887': attribute type 7 has an invalid length. [ 680.951712][T22187] netlink: 'syz.3.4887': attribute type 8 has an invalid length. [ 681.140753][T21819] erspan0 (unregistering): left promiscuous mode [ 681.328111][T21819] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 681.381230][T21819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.391944][T21819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.402831][T21819] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 681.414160][T21819] bond0 (unregistering): Released all slaves [ 681.425949][T21819] bond1 (unregistering): Released all slaves [ 681.441951][T21819] bond2 (unregistering): Released all slaves [ 681.573779][T21819] tipc: Disabling bearer [ 681.611073][T21819] tipc: Left network mode [ 681.686261][T22214] netlink: 'syz.2.4894': attribute type 4 has an invalid length. [ 681.722249][T22216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4895'. [ 681.761139][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4895'. [ 681.808706][T22224] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4897'. [ 681.992386][T22226] tipc: Enabled bearer , priority 0 [ 682.016768][T22225] wg1 speed is unknown, defaulting to 1000 [ 682.583994][T22219] syzkaller0: entered promiscuous mode [ 682.589737][T22219] syzkaller0: entered allmulticast mode [ 682.596831][T22219] tipc: Resetting bearer [ 682.626500][T22253] batman_adv: batadv0: Interface deactivated: veth7 [ 682.734694][T22217] tipc: Resetting bearer [ 682.865796][T22263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4908'. [ 685.318912][T22217] tipc: Disabling bearer [ 685.345941][T22225] lo speed is unknown, defaulting to 1000 [ 685.471122][T22276] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4912'. [ 685.548196][T22277] mac80211_hwsim hwsim16 wlan1: Caught tx_queue_len zero misconfig [ 685.592752][T22282] FAULT_INJECTION: forcing a failure. [ 685.592752][T22282] name failslab, interval 1, probability 0, space 0, times 0 [ 685.631319][T22282] CPU: 1 UID: 0 PID: 22282 Comm: syz.3.4914 Not tainted syzkaller #0 PREEMPT(full) [ 685.631351][T22282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.631371][T22282] Call Trace: [ 685.631381][T22282] [ 685.631391][T22282] dump_stack_lvl+0xe8/0x150 [ 685.631431][T22282] should_fail_ex+0x412/0x560 [ 685.631472][T22282] should_failslab+0xa8/0x100 [ 685.631501][T22282] ? security_inode_alloc+0x39/0x310 [ 685.631526][T22282] kmem_cache_alloc_noprof+0x87/0x650 [ 685.631561][T22282] security_inode_alloc+0x39/0x310 [ 685.631588][T22282] inode_init_always_gfp+0x9c8/0xda0 [ 685.631629][T22282] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 685.631658][T22282] alloc_inode+0x82/0x1b0 [ 685.631692][T22282] new_inode+0x22/0x170 [ 685.631720][T22282] __debugfs_create_file+0xb8/0x400 [ 685.631755][T22282] debugfs_create_file_full+0x3f/0x60 [ 685.631789][T22282] ref_tracker_dir_debugfs+0x197/0x360 [ 685.631814][T22282] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 685.631869][T22282] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 685.631897][T22282] ? alloc_netdev_mqs+0xa8/0x1210 [ 685.631929][T22282] ? __raw_spin_lock_init+0x45/0x100 [ 685.631961][T22282] alloc_netdev_mqs+0x274/0x1210 [ 685.631985][T22282] ? __pfx_ieee80211_if_setup+0x10/0x10 [ 685.632017][T22282] ieee80211_if_add+0x4cc/0x13d0 [ 685.632048][T22282] ? trace_kmalloc+0x2a/0xf0 [ 685.632077][T22282] ieee80211_add_iface+0xbb/0x5b0 [ 685.632112][T22282] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 685.632146][T22282] ? __alloc_skb+0x4e5/0x7d0 [ 685.632174][T22282] nl80211_new_interface+0x8e9/0x11e0 [ 685.632213][T22282] ? __pfx_nl80211_new_interface+0x10/0x10 [ 685.632257][T22282] genl_family_rcv_msg_doit+0x22a/0x330 [ 685.632308][T22282] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 685.632350][T22282] ? bpf_lsm_capable+0x9/0x20 [ 685.632377][T22282] ? security_capable+0x7e/0x2c0 [ 685.632415][T22282] genl_rcv_msg+0x61c/0x7a0 [ 685.632452][T22282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.632476][T22282] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 685.632495][T22282] ? __pfx_nl80211_new_interface+0x10/0x10 [ 685.632517][T22282] ? __pfx_nl80211_post_doit+0x10/0x10 [ 685.632556][T22282] netlink_rcv_skb+0x232/0x4b0 [ 685.632578][T22282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.632605][T22282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 685.632646][T22282] ? down_read+0x270/0x2e0 [ 685.632674][T22282] ? genl_rcv+0xd/0x40 [ 685.632702][T22282] genl_rcv+0x28/0x40 [ 685.632727][T22282] netlink_unicast+0x75c/0x8e0 [ 685.632773][T22282] netlink_sendmsg+0x813/0xb40 [ 685.632809][T22282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.632836][T22282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 685.632861][T22282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 685.632891][T22282] ____sys_sendmsg+0x972/0x9f0 [ 685.632915][T22282] ? __might_fault+0xaf/0x130 [ 685.632947][T22282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.632983][T22282] ? import_iovec+0x73/0xa0 [ 685.633014][T22282] ___sys_sendmsg+0x2a5/0x360 [ 685.633036][T22282] ? __lock_acquire+0x6b5/0x2cf0 [ 685.633073][T22282] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.633141][T22282] ? __fget_files+0x2a/0x420 [ 685.633163][T22282] ? __fget_files+0x3a0/0x420 [ 685.633198][T22282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 685.633227][T22282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.633263][T22282] ? __pfx_ksys_write+0x10/0x10 [ 685.633309][T22282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.633334][T22282] do_syscall_64+0x15f/0xf80 [ 685.633362][T22282] ? trace_irq_disable+0x3b/0x140 [ 685.633390][T22282] ? clear_bhb_loop+0x40/0x90 [ 685.633417][T22282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.633438][T22282] RIP: 0033:0x7fae2559cdd9 [ 685.633459][T22282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.633478][T22282] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.633501][T22282] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 685.633518][T22282] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 685.633531][T22282] RBP: 00007fae26482090 R08: 0000000000000000 R09: 0000000000000000 [ 685.633544][T22282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.633556][T22282] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 685.633593][T22282] [ 685.633805][T22282] debugfs: out of free dentries, can not create file 'netdev@ffff888022780660' [ 685.646006][T22284] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4915'. [ 685.904621][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.096598][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.289988][T22290] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 686.300325][T22293] lo: Caught tx_queue_len zero misconfig [ 686.357034][T22294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4917'. [ 686.394596][T22288] nbd2: detected capacity change from 0 to 127 [ 686.429866][ T5845] block nbd2: Receive control failed (result -32) [ 686.446785][T21615] block nbd2: Send control failed (result -32) [ 686.480641][T21615] block nbd2: Request send failed, requeueing [ 686.568541][ T25] block nbd2: Dead connection, failed to find a fallback [ 686.578252][ T25] block nbd2: shutting down sockets [ 686.584016][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.596452][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 686.621667][T21615] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.632138][T21615] Buffer I/O error on dev nbd2, logical block 1, async page read [ 686.645239][T21615] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.655384][T21615] Buffer I/O error on dev nbd2, logical block 2, async page read [ 686.663632][T21615] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.673344][T21615] Buffer I/O error on dev nbd2, logical block 3, async page read [ 686.681548][T21615] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.690731][T21615] Buffer I/O error on dev nbd2, logical block 0, async page read [ 686.699204][T21615] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.711415][T21615] Buffer