last executing test programs:

8.924415237s ago: executing program 4 (id=2910):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f7cc0000000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0xb}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, 'ckR', 0x14, 0x6, 0x6eb04cb2073e3b72, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r7=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r7, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8)

8.540291962s ago: executing program 4 (id=2913):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.351021091s ago: executing program 4 (id=2915):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000320000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000200000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600034000010000060001400017000014000000110001"], 0xd8}}, 0x0)

8.182798859s ago: executing program 4 (id=2916):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.941742658s ago: executing program 4 (id=2918):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.68374062s ago: executing program 4 (id=2921):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0)

3.277107488s ago: executing program 0 (id=2962):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

2.622425944s ago: executing program 0 (id=2966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000000000000090000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006ef1362622e3339a43d584bfb93d14623cf66d50b88ffdee6aeef2f87fff6be234fcc5b9d33d5823bd43308fb5fe9e3dbe92d35e3e6cf93f0b2ea23c00e102fd5c580108655ac34f9ab572ace6a960c4fd46d95e3c38d8c83da79163affada9c4d621f9c170674c3f9f60f172fb3d315fc569d715321145e7641bce3f814c57eded88159f4bba4503e2b443edc7953727c8f7405295f329e06a83492782ea5b9057de2a2c6fa00b713a73de2c556c572bd0f019514435867bbaed6f6664e1341acbe77c906a0281822c4fe6af1346682cdfd0a33558343b101fd5195f084d90cdb7f1ad114b25c7eaa5b11a7c385692cf52c09b1503e46128dac7f609b37cb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000f1e005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000c19f5c38c8a1bf8287060dad646dc68c8bce939cc406c21f8bb8cb79ac"], 0x4c}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x20008050}, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2.616851886s ago: executing program 2 (id=2967):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.296532754s ago: executing program 2 (id=2970):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0)

1.97967234s ago: executing program 2 (id=2973):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.841733264s ago: executing program 1 (id=2975):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

1.312120303s ago: executing program 3 (id=2976):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.31185493s ago: executing program 1 (id=2977):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000", @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.310488298s ago: executing program 2 (id=2978):
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x1e, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008", @ANYRES8=0x0, @ANYRES64=r3], 0x270}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1.245400702s ago: executing program 0 (id=2979):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.192896422s ago: executing program 3 (id=2980):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.049236214s ago: executing program 1 (id=2981):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.047928076s ago: executing program 3 (id=2982):
unshare(0x22020600)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x7d, &(0x7f00000004c0)={r4, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90)
close(r0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

969.253605ms ago: executing program 2 (id=2983):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

877.806272ms ago: executing program 3 (id=2984):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

868.123364ms ago: executing program 0 (id=2985):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

772.737126ms ago: executing program 1 (id=2986):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (fail_nth: 5)

655.821728ms ago: executing program 3 (id=2987):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

615.840006ms ago: executing program 0 (id=2988):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
syz_emit_ethernet(0x69, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5b, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x1, 0x0, [0xb09a], "7f"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0xa4, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x7, 0x4, 0x5, 0x8, 0x0, 0x2, 0x7ff, 0x2b, [{0xfffffff7, 0xcf, 0xffffb44b, 0x4}, {0x9, 0x400, 0x2, 0x8}, {0x8, 0x400, 0x3, 0xfffffff7}, {0x6, 0x6, 0x7fff, 0x51f3}, {0x3ff, 0xffff, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x4}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

351.840297ms ago: executing program 1 (id=2989):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

282.528642ms ago: executing program 2 (id=2990):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

196.244366ms ago: executing program 1 (id=2991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x64, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

116.135765ms ago: executing program 0 (id=2992):
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x1e, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r3], 0x270}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

0s ago: executing program 3 (id=2993):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

769] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001
[  232.157827][T10769] R13: 00007f3598e26038 R14: 00007f3598e25fa0 R15: 00007ffdd9c1b688
[  232.157856][T10769]  </TASK>
[  232.696375][T10787] syzkaller1: entered promiscuous mode
[  232.711206][T10787] syzkaller1: entered allmulticast mode
[  233.049095][T10803] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1930'.
[  233.310391][T10819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'.
[  233.862404][T10836] bridge7: entered promiscuous mode
[  233.867788][T10836] bridge7: entered allmulticast mode
[  234.575756][T10870] bridge9: entered promiscuous mode
[  234.581607][T10870] bridge9: entered allmulticast mode
[  235.144163][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1964'.
[  235.188492][T10897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1964'.
[  235.312637][T10899] bridge10: entered promiscuous mode
[  235.336407][T10899] bridge10: entered allmulticast mode
[  235.554108][T10906] tipc: Failed to remove unknown binding: 66,0,0/8432298:2538177747/2538177748
[  235.568114][T10906] tipc: Failed to remove unknown binding: 66,0,0/8432298:2538177747/2538177748
[  235.673372][T10912] FAULT_INJECTION: forcing a failure.
[  235.673372][T10912] name failslab, interval 1, probability 0, space 0, times 0
[  235.696329][T10912] CPU: 1 UID: 0 PID: 10912 Comm: syz.0.1970 Not tainted syzkaller #0 PREEMPT(full) 
[  235.696359][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  235.696373][T10912] Call Trace:
[  235.696381][T10912]  <TASK>
[  235.696388][T10912]  dump_stack_lvl+0xe8/0x150
[  235.696424][T10912]  should_fail_ex+0x40c/0x560
[  235.696456][T10912]  should_failslab+0xa8/0x100
[  235.696491][T10912]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  235.696519][T10912]  ? skb_clone+0x212/0x3a0
[  235.696542][T10912]  ? skb_clone+0x212/0x3a0
[  235.696573][T10912]  skb_clone+0x212/0x3a0
[  235.696602][T10912]  __netlink_deliver_tap+0x413/0x860
[  235.696639][T10912]  ? netlink_deliver_tap+0x2e/0x1b0
[  235.696665][T10912]  netlink_deliver_tap+0x19c/0x1b0
[  235.696702][T10912]  netlink_unicast+0x77f/0x940
[  235.696735][T10912]  netlink_sendmsg+0x813/0xb40
[  235.696770][T10912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.696800][T10912]  ? aa_sock_msg_perm+0xf1/0x1b0
[  235.696830][T10912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.696854][T10912]  sock_sendmsg_nosec+0x13a/0x180
[  235.696887][T10912]  ____sys_sendmsg+0x54e/0x850
[  235.696918][T10912]  ? __pfx_____sys_sendmsg+0x10/0x10
[  235.696953][T10912]  ? import_iovec+0x73/0xa0
[  235.696990][T10912]  ___sys_sendmsg+0x2a5/0x360
[  235.697013][T10912]  ? __lock_acquire+0x683/0x2cf0
[  235.697047][T10912]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.697076][T10912]  ? kstrtouint+0x6e/0xe0
[  235.697128][T10912]  ? __fget_files+0x2a/0x420
[  235.697154][T10912]  ? __fget_files+0x3a2/0x420
[  235.697193][T10912]  __sys_sendmmsg+0x273/0x4d0
[  235.697224][T10912]  ? __pfx___sys_sendmmsg+0x10/0x10
[  235.697259][T10912]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  235.697300][T10912]  ? ksys_write+0x242/0x270
[  235.697324][T10912]  ? __pfx_ksys_write+0x10/0x10
[  235.697350][T10912]  __x64_sys_sendmmsg+0xa0/0xc0
[  235.697374][T10912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.697395][T10912]  do_syscall_64+0x174/0x580
[  235.697418][T10912]  ? trace_irq_disable+0x3b/0x140
[  235.697444][T10912]  ? clear_bhb_loop+0x40/0x90
[  235.697468][T10912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.697488][T10912] RIP: 0033:0x7f3598b9de99
[  235.697506][T10912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.697524][T10912] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  235.697544][T10912] RAX: ffffffffffffffda RBX: 00007f3598e25fa0 RCX: 00007f3598b9de99
[  235.697557][T10912] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  235.697568][T10912] RBP: 00007f3596df6090 R08: 0000000000000000 R09: 0000000000000000
[  235.697580][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.697591][T10912] R13: 00007f3598e26038 R14: 00007f3598e25fa0 R15: 00007ffdd9c1b688
[  235.697620][T10912]  </TASK>
[  235.697787][T10912] bridge_slave_0: invalid flags given to default FDB implementation
[  235.993693][T10910] syzkaller1: entered promiscuous mode
[  236.004263][T10910] syzkaller1: entered allmulticast mode
[  236.857803][T10957] bridge10: entered promiscuous mode
[  236.899979][T10957] bridge10: entered allmulticast mode
[  237.191659][T10967] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1992'.
[  237.229204][T10971] netlink: 'syz.4.1994': attribute type 32 has an invalid length.
[  237.252396][T10971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1994'.
[  237.365556][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'.
[  237.397819][T10978] xt_l2tp: invalid flags combination: 8
[  237.414786][T10978] netlink: 'syz.1.1997': attribute type 1 has an invalid length.
[  237.552768][T10983] syzkaller1: entered promiscuous mode
[  237.576701][T10983] syzkaller1: entered allmulticast mode
[  238.064842][T11005] bridge6: entered promiscuous mode
[  238.084178][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2010'.
[  238.096620][T11005] bridge6: entered allmulticast mode
[  238.112629][T11010] netlink: 'syz.4.2011': attribute type 12 has an invalid length.
[  238.124527][T11012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2010'.
[  238.453155][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  238.496688][T11022] xt_l2tp: invalid flags combination: 8
[  238.557621][T11022] netlink: 'syz.0.2013': attribute type 1 has an invalid length.
[  238.601791][T11022] gre0: entered promiscuous mode
[  238.633052][T11022] gre0: entered allmulticast mode
[  238.715789][T11034] FAULT_INJECTION: forcing a failure.
[  238.715789][T11034] name failslab, interval 1, probability 0, space 0, times 0
[  238.730158][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.1.2016 Not tainted syzkaller #0 PREEMPT(full) 
[  238.730202][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  238.730227][T11034] Call Trace:
[  238.730237][T11034]  <TASK>
[  238.730245][T11034]  dump_stack_lvl+0xe8/0x150
[  238.730280][T11034]  should_fail_ex+0x40c/0x560
[  238.730311][T11034]  should_failslab+0xa8/0x100
[  238.730343][T11034]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  238.730369][T11034]  ? skb_clone+0x212/0x3a0
[  238.730390][T11034]  ? skb_clone+0x212/0x3a0
[  238.730419][T11034]  skb_clone+0x212/0x3a0
[  238.730446][T11034]  __netlink_deliver_tap+0x413/0x860
[  238.730480][T11034]  ? netlink_deliver_tap+0x2e/0x1b0
[  238.730505][T11034]  netlink_deliver_tap+0x19c/0x1b0
[  238.730529][T11034]  netlink_dump+0x95b/0xee0
[  238.730571][T11034]  ? __pfx_netlink_dump+0x10/0x10
[  238.730605][T11034]  ? netlink_recvmsg+0x5bf/0xa50
[  238.730627][T11034]  ? kmem_cache_free+0x182/0x650
[  238.730659][T11034]  netlink_recvmsg+0x683/0xa50
[  238.730694][T11034]  ? __pfx_netlink_recvmsg+0x10/0x10
[  238.730724][T11034]  ? __lock_acquire+0x683/0x2cf0
[  238.730751][T11034]  ? aa_sock_msg_perm+0xf1/0x1b0
[  238.730774][T11034]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  238.730806][T11034]  ? security_socket_recvmsg+0x7e/0x2c0
[  238.730830][T11034]  ? __pfx_netlink_recvmsg+0x10/0x10
[  238.730853][T11034]  sock_recvmsg+0x196/0x1e0
[  238.730884][T11034]  ____sys_recvmsg+0x1e6/0x4a0
[  238.730919][T11034]  ? __pfx_____sys_recvmsg+0x10/0x10
[  238.730957][T11034]  ? import_iovec+0x73/0xa0
[  238.730989][T11034]  ___sys_recvmsg+0x213/0x5a0
[  238.731019][T11034]  ? __pfx____sys_recvmsg+0x10/0x10
[  238.731049][T11034]  ? __fget_files+0x2a/0x420
[  238.731097][T11034]  ? __fget_files+0x3a2/0x420
[  238.731136][T11034]  do_recvmmsg+0x31a/0x7f0
[  238.731171][T11034]  ? __pfx_do_recvmmsg+0x10/0x10
[  238.731228][T11034]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  238.731261][T11034]  ? __fget_files+0x3a2/0x420
[  238.731301][T11034]  __x64_sys_recvmmsg+0x198/0x250
[  238.731330][T11034]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  238.731366][T11034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.731389][T11034]  do_syscall_64+0x174/0x580
[  238.731413][T11034]  ? trace_irq_disable+0x3b/0x140
[  238.731440][T11034]  ? clear_bhb_loop+0x40/0x90
[  238.731466][T11034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.731486][T11034] RIP: 0033:0x7ff32c59de99
[  238.731506][T11034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.731524][T11034] RSP: 002b:00007ff32d386028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  238.731547][T11034] RAX: ffffffffffffffda RBX: 00007ff32c825fa0 RCX: 00007ff32c59de99
[  238.731570][T11034] RDX: 0000000000000006 RSI: 0000200000004ac0 RDI: 0000000000000003
[  238.731583][T11034] RBP: 00007ff32d386090 R08: 0000000000000000 R09: 0000000000000000
[  238.731596][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.731608][T11034] R13: 00007ff32c826038 R14: 00007ff32c825fa0 R15: 00007ffe1b1ce778
[  238.731644][T11034]  </TASK>
[  239.361540][T11049] batman_adv: batadv0: Adding interface: gretap1
[  239.386845][T11049] batman_adv: batadv0: The MTU of interface gretap1 is too small (1412) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.419614][T11049] batman_adv: batadv0: Interface activated: gretap1
[  239.473139][T11053] pimreg: entered allmulticast mode
[  239.508033][T11051] pimreg: left allmulticast mode
[  239.701059][T11062] bridge10: entered promiscuous mode
[  239.736839][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'.
[  239.750419][T11062] bridge10: entered allmulticast mode
[  239.794821][T11064] xt_l2tp: invalid flags combination: 8
[  239.810967][T11064] netlink: 'syz.2.2027': attribute type 1 has an invalid length.
[  239.839025][T11064] gre0: entered promiscuous mode
[  239.852476][T11064] gre0: entered allmulticast mode
[  239.935350][T11071] FAULT_INJECTION: forcing a failure.
[  239.935350][T11071] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.952426][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.0.2030 Not tainted syzkaller #0 PREEMPT(full) 
[  239.952454][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  239.952468][T11071] Call Trace:
[  239.952476][T11071]  <TASK>
[  239.952484][T11071]  dump_stack_lvl+0xe8/0x150
[  239.952521][T11071]  should_fail_ex+0x40c/0x560
[  239.952554][T11071]  _copy_from_iter+0x1d3/0x1660
[  239.952583][T11071]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  239.952611][T11071]  ? rcu_is_watching+0x15/0xb0
[  239.952633][T11071]  ? trace_kmem_cache_alloc+0x29/0xe0
[  239.952663][T11071]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  239.952690][T11071]  ? __pfx__copy_from_iter+0x10/0x10
[  239.952720][T11071]  ? __alloc_skb+0x276/0x7a0
[  239.952740][T11071]  ? __alloc_skb+0x276/0x7a0
[  239.952767][T11071]  ? netlink_sendmsg+0x650/0xb40
[  239.952793][T11071]  ? skb_put+0x112/0x210
[  239.952818][T11071]  netlink_sendmsg+0x6c0/0xb40
[  239.952852][T11071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.952882][T11071]  ? aa_sock_msg_perm+0xf1/0x1b0
[  239.952912][T11071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.952937][T11071]  sock_sendmsg_nosec+0x13a/0x180
[  239.952972][T11071]  ____sys_sendmsg+0x54e/0x850
[  239.953002][T11071]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.953038][T11071]  ? import_iovec+0x73/0xa0
[  239.953075][T11071]  ___sys_sendmsg+0x2a5/0x360
[  239.953099][T11071]  ? __lock_acquire+0x683/0x2cf0
[  239.953135][T11071]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.953227][T11071]  ? __fget_files+0x2a/0x420
[  239.953255][T11071]  ? __fget_files+0x3a2/0x420
[  239.953295][T11071]  __x64_sys_sendmsg+0x1b1/0x290
[  239.953323][T11071]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.953375][T11071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.953399][T11071]  do_syscall_64+0x174/0x580
[  239.953426][T11071]  ? clear_bhb_loop+0x40/0x90
[  239.953452][T11071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.953473][T11071] RIP: 0033:0x7f3598b9de99
[  239.953492][T11071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.953511][T11071] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.953533][T11071] RAX: ffffffffffffffda RBX: 00007f3598e25fa0 RCX: 00007f3598b9de99
[  239.953548][T11071] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003
[  239.953562][T11071] RBP: 00007f3596df6090 R08: 0000000000000000 R09: 0000000000000000
[  239.953575][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.953587][T11071] R13: 00007f3598e26038 R14: 00007f3598e25fa0 R15: 00007ffdd9c1b688
[  239.953620][T11071]  </TASK>
[  241.117841][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2047'.
[  241.133206][T11125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2047'.
[  241.166370][T11122] netlink: 'syz.2.2046': attribute type 32 has an invalid length.
[  241.198475][T11122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2046'.
[  241.255366][T11128] FAULT_INJECTION: forcing a failure.
[  241.255366][T11128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.284827][T11128] CPU: 1 UID: 0 PID: 11128 Comm: syz.4.2048 Not tainted syzkaller #0 PREEMPT(full) 
[  241.284856][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  241.284869][T11128] Call Trace:
[  241.284878][T11128]  <TASK>
[  241.284887][T11128]  dump_stack_lvl+0xe8/0x150
[  241.284924][T11128]  should_fail_ex+0x40c/0x560
[  241.284958][T11128]  _copy_from_iter+0x1d3/0x1660
[  241.284987][T11128]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  241.285017][T11128]  ? rcu_is_watching+0x15/0xb0
[  241.285039][T11128]  ? trace_kmem_cache_alloc+0x29/0xe0
[  241.285068][T11128]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  241.285096][T11128]  ? __pfx__copy_from_iter+0x10/0x10
[  241.285125][T11128]  ? __alloc_skb+0x276/0x7a0
[  241.285145][T11128]  ? __alloc_skb+0x276/0x7a0
[  241.285172][T11128]  ? netlink_sendmsg+0x650/0xb40
[  241.285198][T11128]  ? skb_put+0x112/0x210
[  241.285223][T11128]  netlink_sendmsg+0x6c0/0xb40
[  241.285259][T11128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.285290][T11128]  ? aa_sock_msg_perm+0xf1/0x1b0
[  241.285321][T11128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.285346][T11128]  sock_sendmsg_nosec+0x13a/0x180
[  241.285380][T11128]  ____sys_sendmsg+0x54e/0x850
[  241.285412][T11128]  ? __pfx_____sys_sendmsg+0x10/0x10
[  241.285451][T11128]  ? import_iovec+0x73/0xa0
[  241.285489][T11128]  ___sys_sendmsg+0x2a5/0x360
[  241.285512][T11128]  ? __lock_acquire+0x683/0x2cf0
[  241.285559][T11128]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.285622][T11128]  ? __fget_files+0x2a/0x420
[  241.285650][T11128]  ? __fget_files+0x3a2/0x420
[  241.285689][T11128]  __x64_sys_sendmsg+0x1b1/0x290
[  241.285717][T11128]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.285768][T11128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.285792][T11128]  do_syscall_64+0x174/0x580
[  241.285817][T11128]  ? trace_irq_disable+0x3b/0x140
[  241.285844][T11128]  ? clear_bhb_loop+0x40/0x90
[  241.285869][T11128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.285891][T11128] RIP: 0033:0x7efc0c59de99
[  241.285910][T11128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.285928][T11128] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.285950][T11128] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  241.285966][T11128] RDX: 000000000000c080 RSI: 0000200000000040 RDI: 0000000000000003
[  241.285980][T11128] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  241.285993][T11128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.286005][T11128] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  241.286039][T11128]  </TASK>
[  241.598033][T11132] netlink: 'syz.0.2050': attribute type 58 has an invalid length.
[  242.266510][T11155] tipc: Failed to remove unknown binding: 66,0,0/0:4208046995/4208046997
[  242.275367][T11155] tipc: Failed to remove unknown binding: 66,0,0/0:4208046995/4208046996
[  242.298512][T11155] tipc: Failed to remove unknown binding: 66,0,0/0:4208046995/4208046997
