last executing test programs: 3.572351595s ago: executing program 0 (id=882): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280), 0x1) 3.568047669s ago: executing program 0 (id=885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x10, 0x7800, 0x8, 0x9, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x10, 0x7800, 0x8, 0x9, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote}}}}) writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}, {&(0x7f0000000080)='C', 0x1}, {&(0x7f00000000c0)="d40d", 0x2}], 0x3) 3.548071805s ago: executing program 0 (id=888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44c90}, 0x48084) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xae46}, &(0x7f0000000040)=0xc) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) 3.311586379s ago: executing program 0 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x615, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x259fdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x18, r1, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x4044844) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 3.053134202s ago: executing program 1 (id=895): getpeername$llc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5f}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.052735024s ago: executing program 2 (id=896): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000dcdf25180000000c0006000100000001000000100030800c00019c0800010000000000"], 0x30}}, 0x4040084) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r6) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xdf}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x28}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 2.899901899s ago: executing program 1 (id=897): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @ethernet={0x306, @random="3435638d689a"}, @rc={0x1f, @any, 0xe0}, @ethernet={0x1, @local}, 0x9, 0x0, 0x0, 0x0, 0x4b9, &(0x7f0000000000)='bond0\x00', 0x0, 0x4, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000016c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001f00)={'ip6tnl0\x00', 0x0, 0x2f, 0xe4, 0x7, 0x4, 0x30, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, 0x10, 0x8000, 0x473c, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002040)={'syztnl2\x00', &(0x7f0000001fc0)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x80, {{0x12, 0x4, 0x2, 0x10, 0x48, 0x67, 0x0, 0x1, 0x6, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0x1f, 0xc5, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x745d}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x6, 0xab, 0x40, @empty, @empty, 0x1, 0x7, 0x4, 0x6}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000003000)=[{{&(0x7f0000002c40)=@tipc=@name, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002cc0)=""/193, 0xc1}, {&(0x7f0000002dc0)=""/214, 0xd6}], 0x2, &(0x7f0000002f00)=""/212, 0xd4}, 0x8}], 0x1, 0x101c0, &(0x7f0000003040)) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001640)=[{&(0x7f00000002c0)="636b782f4c4e9dbca66a818de36180971c888f624c6b1b393212d60c6b2e225c5ff865f7c6c101d7e846aae22312d7844e3e7bac4064144c103ef8da25cd35da5c98d24c462b65a4af7e53cd78ddc33a6fdb2e59d29f28fe46d3167be24e97a6cd6a29fe79c4d1cb932d551970872e76c696121feedf0587c4638b4103f6b3e5f21fca2fbf83bc", 0x87}, {&(0x7f0000000380)="80b819906f08f162f3e7ffc9fe6293664b7f95a001786e9827b5b328500c52561109dd34601c13ae75ab681ff4a66bac84568a1c0e709a935292034e4791823b9802225b2eadd03321402f751eae9a1f4fb5f9b37caa7bb0bce2236f92456b7ed8673b58336cc95ec6e0b4f332a7b63312dd71eb56e9935c4f01b2afed26cc6e1d29fd3007810ffd5fb0e4da60789a747e94f1e7e1f10d38a8b6765085dd2bbee55d99781655155634ed20080a7d9785a72d6c7d8d", 0xb5}, {&(0x7f0000000180)="1f5b097ab06047d87a9997e05c7cdac1418d8909c5dcdd1b4bed9ec8722f9c044e0079a3315d078e82fe5d43f10f4faaaa2e20a8", 0x34}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="8aeac778eed125500f3e467a22a96fc7a3294ed2b3c48cd5ef36fb162d6f5cc9495a94b5a72842761a8cc0c6ad11421bf0b91e26f90af18f7aca7ccb32f72ba1ab17f9f1c034db1467ac33ee34e33ace46dc0562ec05c7", 0x57}, {&(0x7f00000001c0)="12344c3c49743a74c16fc56dfd70", 0xe}, {&(0x7f00000014c0)="e8317b1cad6596e53b36f19e1cfb48522dde16af55c2711cce4f81baac3a173bfcd1a5aafb485663c20922f5862cb97ee7b2d25d844e5fd7aa200c4f0ba7609e2367d037ecf1527524f7e7f4c567acef9e5c9f10df4468e9b4435abfa459a16178484889649b627607bf50", 0x6b}, {&(0x7f0000001540)="d7e44081763f6ef28583dc11498750df30817e99425858f3d74a8887bf38ded8d80cce81d72b88a9fe80d95f312e9b7b537e5bc2da3511a7973dc04e8afb440cbcf6543988ff4de060d63de2d15281328ac0048e01bc236784685d0bb334fab42984dad5f0d129a9b5ed819ad0a5723885a63d77f227b9b760d3890d8815a962c85aed3058b18ec8d4e570f9ec7637c8bdbbbb7f9abb719a18450a676660b5bd02bfaeaed67e9ec65a26f4c17499093028c4a5fb8dcef71bd3680d1086b0111c34c8dd8e8b51e329", 0xc8}], 0x8, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x95}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@rr={0x7, 0xb, 0xab, [@multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x14, 0x2, [{0x7, 0xe, "e88182ef3ac8b8a124502462"}]}, @timestamp_addr={0x44, 0x3c, 0x55, 0x1, 0x3, [{@rand_addr=0x64010101, 0x4}, {@multicast2, 0xe}, {@multicast2, 0x5}, {@broadcast, 0xfffffffa}, {@remote, 0x472}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3ff}, {@broadcast, 0xba2a}]}, @lsrr={0x83, 0x1b, 0x76, [@broadcast, @broadcast, @remote, @multicast1, @broadcast, @multicast2]}]}}}], 0x120}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001840)="e8a8427c979f2055b717a7993485c2656dc3d4e82adb6405cc2ecded33aadd7b417dc86c", 0x24}, {&(0x7f0000001880)="6f57e4811ffeb20313d4adf3f69c272f790e14c42841eb9a17be4f22fcc1c95998bf2f4205816341a36e3af699f98d65ab630e8dacfb72fc86a35234a6db9dfe466588f578ac86779ece6a5f96aaabbc83ba513d5ed8e5463bd9e07ddd5a3aa20b2d27017cc3682e545cadafb3515a33407c22201cc4fad201bc30b07dfc1f6e7442b0ecb08918158c0fceb655e6da8ce0df5133aac7e235531ceeed022fa0a1bd10f0e9530550d8386bc70fc350e9baecd69fffb2a117890a4b02c511f0760ed494dbbdd30277210d7f78131241466fec8d76a52e57195c140931524b90a463f149e13f274c5776e6e0dffd7c0497ed00b6", 0xf2}, {&(0x7f0000001980)="6a8706f5ef2ec862e9e7ffcb89348cd9a167a491a4c6589e5d91199b2445661befa3253c987beb6be9c4e0e6dae29ed2b15695fce0183d52557357226ca5a03bf2f79a096129f57633b5ffffc3a919f5125b27ba886300e27d5a3bc4a18b7cb7ed468fa8c792105a2478a2d856235e4de488f7636fa1be0b68ab1eccec46a39d79bcc85616a96bf4a5", 0x89}], 0x3, &(0x7f0000001a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x728b}}], 0x18}}, {{&(0x7f0000001ac0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001b00)="eea85e44c8a4dad328a37da9f27765fc83915cfa2df307006c470c7242060562d258aa79fb731a96612eae927366499c4d7ce12327da002478bfddbedebdd76bf4e3c8bf5194e889c3186989b151de", 0x4f}], 0x1, &(0x7f0000001bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x30}}, {{&(0x7f0000001c00)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001c40)="0e11d735307385a0211067f46b51dc8859d932223159bd34758465b3a4f9048a7a7da42294d5f276c80e39133ed5c1b45c07cd3612205297bacc2e90974c9fefd7693851d0c0d270c993a922ab7a6af0596455ba89ac8153f2b1ed1b4ba0397fa0b5b2929e7fd4c243defc2f4c2400bb6037900d4265820a6dac8eec0fab07a5f2000b82d96bcecc23549a23fd185a83cb6c981d5e0c5d782bdd118c4d81448b037ebb5005fdb84cfda48dfe0054c429814fb5b0209966a683832883ef1da44bfd2f4b46de2ace00e7a8f989fd06f939b3e9cedacd", 0xd5}, {&(0x7f0000001d40)="be9d289e9eaaaaf4a4b1d676c547092b6e61cebc2f9cd2fff55622c3e60a9082ecbda9230887fc4ba0ed890177cc5d279e3a6bbea97a423de38e8aeb4771baf48dae870d23c36a389c62", 0x4a}, {&(0x7f0000001dc0)="c1fd2026be65a4daf1507b705b5ca29f996cdf777e9d8d9da95cc7a94c359599fc0751634401bb6a38b444817b2f90f02d52ec0ceed90f3e9b1e8f2df2df412573706139cc938bedfcf6ce7b80cdf0e5f4f32be4b0839d6b3e1c9ac4c2618683761a820a3155a7e122072e607b63", 0x6e}, {&(0x7f0000001e40)="c50a91c5e016dbea5eea2c92ffa87783840050820070d9320a3bee731f7a5c6da8d618eaeb309b7a108c7f97f820a5c55baf26e1e6d918988900054c61db78ad07bd12152d655d0932986671b1308c894ddb0b0d8cd1", 0x56}], 0x4, &(0x7f0000002080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @private=0xa010101}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x94, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x3a}]}, @noop, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x7, 0xc, "9dec6af822e2b1cdb5cb"}, {0x1, 0x5, "6520d9"}]}, @timestamp={0x44, 0x24, 0x9c, 0x0, 0x9, [0x6, 0x4, 0xb, 0x7, 0x7fffffff, 0x9, 0xfffffffe, 0xc]}, @timestamp_prespec={0x44, 0x14, 0x4d, 0x3, 0x9, [{@rand_addr=0x64010100, 0xffff8000}, {@private=0xa010100, 0x67}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x120}}, {{&(0x7f00000021c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002200)="b3ed5c149d38b284767136fa33259628b2a0a9dbfbb15baf188c4e9ef7641c33910b510cf1f1c31415dca2b89103a70693c0ea51fbba8e730c5c7d5eebed04254c1f83d421114e055fc46ad3e40ede4caa5fe425b2008aea19a873d3cd018df5dae93c1c3d98cf228e21316cc8b73c6f5d3d5c5c1ca2c6942589cfa5318870915ba479b34e962dcef664be089a5663b7be6e7071d4a3948c608edd11163a9097341e9c4aa06e36c29096e601f958290eff21363553c4ef56e81cca75e60097d47a45e802c741486a5cd811431b4bbe0ca995869f7d105c1ec1aace428278e9a443365b0ad633ca7ab2326a", 0xeb}, {&(0x7f0000002300)="272e322f92214660bcab42", 0xb}, {&(0x7f0000002340)="68bf3d5d55a3ac3fafc27d4d7dd0792c4dcf2057c21ea9973261fa24b06aebd88c2b983dffc075f814bd9d4f302b6be637c597e96a589aef46d97d555af0", 0x3e}, {&(0x7f0000002380)="de8cfcfe6a379c8f99069e86bd076e00f1acfe567c0c38e93b49a4a194352ee3884964737a2940da80f60f09572574e39b3bd33c55154ec977c3", 0x3a}, {&(0x7f00000023c0)="20356b57c7785a5eb6167ab67d18d594009d30fa67e73e16dc9fd2", 0x1b}], 0x5, &(0x7f0000002480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0x1c, [@broadcast]}, @end, @lsrr={0x83, 0x13, 0xd2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @private=0xa010102]}, @timestamp_addr={0x44, 0x44, 0xcb, 0x1, 0x3, [{@loopback, 0x1f6e}, {@rand_addr=0x64010101, 0x311d}, {@multicast1, 0xffffffff}, {@rand_addr=0x64010101, 0xfffffd38}, {@private=0xa010100, 0xfff}, {@remote, 0x4}, {@multicast2, 0x7}, {@multicast2, 0x7ff}]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002540)="27328e4809e9c2f7f5c0c6ae6082f9088f2c176791ffa3052ff93f1dfd5088c2587a7ae1582450a667ea332c92dc5fecb290a9709bbfc016d78e69537ab1fb041c5624f136300f9c57f61cd8ffcecddf8d61073f8c8cd8297cd4b139135d5b3945b0b1d00829897553f2eb8a341fb307c1ebfeb121bddba5151d94e2a48de4c6d2e3f189ac913c5c7201dc7d5189425c535b83a1848782478d02b5a5494b8956edad4ceff07e2b8da6640602dd1547a747507630fd4b0247226616fa9fbb6f4c5604ef3cc5c84ff66a7fa0f4ab02d7e71a683cb18ebb87552a771d142441031a24d1df79941d4fe1410bf101", 0xec}, {&(0x7f0000002640)="55de5b3893d45d7980352fe391921cbbb110197df4cbfd8511c2e78a299a59013f473108c212849cf56210aed2d68eb5289ab07278243c41ed2c6d61ff5b5ba52c6f972a3d5ea5a2201f9338024cea9f7e9549c30b6bbf6f2a01b01b95ebb7b0bb79156ae18f85603a073e2de170e83926797da8e0bde1e6c9be6d0f8fc5105bc570e13f4bd6a7b0477cc1f2dd3633752f13f9d439fbc55e70db44001d2b08005fef12bd7180bc9a9481e6e578b924c59871a124fb64d1629d67c26e", 0xbc}, {&(0x7f0000002700)="a6e80d0327026c0954c08e4395006ac5535e84e7222eacdef74cf7f62c583406a92d8be027955f79c67e05e742345b1d19162e221ca2a5b4171d421784f9413dd2544b70fcc98099f40eb7bb7774ee4cf0597e772bb5a0b6c0d7fcd96ce74271024ecba94bb9e33289f39b7c02f5cd62d71edc8a8901b9d1c712191f0be1d7cf7b51b34f553adfe8b3d8f72e1fb0416b51fe9ec1231e5a06c98ee7656749146873197f78b9a2cfd1b41332b260d052f4a3d8ee085e74cb527d56fbceec8d6469f1", 0xc1}], 0x3, &(0x7f0000002900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x38}}, {{&(0x7f0000002940)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002980)="eb88840c6a8cd8d1e518cc7c117d69d4279cd53880e26593bd9e796c72b2c4a12927fba41ff7bccd44ca94bf019760ec48ac279a73bdbd558a36f338aaf4a82800a3fe", 0x43}, {&(0x7f0000002a00)="d40ba2b2be5853bae511813328f3723c70adf7", 0x13}], 0x2}}], 0x7, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.854749687s ago: executing program 1 (id=898): unshare(0x6020400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000001000), 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e48000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'team_slave_1\x00', {0x4}, 0xef}) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) 1.611692323s ago: executing program 4 (id=900): ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'veth0\x00', @ifru_ivalue=0x2}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r1, 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000100)={0x6, 'batadv_slave_0\x00', {0x6}, 0x8c2}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="94ad208a541068a3293b40f57029aa34844a4f6448816b5870246a3fec3f49b6d9a00fa161016d7258dbcb99f7337fa6664bf6b8f5e0144117301a3d488cbafe55656a6d769f17", 0x47}, {&(0x7f00000001c0)="f5108ade1e90d26876877f121406ac0c61cc927734abdfaec653ce6ac71d624d8eda4542cad8e7ef2f4d81407c76f7f998e520aaab036b242c72bf74bf51414b1bb0e58473977ab9ddce5358f7a40637772fce10008345ff4ed8cc82df9e93e1ced70464063457107b8e6b0456971b079aa76f0d9917235d8cddf41ebb43d7c99568588c0a2c7ea34ab87b7aca98b46b71247e9fb6e6f67ca6a591f9573b4b4264e6bb4b134d053bd3bfab4cc653deb2841a935d72cf33922ddf6570e5b0a71913bf734729", 0xc5}, {&(0x7f00000002c0)="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", 0xfa}, {&(0x7f00000003c0)="960b30b41a91db9be44f91f40bce018db44bf53dda4ea60c004be1fb081d5bb68f662a1996966056fb9bc7ff703f280af329e680e8b2dda56e5159191a0b26832cef5680be", 0x45}, {&(0x7f0000000440)="6278fc758e8be36bf61fbcb44e601c2438dfea9a59f614ee03c71a187d70723355ff059b2a2b72750fb23ac4ce17c06bc964bd58c5f53c1e3d03", 0x3a}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}]}}}, @rthdrdstopts={{0xf8, 0x29, 0x37, {0x5e, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x0, 0xc5, "a918def12e5606c1c9d4cb4a01c8bed9b69ad765f872b8ee2fd7070b8e09b6544b55bfa0016c96a076f280856e3a4b02c41eab2ac785c72838fd1ca9278214d82da22634b7e1812e542e98a57f43ed4677acb14dde69f4980ea8394d1f72aee4fa4c97d82d0b5896adb855193fc16cbd0679a7d442ad0c0dd0ab90ed9ba13effaebabb53750f2efda52b3479308420d674ac787ef6b6be1d36e52ef562e27c8cbbe9d6b5e9b8f1054fef0342b6bb8a6b6ba251a4bd0b0ba27f00395fa7af777017947f7b1e"}]}}}, @rthdrdstopts={{0xc8, 0x29, 0x37, {0x32, 0x15, '\x00', [@pad1, @generic={0x30, 0x41, "888dc5fbec4be44d854269f5bec2e2a07a43fa05481a99e40bb3a37edee8df2c494528bc73dc3666027f68e6f7e65600848771c87103d962876590b4a934160325"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x0, [0x0, 0xfffffffffffffe01]}}, @enc_lim={0x4, 0x1, 0xa}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0xb2, 0x1, [0x645, 0x8]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0xaac5, [0x40, 0x7, 0x40]}}]}}}], 0x210}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@delneigh={0x98, 0x1d, 0x200, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x89, 0x7}, [@NDA_IFINDEX={0x8, 0x8, r3}, @NDA_CACHEINFO={0x14, 0x3, {0x400, 0x1, 0x8, 0x20000000}}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_VLAN={0x6}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3d}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}, @NDA_NH_ID={0x8, 0xd, 0x10}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x24000004) r4 = socket$inet_sctp(0x2, 0xf, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000d00)={&(0x7f0000000980), 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x2ac, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2c}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast2, 0xaf4}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff1733}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xb, @loopback, 0x3}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x730e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3adb}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40}, 0x8805) ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000000d40)="86afae4faff96a0177f0d1bf0a2acd1367977b69d094d04955b5c9b45dc1ccbe08886f8b51cac7158e73b8b4bc700a3875d0511e9a364732f9aae5341a179e7813c96b686f9e8bccc2e28797600de01ec5b54f7b940c9ea17c2230b7fdfc7f949d577d6f084ea9aa982e5db80891fc79f1f20929536f0e9bb47a8494c1f6cd85e9aba0426aafa34275d97f67d067d942883de93d8087f0c821fff214454cf4eb526341") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000e00)={0x0, 'veth0_to_bond\x00', {0x4}, 0x3ff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockname(r2, &(0x7f0000000f40)=@ieee802154, &(0x7f0000000fc0)=0x80) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000001000)="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") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002200)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000021c0)={&(0x7f0000002040)=@mpls_newroute={0x148, 0x18, 0x300, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x14, 0x10, 0x40, 0xfd, 0x0, 0x101, 0x1, 0x1300}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_NEWDST={0x84, 0x13, [{0x122, 0x0, 0x1}, {0xfff}, {0x669}, {0xef631, 0x0, 0x1}, {0x7}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6}, {0x7}, {0x27f0}, {0x2, 0x0, 0x1}, {0xa}, {0xb3c8, 0x0, 0x1}, {0xffffb}, {0x1ff, 0x0, 0x1}, {0x2}, {0xe82c, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9}, {0x1}, {0x7}, {0x4}, {0x2, 0x0, 0x1}, {0x5}, {0x40, 0x0, 0x1}, {0x16f}, {0xff, 0x0, 0x1}, {0x9}, {0x5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x1e, "074117512ee3c40bbde01f331012"}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_NEWDST={0x84, 0x13, [{0x4aa0}, {0x2}, {0x0, 0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x0, 0x1}, {0xa}, {0x12}, {0x19, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x471d}, {0x4}, {0x9}, {0x6}, {0x4}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8}, {0x6, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0x40000, 0x0, 0x1}, {0xe0d6}, {0x4}, {0x8001, 0x0, 0x1}, {0x4}, {0x7f, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x10}, {0x2, 0x0, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x448c4) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002240)={0x0, 0x800, 0x1, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000002640)={r9, 0x0, 0x0, [0x8, 0x3, 0xb6, 0xc7, 0x6], [0x4, 0x1, 0x1, 0x7f, 0x7, 0x8000, 0x7, 0x6, 0x101, 0xffffffff, 0x6, 0xcac00000000, 0x6, 0x6, 0x1000, 0x100000000, 0x1ff, 0x0, 0x0, 0xf, 0x3, 0x0, 0xf, 0x3ff, 0x1, 0xa87b, 0x31, 0x401, 0x1ff, 0x5, 0x8, 0x5, 0x4, 0x6eba, 0x80000001, 0x2, 0x1, 0x1, 0x0, 0x3, 0x1, 0x8000000000000000, 0x18d, 0xfff, 0x3, 0x1, 0x5be75282, 0x5, 0x7, 0xe48, 0x2, 0x8, 0x9, 0x5, 0x71f, 0x1, 0x8, 0x8001, 0x7fffffffffffffff, 0x4, 0x2, 0x4, 0x5, 0x0, 0xaf5d, 0x5, 0x7ff, 0xc3b3, 0xc2, 0x8, 0x0, 0x9, 0xcca, 0x2, 0x3ff, 0xbc, 0x73c7c75, 0x33b, 0x9, 0x9, 0x58, 0x5, 0x8, 0x7, 0xde, 0x7, 0x1, 0x8, 0x8, 0x6, 0x9, 0x5, 0xfffffffffffffffd, 0x1, 0x2, 0xb0, 0x9, 0xe6ff, 0x3, 0xff, 0x4, 0x17c0, 0x7, 0x2, 0x2, 0x2d8, 0x8, 0x1000, 0x3, 0x5, 0x400, 0x5, 0x6, 0x1, 0x100, 0x5, 0x4, 0x8000, 0x1, 0x8, 0xff]}) r10 = socket$inet(0x2, 0x4, 0x0) r11 = accept$netrom(0xffffffffffffffff, &(0x7f0000002a80)={{0x3, @bcast}, [@remote, @bcast, @netrom, @netrom, @default, @bcast, @bcast, @rose]}, &(0x7f0000002b00)=0x48) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000002b40)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xee2, 'syz0\x00', @bcast, 0x4, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000002bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)=@getqdisc={0x40, 0x26, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0x5, 0x9}, {0x5, 0xfff2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000002d00)=0x40000000000000) 1.610036052s ago: executing program 2 (id=901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x500) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}, "00016337fe9b1803"}}}}}, 0x0) sendmsg$rds(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, &(0x7f0000000580)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0xbe}, &(0x7f00000000c0)=0x1, &(0x7f0000000200)=0x100000001, 0x10, 0xffffffffffffffff, 0x164a352b, 0xb, 0x2, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x21f}, {&(0x7f0000000240)=""/170, 0xaa}, &(0x7f0000000500)=[{&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)}, {&(0x7f0000000400)=""/239, 0xef}], 0x3, 0x4, 0x21}}], 0xa0, 0x14000000}, 0x20005001) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, &(0x7f0000000680)=""/200, 0xc8, 0x12102, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x500) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}, "00016337fe9b1803"}}}}}, 0x0) (async) sendmsg$rds(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, &(0x7f0000000580)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0xbe}, &(0x7f00000000c0)=0x1, &(0x7f0000000200)=0x100000001, 0x10, 0xffffffffffffffff, 0x164a352b, 0xb, 0x2, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x21f}, {&(0x7f0000000240)=""/170, 0xaa}, &(0x7f0000000500)=[{&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)}, {&(0x7f0000000400)=""/239, 0xef}], 0x3, 0x4, 0x21}}], 0xa0, 0x14000000}, 0x20005001) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) recvfrom$inet(r3, &(0x7f0000000680)=""/200, 0xc8, 0x12102, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) (async) 1.467370288s ago: executing program 1 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572309555d997ebf3bb6ff048d7ce82fe2bf971a950c587890adff5a627579f2cc9a89f7a32f604b00b42c8018ed5ac79bc34b11f20d3a44852a7da8e2f9736c482eff551d61263fbe140d339b25194d8423909f3e1596b3531b38e0ba20ecc6f66281a75d329de9251e3ef2290eec5100f5ffef11e66b50a48c54c309cbb7e0aae8083f874352bbf3d22919933e18b06566b16e5bb649613155b18a90759c4589ed99804f72615e9a0b6be1700"/234], 0x38}}, 