I/O error on dev nbd2, logical block 1, async page read [ 686.719473][T21615] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.729039][T21615] Buffer I/O error on dev nbd2, logical block 2, async page read [ 686.792471][T21615] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.820682][T21615] Buffer I/O error on dev nbd2, logical block 3, async page read [ 686.850204][T21615] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.866073][T22305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4923'. [ 686.892187][T21819] hsr_slave_0: left promiscuous mode [ 686.898654][T21819] hsr_slave_1: left promiscuous mode [ 686.899494][T21615] Buffer I/O error on dev nbd2, logical block 0, async page read [ 686.904604][T22311] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4924'. [ 686.920171][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4923'. [ 686.930806][T21819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.950090][T21615] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.973481][T21615] Buffer I/O error on dev nbd2, logical block 1, async page read [ 687.024831][T22314] openvswitch: netlink: IP tunnel dst address not specified [ 687.032596][T21615] ldm_validate_partition_table(): Disk read failed. [ 687.035628][T21615] Dev nbd2: unable to read RDB block 0 [ 687.058037][T21615] nbd2: unable to read partition table [ 687.139436][T21615] ldm_validate_partition_table(): Disk read failed. [ 687.148903][T21615] Dev nbd2: unable to read RDB block 0 [ 687.157312][T21615] nbd2: unable to read partition table [ 687.614179][T22337] FAULT_INJECTION: forcing a failure. [ 687.614179][T22337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.628529][T22337] CPU: 1 UID: 0 PID: 22337 Comm: syz.4.4931 Not tainted syzkaller #0 PREEMPT(full) [ 687.628560][T22337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 687.628574][T22337] Call Trace: [ 687.628583][T22337] [ 687.628592][T22337] dump_stack_lvl+0xe8/0x150 [ 687.628631][T22337] should_fail_ex+0x412/0x560 [ 687.628670][T22337] _copy_from_user+0x2d/0xb0 [ 687.628696][T22337] ___sys_sendmsg+0x1c6/0x360 [ 687.628719][T22337] ? __lock_acquire+0x6b5/0x2cf0 [ 687.628757][T22337] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.628820][T22337] ? __fget_files+0x2a/0x420 [ 687.628841][T22337] ? __fget_files+0x3a0/0x420 [ 687.628874][T22337] __x64_sys_sendmsg+0x1bd/0x2a0 [ 687.628901][T22337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.628942][T22337] ? __pfx_ksys_write+0x10/0x10 [ 687.628979][T22337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.629002][T22337] do_syscall_64+0x15f/0xf80 [ 687.629031][T22337] ? trace_irq_disable+0x3b/0x140 [ 687.629058][T22337] ? clear_bhb_loop+0x40/0x90 [ 687.629084][T22337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.629106][T22337] RIP: 0033:0x7f7a3059cdd9 [ 687.629127][T22337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.629146][T22337] RSP: 002b:00007f7a31481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.629169][T22337] RAX: ffffffffffffffda RBX: 00007f7a30815fa0 RCX: 00007f7a3059cdd9 [ 687.629185][T22337] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 687.629199][T22337] RBP: 00007f7a31481090 R08: 0000000000000000 R09: 0000000000000000 [ 687.629213][T22337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.629225][T22337] R13: 00007f7a30816038 R14: 00007f7a30815fa0 R15: 00007ffc326cbef8 [ 687.629259][T22337] [ 688.009251][T21819] team0 (unregistering): Port device team_slave_1 removed [ 688.066150][T21819] team0 (unregistering): Port device team_slave_0 removed [ 688.389648][T22352] tipc: Enabling of bearer rejected, failed to enable media [ 688.509704][T22349] wg1 speed is unknown, defaulting to 1000 [ 688.616201][T22361] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4937'. [ 688.651756][T22365] tipc: Enabled bearer , priority 10 [ 688.679390][T22363] netlink: 'syz.3.4938': attribute type 72 has an invalid length. [ 688.682276][T22365] netlink: 368 bytes leftover after parsing attributes in process `syz.4.4939'. [ 688.739379][T22365] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 688.748378][T22368] netlink: 'syz.4.4939': attribute type 3 has an invalid length. [ 688.809456][T22367] syzkaller0: entered promiscuous mode [ 688.828835][T22367] syzkaller0: entered allmulticast mode [ 689.000912][T21819] IPVS: stop unused estimator thread 0... [ 689.364119][T22349] lo speed is unknown, defaulting to 1000 [ 689.958516][T22401] wg1 speed is unknown, defaulting to 1000 [ 690.025660][T22404] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4953'. [ 690.300319][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4954'. [ 690.522613][T22415] netlink: 'syz.2.4958': attribute type 1 has an invalid length. [ 690.746637][T22402] tipc: Enabled bearer , priority 14 [ 690.882393][T22427] can: request_module (can-proto-0) failed. [ 690.886666][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 690.893212][T22432] sit2: entered promiscuous mode [ 690.988409][T22435] netlink: 'syz.0.4964': attribute type 62 has an invalid length. [ 691.006576][T22401] lo speed is unknown, defaulting to 1000 [ 691.007258][T22435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4964'. [ 691.159562][T22440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4966'. [ 692.136815][T22470] __nla_validate_parse: 4 callbacks suppressed [ 692.136934][T22470] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4978'. [ 692.498241][T22495] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 692.515760][T22485] tipc: Enabled bearer , priority 0 [ 692.557189][T22490] wg1 speed is unknown, defaulting to 1000 [ 692.586557][T22494] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 692.597152][T22496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 692.831967][T22506] netlink: 'syz.1.4988': attribute type 13 has an invalid length. [ 692.874543][T22506] netlink: 'syz.1.4988': attribute type 17 has an invalid length. [ 693.193029][T22506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.227281][T22506] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.265955][T22506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 693.301377][T22509] FAULT_INJECTION: forcing a failure. [ 693.301377][T22509] name failslab, interval 1, probability 0, space 0, times 0 [ 693.347415][T22509] CPU: 1 UID: 0 PID: 22509 Comm: syz.4.4990 Not tainted syzkaller #0 PREEMPT(full) [ 693.347447][T22509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 693.347461][T22509] Call Trace: [ 693.347470][T22509] [ 693.347479][T22509] dump_stack_lvl+0xe8/0x150 [ 693.347521][T22509] should_fail_ex+0x412/0x560 [ 693.347560][T22509] should_failslab+0xa8/0x100 [ 693.347592][T22509] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 693.347621][T22509] ? __alloc_skb+0x1d0/0x7d0 [ 693.347639][T22509] ? __local_bh_enable_ip+0xd0/0x130 [ 693.347676][T22509] __alloc_skb+0x1d0/0x7d0 [ 693.347697][T22509] ? netlink_ack_tlv_len+0x6c/0x210 [ 693.347722][T22509] netlink_ack+0x146/0xa50 [ 693.347741][T22509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.347767][T22509] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 693.347792][T22509] ? __pfx_nl80211_post_doit+0x10/0x10 [ 693.347831][T22509] netlink_rcv_skb+0x2b6/0x4b0 [ 693.347855][T22509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.347885][T22509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.347926][T22509] ? down_read+0x270/0x2e0 [ 693.347955][T22509] ? genl_rcv+0xd/0x40 [ 693.347982][T22509] genl_rcv+0x28/0x40 [ 693.348006][T22509] netlink_unicast+0x75c/0x8e0 [ 693.348049][T22509] netlink_sendmsg+0x813/0xb40 [ 693.348082][T22509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.348107][T22509] ? aa_sock_msg_perm+0xf1/0x1b0 [ 693.348131][T22509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.348158][T22509] ____sys_sendmsg+0x972/0x9f0 [ 693.348180][T22509] ? __might_fault+0xaf/0x130 [ 693.348210][T22509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.348243][T22509] ? import_iovec+0x73/0xa0 [ 693.348271][T22509] ___sys_sendmsg+0x2a5/0x360 [ 