[  242.311293][T11155] tipc: Failed to remove unknown binding: 66,0,0/0:4208046995/4208046996
[  242.523630][T11163] netlink: 'syz.2.2062': attribute type 32 has an invalid length.
[  242.547433][T11163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2062'.
[  242.623290][T11169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.653062][ T5767] lo speed is unknown, defaulting to 1000
[  242.988850][T11187] tipc: Failed to remove unknown binding: 66,0,0/8432298:2541773051/2541773053
[  243.016407][T11187] tipc: Failed to remove unknown binding: 66,0,0/8432298:2541773051/2541773052
[  243.061254][T11187] tipc: Failed to remove unknown binding: 66,0,0/8432298:2541773051/2541773053
[  243.084169][T11187] tipc: Failed to remove unknown binding: 66,0,0/8432298:2541773051/2541773052
[  243.681947][T11221] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2087'.
[  243.799959][T11228] tipc: Failed to remove unknown binding: 66,0,0/2540985329:3084784690/3084784692
[  243.822461][T11228] tipc: Failed to remove unknown binding: 66,0,0/2540985329:3084784690/3084784691
[  243.863339][T11228] tipc: Failed to remove unknown binding: 66,0,0/2540985329:3084784690/3084784692
[  243.883533][T11228] tipc: Failed to remove unknown binding: 66,0,0/2540985329:3084784690/3084784691
[  244.857498][T11266] FAULT_INJECTION: forcing a failure.
[  244.857498][T11266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.907610][T11266] CPU: 0 UID: 0 PID: 11266 Comm: syz.3.2108 Not tainted syzkaller #0 PREEMPT(full) 
[  244.907638][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  244.907651][T11266] Call Trace:
[  244.907678][T11266]  <TASK>
[  244.907687][T11266]  dump_stack_lvl+0xe8/0x150
[  244.907725][T11266]  should_fail_ex+0x40c/0x560
[  244.907757][T11266]  _copy_from_iter+0x1d3/0x1660
[  244.907786][T11266]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  244.907816][T11266]  ? rcu_is_watching+0x15/0xb0
[  244.907850][T11266]  ? trace_kmem_cache_alloc+0x29/0xe0
[  244.907879][T11266]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  244.907906][T11266]  ? __pfx__copy_from_iter+0x10/0x10
[  244.907934][T11266]  ? __alloc_skb+0x276/0x7a0
[  244.907953][T11266]  ? __alloc_skb+0x276/0x7a0
[  244.907980][T11266]  ? __alloc_skb+0x4cc/0x7a0
[  244.907998][T11266]  ? skb_put+0x112/0x210
[  244.908023][T11266]  pfkey_sendmsg+0x25f/0x11d0
[  244.908047][T11266]  ? unwind_next_frame+0x8f/0x2550
[  244.908079][T11266]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  244.908109][T11266]  ? aa_sk_perm+0x6d5/0x900
[  244.908139][T11266]  ? __pfx_aa_sk_perm+0x10/0x10
[  244.908164][T11266]  ? aa_sock_msg_perm+0xf1/0x1b0
[  244.908191][T11266]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  244.908212][T11266]  sock_sendmsg_nosec+0x13a/0x180
[  244.908244][T11266]  ____sys_sendmsg+0x54e/0x850
[  244.908273][T11266]  ? __pfx_____sys_sendmsg+0x10/0x10
[  244.908305][T11266]  ? import_iovec+0x73/0xa0
[  244.908339][T11266]  ___sys_sendmsg+0x2a5/0x360
[  244.908363][T11266]  ? __lock_acquire+0x683/0x2cf0
[  244.908405][T11266]  ? __pfx____sys_sendmsg+0x10/0x10
[  244.908464][T11266]  ? __fget_files+0x2a/0x420
[  244.908493][T11266]  ? __fget_files+0x3a2/0x420
[  244.908532][T11266]  __x64_sys_sendmsg+0x1b1/0x290
[  244.908560][T11266]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  244.908604][T11266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.908628][T11266]  do_syscall_64+0x174/0x580
[  244.908653][T11266]  ? trace_irq_disable+0x3b/0x140
[  244.908680][T11266]  ? clear_bhb_loop+0x40/0x90
[  244.908706][T11266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.908728][T11266] RIP: 0033:0x7fa1f699de99
[  244.908748][T11266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.908766][T11266] RSP: 002b:00007fa1f77c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.908788][T11266] RAX: ffffffffffffffda RBX: 00007fa1f6c25fa0 RCX: 00007fa1f699de99
[  244.908803][T11266] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  244.908816][T11266] RBP: 00007fa1f77c6090 R08: 0000000000000000 R09: 0000000000000000
[  244.908829][T11266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.908841][T11266] R13: 00007fa1f6c26038 R14: 00007fa1f6c25fa0 R15: 00007ffdf36fb528
[  244.908873][T11266]  </TASK>
[  245.399239][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'.
[  245.482786][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2114'.
[  245.503674][T11281] FAULT_INJECTION: forcing a failure.
[  245.503674][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.517675][T11281] CPU: 0 UID: 0 PID: 11281 Comm: syz.4.2113 Not tainted syzkaller #0 PREEMPT(full) 
[  245.517698][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  245.517710][T11281] Call Trace:
[  245.517717][T11281]  <TASK>
[  245.517725][T11281]  dump_stack_lvl+0xe8/0x150
[  245.517760][T11281]  should_fail_ex+0x40c/0x560
[  245.517807][T11281]  _copy_from_user+0x2d/0xb0
[  245.517829][T11281]  ___sys_recvmsg+0x173/0x5a0
[  245.517859][T11281]  ? __pfx____sys_recvmsg+0x10/0x10
[  245.517889][T11281]  ? __fget_files+0x2a/0x420
[  245.517937][T11281]  ? __fget_files+0x3a2/0x420
[  245.517976][T11281]  do_recvmmsg+0x31a/0x7f0
[  245.518010][T11281]  ? __pfx_do_recvmmsg+0x10/0x10
[  245.518048][T11281]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  245.518076][T11281]  ? __fget_files+0x3a2/0x420
[  245.518114][T11281]  __x64_sys_recvmmsg+0x198/0x250
[  245.518142][T11281]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  245.518175][T11281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.518198][T11281]  do_syscall_64+0x174/0x580
[  245.518222][T11281]  ? trace_irq_disable+0x3b/0x140
[  245.518249][T11281]  ? clear_bhb_loop+0x40/0x90
[  245.518274][T11281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.518294][T11281] RIP: 0033:0x7efc0c59de99
[  245.518313][T11281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.518331][T11281] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  245.518360][T11281] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  245.518374][T11281] RDX: 0000000000000004 RSI: 0000200000004ac0 RDI: 0000000000000003
[  245.518386][T11281] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  245.518399][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.518411][T11281] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  245.518444][T11281]  </TASK>
[  245.937260][T11292] pimreg: entered allmulticast mode
[  245.941519][T11295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2119'.
[  245.985817][T11288] pimreg: left allmulticast mode
[  246.018107][T11295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2119'.
[  246.563712][T11315] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.2124'.
[  246.742247][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'.
[  246.808991][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2128'.
[  247.252703][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'.
[  247.308275][T11343] xt_l2tp: invalid flags combination: 8
[  247.318511][T11343] netlink: 'syz.2.2135': attribute type 1 has an invalid length.
[  247.454724][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'.
[  247.659197][T11359] netlink: 'syz.2.2143': attribute type 32 has an invalid length.
[  247.690637][T11359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2143'.
[  248.115865][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'.
[  248.562904][T11407] netlink: 'syz.3.2162': attribute type 32 has an invalid length.
[  248.585167][T11407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2162'.
[  249.186729][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'.
[  249.245207][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  249.365759][T11435] xt_l2tp: invalid flags combination: 8
[  249.396096][T11435] netlink: 'syz.2.2173': attribute type 1 has an invalid length.
[  250.273719][T11466] FAULT_INJECTION: forcing a failure.
[  250.273719][T11466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.297894][T11466] CPU: 0 UID: 0 PID: 11466 Comm: syz.0.2188 Not tainted syzkaller #0 PREEMPT(full) 
[  250.297922][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  250.297935][T11466] Call Trace:
[  250.297943][T11466]  <TASK>
[  250.297951][T11466]  dump_stack_lvl+0xe8/0x150
[  250.297989][T11466]  should_fail_ex+0x40c/0x560
[  250.298022][T11466]  _copy_from_iter+0x1d3/0x1660
[  250.298054][T11466]  ? rcu_is_watching+0x15/0xb0
[  250.298077][T11466]  ? trace_kmalloc+0x2a/0xf0
[  250.298110][T11466]  ? __pfx__copy_from_iter+0x10/0x10
[  250.298139][T11466]  ? __kmalloc_node_track_caller_noprof+0x2fd/0x730
[  250.298168][T11466]  ? netlink_sendmsg+0x5d4/0xb40
[  250.298211][T11466]  ? netlink_sendmsg+0x5d4/0xb40
[  250.298247][T11466]  ? netlink_sendmsg+0x650/0xb40
[  250.298275][T11466]  ? skb_put+0x112/0x210
[  250.298303][T11466]  netlink_sendmsg+0x6c0/0xb40
[  250.298355][T11466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.298386][T11466]  ? aa_sock_msg_perm+0xf1/0x1b0
[  250.298417][T11466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.298442][T11466]  sock_sendmsg_nosec+0x13a/0x180
[  250.298493][T11466]  ____sys_sendmsg+0x54e/0x850
[  250.298525][T11466]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.298561][T11466]  ? import_iovec+0x73/0xa0
[  250.298599][T11466]  ___sys_sendmsg+0x2a5/0x360
[  250.298623][T11466]  ? __lock_acquire+0x683/0x2cf0
[  250.298659][T11466]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.298724][T11466]  ? __fget_files+0x2a/0x420
[  250.298753][T11466]  ? __fget_files+0x3a2/0x420
[  250.298794][T11466]  __x64_sys_sendmsg+0x1b1/0x290
[  250.298822][T11466]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  250.298868][T11466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.298892][T11466]  do_syscall_64+0x174/0x580
[  250.298918][T11466]  ? trace_irq_disable+0x3b/0x140
[  250.298946][T11466]  ? clear_bhb_loop+0x40/0x90
[  250.298972][T11466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.298994][T11466] RIP: 0033:0x7f3598b9de99
[  250.299013][T11466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.299032][T11466] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.299059][T11466] RAX: ffffffffffffffda RBX: 00007f3598e25fa0 RCX: 00007f3598b9de99
[  250.299075][T11466] RDX: 0000000004000004 RSI: 0000200000000d00 RDI: 0000000000000003
[  250.299089][T11466] RBP: 00007f3596df6090 R08: 0000000000000000 R09: 0000000000000000
[  250.299103][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.299116][T11466] R13: 00007f3598e26038 R14: 00007f3598e25fa0 R15: 00007ffdd9c1b688
[  250.299150][T11466]  </TASK>
[  251.601181][T11512] __nla_validate_parse: 3 callbacks suppressed
[  251.601200][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'.
[  251.688288][T11512] xt_l2tp: invalid flags combination: 8
[  251.709806][T11512] netlink: 'syz.1.2206': attribute type 1 has an invalid length.
[  251.945874][T11524] FAULT_INJECTION: forcing a failure.
[  251.945874][T11524] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.961362][T11524] CPU: 0 UID: 0 PID: 11524 Comm: syz.3.2209 Not tainted syzkaller #0 PREEMPT(full) 
[  251.961391][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  251.961405][T11524] Call Trace:
[  251.961413][T11524]  <TASK>
[  251.961422][T11524]  dump_stack_lvl+0xe8/0x150
[  251.961460][T11524]  should_fail_ex+0x40c/0x560
[  251.961495][T11524]  _copy_from_iter+0x1d3/0x1660
[  251.961525][T11524]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  251.961556][T11524]  ? rcu_is_watching+0x15/0xb0
[  251.961579][T11524]  ? trace_kmem_cache_alloc+0x29/0xe0
[  251.961610][T11524]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  251.961638][T11524]  ? __pfx__copy_from_iter+0x10/0x10
[  251.961668][T11524]  ? __alloc_skb+0x276/0x7a0
[  251.961688][T11524]  ? __alloc_skb+0x276/0x7a0
[  251.961718][T11524]  ? netlink_sendmsg+0x650/0xb40
[  251.961743][T11524]  ? skb_put+0x112/0x210
[  251.961770][T11524]  netlink_sendmsg+0x6c0/0xb40
[  251.961809][T11524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.961842][T11524]  ? aa_sock_msg_perm+0xf1/0x1b0
[  251.961873][T11524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.961899][T11524]  sock_sendmsg_nosec+0x13a/0x180
[  251.961934][T11524]  ____sys_sendmsg+0x54e/0x850
[  251.961967][T11524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.962004][T11524]  ? import_iovec+0x73/0xa0
[  251.962043][T11524]  ___sys_sendmsg+0x2a5/0x360
[  251.962067][T11524]  ? __lock_acquire+0x683/0x2cf0
[  251.962102][T11524]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.962195][T11524]  ? __fget_files+0x2a/0x420
[  251.962228][T11524]  ? __fget_files+0x3a2/0x420
[  251.962272][T11524]  __x64_sys_sendmsg+0x1b1/0x290
[  251.962308][T11524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.962357][T11524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.962382][T11524]  do_syscall_64+0x174/0x580
[  251.962408][T11524]  ? trace_irq_disable+0x3b/0x140
[  251.962437][T11524]  ? clear_bhb_loop+0x40/0x90
[  251.962464][T11524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.962486][T11524] RIP: 0033:0x7fa1f699de99
[  251.962507][T11524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.962525][T11524] RSP: 002b:00007fa1f77c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.962561][T11524] RAX: ffffffffffffffda RBX: 00007fa1f6c25fa0 RCX: 00007fa1f699de99
[  251.962577][T11524] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  251.962591][T11524] RBP: 00007fa1f77c6090 R08: 0000000000000000 R09: 0000000000000000
[  251.962605][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.962618][T11524] R13: 00007fa1f6c26038 R14: 00007fa1f6c25fa0 R15: 00007ffdf36fb528
[  251.962656][T11524]  </TASK>
[  252.413787][T11535] netlink: 'syz.4.2212': attribute type 46 has an invalid length.
[  252.741901][T11550] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.2214'.
[  253.043801][T11556] bridge11: entered promiscuous mode
[  253.062081][T11558] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2221'.
[  253.071649][T11556] bridge11: entered allmulticast mode
[  253.102209][T11561] pimreg: entered allmulticast mode
[  253.377022][T11559] pimreg: left allmulticast mode
[  253.523187][T11572] lo speed is unknown, defaulting to 1000
[  253.736399][T11588] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2232'.
[  253.992200][T11602] FAULT_INJECTION: forcing a failure.
[  253.992200][T11602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.000001][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'.
[  254.005879][T11602] CPU: 1 UID: 0 PID: 11602 Comm: syz.4.2238 Not tainted syzkaller #0 PREEMPT(full) 
[  254.005965][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  254.005998][T11602] Call Trace:
[  254.006020][T11602]  <TASK>
[  254.006049][T11602]  dump_stack_lvl+0xe8/0x150
[  254.006155][T11602]  should_fail_ex+0x40c/0x560
[  254.006239][T11602]  _copy_from_user+0x2d/0xb0
[  254.006300][T11602]  ____sys_sendmsg+0x303/0x850
[  254.006383][T11602]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.006487][T11602]  ? import_iovec+0x73/0xa0
[  254.006585][T11602]  ___sys_sendmsg+0x2a5/0x360
[  254.006654][T11602]  ? __lock_acquire+0x683/0x2cf0
[  254.006749][T11602]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.006842][T11602]  ? kstrtouint+0x6e/0xe0
[  254.006997][T11602]  ? __fget_files+0x2a/0x420
[  254.007069][T11602]  ? __fget_files+0x3a2/0x420
[  254.007180][T11602]  __sys_sendmmsg+0x273/0x4d0
[  254.007272][T11602]  ? __pfx___sys_sendmmsg+0x10/0x10
[  254.007381][T11602]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  254.007494][T11602]  ? ksys_write+0x242/0x270
[  254.007555][T11602]  ? __pfx_ksys_write+0x10/0x10
[  254.007626][T11602]  __x64_sys_sendmmsg+0xa0/0xc0
[  254.007670][T11602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.007722][T11602]  do_syscall_64+0x174/0x580
[  254.007790][T11602]  ? trace_irq_disable+0x3b/0x140
[  254.007861][T11602]  ? clear_bhb_loop+0x40/0x90
[  254.007943][T11602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.008015][T11602] RIP: 0033:0x7efc0c59de99