0x20004000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x7, 0xfffffeaf, 0x1, 0x4, 0x2, 0x1}}, {0x6, 0x2, [0x2800]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x12d, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r7], 0x0) close(r7) r8 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @null, @remote, @null, @netrom, @bcast, @null, @bcast]}, &(0x7f0000000100)=0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000380)=0x8) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000f00000005002d000000000005002e030600000008000300", @ANYRES32=r11], 0x2c}}, 0x0) close(r8) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @empty}], 0x4c) socket$inet6_tcp(0xa, 0x1, 0x0) 1.360033767s ago: executing program 2 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.24006834s ago: executing program 0 (id=904): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x30, 0x9, 0x1, {0xe, @sctp_ip4_spec={@rand_addr=0x64010101, @loopback, 0x4e20, 0x4e24, 0x3}, {0x0, @local, 0x7ff, 0x6, [0x8000, 0xb4]}, @ether_spec={@multicast, @multicast, 0x2}, {0x0, @random="1befc7720f5f", 0x4, 0x0, [0x10001, 0x9c]}, 0x53faa1a8, 0x1}, 0x9, [0x10000, 0x7, 0x1, 0x1000, 0x4, 0x5, 0x321a43d1, 0xb2d, 0x502]}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000280)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) 1.131324496s ago: executing program 4 (id=905): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=')', 0x51}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000006100008400000007000000ac14140a0000000020"], 0x38, 0x8000}, 0x20000000) 1.129347149s ago: executing program 2 (id=906): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a020000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xf4}}, 0x8000) 1.052270463s ago: executing program 1 (id=907): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) getpeername$llc(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818142f693b561c82745136d5c7a19dbd0001000095007f0000000000"], &(0x7f0000000000)='GPL\x00', 0x7f, 0xd2, &(0x7f0000000200)=""/210, 0x0, 0xe4, '\x00', 0x0, @fallback=0x10, r0}, 0x94) 999.774225ms ago: executing program 0 (id=908): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xff04, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r12, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) (async) recvmmsg(r12, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x280000c5}, 0x20000091) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r11, @ANYRESOCT=r11, @ANYRESDEC=r2, @ANYBLOB="adae47", @ANYBLOB="8d9844f0a53b346622433b9914fec4b133a1a9a9a22efda92dcbbd59fcc70b54b80567d990f905423eb0ad3c36bf7638333a179ca9e94fcbc2c691306466b5c94dd743f6db333e9dbd441c657cea3e32d4c09a5d4a1193f68a098608276f2ebd87c0241359cec2e5fba01172067cd50da9855e09843a9212c7caaa462ddd431865dec4cd09b4f7170d6c4b322172897f21", @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRESDEC=r10, @ANYRES32, @ANYRESHEX=r11], 0x1084}, 0x1, 0x0, 0x0, 0x5}, 0x8004) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r11, @ANYRESOCT=r11, @ANYRESDEC=r2, @ANYBLOB="adae47", @ANYBLOB="8d9844f0a53b346622433b9914fec4b133a1a9a9a22efda92dcbbd59fcc70b54b80567d990f905423eb0ad3c36bf7638333a179ca9e94fcbc2c691306466b5c94dd743f6db333e9dbd441c657cea3e32d4c09a5d4a1193f68a098608276f2ebd87c0241359cec2e5fba01172067cd50da9855e09843a9212c7caaa462ddd431865dec4cd09b4f7170d6c4b322172897f21", @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRESDEC=r10, @ANYRES32, @ANYRESHEX=r11], 0x1084}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 972.6875ms ago: executing program 4 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x1608, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x15d4, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x10}}, @TCA_MATCHALL_ACT={0x174, 0x2, [@m_ctinfo={0x170, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x81}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf418}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfff7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0xf3, 0x6, "eab2c4da0ab335ca093d5df8b15da0ee52be5110bf8cf722ccbdf678a15d4f6ab2b27d0905aa6fb9230bd5aaaf592fb17b2d53a3213f1417425bededd088b3360f15189f5a8eee7fd36c9a795ab31e104fe359c222c789f959d24a660bef37629d3f60a9310045ac6d67f1626288adb18ef5ab1703d5f9d578e0482032ab0b19e5d4271080facbc93cf83ae09b1f0e817856ab43f6d12e142f2f1ec66a1d49b2c2e0a34bea0257caa5bf3021169e26c78d0b02818f28840e7795730aae49778c28f4b967b1370ba34e9434e47cc233695682377827f81d8659065d325fd83ce0c99eaac7bf260d24c9234f0fa5ea5f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffff}}, @TCA_MATCHALL_ACT={0x1434, 0x2, [@m_tunnel_key={0xa0, 0x2, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x31, 0x6, "22b0438e7b94a98b4843c22fcbe18d62533993d1f27b8e5c0dc74c89cf58c559c0049a79ebf7071d2ed0d7fc19"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x126c, 0x1c, 0x0, 0x0, {{0xb}, {0x118c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xb4c3, 0x7f26, 0x8, 0x5, 0x5d3c, 0x9, 0x9, 0x7, 0x77840000, 0x4, 0x7, 0x9, 0x8b0, 0x9, 0x800, 0x6, 0x200, 0x2, 0x2, 0xffff, 0x6cb, 0x8, 0x40, 0x401, 0x7, 0x5, 0x5, 0x10, 0x2, 0x0, 0x6, 0x8, 0x4, 0x0, 0x9, 0x5, 0x80000000, 0x40, 0x9, 0x8, 0x28a, 0x1, 0xc4f4, 0x3, 0x400, 0x9, 0x4, 0x3ff, 0x3c3, 0x3, 0x6, 0x1, 0x45103a68, 0x3, 0x9, 0x2b, 0x10, 0x1, 0x8000, 0x9, 0x0, 0xfffffff8, 0x8, 0x1, 0x8, 0x5, 0xffffffff, 0x1, 0x6, 0x1, 0xafe, 0xe, 0x5, 0xffffecd7, 0x1ff, 0x3, 0x9, 0x5, 0x1ff, 0x0, 0xba, 0x3, 0xb, 0x7, 0x3, 0x6, 0x7ff, 0x8, 0x3ff, 0x401, 0x3ff, 0x0, 0x2, 0xaa, 0x1ff, 0x5, 0x7fff, 0x6, 0xfffff15c, 0x9, 0x0, 0x8000, 0x80000000, 0x84, 0xfffeffff, 0x2, 0x35f, 0x7fff, 0x6, 0x2, 0x80000001, 0x7, 0x5, 0x2, 0x9, 0xcbaa, 0x7, 0x4, 0x2, 0x1000, 0x9, 0x0, 0x7, 0x8, 0x5, 0x2, 0x3, 0x2478, 0x17f549e0, 0xf57, 0x3, 0x7, 0x7, 0x7f, 0x3, 0x253, 0x7f, 0x7, 0x4a10, 0xfffffffa, 0x9, 0x8, 0x1, 0xa, 0x4, 0x0, 0x6, 0x3, 0x5, 0x1, 0x8, 0xfffffffb, 0xfff, 0x8e3, 0x5, 0x4, 0x1, 0xb, 0x6, 0x2, 0x7, 0x1, 0x5, 0x7, 0x401, 0xdf, 0xc, 0xfffffffd, 0x41e, 0x5, 0x218, 0x5, 0x10, 0x81, 0xcaa, 0x1, 0xf8b, 0x9, 0x1, 0xb6d, 0x5, 0x9, 0x0, 0x8, 0x4, 0x5, 0x2, 0x8, 0x81, 0x9, 0xd94, 0x7, 0x4, 0x9, 0x80, 0xb2, 0x5b9, 0xfffffff7, 0x5, 0x401, 0x3ff, 0x1ff, 0x8000, 0x3, 0x2, 0x4868, 0x2, 0xa, 0x6, 0x10, 0xfff, 0x6, 0x80000001, 0x2, 0x5, 0xff, 0x9, 0x3, 0x7ff, 0x5, 0xe, 0x9, 0x8, 0xffff4345, 0x3, 0x6, 0x2, 0xfffffff7, 0x6, 0x4, 0x1000, 0x1, 0x7, 0x1000, 0x6, 0x1, 0x6, 0x4b0, 0x2896fb38, 0xfffffff5, 0x40, 0x0, 0xc4, 0x9, 0x8, 0x9, 0x4, 0x9, 0x3, 0x2279, 0x5, 0x4, 0x2, 0x8f30, 0xb579]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x0, 0x0, 0x3, {0xfb, 0x0, 0x0, 0x0, 0x4, 0x33}, {0x3b, 0x2, 0x1, 0x800, 0x0, 0x8}, 0x8, 0x2, 0x4}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xc1, 0x800, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x2, 0x93, 0x1, 0x8, 0x10, 0xa, 0x86d, 0x3, 0x1d, 0x9aa9, 0x1, 0x10000, 0x0, 0x84, 0x9, 0x5, 0x8, 0x2, 0x4, 0x1, 0x7fffffff, 0xf, 0x1, 0x6, 0x5, 0x4, 0xffffbdb3, 0x401, 0x4, 0x9, 0x1, 0x7fffffff, 0x3, 0x4, 0x5, 0x401, 0x5, 0x4, 0xe382, 0xfef8, 0xd0, 0x800, 0x200, 0x4, 0xfffffff7, 0x7f, 0x1, 0x3, 0xe, 0x9fa4, 0xffff, 0x7ff, 0x5, 0x8, 0xd1, 0x1, 0x7, 0x80000000, 0x2, 0x8a1, 0x0, 0x8000, 0x5, 0x40, 0x3, 0xaa, 0xfa, 0x100, 0x4, 0xaed, 0x401, 0x401, 0x8, 0xffff2f0c, 0x8, 0x6, 0x3, 0x53c, 0x5, 0x3, 0xcce0, 0xc, 0x4, 0x3, 0x4, 0x8, 0x7, 0x189, 0x5, 0x9, 0x4, 0x5, 0x6, 0x6, 0x734, 0xa0d5, 0xc26, 0x5, 0x9, 0x7f, 0x7fff, 0x3, 0x7, 0x10000, 0x9, 0x10, 0x9, 0x7, 0x7fffffff, 0x3ff, 0x7b87, 0x8, 0x10001, 0x4, 0xff, 0x1c000000, 0xc2, 0xa, 0x0, 0x4, 0x785, 0x3, 0x2, 0x8, 0x6, 0x8, 0x7ff, 0x8, 0x6, 0x8, 0x3, 0x2e3, 0x6, 0x5, 0x6, 0x4, 0x0, 0x8, 0x9, 0x4, 0xaa, 0x7, 0x6, 0x7, 0x5, 0x4, 0x800, 0x2, 0x400, 0x7, 0xffffff81, 0xfe5a, 0x9, 0x7fff, 0x9, 0xff, 0x3, 0x5, 0x3, 0x5, 0x4, 0x6, 0x1e4b, 0x5, 0x7fffffff, 0x1, 0x0, 0xc, 0x2, 0x6, 0x8, 0x9, 0x5, 0x40, 0xffffc86c, 0x7ff, 0x200, 0xfffffff4, 0xdf1, 0x0, 0xab, 0xba, 0x179a114b, 0x4, 0x3, 0x9, 0xb, 0x6, 0x401, 0x1, 0x3, 0x0, 0x9f6, 0xfffffffa, 0x8, 0x493, 0x0, 0x9, 0x1, 0x7, 0x5, 0x9, 0x6, 0x0, 0x1, 0x10, 0x2, 0x8, 0x0, 0x3a, 0xe01d, 0xa623, 0x9, 0x81, 0x2, 0x1, 0x0, 0x6, 0x2, 0x8001, 0x5c, 0xd, 0xaf, 0x1, 0x1000, 0xffffc233, 0x4, 0x3, 0x101, 0x4, 0x8c, 0x8001, 0x4, 0x7fffffff, 0x1ff, 0x1, 0x4, 0x7, 0x1, 0x7ff, 0x6, 0xffffff58, 0x3, 0x7, 0xffffffff, 0xe, 0x1, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x5, 0x6, 0x7, {0x0, 0x1, 0xfff5, 0x8001, 0x400, 0x9}, {0x3, 0x1, 0x6, 0x151, 0x72a, 0x4}, 0x3, 0x0, 0x7ff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xb7fec8, 0x102, 0x80000000, {0x9, 0x1, 0x100, 0x2, 0x100, 0x3}, {0x59, 0x0, 0x3a8c, 0x265f, 0x4, 0x1ff}, 0x7c, 0x5f79, 0x1ff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x80000001, 0x4, 0xff, 0x5, 0xc12, 0x2, 0x7, 0x0, 0xa, 0x2, 0x7, 0x5, 0x4b, 0x5, 0x8, 0xe743, 0xfff, 0x1, 0xa, 0x9, 0x3, 0x0, 0x1, 0x75, 0x10000000, 0x5, 0x2, 0x2, 0x8, 0x3ff, 0x1, 0x2, 0x0, 0x7, 0x9, 0x4, 0x1, 0x3, 0x1ce0000, 0x7, 0x1, 0x9, 0xb0f9, 0x8, 0x400, 0x4, 0xffffffda, 0x7, 0xfffffff7, 0x1, 0x9, 0x1000, 0x80, 0x5, 0x800, 0x6, 0x1, 0x21, 0xfffffffe, 0xa, 0x200, 0x6, 0x7, 0x80, 0x3ff, 0x101, 0xfff, 0xaaa7, 0x5, 0x800, 0x3, 0x9, 0xa75e, 0x2, 0x2, 0x9, 0x82, 0x4, 0xf34, 0x9, 0x9, 0x101, 0x100, 0x4, 0x7, 0x4, 0x0, 0xf23, 0x138, 0xe, 0x0, 0x7, 0x5bf2, 0x4, 0xb, 0x0, 0xdd4, 0xa, 0xffff, 0x0, 0x3, 0x10001, 0x1000, 0x0, 0x5, 0x4, 0x5, 0xffff, 0x80000000, 0x2, 0x8, 0x10, 0xea7, 0x2, 0xffffff72, 0xffffffff, 0x78a4, 0x8, 0x8, 0x7, 0x6, 0x8, 0x800, 0xa, 0x8, 0x0, 0x6, 0x4, 0xfffffc00, 0x3, 0xfffffffa, 0x2, 0x3, 0x6d, 0x7, 0xa385, 0x2d17cfc0, 0x1, 0x2, 0xa4b3, 0x7, 0xc, 0x5f, 0x5, 0x3, 0x9, 0x4, 0x69, 0xb, 0xe, 0x6, 0x8, 0x4, 0x8, 0x444, 0xffffffff, 0x0, 0x7, 0x4, 0x1, 0x6, 0xd8, 0x5, 0x69, 0xdde, 0x1, 0x4, 0x80, 0x0, 0x8, 0x2, 0x7, 0x1, 0x9, 0x4e, 0x1, 0x7fffffff, 0x2, 0x9d5, 0x8, 0x80, 0x9, 0xd3aa, 0xb, 0x1, 0x1, 0x3, 0x80000000, 0x2, 0x19, 0x80, 0x1ff, 0x6, 0x6, 0x7, 0x2446c8f7, 0x1, 0x4, 0x0, 0x80000001, 0xe, 0x8, 0x3, 0x8000, 0x7, 0x80000001, 0x5, 0x7fff, 0x4, 0x3, 0x4, 0xbfe, 0x3, 0x300000, 0x5, 0x3, 0x1, 0x7, 0xc, 0x7, 0x800, 0xca4f, 0xffff, 0x6, 0x5, 0x100, 0x1, 0x4, 0x0, 0x3000, 0x6, 0x8, 0x4, 0x0, 0x7fffffff, 0x8, 0x7f, 0x2, 0x5, 0x401, 0x4, 0x6, 0x2, 0x3, 0x3, 0xdd, 0x8, 0x401, 0x8d, 0x5, 0x0, 0x6, 0x3f000000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x2, 0x1ff, 0x4a, 0x8, 0x7, 0x4, 0xfffffff9, 0x7, 0x1, 0x6, 0x9cd3, 0x5533, 0xbb3, 0x58c, 0x9c, 0x4, 0x5, 0x8, 0x5, 0x8, 0x1ff, 0x50000, 0x5, 0x0, 0x1, 0x6591, 0x4, 0x9df, 0x4, 0x7, 0x7, 0xe000, 0xfff, 0x0, 0x401, 0x2, 0x200, 0x4, 0x3, 0x9cf7, 0x3, 0xffff, 0x2, 0x8000, 0x5, 0x3, 0x3, 0x7ff, 0xcef, 0xfffff833, 0x3, 0x0, 0x100, 0x8, 0x2, 0x8, 0x3, 0x8, 0x1, 0xfff, 0xf, 0x4, 0x6, 0x3, 0x4, 0x3, 0x4, 0x8, 0x8, 0x7, 0x7ff, 0x10000, 0x10001, 0x460f, 0x2, 0xffffffff, 0x5, 0x10000, 0x6, 0x9e, 0x2, 0x9, 0x6, 0xffffffff, 0x6, 0xb, 0x0, 0x7fffffff, 0x2, 0x8, 0xc1, 0x7, 0x7, 0x4, 0xa, 0xa17f, 0x8, 0x6, 0x67a, 0x0, 0x5, 0x3, 0xaf2, 0xe, 0x10, 0x8, 0x8, 0x3, 0x0, 0x4, 0x401, 0x4, 0x8, 0xcd86, 0x8, 0x9, 0x4, 0x6, 0x0, 0x3, 0x9, 0x7, 0xff, 0x8, 0x80000000, 0xb22d, 0x10000, 0x7, 0x8, 0xbc70, 0x5, 0x2, 0xb6bf, 0x10000, 0x8, 0x508f6023, 0x3, 0x7fffffff, 0x5, 0x6, 0x1, 0x0, 0x0, 0x4, 0x6, 0xffffffff, 0xe, 0x9, 0xd, 0x5, 0x1, 0x4374, 0x7, 0x800, 0x8, 0x0, 0x32, 0x3, 0x3, 0x3, 0x3, 0x362c, 0xb, 0x8c, 0xfff, 0x4, 0x7, 0x3, 0x7, 0xa9, 0x9, 0x81, 0x1, 0x8, 0x9, 0x4, 0x8, 0x4, 0xfffffffb, 0x3, 0x2, 0x2, 0x1, 0x4, 0xfffffff1, 0x5, 0x5, 0x8, 0x6, 0x10, 0x10, 0x6, 0x9, 0xfffffffb, 0x9, 0x6, 0x2, 0x1, 0x1, 0xe, 0x2f6b, 0x4, 0x5, 0x200, 0x64, 0x6, 0xf2d, 0x6, 0x4, 0x76, 0x9, 0x3, 0x5b42bc44, 0x101, 0x27, 0x7, 0x1, 0x0, 0x4, 0x9, 0x400, 0xd6db, 0x2, 0x319c, 0x4, 0x80, 0x5, 0x3ff, 0x4, 0x800, 0x3, 0x9, 0xad57, 0x0, 0x5, 0x5, 0x4, 0x169e, 0x0, 0x23, 0x7f, 0x63, 0x5d938858, 0x7, 0x9, 0x0, 0x507, 0x800, 0x5, 0x3, 0x7, 0xc, 0x3, 0x2e]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0xfaa8, 0x6, 0xaa, {0x7f, 0x2, 0x5, 0x0, 0x9, 0xb3}, {0x1, 0x2, 0x6, 0x409, 0x8, 0x3}, 0x9, 0x18, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x10001, 0xfffffffe, 0xe, {0x7, 0x0, 0x8, 0x6, 0x9bd5, 0x9}, {0x5, 0x1, 0x0, 0x2, 0x1318, 0x1}, 0x99e, 0x0, 0xa3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]]}, {0xb5, 0x6, "6a568dba240dc359a6edd612ca3f79ab34c8ef0b872b377c120e8fc9ca0fdc8ab47a517720124aa902f7cac3fbb4d28cc3d54c1a5ef0ff44db85b62aef4972eb6fc40fb50263c782df6eacf743bfa4fb9af5d4757a33345e4a4419952d655b58f189a4c5dc327e102edf7492c7d032ee9732c8696903d82e42e840c36c862e78d158a27c8764bf234ccb8d32cc5ed35c930c6538b55755cf7613e248910603a1ff75252628bcfe19c7e71bd4b4ff4baa8f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x124, 0x1b, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xde, 0x6, "f3ad0332c99b6eb3797a9cd32b179c00c2685812cd3aaeb579e9ab1800f38c1fc9607632f4267afd0f3b9376fb2ddfc1cced052d9d89de19a7be683571c388eb4dd3c68f75c0fe3ec0cb93c2c4af82c70395312c8e5534c0091759e98fc598a2749138a54e6165969e9815fb76e20d4731c429a08e0e542b49162382eff5ee169ac472db69368c9edd7c2901432d35c9dd166e2d80fc6c97ac52287e21262906646bed63184c0d7e5f83f3b6d4be3e8ae42735999d29b77beebc23e6e036ca1fc6514dd62fb9549ca768a29e2d5d0278e2a9939697aee9032a76"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1608}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x2}, {}, {0xa, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) 853.791133ms ago: executing program 2 (id=910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0xd) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x480, @remote}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7fff}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e20, @empty}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e20, @empty}}) 671.282602ms ago: executing program 2 (id=912): syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10, 0x100}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x20) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000600), &(0x7f0000001380)=@udp=r2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r4, 0x11, 0x1, 0x0, &(0x7f0000000080)) sendmmsg$unix(r2, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x8589}, {r1, 0x488}], 0x2, &(0x7f0000000080)={r5, r6+60000000}, &(0x7f00000000c0)={[0xc]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 655.995398ms ago: executing program 3 (id=913): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f58a0ab2bb467f59fcfd946a7ea9f6b996ed8fa818d63c884b4f", 0x2b}, {&(0x7f0000000340)="d2f9de1e8f1e9c31f5d02bcb7fb2b6acfc", 0x11}, {&(0x7f0000000380)="31476c78a4f9a2f15e71150bda2cbd2192dd7d7c", 0x14}], 0x3}}], 0x2, 0x8008801) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="4a3fd5979a", 0x5}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', r4, 0x8, 0x7800, 0x833, 0x0, {{0x29, 0x4, 0x0, 0x2, 0xa4, 0x68, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xde, [@broadcast, @rand_addr=0x64010100, @empty, @rand_addr=0x64010101, @loopback, @multicast1]}, @cipso={0x86, 0x46, 0x2, [{0x6, 0x9, "8fd608ac7f058f"}, {0x5, 0x11, "4921c5a355d6fe9329983a1f2372df"}, {0x7, 0xb, "46b2ec62d36603b743"}, {0x7, 0x11, "322332fb663908cd2947762d0374af"}, {0x1, 0x8, "8d683143211f"}, {0x2, 0x2}]}, @end, @timestamp={0x44, 0x24, 0xce, 0x0, 0x7, [0x0, 0x9, 0x4, 0x27e9, 0x9, 0x4, 0x80000001, 0x1]}, @end]}}}}}) 500.107337ms ago: executing program 4 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r5, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}]}, 0x4c}}, 0x804) (async) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000280)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) (async) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xb, 0xffff}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 498.773528ms ago: executing program 3 (id=915): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000002b00)=""/245, 0xf5}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f0000003d40)=""/4082, 0xff2}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x90000000}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0xc}], 0x6, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x3, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 388.594369ms ago: executing program 3 (id=916): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e24, 0x2, @empty, 0x3}], 0x98) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e21, @remote}}}, 0x84) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000100", @ANYRES16=r4, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b00000000000600010007000000"], 0x34}}, 0x20) 366.528435ms ago: executing program 4 (id=917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb474e02000000", 0x3e}, {&(0x7f0000000140)="1a36c585f33853c08764d056a899743cbaf5cde47e5f51052d82c1f377d8f72f89af744237090097b332c713a69b99f29ce733eba562f02397e840adb48a98d70c2d385c", 0x44}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$nbd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6744669800000000020004000200000044f415b07c02dcf2c25881aa0db47e07975af86348d3dacdb80d085bcbfbaf22c3c7c2c6e5f96a4f94b0d003a09cf1b0aa9d7a1cc387e01235d5c77c50f4632779ef25d05d7c5600cf17a0471b7c00000000"], 0x62) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x0, 0x4000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 296.990075ms ago: executing program 4 (id=918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(r7, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000000d0a010200004000000000000a0000010900020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 220.244866ms ago: executing program 3 (id=919): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=')', 0x51}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000008400008400000007000000ac14140a0000000020"], 0x38, 0x8000}, 0x20000000) 188.667314ms ago: executing program 3 (id=920): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x3, 0x1, 0x1, 0x3, 0x1ff, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) 97.160738ms ago: executing program 1 (id=921): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x14) (async) r2 = socket$netlink(0x10, 0x3, 0x14) sendto$packet(r0, &(0x7f0000000800)="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", 0x1000, 0x20048091, &(0x7f0000000000)={0x11, 0x19, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0xf, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 3 (id=922): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendfile(r0, r1, &(0x7f0000000240)=0x8, 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendfile(r0, r0, &(0x7f0000000100)=0x6, 0x2) r3 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="17ffffffffffffe200000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400090010003b1500000000000000afe96a3fd8", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008001b000000000008001a0000000000"], 0x44}}, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f00000000c0)=@default) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYBLOB="0000000006"], 0x24}}, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = accept4(r2, &(0x7f0000000180)=@tipc=@id, &(0x7f0000000200)=0x80, 0x80000) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032bbd7040fbdbdf00a6000200"/26], 0x20}, 0x1, 0x0, 0x0, 0x180c0}, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x2f}}, {{0x0, 0x23, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1000000000000173}}], 0x40000b5, 0x0) kernel console output (not intermixed with test programs): .963540][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.061927][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.071081][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.114890][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.191171][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.264896][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.284689][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.394729][ T5958] x_tables: duplicate underflow at hook 2 [ 78.449102][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.460128][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.474549][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.691926][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 78.722698][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.739226][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.765925][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.958500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.984912][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.266954][ T6003] netlink: 'syz.2.21': attribute type 58 has an invalid length. [ 79.274842][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 79.540573][ T5842] Bluetooth: hci4: command tx timeout [ 79.620218][ T5842] Bluetooth: hci1: command tx timeout [ 79.621186][ T5830] Bluetooth: hci2: command tx timeout [ 79.625653][ T5842] Bluetooth: hci3: command tx timeout [ 79.632427][ T52] Bluetooth: hci0: command tx timeout [ 79.697383][ T6017] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.720338][ T6019] warning: `syz.3.