693.348300][T22509] ? __lock_acquire+0x6b5/0x2cf0 [ 693.348335][T22509] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.348399][T22509] ? __fget_files+0x2a/0x420 [ 693.348419][T22509] ? __fget_files+0x3a0/0x420 [ 693.348457][T22509] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.348483][T22509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.348516][T22509] ? __pfx_ksys_write+0x10/0x10 [ 693.348551][T22509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.348572][T22509] do_syscall_64+0x15f/0xf80 [ 693.348598][T22509] ? trace_irq_disable+0x3b/0x140 [ 693.348624][T22509] ? clear_bhb_loop+0x40/0x90 [ 693.348650][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.348669][T22509] RIP: 0033:0x7f7a3059cdd9 [ 693.348690][T22509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.348708][T22509] RSP: 002b:00007f7a31481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.348731][T22509] RAX: ffffffffffffffda RBX: 00007f7a30815fa0 RCX: 00007f7a3059cdd9 [ 693.348746][T22509] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 693.348759][T22509] RBP: 00007f7a31481090 R08: 0000000000000000 R09: 0000000000000000 [ 693.348772][T22509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.348785][T22509] R13: 00007f7a30816038 R14: 00007f7a30815fa0 R15: 00007ffc326cbef8 [ 693.348819][T22509] [ 693.650237][T10578] tipc: Node number set to 249521145 [ 693.657275][T22490] lo speed is unknown, defaulting to 1000 [ 693.943196][T22513] netlink: 'syz.4.4992': attribute type 1 has an invalid length. [ 693.970425][T22513] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4992'. [ 694.273146][T22519] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4993'. [ 694.799176][T22543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5001'. [ 694.906396][T22550] netlink: 'syz.0.5004': attribute type 1 has an invalid length. [ 694.933565][T22550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5004'. [ 695.194252][T22563] wg1 speed is unknown, defaulting to 1000 [ 695.206332][T22569] syzkaller0: entered promiscuous mode [ 695.219499][T22569] syzkaller0: entered allmulticast mode [ 695.577206][T22563] lo speed is unknown, defaulting to 1000 [ 695.739338][T22588] syzkaller1: entered promiscuous mode [ 695.762065][T22588] syzkaller1: entered allmulticast mode [ 696.390425][T22606] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 696.405816][T22608] netlink: 'syz.2.5019': attribute type 1 has an invalid length. [ 696.434972][T22608] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5019'. [ 696.749409][T22620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5022'. [ 696.917081][T22634] macsec1: entered promiscuous mode [ 696.926165][T22634] dummy0: entered promiscuous mode [ 696.946074][T22634] macsec1: entered allmulticast mode [ 696.963106][T22634] dummy0: entered allmulticast mode [ 697.016468][T22634] dummy0: left allmulticast mode [ 697.031214][T22634] dummy0: left promiscuous mode [ 697.612567][T22658] sctp: [Deprecated]: syz.2.5034 (pid 22658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.612567][T22658] Use struct sctp_sack_info instead [ 697.843597][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5035'. [ 697.914291][T22667] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5035'. [ 697.968072][T22673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5038'. [ 697.996739][T22673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5038'. [ 698.145884][T22683] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 698.218432][T22685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5043'. [ 698.331775][T22690] netlink: 'syz.1.5044': attribute type 62 has an invalid length. [ 698.352376][T22690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5044'. [ 698.368660][T22691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5045'. [ 698.446456][T22694] siw: device registration error -23 [ 698.457711][T22694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5046'. [ 698.529038][T22700] siw: device registration error -23 [ 698.538076][T22700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5049'. [ 698.656529][T22706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5050'. [ 698.685286][T22701] wg1 speed is unknown, defaulting to 1000 [ 698.947594][T22712] FAULT_INJECTION: forcing a failure. [ 698.947594][T22712] name failslab, interval 1, probability 0, space 0, times 0 [ 698.960706][T22712] CPU: 1 UID: 0 PID: 22712 Comm: syz.1.5052 Not tainted syzkaller #0 PREEMPT(full) [ 698.960736][T22712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.960748][T22712] Call Trace: [ 698.960756][T22712] [ 698.960765][T22712] dump_stack_lvl+0xe8/0x150 [ 698.960805][T22712] should_fail_ex+0x412/0x560 [ 698.960844][T22712] should_failslab+0xa8/0x100 [ 698.960875][T22712] __kvmalloc_node_noprof+0x178/0x8a0 [ 698.960902][T22712] ? nla_strcmp+0x106/0x140 [ 698.960931][T22712] ? nf_tables_newset+0x1354/0x2580 [ 698.960962][T22712] ? nft_set_lookup+0x128/0x150 [ 698.960991][T22712] ? nft_rhash_estimate+0x8f/0xa0 [ 698.961013][T22712] nf_tables_newset+0x1354/0x2580 [ 698.961053][T22712] ? __pfx_nf_tables_newset+0x10/0x10 [ 698.961103][T22712] ? __nla_parse+0x40/0x60 [ 698.961134][T22712] nfnetlink_rcv+0x123e/0x27b0 [ 698.961204][T22712] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 698.961255][T22712] ? ref_tracker_free+0x693/0x840 [ 698.961313][T22712] ? __netlink_deliver_tap+0x807/0x850 [ 698.961347][T22712] ? netlink_deliver_tap+0x2e/0x1b0 [ 698.961375][T22712] ? netlink_deliver_tap+0x2e/0x1b0 [ 698.961402][T22712] netlink_unicast+0x75c/0x8e0 [ 698.961454][T22712] netlink_sendmsg+0x813/0xb40 [ 698.961487][T22712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.961513][T22712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.961538][T22712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.961567][T22712] ____sys_sendmsg+0x972/0x9f0 [ 698.961591][T22712] ? __might_fault+0xaf/0x130 [ 698.961623][T22712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.961657][T22712] ? import_iovec+0x73/0xa0 [ 698.961688][T22712] ___sys_sendmsg+0x2a5/0x360 [ 698.961710][T22712] ? __lock_acquire+0x6b5/0x2cf0 [ 698.961747][T22712] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.961812][T22712] ? __fget_files+0x2a/0x420 [ 698.961833][T22712] ? __fget_files+0x3a0/0x420 [ 698.961867][T22712] __x64_sys_sendmsg+0x1bd/0x2a0 [ 698.961894][T22712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.961929][T22712] ? __pfx_ksys_write+0x10/0x10 [ 698.961966][T22712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.961990][T22712] do_syscall_64+0x15f/0xf80 [ 698.962018][T22712] ? trace_irq_disable+0x3b/0x140 [ 698.962046][T22712] ? clear_bhb_loop+0x40/0x90 [ 698.962073][T22712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.962093][T22712] RIP: 0033:0x7f5af939cdd9 [ 698.962115][T22712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.962133][T22712] RSP: 002b:00007f5afa171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.962156][T22712] RAX: ffffffffffffffda RBX: 00007f5af9615fa0 RCX: 00007f5af939cdd9 [ 698.962171][T22712] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 698.962185][T22712] RBP: 00007f5afa171090 R08: 0000000000000000 R09: 0000000000000000 [ 698.962198][T22712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.962211][T22712] R13: 00007f5af9616038 R14: 00007f5af9615fa0 R15: 00007ffeab900598 [ 698.962247][T22712] [ 699.283410][T22701] lo speed is unknown, defaulting to 1000 [ 699.544808][T22718] wg1 speed is unknown, defaulting to 1000 [ 699.673124][T22732] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 699.757900][T22727] netlink: 'syz.4.5054': attribute type 4 has an invalid length. [ 699.806234][T22727] netlink: 'syz.4.5054': attribute type 4 has an invalid length. [ 699.973462][T22718] lo speed is unknown, defaulting to 1000 [ 700.720592][T22758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.728015][T22758] IPv6: NLM_F_CREATE should be set when creating new route [ 700.735531][T22758] IPv6: NLM_F_CREATE should be set when creating new route [ 701.374921][T22780] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 701.415217][T22780] bond5 (unregistering): Released all slaves [ 701.584252][T22785] wg1 speed is unknown, defaulting to 1000 [ 702.199194][T22785] lo speed is unknown, defaulting to 1000 [ 702.625340][T22819] team_slave_1: entered promiscuous mode [ 702.631506][T22819] team_slave_1: entered allmulticast mode [ 703.551793][T22847] __nla_validate_parse: 5 callbacks suppressed [ 703.551815][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5092'. [ 703.597934][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5091'. [ 703.627554][T22842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5092'. [ 703.790371][T22855] netlink: 'syz.2.5094': attribute type 3 has an invalid length. [ 703.798495][T22855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5094'. [ 703.884559][T22857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5096'. [ 704.162659][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5100'. [ 704.347258][T22885] netlink: 'syz.2.5106': attribute type 3 has an invalid length. [ 704.355821][T22885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5106'. [ 704.392031][T22889] netlink: 'syz.3.5107': attribute type 1 has an invalid length. [ 704.426772][T22889] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5107'. [ 704.467685][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 704.496305][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5109'. [ 704.573449][T22895] syzkaller0: entered promiscuous mode [ 704.592095][T22895] syzkaller0: entered allmulticast mode [ 705.063659][T22922] lo: Caught tx_queue_len zero misconfig [ 705.100603][T22922] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 705.110381][T22922] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 705.121737][T22922] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 705.431345][T22935] wg1 speed is unknown, defaulting to 1000 [ 705.553547][T22942] netlink: 'syz.4.5117': attribute type 1 has an invalid length. [ 705.826942][T22935] lo speed is unknown, defaulting to 1000 [ 705.889240][T22951] netlink: 'syz.0.5120': attribute type 3 has an invalid length. [ 706.028116][T22956] bond0: left allmulticast mode [ 706.039234][T22956] bond0: left promiscuous mode [ 706.044613][T22956] bridge0: port 1(bond0) entered disabled state [ 706.201856][T22967] FAULT_INJECTION: forcing a failure. [ 706.201856][T22967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.215874][T22967] CPU: 1 UID: 0 PID: 22967 Comm: syz.2.5126 Not tainted syzkaller #0 PREEMPT(full) [ 706.215909][T22967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.215920][T22967] Call Trace: [ 706.215928][T22967] [ 706.215936][T22967] dump_stack_lvl+0xe8/0x150 [ 706.215973][T22967] should_fail_ex+0x412/0x560 [ 706.216011][T22967] _copy_from_user+0x2d/0xb0 [ 706.216036][T22967] kstrtouint_from_user+0xd6/0x180 [ 706.216070][T22967] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 706.216129][T22967] proc_fail_nth_write+0x8e/0x210 [ 706.216155][T22967] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 706.216186][T22967] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 706.216209][T22967] vfs_write+0x29a/0xb90 [ 706.216244][T22967] ? __pfx_vfs_write+0x10/0x10 [ 706.216270][T22967] ? __fget_files+0x2a/0x420 [ 706.216296][T22967] ? __fget_files+0x3a0/0x420 [ 706.216314][T22967] ? __fget_files+0x2a/0x420 [ 706.216345][T22967] ksys_write+0x150/0x270 [ 706.216372][T22967] ? __pfx_ksys_write+0x10/0x10 [ 706.216410][T22967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.216434][T22967] do_syscall_64+0x15f/0xf80 [ 706.216462][T22967] ? trace_irq_disable+0x3b/0x140 [ 706.216490][T22967] ? clear_bhb_loop+0x40/0x90 [ 706.216516][T22967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.216534][T22967] RIP: 0033:0x7f1c7615d60e [ 706.216555][T22967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 706.216574][T22967] RSP: 002b:00007f1c770d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 706.216597][T22967] RAX: ffffffffffffffda RBX: 00007f1c770d36c0 RCX: 00007f1c7615d60e [ 706.216611][T22967] RDX: 0000000000000001 RSI: 00007f1c770d30a0 RDI: 0000000000000003 [ 706.216624][T22967] RBP: 00007f1c770d3090 R08: 0000000000000000 R09: 0000000000000000 [ 706.216636][T22967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.216648][T22967] R13: 00007f1c76416038 R14: 00007f1c76415fa0 R15: 00007ffe582a3338 [ 706.216683][T22967] [ 706.476944][T22971] sctp: [Deprecated]: syz.1.5127 (pid 22971) Use of int in max_burst socket option. [ 706.476944][T22971] Use struct sctp_assoc_value instead [ 706.504782][T22971] syzkaller0: entered promiscuous mode [ 706.510339][T22971] syzkaller0: entered allmulticast mode [ 706.867111][T22979] gre1: entered allmulticast mode [ 707.655923][T23000] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 707.991404][T23010] netlink: 'syz.0.5143': attribute type 1 has an invalid length. [ 708.019421][T23010] netlink: 'syz.0.5143': attribute type 1 has an invalid length. [ 708.720060][T23056] netlink: 'syz.2.5159': attribute type 1 has an invalid length. [ 708.729180][T23056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.794594][T23058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.805689][T23058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.816461][T23058] hsr0: entered promiscuous mode [ 708.821669][T23058] hsr0: entered allmulticast mode [ 708.826770][T23058] hsr_slave_0: entered allmulticast mode [ 708.832749][T23058] hsr_slave_1: entered allmulticast mode [ 708.926243][T23060] netlink: 'syz.1.5161': attribute type 10 has an invalid length. [ 708.975718][T23062] __nla_validate_parse: 10 callbacks suppressed [ 708.975734][T23062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5162'. [ 709.288446][T23067] xt_TCPMSS: Only works on TCP SYN packets [ 709.393071][T23073] netlink: 'syz.3.5166': attribute type 72 has an invalid length. [ 709.439051][T23077] sctp: [Deprecated]: syz.0.5168 (pid 23077) Use of int in maxseg socket option. [ 709.439051][T23077] Use struct sctp_assoc_value instead [ 709.472220][T23077] netlink: 'syz.0.5168': attribute type 13 has an invalid length. [ 709.483028][T23077] netlink: 'syz.0.5168': attribute type 17 has an invalid length. [ 709.504062][T23080] netlink: 'syz.3.5169': attribute type 10 has an invalid length. [ 709.527090][T23081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5168'. [ 709.668061][T23077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.679590][T23077] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.715386][T23077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.818235][T23093] x_tables: duplicate underflow at hook 1 [ 709.954142][T23096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.976414][T23099] IPVS: set_ctl: invalid protocol: 8 172.20.20.40:20004 [ 709.979075][T23096] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 710.377101][T23114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5177'. [ 710.398740][T23114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5177'. [ 710.998646][T23136] validate_nla: 1 callbacks suppressed [ 710.998667][T23136] netlink: 'syz.0.5185': attribute type 5 has an invalid length. [ 711.265517][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5188'. [ 711.374956][T23156] syzkaller0: entered promiscuous mode [ 711.389380][T23156] syzkaller0: entered allmulticast mode [ 711.745269][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5197'. [ 711.773462][T23174] netlink: 'syz.4.5197': attribute type 1 has an invalid length. [ 711.794389][T23174] netlink: 'syz.4.5197': attribute type 1 has an invalid length. [ 711.804002][T23174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5197'. [ 711.848844][T23174] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 711.868338][T23174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.890770][T23174] netlink: 16142 bytes leftover after parsing attributes in process `syz.4.5197'. [ 712.129302][T23186] netlink: 'syz.1.5201': attribute type 4 has an invalid length. [ 712.762413][T23210] syzkaller0: entered promiscuous mode [ 712.773047][T23210] syzkaller0: entered allmulticast mode [ 