[  254.008066][T11602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.008108][T11602] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  254.008176][T11602] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  254.008216][T11602] RDX: 0000000000000001 RSI: 0000200000004bc0 RDI: 0000000000000004
[  254.008248][T11602] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  254.008281][T11602] R10: 000000000401c040 R11: 0000000000000246 R12: 0000000000000001
[  254.008319][T11602] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  254.008436][T11602]  </TASK>
[  254.281956][T11603] xt_l2tp: invalid flags combination: 8
[  254.311787][T11607] xt_TPROXY: Can be used only with -p tcp or -p udp
[  254.338276][T11601] netlink: 'syz.1.2236': attribute type 1 has an invalid length.
[  254.691081][T11624] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2245'.
[  255.230224][T11641] pimreg: entered allmulticast mode
[  255.279259][T11637] pimreg: left allmulticast mode
[  255.317788][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'.
[  255.331681][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'.
[  255.575891][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  255.583346][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  257.597050][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2299'.
[  257.620402][T11767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2299'.
[  257.649768][T11771] FAULT_INJECTION: forcing a failure.
[  257.649768][T11771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  257.697000][T11771] CPU: 0 UID: 0 PID: 11771 Comm: syz.4.2301 Not tainted syzkaller #0 PREEMPT(full) 
[  257.697026][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  257.697038][T11771] Call Trace:
[  257.697046][T11771]  <TASK>
[  257.697054][T11771]  dump_stack_lvl+0xe8/0x150
[  257.697089][T11771]  should_fail_ex+0x40c/0x560
[  257.697119][T11771]  _copy_from_iter+0x1d3/0x1660
[  257.697165][T11771]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  257.697194][T11771]  ? rcu_is_watching+0x15/0xb0
[  257.697215][T11771]  ? trace_kmem_cache_alloc+0x29/0xe0
[  257.697244][T11771]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  257.697271][T11771]  ? __pfx__copy_from_iter+0x10/0x10
[  257.697300][T11771]  ? __alloc_skb+0x276/0x7a0
[  257.697328][T11771]  ? __alloc_skb+0x276/0x7a0
[  257.697355][T11771]  ? netlink_sendmsg+0x650/0xb40
[  257.697381][T11771]  ? skb_put+0x112/0x210
[  257.697405][T11771]  netlink_sendmsg+0x6c0/0xb40
[  257.697441][T11771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.697472][T11771]  ? aa_sock_msg_perm+0xf1/0x1b0
[  257.697502][T11771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.697526][T11771]  sock_sendmsg_nosec+0x13a/0x180
[  257.697559][T11771]  ____sys_sendmsg+0x54e/0x850
[  257.697590][T11771]  ? __pfx_____sys_sendmsg+0x10/0x10
[  257.697624][T11771]  ? import_iovec+0x73/0xa0
[  257.697659][T11771]  ___sys_sendmsg+0x2a5/0x360
[  257.697682][T11771]  ? __lock_acquire+0x683/0x2cf0
[  257.697717][T11771]  ? __pfx____sys_sendmsg+0x10/0x10
[  257.697779][T11771]  ? __fget_files+0x2a/0x420
[  257.697808][T11771]  ? __fget_files+0x3a2/0x420
[  257.697848][T11771]  __x64_sys_sendmsg+0x1b1/0x290
[  257.697876][T11771]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  257.697921][T11771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.697944][T11771]  do_syscall_64+0x174/0x580
[  257.697969][T11771]  ? trace_irq_disable+0x3b/0x140
[  257.697997][T11771]  ? clear_bhb_loop+0x40/0x90
[  257.698026][T11771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.698047][T11771] RIP: 0033:0x7efc0c59de99
[  257.698066][T11771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.698084][T11771] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.698118][T11771] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  257.698132][T11771] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005
[  257.698145][T11771] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  257.698157][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.698168][T11771] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  257.698200][T11771]  </TASK>
[  258.087173][T11775] syzkaller0: entered promiscuous mode
[  258.103148][T11775] syzkaller0: entered allmulticast mode
[  258.325227][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  258.342137][T11786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2307'.
[  259.947255][T11810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2313'.
[  259.976865][T11810] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2313'.
[  260.500128][T11828] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2319'.
[  260.593002][T11834] sctp: [Deprecated]: syz.3.2321 (pid 11834) Use of int in max_burst socket option.
[  260.593002][T11834] Use struct sctp_assoc_value instead
[  260.899422][T11842] FAULT_INJECTION: forcing a failure.
[  260.899422][T11842] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.942722][T11842] CPU: 1 UID: 0 PID: 11842 Comm: syz.4.2324 Not tainted syzkaller #0 PREEMPT(full) 
[  260.942751][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  260.942764][T11842] Call Trace:
[  260.942773][T11842]  <TASK>
[  260.942781][T11842]  dump_stack_lvl+0xe8/0x150
[  260.942819][T11842]  should_fail_ex+0x40c/0x560
[  260.942852][T11842]  _copy_from_user+0x2d/0xb0
[  260.942874][T11842]  generic_map_update_batch+0x651/0x9a0
[  260.942909][T11842]  ? __pfx_generic_map_update_batch+0x10/0x10
[  260.942934][T11842]  ? __fget_files+0x2a/0x420
[  260.942971][T11842]  ? __pfx_generic_map_update_batch+0x10/0x10
[  260.942996][T11842]  bpf_map_do_batch+0x391/0x630
[  260.943033][T11842]  __sys_bpf+0xbe5/0xd90
[  260.943071][T11842]  ? __pfx___sys_bpf+0x10/0x10
[  260.943113][T11842]  ? __fget_files+0x2a/0x420
[  260.943161][T11842]  ? ksys_write+0x242/0x270
[  260.943185][T11842]  ? __pfx_ksys_write+0x10/0x10
[  260.943213][T11842]  __x64_sys_bpf+0xba/0xd0
[  260.943251][T11842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.943292][T11842]  do_syscall_64+0x174/0x580
[  260.943321][T11842]  ? clear_bhb_loop+0x40/0x90
[  260.943348][T11842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.943370][T11842] RIP: 0033:0x7efc0c59de99
[  260.943389][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.943409][T11842] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  260.943432][T11842] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  260.943448][T11842] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  260.943462][T11842] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  260.943487][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.943499][T11842] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  260.943538][T11842]  </TASK>
[  261.256362][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2330'.
[  261.266436][T11858] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2330'.
[  261.623835][T11866] bridge8: entered promiscuous mode
[  261.629164][T11866] bridge8: entered allmulticast mode
[  262.569318][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'.
[  262.857646][T11920] bond5 (unregistering): Released all slaves
[  263.781251][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'.
[  263.822622][T11955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2367'.
[  264.788145][T12002] netlink: 'syz.3.2386': attribute type 31 has an invalid length.
[  264.815839][T12002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2386'.
[  264.868214][T12005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2388'.
[  264.884309][T12005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2388'.
[  265.258155][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'.
[  265.317205][T12024] xt_l2tp: invalid flags combination: 8
[  265.326344][T12024] netlink: 'syz.2.2396': attribute type 1 has an invalid length.
[  265.940655][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  266.015633][T12057] xt_l2tp: invalid flags combination: 8
[  266.031816][T12057] netlink: 'syz.2.2412': attribute type 1 has an invalid length.
[  266.799391][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'.
[  266.884923][T12111] xt_l2tp: invalid flags combination: 8
[  266.894404][T12111] netlink: 'syz.1.2429': attribute type 1 has an invalid length.
[  269.624724][T12094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.455807][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'.
[  270.520327][T12144] xt_l2tp: invalid flags combination: 8
[  270.553434][T12144] netlink: 'syz.3.2443': attribute type 1 has an invalid length.
[  270.696705][T12152] tipc: Failed to remove unknown binding: 66,0,0/2540985329:935344745/935344747
[  270.758373][T12152] tipc: Failed to remove unknown binding: 66,0,0/2540985329:935344745/935344746
[  270.856950][T12153] bridge11: entered promiscuous mode
[  270.863527][T12153] bridge11: entered allmulticast mode
[  271.293126][T12171] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2455'.
[  271.418200][T12173] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2455'.
[  271.451387][T12172] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2455'.
[  271.482529][T12173] 0ªî{X¹¦: renamed from gretap0
[  271.506166][T12173] 0ªî{X¹¦: entered allmulticast mode
[  271.542534][T12173] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  271.611671][T12172] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  271.651697][T12172] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  271.746990][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'.
[  271.792526][T12187] xt_l2tp: invalid flags combination: 8
[  271.808512][T12187] netlink: 'syz.3.2458': attribute type 1 has an invalid length.
[  272.637355][T12228] tipc: Failed to remove unknown binding: 66,0,0/0:1944669721/1944669723
[  272.681525][T12228] tipc: Failed to remove unknown binding: 66,0,0/0:1944669721/1944669722
[  272.704081][T12228] tipc: Failed to remove unknown binding: 66,0,0/0:1944669721/1944669723
[  272.717077][T12233] syzkaller0: entered promiscuous mode
[  272.737883][T12233] syzkaller0: entered allmulticast mode
[  272.749654][T12228] tipc: Failed to remove unknown binding: 66,0,0/0:1944669721/1944669722
[  272.938474][T12238] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  272.969765][T12238] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  273.073052][T12241] Bluetooth: MGMT ver 1.23
[  273.139559][T12243] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2465'.
[  273.455039][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'.
[  273.508460][T12252] xt_l2tp: invalid flags combination: 8
[  273.516253][T12252] netlink: 'syz.4.2469': attribute type 1 has an invalid length.
[  274.063154][T12279] tipc: Failed to remove unknown binding: 66,0,0/0:1149162316/1149162318
[  274.096066][T12279] tipc: Failed to remove unknown binding: 66,0,0/0:1149162316/1149162317
[  274.124496][T12279] tipc: Failed to remove unknown binding: 66,0,0/0:1149162316/1149162318
[  274.144930][T12279] tipc: Failed to remove unknown binding: 66,0,0/0:1149162316/1149162317
[  274.503643][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'.
[  274.572311][T12299] xt_l2tp: invalid flags combination: 8
[  274.594884][T12299] netlink: 'syz.1.2483': attribute type 1 has an invalid length.
[  274.873095][T12308] netlink: 'syz.2.2486': attribute type 361 has an invalid length.
[  275.786113][T12355] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2505'.
[  275.952607][T12364] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2509'.
[  276.354585][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2516'.
[  276.501063][T12395] xt_l2tp: invalid flags combination: 8
[  276.626540][T12396] netlink: 'syz.0.2516': attribute type 1 has an invalid length.
[  276.803178][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2520'.
[  276.825195][T12400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2520'.
[  276.872306][T12402] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2521'.
[  277.004598][T12411] FAULT_INJECTION: forcing a failure.
[  277.004598][T12411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.050576][T12411] CPU: 0 UID: 0 PID: 12411 Comm: syz.0.2523 Not tainted syzkaller #0 PREEMPT(full) 
[  277.050604][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  277.050618][T12411] Call Trace:
[  277.050626][T12411]  <TASK>
[  277.050635][T12411]  dump_stack_lvl+0xe8/0x150
[  277.050679][T12411]  should_fail_ex+0x40c/0x560
[  277.050710][T12411]  _copy_from_iter+0x1d3/0x1660
[  277.050739][T12411]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  277.050768][T12411]  ? rcu_is_watching+0x15/0xb0
[  277.050789][T12411]  ? trace_kmem_cache_alloc+0x29/0xe0
[  277.050818][T12411]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  277.050845][T12411]  ? __pfx__copy_from_iter+0x10/0x10
[  277.050873][T12411]  ? __alloc_skb+0x276/0x7a0
[  277.050893][T12411]  ? __alloc_skb+0x276/0x7a0
[  277.050920][T12411]  ? netlink_sendmsg+0x650/0xb40
[  277.050945][T12411]  ? skb_put+0x112/0x210
[  277.050969][T12411]  netlink_sendmsg+0x6c0/0xb40
[  277.051005][T12411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.051035][T12411]  ? aa_sock_msg_perm+0xf1/0x1b0
[  277.051064][T12411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.051088][T12411]  sock_sendmsg_nosec+0x13a/0x180
[  277.051125][T12411]  ____sys_sendmsg+0x54e/0x850
[  277.051159][T12411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.051195][T12411]  ? import_iovec+0x73/0xa0
[  277.051248][T12411]  ___sys_sendmsg+0x2a5/0x360
[  277.051272][T12411]  ? __lock_acquire+0x683/0x2cf0
[  277.051308][T12411]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.051372][T12411]  ? __fget_files+0x2a/0x420
[  277.051401][T12411]  ? __fget_files+0x3a2/0x420
[  277.051448][T12411]  __x64_sys_sendmsg+0x1b1/0x290
[  277.051476][T12411]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  277.051522][T12411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.051547][T12411]  do_syscall_64+0x174/0x580
[  277.051572][T12411]  ? trace_irq_disable+0x3b/0x140
[  277.051600][T12411]  ? clear_bhb_loop+0x40/0x90
[  277.051627][T12411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.051650][T12411] RIP: 0033:0x7f3598b9de99
[  277.051677][T12411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.051696][T12411] RSP: 002b:00007f3596dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.051719][T12411] RAX: ffffffffffffffda RBX: 00007f3598e26090 RCX: 00007f3598b9de99
[  277.051735][T12411] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007
[  277.051748][T12411] RBP: 00007f3596dd5090 R08: 0000000000000000 R09: 0000000000000000
[  277.051762][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.051774][T12411] R13: 00007f3598e26128 R14: 00007f3598e26090 R15: 00007ffdd9c1b688
[  277.051809][T12411]  </TASK>
[  278.017596][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2533'.
[  278.059979][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2533'.
[  278.078855][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'.
[  278.095337][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'.
[  278.176290][T12446] xt_l2tp: invalid flags combination: 8
[  278.199142][T12446] netlink: 'syz.3.2534': attribute type 1 has an invalid length.
[  278.446712][T12461] pim6reg: entered allmulticast mode
[  278.971506][T12479] FAULT_INJECTION: forcing a failure.
[  278.971506][T12479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.012335][T12479] CPU: 0 UID: 0 PID: 12479 Comm: syz.4.2548 Not tainted syzkaller #0 PREEMPT(full) 
[  279.012379][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  279.012392][T12479] Call Trace:
[  279.012401][T12479]  <TASK>
[  279.012420][T12479]  dump_stack_lvl+0xe8/0x150
[  279.012474][T12479]  should_fail_ex+0x40c/0x560
[  279.012514][T12479]  _copy_from_iter+0x1d3/0x1660
[  279.012541][T12479]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  279.012570][T12479]  ? rcu_is_watching+0x15/0xb0
[  279.012592][T12479]  ? trace_kmem_cache_alloc+0x29/0xe0
[  279.012620][T12479]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  279.012647][T12479]  ? __pfx__copy_from_iter+0x10/0x10