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.748229][ T6026] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 80.111765][ T6046] FAULT_INJECTION: forcing a failure. [ 80.111765][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 80.139820][ T6046] CPU: 0 UID: 0 PID: 6046 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT(full) [ 80.139842][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.139857][ T6046] Call Trace: [ 80.139864][ T6046] [ 80.139872][ T6046] dump_stack_lvl+0x189/0x250 [ 80.139902][ T6046] ? __pfx____ratelimit+0x10/0x10 [ 80.139927][ T6046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.139943][ T6046] ? __pfx__printk+0x10/0x10 [ 80.139964][ T6046] ? __pfx___might_resched+0x10/0x10 [ 80.139983][ T6046] ? fs_reclaim_acquire+0x7d/0x100 [ 80.140008][ T6046] should_fail_ex+0x414/0x560 [ 80.140053][ T6046] should_failslab+0xa8/0x100 [ 80.140075][ T6046] kmem_cache_alloc_noprof+0x74/0x6e0 [ 80.140093][ T6046] ? _sctp_make_chunk+0x14e/0x430 [ 80.140110][ T6046] ? skb_put+0x11b/0x210 [ 80.140136][ T6046] _sctp_make_chunk+0x14e/0x430 [ 80.140157][ T6046] sctp_make_datafrag_empty+0x122/0x230 [ 80.140176][ T6046] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 80.140196][ T6046] ? sctp_auth_send_cid+0x69/0x250 [ 80.140217][ T6046] sctp_datamsg_from_user+0x729/0xef0 [ 80.140263][ T6046] sctp_sendmsg_to_asoc+0xffe/0x1810 [ 80.140282][ T6046] ? __asan_memcpy+0x40/0x70 [ 80.140305][ T6046] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 80.140338][ T6046] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 80.140359][ T6046] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 80.140381][ T6046] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 80.140400][ T6046] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 80.140418][ T6046] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 80.140437][ T6046] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 80.140459][ T6046] ? security_sctp_bind_connect+0x7e/0x2e0 [ 80.140486][ T6046] sctp_sendmsg+0x1941/0x2810 [ 80.140518][ T6046] ? __pfx_sctp_sendmsg+0x10/0x10 [ 80.140542][ T6046] ? aa_sk_perm+0x81e/0x950 [ 80.140564][ T6046] ? __pfx_aa_sk_perm+0x10/0x10 [ 80.140583][ T6046] ? sock_rps_record_flow+0x19/0x410 [ 80.140609][ T6046] ? inet_sendmsg+0x2f4/0x370 [ 80.140629][ T6046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 80.140652][ T6046] __sock_sendmsg+0x19c/0x270 [ 80.140676][ T6046] __sys_sendto+0x3bd/0x520 [ 80.140702][ T6046] ? __pfx___sys_sendto+0x10/0x10 [ 80.140722][ T6046] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 80.140752][ T6046] ? __fget_files+0x3a0/0x420 [ 80.140780][ T6046] ? ksys_write+0x22a/0x250 [ 80.140799][ T6046] ? __pfx_ksys_write+0x10/0x10 [ 80.140822][ T6046] __x64_sys_sendto+0xde/0x100 [ 80.140848][ T6046] do_syscall_64+0xfa/0xfa0 [ 80.140864][ T6046] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.140877][ T6046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.140893][ T6046] ? clear_bhb_loop+0x60/0xb0 [ 80.140913][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.140929][ T6046] RIP: 0033:0x7fc194b8efc9 [ 80.140951][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.140963][ T6046] RSP: 002b:00007fc192df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.140982][ T6046] RAX: ffffffffffffffda RBX: 00007fc194de5fa0 RCX: 00007fc194b8efc9 [ 80.140994][ T6046] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 80.141005][ T6046] RBP: 00007fc192df6090 R08: 0000200000000200 R09: 000000000000001c [ 80.141016][ T6046] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000002 [ 80.141036][ T6046] R13: 00007fc194de6038 R14: 00007fc194de5fa0 R15: 00007ffdfdde3438 [ 80.141066][ T6046] [ 80.542119][ T6045] FAULT_INJECTION: forcing a failure. [ 80.542119][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 80.599186][ T6045] CPU: 1 UID: 0 PID: 6045 Comm: syz.1.33 Not tainted syzkaller #0 PREEMPT(full) [ 80.599211][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.599221][ T6045] Call Trace: [ 80.599229][ T6045] [ 80.599237][ T6045] dump_stack_lvl+0x189/0x250 [ 80.599261][ T6045] ? __pfx____ratelimit+0x10/0x10 [ 80.599285][ T6045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.599303][ T6045] ? __pfx__printk+0x10/0x10 [ 80.599326][ T6045] ? __pfx___might_resched+0x10/0x10 [ 80.599348][ T6045] ? fs_reclaim_acquire+0x7d/0x100 [ 80.599374][ T6045] should_fail_ex+0x414/0x560 [ 80.599404][ T6045] should_failslab+0xa8/0x100 [ 80.599427][ T6045] __kmalloc_noprof+0xcb/0x7f0 [ 80.599445][ T6045] ? sctp_auth_make_key_vector+0xd8/0x300 [ 80.599470][ T6045] sctp_auth_make_key_vector+0xd8/0x300 [ 80.599496][ T6045] sctp_auth_asoc_create_secret+0x45/0x810 [ 80.599529][ T6045] sctp_auth_asoc_init_active_key+0x14b/0x730 [ 80.599546][ T6045] ? __local_bh_enable_ip+0x12d/0x1c0 [ 80.599568][ T6045] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 80.599594][ T6045] sctp_auth_set_active_key+0x1b4/0x2e0 [ 80.599617][ T6045] sctp_setsockopt+0x721/0x1200 [ 80.599637][ T6045] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 80.599662][ T6045] do_sock_setsockopt+0x17c/0x1b0 [ 80.599690][ T6045] __x64_sys_setsockopt+0x13f/0x1b0 [ 80.599780][ T6045] do_syscall_64+0xfa/0xfa0 [ 80.599796][ T6045] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.599811][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.599826][ T6045] ? clear_bhb_loop+0x60/0xb0 [ 80.599846][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.599863][ T6045] RIP: 0033:0x7fe339b8efc9 [ 80.599878][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.599891][ T6045] RSP: 002b:00007fe33a99d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.599909][ T6045] RAX: ffffffffffffffda RBX: 00007fe339de5fa0 RCX: 00007fe339b8efc9 [ 80.599920][ T6045] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 80.599929][ T6045] RBP: 00007fe33a99d090 R08: 0000000000000008 R09: 0000000000000000 [ 80.599939][ T6045] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 80.599949][ T6045] R13: 00007fe339de6038 R14: 00007fe339de5fa0 R15: 00007ffe86d9fca8 [ 80.599974][ T6045] [ 80.847803][ T6054] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 81.317640][ T6084] xt_policy: output policy not valid in PREROUTING and INPUT [ 81.378035][ T6086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.43'. [ 81.439109][ T6089] netlink: 'syz.4.45': attribute type 5 has an invalid length. [ 81.451072][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 81.690560][ T6100] FAULT_INJECTION: forcing a failure. [ 81.690560][ T6100] name failslab, interval 1, probability 0, space 0, times 0 [ 81.733838][ T6100] CPU: 1 UID: 0 PID: 6100 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(full) [ 81.733868][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.733878][ T6100] Call Trace: [ 81.733885][ T6100] [ 81.733892][ T6100] dump_stack_lvl+0x189/0x250 [ 81.733914][ T6100] ? __pfx____ratelimit+0x10/0x10 [ 81.733938][ T6100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.733955][ T6100] ? __pfx__printk+0x10/0x10 [ 81.733979][ T6100] ? __pfx___might_resched+0x10/0x10 [ 81.733999][ T6100] ? fs_reclaim_acquire+0x7d/0x100 [ 81.734024][ T6100] should_fail_ex+0x414/0x560 [ 81.734052][ T6100] should_failslab+0xa8/0x100 [ 81.734073][ T6100] __kmalloc_noprof+0xcb/0x7f0 [ 81.734090][ T6100] ? sctp_auth_make_key_vector+0xd8/0x300 [ 81.734108][ T6100] ? sctp_auth_make_key_vector+0x208/0x300 [ 81.734131][ T6100] sctp_auth_make_key_vector+0xd8/0x300 [ 81.734157][ T6100] sctp_auth_asoc_create_secret+0xbd/0x810 [ 81.734183][ T6100] sctp_auth_asoc_init_active_key+0x14b/0x730 [ 81.734202][ T6100] ? __local_bh_enable_ip+0x12d/0x1c0 [ 81.734225][ T6100] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 81.734252][ T6100] sctp_auth_set_active_key+0x1b4/0x2e0 [ 81.734273][ T6100] sctp_setsockopt+0x721/0x1200 [ 81.734293][ T6100] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 81.734318][ T6100] do_sock_setsockopt+0x17c/0x1b0 [ 81.734346][ T6100] __x64_sys_setsockopt+0x13f/0x1b0 [ 81.734376][ T6100] do_syscall_64+0xfa/0xfa0 [ 81.734392][ T6100] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.734409][ T6100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.734446][ T6100] ? clear_bhb_loop+0x60/0xb0 [ 81.734466][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.734483][ T6100] RIP: 0033:0x7fe339b8efc9 [ 81.734499][ T6100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.734512][ T6100] RSP: 002b:00007fe33a99d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.734530][ T6100] RAX: ffffffffffffffda RBX: 00007fe339de5fa0 RCX: 00007fe339b8efc9 [ 81.734542][ T6100] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 81.734552][ T6100] RBP: 00007fe33a99d090 R08: 0000000000000008 R09: 0000000000000000 [ 81.734561][ T6100] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 81.734571][ T6100] R13: 00007fe339de6038 R14: 00007fe339de5fa0 R15: 00007ffe86d9fca8 [ 81.734600][ T6100] [ 82.192088][ T6113] netlink: 104 bytes leftover after parsing attributes in process `syz.0.52'. [ 82.207964][ T6110] tipc: Started in network mode [ 82.213044][ T6110] tipc: Node identity f29807db9c02, cluster identity 4711 [ 82.220348][ T24] IPVS: starting estimator thread 0... [ 82.220583][ T6110] tipc: Enabled bearer , priority 0 [ 82.293136][ T6110] syzkaller0: entered promiscuous mode [ 82.298869][ T6110] syzkaller0: entered allmulticast mode [ 82.333301][ T6110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 82.350218][ T6116] IPVS: using max 27 ests per chain, 64800 per kthread [ 82.478291][ T6122] tipc: Resetting bearer [ 82.512160][ T6109] tipc: Resetting bearer [ 82.622471][ T6109] tipc: Disabling bearer [ 83.054573][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 83.106546][ T6151] netlink: 248 bytes leftover after parsing attributes in process `syz.4.64'. [ 83.137743][ T6108] infiniband syz0: set active [ 83.139644][ T6151] netlink: 52 bytes leftover after parsing attributes in process `syz.4.64'. [ 83.164129][ T6108] infiniband syz0: added bond_slave_0 [ 83.183537][ T6108] syz0: rxe_create_cq: returned err = -12 [ 83.209789][ T6108] infiniband syz0: Couldn't create ib_mad CQ [ 83.216011][ T6108] infiniband syz0: Couldn't open port 1 [ 83.234705][ T6162] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.319064][ T6108] RDS/IB: syz0: added [ 83.339309][ T6108] smc: adding ib device syz0 with port count 1 [ 83.366054][ T6108] smc: ib device syz0 port 1 has no pnetid [ 83.396279][ T6165] Zero length message leads to an empty skb [ 83.506132][ T6173] x_tables: duplicate underflow at hook 1 [ 83.564784][ T6178] netlink: 'syz.2.72': attribute type 4 has an invalid length. [ 83.640189][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 83.684216][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 83.691550][ T6178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.825030][ T6187] netlink: 96 bytes leftover after parsing attributes in process `syz.4.74'. [ 83.850007][ T6187] 8021q: VLANs not supported on ip_vti0 [ 84.151392][ T6205] FAULT_INJECTION: forcing a failure. [ 84.151392][ T6205] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.165210][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 84.165233][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.165243][ T6205] Call Trace: [ 84.165250][ T6205] [ 84.165258][ T6205] dump_stack_lvl+0x189/0x250 [ 84.165282][ T6205] ? __pfx____ratelimit+0x10/0x10 [ 84.165307][ T6205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.165325][ T6205] ? __pfx__printk+0x10/0x10 [ 84.165356][ T6205] should_fail_ex+0x414/0x560 [ 84.165387][ T6205] _copy_to_user+0x31/0xb0 [ 84.165410][ T6205] simple_read_from_buffer+0xe1/0x170 [ 84.165438][ T6205] proc_fail_nth_read+0x1b3/0x220 [ 84.165467][ T6205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.165494][ T6205] ? rw_verify_area+0x2a6/0x4d0 [ 84.165511][ T6205] ? __lock_acquire+0xab9/0xd20 [ 84.165530][ T6205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.165556][ T6205] vfs_read+0x200/0xa30 [ 84.165581][ T6205] ? fdget_pos+0x247/0x320 [ 84.165605][ T6205] ? __pfx___mutex_lock+0x10/0x10 [ 84.165624][ T6205] ? __pfx_vfs_read+0x10/0x10 [ 84.165643][ T6205] ? __fget_files+0x2a/0x420 [ 84.165668][ T6205] ? __fget_files+0x3a0/0x420 [ 84.165687][ T6205] ? __fget_files+0x2a/0x420 [ 84.165716][ T6205] ksys_read+0x145/0x250 [ 84.165737][ T6205] ? __pfx_ksys_read+0x10/0x10 [ 84.165759][ T6205] ? do_syscall_64+0xbe/0xfa0 [ 84.165780][ T6205] do_syscall_64+0xfa/0xfa0 [ 84.165796][ T6205] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.165813][ T6205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.165830][ T6205] ? clear_bhb_loop+0x60/0xb0 [ 84.165852][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.165868][ T6205] RIP: 0033:0x7fc194b8d9dc [ 84.165884][ T6205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.165898][ T6205] RSP: 002b:00007fc192df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.165916][ T6205] RAX: ffffffffffffffda RBX: 00007fc194de5fa0 RCX: 00007fc194b8d9dc [ 84.165929][ T6205] RDX: 000000000000000f RSI: 00007fc192df60a0 RDI: 0000000000000004 [ 84.165940][ T6205] RBP: 00007fc192df6090 R08: 0000000000000000 R09: 0000000000000000 [ 84.165950][ T6205] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 84.165961][ T6205] R13: 00007fc194de6038 R14: 00007fc194de5fa0 R15: 00007ffdfdde3438 [ 84.165993][ T6205] [ 84.687039][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 84.838510][ T6220] netlink: 156 bytes leftover after parsing attributes in process `syz.2.88'. [ 84.858364][ T6220] netlink: 156 bytes leftover after parsing attributes in process `syz.2.88'. [ 85.050668][ T6233] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 85.245700][ T6245] pim6reg: entered allmulticast mode [ 85.316330][ T6248] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.501339][ T6254] netlink: 168 bytes leftover after parsing attributes in process `syz.4.98'. [ 85.535028][ T6250] netlink: 'syz.1.96': attribute type 8 has an invalid length. [ 85.557958][ T6250] bridge0: entered promiscuous mode [ 85.565746][ T6250] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 85.725599][ T6258] tipc: Enabling of bearer rejected, media not registered [ 85.942503][ T6266] netlink: 'syz.1.104': attribute type 10 has an invalid length. [ 85.983116][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.994464][ T6266] bridge_slave_1: left allmulticast mode [ 86.020713][ T6266] bridge_slave_1: left promiscuous mode [ 86.027357][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.102875][ T6266] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 86.154736][ T6270] delete_channel: no stack [ 86.170218][ T6270] netlink: 'syz.4.106': attribute type 17 has an invalid length. [ 86.419347][ T6294] pim6reg: entered allmulticast mode [ 86.719463][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.764563][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.786629][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.821809][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.825518][ T6311] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 86.869699][ T6311] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 86.915903][ T9] cfg80211: failed to load regulatory.db [ 87.497055][ T6343] bond2: Unable to set down delay as MII monitoring is disabled [ 87.576051][ T6343] bond2 (unregistering): Released all slaves [ 87.650473][ T6354] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.862148][ T6362] FAULT_INJECTION: forcing a failure. [ 87.862148][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 87.886589][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(full) [ 87.886613][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.886623][ T6362] Call Trace: [ 87.886630][ T6362] [ 87.886638][ T6362] dump_stack_lvl+0x189/0x250 [ 87.886662][ T6362] ? __pfx____ratelimit+0x10/0x10 [ 87.886687][ T6362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.886705][ T6362] ? __pfx__printk+0x10/0x10 [ 87.886720][ T6362] ? __asan_memset+0x22/0x50 [ 87.886738][ T6362] ? _get_random_bytes+0x1bd/0x210 [ 87.886756][ T6362] ? __pfx__get_random_bytes+0x10/0x10 [ 87.886781][ T6362] should_fail_ex+0x414/0x560 [ 87.886812][ T6362] should_failslab+0xa8/0x100 [ 87.886834][ T6362] __kmalloc_cache_noprof+0x6f/0x6f0 [ 87.886854][ T6362] ? sctp_add_bind_addr+0x8c/0x370 [ 87.886870][ T6362] ? __ipv6_addr_type+0x247/0x2f0 [ 87.886895][ T6362] sctp_add_bind_addr+0x8c/0x370 [ 87.886915][ T6362] sctp_bind_addr_copy+0xb3/0x3c0 [ 87.886933][ T6362] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 87.886968][ T6362] sctp_sf_do_unexpected_init+0xa91/0x1110 [ 87.886995][ T6362] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 87.887026][ T6362] sctp_do_sm+0x1e7/0x5a20 [ 87.887047][ T6362] ? __pfx_sctp_cname+0x10/0x10 [ 87.887080][ T6362] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 87.887108][ T6362] ? __pfx_sctp_do_sm+0x10/0x10 [ 87.887130][ T6362] ? __lock_acquire+0xab9/0xd20 [ 87.887190][ T6362] ? sctp_inq_pop+0xc46/0x1010 [ 87.887221][ T6362] sctp_assoc_bh_rcv+0x3f2/0x630 [ 87.887258][ T6362] sctp_backlog_rcv+0x167/0x3f0 [ 87.887279][ T6362] ? do_raw_spin_unlock+0x122/0x240 [ 87.887301][ T6362] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 87.887320][ T6362] __release_sock+0x297/0x3a0 [ 87.887348][ T6362] release_sock+0x5f/0x1f0 [ 87.887373][ T6362] sctp_sendmsg+0x1b72/0x2810 [ 87.887406][ T6362] ? __pfx_sctp_sendmsg+0x10/0x10 [ 87.887430][ T6362] ? aa_sk_perm+0x81e/0x950 [ 87.887453][ T6362] ? __pfx_aa_sk_perm+0x10/0x10 [ 87.887474][ T6362] ? sock_rps_record_flow+0x19/0x410 [ 87.887499][ T6362] ? inet_sendmsg+0x2f4/0x370 [ 87.887520][ T6362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 87.887545][ T6362] __sock_sendmsg+0x19c/0x270 [ 87.887568][ T6362] __sys_sendto+0x3bd/0x520 [ 87.887594][ T6362] ? __pfx___sys_sendto+0x10/0x10 [ 87.887612][ T6362] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 87.887641][ T6362] ? __fget_files+0x3a0/0x420 [ 87.887673][ T6362] ? ksys_write+0x22a/0x250 [ 87.887693][ T6362] ? __pfx_ksys_write+0x10/0x10 [ 87.887715][ T6362] __x64_sys_sendto+0xde/0x100 [ 87.887742][ T6362] do_syscall_64+0xfa/0xfa0 [ 87.887757][ T6362] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.887772][ T6362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.887786][ T6362] ? clear_bhb_loop+0x60/0xb0 [ 87.887805][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.887820][ T6362] RIP: 0033:0x7fc194b8efc9 [ 87.887836][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.887848][ T6362] RSP: 002b:00007fc192df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.887867][ T6362] RAX: ffffffffffffffda RBX: 00007fc194de5fa0 RCX: 00007fc194b8efc9 [ 87.887880][ T6362] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 87.887890][ T6362] RBP: 00007fc192df6090 R08: 0000200000000200 R09: 000000000000001c [ 87.887901][ T6362] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000002 [ 87.887911][ T6362] R13: 00007fc194de6038 R14: 00007fc194de5fa0 R15: 00007ffdfdde3438 [ 87.887939][ T6362] [ 88.442534][ T6380] tipc: Started in network mode [ 88.447504][ T6380] tipc: Node identity 66e2ae2fd547, cluster identity 4711 [ 88.465550][ T6379] atomic_op ffff888079a77198 conn xmit_atomic 0000000000000000 [ 88.483692][ T6385] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 88.490632][ T6380] tipc: Enabled bearer , priority 0 [ 88.544059][ T6389] atomic_op ffff888056261198 conn xmit_atomic 0000000000000000 [ 88.622940][ T6393] Cannot find add_set index 0 as target [ 88.653102][ T6387] tipc: Disabling bearer [ 88.761890][ T6399] netlink: 'syz.4.147': attribute type 1 has an invalid length. [ 88.788452][ T6399] netlink: 'syz.4.147': attribute type 83 has an invalid length. [ 88.846692][ T6399] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 88.905172][ T6403] __nla_validate_parse: 40 callbacks suppressed [ 88.905195][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 88.979872][ T6409] syz.0.151 uses obsolete (PF_INET,SOCK_PACKET) [ 89.007730][ T6416] netlink: 45 bytes leftover after parsing attributes in process `syz.1.153'. [ 89.568403][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 89.588487][ T6442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.161'. [ 89.707124][ T6440] syzkaller0: entered promiscuous mode [ 89.712773][ T6440] syzkaller0: entered allmulticast mode [ 89.850501][ T6451] syzkaller0: entered promiscuous mode [ 89.856010][ T6451] syzkaller0: entered allmulticast mode [ 89.935385][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 89.983338][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 90.011116][ T6467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.018614][ T6467] IPv6: NLM_F_CREATE should be set when creating new route [ 90.025957][ T6467] IPv6: NLM_F_CREATE should be set when creating new route [ 90.033216][ T6467] IPv6: NLM_F_CREATE should be set when creating new route [ 90.061052][ T6470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.202597][ T6476] syzkaller0: entered promiscuous mode [ 90.221037][ T6476] syzkaller0: entered allmulticast mode [ 90.375749][ T6485] netlink: 'syz.3.173': attribute type 12 has an invalid length. [ 90.408464][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.174'. [ 90.508133][ T6488] Cannot find add_set index 0 as target [ 90.515258][ T6488] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 90.658675][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 91.055446][ T6515] tunl0: entered promiscuous mode [ 91.081889][ T6515] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 91.108576][ T6528] netlink: 56 bytes leftover after parsing attributes in process `syz.0.188'. [ 91.113649][ T6532] trusted_key: syz.4.187 sent an empty control message without MSG_MORE. [ 91.138004][ T6515] netlink: 9 bytes leftover after parsing attributes in process `syz.2.182'. [ 91.450290][ T6555] team0: mtu less than device minimum [ 91.455746][ T6556] tipc: Enabling of