713.056142][T23220] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 715.088126][T23220] bond4 (unregistering): Released all slaves [ 715.494274][T23233] FAULT_INJECTION: forcing a failure. [ 715.494274][T23233] name failslab, interval 1, probability 0, space 0, times 0 [ 715.514124][ T29] audit: type=1800 audit(1777080626.737:10): pid=23234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5216" name="memory.events" dev="tmpfs" ino=2441 res=0 errno=0 [ 715.553134][T23233] CPU: 1 UID: 0 PID: 23233 Comm: syz.3.5217 Not tainted syzkaller #0 PREEMPT(full) [ 715.553166][T23233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.553178][T23233] Call Trace: [ 715.553187][T23233] [ 715.553195][T23233] dump_stack_lvl+0xe8/0x150 [ 715.553234][T23233] should_fail_ex+0x412/0x560 [ 715.553269][T23233] ? alloc_inode+0xb8/0x1b0 [ 715.553299][T23233] should_failslab+0xa8/0x100 [ 715.553328][T23233] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 715.553360][T23233] alloc_inode+0xb8/0x1b0 [ 715.553391][T23233] path_from_stashed+0x200/0x5c0 [ 715.553415][T23233] ? bpf_map_offload_info_fill_ns+0x183/0x1f0 [ 715.553453][T23233] bpf_map_offload_info_fill+0xbe/0x290 [ 715.553481][T23233] ? __pfx_bpf_map_offload_info_fill+0x10/0x10 [ 715.553513][T23233] ? bpf_obj_get_info_by_fd+0xbb8/0x32f0 [ 715.553548][T23233] bpf_obj_get_info_by_fd+0x10cf/0x32f0 [ 715.553576][T23233] ? __lock_acquire+0x6b5/0x2cf0 [ 715.553620][T23233] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 715.553653][T23233] ? __lock_acquire+0x6b5/0x2cf0 [ 715.553697][T23233] ? get_pid_task+0x20/0x1f0 [ 715.553718][T23233] ? get_pid_task+0x20/0x1f0 [ 715.553737][T23233] ? get_pid_task+0x20/0x1f0 [ 715.553763][T23233] ? __might_fault+0xaf/0x130 [ 715.553786][T23233] ? __might_fault+0xaf/0x130 [ 715.553823][T23233] ? bpf_lsm_bpf+0x9/0x20 [ 715.553848][T23233] ? security_bpf+0x7e/0x2d0 [ 715.553880][T23233] __sys_bpf+0x66e/0x950 [ 715.553909][T23233] ? __pfx___sys_bpf+0x10/0x10 [ 715.553984][T23233] ? ksys_write+0x242/0x270 [ 715.554011][T23233] ? __pfx_ksys_write+0x10/0x10 [ 715.554040][T23233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.554061][T23233] __x64_sys_bpf+0x7c/0x90 [ 715.554085][T23233] do_syscall_64+0x15f/0xf80 [ 715.554113][T23233] ? trace_irq_disable+0x3b/0x140 [ 715.554139][T23233] ? clear_bhb_loop+0x40/0x90 [ 715.554163][T23233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.554182][T23233] RIP: 0033:0x7fae2559cdd9 [ 715.554201][T23233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.554220][T23233] RSP: 002b:00007fae26482028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 715.554242][T23233] RAX: ffffffffffffffda RBX: 00007fae25815fa0 RCX: 00007fae2559cdd9 [ 715.554257][T23233] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 000000000000000f [ 715.554270][T23233] RBP: 00007fae26482090 R08: 0000000000000000 R09: 0000000000000000 [ 715.554282][T23233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.554294][T23233] R13: 00007fae25816038 R14: 00007fae25815fa0 R15: 00007fff25cf7758 [ 715.554327][T23233] [ 715.567804][ T29] audit: type=1804 audit(1777080626.757:11): pid=23234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5216" name="/newroot/477/memory.events" dev="tmpfs" ino=2441 res=1 errno=0 [ 715.672950][T23242] FAULT_INJECTION: forcing a failure. [ 715.672950][T23242] name failslab, interval 1, probability 0, space 0, times 0 [ 715.801686][T23246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5220'. [ 715.872864][T23242] CPU: 1 UID: 0 PID: 23242 Comm: syz.1.5219 Not tainted syzkaller #0 PREEMPT(full) [ 715.872895][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.872908][T23242] Call Trace: [ 715.872917][T23242] [ 715.872936][T23242] dump_stack_lvl+0xe8/0x150 [ 715.872971][T23242] should_fail_ex+0x412/0x560 [ 715.873008][T23242] should_failslab+0xa8/0x100 [ 715.873034][T23242] ? skb_clone+0x212/0x3a0 [ 715.873057][T23242] kmem_cache_alloc_noprof+0x87/0x650 [ 715.873083][T23242] ? __netlink_lookup+0xc6/0x8b0 [ 715.873113][T23242] skb_clone+0x212/0x3a0 [ 715.873140][T23242] __netlink_deliver_tap+0x404/0x850 [ 715.873174][T23242] ? netlink_deliver_tap+0x2e/0x1b0 [ 715.873197][T23242] netlink_deliver_tap+0x19c/0x1b0 [ 715.873221][T23242] netlink_unicast+0x730/0x8e0 [ 715.873262][T23242] netlink_sendmsg+0x813/0xb40 [ 715.873295][T23242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.873322][T23242] ? aa_sock_msg_perm+0xf1/0x1b0 [ 715.873347][T23242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.873374][T23242] ____sys_sendmsg+0x972/0x9f0 [ 715.873397][T23242] ? __might_fault+0xaf/0x130 [ 715.873427][T23242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.873461][T23242] ? import_iovec+0x73/0xa0 [ 715.873490][T23242] ___sys_sendmsg+0x2a5/0x360 [ 715.873512][T23242] ? __lock_acquire+0x6b5/0x2cf0 [ 715.873548][T23242] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.873609][T23242] ? __fget_files+0x2a/0x420 [ 715.873632][T23242] ? __fget_files+0x3a0/0x420 [ 715.873664][T23242] __x64_sys_sendmsg+0x1bd/0x2a0 [ 715.873691][T23242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.873724][T23242] ? __pfx_ksys_write+0x10/0x10 [ 715.873759][T23242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.873783][T23242] do_syscall_64+0x15f/0xf80 [ 715.873809][T23242] ? trace_irq_disable+0x3b/0x140 [ 715.873836][T23242] ? clear_bhb_loop+0x40/0x90 [ 715.873862][T23242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.873882][T23242] RIP: 0033:0x7f5af939cdd9 [ 715.873902][T23242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.873952][T23242] RSP: 002b:00007f5af75f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.873977][T23242] RAX: ffffffffffffffda RBX: 00007f5af9616090 RCX: 00007f5af939cdd9 [ 715.873993][T23242] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 715.874007][T23242] RBP: 00007f5af75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 715.874020][T23242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.874032][T23242] R13: 00007f5af9616128 R14: 00007f5af9616090 R15: 00007ffeab900598 [ 715.874068][T23242] [ 716.147739][T23239] xt_ecn: cannot match TCP bits for non-tcp packets [ 716.180410][T23239] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5218'. [ 716.190456][T23239] netlink: 'syz.2.5218': attribute type 2 has an invalid length. [ 716.335332][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5224'. [ 716.354532][T23256] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5224'. [ 716.447430][T23258] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 716.704742][T23267] ip6tnl0: entered promiscuous mode [ 716.741539][T23267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5225'. [ 716.798203][T23271] siw: device registration error -23 [ 716.807829][T23271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5229'. [ 717.210319][T23285] netlink: 'syz.3.5233': attribute type 1 has an invalid length. [ 717.228601][T23285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5233'. [ 717.735411][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5237'. [ 717.872382][T23301] netlink: 'syz.0.5238': attribute type 4 has an invalid length. [ 718.027665][T23308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5241'. [ 719.159306][T23345] ip6tnl0: left promiscuous mode [ 719.354007][T23360] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5254'. [ 719.476220][T23345] hsr0: left promiscuous mode [ 719.491820][T23345] hsr0: left allmulticast mode [ 719.498457][T23345] hsr_slave_0: left allmulticast mode [ 719.504783][T23345] hsr_slave_1: left allmulticast mode [ 719.564789][T23363] xt_hashlimit: size too large, truncated to 1048576 [ 720.392205][T23403] openvswitch: netlink: Message has 3 unknown bytes. [ 721.093112][T23431] syzkaller0: entered promiscuous mode [ 721.098704][T23431] syzkaller0: entered allmulticast mode [ 721.107947][T23429] __nla_validate_parse: 5 callbacks suppressed [ 721.107969][T23429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5276'. [ 721.143190][T23429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5276'. [ 721.267320][T23441] FAULT_INJECTION: forcing a failure. [ 721.267320][T23441] name