[  279.012675][T12479]  ? __alloc_skb+0x276/0x7a0
[  279.012694][T12479]  ? __alloc_skb+0x276/0x7a0
[  279.012721][T12479]  ? netlink_sendmsg+0x650/0xb40
[  279.012747][T12479]  ? skb_put+0x112/0x210
[  279.012771][T12479]  netlink_sendmsg+0x6c0/0xb40
[  279.012806][T12479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.012836][T12479]  ? aa_sock_msg_perm+0xf1/0x1b0
[  279.012865][T12479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.012889][T12479]  sock_sendmsg_nosec+0x13a/0x180
[  279.012921][T12479]  ____sys_sendmsg+0x54e/0x850
[  279.012952][T12479]  ? __pfx_____sys_sendmsg+0x10/0x10
[  279.012985][T12479]  ? import_iovec+0x73/0xa0
[  279.013021][T12479]  ___sys_sendmsg+0x2a5/0x360
[  279.013044][T12479]  ? __lock_acquire+0x683/0x2cf0
[  279.013078][T12479]  ? __pfx____sys_sendmsg+0x10/0x10
[  279.013139][T12479]  ? __fget_files+0x2a/0x420
[  279.013167][T12479]  ? __fget_files+0x3a2/0x420
[  279.013206][T12479]  __x64_sys_sendmsg+0x1b1/0x290
[  279.013234][T12479]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  279.013278][T12479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.013301][T12479]  do_syscall_64+0x174/0x580
[  279.013325][T12479]  ? trace_irq_disable+0x3b/0x140
[  279.013353][T12479]  ? clear_bhb_loop+0x40/0x90
[  279.013379][T12479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.013400][T12479] RIP: 0033:0x7efc0c59de99
[  279.013419][T12479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.013438][T12479] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  279.013460][T12479] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  279.013476][T12479] RDX: 0000000000004002 RSI: 0000200000003e00 RDI: 0000000000000003
[  279.013495][T12479] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  279.013509][T12479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  279.013521][T12479] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  279.013554][T12479]  </TASK>
[  279.336183][T12490] xt_l2tp: invalid flags combination: 8
[  279.427791][T12496] FAULT_INJECTION: forcing a failure.
[  279.427791][T12496] name failslab, interval 1, probability 0, space 0, times 0
[  279.487069][T12496] CPU: 1 UID: 0 PID: 12496 Comm: syz.1.2552 Not tainted syzkaller #0 PREEMPT(full) 
[  279.487103][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  279.487118][T12496] Call Trace:
[  279.487127][T12496]  <TASK>
[  279.487138][T12496]  dump_stack_lvl+0xe8/0x150
[  279.487180][T12496]  should_fail_ex+0x40c/0x560
[  279.487218][T12496]  should_failslab+0xa8/0x100
[  279.487259][T12496]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  279.487291][T12496]  ? skb_clone+0x212/0x3a0
[  279.487319][T12496]  ? skb_clone+0x212/0x3a0
[  279.487356][T12496]  skb_clone+0x212/0x3a0
[  279.487390][T12496]  __netlink_deliver_tap+0x413/0x860
[  279.487435][T12496]  ? netlink_deliver_tap+0x2e/0x1b0
[  279.487468][T12496]  netlink_deliver_tap+0x19c/0x1b0
[  279.487500][T12496]  netlink_unicast+0x77f/0x940
[  279.487540][T12496]  netlink_sendmsg+0x813/0xb40
[  279.487582][T12496]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.487619][T12496]  ? aa_sock_msg_perm+0xf1/0x1b0
[  279.487652][T12496]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.487681][T12496]  sock_sendmsg_nosec+0x13a/0x180
[  279.487720][T12496]  ____sys_sendmsg+0x54e/0x850
[  279.487756][T12496]  ? __pfx_____sys_sendmsg+0x10/0x10
[  279.487797][T12496]  ? import_iovec+0x73/0xa0
[  279.487839][T12496]  ___sys_sendmsg+0x2a5/0x360
[  279.487865][T12496]  ? __lock_acquire+0x683/0x2cf0
[  279.487906][T12496]  ? __pfx____sys_sendmsg+0x10/0x10
[  279.487946][T12496]  ? kstrtouint+0x6e/0xe0
[  279.488018][T12496]  ? __fget_files+0x2a/0x420
[  279.488051][T12496]  ? __fget_files+0x3a2/0x420
[  279.488098][T12496]  __sys_sendmmsg+0x273/0x4d0
[  279.488135][T12496]  ? __pfx___sys_sendmmsg+0x10/0x10
[  279.488175][T12496]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  279.488224][T12496]  ? ksys_write+0x242/0x270
[  279.488262][T12496]  ? __pfx_ksys_write+0x10/0x10
[  279.488284][T12496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.488318][T12496]  __x64_sys_sendmmsg+0xa0/0xc0
[  279.488347][T12496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.488373][T12496]  do_syscall_64+0x174/0x580
[  279.488402][T12496]  ? trace_irq_disable+0x3b/0x140
[  279.488435][T12496]  ? clear_bhb_loop+0x40/0x90
[  279.488466][T12496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.488490][T12496] RIP: 0033:0x7ff32c59de99
[  279.488512][T12496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.488533][T12496] RSP: 002b:00007ff32d386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  279.488559][T12496] RAX: ffffffffffffffda RBX: 00007ff32c825fa0 RCX: 00007ff32c59de99
[  279.488576][T12496] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003
[  279.488593][T12496] RBP: 00007ff32d386090 R08: 0000000000000000 R09: 0000000000000000
[  279.488608][T12496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  279.488622][T12496] R13: 00007ff32c826038 R14: 00007ff32c825fa0 R15: 00007ffe1b1ce778
[  279.488662][T12496]  </TASK>
[  280.065096][T12499] netlink: zone id is out of range
[  280.070467][T12499] netlink: zone id is out of range
[  280.614459][T12533] bridge11: entered promiscuous mode
[  280.650365][T12533] bridge11: entered allmulticast mode
[  281.045674][T12557] __nla_validate_parse: 5 callbacks suppressed
[  281.045694][T12557] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2573'.
[  281.281628][T12573] FAULT_INJECTION: forcing a failure.
[  281.281628][T12573] name failslab, interval 1, probability 0, space 0, times 0
[  281.323837][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.3.2577 Not tainted syzkaller #0 PREEMPT(full) 
[  281.323864][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  281.323878][T12573] Call Trace:
[  281.323886][T12573]  <TASK>
[  281.323894][T12573]  dump_stack_lvl+0xe8/0x150
[  281.323931][T12573]  should_fail_ex+0x40c/0x560
[  281.323964][T12573]  should_failslab+0xa8/0x100
[  281.323998][T12573]  __kmalloc_noprof+0xfe/0x720
[  281.324026][T12573]  ? is_bpf_text_address+0x26/0x2b0
[  281.324058][T12573]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  281.324090][T12573]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  281.324131][T12573]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  281.324172][T12573]  genl_family_rcv_msg_doit+0xda/0x340
[  281.324212][T12573]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  281.324253][T12573]  ? apparmor_capable+0x126/0x170
[  281.324284][T12573]  ? bpf_lsm_capable+0x9/0x20
[  281.324311][T12573]  ? security_capable+0x7e/0x2c0
[  281.324340][T12573]  genl_rcv_msg+0x614/0x7a0
[  281.324378][T12573]  ? __pfx_genl_rcv_msg+0x10/0x10
[  281.324407][T12573]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  281.324438][T12573]  ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10
[  281.324463][T12573]  ? __pfx_nl80211_post_doit+0x10/0x10
[  281.324518][T12573]  netlink_rcv_skb+0x226/0x4a0
[  281.324545][T12573]  ? __pfx_genl_rcv_msg+0x10/0x10
[  281.324577][T12573]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  281.324619][T12573]  ? down_read+0x2be/0x330
[  281.324653][T12573]  genl_rcv+0x28/0x40
[  281.324682][T12573]  netlink_unicast+0x7bb/0x940
[  281.324717][T12573]  netlink_sendmsg+0x813/0xb40
[  281.324753][T12573]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.324784][T12573]  ? aa_sock_msg_perm+0xf1/0x1b0
[  281.324815][T12573]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.324842][T12573]  sock_sendmsg_nosec+0x13a/0x180
[  281.324876][T12573]  ____sys_sendmsg+0x54e/0x850
[  281.324907][T12573]  ? __pfx_____sys_sendmsg+0x10/0x10
[  281.324942][T12573]  ? import_iovec+0x73/0xa0
[  281.324979][T12573]  ___sys_sendmsg+0x2a5/0x360
[  281.325003][T12573]  ? __lock_acquire+0x683/0x2cf0
[  281.325037][T12573]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.325100][T12573]  ? __fget_files+0x2a/0x420
[  281.325130][T12573]  ? __fget_files+0x3a2/0x420
[  281.325171][T12573]  __x64_sys_sendmsg+0x1b1/0x290
[  281.325199][T12573]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  281.325244][T12573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.325269][T12573]  do_syscall_64+0x174/0x580
[  281.325293][T12573]  ? trace_irq_disable+0x3b/0x140
[  281.325321][T12573]  ? clear_bhb_loop+0x40/0x90
[  281.325348][T12573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.325369][T12573] RIP: 0033:0x7fa1f699de99
[  281.325388][T12573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.325407][T12573] RSP: 002b:00007fa1f77c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.325429][T12573] RAX: ffffffffffffffda RBX: 00007fa1f6c25fa0 RCX: 00007fa1f699de99
[  281.325445][T12573] RDX: 0000000004000000 RSI: 00002000000037c0 RDI: 0000000000000003
[  281.325459][T12573] RBP: 00007fa1f77c6090 R08: 0000000000000000 R09: 0000000000000000
[  281.325471][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.325483][T12573] R13: 00007fa1f6c26038 R14: 00007fa1f6c25fa0 R15: 00007ffdf36fb528
[  281.325525][T12573]  </TASK>
[  281.666139][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'.
[  281.686470][T12575] lo speed is unknown, defaulting to 1000
[  281.887909][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2582'.
[  281.898388][T12587] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2582'.
[  282.926966][T12630] syzkaller1: entered promiscuous mode
[  282.948254][T12630] syzkaller1: entered allmulticast mode
[  282.998763][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2598'.
[  283.022413][T12633] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2598'.
[  283.470882][T12643] FAULT_INJECTION: forcing a failure.
[  283.470882][T12643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.484862][T12643] CPU: 0 UID: 0 PID: 12643 Comm: syz.0.2602 Not tainted syzkaller #0 PREEMPT(full) 
[  283.484889][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  283.484901][T12643] Call Trace:
[  283.484909][T12643]  <TASK>
[  283.484918][T12643]  dump_stack_lvl+0xe8/0x150
[  283.484954][T12643]  should_fail_ex+0x40c/0x560
[  283.484985][T12643]  _copy_from_iter+0x1d3/0x1660
[  283.485012][T12643]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  283.485041][T12643]  ? rcu_is_watching+0x15/0xb0
[  283.485062][T12643]  ? trace_kmem_cache_alloc+0x29/0xe0
[  283.485091][T12643]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  283.485117][T12643]  ? __pfx__copy_from_iter+0x10/0x10
[  283.485145][T12643]  ? __alloc_skb+0x276/0x7a0
[  283.485164][T12643]  ? __alloc_skb+0x276/0x7a0
[  283.485191][T12643]  ? netlink_sendmsg+0x650/0xb40
[  283.485216][T12643]  ? skb_put+0x112/0x210
[  283.485240][T12643]  netlink_sendmsg+0x6c0/0xb40
[  283.485276][T12643]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.485305][T12643]  ? aa_sock_msg_perm+0xf1/0x1b0
[  283.485334][T12643]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.485358][T12643]  sock_sendmsg_nosec+0x13a/0x180
[  283.485391][T12643]  ____sys_sendmsg+0x54e/0x850
[  283.485421][T12643]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.485455][T12643]  ? import_iovec+0x73/0xa0
[  283.485492][T12643]  ___sys_sendmsg+0x2a5/0x360
[  283.485515][T12643]  ? __lock_acquire+0x683/0x2cf0
[  283.485549][T12643]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.485698][T12643]  ? __fget_files+0x2a/0x420
[  283.485736][T12643]  ? __fget_files+0x3a2/0x420
[  283.485776][T12643]  __x64_sys_sendmsg+0x1b1/0x290
[  283.485804][T12643]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.485848][T12643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.485871][T12643]  do_syscall_64+0x174/0x580
[  283.485895][T12643]  ? trace_irq_disable+0x3b/0x140
[  283.485927][T12643]  ? clear_bhb_loop+0x40/0x90
[  283.485952][T12643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.485973][T12643] RIP: 0033:0x7f3598b9de99
[  283.485993][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.486011][T12643] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.486033][T12643] RAX: ffffffffffffffda RBX: 00007f3598e25fa0 RCX: 00007f3598b9de99
[  283.486048][T12643] RDX: 0000000000040832 RSI: 000020000000a940 RDI: 0000000000000004
[  283.486062][T12643] RBP: 00007f3596df6090 R08: 0000000000000000 R09: 0000000000000000
[  283.486075][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.486087][T12643] R13: 00007f3598e26038 R14: 00007f3598e25fa0 R15: 00007ffdd9c1b688
[  283.486129][T12643]  </TASK>
[  283.897403][T12652] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2604'.
[  284.075783][T12656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2605'.
[  284.114547][T12660] sctp: [Deprecated]: syz.3.2607 (pid 12660) Use of int in max_burst socket option deprecated.
[  284.114547][T12660] Use struct sctp_assoc_value instead
[  284.836543][T12700] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2623'.
[  284.871579][T12701] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2621'.
[  285.309152][T12720] FAULT_INJECTION: forcing a failure.
[  285.309152][T12720] name failslab, interval 1, probability 0, space 0, times 0
[  285.359591][T12720] CPU: 0 UID: 0 PID: 12720 Comm: syz.3.2632 Not tainted syzkaller #0 PREEMPT(full) 
[  285.359617][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  285.359630][T12720] Call Trace:
[  285.359638][T12720]  <TASK>
[  285.359646][T12720]  dump_stack_lvl+0xe8/0x150
[  285.359703][T12720]  should_fail_ex+0x40c/0x560
[  285.359752][T12720]  should_failslab+0xa8/0x100
[  285.359788][T12720]  __kmalloc_noprof+0xfe/0x720
[  285.359818][T12720]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  285.359852][T12720]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  285.359894][T12720]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  285.359942][T12720]  genl_family_rcv_msg_doit+0xda/0x340
[  285.359981][T12720]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  285.360023][T12720]  ? apparmor_capable+0x126/0x170
[  285.360054][T12720]  ? bpf_lsm_capable+0x9/0x20
[  285.360082][T12720]  ? security_capable+0x7e/0x2c0
[  285.360112][T12720]  genl_rcv_msg+0x614/0x7a0
[  285.360151][T12720]  ? __pfx_genl_rcv_msg+0x10/0x10
[  285.360180][T12720]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  285.360203][T12720]  ? __pfx_nl802154_new_interface+0x10/0x10
[  285.360225][T12720]  ? __pfx_nl802154_post_doit+0x10/0x10
[  285.360265][T12720]  netlink_rcv_skb+0x226/0x4a0
[  285.360291][T12720]  ? __pfx_genl_rcv_msg+0x10/0x10
[  285.360325][T12720]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  285.360368][T12720]  ? down_read+0x2be/0x330
[  285.360402][T12720]  genl_rcv+0x28/0x40
[  285.360431][T12720]  netlink_unicast+0x7bb/0x940
[  285.360466][T12720]  netlink_sendmsg+0x813/0xb40
[  285.360503][T12720]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.360534][T12720]  ? aa_sock_msg_perm+0xf1/0x1b0
[  285.360565][T12720]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.360590][T12720]  sock_sendmsg_nosec+0x13a/0x180
[  285.360624][T12720]  ____sys_sendmsg+0x54e/0x850
[  285.360664][T12720]  ? __pfx_____sys_sendmsg+0x10/0x10
[  285.360701][T12720]  ? import_iovec+0x73/0xa0
[  285.360738][T12720]  ___sys_sendmsg+0x2a5/0x360
[  285.360762][T12720]  ? __lock_acquire+0x683/0x2cf0
[  285.360797][T12720]  ? __pfx____sys_sendmsg+0x10/0x10
[  285.360874][T12720]  ? __fget_files+0x2a/0x420
[  285.360902][T12720]  ? __fget_files+0x3a2/0x420
[  285.360952][T12720]  __x64_sys_sendmsg+0x1b1/0x290
[  285.360978][T12720]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  285.361020][T12720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.361042][T12720]  do_syscall_64+0x174/0x580
[  285.361064][T12720]  ? trace_irq_disable+0x3b/0x140
[  285.361090][T12720]  ? clear_bhb_loop+0x40/0x90
[  285.361114][T12720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.361134][T12720] RIP: 0033:0x7fa1f699de99
[  285.361152][T12720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.361169][T12720] RSP: 002b:00007fa1f77c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.361190][T12720] RAX: ffffffffffffffda RBX: 00007fa1f6c25fa0 RCX: 00007fa1f699de99