bearer rejected, failed to enable media [ 91.826558][ T6582] FAULT_INJECTION: forcing a failure. [ 91.826558][ T6582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.857021][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.3.200 Not tainted syzkaller #0 PREEMPT(full) [ 91.857045][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.857054][ T6582] Call Trace: [ 91.857061][ T6582] [ 91.857068][ T6582] dump_stack_lvl+0x189/0x250 [ 91.857092][ T6582] ? __pfx____ratelimit+0x10/0x10 [ 91.857117][ T6582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.857134][ T6582] ? __pfx__printk+0x10/0x10 [ 91.857152][ T6582] ? __might_fault+0xb0/0x130 [ 91.857179][ T6582] should_fail_ex+0x414/0x560 [ 91.857209][ T6582] _copy_from_user+0x2d/0xb0 [ 91.857231][ T6582] ___sys_sendmsg+0x158/0x2a0 [ 91.857250][ T6582] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.857301][ T6582] ? __fget_files+0x2a/0x420 [ 91.857321][ T6582] ? __fget_files+0x3a0/0x420 [ 91.857350][ T6582] __x64_sys_sendmsg+0x19b/0x260 [ 91.857369][ T6582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.857395][ T6582] ? __pfx_ksys_write+0x10/0x10 [ 91.857417][ T6582] ? do_syscall_64+0xbe/0xfa0 [ 91.857435][ T6582] do_syscall_64+0xfa/0xfa0 [ 91.857449][ T6582] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.857464][ T6582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.857478][ T6582] ? clear_bhb_loop+0x60/0xb0 [ 91.857497][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.857513][ T6582] RIP: 0033:0x7efd4078efc9 [ 91.857529][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.857542][ T6582] RSP: 002b:00007efd415f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.857561][ T6582] RAX: ffffffffffffffda RBX: 00007efd409e5fa0 RCX: 00007efd4078efc9 [ 91.857572][ T6582] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 91.857582][ T6582] RBP: 00007efd415f6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.857608][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.857618][ T6582] R13: 00007efd409e6038 R14: 00007efd409e5fa0 R15: 00007fff94f9b6e8 [ 91.857648][ T6582] [ 92.321312][ T6594] netlink: 'syz.1.206': attribute type 6 has an invalid length. [ 92.356528][ T6594] netlink: 'syz.1.206': attribute type 5 has an invalid length. [ 92.607342][ T6601] bond1: entered promiscuous mode [ 92.687589][ T6613] bond_slave_0: entered promiscuous mode [ 92.693506][ T6613] bond_slave_1: entered promiscuous mode [ 92.740305][ T6613] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.749437][ T6613] bond1: (slave macvlan2): making interface the new active one [ 92.763933][ T12] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:e0fb:43ff:fe1c:d894 error=-28 [ 92.766266][ T6623] netlink: 'syz.4.214': attribute type 4 has an invalid length. [ 92.790278][ T6625] FAULT_INJECTION: forcing a failure. [ 92.790278][ T6625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.803520][ T6613] macvlan2: entered promiscuous mode [ 92.803576][ T6613] bond0: entered promiscuous mode [ 92.806101][ T6613] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 92.825932][ T6626] netlink: 'syz.4.214': attribute type 4 has an invalid length. [ 92.834771][ T6629] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 92.843614][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.0.215 Not tainted syzkaller #0 PREEMPT(full) [ 92.843635][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.843645][ T6625] Call Trace: [ 92.843652][ T6625] [ 92.843660][ T6625] dump_stack_lvl+0x189/0x250 [ 92.843683][ T6625] ? __pfx____ratelimit+0x10/0x10 [ 92.843709][ T6625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.843725][ T6625] ? __pfx__printk+0x10/0x10 [ 92.843753][ T6625] should_fail_ex+0x414/0x560 [ 92.843781][ T6625] _copy_from_user+0x2d/0xb0 [ 92.843802][ T6625] __copy_msghdr+0x3c5/0x5b0 [ 92.843831][ T6625] ___sys_sendmsg+0x1a5/0x2a0 [ 92.843851][ T6625] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.843899][ T6625] ? __fget_files+0x2a/0x420 [ 92.843917][ T6625] ? __fget_files+0x3a0/0x420 [ 92.843951][ T6625] __x64_sys_sendmsg+0x19b/0x260 [ 92.843969][ T6625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.843993][ T6625] ? __pfx_ksys_write+0x10/0x10 [ 92.844014][ T6625] ? do_syscall_64+0xbe/0xfa0 [ 92.844034][ T6625] do_syscall_64+0xfa/0xfa0 [ 92.844049][ T6625] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.844065][ T6625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.844080][ T6625] ? clear_bhb_loop+0x60/0xb0 [ 92.844100][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.844115][ T6625] RIP: 0033:0x7f6b0198efc9 [ 92.844131][ T6625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.844144][ T6625] RSP: 002b:00007f6b02800038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.844162][ T6625] RAX: ffffffffffffffda RBX: 00007f6b01be5fa0 RCX: 00007f6b0198efc9 [ 92.844173][ T6625] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 92.844183][ T6625] RBP: 00007f6b02800090 R08: 0000000000000000 R09: 0000000000000000 [ 92.844193][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.844202][ T6625] R13: 00007f6b01be6038 R14: 00007f6b01be5fa0 R15: 00007ffe91ae3ce8 [ 92.844231][ T6625] [ 92.863727][ T6601] bridge0: port 3(syz_tun) entered blocking state [ 93.069838][ T6601] bridge0: port 3(syz_tun) entered disabled state [ 93.078008][ T6601] syz_tun: entered allmulticast mode [ 93.126504][ T6601] syz_tun: entered promiscuous mode [ 93.133350][ T6601] bridge0: port 3(syz_tun) entered blocking state [ 93.140168][ T6601] bridge0: port 3(syz_tun) entered forwarding state [ 93.169570][ T6629] bridge0: port 3(syz_tun) entered disabled state [ 93.176347][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.185000][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.223518][ T6629] bridge0: port 3(syz_tun) entered blocking state [ 93.230216][ T6629] bridge0: port 3(syz_tun) entered forwarding state [ 93.237142][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.244351][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.251911][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.259094][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.277518][ T6629] bridge0: entered promiscuous mode [ 93.284142][ T6629] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.384789][ T6648] tipc: Enabled bearer , priority 0 [ 93.393876][ T6648] syzkaller0: entered promiscuous mode [ 93.399374][ T6648] syzkaller0: entered allmulticast mode [ 94.501928][ T5881] tipc: Node number set to 1855588315 [ 94.621079][ T6653] tipc: Resetting bearer [ 94.642213][ T6653] tipc: Disabling bearer [ 94.728836][ T6671] bond1: entered allmulticast mode [ 94.737198][ T6671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.745875][ T6671] bridge0: port 3(bond1) entered blocking state [ 94.753623][ T6671] bridge0: port 3(bond1) entered disabled state [ 94.764215][ T6671] bond1: entered promiscuous mode [ 94.770369][ T6671] bridge0: port 3(bond1) entered blocking state [ 94.777078][ T6671] bridge0: port 3(bond1) entered forwarding state [ 94.787586][ T12] bridge0: port 3(bond1) entered disabled state [ 94.800992][ T6679] tipc: Enabling of bearer rejected, failed to enable media [ 94.812635][ T6682] __nla_validate_parse: 10 callbacks suppressed [ 94.812654][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 94.822604][ T6674] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 94.839753][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 94.842273][ T6674] netlink: 'syz.3.232': attribute type 2 has an invalid length. [ 95.046289][ T6698] tipc: Enabled bearer , priority 0 [ 95.070759][ T6698] syzkaller0: entered promiscuous mode [ 95.076261][ T6698] syzkaller0: entered allmulticast mode [ 95.097534][ T6698] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 95.132519][ T6698] bond_slave_1: mtu less than device minimum [ 95.179842][ T6696] tipc: Resetting bearer [ 95.217578][ T6696] tipc: Disabling bearer [ 95.466728][ T6720] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.246'. [ 95.497145][ T6720] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 95.498409][ T6719] syzkaller1: entered promiscuous mode [ 95.524043][ T6719] syzkaller1: entered allmulticast mode [ 95.732765][ T6731] syzkaller0: entered promiscuous mode [ 95.732852][ T6734] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 95.748113][ T6731] syzkaller0: entered allmulticast mode [ 95.942664][ T6749] tipc: Enabled bearer , priority 0 [ 95.951871][ T6749] syzkaller0: entered promiscuous mode [ 95.957369][ T6749] syzkaller0: entered allmulticast mode [ 95.968080][ T6749] tipc: Resetting bearer [ 95.984253][ T6748] tipc: Resetting bearer [ 96.038360][ T6748] tipc: Disabling bearer [ 96.090335][ T6751] netlink: 'syz.2.255': attribute type 10 has an invalid length. [ 96.115237][ T6755] IPVS: Error connecting to the multicast addr [ 96.300913][ T6764] xt_cgroup: path and classid specified [ 96.350380][ T6767] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.261'. [ 96.698878][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 96.722590][ T6784] team_slave_0: entered promiscuous mode [ 96.728511][ T6784] team_slave_1: entered promiscuous mode [ 97.217946][ T6825] tipc: Enabled bearer , priority 0 [ 97.225623][ T6825] syzkaller0: entered promiscuous mode [ 97.251769][ T6825] syzkaller0: entered allmulticast mode [ 97.314128][ T6825] tipc: Resetting bearer [ 97.336080][ T6821] tipc: Resetting bearer [ 97.397073][ T6821] tipc: Disabling bearer [ 97.721451][ T6845] syzkaller0: entered promiscuous mode [ 97.727030][ T6845] syzkaller0: entered allmulticast mode [ 97.970200][ T6862] netlink: 232 bytes leftover after parsing attributes in process `syz.3.287'. [ 98.047687][ T855] IPVS: starting estimator thread 0... [ 98.059868][ T6861] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 98.149713][ T6868] IPVS: using max 34 ests per chain, 81600 per kthread [ 98.180007][ T6865] af_packet: tpacket_rcv: packet too big, clamped from 32834 to 3966. macoff=82 [ 98.213720][ T6872] netlink: 132 bytes leftover after parsing attributes in process `syz.4.290'. [ 98.373701][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 98.382751][ T6878] netlink: 216 bytes leftover after parsing attributes in process `syz.3.293'. [ 98.404182][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 98.432321][ T6880] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 98.471209][ T6888] syzkaller1: entered promiscuous mode [ 98.476789][ T6888] syzkaller1: entered allmulticast mode [ 98.896938][ T6909] netlink: 'syz.0.304': attribute type 29 has an invalid length. [ 98.907634][ T6909] netlink: 'syz.0.304': attribute type 29 has an invalid length. [ 99.315897][ T6944] FAULT_INJECTION: forcing a failure. [ 99.315897][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 99.329028][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz.1.311 Not tainted syzkaller #0 PREEMPT(full) [ 99.329050][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.329060][ T6944] Call Trace: [ 99.329067][ T6944] [ 99.329075][ T6944] dump_stack_lvl+0x189/0x250 [ 99.329098][ T6944] ? __pfx____ratelimit+0x10/0x10 [ 99.329123][ T6944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.329140][ T6944] ? __pfx__printk+0x10/0x10 [ 99.329165][ T6944] ? rcu_is_watching+0x15/0xb0 [ 99.329192][ T6944] should_fail_ex+0x414/0x560 [ 99.329223][ T6944] should_failslab+0xa8/0x100 [ 99.329246][ T6944] kmem_cache_alloc_noprof+0x74/0x6e0 [ 99.329265][ T6944] ? _sctp_make_chunk+0x14e/0x430 [ 99.329282][ T6944] ? skb_put+0x11b/0x210 [ 99.329308][ T6944] _sctp_make_chunk+0x14e/0x430 [ 99.329331][ T6944] sctp_make_init_ack+0x953/0x12d0 [ 99.329359][ T6944] ? __pfx_sctp_make_init_ack+0x10/0x10 [ 99.329380][ T6944] ? sctp_add_bind_addr+0x203/0x370 [ 99.329406][ T6944] ? sctp_tietags_populate+0x84/0x490 [ 99.329433][ T6944] sctp_sf_do_unexpected_init+0xc43/0x1110 [ 99.329458][ T6944] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 99.329486][ T6944] sctp_do_sm+0x1e7/0x5a20 [ 99.329507][ T6944] ? __pfx_sctp_cname+0x10/0x10 [ 99.329541][ T6944] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 99.329568][ T6944] ? __pfx_sctp_do_sm+0x10/0x10 [ 99.329589][ T6944] ? __lock_acquire+0xab9/0xd20 [ 99.329649][ T6944] ? sctp_inq_pop+0xc46/0x1010 [ 99.329680][ T6944] sctp_assoc_bh_rcv+0x3f2/0x630 [ 99.329717][ T6944] sctp_backlog_rcv+0x167/0x3f0 [ 99.329737][ T6944] ? do_raw_spin_unlock+0x122/0x240 [ 99.329760][ T6944] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 99.329779][ T6944] __release_sock+0x297/0x3a0 [ 99.329817][ T6944] release_sock+0x5f/0x1f0 [ 99.329841][ T6944] sctp_sendmsg+0x1b72/0x2810 [ 99.329875][ T6944] ? __pfx_sctp_sendmsg+0x10/0x10 [ 99.329899][ T6944] ? aa_sk_perm+0x81e/0x950 [ 99.329923][ T6944] ? __pfx_aa_sk_perm+0x10/0x10 [ 99.329943][ T6944] ? sock_rps_record_flow+0x19/0x410 [ 99.329967][ T6944] ? inet_sendmsg+0x2f4/0x370 [ 99.329986][ T6944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.330011][ T6944] __sock_sendmsg+0x19c/0x270 [ 99.330033][ T6944] __sys_sendto+0x3bd/0x520 [ 99.330058][ T6944] ? __pfx___sys_sendto+0x10/0x10 [ 99.330077][ T6944] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 99.330106][ T6944] ? __fget_files+0x3a0/0x420 [ 99.330136][ T6944] ? ksys_write+0x22a/0x250 [ 99.330156][ T6944] ? __pfx_ksys_write+0x10/0x10 [ 99.330177][ T6944] __x64_sys_sendto+0xde/0x100 [ 99.330201][ T6944] do_syscall_64+0xfa/0xfa0 [ 99.330215][ T6944] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.330230][ T6944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.330246][ T6944] ? clear_bhb_loop+0x60/0xb0 [ 99.330266][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.330282][ T6944] RIP: 0033:0x7fe339b8efc9 [ 99.330298][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.330311][ T6944] RSP: 002b:00007fe33a99d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.330328][ T6944] RAX: ffffffffffffffda RBX: 00007fe339de5fa0 RCX: 00007fe339b8efc9 [ 99.330339][ T6944] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 99.330347][ T6944] RBP: 00007fe33a99d090 R08: 0000200000000200 R09: 000000000000001c [ 99.330356][ T6944] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000002 [ 99.330363][ T6944] R13: 00007fe339de6038 R14: 00007fe339de5fa0 R15: 00007ffe86d9fca8 [ 99.330380][ T6944] [ 99.864848][ T6953] nftables ruleset with unbound set [ 99.879275][ T6958] __nla_validate_parse: 4 callbacks suppressed [ 99.879292][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 99.908805][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 99.955573][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'. [ 100.485742][ T6990] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 100.550775][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'. [ 100.739379][ T7004] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 101.445034][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 101.558167][ T7054] veth0: entered promiscuous mode [ 101.566765][ T7054] veth0: left promiscuous mode [ 101.862803][ T7071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.354'. [ 101.876553][ T7072] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 101.887561][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.895764][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.032167][ T7079] Bluetooth: MGMT ver 1.23 [ 102.204045][ T7094] : entered promiscuous mode [ 102.272481][ T7099] netlink: 'syz.3.363': attribute type 3 has an invalid length. [ 102.337529][ T7095] macvtap1: entered promiscuous mode [ 102.369907][ T7095] vlan0: entered promiscuous mode [ 102.375365][ T7095] macvtap1: entered allmulticast mode [ 102.391024][ T7095] vlan0: entered allmulticast mode [ 102.404327][ T7095] veth0_vlan: entered allmulticast mode [ 102.441217][ T7109] netlink: 'syz.4.366': attribute type 21 has an invalid length. [ 102.483985][ T7109] netlink: 'syz.4.366': attribute type 6 has an invalid length. [ 102.510499][ T7109] netlink: 132 bytes leftover after parsing attributes in process `syz.4.366'. [ 102.523184][ T7111] netlink: 232 bytes leftover after parsing attributes in process `syz.2.368'. [ 102.601497][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 102.620989][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 102.824226][ T7123] netlink: 'syz.4.372': attribute type 11 has an invalid length. [ 102.855321][ T7123] netlink: 'syz.4.372': attribute type 12 has an invalid length. [ 102.876281][ T7123] netlink: 'syz.4.372': attribute type 11 has an invalid length. [ 103.317850][ T7137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.331388][ T7137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.346513][ T7137] bond0 (unregistering): Released all slaves [ 103.514396][ T7155] netlink: 'syz.1.379': attribute type 10 has an invalid length. [ 103.575980][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.605631][ T7155] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 103.671255][ T7165] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 104.259827][ T7198] netlink: get zone limit has 8 unknown bytes [ 104.289718][ T7196] IPv6: sit1: Disabled Multicast RS [ 104.296778][ T7196] sit1: entered allmulticast mode [ 104.436813][ T7205] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 104.463264][ T7205] x_tables: duplicate underflow at hook 1 [ 104.781178][ T7215] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 104.789454][ T7215] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 104.907822][ T7233] FAULT_INJECTION: forcing a failure. [ 104.907822][ T7233] name failslab, interval 1, probability 0, space 0, times 0 [ 104.922086][ T7227] __nla_validate_parse: 12 callbacks suppressed [ 104.922104][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 104.937645][ T7233] CPU: 0 UID: 0 PID: 7233 Comm: syz.3.404 Not tainted syzkaller #0 PREEMPT(full) [ 104.937666][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.937675][ T7233] Call Trace: [ 104.937683][ T7233] [ 104.937689][ T7233] dump_stack_lvl+0x189/0x250 [ 104.937713][ T7233] ? __pfx____ratelimit+0x10/0x10 [ 104.937738][ T7233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.937756][ T7233] ? __pfx__printk+0x10/0x10 [ 104.937776][ T7233] ? __pfx___might_resched+0x10/0x10 [ 104.937797][ T7233] ? fs_reclaim_acquire+0x7d/0x100 [ 104.937822][ T7233] should_fail_ex+0x414/0x560 [ 104.937853][ T7233] should_failslab+0xa8/0x100 [ 104.937876][ T7233] __kmalloc_noprof+0xcb/0x7f0 [ 104.937894][ T7233] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 104.937913][ T7233] ? __local_bh_enable_ip+0x12d/0x1c0 [ 104.937939][ T7233] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 104.937965][ T7233] genl_family_rcv_msg_doit+0xb8/0x300 [ 104.937989][ T7233] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 104.938013][ T7233] ? apparmor_capable+0x137/0x1b0 [ 104.938037][ T7233] ? bpf_lsm_capable+0x9/0x20 [ 104.938052][ T7233] ? security_capable+0x7e/0x2e0 [ 104.938076][ T7233] genl_rcv_msg+0x60e/0x790 [ 104.938101][ T7233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.938117][ T7233] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 104.938138][ T7233] ? __pfx_nl80211_update_connect_params+0x10/0x10 [ 104.938154][ T7233] ? __pfx_nl80211_post_doit+0x10/0x10 [ 104.938177][ T7233] ? __asan_memcpy+0x40/0x70 [ 104.938194][ T7233] ? __pfx_ref_tracker_free+0x10/0x10 [ 104.938219][ T7233] netlink_rcv_skb+0x208/0x470 [ 104.938241][ T7233] ? __lock_acquire+0xab9/0xd20 [ 104.938263][ T7233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.938283][ T7233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.938333][ T7233] ? down_read+0x1ad/0x2e0 [ 104.938355][ T7233] genl_rcv+0x28/0x40 [ 104.938372][ T7233] netlink_unicast+0x82f/0x9e0 [ 104.938402][ T7233] ? __pfx_netlink_unicast+0x10/0x10 [ 104.938425][ T7233] ? netlink_sendmsg+0x642/0xb30 [ 104.938444][ T7233] ? skb_put+0x11b/0x210 [ 104.938470][ T7233] netlink_sendmsg+0x805/0xb30 [ 104.938499][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.938524][ T7233] ? aa_sock_msg_perm+0xf1/0x1d0 [ 104.938545][ T7233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.938565][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.938588][ T7233] __sock_sendmsg+0x21c/0x270 [ 104.938612][ T7233] ____sys_sendmsg+0x505/0x830 [ 104.938642][ T7233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.938676][ T7233] ? import_iovec+0x74/0xa0 [ 104.938702][ T7233] ___sys_sendmsg+0x21f/0x2a0 [ 104.938721][ T7233] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.938776][ T7233] ? __fget_files+0x2a/0x420 [ 104.938795][ T7233] ? __fget_files+0x3a0/0x420 [ 104.938826][ T7233] __x64_sys_sendmsg+0x19b/0x260 [ 104.938846][ T7233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.938873][ T7233] ? __pfx_ksys_write+0x10/0x10 [ 104.938895][ T7233] ? do_syscall_64+0xbe/0xfa0 [ 104.938916][ T7233] do_syscall_64+0xfa/0xfa0 [ 104.938931][ T7233] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.938948][ T7233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.938965][ T7233] ? clear_bhb_loop+0x60/0xb0 [ 104.938986][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.939003][ T7233] RIP: 0033:0x7efd4078efc9 [ 104.939019][ T7233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.939033][ T7233] RSP: 002b:00007efd415f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.939051][ T7233] RAX: ffffffffffffffda RBX: 00007efd409e5fa0 RCX: 00007efd4078efc9 [ 104.939064][ T7233] RDX: 0000000020000804 RSI: 