failslab, interval 1, probability 0, space 0, times 0 [ 721.303169][T23441] CPU: 0 UID: 0 PID: 23441 Comm: syz.2.5280 Not tainted syzkaller #0 PREEMPT(full) [ 721.303200][T23441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.303213][T23441] Call Trace: [ 721.303222][T23441] [ 721.303232][T23441] dump_stack_lvl+0xe8/0x150 [ 721.303271][T23441] should_fail_ex+0x412/0x560 [ 721.303311][T23441] should_failslab+0xa8/0x100 [ 721.303342][T23441] __kvmalloc_node_noprof+0x178/0x8a0 [ 721.303369][T23441] ? nla_strcmp+0x106/0x140 [ 721.303392][T23441] ? nf_tables_newset+0x1354/0x2580 [ 721.303424][T23441] ? nft_set_lookup+0x128/0x150 [ 721.303454][T23441] ? nft_rhash_estimate+0x8f/0xa0 [ 721.303479][T23441] nf_tables_newset+0x1354/0x2580 [ 721.303521][T23441] ? __pfx_nf_tables_newset+0x10/0x10 [ 721.303575][T23441] ? __nla_parse+0x40/0x60 [ 721.303605][T23441] nfnetlink_rcv+0x123e/0x27b0 [ 721.303676][T23441] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 721.303761][T23441] ? netlink_deliver_tap+0x2e/0x1b0 [ 721.303796][T23441] ? netlink_deliver_tap+0x2e/0x1b0 [ 721.303817][T23441] ? netlink_deliver_tap+0x2e/0x1b0 [ 721.303846][T23441] netlink_unicast+0x75c/0x8e0 [ 721.303891][T23441] netlink_sendmsg+0x813/0xb40 [ 721.303924][T23441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.303952][T23441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 721.303976][T23441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 721.304005][T23441] ____sys_sendmsg+0x972/0x9f0 [ 721.304030][T23441] ? __might_fault+0xaf/0x130 [ 721.304061][T23441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.304096][T23441] ? import_iovec+0x73/0xa0 [ 721.304126][T23441] ___sys_sendmsg+0x2a5/0x360 [ 721.304157][T23441] ? __lock_acquire+0x6b5/0x2cf0 [ 721.304194][T23441] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.304259][T23441] ? __fget_files+0x2a/0x420 [ 721.304280][T23441] ? __fget_files+0x3a0/0x420 [ 721.304315][T23441] __x64_sys_sendmsg+0x1bd/0x2a0 [ 721.304342][T23441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.304377][T23441] ? __pfx_ksys_write+0x10/0x10 [ 721.304413][T23441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.304436][T23441] do_syscall_64+0x15f/0xf80 [ 721.304463][T23441] ? trace_irq_disable+0x3b/0x140 [ 721.304489][T23441] ? clear_bhb_loop+0x40/0x90 [ 721.304513][T23441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.304533][T23441] RIP: 0033:0x7f1c7619cdd9 [ 721.304554][T23441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.304572][T23441] RSP: 002b:00007f1c770d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.304594][T23441] RAX: ffffffffffffffda RBX: 00007f1c76415fa0 RCX: 00007f1c7619cdd9 [ 721.304609][T23441] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 721.304622][T23441] RBP: 00007f1c770d3090 R08: 0000000000000000 R09: 0000000000000000 [ 721.304635][T23441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.304648][T23441] R13: 00007f1c76416038 R14: 00007f1c76415fa0 R15: 00007ffe582a3338 [ 721.304683][T23441] [ 721.647043][T23446] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5284'. [ 721.811130][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5288'. [ 721.820443][T23458] geneve2: entered promiscuous mode [ 721.850813][T23458] geneve2: entered allmulticast mode [ 722.109968][T23468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5291'. [ 722.119190][T23468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5291'. [ 722.547979][T23494] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 722.589605][T23498] FAULT_INJECTION: forcing a failure. [ 722.589605][T23498] name failslab, interval 1, probability 0, space 0, times 0 [ 722.615584][T23498] CPU: 0 UID: 0 PID: 23498 Comm: syz.4.5304 Not tainted syzkaller #0 PREEMPT(full) [ 722.615614][T23498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 722.615627][T23498] Call Trace: [ 722.615636][T23498] [ 722.615645][T23498] dump_stack_lvl+0xe8/0x150 [ 722.615685][T23498] should_fail_ex+0x412/0x560 [ 722.615731][T23498] should_failslab+0xa8/0x100 [ 722.615761][T23498] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 722.615798][T23498] ? __alloc_skb+0x186/0x7d0 [ 722.615818][T23498] ? __alloc_skb+0x1d0/0x7d0 [ 722.615834][T23498] ? __local_bh_enable_ip+0xd0/0x130 [ 722.615867][T23498] __alloc_skb+0x1d0/0x7d0 [ 722.615893][T23498] netlink_sendmsg+0x5d4/0xb40 [ 722.615925][T23498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.615958][T23498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 722.615983][T23498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 722.616010][T23498] ____sys_sendmsg+0x972/0x9f0 [ 722.616043][T23498] ? __might_fault+0xaf/0x130 [ 722.616073][T23498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.616113][T23498] ? import_iovec+0x73/0xa0 [ 722.616142][T23498] ___sys_sendmsg+0x2a5/0x360 [ 722.616180][T23498] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.616242][T23498] ? __fget_files+0x2a/0x420 [ 722.616263][T23498] ? __fget_files+0x3a0/0x420 [ 722.616294][T23498] __x64_sys_sendmsg+0x1bd/0x2a0 [ 722.616320][T23498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 722.616354][T23498] ? __pfx_ksys_write+0x10/0x10 [ 722.616387][T23498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.616411][T23498] do_syscall_64+0x15f/0xf80 [ 722.616438][T23498] ? trace_irq_disable+0x3b/0x140 [ 722.616466][T23498] ? clear_bhb_loop+0x40/0x90 [ 722.616490][T23498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.616509][T23498] RIP: 0033:0x7f7a3059cdd9 [ 722.616529][T23498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.616548][T23498] RSP: 002b:00007f7a31481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.616571][T23498] RAX: ffffffffffffffda RBX: 00007f7a30815fa0 RCX: 00007f7a3059cdd9 [ 722.616586][T23498] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 722.616600][T23498] RBP: 00007f7a31481090 R08: 0000000000000000 R09: 0000000000000000 [ 722.616613][T23498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.616624][T23498] R13: 00007f7a30816038 R14: 00007f7a30815fa0 R15: 00007ffc326cbef8 [ 722.616657][T23498] [ 722.952335][T23509] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 722.966652][T23509] Cannot find set identified by id 3 to match [ 722.975428][T23509] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.5305'. [ 722.985340][T23509] netlink: 'syz.1.5305': attribute type 17 has an invalid length. [ 723.029382][T23509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.038158][T23513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5305'. [ 723.039630][T23509] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.060421][T23509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 723.208338][T23519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5307'. [ 723.228810][T23519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5307'. [ 723.303082][T23523] netlink: 'syz.3.5308': attribute type 1 has an invalid length. [ 723.404397][T23523] bond4: entered promiscuous mode [ 723.410185][T23523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 723.419480][T23527] FAULT_INJECTION: forcing a failure. [ 723.419480][T23527] name failslab, interval 1, probability 0, space 0, times 0 [ 723.432765][T23527] CPU: 0 UID: 0 PID: 23527 Comm: syz.3.5308 Not tainted syzkaller #0 PREEMPT(full) [ 723.432796][T23527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 723.432808][T23527] Call Trace: [ 723.432817][T23527] [ 723.432827][T23527] dump_stack_lvl+0xe8/0x150 [ 723.432866][T23527] should_fail_ex+0x412/0x560 [ 723.432902][T23527] ? __d_alloc+0x37/0x6f0 [ 723.432938][T23527] should_failslab+0xa8/0x100 [ 723.432968][T23527] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 723.433005][T23527] __d_alloc+0x37/0x6f0 [ 723.433036][T23527] d_alloc+0x4b/0x190 [ 723.433057][T23527] ? lookup_one_qstr_excl+0xc4/0x360 [ 723.433087][T23527] lookup_one_qstr_excl+0xd8/0x360 [ 723.433112][T23527] ? lookup_noperm_common+0x245/0x430 [ 723.433141][T23527] start_dirop+0x5c/0x90 [ 723.433165][T23527] simple_start_creating+0xcc/0x110 [ 723.433191][T23527] ? __pfx_simple_start_creating+0x10/0x10 [ 