[  285.361222][T12720] RDX: 000000000000c000 RSI: 0000200000005280 RDI: 0000000000000004
[  285.361236][T12720] RBP: 00007fa1f77c6090 R08: 0000000000000000 R09: 0000000000000000
[  285.361250][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.361262][T12720] R13: 00007fa1f6c26038 R14: 00007fa1f6c25fa0 R15: 00007ffdf36fb528
[  285.361298][T12720]  </TASK>
[  285.956403][T12738] xt_socket: unknown flags 0x8
[  286.733493][T12776] FAULT_INJECTION: forcing a failure.
[  286.733493][T12776] name failslab, interval 1, probability 0, space 0, times 0
[  286.763205][T12776] CPU: 1 UID: 0 PID: 12776 Comm: syz.4.2649 Not tainted syzkaller #0 PREEMPT(full) 
[  286.763235][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  286.763247][T12776] Call Trace:
[  286.763256][T12776]  <TASK>
[  286.763265][T12776]  dump_stack_lvl+0xe8/0x150
[  286.763302][T12776]  should_fail_ex+0x40c/0x560
[  286.763343][T12776]  should_failslab+0xa8/0x100
[  286.763379][T12776]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  286.763408][T12776]  ? skb_clone+0x212/0x3a0
[  286.763433][T12776]  ? skb_clone+0x212/0x3a0
[  286.763464][T12776]  skb_clone+0x212/0x3a0
[  286.763494][T12776]  __netlink_deliver_tap+0x413/0x860
[  286.763535][T12776]  ? netlink_deliver_tap+0x2e/0x1b0
[  286.763562][T12776]  netlink_deliver_tap+0x19c/0x1b0
[  286.763590][T12776]  netlink_unicast+0x77f/0x940
[  286.763625][T12776]  netlink_sendmsg+0x813/0xb40
[  286.763662][T12776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.763693][T12776]  ? aa_sock_msg_perm+0xf1/0x1b0
[  286.763724][T12776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.763748][T12776]  sock_sendmsg_nosec+0x13a/0x180
[  286.763787][T12776]  ____sys_sendmsg+0x54e/0x850
[  286.763819][T12776]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.763855][T12776]  ? import_iovec+0x73/0xa0
[  286.763893][T12776]  ___sys_sendmsg+0x2a5/0x360
[  286.763917][T12776]  ? __lock_acquire+0x683/0x2cf0
[  286.763953][T12776]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.764019][T12776]  ? __fget_files+0x2a/0x420
[  286.764048][T12776]  ? __fget_files+0x3a2/0x420
[  286.764090][T12776]  __x64_sys_sendmsg+0x1b1/0x290
[  286.764119][T12776]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  286.764166][T12776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.764191][T12776]  do_syscall_64+0x174/0x580
[  286.764217][T12776]  ? trace_irq_disable+0x3b/0x140
[  286.764246][T12776]  ? clear_bhb_loop+0x40/0x90
[  286.764273][T12776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.764295][T12776] RIP: 0033:0x7efc0c59de99
[  286.764315][T12776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.764353][T12776] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.764376][T12776] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  286.764391][T12776] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  286.764404][T12776] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  286.764417][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.764429][T12776] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  286.764464][T12776]  </TASK>
[  287.122949][T12774] bridge7: entered promiscuous mode
[  287.128286][T12774] bridge7: entered allmulticast mode
[  287.264744][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'.
[  287.368931][T12785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.401641][T12795] netlink: 'syz.0.2653': attribute type 10 has an invalid length.
[  287.502874][T12795] dummy0: entered promiscuous mode
[  287.556804][T12785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.680934][T12785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.826886][T12785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.934579][T12816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2662'.
[  287.945905][T12816] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2662'.
[  288.121108][T12210] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.163191][T12210] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.426999][   T80] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.504100][T12210] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.783365][T12834] netlink: 'syz.2.2665': attribute type 25 has an invalid length.
[  288.798417][T12834] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2665'.
[  288.836044][T12836] FAULT_INJECTION: forcing a failure.
[  288.836044][T12836] name failslab, interval 1, probability 0, space 0, times 0
[  288.859559][T12836] CPU: 1 UID: 0 PID: 12836 Comm: syz.3.2668 Not tainted syzkaller #0 PREEMPT(full) 
[  288.859588][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  288.859601][T12836] Call Trace:
[  288.859610][T12836]  <TASK>
[  288.859618][T12836]  dump_stack_lvl+0xe8/0x150
[  288.859655][T12836]  should_fail_ex+0x40c/0x560
[  288.859689][T12836]  should_failslab+0xa8/0x100
[  288.859724][T12836]  __kmalloc_noprof+0xfe/0x720
[  288.859753][T12836]  ? is_bpf_text_address+0x26/0x2b0
[  288.859826][T12836]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  288.859858][T12836]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  288.859899][T12836]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  288.859949][T12836]  genl_family_rcv_msg_doit+0xda/0x340
[  288.859988][T12836]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  288.860030][T12836]  ? apparmor_capable+0x126/0x170
[  288.860062][T12836]  ? bpf_lsm_capable+0x9/0x20
[  288.860089][T12836]  ? security_capable+0x7e/0x2c0
[  288.860119][T12836]  genl_rcv_msg+0x614/0x7a0
[  288.860166][T12836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.860197][T12836]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  288.860228][T12836]  ? __pfx_nl80211_trigger_scan+0x10/0x10
[  288.860250][T12836]  ? __pfx_nl80211_post_doit+0x10/0x10
[  288.860298][T12836]  netlink_rcv_skb+0x226/0x4a0
[  288.860325][T12836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.860359][T12836]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  288.860402][T12836]  ? down_read+0x2be/0x330
[  288.860436][T12836]  genl_rcv+0x28/0x40
[  288.860465][T12836]  netlink_unicast+0x7bb/0x940
[  288.860501][T12836]  netlink_sendmsg+0x813/0xb40
[  288.860538][T12836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.860569][T12836]  ? aa_sock_msg_perm+0xf1/0x1b0
[  288.860612][T12836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.860637][T12836]  sock_sendmsg_nosec+0x13a/0x180
[  288.860671][T12836]  ____sys_sendmsg+0x54e/0x850
[  288.860702][T12836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  288.860738][T12836]  ? import_iovec+0x73/0xa0
[  288.860774][T12836]  ___sys_sendmsg+0x2a5/0x360
[  288.860797][T12836]  ? __lock_acquire+0x683/0x2cf0
[  288.860832][T12836]  ? __pfx____sys_sendmsg+0x10/0x10
[  288.860896][T12836]  ? __fget_files+0x2a/0x420
[  288.860923][T12836]  ? __fget_files+0x3a2/0x420
[  288.860964][T12836]  __x64_sys_sendmsg+0x1b1/0x290
[  288.860992][T12836]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  288.861036][T12836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.861060][T12836]  do_syscall_64+0x174/0x580
[  288.861084][T12836]  ? trace_irq_disable+0x3b/0x140
[  288.861112][T12836]  ? clear_bhb_loop+0x40/0x90
[  288.861137][T12836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.861165][T12836] RIP: 0033:0x7fa1f699de99
[  288.861185][T12836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.861221][T12836] RSP: 002b:00007fa1f77c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  288.861244][T12836] RAX: ffffffffffffffda RBX: 00007fa1f6c25fa0 RCX: 00007fa1f699de99
[  288.861260][T12836] RDX: 9590f6cc1aa39d16 RSI: 0000200000000140 RDI: 0000000000000003
[  288.861275][T12836] RBP: 00007fa1f77c6090 R08: 0000000000000000 R09: 0000000000000000
[  288.861289][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.861302][T12836] R13: 00007fa1f6c26038 R14: 00007fa1f6c25fa0 R15: 00007ffdf36fb528
[  288.861337][T12836]  </TASK>
[  289.876545][T12866] netlink: 400 bytes leftover after parsing attributes in process `syz.4.2678'.
[  290.063729][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'.
[  290.151864][T12880] xt_l2tp: invalid flags combination: 8
[  290.166953][T12880] netlink: 'syz.3.2682': attribute type 1 has an invalid length.
[  290.308045][T12886] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2685'.
[  290.535859][T12897] netlink: 'syz.4.2689': attribute type 2 has an invalid length.
[  290.554517][T12897] netlink: 'syz.4.2689': attribute type 1 has an invalid length.
[  290.576226][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'.
[  290.597565][T12897] nbd: illegal input index -120127480
[  291.234367][T12925] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2699'.
[  291.332913][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'.
[  291.348155][T12930] FAULT_INJECTION: forcing a failure.
[  291.348155][T12930] name failslab, interval 1, probability 0, space 0, times 0
[  291.381596][T12930] CPU: 1 UID: 0 PID: 12930 Comm: syz.4.2701 Not tainted syzkaller #0 PREEMPT(full) 
[  291.381624][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  291.381638][T12930] Call Trace:
[  291.381645][T12930]  <TASK>
[  291.381655][T12930]  dump_stack_lvl+0xe8/0x150
[  291.381693][T12930]  should_fail_ex+0x40c/0x560
[  291.381727][T12930]  should_failslab+0xa8/0x100
[  291.381763][T12930]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  291.381790][T12930]  ? local_lock_release+0x9c/0x160
[  291.381815][T12930]  ? __alloc_skb+0x1d7/0x7a0
[  291.381834][T12930]  ? __alloc_skb+0x1d7/0x7a0
[  291.381863][T12930]  __alloc_skb+0x1d7/0x7a0
[  291.381890][T12930]  create_monitor_ctrl_open+0x160/0x820
[  291.381919][T12930]  ? apparmor_capable+0x126/0x170
[  291.381950][T12930]  ? __pfx_create_monitor_ctrl_open+0x10/0x10
[  291.381974][T12930]  ? asm_sysvec_kvm_posted_intr_ipi+0x12/0x20
[  291.381998][T12930]  ? security_capable+0x7e/0x2c0
[  291.382029][T12930]  hci_sock_ioctl+0x2f2/0x940
[  291.382058][T12930]  sock_do_ioctl+0x101/0x320
[  291.382091][T12930]  ? __pfx_sock_do_ioctl+0x10/0x10
[  291.382119][T12930]  ? hook_file_ioctl+0x1f0/0x5f0
[  291.382160][T12930]  sock_ioctl+0x57a/0x7e0
[  291.382192][T12930]  ? __pfx_sock_ioctl+0x10/0x10
[  291.382222][T12930]  ? __fget_files+0x2a/0x420
[  291.382251][T12930]  ? __fget_files+0x3a2/0x420
[  291.382280][T12930]  ? __fget_files+0x2a/0x420
[  291.382314][T12930]  ? bpf_lsm_file_ioctl+0x9/0x20
[  291.382342][T12930]  ? __pfx_sock_ioctl+0x10/0x10
[  291.382371][T12930]  __se_sys_ioctl+0xfc/0x170
[  291.382394][T12930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.382418][T12930]  do_syscall_64+0x174/0x580
[  291.382452][T12930]  ? trace_irq_disable+0x3b/0x140
[  291.382481][T12930]  ? clear_bhb_loop+0x40/0x90
[  291.382507][T12930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.382528][T12930] RIP: 0033:0x7efc0c59de99
[  291.382548][T12930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.382566][T12930] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  291.382588][T12930] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  291.382604][T12930] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004
[  291.382617][T12930] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  291.382630][T12930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.382642][T12930] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  291.382678][T12930]  </TASK>
[  294.510688][T12999] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2726'.
[  294.565352][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2730'.
[  294.773458][T13019] FAULT_INJECTION: forcing a failure.
[  294.773458][T13019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.790341][T13019] CPU: 1 UID: 0 PID: 13019 Comm: syz.1.2733 Not tainted syzkaller #0 PREEMPT(full) 
[  294.790367][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  294.790380][T13019] Call Trace:
[  294.790388][T13019]  <TASK>
[  294.790397][T13019]  dump_stack_lvl+0xe8/0x150
[  294.790432][T13019]  should_fail_ex+0x40c/0x560
[  294.790462][T13019]  _copy_from_iter+0x1d3/0x1660
[  294.790490][T13019]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  294.790518][T13019]  ? rcu_is_watching+0x15/0xb0
[  294.790539][T13019]  ? trace_kmem_cache_alloc+0x29/0xe0
[  294.790565][T13019]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  294.790591][T13019]  ? __pfx__copy_from_iter+0x10/0x10
[  294.790629][T13019]  ? __alloc_skb+0x276/0x7a0
[  294.790646][T13019]  ? __alloc_skb+0x276/0x7a0
[  294.790677][T13019]  ? netlink_sendmsg+0x650/0xb40
[  294.790703][T13019]  ? skb_put+0x112/0x210
[  294.790725][T13019]  netlink_sendmsg+0x6c0/0xb40
[  294.790756][T13019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.790784][T13019]  ? aa_sock_msg_perm+0xf1/0x1b0
[  294.790810][T13019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.790833][T13019]  sock_sendmsg_nosec+0x13a/0x180
[  294.790864][T13019]  ____sys_sendmsg+0x54e/0x850
[  294.790892][T13019]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.790924][T13019]  ? import_iovec+0x73/0xa0
[  294.790957][T13019]  ___sys_sendmsg+0x2a5/0x360
[  294.790979][T13019]  ? __lock_acquire+0x683/0x2cf0
[  294.791011][T13019]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.791068][T13019]  ? __fget_files+0x2a/0x420
[  294.791094][T13019]  ? __fget_files+0x3a2/0x420
[  294.791131][T13019]  __x64_sys_sendmsg+0x1b1/0x290
[  294.791156][T13019]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.791197][T13019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.791237][T13019]  do_syscall_64+0x174/0x580
[  294.791263][T13019]  ? trace_irq_disable+0x3b/0x140
[  294.791292][T13019]  ? clear_bhb_loop+0x40/0x90
[  294.791318][T13019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.791353][T13019] RIP: 0033:0x7ff32c59de99
[  294.791372][T13019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.791390][T13019] RSP: 002b:00007ff32d386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.791412][T13019] RAX: ffffffffffffffda RBX: 00007ff32c825fa0 RCX: 00007ff32c59de99
[  294.791427][T13019] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  294.791441][T13019] RBP: 00007ff32d386090 R08: 0000000000000000 R09: 0000000000000000
[  294.791454][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.791466][T13019] R13: 00007ff32c826038 R14: 00007ff32c825fa0 R15: 00007ffe1b1ce778
[  294.791500][T13019]  </TASK>
[  295.340183][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2740'.
[  295.351155][T13035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2740'.
[  295.529029][T13038] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2742'.
[  295.577464][T13042] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.2743'.
[  295.757984][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2747'.
[  296.311293][T13066] FAULT_INJECTION: forcing a failure.
[  296.311293][T13066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.341066][T13066] CPU: 1 UID: 0 PID: 13066 Comm: syz.0.2752 Not tainted syzkaller #0 PREEMPT(full) 
[  296.341094][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  296.341107][T13066] Call Trace:
[  296.341115][T13066]  <TASK>
[  296.341124][T13066]  dump_stack_lvl+0xe8/0x150
[  296.341159][T13066]  should_fail_ex+0x40c/0x560
[  296.341191][T13066]  _copy_from_iter+0x1d3/0x1660
[  296.341237][T13066]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  296.341267][T13066]  ? rcu_is_watching+0x15/0xb0
[  296.341289][T13066]  ? trace_kmem_cache_alloc+0x29/0xe0
[  296.341319][T13066]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  296.341347][T13066]  ? __pfx__copy_from_iter+0x10/0x10
[  296.341376][T13066]  ? __alloc_skb+0x276/0x7a0
[  296.341396][T13066]  ? __alloc_skb+0x276/0x7a0
[  296.341423][T13066]  ? netlink_sendmsg+0x650/0xb40
[  296.341450][T13066]  ? skb_put+0x112/0x210
[  296.341475][T13066]  netlink_sendmsg+0x6c0/0xb40
[  296.341511][T13066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.341555][T13066]  ? aa_sock_msg_perm+0xf1/0x1b0
[  296.341585][T13066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.341611][T13066]  sock_sendmsg_nosec+0x13a/0x180