0000200000001800 RDI: 0000000000000004 [ 104.939076][ T7233] RBP: 00007efd415f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.939086][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.939096][ T7233] R13: 00007efd409e6038 R14: 00007efd409e5fa0 R15: 00007fff94f9b6e8 [ 104.939127][ T7233] [ 105.413727][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 105.666961][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 105.759398][ T7259] vxcan2: entered allmulticast mode [ 105.847124][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 105.856218][ T7258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.409'. [ 105.985664][ T7278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.417'. [ 106.012315][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 106.036554][ T7282] FAULT_INJECTION: forcing a failure. [ 106.036554][ T7282] name failslab, interval 1, probability 0, space 0, times 0 [ 106.069685][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.1.416 Not tainted syzkaller #0 PREEMPT(full) [ 106.069708][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.069717][ T7282] Call Trace: [ 106.069724][ T7282] [ 106.069732][ T7282] dump_stack_lvl+0x189/0x250 [ 106.069756][ T7282] ? __pfx____ratelimit+0x10/0x10 [ 106.069780][ T7282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.069796][ T7282] ? __pfx__printk+0x10/0x10 [ 106.069818][ T7282] ? __pfx___might_resched+0x10/0x10 [ 106.069844][ T7282] should_fail_ex+0x414/0x560 [ 106.069880][ T7282] should_failslab+0xa8/0x100 [ 106.069903][ T7282] kmem_cache_alloc_node_noprof+0x77/0x710 [ 106.069920][ T7282] ? __alloc_skb+0x112/0x2d0 [ 106.069949][ T7282] __alloc_skb+0x112/0x2d0 [ 106.069976][ T7282] netlink_ack+0x146/0xa50 [ 106.069996][ T7282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.070014][ T7282] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 106.070036][ T7282] ? __pfx_nl80211_post_doit+0x10/0x10 [ 106.070060][ T7282] ? __asan_memcpy+0x40/0x70 [ 106.070076][ T7282] ? __pfx_ref_tracker_free+0x10/0x10 [ 106.070102][ T7282] netlink_rcv_skb+0x28c/0x470 [ 106.070123][ T7282] ? __lock_acquire+0xab9/0xd20 [ 106.070145][ T7282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.070165][ T7282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.070203][ T7282] ? down_read+0x1ad/0x2e0 [ 106.070226][ T7282] genl_rcv+0x28/0x40 [ 106.070242][ T7282] netlink_unicast+0x82f/0x9e0 [ 106.070273][ T7282] ? __pfx_netlink_unicast+0x10/0x10 [ 106.070296][ T7282] ? netlink_sendmsg+0x642/0xb30 [ 106.070317][ T7282] ? skb_put+0x11b/0x210 [ 106.070344][ T7282] netlink_sendmsg+0x805/0xb30 [ 106.070377][ T7282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.070404][ T7282] ? aa_sock_msg_perm+0xf1/0x1d0 [ 106.070426][ T7282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.070454][ T7282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.070479][ T7282] __sock_sendmsg+0x21c/0x270 [ 106.070502][ T7282] ____sys_sendmsg+0x505/0x830 [ 106.070530][ T7282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.070563][ T7282] ? import_iovec+0x74/0xa0 [ 106.070589][ T7282] ___sys_sendmsg+0x21f/0x2a0 [ 106.070609][ T7282] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.070665][ T7282] ? __fget_files+0x2a/0x420 [ 106.070687][ T7282] ? __fget_files+0x3a0/0x420 [ 106.070822][ T7282] __x64_sys_sendmsg+0x19b/0x260 [ 106.070845][ T7282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.070873][ T7282] ? __pfx_ksys_write+0x10/0x10 [ 106.070896][ T7282] ? do_syscall_64+0xbe/0xfa0 [ 106.070917][ T7282] do_syscall_64+0xfa/0xfa0 [ 106.070934][ T7282] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.070951][ T7282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.070968][ T7282] ? clear_bhb_loop+0x60/0xb0 [ 106.070989][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.071006][ T7282] RIP: 0033:0x7fe339b8efc9 [ 106.071023][ T7282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.071037][ T7282] RSP: 002b:00007fe33a99d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.071056][ T7282] RAX: ffffffffffffffda RBX: 00007fe339de5fa0 RCX: 00007fe339b8efc9 [ 106.071069][ T7282] RDX: 0000000020000804 RSI: 0000200000001800 RDI: 0000000000000004 [ 106.071080][ T7282] RBP: 00007fe33a99d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.071091][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.071101][ T7282] R13: 00007fe339de6038 R14: 00007fe339de5fa0 R15: 00007ffe86d9fca8 [ 106.071133][ T7282] [ 106.606300][ T7301] netlink: 104 bytes leftover after parsing attributes in process `syz.0.420'. [ 106.744500][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 106.795865][ T7313] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.428'. [ 106.817914][ T7313] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 107.400959][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.506742][ T7361] validate_nla: 1 callbacks suppressed [ 107.506759][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 107.521550][ T7356] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 107.568186][ T7356] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 107.578916][ T7356] gretap1: entered promiscuous mode [ 107.587848][ T7364] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 107.593275][ T7356] gretap1: entered allmulticast mode [ 107.609651][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 107.631146][ T7367] FAULT_INJECTION: forcing a failure. [ 107.631146][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 107.631241][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 107.644273][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.3.445 Not tainted syzkaller #0 PREEMPT(full) [ 107.644294][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.644303][ T7367] Call Trace: [ 107.644311][ T7367] [ 107.644318][ T7367] dump_stack_lvl+0x189/0x250 [ 107.644343][ T7367] ? __pfx____ratelimit+0x10/0x10 [ 107.644369][ T7367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.644388][ T7367] ? __pfx__printk+0x10/0x10 [ 107.644403][ T7367] ? netlink_sendmsg+0x805/0xb30 [ 107.644428][ T7367] ? __x64_sys_sendmsg+0x19b/0x260 [ 107.644444][ T7367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.644470][ T7367] should_fail_ex+0x414/0x560 [ 107.644502][ T7367] should_failslab+0xa8/0x100 [ 107.644525][ T7367] kmem_cache_alloc_noprof+0x74/0x6e0 [ 107.644545][ T7367] ? skb_clone+0x212/0x3a0 [ 107.644568][ T7367] skb_clone+0x212/0x3a0 [ 107.644589][ T7367] __netlink_deliver_tap+0x404/0x850 [ 107.644626][ T7367] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.644651][ T7367] netlink_deliver_tap+0x19c/0x1b0 [ 107.644676][ T7367] netlink_sendskb+0x68/0x140 [ 107.644700][ T7367] netlink_unicast+0x397/0x9e0 [ 107.644719][ T7367] ? __asan_memcpy+0x40/0x70 [ 107.644745][ T7367] ? __pfx_netlink_unicast+0x10/0x10 [ 107.644776][ T7367] netlink_rcv_skb+0x28c/0x470 [ 107.644798][ T7367] ? __lock_acquire+0xab9/0xd20 [ 107.644820][ T7367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.644842][ T7367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.644884][ T7367] ? down_read+0x1ad/0x2e0 [ 107.644907][ T7367] genl_rcv+0x28/0x40 [ 107.644923][ T7367] netlink_unicast+0x82f/0x9e0 [ 107.644952][ T7367] ? __pfx_netlink_unicast+0x10/0x10 [ 107.644975][ T7367] ? netlink_sendmsg+0x642/0xb30 [ 107.644996][ T7367] ? skb_put+0x11b/0x210 [ 107.645022][ T7367] netlink_sendmsg+0x805/0xb30 [ 107.645055][ T7367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.645081][ T7367] ? aa_sock_msg_perm+0xf1/0x1d0 [ 107.645103][ T7367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.645123][ T7367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.645147][ T7367] __sock_sendmsg+0x21c/0x270 [ 107.645170][ T7367] ____sys_sendmsg+0x505/0x830 [ 107.645201][ T7367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.645235][ T7367] ? import_iovec+0x74/0xa0 [ 107.645277][ T7367] ___sys_sendmsg+0x21f/0x2a0 [ 107.645296][ T7367] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.645350][ T7367] ? __fget_files+0x2a/0x420 [ 107.645369][ T7367] ? __fget_files+0x3a0/0x420 [ 107.645400][ T7367] __x64_sys_sendmsg+0x19b/0x260 [ 107.645419][ T7367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.645446][ T7367] ? __pfx_ksys_write+0x10/0x10 [ 107.645468][ T7367] ? do_syscall_64+0xbe/0xfa0 [ 107.645489][ T7367] do_syscall_64+0xfa/0xfa0 [ 107.645504][ T7367] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.645520][ T7367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.645537][ T7367] ? clear_bhb_loop+0x60/0xb0 [ 107.645557][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.645573][ T7367] RIP: 0033:0x7efd4078efc9 [ 107.645589][ T7367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.645602][ T7367] RSP: 002b:00007efd415f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.645620][ T7367] RAX: ffffffffffffffda RBX: 00007efd409e5fa0 RCX: 00007efd4078efc9 [ 107.645633][ T7367] RDX: 0000000020000804 RSI: 0000200000001800 RDI: 0000000000000004 [ 107.645643][ T7367] RBP: 00007efd415f6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.645653][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.645663][ T7367] R13: 00007efd409e6038 R14: 00007efd409e5fa0 R15: 00007fff94f9b6e8 [ 107.645694][ T7367] [ 108.050457][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 108.058418][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 108.068241][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 108.076469][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 108.086250][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 108.134660][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 108.151703][ T7361] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 108.537538][ T7417] FAULT_INJECTION: forcing a failure. [ 108.537538][ T7417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.552261][ T7417] CPU: 0 UID: 0 PID: 7417 Comm: syz.2.457 Not tainted syzkaller #0 PREEMPT(full) [ 108.552285][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.552295][ T7417] Call Trace: [ 108.552303][ T7417] [ 108.552310][ T7417] dump_stack_lvl+0x189/0x250 [ 108.552334][ T7417] ? __pfx____ratelimit+0x10/0x10 [ 108.552359][ T7417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.552377][ T7417] ? __pfx__printk+0x10/0x10 [ 108.552406][ T7417] should_fail_ex+0x414/0x560 [ 108.552436][ T7417] _copy_to_user+0x31/0xb0 [ 108.552459][ T7417] simple_read_from_buffer+0xe1/0x170 [ 108.552485][ T7417] proc_fail_nth_read+0x1b3/0x220 [ 108.552512][ T7417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.552537][ T7417] ? rw_verify_area+0x2a6/0x4d0 [ 108.552553][ T7417] ? __lock_acquire+0xab9/0xd20 [ 108.552572][ T7417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.552597][ T7417] vfs_read+0x200/0xa30 [ 108.552614][ T7417] ? fdget_pos+0x247/0x320 [ 108.552639][ T7417] ? __pfx___mutex_lock+0x10/0x10 [ 108.552659][ T7417] ? __pfx_vfs_read+0x10/0x10 [ 108.552679][ T7417] ? __fget_files+0x2a/0x420 [ 108.552703][ T7417] ? __fget_files+0x3a0/0x420 [ 108.552721][ T7417] ? __fget_files+0x2a/0x420 [ 108.552750][ T7417] ksys_read+0x145/0x250 [ 108.552771][ T7417] ? __pfx_ksys_read+0x10/0x10 [ 108.552791][ T7417] ? do_syscall_64+0xbe/0xfa0 [ 108.552813][ T7417] do_syscall_64+0xfa/0xfa0 [ 108.552829][ T7417] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.552846][ T7417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.552863][ T7417] ? clear_bhb_loop+0x60/0xb0 [ 108.552882][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.552898][ T7417] RIP: 0033:0x7fc194b8d9dc [ 108.552914][ T7417] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.552927][ T7417] RSP: 002b:00007fc192dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.552945][ T7417] RAX: ffffffffffffffda RBX: 00007fc194de6090 RCX: 00007fc194b8d9dc [ 108.552957][ T7417] RDX: 000000000000000f RSI: 00007fc192dd50a0 RDI: 0000000000000005 [ 108.552967][ T7417] RBP: 00007fc192dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 108.552977][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.552986][ T7417] R13: 00007fc194de6128 R14: 00007fc194de6090 R15: 00007ffdfdde3438 [ 108.553014][ T7417] [ 108.566295][ T7419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.733978][ T7425] ip6gre2: entered allmulticast mode [ 109.124341][ T7447] netem: incorrect ge model size [ 109.129806][ T7447] netem: change failed [ 109.528299][ T7463] syzkaller1: entered promiscuous mode [ 109.558173][ T7463] syzkaller1: entered allmulticast mode [ 109.586126][ T7471] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 109.824923][ T7487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.963151][ T7491] __nla_validate_parse: 6 callbacks suppressed [ 109.963169][ T7491] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.483'. [ 109.998452][ T7491] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.483'. [ 110.016479][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 110.026135][ T7497] Unsupported xt match [ 110.026151][ T7497] unable to load match [ 110.035183][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 110.051458][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 110.070117][ T7496] Unsupported xt match [ 110.070135][ T7496] unable to load match [ 110.093190][ T7491] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 110.116836][ T7504] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 110.259508][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 110.312981][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 110.349857][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 110.392467][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 110.410277][ T7515] ip6t_srh: unknown srh match flags 5F28 [ 110.416684][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 110.968239][ T7555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.975576][ T7555] IPv6: NLM_F_CREATE should be set when creating new route [ 110.982847][ T7555] IPv6: NLM_F_CREATE should be set when creating new route [ 111.001095][ T7555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.323753][ T7562] bridge0: port 3(syz_tun) entered disabled state [ 111.350523][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.357900][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.592309][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.664221][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.857859][ T7562] bond1: left promiscuous mode [ 111.863744][ T7562] macvlan2: left promiscuous mode [ 111.868945][ T7562] bond0: left promiscuous mode [ 111.874434][ T7562] bond_slave_0: left promiscuous mode [ 111.882777][ T7562] bond_slave_1: left promiscuous mode [ 112.035440][ T7572] team0 (unregistering): Port device team_slave_0 removed [ 112.049031][ T7572] team0 (unregistering): Port device team_slave_1 removed [ 112.075867][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.085632][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.115829][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.136212][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.791140][ T7629] syzkaller1: entered promiscuous mode [ 112.806778][ T7629] syzkaller1: entered allmulticast mode [ 113.219855][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.219873][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.882323][ T7710] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 113.915723][ T7710] ipt_REJECT: ECHOREPLY no longer supported. [ 114.586283][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 114.675353][ T7759] validate_nla: 26 callbacks suppressed [ 114.675370][ T7759] netlink: 'syz.3.555': attribute type 3 has an invalid length. [ 114.689889][ T7757] wg2: entered promiscuous mode [ 114.694771][ T7757] wg2: entered allmulticast mode [ 114.876521][ T7763] wg2: left promiscuous mode [ 114.889653][ T7763] wg2: left allmulticast mode [ 114.909227][ T7780] Bluetooth: hci0: unsupported parameter 512 [ 114.916013][ T7780] Bluetooth: hci0: unsupported parameter 6278 [ 114.924091][ T7780] Bluetooth: hci0: unsupported parameter 512 [ 114.956938][ T7780] Bluetooth: hci0: unsupported parameter 6278 [ 114.991594][ T7782] tipc: Started in network mode [ 115.000284][ T7782] tipc: Node identity 6e8b12dabdf6, cluster identity 4711 [ 115.008537][ T7780] netlink: 'syz.0.560': attribute type 9 has an invalid length. [ 115.020183][ T7782] tipc: Enabled bearer , priority 0 [ 115.027396][ T7785] tipc: Enabling of bearer rejected, already enabled [ 115.047607][ T7782] syzkaller0: entered promiscuous mode [ 115.061554][ T7782] syzkaller0: entered allmulticast mode [ 115.181076][ T7787] bond1: (slave bond_slave_1): Device is not our slave [ 115.188031][ T7787] bond1: option active_slave: invalid value (bond_slave_1) [ 115.202492][ T7787] bond1 (unregistering): Released all slaves [ 115.347946][ T7788] tipc: Resetting bearer [ 115.425055][ T7788] tipc: Disabling bearer [ 115.460814][ T7803] syzkaller0: entered promiscuous mode [ 115.485527][ T7803] syzkaller0: entered allmulticast mode [ 115.673212][ T7822] __nla_validate_parse: 63 callbacks suppressed [ 115.673229][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 115.711989][ T7822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.569'. [ 115.745855][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 115.808156][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 116.500684][ T7867] nbd: must specify at least one socket [ 116.853058][ T7888] xt_TCPMSS: Only works on TCP SYN packets [ 116.859241][ T7885] bridge_slave_1: entered promiscuous mode [ 116.907388][ T7885] bridge_slave_1: entered allmulticast mode [ 117.554322][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 117.599307][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 117.605867][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 117.612419][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 117.618854][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 117.625409][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 117.631865][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 117.638385][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 117.644857][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 117.651404][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 117.657833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.665795][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.673660][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.681582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.689407][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.697359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.705216][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.713200][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.721054][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.728957][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.736922][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.744871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.752740][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.760768][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.768614][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.776562][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.784410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.792348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.800212][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.808131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.815998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.823939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.831804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.839732][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.847725][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.855781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.863636][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.871675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.879601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.887508][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.895374][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.903336][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.911197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.919135][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.926996][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.934945][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.942872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.950820][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.958637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.966652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.974504][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.982541][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.990388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.998312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.004192][ T7929] xt_hashlimit: max too large, truncated to 1048576 [ 