723.433217][T23527] ? do_raw_spin_unlock+0xf5/0x210 [ 723.433245][T23527] ? mntput+0x65/0xc0 [ 723.433280][T23527] debugfs_start_creating+0xdb/0x1a0 [ 723.433313][T23527] __debugfs_create_file+0x6f/0x400 [ 723.433347][T23527] debugfs_create_file_full+0x3f/0x60 [ 723.433380][T23527] ref_tracker_dir_debugfs+0x197/0x360 [ 723.433405][T23527] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 723.433461][T23527] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 723.433490][T23527] ? alloc_netdev_mqs+0xa8/0x1210 [ 723.433520][T23527] ? __raw_spin_lock_init+0x45/0x100 [ 723.433551][T23527] alloc_netdev_mqs+0x274/0x1210 [ 723.433576][T23527] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 723.433610][T23527] rtnl_create_link+0x31f/0xd70 [ 723.433651][T23527] rtnl_newlink_create+0x277/0xb70 [ 723.433675][T23527] ? __pfx___nla_validate_parse+0x10/0x10 [ 723.433705][T23527] ? __mutex_lock+0x606/0x1550 [ 723.433738][T23527] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 723.433766][T23527] ? __pfx___mutex_lock+0x10/0x10 [ 723.433809][T23527] ? ns_capable+0x89/0xe0 [ 723.433862][T23527] rtnl_newlink+0x166a/0x1bb0 [ 723.433902][T23527] ? __pfx_rtnl_newlink+0x10/0x10 [ 723.433938][T23527] ? __lock_acquire+0x6b5/0x2cf0 [ 723.433973][T23527] ? __lock_acquire+0x6b5/0x2cf0 [ 723.434016][T23527] ? unwind_next_frame+0xa6/0x2550 [ 723.434048][T23527] ? unwind_next_frame+0xa6/0x2550 [ 723.434075][T23527] ? is_bpf_text_address+0x26/0x2b0 [ 723.434120][T23527] ? is_bpf_text_address+0x26/0x2b0 [ 723.434156][T23527] ? __lock_acquire+0x6b5/0x2cf0 [ 723.434191][T23527] ? kernel_text_address+0xa5/0xe0 [ 723.434220][T23527] ? __kernel_text_address+0xd/0x30 [ 723.434245][T23527] ? unwind_get_return_address+0x4d/0x90 [ 723.434267][T23527] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 723.434296][T23527] ? arch_stack_walk+0xfb/0x150 [ 723.434332][T23527] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 723.434383][T23527] ? __pfx_rtnl_newlink+0x10/0x10 [ 723.434404][T23527] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 723.434434][T23527] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 723.434458][T23527] ? netlink_sendmsg+0x5d4/0xb40 [ 723.434483][T23527] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 723.434514][T23527] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 723.434547][T23527] ? __lock_acquire+0x6b5/0x2cf0 [ 723.434594][T23527] netlink_rcv_skb+0x232/0x4b0 [ 723.434618][T23527] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 723.434653][T23527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 723.434691][T23527] ? netlink_deliver_tap+0x2e/0x1b0 [ 723.434713][T23527] ? netlink_deliver_tap+0x2e/0x1b0 [ 723.434742][T23527] netlink_unicast+0x75c/0x8e0 [ 723.434786][T23527] netlink_sendmsg+0x813/0xb40 [ 723.434821][T23527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.434848][T23527] ? aa_sock_msg_perm+0xf1/0x1b0 [ 723.434873][T23527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.434903][T23527] ____sys_sendmsg+0x972/0x9f0 [ 723.434936][T23527] ? __might_fault+0xaf/0x130 [ 723.434967][T23527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.435003][T23527] ? import_iovec+0x73/0xa0 [ 723.435032][T23527] ___sys_sendmsg+0x2a5/0x360 [ 723.435055][T23527] ? __lock_acquire+0x6b5/0x2cf0 [ 723.435091][T23527] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.435158][T23527] ? __fget_files+0x2a/0x420 [ 723.435177][T23527] ? __fget_files+0x3a0/0x420 [ 723.435212][T23527] __x64_sys_sendmsg+0x1bd/0x2a0 [ 723.435240][T23527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.435275][T23527] ? __pfx_ksys_write+0x10/0x10 [ 723.435311][T23527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.435336][T23527] do_syscall_64+0x15f/0xf80 [ 723.435363][T23527] ? trace_irq_disable+0x3b/0x140 [ 723.435390][T23527] ? clear_bhb_loop+0x40/0x90 [ 723.435418][T23527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.435439][T23527] RIP: 0033:0x7fae2559cdd9 [ 723.435460][T23527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.435478][T23527] RSP: 002b:00007fae26461028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.435502][T23527] RAX: ffffffffffffffda RBX: 00007fae25816090 RCX: 00007fae2559cdd9 [ 723.435517][T23527] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 723.435531][T23527] RBP: 00007fae26461090 R08: 0000000000000000 R09: 0000000000000000 [ 723.435544][T23527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.435557][T23527] R13: 00007fae25816128 R14: 00007fae25816090 R15: 00007fff25cf7758 [ 723.435594][T23527] [ 724.020302][T23527] bond4: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 724.069665][T23527] bond4: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 724.118390][T23527] bond4: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 725.044440][T23560] FAULT_INJECTION: forcing a failure. [ 725.044440][T23560] name failslab, interval 1, probability 0, space 0, times 0 [ 725.063243][T23560] CPU: 1 UID: 0 PID: 23560 Comm: syz.2.5315 Not tainted syzkaller #0 PREEMPT(full) [ 725.063274][T23560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 725.063287][T23560] Call Trace: [ 725.063295][T23560] [ 725.063305][T23560] dump_stack_lvl+0xe8/0x150 [ 725.063344][T23560] should_fail_ex+0x412/0x560 [ 725.063381][T23560] should_failslab+0xa8/0x100 [ 725.063411][T23560] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 725.063439][T23560] ? trace_kmalloc+0x2a/0xf0 [ 725.063460][T23560] ? page_pool_create_percpu+0x76/0xb80 [ 725.063495][T23560] page_pool_create_percpu+0x76/0xb80 [ 725.063529][T23560] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 725.063561][T23560] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 725.063583][T23560] ? arch_stack_walk+0xfb/0x150 [ 725.063622][T23560] ? __pfx_stack_trace_save+0x10/0x10 [ 725.063652][T23560] ? stack_depot_save_flags+0x33/0x810 [ 725.063683][T23560] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 725.063704][T23560] ? bpf_test_init+0x9f/0x150 [ 725.063722][T23560] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 725.063742][T23560] ? bpf_prog_test_run+0x2c7/0x340 [ 725.063768][T23560] ? __sys_bpf+0x643/0x950 [ 725.063792][T23560] ? __x64_sys_bpf+0x7c/0x90 [ 725.063851][T23560] ? __might_fault+0xaf/0x130 [ 725.063885][T23560] ? __might_fault+0xaf/0x130 [ 725.063914][T23560] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 725.063948][T23560] ? _copy_from_user+0x94/0xb0 [ 725.063975][T23560] ? bpf_test_init+0x113/0x150 [ 725.063993][T23560] ? xdp_convert_md_to_buff+0x5b/0x330 [ 725.064018][T23560] bpf_prog_test_run_xdp+0x81c/0x1160 [ 725.064058][T23560] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 725.064085][T23560] ? __fget_files+0x2a/0x420 [ 725.064112][T23560] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 725.064135][T23560] bpf_prog_test_run+0x2c7/0x340 [ 725.064168][T23560] __sys_bpf+0x643/0x950 [ 725.064198][T23560] ? __pfx___sys_bpf+0x10/0x10 [ 725.064242][T23560] ? ksys_write+0x242/0x270 [ 725.064270][T23560] ? __pfx_ksys_write+0x10/0x10 [ 725.064301][T23560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.064325][T23560] __x64_sys_bpf+0x7c/0x90 [ 725.064351][T23560] do_syscall_64+0x15f/0xf80 [ 725.064379][T23560] ? trace_irq_disable+0x3b/0x140 [ 725.064406][T23560] ? clear_bhb_loop+0x40/0x90 [ 725.064432][T23560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.064453][T23560] RIP: 0033:0x7f1c7619cdd9 [ 725.064474][T23560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.064493][T23560] RSP: 002b:00007f1c770d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 725.064516][T23560] RAX: ffffffffffffffda RBX: 00007f1c76415fa0 RCX: 00007f1c7619cdd9 [ 725.064531][T23560] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 725.064546][T23560] RBP: 00007f1c770d3090 R08: 0000000000000000 R09: 0000000000000000 [ 725.064559][T23560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.064571][T23560] R13: 00007f1c76416038 R14: 00007f1c76415fa0 R15: 00007ffe582a3338 [ 725.064604][T23560] [ 725.516432][T23562] tipc: Enabled bearer , priority 0 [ 725.627078][T23562] syzkaller0: entered promiscuous mode [ 