[  296.341645][T13066]  ____sys_sendmsg+0x54e/0x850
[  296.341676][T13066]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.341711][T13066]  ? import_iovec+0x73/0xa0
[  296.341749][T13066]  ___sys_sendmsg+0x2a5/0x360
[  296.341773][T13066]  ? __lock_acquire+0x683/0x2cf0
[  296.341809][T13066]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.341840][T13066]  ? kstrtouint+0x6e/0xe0
[  296.341895][T13066]  ? __fget_files+0x2a/0x420
[  296.341925][T13066]  ? __fget_files+0x3a2/0x420
[  296.341965][T13066]  __sys_sendmmsg+0x273/0x4d0
[  296.341998][T13066]  ? __pfx___sys_sendmmsg+0x10/0x10
[  296.342034][T13066]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  296.342078][T13066]  ? ksys_write+0x242/0x270
[  296.342103][T13066]  ? __pfx_ksys_write+0x10/0x10
[  296.342132][T13066]  __x64_sys_sendmmsg+0xa0/0xc0
[  296.342158][T13066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.342181][T13066]  do_syscall_64+0x174/0x580
[  296.342207][T13066]  ? trace_irq_disable+0x3b/0x140
[  296.342236][T13066]  ? clear_bhb_loop+0x40/0x90
[  296.342264][T13066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.342286][T13066] RIP: 0033:0x7f3598b9de99
[  296.342306][T13066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.342326][T13066] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  296.342348][T13066] RAX: ffffffffffffffda RBX: 00007f3598e25fa0 RCX: 00007f3598b9de99
[  296.342364][T13066] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  296.342379][T13066] RBP: 00007f3596df6090 R08: 0000000000000000 R09: 0000000000000000
[  296.342405][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.342418][T13066] R13: 00007f3598e26038 R14: 00007f3598e25fa0 R15: 00007ffdd9c1b688
[  296.342470][T13066]  </TASK>
[  296.793986][T13079] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2757'.
[  296.829718][T13078] tipc: Started in network mode
[  296.861963][T13078] tipc: Node identity ac14140f, cluster identity 4711
[  296.871251][T13078] tipc: New replicast peer: 255.255.255.255
[  296.878116][T13078] tipc: Enabled bearer <udp:syz2>, priority 10
[  296.887093][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'.
[  297.163816][T13092] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2761'.
[  297.373911][T13100] xt_l2tp: invalid flags combination: 8
[  297.413107][T13100] netlink: 'syz.2.2765': attribute type 1 has an invalid length.
[  297.731990][T13119] netlink: 'syz.4.2769': attribute type 51 has an invalid length.
[  297.990159][ T5814] tipc: Node number set to 2886997007
[  298.654149][T13152] xt_socket: unknown flags 0x8
[  299.400253][T13184] FAULT_INJECTION: forcing a failure.
[  299.400253][T13184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  299.465068][T13184] CPU: 1 UID: 0 PID: 13184 Comm: syz.2.2790 Not tainted syzkaller #0 PREEMPT(full) 
[  299.465097][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  299.465111][T13184] Call Trace:
[  299.465119][T13184]  <TASK>
[  299.465128][T13184]  dump_stack_lvl+0xe8/0x150
[  299.465165][T13184]  should_fail_ex+0x40c/0x560
[  299.465200][T13184]  _copy_from_user+0x2d/0xb0
[  299.465222][T13184]  kstrtouint_from_user+0xd6/0x180
[  299.465255][T13184]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  299.465314][T13184]  proc_fail_nth_write+0x8e/0x210
[  299.465346][T13184]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  299.465385][T13184]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  299.465433][T13184]  vfs_write+0x296/0xba0
[  299.465480][T13184]  ? __pfx_vfs_write+0x10/0x10
[  299.465502][T13184]  ? __fget_files+0x2a/0x420
[  299.465536][T13184]  ? __fget_files+0x3a2/0x420
[  299.465563][T13184]  ? __fget_files+0x2a/0x420
[  299.465602][T13184]  ksys_write+0x150/0x270
[  299.465626][T13184]  ? __pfx_ksys_write+0x10/0x10
[  299.465656][T13184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.465679][T13184]  do_syscall_64+0x174/0x580
[  299.465707][T13184]  ? clear_bhb_loop+0x40/0x90
[  299.465741][T13184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.465763][T13184] RIP: 0033:0x7f15f215e6ce
[  299.465782][T13184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  299.465800][T13184] RSP: 002b:00007f15f3103fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  299.465822][T13184] RAX: ffffffffffffffda RBX: 00007f15f31046c0 RCX: 00007f15f215e6ce
[  299.465838][T13184] RDX: 0000000000000001 RSI: 00007f15f31040a0 RDI: 0000000000000007
[  299.465851][T13184] RBP: 00007f15f3104090 R08: 0000000000000000 R09: 0000000000000000
[  299.465864][T13184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.465876][T13184] R13: 00007f15f2426218 R14: 00007f15f2426180 R15: 00007ffd826cdbd8
[  299.465911][T13184]  </TASK>
[  299.686483][T13187] xt_socket: unknown flags 0x8
[  300.002637][T13194] netlink: 'syz.4.2796': attribute type 12 has an invalid length.
[  300.237042][T13206] FAULT_INJECTION: forcing a failure.
[  300.237042][T13206] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.271116][T13206] CPU: 0 UID: 0 PID: 13206 Comm: syz.3.2800 Not tainted syzkaller #0 PREEMPT(full) 
[  300.271144][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  300.271157][T13206] Call Trace:
[  300.271171][T13206]  <TASK>
[  300.271183][T13206]  dump_stack_lvl+0xe8/0x150
[  300.271238][T13206]  should_fail_ex+0x40c/0x560
[  300.271271][T13206]  _copy_to_user+0x31/0xb0
[  300.271295][T13206]  bpf_test_finish+0x1cf/0x690
[  300.271329][T13206]  ? __pfx____migrate_enable+0x10/0x10
[  300.271363][T13206]  ? __pfx_bpf_test_finish+0x10/0x10
[  300.271405][T13206]  bpf_prog_test_run_flow_dissector+0x478/0x610
[  300.271449][T13206]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  300.271480][T13206]  ? __fget_files+0x2a/0x420
[  300.271517][T13206]  ? __fget_files+0x2a/0x420
[  300.271552][T13206]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  300.271583][T13206]  bpf_prog_test_run+0x2c5/0x340
[  300.271618][T13206]  __sys_bpf+0xa22/0xd90
[  300.271662][T13206]  ? __pfx___sys_bpf+0x10/0x10
[  300.271703][T13206]  ? __fget_files+0x2a/0x420
[  300.271749][T13206]  ? ksys_write+0x242/0x270
[  300.271773][T13206]  ? __pfx_ksys_write+0x10/0x10
[  300.271800][T13206]  __x64_sys_bpf+0xba/0xd0
[  300.271827][T13206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.271851][T13206]  do_syscall_64+0x174/0x580
[  300.271878][T13206]  ? trace_irq_disable+0x3b/0x140
[  300.271906][T13206]  ? clear_bhb_loop+0x40/0x90
[  300.271933][T13206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.271954][T13206] RIP: 0033:0x7fa1f699de99
[  300.271974][T13206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.271992][T13206] RSP: 002b:00007fa1f77c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  300.272014][T13206] RAX: ffffffffffffffda RBX: 00007fa1f6c25fa0 RCX: 00007fa1f699de99
[  300.272029][T13206] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  300.272042][T13206] RBP: 00007fa1f77c6090 R08: 0000000000000000 R09: 0000000000000000
[  300.272055][T13206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.272067][T13206] R13: 00007fa1f6c26038 R14: 00007fa1f6c25fa0 R15: 00007ffdf36fb528
[  300.272100][T13206]  </TASK>
[  300.727864][T13210] lo speed is unknown, defaulting to 1000
[  300.864622][T13224] __nla_validate_parse: 11 callbacks suppressed
[  300.864641][T13224] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2805'.
[  300.908146][T13226] xt_socket: unknown flags 0x8
[  301.108451][T13233] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2810'.
[  301.194688][T13237] netlink: 'syz.3.2811': attribute type 1 has an invalid length.
[  301.281097][T13237] bond10: entered promiscuous mode
[  301.287460][T13237] 8021q: adding VLAN 0 to HW filter on device bond10
[  301.302636][T13242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2812'.
[  301.337620][T13244] FAULT_INJECTION: forcing a failure.
[  301.337620][T13244] name failslab, interval 1, probability 0, space 0, times 0
[  301.378309][T13244] CPU: 1 UID: 0 PID: 13244 Comm: syz.4.2814 Not tainted syzkaller #0 PREEMPT(full) 
[  301.378371][T13244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  301.378385][T13244] Call Trace:
[  301.378394][T13244]  <TASK>
[  301.378402][T13244]  dump_stack_lvl+0xe8/0x150
[  301.378440][T13244]  should_fail_ex+0x40c/0x560
[  301.378473][T13244]  should_failslab+0xa8/0x100
[  301.378509][T13244]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  301.378538][T13244]  ? skb_clone+0x212/0x3a0
[  301.378563][T13244]  ? skb_clone+0x212/0x3a0
[  301.378607][T13244]  skb_clone+0x212/0x3a0
[  301.378638][T13244]  __netlink_deliver_tap+0x413/0x860
[  301.378678][T13244]  ? netlink_deliver_tap+0x2e/0x1b0
[  301.378706][T13244]  netlink_deliver_tap+0x19c/0x1b0
[  301.378734][T13244]  netlink_unicast+0x77f/0x940
[  301.378769][T13244]  netlink_sendmsg+0x813/0xb40
[  301.378805][T13244]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.378836][T13244]  ? aa_sock_msg_perm+0xf1/0x1b0
[  301.378866][T13244]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.378891][T13244]  sock_sendmsg_nosec+0x13a/0x180
[  301.378925][T13244]  ____sys_sendmsg+0x54e/0x850
[  301.378956][T13244]  ? __pfx_____sys_sendmsg+0x10/0x10
[  301.378990][T13244]  ? import_iovec+0x73/0xa0
[  301.379028][T13244]  ___sys_sendmsg+0x2a5/0x360
[  301.379052][T13244]  ? __lock_acquire+0x683/0x2cf0
[  301.379088][T13244]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.379154][T13244]  ? __fget_files+0x2a/0x420
[  301.379183][T13244]  ? __fget_files+0x3a2/0x420
[  301.379223][T13244]  __x64_sys_sendmsg+0x1b1/0x290
[  301.379251][T13244]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  301.379297][T13244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.379322][T13244]  do_syscall_64+0x174/0x580
[  301.379347][T13244]  ? trace_irq_disable+0x3b/0x140
[  301.379375][T13244]  ? clear_bhb_loop+0x40/0x90
[  301.379401][T13244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.379422][T13244] RIP: 0033:0x7efc0c59de99
[  301.379446][T13244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.379466][T13244] RSP: 002b:00007efc0d468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.379486][T13244] RAX: ffffffffffffffda RBX: 00007efc0c825fa0 RCX: 00007efc0c59de99
[  301.379499][T13244] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 000000000000000a
[  301.379511][T13244] RBP: 00007efc0d468090 R08: 0000000000000000 R09: 0000000000000000
[  301.379522][T13244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.379533][T13244] R13: 00007efc0c826038 R14: 00007efc0c825fa0 R15: 00007fffb7c6eb38
[  301.379572][T13244]  </TASK>
[  302.117613][T13273] FAULT_INJECTION: forcing a failure.
[  302.117613][T13273] name failslab, interval 1, probability 0, space 0, times 0
[  302.164327][T13273] CPU: 1 UID: 0 PID: 13273 Comm: syz.1.2823 Not tainted syzkaller #0 PREEMPT(full) 
[  302.164357][T13273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  302.164371][T13273] Call Trace:
[  302.164379][T13273]  <TASK>
[  302.164388][T13273]  dump_stack_lvl+0xe8/0x150
[  302.164425][T13273]  should_fail_ex+0x40c/0x560
[  302.164457][T13273]  should_failslab+0xa8/0x100
[  302.164491][T13273]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  302.164519][T13273]  ? skb_clone+0x212/0x3a0
[  302.164542][T13273]  ? skb_clone+0x212/0x3a0
[  302.164581][T13273]  skb_clone+0x212/0x3a0
[  302.164611][T13273]  __netlink_deliver_tap+0x413/0x860
[  302.164647][T13273]  ? netlink_deliver_tap+0x2e/0x1b0
[  302.164672][T13273]  netlink_deliver_tap+0x19c/0x1b0
[  302.164698][T13273]  netlink_unicast+0x77f/0x940
[  302.164729][T13273]  netlink_sendmsg+0x813/0xb40
[  302.164762][T13273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.164790][T13273]  ? aa_sock_msg_perm+0xf1/0x1b0
[  302.164817][T13273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.164840][T13273]  sock_sendmsg_nosec+0x13a/0x180
[  302.164871][T13273]  ____sys_sendmsg+0x54e/0x850
[  302.164899][T13273]  ? __pfx_____sys_sendmsg+0x10/0x10
[  302.164931][T13273]  ? import_iovec+0x73/0xa0
[  302.164966][T13273]  ___sys_sendmsg+0x2a5/0x360
[  302.164987][T13273]  ? __lock_acquire+0x683/0x2cf0
[  302.165020][T13273]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.165048][T13273]  ? ktime_get+0x45/0x220
[  302.165101][T13273]  ? __fget_files+0x2a/0x420
[  302.165127][T13273]  ? __fget_files+0x3a2/0x420
[  302.165173][T13273]  __sys_sendmmsg+0x273/0x4d0
[  302.165202][T13273]  ? __pfx___sys_sendmmsg+0x10/0x10
[  302.165234][T13273]  ? __hrtimer_get_next_event+0x51c/0x600
[  302.165276][T13273]  ? rcu_is_watching+0x15/0xb0
[  302.165302][T13273]  __x64_sys_sendmmsg+0xa0/0xc0
[  302.165325][T13273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.165346][T13273]  do_syscall_64+0x174/0x580
[  302.165372][T13273]  ? clear_bhb_loop+0x40/0x90
[  302.165397][T13273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.165418][T13273] RIP: 0033:0x7ff32c59de99
[  302.165437][T13273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.165454][T13273] RSP: 002b:00007ff32d386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  302.165474][T13273] RAX: ffffffffffffffda RBX: 00007ff32c825fa0 RCX: 00007ff32c59de99
[  302.165489][T13273] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  302.165503][T13273] RBP: 00007ff32d386090 R08: 0000000000000000 R09: 0000000000000000
[  302.165515][T13273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.165526][T13273] R13: 00007ff32c826038 R14: 00007ff32c825fa0 R15: 00007ffe1b1ce778
[  302.165558][T13273]  </TASK>
[  302.438800][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'.
[  302.448033][T13273] bridge_slave_0: entered promiscuous mode
[  302.575212][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2825'.
[  302.597695][T13280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2827'.
[  302.662081][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'.
[  302.674464][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2828'.
[  303.094114][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2833'.
[  303.457695][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.468243][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.483394][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.491523][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.503475][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.845790][T13337] netlink: 'syz.1.2844': attribute type 13 has an invalid length.
[  303.872819][T13337] netlink: 680 bytes leftover after parsing attributes in process `syz.1.2844'.
[  304.035688][T13337] bond_slave_0: entered promiscuous mode
[  304.059019][T13337] bond_slave_0: entered allmulticast mode
[  304.142754][T13351] netlink: 'syz.3.2846': attribute type 25 has an invalid length.
[  304.155023][T13353] netlink: 'syz.2.2848': attribute type 2 has an invalid length.
[  304.412056][T13317] lo speed is unknown, defaulting to 1000
[  304.824210][T13385] FAULT_INJECTION: forcing a failure.
[  304.824210][T13385] name failslab, interval 1, probability 0, space 0, times 0
[  304.837341][T13385] CPU: 0 UID: 0 PID: 13385 Comm: syz.1.2857 Not tainted syzkaller #0 PREEMPT(full) 
[  304.837367][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  304.837380][T13385] Call Trace:
[  304.837388][T13385]  <TASK>
[  304.837395][T13385]  dump_stack_lvl+0xe8/0x150
[  304.837430][T13385]  should_fail_ex+0x40c/0x560
[  304.837461][T13385]  should_failslab+0xa8/0x100
[  304.837493][T13385]  __kmalloc_cache_noprof+0xa8/0x660
[  304.837519][T13385]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  304.837540][T13385]  ? __kmalloc_cache_noprof+0x150/0x660
[  304.837565][T13385]  ? sctp_add_bind_addr+0x8c/0x370
[  304.837583][T13385]  ? sctp_add_bind_addr+0x8c/0x370
[  304.837611][T13385]  sctp_add_bind_addr+0x8c/0x370
[  304.837636][T13385]  sctp_copy_local_addr_list+0x31a/0x4e0
[  304.837659][T13385]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  304.837700][T13385]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  304.837725][T13385]  ? sctp_v6_is_any+0x64/0x80
[  304.837750][T13385]  ? sctp_copy_one_addr+0x93/0x360
[  304.837776][T13385]  sctp_bind_addr_copy+0xb3/0x3c0