118.006155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.020675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.028760][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.036707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.044557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.052508][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.060355][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.068266][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.076131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.084087][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.091954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.099903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.107724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.115666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.123518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.131471][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.139381][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.147330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.155173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.163120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.170971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.178885][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.186792][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.194741][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.202611][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.210538][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.218364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.224238][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'. [ 118.226302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 118.243122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 118.768116][ T7955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.789273][ T7963] dvmrp0: entered allmulticast mode [ 118.815679][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.614'. [ 118.864159][ T7962] xt_bpf: check failed: parse error [ 118.885160][ T7971] FAULT_INJECTION: forcing a failure. [ 118.885160][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 118.919721][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.3.617 Not tainted syzkaller #0 PREEMPT(full) [ 118.919746][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.919754][ T7971] Call Trace: [ 118.919760][ T7971] [ 118.919766][ T7971] dump_stack_lvl+0x189/0x250 [ 118.919786][ T7971] ? __pfx____ratelimit+0x10/0x10 [ 118.919809][ T7971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.919826][ T7971] ? __pfx__printk+0x10/0x10 [ 118.919900][ T7971] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.919929][ T7971] should_fail_ex+0x414/0x560 [ 118.919953][ T7971] should_failslab+0xa8/0x100 [ 118.919972][ T7971] __kmalloc_cache_noprof+0x6f/0x6f0 [ 118.919988][ T7971] ? sctp_add_bind_addr+0x8c/0x370 [ 118.920000][ T7971] ? __pfx_sctp_get_port_local+0x10/0x10 [ 118.920028][ T7971] sctp_add_bind_addr+0x8c/0x370 [ 118.920040][ T7971] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 118.920059][ T7971] sctp_do_bind+0x5ab/0x940 [ 118.920084][ T7971] sctp_connect_new_asoc+0x25c/0x690 [ 118.920104][ T7971] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 118.920118][ T7971] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.920141][ T7971] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 118.920159][ T7971] ? security_sctp_bind_connect+0x7e/0x2e0 [ 118.920180][ T7971] sctp_sendmsg+0x155c/0x2810 [ 118.920204][ T7971] ? __pfx_sctp_sendmsg+0x10/0x10 [ 118.920222][ T7971] ? aa_sk_perm+0x81e/0x950 [ 118.920240][ T7971] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.920255][ T7971] ? sock_rps_record_flow+0x19/0x410 [ 118.920275][ T7971] ? inet_sendmsg+0x2f4/0x370 [ 118.920295][ T7971] __sock_sendmsg+0x19c/0x270 [ 118.920314][ T7971] __sys_sendto+0x3bd/0x520 [ 118.920334][ T7971] ? __pfx___sys_sendto+0x10/0x10 [ 118.920350][ T7971] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 118.920375][ T7971] ? __fget_files+0x3a0/0x420 [ 118.920399][ T7971] ? ksys_write+0x22a/0x250 [ 118.920415][ T7971] ? __pfx_ksys_write+0x10/0x10 [ 118.920432][ T7971] __x64_sys_sendto+0xde/0x100 [ 118.920452][ T7971] do_syscall_64+0xfa/0xfa0 [ 118.920465][ T7971] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.920478][ T7971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.920491][ T7971] ? clear_bhb_loop+0x60/0xb0 [ 118.920507][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.920519][ T7971] RIP: 0033:0x7efd4078efc9 [ 118.920533][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.920548][ T7971] RSP: 002b:00007efd415f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.920563][ T7971] RAX: ffffffffffffffda RBX: 00007efd409e5fa0 RCX: 00007efd4078efc9 [ 118.920573][ T7971] RDX: 000000000000ffe0 RSI: 0000200000000240 RDI: 0000000000000003 [ 118.920582][ T7971] RBP: 00007efd415f6090 R08: 0000200000000200 R09: 000000000000001c [ 118.920590][ T7971] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000001 [ 118.920599][ T7971] R13: 00007efd409e6038 R14: 00007efd409e5fa0 R15: 00007fff94f9b6e8 [ 118.920621][ T7971] [ 119.501526][ T7988] tipc: Enabling of bearer rejected, failed to enable media [ 119.813457][ T8010] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 119.821594][ T8010] netlink: 224 bytes leftover after parsing attributes in process `syz.2.630'. [ 119.837060][ T8010] nbd: couldn't find device at index 1048576 [ 119.968335][ T8015] FAULT_INJECTION: forcing a failure. [ 119.968335][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 120.013183][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.1.631 Not tainted syzkaller #0 PREEMPT(full) [ 120.013208][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.013218][ T8015] Call Trace: [ 120.013226][ T8015] [ 120.013233][ T8015] dump_stack_lvl+0x189/0x250 [ 120.013257][ T8015] ? __pfx____ratelimit+0x10/0x10 [ 120.013282][ T8015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.013300][ T8015] ? __pfx__printk+0x10/0x10 [ 120.013324][ T8015] ? __pfx___might_resched+0x10/0x10 [ 120.013345][ T8015] ? fs_reclaim_acquire+0x7d/0x100 [ 120.013370][ T8015] should_fail_ex+0x414/0x560 [ 120.013402][ T8015] should_failslab+0xa8/0x100 [ 120.013425][ T8015] __kmalloc_cache_noprof+0x6f/0x6f0 [ 120.013443][ T8015] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 120.013461][ T8015] ? sctp_association_new+0x89/0x25f0 [ 120.013482][ T8015] ? __asan_memcpy+0x40/0x70 [ 120.013503][ T8015] sctp_association_new+0x89/0x25f0 [ 120.013523][ T8015] ? sctp_do_bind+0x65a/0x940 [ 120.013549][ T8015] ? __ipv6_addr_type+0x247/0x2f0 [ 120.013576][ T8015] sctp_connect_new_asoc+0x2c5/0x690 [ 120.013600][ T8015] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 120.013619][ T8015] ? __local_bh_enable_ip+0x12d/0x1c0 [ 120.013649][ T8015] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 120.013671][ T8015] ? security_sctp_bind_connect+0x7e/0x2e0 [ 120.013698][ T8015] sctp_sendmsg+0x155c/0x2810 [ 120.013732][ T8015] ? __pfx_sctp_sendmsg+0x10/0x10 [ 120.013756][ T8015] ? aa_sk_perm+0x81e/0x950 [ 120.013779][ T8015] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.013798][ T8015] ? sock_rps_record_flow+0x19/0x410 [ 120.013824][ T8015] ? inet_sendmsg+0x2f4/0x370 [ 120.013849][ T8015] __sock_sendmsg+0x19c/0x270 [ 120.013873][ T8015] __sys_sendto+0x3bd/0x520 [ 120.013899][ T8015] ? __pfx___sys_sendto+0x10/0x10 [ 120.013920][ T8015] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 120.013952][ T8015] ? __fget_files+0x3a0/0x420 [ 120.013984][ T8015] ? ksys_write+0x22a/0x250 [ 120.014006][ T8015] ? __pfx_ksys_write+0x10/0x10 [ 120.014034][ T8015] __x64_sys_sendto+0xde/0x100 [ 120.014062][ T8015] do_syscall_64+0xfa/0xfa0 [ 120.014078][ T8015] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.014095][ T8015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.014113][ T8015] ? clear_bhb_loop+0x60/0xb0 [ 120.014134][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.014151][ T8015] RIP: 0033:0x7fe339b8efc9 [ 120.014167][ T8015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.014181][ T8015] RSP: 002b:00007fe33a99d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.014201][ T8015] RAX: ffffffffffffffda RBX: 00007fe339de5fa0 RCX: 00007fe339b8efc9 [ 120.014214][ T8015] RDX: 000000000000ffe0 RSI: 0000200000000240 RDI: 0000000000000003 [ 120.014226][ T8015] RBP: 00007fe33a99d090 R08: 0000200000000200 R09: 000000000000001c [ 120.014237][ T8015] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000001 [ 120.014248][ T8015] R13: 00007fe339de6038 R14: 00007fe339de5fa0 R15: 00007ffe86d9fca8 [ 120.014278][ T8015] [ 120.352577][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 120.425243][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 120.724132][ T8042] tipc: Enabling of bearer rejected, failed to enable media [ 120.790014][ T8051] __nla_validate_parse: 32 callbacks suppressed [ 120.790032][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 120.806499][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 120.843813][ T8049] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 120.885966][ T8058] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 121.013122][ T8058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.087598][ T8050] bond3: (slave ip6erspan0): making interface the new active one [ 121.099257][ T8050] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 121.237645][ T8070] Cannot find add_set index 1 as target [ 121.474095][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.482110][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.490061][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.497968][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.505930][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.509856][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 121.513865][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.530469][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.538390][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.546341][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.554271][ T8081] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 121.631416][ T8091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.649'. [ 121.670416][ T8087] netlink: 44 bytes leftover after parsing attributes in process `syz.0.649'. [ 121.708928][ T8078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.730826][ T8078] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.812400][ T8078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.846282][ T8078] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.871121][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 121.896534][ T8078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.914613][ T8078] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 121.935720][ T8078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.954454][ T8078] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 121.997419][ T8078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.012447][ T8078] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 122.236140][ T8124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.657'. [ 122.409757][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 122.519586][ T8140] SET target dimension over the limit! [ 122.585965][ T8140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 122.772065][ T8149] FAULT_INJECTION: forcing a failure. [ 122.772065][ T8149] name failslab, interval 1, probability 0, space 0, times 0 [ 122.813979][ T8149] CPU: 0 UID: 0 PID: 8149 Comm: syz.2.665 Not tainted syzkaller #0 PREEMPT(full) [ 122.814003][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.814012][ T8149] Call Trace: [ 122.814019][ T8149] [ 122.814027][ T8149] dump_stack_lvl+0x189/0x250 [ 122.814051][ T8149] ? __pfx____ratelimit+0x10/0x10 [ 122.814075][ T8149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.814093][ T8149] ? __pfx__printk+0x10/0x10 [ 122.814117][ T8149] ? __pfx___might_resched+0x10/0x10 [ 122.814139][ T8149] ? fs_reclaim_acquire+0x7d/0x100 [ 122.814165][ T8149] should_fail_ex+0x414/0x560 [ 122.814195][ T8149] should_failslab+0xa8/0x100 [ 122.814219][ T8149] __kmalloc_cache_noprof+0x6f/0x6f0 [ 122.814239][ T8149] ? sctp_transport_new+0x7e/0x640 [ 122.814269][ T8149] sctp_transport_new+0x7e/0x640 [ 122.814293][ T8149] sctp_assoc_add_peer+0x260/0x13b0 [ 122.814316][ T8149] ? sctp_bind_addr_copy+0x380/0x3c0 [ 122.814341][ T8149] sctp_connect_new_asoc+0x30a/0x690 [ 122.814364][ T8149] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 122.814383][ T8149] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 122.814404][ T8149] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 122.814422][ T8149] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 122.814442][ T8149] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 122.814464][ T8149] ? security_sctp_bind_connect+0x7e/0x2e0 [ 122.814490][ T8149] sctp_sendmsg+0x155c/0x2810 [ 122.814528][ T8149] ? __pfx_sctp_sendmsg+0x10/0x10 [ 122.814552][ T8149] ? aa_sk_perm+0x81e/0x950 [ 122.814576][ T8149] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.814596][ T8149] ? sock_rps_record_flow+0x19/0x410 [ 122.814622][ T8149] ? inet_sendmsg+0x2f4/0x370 [ 122.814642][ T8149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.814665][ T8149] __sock_sendmsg+0x19c/0x270 [ 122.814690][ T8149] __sys_sendto+0x3bd/0x520 [ 122.814716][ T8149] ? __pfx___sys_sendto+0x10/0x10 [ 122.814735][ T8149] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 122.814766][ T8149] ? __fget_files+0x3a0/0x420 [ 122.814797][ T8149] ? ksys_write+0x22a/0x250 [ 122.814817][ T8149] ? __pfx_ksys_write+0x10/0x10 [ 122.814840][ T8149] __x64_sys_sendto+0xde/0x100 [ 122.814867][ T8149] do_syscall_64+0xfa/0xfa0 [ 122.814883][ T8149] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.814899][ T8149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.814916][ T8149] ? clear_bhb_loop+0x60/0xb0 [ 122.814937][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.814954][ T8149] RIP: 0033:0x7fc194b8efc9 [ 122.814970][ T8149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.814983][ T8149] RSP: 002b:00007fc192df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 122.815002][ T8149] RAX: ffffffffffffffda RBX: 00007fc194de5fa0 RCX: 00007fc194b8efc9 [ 122.815015][ T8149] RDX: 000000000000ffe0 RSI: 0000200000000240 RDI: 0000000000000003 [ 122.815025][ T8149] RBP: 00007fc192df6090 R08: 0000200000000200 R09: 000000000000001c [ 122.815036][ T8149] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000001 [ 122.815047][ T8149] R13: 00007fc194de6038 R14: 00007fc194de5fa0 R15: 00007ffdfdde3438 [ 122.815077][ T8149] [ 123.216674][ T8158] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 123.224920][ T8158] netlink: 'syz.4.667': attribute type 3 has an invalid length. [ 123.232691][ T8158] netlink: 'syz.4.667': attribute type 235 has an invalid length. [ 123.266069][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 123.267779][ T8153] tipc: Started in network mode [ 123.280217][ T8153] tipc: Node identity ac1414aa, cluster identity 4711 [ 123.287592][ T8153] tipc: Enabling of bearer rejected, failed to enable media [ 123.795307][ T8179] veth0: entered promiscuous mode [ 124.002531][ T8209] FAULT_INJECTION: forcing a failure. [ 124.002531][ T8209] name failslab, interval 1, probability 0, space 0, times 0 [ 124.022456][ T8209] CPU: 0 UID: 0 PID: 8209 Comm: syz.1.678 Not tainted syzkaller #0 PREEMPT(full) [ 124.022480][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.022489][ T8209] Call Trace: [ 124.022496][ T8209] [ 124.022503][ T8209] dump_stack_lvl+0x189/0x250 [ 124.022527][ T8209] ? __pfx____ratelimit+0x10/0x10 [ 124.022552][ T8209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.022568][ T8209] ? __pfx__printk+0x10/0x10 [ 124.022582][ T8209] ? crng_make_state+0x34c/0x700 [ 124.022605][ T8209] ? crng_make_state+0x3fc/0x700 [ 124.022625][ T8209] ? crng_make_state+0x13a/0x700 [ 124.022647][ T8209] should_fail_ex+0x414/0x560 [ 124.022677][ T8209] should_failslab+0xa8/0x100 [ 124.022701][ T8209] __kmalloc_cache_noprof+0x6f/0x6f0 [ 124.022720][ T8209] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 124.022735][ T8209] ? sctp_add_bind_addr+0x8c/0x370 [ 124.022756][ T8209] sctp_add_bind_addr+0x8c/0x370 [ 124.022778][ T8209] sctp_copy_local_addr_list+0x30b/0x4e0 [ 124.022798][ T8209] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 124.022815][ T8209] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 124.022829][ T8209] ? sctp_association_new+0x18b3/0x25f0 [ 124.022851][ T8209] ? sctp_v6_is_any+0x64/0x80 [ 124.022871][ T8209] ? sctp_copy_one_addr+0x93/0x360 [ 124.022891][ T8209] sctp_bind_addr_copy+0xb3/0x3c0 [ 124.022908][ T8209] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 124.022931][ T8209] sctp_connect_new_asoc+0x2e0/0x690 [ 124.022954][ T8209] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 124.022971][ T8209] ? __local_bh_enable_ip+0x12d/0x1c0 [ 124.022999][ T8209] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 124.023021][ T8209] ? security_sctp_bind_connect+0x7e/0x2e0 [ 124.023048][ T8209] sctp_sendmsg+0x155c/0x2810 [ 124.023079][ T8209] ? __pfx_sctp_sendmsg+0x10/0x10 [ 124.023102][ T8209] ? aa_sk_perm+0x81e/0x950 [ 124.023124][ T8209] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.023145][ T8209] ? sock_rps_record_flow+0x19/0x410 [ 124.023168][ T8209] ? inet_sendmsg+0x2f4/0x370 [ 124.023192][ T8209] __sock_sendmsg+0x19c/0x270 [ 124.023213][ T8209] __sys_sendto+0x3bd/0x520 [ 124.023238][ T8209] ? __pfx___sys_sendto+0x10/0x10 [ 124.023258][ T8209] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 124.023289][ T8209] ? __fget_files+0x3a0/0x420 [ 124.023330][ T8209] ? ksys_write+0x22a/0x250 [ 124.023351][ T8209] ? __pfx_ksys_write+0x10/0x10 [ 124.023373][ T8209] __x64_sys_sendto+0xde/0x100 [ 124.023400][ T8209] do_syscall_64+0xfa/0xfa0 [ 124.023415][ T8209] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.023432][ T8209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.023453][ T8209] ? clear_bhb_loop+0x60/0xb0 [ 124.023473][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.023490][ T8209] RIP: 0033:0x7fe339b8efc9 [ 124.023507][ T8209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.023520][ T8209] RSP: 002b:00007fe33a99d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 124.023539][ T8209] RAX: ffffffffffffffda RBX: 00007fe339de5fa0 RCX: 00007fe339b8efc9 [ 124.023552][ T8209] RDX: 000000000000ffe0 RSI: 0000200000000240 RDI: 0000000000000003 [ 124.023562][ T8209] RBP: 00007fe33a99d090 R08: 0000200000000200 R09: 000000000000001c [ 124.023573][ T8209] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000001 [ 124.023583][ T8209] R13: 00007fe339de6038 R14: 00007fe339de5fa0 R15: 00007ffe86d9fca8 [ 124.023613][ T8209] [ 124.511092][ T8216] tipc: Enabled bearer , priority 0 [ 124.730226][ T8216] syzkaller0: entered promiscuous mode [ 124.770528][ T8216] syzkaller0: entered allmulticast mode [ 124.776866][ T8216] tipc: Resetting bearer [ 124.910923][ T24] IPVS: starting estimator thread 0... [ 124.989925][ T8221] tipc: Resetting bearer [ 125.000280][ T8242] IPVS: using max 24 ests per chain, 57600 per kthread [ 125.318864][ T8264] FAULT_INJECTION: forcing a failure. [ 125.318864][ T8264] name failslab, interval 1, probability 0, space 0, times 0 [ 125.331931][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.3.689 Not tainted syzkaller #0 PREEMPT(full) [ 125.331953][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.331963][ T8264] Call Trace: [ 125.331971][ T8264] [ 125.331978][ T8264] dump_stack_lvl+0x189/0x250 [ 125.332001][ T8264] ? __pfx____ratelimit+0x10/0x10 [ 125.332027][ T8264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.332045][ T8264] ? __pfx__printk+0x10/0x10 [ 125.332078][ T8264] should_fail_ex+0x414/0x560 [ 125.332109][ T8264] should_failslab+0xa8/0x100 [ 125.332133][ T8264] __kmalloc_cache_noprof+0x6f/0x6f0 [ 125.332152][ T8264] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 125.332168][ T8264] ? sctp_add_bind_addr+0x8c/0x370 [ 125.332184][ T8264] ? sctp_add_bind_addr+0xb0/0x370 [ 125.332205][ T8264] sctp_add_bind_addr+0x8c/0x370 [ 125.332228][ T8264] sctp_copy_local_addr_list+0x30b/0x4e0 [ 125.332249][ T8264] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 125.332276][ T8264] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 125.332291][ T8264] ? sctp_association_new+0x18b3/0x25f0 [ 125.332314][ T8264] ? sctp_v6_is_any+0x64/0x80 [ 125.332334][ T8264] ? sctp_copy_one_addr+0x93/0x360 [ 125.332355][ T8264] sctp_bind_addr_copy+0xb3/0x3c0 [ 125.332374][ T8264] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 125.332402][ T8264] sctp_connect_new_asoc+0x2e0/0x690 [ 125.332427][ T8264] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 125.332445][ T8264] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.332475][ T8264] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 125.332497][ T8264] ? security_sctp_bind_connect+0x7e/0x2e0 [ 125.332523][ T8264] sctp_sendmsg+0x155c/0x2810 [ 125.332556][ T8264] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.332580][ T8264] ? aa_sk_perm+0x81e/0x950 [ 125.332604][ T8264] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.332624][ T8264] ? sock_rps_record_flow+0x19/0x410 [ 125.332649][ T8264] ? inet_sendmsg+0x2f4/0x370 [ 125.332675][ T8264] __sock_sendmsg+0x19c/0x270 [ 125.332699][ T8264] __sys_sendto+0x3bd/0x520 [ 125.332724][ T8264] ? __pfx___sys_sendto+0x10/0x10 [ 125.332743][ T8264] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 125.332773][ T8264] ? __fget_files+0x3a0/0x420 [ 125.332808][ T8264] ? ksys_write+0x22a/0x250 [ 125.332829][ T8264] ? __pfx_ksys_write+0x10/0x10 [ 125.332851][ T8264] __x64_sys_sendto+0xde/0x100 [ 125.332875][ T8264] do_syscall_64+0xfa/0xfa0 [ 125.332887][ T8264] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.332900][ T8264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.332913][ T8264] ? clear_bhb_loop+0x60/0xb0 [ 125.332929][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.332942][ T8264] RIP: 0033:0x7efd4078efc9 [ 125.332954][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.332965][ T8264] RSP: 002b:00007efd415f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.332981][ T8264] RAX: ffffffffffffffda RBX: 00007efd409e5fa0 RCX: 00007efd4078efc9 [ 125.332990][ T8264] RDX: 000000000000ffe0 RSI: 0000200000000240 RDI: 0000000000000003 [ 125.332999][ T8264] RBP: 00007efd415f6090 R08: 0000200000000200 R09: 000000000000001c [ 125.333008][ T8264] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000001 [ 125.333016][ T8264] R13: 00007efd409e6038 R14: 00007efd409e5fa0 R15: 00007fff94f9b6e8 [ 125.333039][ T8264] [ 126.595803][ T8221] tipc: Disabling bearer [ 126.607622][ T8250] netlink: 'syz.0.687': attribute type 29 has an invalid length. [ 126.621647][ T8255] 8ÿ: entered promiscuous mode [ 126.951021][ T8289] __nla_validate_parse: 6 callbacks suppressed [ 126.951038][ T8289] netlink: 14 bytes leftover after parsing attributes in process `syz.0.696'. [ 127.381489][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b59c00: rx timeout, send abort [ 127.447704][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 127.645628][ T8289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.730263][ T8289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.813839][ T8289] bond0 (unregistering): Released all slaves [ 127.881599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b59800: rx timeout, send abort [ 127.890658][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b59c00: abort rx timeout. Force session deactivation [ 127.952717][ T8317] ip6gre1: entered allmulticast mode [ 128.059117][ T8328] tipc: Started in network mode [ 128.088286][ T8328] tipc: Node identity 66215d8621dc, cluster identity 4711 [ 128.100449][ T8328] tipc: Enabled bearer , priority 0 [ 128.224666][ T8327] tipc: Resetting bearer [ 128.272661][ T8329] syzkaller0: entered promiscuous mode [ 128.278168][ T8329] syzkaller0: entered allmulticast mode [ 128.332436][ T8325] tipc: Resetting bearer [ 128.470236][ T8325] tipc: Disabling bearer [ 128.563405][ T8352] tipc: Enabling of bearer rejected, failed to enable media [ 128.633187][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'. [ 128.961390][ T8375] sctp: [Deprecated]: syz.1.710 (pid 8375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.961390][ T8375] Use struct sctp_sack_info instead [ 129.006758][ T8375] net_ratelimit: 46 callbacks suppressed [ 129.006775][ T8375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.036936][ T13] nci: nci_rx_work: unknown MT 0x7 [ 129.211104][ T8386] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 129.230892][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 130.056522][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 130.113773][ T8428] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ [ 130.230507][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.726'. [ 130.388417][ T8453] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.728'. [ 130.712636][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 131.053122][ T8490] netem: incorrect gi model size [ 131.058178][ T8490] netem: change failed [ 131.280959][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'. [ 131.404925][ T8516] xt_time: unknown flags 0xf4 [ 131.437991][ T8516] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 131.676504][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.743'. [ 131.946782][ T8541] wlan0: mtu less than device minimum [ 131.998449][ T8541] __nla_validate_parse: 1 callbacks suppressed [ 131.998467][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 132.076330][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.745'. [ 132.128391][ T8553] netem: incorrect gi model size [ 132.146740][ T8553] netem: change failed [ 132.302971][ T8541] bridge5: port 1(bond2) entered blocking state [ 132.336226][ T8541] bridge5: port 1(bond2) entered disabled state [ 132.387274][ T8541] bond2: entered allmulticast mode [ 132.419117][ T8541] bond2: entered promiscuous mode [ 132.469271][ T8556] bridge5: port 2(gretap3) entered blocking state [ 132.485378][ T8556] bridge5: port 2(gretap3) entered disabled state [ 132.496082][ T8556] gretap3: entered allmulticast mode [ 132.505683][ T8556] gretap3: entered promiscuous mode [ 132.804967][ T8592] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 132.994554][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.224940][ T8611] netlink: 'syz.1.764': attribute type 10 has an invalid length. [ 133.255213][ T8611] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 133.293766][ T8615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.765'. [ 133.433480][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 133.441664][ T8625] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 133.491264][ T8623] netlink: 160 bytes leftover after parsing attributes in process `syz.1.768'. [ 133.501346][ T8623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.768'. [ 133.565252][ T8629] netlink: 'syz.2.770': attribute type 33 has an invalid length. [ 133.573111][ T8629] netlink: 152 bytes leftover after parsing attributes in process `syz.2.770'. [ 133.619163][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 133.670458][ T8633] netlink: 'syz.3.773': attribute type 10 has an invalid length. [ 133.693729][ T8633] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 133.749954][ T8633] 8021q: VLANs not supported on ip_vti0 [ 133.791414][ T8644] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 133.930247][ T8660] FAULT_INJECTION: forcing a failure. [ 133.930247][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 133.969709][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.0.777 Not tainted syzkaller #0 PREEMPT(full) [ 133.969733][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.969747][ T8660] Call Trace: [ 133.969754][ T8660] [ 133.969761][ T8660] dump_stack_lvl+0x189/0x250 [ 133.969783][ T8660] ? __pfx____ratelimit+0x10/0x10 [ 133.969809][ T8660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.969828][ T8660] ? __pfx__printk+0x10/0x10 [ 133.969859][ T8660] should_fail_ex+0x414/0x560 [ 133.969891][ T8660] should_failslab+0xa8/0x100 [ 133.969914][ T8660] __kmalloc_cache_noprof+0x6f/0x6f0 [ 133.969934][ T8660] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 133.969948][ T8660] ? sctp_add_bind_addr+0x8c/0x370 [ 133.969971][ T8660] sctp_add_bind_addr+0x8c/0x370 [ 133.969991][ T8660] sctp_copy_local_addr_list+0x30b/0x4e0 [ 133.970007][ T8660] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 133.970021][ T8660] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 133.970041][ T8660] ? sctp_v4_is_any+0x35/0x60 [ 133.970057][ T8660] ? sctp_copy_one_addr+0x93/0x360 [ 133.970077][ T8660] sctp_bind_addr_copy+0xb3/0x3c0 [ 133.970095][ T8660] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 133.970120][ T8660] sctp_connect_new_asoc+0x2e0/0x690 [ 133.970141][ T8660] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 133.970156][ T8660] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.970181][ T8660] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 133.970199][ T8660] ? security_sctp_bind_connect+0x7e/0x2e0 [ 133.970220][ T8660] sctp_sendmsg+0x155c/0x2810 [ 133.970251][ T8660] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.970275][ T8660] ? aa_sk_perm+0x81e/0x950 [ 133.970293][ T8660] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.970314][ T8660] ? sock_rps_record_flow+0x19/0x410 [ 133.970338][ T8660] ? inet_sendmsg+0x2f4/0x370 [ 133.970362][ T8660] __sock_sendmsg+0x19c/0x270 [ 133.970386][ T8660] ____sys_sendmsg+0x505/0x830 [ 133.970426][ T8660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.970461][ T8660] ? import_iovec+0x74/0xa0 [ 133.970487][ T8660] ___sys_sendmsg+0x21f/0x2a0 [ 133.970505][ T8660] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.970561][ T8660] ? __fget_files+0x2a/0x420 [ 133.970582][ T8660] ? __fget_files+0x3a0/0x420 [ 133.970615][ T8660] __x64_sys_sendmsg+0x19b/0x260 [ 133.970635][ T8660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.970669][ T8660] ? do_syscall_64+0xbe/0xfa0 [ 133.970691][ T8660] do_syscall_64+0xfa/0xfa0 [ 133.970710][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.970727][ T8660] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.970745][ T8660] ? clear_bhb_loop+0x60/0xb0 [ 133.970766][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.970784][ T8660] RIP: 0033:0x7f6b0198efc9 [ 133.970801][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.970815][ T8660] RSP: 002b:00007f6b02800038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.970835][ T8660] RAX: ffffffffffffffda RBX: 00007f6b01be5fa0 RCX: 00007f6b0198efc9 [ 133.970848][ T8660] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 133.970859][ T8660] RBP: 00007f6b02800090 R08: 0000000000000000 R09: 0000000000000000 [ 133.970871][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.970882][ T8660] R13: 00007f6b01be6038 R14: 00007f6b01be5fa0 R15: 00007ffe91ae3ce8 [ 133.970914][ T8660] [ 133.976193][ T8645] macvlan2: entered promiscuous mode [ 134.163539][ T8666] netlink: 64 bytes leftover after parsing attributes in process `syz.0.778'. [ 134.176121][ T8645] macvlan2: entered allmulticast mode [ 134.235488][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 134.242988][ T8645] bond4: entered promiscuous mode [ 134.353148][ T8645] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.371109][ T8645] bond4: left promiscuous mode [ 134.722440][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.743786][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.755781][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.798664][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.913149][ T8703] FAULT_INJECTION: forcing a failure. [ 134.913149][ T8703] name failslab, interval 1, probability 0, space 0, times 0 [ 134.949692][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT(full) [ 134.949717][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.949728][ T8703] Call Trace: [ 134.949735][ T8703] [ 134.949743][ T8703] dump_stack_lvl+0x189/0x250 [ 134.949766][ T8703] ? __pfx____ratelimit+0x10/0x10 [ 134.949791][ T8703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.949807][ T8703] ? __pfx__printk+0x10/0x10 [ 134.949840][ T8703] should_fail_ex+0x414/0x560 [ 134.949870][ T8703] should_failslab+0xa8/0x100 [ 134.949893][ T8703] __kmalloc_cache_noprof+0x6f/0x6f0 [ 134.949912][ T8703] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 134.949927][ T8703] ? sctp_add_bind_addr+0x8c/0x370 [ 134.949951][ T8703] sctp_add_bind_addr+0x8c/0x370 [ 134.949973][ T8703] sctp_copy_local_addr_list+0x30b/0x4e0 [ 134.949994][ T8703] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 134.950012][ T8703] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 134.950034][ T8703] ? sctp_v4_is_any+0x35/0x60 [ 134.950051][ T8703] ? sctp_copy_one_addr+0x93/0x360 [ 134.950072][ T8703] sctp_bind_addr_copy+0xb3/0x3c0 [ 134.950090][ T8703] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 134.950119][ T8703] sctp_connect_new_asoc+0x2e0/0x690 [ 134.950143][ T8703] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 134.950161][ T8703] ? __local_bh_enable_ip+0x12d/0x1c0 [ 134.950193][ T8703] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 134.950215][ T8703] ? security_sctp_bind_connect+0x7e/0x2e0 [ 134.950242][ T8703] sctp_sendmsg+0x155c/0x2810 [ 134.950272][ T8703] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.950292][ T8703] ? aa_sk_perm+0x81e/0x950 [ 134.950312][ T8703] ? __pfx_aa_sk_perm+0x10/0x10 [ 134.950334][ T8703] ? sock_rps_record_flow+0x19/0x410 [ 134.950360][ T8703] ? inet_sendmsg+0x2f4/0x370 [ 134.950385][ T8703] __sock_sendmsg+0x19c/0x270 [ 134.950411][ T8703] ____sys_sendmsg+0x505/0x830 [ 134.950443][ T8703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.950478][ T8703] ? import_iovec+0x74/0xa0 [ 134.950513][ T8703] ___sys_sendmsg+0x21f/0x2a0 [ 134.950535][ T8703] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.950591][ T8703] ? __fget_files+0x2a/0x420 [ 134.950612][ T8703] ? __fget_files+0x3a0/0x420 [ 134.950644][ T8703] __x64_sys_sendmsg+0x19b/0x260 [ 134.950665][ T8703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.950694][ T8703] ? rcu_is_watching+0x15/0xb0 [ 134.950732][ T8703] do_syscall_64+0xfa/0xfa0 [ 134.950748][ T8703] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.950766][ T8703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.950783][ T8703] ? clear_bhb_loop+0x60/0xb0 [ 134.950805][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.950823][ T8703] RIP: 0033:0x7f6b0198efc9 [ 134.950839][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.950854][ T8703] RSP: 002b:00007f6b02800038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.950873][ T8703] RAX: ffffffffffffffda RBX: 00007f6b01be5fa0 RCX: 00007f6b0198efc9 [ 134.950885][ T8703] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 134.950897][ T8703] RBP: 00007f6b02800090 R08: 0000000000000000 R09: 0000000000000000 [ 134.950908][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.950918][ T8703] R13: 00007f6b01be6038 R14: 00007f6b01be5fa0 R15: 00007ffe91ae3ce8 [ 134.950948][ T8703] [ 135.350307][ T8709] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 135.661237][ T8719] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 135.674330][ T8710] bond5: (slave gretap1): making interface the new active one [ 135.740870][ T8710] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 135.936559][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.993730][ T8732] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.025988][ T8735] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 136.041658][ T8735] bond6 (unregistering): Released all slaves [ 136.099726][ T8732] netlink: 'syz.4.794': attribute type 12 has an invalid length. [ 136.109414][ T8732] netlink: 'syz.4.794': attribute type 29 has an invalid length. [ 136.118817][ T8732] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 136.396156][ T8758] FAULT_INJECTION: forcing a failure. [ 136.396156][ T8758] name failslab, interval 1, probability 0, space 0, times 0 [ 136.452129][ T8758] CPU: 1 UID: 0 PID: 8758 Comm: syz.1.802 Not tainted syzkaller #0 PREEMPT(full) [ 136.452154][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.452164][ T8758] Call Trace: [ 136.452172][ T8758] [ 136.452180][ T8758] dump_stack_lvl+0x189/0x250 [ 136.452204][ T8758] ? __pfx____ratelimit+0x10/0x10 [ 136.452230][ T8758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.452249][ T8758] ? __pfx__printk+0x10/0x10 [ 136.452283][ T8758] should_fail_ex+0x414/0x560 [ 136.452314][ T8758] should_failslab+0xa8/0x100 [ 136.452338][ T8758] __kmalloc_cache_noprof+0x6f/0x6f0 [ 136.452357][ T8758] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 136.452373][ T8758] ? sctp_add_bind_addr+0x8c/0x370 [ 136.452398][ T8758] sctp_add_bind_addr+0x8c/0x370 [ 136.452420][ T8758] sctp_copy_local_addr_list+0x30b/0x4e0 [ 136.452442][ T8758] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 136.452460][ T8758] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 136.452483][ T8758] ? sctp_v4_is_any+0x35/0x60 [ 136.452500][ T8758] ? sctp_copy_one_addr+0x93/0x360 [ 136.452522][ T8758] sctp_bind_addr_copy+0xb3/0x3c0 [ 136.452541][ T8758] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 136.452569][ T8758] sctp_connect_new_asoc+0x2e0/0x690 [ 136.452594][ T8758] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 136.452613][ T8758] ? __local_bh_enable_ip+0x12d/0x1c0 [ 136.452645][ T8758] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 136.452668][ T8758] ? security_sctp_bind_connect+0x7e/0x2e0 [ 136.452695][ T8758] sctp_sendmsg+0x155c/0x2810 [ 136.452730][ T8758] ? __pfx_sctp_sendmsg+0x10/0x10 [ 136.452755][ T8758] ? aa_sk_perm+0x81e/0x950 [ 136.452779][ T8758] ? __pfx_aa_sk_perm+0x10/0x10 [ 136.452801][ T8758] ? sock_rps_record_flow+0x19/0x410 [ 136.452827][ T8758] ? inet_sendmsg+0x2f4/0x370 [ 136.452854][ T8758] __sock_sendmsg+0x19c/0x270 [ 136.452880][ T8758] ____sys_sendmsg+0x505/0x830 [ 136.452912][ T8758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.452949][ T8758] ? import_iovec+0x74/0xa0 [ 136.452975][ T8758] ___sys_sendmsg+0x21f/0x2a0 [ 136.452995][ T8758] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.453053][ T8758] ? __fget_files+0x2a/0x420 [ 136.453073][ T8758] ? __fget_files+0x3a0/0x420 [ 136.453158][ T8758] __x64_sys_sendmsg+0x19b/0x260 [ 136.453178][ T8758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.453206][ T8758] ? __pfx_ksys_write+0x10/0x10 [ 136.453229][ T8758] ? do_syscall_64+0xbe/0xfa0 [ 136.453250][ T8758] do_syscall_64+0xfa/0xfa0 [ 136.453265][ T8758] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.453282][ T8758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.453299][ T8758] ? clear_bhb_loop+0x60/0xb0 [ 136.453321][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.453338][ T8758] RIP: 0033:0x7fe339b8efc9 [ 136.453353][ T8758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.453367][ T8758] RSP: 002b:00007fe33a99d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.453386][ T8758] RAX: ffffffffffffffda RBX: 00007fe339de5fa0 RCX: 00007fe339b8efc9 [ 136.453398][ T8758] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 136.453410][ T8758] RBP: 00007fe33a99d090 R08: 0000000000000000 R09: 0000000000000000 [ 136.453421][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.453432][ T8758] R13: 00007fe339de6038 R14: 00007fe339de5fa0 R15: 00007ffe86d9fca8 [ 136.453466][ T8758] [ 137.528263][ T8807] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 137.568694][ T8813] FAULT_INJECTION: forcing a failure. [ 137.568694][ T8813] name failslab, interval 1, probability 0, space 0, times 0 [ 137.609729][ T8813] CPU: 1 UID: 0 PID: 8813 Comm: syz.2.819 Not tainted syzkaller #0 PREEMPT(full) [ 137.609756][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.609767][ T8813] Call Trace: [ 137.609775][ T8813] [ 137.609783][ T8813] dump_stack_lvl+0x189/0x250 [ 137.609807][ T8813] ? __pfx____ratelimit+0x10/0x10 [ 137.609833][ T8813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.609851][ T8813] ? __pfx__printk+0x10/0x10 [ 137.609886][ T8813] should_fail_ex+0x414/0x560 [ 137.609918][ T8813] should_failslab+0xa8/0x100 [ 137.609943][ T8813] __kmalloc_cache_noprof+0x6f/0x6f0 [ 137.609962][ T8813] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 137.609978][ T8813] ? sctp_add_bind_addr+0x8c/0x370 [ 137.610004][ T8813] sctp_add_bind_addr+0x8c/0x370 [ 137.610026][ T8813] sctp_copy_local_addr_list+0x30b/0x4e0 [ 137.610048][ T8813] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 137.610066][ T8813] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 137.610088][ T8813] ? sctp_v4_is_any+0x35/0x60 [ 137.610105][ T8813] ? sctp_copy_one_addr+0x93/0x360 [ 137.610127][ T8813] sctp_bind_addr_copy+0xb3/0x3c0 [ 137.610146][ T8813] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 137.610174][ T8813] sctp_connect_new_asoc+0x2e0/0x690 [ 137.610198][ T8813] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 137.610218][ T8813] ? __local_bh_enable_ip+0x12d/0x1c0 [ 137.610250][ T8813] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 137.610271][ T8813] ? security_sctp_bind_connect+0x7e/0x2e0 [ 137.610299][ T8813] sctp_sendmsg+0x155c/0x2810 [ 137.610340][ T8813] ? __pfx_sctp_sendmsg+0x10/0x10 [ 137.610365][ T8813] ? aa_sk_perm+0x81e/0x950 [ 137.610389][ T8813] ? __pfx_aa_sk_perm+0x10/0x10 [ 137.610411][ T8813] ? sock_rps_record_flow+0x19/0x410 [ 137.610438][ T8813] ? inet_sendmsg+0x2f4/0x370 [ 137.610465][ T8813] __sock_sendmsg+0x19c/0x270 [ 137.610490][ T8813] ____sys_sendmsg+0x505/0x830 [ 137.610522][ T8813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.610557][ T8813] ? import_iovec+0x74/0xa0 [ 137.610584][ T8813] ___sys_sendmsg+0x21f/0x2a0 [ 137.610604][ T8813] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.610661][ T8813] ? __fget_files+0x2a/0x420 [ 137.610681][ T8813] ? __fget_files+0x3a0/0x420 [ 137.610713][ T8813] __x64_sys_sendmsg+0x19b/0x260 [ 137.610734][ T8813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.610762][ T8813] ? __pfx_ksys_write+0x10/0x10 [ 137.610786][ T8813] ? do_syscall_64+0xbe/0xfa0 [ 137.610808][ T8813] do_syscall_64+0xfa/0xfa0 [ 137.610824][ T8813] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.610840][ T8813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.610857][ T8813] ? clear_bhb_loop+0x60/0xb0 [ 137.610879][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.610896][ T8813] RIP: 0033:0x7fc194b8efc9 [ 137.610912][ T8813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.610928][ T8813] RSP: 002b:00007fc192df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.610947][ T8813] RAX: ffffffffffffffda RBX: 00007fc194de5fa0 RCX: 00007fc194b8efc9 [ 137.610959][ T8813] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 137.610970][ T8813] RBP: 