725.632814][T23562] syzkaller0: entered allmulticast mode [ 725.639009][T23562] tipc: Resetting bearer [ 725.645602][T23564] syzkaller0: entered promiscuous mode [ 725.653008][T23564] syzkaller0: entered allmulticast mode [ 725.682150][T23561] tipc: Resetting bearer [ 725.770250][T23580] [ 725.772626][T23580] ====================================================== [ 725.779655][T23580] WARNING: possible circular locking dependency detected [ 725.786693][T23580] syzkaller #0 Not tainted [ 725.791107][T23580] ------------------------------------------------------ [ 725.798138][T23580] syz.2.5321/23580 is trying to acquire lock: [ 725.804199][T23580] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 725.813336][T23580] [ 725.813336][T23580] but task is already holding lock: [ 725.820698][T23580] ffff88805d4ef970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 725.829917][T23580] [ 725.829917][T23580] which lock already depends on the new lock. [ 725.829917][T23580] [ 725.840315][T23580] [ 725.840315][T23580] the existing dependency chain (in reverse order) is: [ 725.849329][T23580] [ 725.849329][T23580] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 725.857359][T23580] _raw_spin_lock_bh+0x36/0x50 [ 725.862747][T23580] nr_rt_ioctl+0x215/0xf90 [ 725.867683][T23580] sock_do_ioctl+0x101/0x320 [ 725.872887][T23580] sock_ioctl+0x5c6/0x7f0 [ 725.877737][T23580] __se_sys_ioctl+0xfc/0x170 [ 725.882859][T23580] do_syscall_64+0x15f/0xf80 [ 725.887983][T23580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.894396][T23580] [ 725.894396][T23580] -> #1 (nr_node_list_lock){+.-.}-{3:3}: [ 725.902227][T23580] _raw_spin_lock_bh+0x36/0x50 [ 725.907534][T23580] nr_rt_device_down+0xbe/0x860 [ 725.912901][T23580] nr_device_event+0x137/0x150 [ 725.918196][T23580] notifier_call_chain+0x1ad/0x3d0 [ 725.923824][T23580] __dev_notify_flags+0x16d/0x310 [ 725.929378][T23580] netif_change_flags+0xe8/0x1a0 [ 725.934836][T23580] dev_change_flags+0x130/0x270 [ 725.940207][T23580] dev_ioctl+0x7b4/0x1150 [ 725.945087][T23580] sock_do_ioctl+0x23e/0x320 [ 725.950207][T23580] sock_ioctl+0x5c6/0x7f0 [ 725.955072][T23580] __se_sys_ioctl+0xfc/0x170 [ 725.960191][T23580] do_syscall_64+0x15f/0xf80 [ 725.965313][T23580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.971732][T23580] [ 725.971732][T23580] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 725.979633][T23580] __lock_acquire+0x15a5/0x2cf0 [ 725.985015][T23580] lock_acquire+0x106/0x350 [ 725.990162][T23580] _raw_spin_lock_bh+0x36/0x50 [ 725.995474][T23580] nr_rt_ioctl+0x40c/0xf90 [ 726.000416][T23580] sock_do_ioctl+0x101/0x320 [ 726.005554][T23580] sock_ioctl+0x5c6/0x7f0 [ 726.010410][T23580] __se_sys_ioctl+0xfc/0x170 [ 726.015525][T23580] do_syscall_64+0x15f/0xf80 [ 726.020642][T23580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.027078][T23580] [ 726.027078][T23580] other info that might help us debug this: [ 726.027078][T23580] [ 726.037307][T23580] Chain exists of: [ 726.037307][T23580] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 726.037307][T23580] [ 726.051130][T23580] Possible unsafe locking scenario: [ 726.051130][T23580] [ 726.058680][T23580] CPU0 CPU1 [ 726.064066][T23580] ---- ---- [ 726.069447][T23580] lock(&nr_node->node_lock); [ 726.074216][T23580] lock(nr_node_list_lock); [ 726.081339][T23580] lock(&nr_node->node_lock); [ 726.088627][T23580] lock(nr_neigh_list_lock); [ 726.093319][T23580] [ 726.093319][T23580] *** DEADLOCK *** [ 726.093319][T23580] [ 726.101493][T23580] 2 locks held by syz.2.5321/23580: [ 726.106695][T23580] #0: ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 726.116277][T23580] #1: ffff88805d4ef970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 726.126305][T23580] [ 726.126305][T23580] stack backtrace: [ 726.132200][T23580] CPU: 0 UID: 0 PID: 23580 Comm: syz.2.5321 Not tainted syzkaller #0 PREEMPT(full) [ 726.132219][T23580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.132228][T23580] Call Trace: [ 726.132233][T23580] [ 726.132240][T23580] dump_stack_lvl+0xe8/0x150 [ 726.132264][T23580] print_circular_bug+0x2e1/0x300 [ 726.132280][T23580] check_noncircular+0x12e/0x150 [ 726.132296][T23580] __lock_acquire+0x15a5/0x2cf0 [ 726.132315][T23580] ? irqentry_exit+0x218/0x730 [ 726.132333][T23580] ? lockdep_hardirqs_on+0x7a/0x110 [ 726.132349][T23580] ? irqentry_exit+0x218/0x730 [ 726.132365][T23580] ? trace_irq_disable+0x3b/0x140 [ 726.132382][T23580] ? nr_rt_ioctl+0x40c/0xf90 [ 726.132394][T23580] lock_acquire+0x106/0x350 [ 726.132411][T23580] ? nr_rt_ioctl+0x40c/0xf90 [ 726.132423][T23580] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 726.132438][T23580] ? lock_acquire+0x221/0x350 [ 726.132456][T23580] ? nr_rt_ioctl+0x40c/0xf90 [ 726.132467][T23580] _raw_spin_lock_bh+0x36/0x50 [ 726.132483][T23580] ? nr_rt_ioctl+0x40c/0xf90 [ 726.132493][T23580] nr_rt_ioctl+0x40c/0xf90 [ 726.132507][T23580] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 726.132521][T23580] ? apparmor_capable+0x126/0x170 [ 726.132539][T23580] ? capable+0x88/0xe0 [ 726.132556][T23580] ? nr_ioctl+0x1b1/0x3b0 [ 726.132573][T23580] sock_do_ioctl+0x101/0x320 [ 726.132589][T23580] ? __pfx_sock_do_ioctl+0x10/0x10 [ 726.132603][T23580] ? do_futex+0x333/0x420 [ 726.132619][T23580] sock_ioctl+0x5c6/0x7f0 [ 726.132638][T23580] ? __pfx_sock_ioctl+0x10/0x10 [ 726.132662][T23580] ? __fget_files+0x2a/0x420 [ 726.132683][T23580] ? __fget_files+0x3a0/0x420 [ 726.132703][T23580] ? __fget_files+0x2a/0x420 [ 726.132724][T23580] ? bpf_lsm_file_ioctl+0x9/0x20 [ 726.132752][T23580] ? __pfx_sock_ioctl+0x10/0x10 [ 726.132768][T23580] __se_sys_ioctl+0xfc/0x170 [ 726.132784][T23580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.132797][T23580] do_syscall_64+0x15f/0xf80 [ 726.132821][T23580] ? trace_irq_disable+0x3b/0x140 [ 726.132837][T23580] ? clear_bhb_loop+0x40/0x90 [ 726.132850][T23580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.132862][T23580] RIP: 0033:0x7f1c7619cdd9 [ 726.132876][T23580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.132888][T23580] RSP: 002b:00007f1c770b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.132904][T23580] RAX: ffffffffffffffda RBX: 00007f1c76416090 RCX: 00007f1c7619cdd9 [ 726.132914][T23580] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 726.132922][T23580] RBP: 00007f1c76232d69 R08: 0000000000000000 R09: 0000000000000000 [ 726.132930][T23580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.132938][T23580] R13: 00007f1c76416128 R14: 00007f1c76416090 R15: 00007ffe582a3338 [ 726.132952][T23580] [ 728.795636][T23561] tipc: Disabling bearer [ 728.806690][T23574] __nla_validate_parse: 1 callbacks suppressed [ 728.806710][T23574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5320'. [ 728.822374][T23574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5320'. [ 731.983709][T21819] bridge_slave_1: left allmulticast mode [ 731.989471][T21819] bridge_slave_1: left promiscuous mode [ 731.995268][T21819] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.003497][T21819] bridge_slave_0: left promiscuous mode [ 732.009179][T21819] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.213855][T21819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.223818][T21819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.233104][T21819] bond0 (unregistering): Released all slaves [ 732.240887][T21819] bond1 (unregistering): Released all slaves [ 732.250408][T21819] bond2 (unregistering): Released all slaves [ 732.260335][T21819] bond3 (unregistering): Released all slaves [ 732.269646][T21819] bond4 (unregistering): Released all slaves [ 732.279892][T21819] bond5 (unregistering): Released all slaves [ 732.292815][T21819] bond6 (unregistering): Released all slaves [ 732.379590][T21819] tipc: Left network mode [ 732.544833][T21819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.566713][T21819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.647345][T21819] team0 (unregistering): Port device team_slave_1 removed [ 732.658711][T21819] team0 (unregistering): Port device team_slave_0 removed [ 732.905138][T21819] IPVS: stop unused estimator thread 0...