00007fc192df6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.610980][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.610990][ T8813] R13: 00007fc194de6038 R14: 00007fc194de5fa0 R15: 00007ffdfdde3438 [ 137.611020][ T8813] [ 137.951147][ T8818] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 138.057894][ T8823] validate_nla: 1 callbacks suppressed [ 138.057911][ T8823] netlink: 'syz.2.822': attribute type 8 has an invalid length. [ 138.214672][ T8829] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 138.234089][ T8829] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 138.250636][ T8835] openvswitch: netlink: Key 6 has unexpected len 19 expected 2 [ 138.275964][ T8837] xt_bpf: check failed: parse error [ 138.324227][ T8836] __nla_validate_parse: 11 callbacks suppressed [ 138.324247][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'. [ 138.919123][ T8906] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20004 [ 139.005517][ T8911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 139.048470][ T8915] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 139.100171][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 139.116893][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.839'. [ 139.131291][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.841'. [ 139.209350][ T8915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.297830][ T8932] netlink: 'syz.2.843': attribute type 33 has an invalid length. [ 139.308104][ T8916] veth1: entered promiscuous mode [ 139.363230][ T8932] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 139.392309][ T8932] bond2 (unregistering): Released all slaves [ 139.488052][ T8942] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 139.540893][ T52] Bluetooth: hci0: command tx timeout [ 139.605936][ T8946] netlink: 'syz.0.847': attribute type 11 has an invalid length. [ 139.622625][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.0.847'. [ 139.654414][ T8951] netlink: 'syz.4.850': attribute type 12 has an invalid length. [ 139.815901][ T8956] netlink: 284 bytes leftover after parsing attributes in process `syz.0.852'. [ 139.853556][ T8960] netlink: 11 bytes leftover after parsing attributes in process `syz.1.854'. [ 139.863066][ T8960] netlink: 11 bytes leftover after parsing attributes in process `syz.1.854'. [ 139.882802][ T8960] netlink: 11 bytes leftover after parsing attributes in process `syz.1.854'. [ 139.907782][ T8963] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 139.916378][ T8963] netlink: 'syz.0.855': attribute type 4 has an invalid length. [ 139.953351][ T8967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.236584][ T8987] tipc: Enabled bearer , priority 0 [ 140.252182][ T8985] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.262465][ T8985] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.339763][ T8985] tipc: Disabling bearer [ 140.575925][ T8997] netlink: 'syz.2.866': attribute type 1 has an invalid length. [ 140.695387][ T9010] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 140.705933][ T8997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.794807][ T8998] bond2: (slave veth5): Enslaving as an active interface with a down link [ 140.929511][ T8997] veth7: entered promiscuous mode [ 140.943745][ T8997] bond2: (slave veth7): Enslaving as an active interface with a down link [ 141.142778][ T9031] netlink: del zone limit has 8 unknown bytes [ 141.430848][ T9045] tipc: Enabled bearer , priority 0 [ 141.614819][ T9045] syzkaller0: entered promiscuous mode [ 141.622297][ T9045] syzkaller0: entered allmulticast mode [ 141.628493][ T9045] tipc: Resetting bearer [ 141.658915][ T9042] tipc: Resetting bearer [ 142.510439][ T5894] tipc: Node number set to 2886997162 [ 143.268618][ T9042] tipc: Disabling bearer [ 143.372982][ T9100] syzkaller1: entered promiscuous mode [ 143.378503][ T9100] syzkaller1: entered allmulticast mode [ 143.753076][ T9131] syzkaller0: entered promiscuous mode [ 143.758707][ T9131] syzkaller0: entered allmulticast mode [ 144.084578][ T9145] __nla_validate_parse: 7 callbacks suppressed [ 144.084596][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.906'. [ 144.140108][ T9149] geneve2: entered promiscuous mode [ 144.145822][ T9145] netlink: 44 bytes leftover after parsing attributes in process `syz.2.906'. [ 144.148618][ T9149] geneve2: entered allmulticast mode [ 144.162268][ T8868] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.171769][ T8868] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.186849][ T8868] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.199079][ T8868] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.208786][ T9148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.321256][ T9148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.321647][ T9161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.336532][ T9148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 144.360049][ T9149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.378913][ T9161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.911'. [ 144.495725][ T9148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.506892][ T9148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 144.587171][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 144.640161][ T9148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.651966][ T9148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 144.749330][ T9148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.763967][ T9148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 144.891329][ T8871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 144.901028][ T8871] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.927079][ T8871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 144.935698][ T8871] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.957910][ T8871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 144.966560][ T8871] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.000645][ T8871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 145.018904][ T8871] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.041775][ T9154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 145.066374][ T9154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 145.096821][ T9198] x_tables: duplicate underflow at hook 3 [ 145.103437][ T8871] ================================================================== [ 145.111529][ T8871] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 145.119086][ T8871] Read of size 8 at addr ffff888071fc72b0 by task kworker/u8:19/8871 [ 145.127167][ T8871] [ 145.129504][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 145.129527][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.129537][ T8871] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 145.129567][ T8871] Call Trace: [ 145.129574][ T8871] [ 145.129581][ T8871] dump_stack_lvl+0x189/0x250 [ 145.129601][ T8871] ? __kasan_check_byte+0x12/0x40 [ 145.129621][ T8871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.129637][ T8871] ? lock_release+0x4b/0x3e0 [ 145.129659][ T8871] ? __virt_addr_valid+0x4a5/0x5c0 [ 145.129677][ T8871] print_report+0xca/0x240 [ 145.129696][ T8871] ? __mutex_lock+0x147/0x1350 [ 145.129712][ T8871] kasan_report+0x118/0x150 [ 145.129731][ T8871] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 145.129756][ T8871] ? __mutex_lock+0x147/0x1350 [ 145.129775][ T8871] __mutex_lock+0x147/0x1350 [ 145.129793][ T8871] ? __mutex_lock+0x5bb/0x1350 [ 145.129811][ T8871] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 145.129836][ T8871] ? __pfx___mutex_lock+0x10/0x10 [ 145.129856][ T8871] ? __lock_acquire+0xab9/0xd20 [ 145.129882][ T8871] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 145.129909][ T8871] ? process_scheduled_works+0x9ef/0x17b0 [ 145.129931][ T8871] ? process_scheduled_works+0x9ef/0x17b0 [ 145.129953][ T8871] process_scheduled_works+0xae1/0x17b0 [ 145.129987][ T8871] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.130018][ T8871] worker_thread+0x8a0/0xda0 [ 145.130047][ T8871] kthread+0x711/0x8a0 [ 145.130064][ T8871] ? __pfx_worker_thread+0x10/0x10 [ 145.130086][ T8871] ? __pfx_kthread+0x10/0x10 [ 145.130103][ T8871] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.130151][ T8871] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.130166][ T8871] ? __pfx_kthread+0x10/0x10 [ 145.130184][ T8871] ret_from_fork+0x4bc/0x870 [ 145.130206][ T8871] ? __pfx_ret_from_fork+0x10/0x10 [ 145.130230][ T8871] ? __switch_to_asm+0x39/0x70 [ 145.130248][ T8871] ? __switch_to_asm+0x33/0x70 [ 145.130266][ T8871] ? __pfx_kthread+0x10/0x10 [ 145.130283][ T8871] ret_from_fork_asm+0x1a/0x30 [ 145.130310][ T8871] [ 145.130317][ T8871] [ 145.333291][ T8871] Allocated by task 9148: [ 145.337601][ T8871] kasan_save_track+0x3e/0x80 [ 145.342265][ T8871] __kasan_kmalloc+0x93/0xb0 [ 145.346843][ T8871] __kmalloc_noprof+0x411/0x7f0 [ 145.351678][ T8871] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 145.357820][ T8871] notifier_call_chain+0x1b6/0x3e0 [ 145.362919][ T8871] register_netdevice+0x1608/0x1ae0 [ 145.368099][ T8871] nsim_create+0xae8/0xf10 [ 145.372499][ T8871] __nsim_dev_port_add+0x6b6/0xb10 [ 145.377598][ T8871] nsim_dev_port_add_all+0x37/0xf0 [ 145.382688][ T8871] nsim_dev_reload_up+0x451/0x780 [ 145.387700][ T8871] devlink_reload+0x4ec/0x8d0 [ 145.392366][ T8871] devlink_nl_reload_doit+0xb35/0xd50 [ 145.397728][ T8871] genl_family_rcv_msg_doit+0x215/0x300 [ 145.403264][ T8871] genl_rcv_msg+0x60e/0x790 [ 145.407749][ T8871] netlink_rcv_skb+0x208/0x470 [ 145.412502][ T8871] genl_rcv+0x28/0x40 [ 145.416471][ T8871] netlink_unicast+0x82f/0x9e0 [ 145.421220][ T8871] netlink_sendmsg+0x805/0xb30 [ 145.425971][ T8871] __sock_sendmsg+0x21c/0x270 [ 145.430631][ T8871] ____sys_sendmsg+0x505/0x830 [ 145.435382][ T8871] ___sys_sendmsg+0x21f/0x2a0 [ 145.440038][ T8871] __x64_sys_sendmsg+0x19b/0x260 [ 145.444954][ T8871] do_syscall_64+0xfa/0xfa0 [ 145.449438][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.455319][ T8871] [ 145.457628][ T8871] Freed by task 9154: [ 145.461595][ T8871] kasan_save_track+0x3e/0x80 [ 145.466253][ T8871] __kasan_save_free_info+0x46/0x50 [ 145.471441][ T8871] __kasan_slab_free+0x5c/0x80 [ 145.476207][ T8871] kfree+0x19a/0x6d0 [ 145.480081][ T8871] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 145.486311][ T8871] notifier_call_chain+0x1b6/0x3e0 [ 145.491410][ T8871] unregister_netdevice_many_notify+0x1860/0x2390 [ 145.497807][ T8871] unregister_netdevice_queue+0x33c/0x380 [ 145.503512][ T8871] nsim_destroy+0x1dd/0x670 [ 145.508015][ T8871] __nsim_dev_port_del+0x14d/0x1b0 [ 145.513123][ T8871] nsim_dev_reload_destroy+0x288/0x490 [ 145.518564][ T8871] nsim_dev_reload_down+0x8a/0xc0 [ 145.523569][ T8871] devlink_reload+0x1b6/0x8d0 [ 145.528232][ T8871] devlink_nl_reload_doit+0xb35/0xd50 [ 145.533595][ T8871] genl_family_rcv_msg_doit+0x215/0x300 [ 145.539125][ T8871] genl_rcv_msg+0x60e/0x790 [ 145.543612][ T8871] netlink_rcv_skb+0x208/0x470 [ 145.548361][ T8871] genl_rcv+0x28/0x40 [ 145.552325][ T8871] netlink_unicast+0x82f/0x9e0 [ 145.557071][ T8871] netlink_sendmsg+0x805/0xb30 [ 145.561821][ T8871] __sock_sendmsg+0x21c/0x270 [ 145.566480][ T8871] ____sys_sendmsg+0x505/0x830 [ 145.571235][ T8871] ___sys_sendmsg+0x21f/0x2a0 [ 145.575895][ T8871] __x64_sys_sendmsg+0x19b/0x260 [ 145.580816][ T8871] do_syscall_64+0xfa/0xfa0 [ 145.585302][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.591187][ T8871] [ 145.593493][ T8871] Last potentially related work creation: [ 145.599185][ T8871] kasan_save_stack+0x3e/0x60 [ 145.603850][ T8871] kasan_record_aux_stack+0xbd/0xd0 [ 145.609044][ T8871] insert_work+0x3d/0x330 [ 145.613376][ T8871] __queue_work+0xbaf/0xfb0 [ 145.617874][ T8871] queue_work_on+0x181/0x270 [ 145.622464][ T8871] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 145.628095][ T8871] udp_tunnel_push_rx_port+0x180/0x200 [ 145.633544][ T8871] geneve_offload_rx_ports+0xd7/0x160 [ 145.638911][ T8871] geneve_netdevice_event+0x6a/0x80 [ 145.644090][ T8871] notifier_call_chain+0x1b6/0x3e0 [ 145.649202][ T8871] call_netdevice_notifiers+0x88/0xc0 [ 145.654556][ T8871] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 145.660698][ T8871] notifier_call_chain+0x1b6/0x3e0 [ 145.665795][ T8871] register_netdevice+0x1608/0x1ae0 [ 145.670975][ T8871] nsim_create+0xae8/0xf10 [ 145.675378][ T8871] __nsim_dev_port_add+0x6b6/0xb10 [ 145.680473][ T8871] nsim_dev_port_add_all+0x37/0xf0 [ 145.685565][ T8871] nsim_dev_reload_up+0x451/0x780 [ 145.690571][ T8871] devlink_reload+0x4ec/0x8d0 [ 145.695237][ T8871] devlink_nl_reload_doit+0xb35/0xd50 [ 145.700606][ T8871] genl_family_rcv_msg_doit+0x215/0x300 [ 145.706138][ T8871] genl_rcv_msg+0x60e/0x790 [ 145.710624][ T8871] netlink_rcv_skb+0x208/0x470 [ 145.715377][ T8871] genl_rcv+0x28/0x40 [ 145.719342][ T8871] netlink_unicast+0x82f/0x9e0 [ 145.724159][ T8871] netlink_sendmsg+0x805/0xb30 [ 145.728916][ T8871] __sock_sendmsg+0x21c/0x270 [ 145.733578][ T8871] ____sys_sendmsg+0x505/0x830 [ 145.738330][ T8871] ___sys_sendmsg+0x21f/0x2a0 [ 145.742983][ T8871] __x64_sys_sendmsg+0x19b/0x260 [ 145.747907][ T8871] do_syscall_64+0xfa/0xfa0 [ 145.752395][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.758274][ T8871] [ 145.760582][ T8871] Second to last potentially related work creation: [ 145.767143][ T8871] kasan_save_stack+0x3e/0x60 [ 145.771806][ T8871] kasan_record_aux_stack+0xbd/0xd0 [ 145.776998][ T8871] insert_work+0x3d/0x330 [ 145.781407][ T8871] __queue_work+0xcd2/0xfb0 [ 145.785996][ T8871] queue_work_on+0x181/0x270 [ 145.790574][ T8871] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 145.796198][ T8871] udp_tunnel_push_rx_port+0x180/0x200 [ 145.801646][ T8871] geneve_offload_rx_ports+0xd7/0x160 [ 145.807002][ T8871] geneve_netdevice_event+0x6a/0x80 [ 145.812177][ T8871] notifier_call_chain+0x1b6/0x3e0 [ 145.817280][ T8871] call_netdevice_notifiers+0x88/0xc0 [ 145.822635][ T8871] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 145.828776][ T8871] notifier_call_chain+0x1b6/0x3e0 [ 145.833883][ T8871] register_netdevice+0x1608/0x1ae0 [ 145.839112][ T8871] nsim_create+0xae8/0xf10 [ 145.843516][ T8871] __nsim_dev_port_add+0x6b6/0xb10 [ 145.848611][ T8871] nsim_dev_port_add_all+0x37/0xf0 [ 145.853715][ T8871] nsim_dev_reload_up+0x451/0x780 [ 145.858733][ T8871] devlink_reload+0x4ec/0x8d0 [ 145.863401][ T8871] devlink_nl_reload_doit+0xb35/0xd50 [ 145.868764][ T8871] genl_family_rcv_msg_doit+0x215/0x300 [ 145.874301][ T8871] genl_rcv_msg+0x60e/0x790 [ 145.878875][ T8871] netlink_rcv_skb+0x208/0x470 [ 145.883629][ T8871] genl_rcv+0x28/0x40 [ 145.887592][ T8871] netlink_unicast+0x82f/0x9e0 [ 145.892341][ T8871] netlink_sendmsg+0x805/0xb30 [ 145.897107][ T8871] __sock_sendmsg+0x21c/0x270 [ 145.901785][ T8871] ____sys_sendmsg+0x505/0x830 [ 145.906546][ T8871] ___sys_sendmsg+0x21f/0x2a0 [ 145.911239][ T8871] __x64_sys_sendmsg+0x19b/0x260 [ 145.916165][ T8871] do_syscall_64+0xfa/0xfa0 [ 145.920658][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.926535][ T8871] [ 145.928848][ T8871] The buggy address belongs to the object at ffff888071fc7200 [ 145.928848][ T8871] which belongs to the cache kmalloc-256 of size 256 [ 145.942881][ T8871] The buggy address is located 176 bytes inside of [ 145.942881][ T8871] freed 256-byte region [ffff888071fc7200, ffff888071fc7300) [ 145.956657][ T8871] [ 145.958973][ T8871] The buggy address belongs to the physical page: [ 145.965373][ T8871] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71fc6 [ 145.974121][ T8871] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 145.982600][ T8871] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 145.990481][ T8871] page_type: f5(slab) [ 145.994453][ T8871] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0001e29800 dead000000000003 [ 146.003020][ T8871] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 146.011590][ T8871] head: 00fff00000000040 ffff88813ffa6b40 ffffea0001e29800 dead000000000003 [ 146.020243][ T8871] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 146.028893][ T8871] head: 00fff00000000001 ffffea0001c7f181 00000000ffffffff 00000000ffffffff [ 146.037545][ T8871] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 146.046206][ T8871] page dumped because: kasan: bad access detected [ 146.052623][ T8871] page_owner tracks the page as allocated [ 146.058330][ T8871] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 77077622739, free_ts 77074751641 [ 146.079768][ T8871] post_alloc_hook+0x240/0x2a0 [ 146.084526][ T8871] get_page_from_freelist+0x2365/0x2440 [ 146.090058][ T8871] __alloc_frozen_pages_noprof+0x181/0x370 [ 146.095852][ T8871] alloc_pages_mpol+0x232/0x4a0 [ 146.100691][ T8871] allocate_slab+0x96/0x3a0 [ 146.105229][ T8871] ___slab_alloc+0xe94/0x18a0 [ 146.109893][ T8871] __slab_alloc+0x65/0x100 [ 146.114295][ T8871] __kmalloc_cache_noprof+0x411/0x6f0 [ 146.119651][ T8871] ____ip_mc_inc_group+0x528/0xde0 [ 146.124751][ T8871] ip_mc_up+0x125/0x300 [ 146.128889][ T8871] inetdev_event+0xfb3/0x15b0 [ 146.133554][ T8871] notifier_call_chain+0x1b6/0x3e0 [ 146.138657][ T8871] __dev_notify_flags+0x18d/0x2e0 [ 146.143671][ T8871] netif_change_flags+0xe8/0x1a0 [ 146.148600][ T8871] dev_change_flags+0x130/0x260 [ 146.153452][ T8871] vlan_device_event+0x1bc2/0x1ef0 [ 146.158566][ T8871] page last free pid 5821 tgid 5821 stack trace: [ 146.164883][ T8871] __free_frozen_pages+0xbc4/0xd30 [ 146.169988][ T8871] __put_partials+0x146/0x170 [ 146.174664][ T8871] put_cpu_partial+0x1f2/0x2e0 [ 146.179434][ T8871] __slab_free+0x2b9/0x390 [ 146.183844][ T8871] qlist_free_all+0x97/0x140 [ 146.188420][ T8871] kasan_quarantine_reduce+0x148/0x160 [ 146.193862][ T8871] __kasan_slab_alloc+0x22/0x80 [ 146.198697][ T8871] kmem_cache_alloc_node_noprof+0x433/0x710 [ 146.204574][ T8871] __alloc_skb+0x112/0x2d0 [ 146.208977][ T8871] netlink_ack+0x146/0xa50 [ 146.213386][ T8871] netlink_rcv_skb+0x28c/0x470 [ 146.218145][ T8871] netlink_unicast+0x82f/0x9e0 [ 146.222894][ T8871] netlink_sendmsg+0x805/0xb30 [ 146.227646][ T8871] __sock_sendmsg+0x21c/0x270 [ 146.232310][ T8871] __sys_sendto+0x3bd/0x520 [ 146.236803][ T8871] __x64_sys_sendto+0xde/0x100 [ 146.241559][ T8871] [ 146.243868][ T8871] Memory state around the buggy address: [ 146.249481][ T8871] ffff888071fc7180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.257522][ T8871] ffff888071fc7200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.265563][ T8871] >ffff888071fc7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.273604][ T8871] ^ [ 146.279215][ T8871] ffff888071fc7300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.287257][ T8871] ffff888071fc7380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.295297][ T8871] ================================================================== [ 146.311935][ T8871] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.319161][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 146.328714][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.338781][ T8871] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 146.346161][ T8871] Call Trace: [ 146.349428][ T8871] [ 146.352350][ T8871] dump_stack_lvl+0x99/0x250 [ 146.356929][ T8871] ? __asan_memcpy+0x40/0x70 [ 146.361502][ T8871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.366683][ T8871] ? __pfx__printk+0x10/0x10 [ 146.371263][ T8871] vpanic+0x237/0x6d0 [ 146.375240][ T8871] ? __pfx_vpanic+0x10/0x10 [ 146.379728][ T8871] ? preempt_schedule+0xae/0xc0 [ 146.384568][ T8871] ? __pfx_preempt_schedule+0x10/0x10 [ 146.389930][ T8871] panic+0xb9/0xc0 [ 146.393642][ T8871] ? __pfx_panic+0x10/0x10 [ 146.398047][ T8871] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 146.403931][ T8871] ? __mutex_lock+0x147/0x1350 [ 146.408679][ T8871] check_panic_on_warn+0x89/0xb0 [ 146.413603][ T8871] ? __mutex_lock+0x147/0x1350 [ 146.418348][ T8871] end_report+0x78/0x160 [ 146.422578][ T8871] kasan_report+0x129/0x150 [ 146.427077][ T8871] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 146.432965][ T8871] ? __mutex_lock+0x147/0x1350 [ 146.437719][ T8871] __mutex_lock+0x147/0x1350 [ 146.442298][ T8871] ? __mutex_lock+0x5bb/0x1350 [ 146.447047][ T8871] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 146.453278][ T8871] ? __pfx___mutex_lock+0x10/0x10 [ 146.458292][ T8871] ? __lock_acquire+0xab9/0xd20 [ 146.463133][ T8871] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 146.469218][ T8871] ? process_scheduled_works+0x9ef/0x17b0 [ 146.474923][ T8871] ? process_scheduled_works+0x9ef/0x17b0 [ 146.480630][ T8871] process_scheduled_works+0xae1/0x17b0 [ 146.486176][ T8871] ? __pfx_process_scheduled_works+0x10/0x10 [ 146.492150][ T8871] worker_thread+0x8a0/0xda0 [ 146.496738][ T8871] kthread+0x711/0x8a0 [ 146.500794][ T8871] ? __pfx_worker_thread+0x10/0x10 [ 146.505894][ T8871] ? __pfx_kthread+0x10/0x10 [ 146.510472][ T8871] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.515661][ T8871] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.520842][ T8871] ? __pfx_kthread+0x10/0x10 [ 146.525418][ T8871] ret_from_fork+0x4bc/0x870 [ 146.529998][ T8871] ? __pfx_ret_from_fork+0x10/0x10 [ 146.535105][ T8871] ? __switch_to_asm+0x39/0x70 [ 146.539855][ T8871] ? __switch_to_asm+0x33/0x70 [ 146.544603][ T8871] ? __pfx_kthread+0x10/0x10 [ 146.549177][ T8871] ret_from_fork_asm+0x1a/0x30 [ 146.553934][ T8871] [ 146.557203][ T8871] Kernel Offset: disabled [ 146.561533][ T8871] Rebooting in 86400 seconds..