[  304.837799][T13385]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  304.837836][T13385]  sctp_connect_new_asoc+0x2ff/0x6b0
[  304.837867][T13385]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  304.837896][T13385]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  304.837923][T13385]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  304.837949][T13385]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  304.837978][T13385]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  304.838003][T13385]  ? security_sctp_bind_connect+0x7e/0x2c0
[  304.838055][T13385]  sctp_sendmsg+0x159b/0x2d00
[  304.838118][T13385]  ? __pfx_sctp_sendmsg+0x10/0x10
[  304.838154][T13385]  ? aa_sk_perm+0x6d5/0x900
[  304.838183][T13385]  ? __might_fault+0xaf/0x130
[  304.838214][T13385]  ? sock_rps_record_flow+0x19/0x350
[  304.838241][T13385]  ? inet_sendmsg+0x298/0x320
[  304.838266][T13385]  ? __pfx_inet_sendmsg+0x10/0x10
[  304.838293][T13385]  sock_sendmsg_nosec+0x10e/0x180
[  304.838332][T13385]  ____sys_sendmsg+0x54e/0x850
[  304.838365][T13385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.838401][T13385]  ? import_iovec+0x73/0xa0
[  304.838440][T13385]  ___sys_sendmsg+0x2a5/0x360
[  304.838465][T13385]  ? __lock_acquire+0x683/0x2cf0
[  304.838502][T13385]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.838569][T13385]  ? __fget_files+0x2a/0x420
[  304.838599][T13385]  ? __fget_files+0x3a2/0x420
[  304.838642][T13385]  __x64_sys_sendmsg+0x1b1/0x290
[  304.838672][T13385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.838720][T13385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.838744][T13385]  do_syscall_64+0x174/0x580
[  304.838771][T13385]  ? trace_irq_disable+0x3b/0x140
[  304.838799][T13385]  ? clear_bhb_loop+0x40/0x90
[  304.838827][T13385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.838849][T13385] RIP: 0033:0x7ff32c59de99
[  304.838869][T13385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.838888][T13385] RSP: 002b:00007ff32d386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.838912][T13385] RAX: ffffffffffffffda RBX: 00007ff32c825fa0 RCX: 00007ff32c59de99
[  304.838928][T13385] RDX: 0000000020008050 RSI: 00002000000000c0 RDI: 0000000000000003
[  304.838942][T13385] RBP: 00007ff32d386090 R08: 0000000000000000 R09: 0000000000000000
[  304.838956][T13385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  304.838968][T13385] R13: 00007ff32c826038 R14: 00007ff32c825fa0 R15: 00007ffe1b1ce778
[  304.839004][T13385]  </TASK>
[  305.573393][ T5637] Bluetooth: hci5: command tx timeout
[  305.591721][T13411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.640096][T13317] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.647363][T13317] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.655060][T13317] bridge_slave_0: entered allmulticast mode
[  305.663207][T13317] bridge_slave_0: entered promiscuous mode
[  305.672819][T13317] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.680086][T13317] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.688631][T13317] bridge_slave_1: entered allmulticast mode
[  305.696363][T13317] bridge_slave_1: entered promiscuous mode
[  305.736335][T13317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.748806][T13317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.793756][T13317] team0: Port device team_slave_0 added
[  305.817593][T13317] team0: Port device team_slave_1 added
[  305.932900][T13317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.963154][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.045617][T13317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.061561][T13317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.068547][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.094736][T13317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.347642][T13317] hsr_slave_0: entered promiscuous mode
[  306.369283][T13317] hsr_slave_1: entered promiscuous mode
[  306.379994][T13317] debugfs: 'hsr0' already exists in 'hsr'
[  306.391634][T13317] Cannot create hsr debugfs directory
[  306.420059][T13442] netlink: 'syz.3.2868': attribute type 13 has an invalid length.
[  306.456995][T13441] __nla_validate_parse: 3 callbacks suppressed
[  306.457013][T13441] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2869'.
[  307.187990][T13317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.298639][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'.
[  307.561012][T13317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.649627][ T5637] Bluetooth: hci5: command tx timeout
[  307.752025][T13317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.812354][T13496] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2882'.
[  307.843657][T13501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'.
[  307.863248][T13501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2884'.
[  307.990027][T13317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.336584][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2887'.
[  308.366339][T13510] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2887'.
[  308.698682][T13317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  308.748287][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  308.774997][T13317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  308.803847][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  308.822516][T13317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  308.863173][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  308.892224][T13317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  308.933181][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  309.178020][T13317] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.251926][T13317] 8021q: adding VLAN 0 to HW filter on device team0
[  309.300619][T12205] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.307876][T12205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.375852][T12208] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.383107][T12208] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.419012][T13541] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2895'.
[  309.731481][ T5637] Bluetooth: hci5: command tx timeout
[  310.509013][T13592] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002
[  310.605846][T13317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.781137][T13317] veth0_vlan: entered promiscuous mode
[  310.831622][T13317] veth1_vlan: entered promiscuous mode
[  310.968236][T13317] veth0_macvtap: entered promiscuous mode
[  311.014075][T13317] veth1_macvtap: entered promiscuous mode
[  311.033886][T13613] syzkaller0: entered promiscuous mode
[  311.047576][T13613] syzkaller0: entered allmulticast mode
[  311.067040][T13613] tipc: Started in network mode
[  311.075746][T13613] tipc: Node identity 22de41cb3741, cluster identity 4711
[  311.084104][T13613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.122767][T13317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.171328][T13317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.226685][T13622] tipc: Resetting bearer <eth:syzkaller0>
[  311.281299][T12208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.310775][T12208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.353795][T12208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.382247][T12208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.449091][T13612] tipc: Resetting bearer <eth:syzkaller0>
[  311.490837][T13612] tipc: Disabling bearer <eth:syzkaller0>
[  311.726692][T13636] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2918'.
[  311.779117][T12208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.788155][T13638] netlink: 'syz.3.2919': attribute type 12 has an invalid length.
[  311.809823][ T5637] Bluetooth: hci5: command tx timeout
[  311.818019][T12208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.875598][T12213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.911042][T12213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.435686][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'.
[  312.480217][T13657] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2926'.
[  312.594790][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  312.614213][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  312.623475][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  312.638680][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  312.650006][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.042701][T13683] netlink: 'syz.2.2931': attribute type 12 has an invalid length.
[  313.744091][T13661] lo speed is unknown, defaulting to 1000
[  313.765866][T13704] ip6gre1: entered promiscuous mode
[  313.786506][T13704] ip6gre1: entered allmulticast mode
[  313.872738][T13707] vlan2: entered promiscuous mode
[  313.900761][T13707] bridge0: entered promiscuous mode
[  313.952168][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'.
[  314.041649][T13710] xt_l2tp: invalid flags combination: 8
[  314.115959][T13710] netlink: 'syz.2.2938': attribute type 1 has an invalid length.
[  314.680454][T13727] netlink: 'syz.1.2943': attribute type 12 has an invalid length.
[  314.689759][ T5637] Bluetooth: hci3: command tx timeout
[  314.993326][T13661] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.003252][T13661] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.012342][T13661] bridge_slave_0: entered allmulticast mode
[  315.024479][T13661] bridge_slave_0: entered promiscuous mode
[  315.036676][T13661] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.044176][T13661] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.052914][T13661] bridge_slave_1: entered allmulticast mode
[  315.061344][T13661] bridge_slave_1: entered promiscuous mode
[  315.127567][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.143277][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.238492][T13661] team0: Port device team_slave_0 added
[  315.259368][T13661] team0: Port device team_slave_1 added
[  315.370070][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'.
[  315.380759][T13747] ip6gre1: entered promiscuous mode
[  315.387002][T13747] ip6gre1: entered allmulticast mode
[  315.507200][T13757] vlan2: entered promiscuous mode
[  315.521036][T13757] bridge0: entered promiscuous mode
[  315.535058][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.545629][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.573788][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.593139][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.610998][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.674884][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.809002][T13661] hsr_slave_0: entered promiscuous mode
[  315.815958][T13661] hsr_slave_1: entered promiscuous mode
[  315.822386][T13661] debugfs: 'hsr0' already exists in 'hsr'
[  315.831716][T13661] Cannot create hsr debugfs directory
[  315.875785][T13773] netlink: 'syz.1.2956': attribute type 12 has an invalid length.
[  316.032555][T13776] netlink: 'syz.3.2957': attribute type 1 has an invalid length.
[  316.137494][T13776] 8021q: adding VLAN 0 to HW filter on device bond11
[  316.178610][T13780] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.189322][T13780] bond11: (slave bond0): making interface the new active one
[  316.201689][T13780] bond11: (slave bond0): Enslaving as an active interface with an up link
[  316.231619][T13789] FAULT_INJECTION: forcing a failure.
[  316.231619][T13789] name failslab, interval 1, probability 0, space 0, times 0
[  316.279624][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.2.2961 Not tainted syzkaller #0 PREEMPT(full) 
[  316.279653][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  316.279665][T13789] Call Trace:
[  316.279673][T13789]  <TASK>
[  316.279681][T13789]  dump_stack_lvl+0xe8/0x150
[  316.279718][T13789]  should_fail_ex+0x40c/0x560
[  316.279750][T13789]  should_failslab+0xa8/0x100
[  316.279785][T13789]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  316.279811][T13789]  ? local_lock_release+0x9c/0x160
[  316.279835][T13789]  ? __alloc_skb+0x1d7/0x7a0
[  316.279853][T13789]  ? __alloc_skb+0x1d7/0x7a0
[  316.279881][T13789]  __alloc_skb+0x1d7/0x7a0
[  316.279907][T13789]  netlink_sendmsg+0x5d4/0xb40
[  316.279943][T13789]  ? __pfx_netlink_sendmsg+0x10/0x10
[  316.279974][T13789]  ? aa_sock_msg_perm+0xf1/0x1b0
[  316.280003][T13789]  ? __pfx_netlink_sendmsg+0x10/0x10
[  316.280028][T13789]  sock_sendmsg_nosec+0x13a/0x180
[  316.280061][T13789]  ____sys_sendmsg+0x54e/0x850
[  316.280093][T13789]  ? __pfx_____sys_sendmsg+0x10/0x10
[  316.280126][T13789]  ? import_iovec+0x73/0xa0
[  316.280163][T13789]  ___sys_sendmsg+0x2a5/0x360
[  316.280187][T13789]  ? __lock_acquire+0x683/0x2cf0
[  316.280221][T13789]  ? __pfx____sys_sendmsg+0x10/0x10
[  316.280284][T13789]  ? __fget_files+0x2a/0x420
[  316.280322][T13789]  ? __fget_files+0x3a2/0x420
[  316.280362][T13789]  __x64_sys_sendmsg+0x1b1/0x290
[  316.280391][T13789]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  316.280436][T13789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.280459][T13789]  do_syscall_64+0x174/0x580
[  316.280485][T13789]  ? trace_irq_disable+0x3b/0x140
[  316.280513][T13789]  ? clear_bhb_loop+0x40/0x90
[  316.280539][T13789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.280560][T13789] RIP: 0033:0x7f15f219de99
[  316.280579][T13789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.280597][T13789] RSP: 002b:00007f15f3125028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  316.280619][T13789] RAX: ffffffffffffffda RBX: 00007f15f2426090 RCX: 00007f15f219de99
[  316.280634][T13789] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  316.280648][T13789] RBP: 00007f15f3125090 R08: 0000000000000000 R09: 0000000000000000
[  316.280661][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  316.280674][T13789] R13: 00007f15f2426128 R14: 00007f15f2426090 R15: 00007ffd826cdbd8
[  316.280708][T13789]  </TASK>
[  316.622074][T13776] bond11: entered promiscuous mode
[  316.627288][T13776] bond0: entered promiscuous mode
[  316.632671][T13776] bond_slave_0: entered promiscuous mode
[  316.638563][T13776] bond_slave_1: entered promiscuous mode
[  316.644753][T13776] bond11: entered allmulticast mode
[  316.650546][T13776] bond0: entered allmulticast mode
[  316.656222][T13776] bond_slave_0: entered allmulticast mode
[  316.662127][T13776] bond_slave_1: entered allmulticast mode
[  316.769937][ T5637] Bluetooth: hci3: command tx timeout
[  316.994765][T13661] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.016619][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  317.023092][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  317.052018][T13810] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2966'.
[  317.090553][T13813] netlink: 'syz.1.2968': attribute type 12 has an invalid length.
[  317.358167][T13661] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.476312][T13661] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.580113][T13661] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.841765][T13836] FAULT_INJECTION: forcing a failure.
[  317.841765][T13836] name failslab, interval 1, probability 0, space 0, times 0
[  317.893449][T13836] CPU: 0 UID: 0 PID: 13836 Comm: syz.3.2974 Not tainted syzkaller #0 PREEMPT(full) 
[  317.893478][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  317.893491][T13836] Call Trace:
[  317.893499][T13836]  <TASK>
[  317.893507][T13836]  dump_stack_lvl+0xe8/0x150
[  317.893543][T13836]  should_fail_ex+0x40c/0x560
[  317.893573][T13836]  should_failslab+0xa8/0x100
[  317.893604][T13836]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  317.893628][T13836]  ? local_lock_release+0x9c/0x160
[  317.893649][T13836]  ? __alloc_skb+0x1d7/0x7a0
[  317.893673][T13836]  ? __alloc_skb+0x1d7/0x7a0
[  317.893697][T13836]  __alloc_skb+0x1d7/0x7a0
[  317.893719][T13836]  alloc_skb_with_frags+0xc6/0x760
[  317.893746][T13836]  ? process_measurement+0x14fb/0x1c10
[  317.893777][T13836]  sock_alloc_send_pskb+0x878/0x990
[  317.893818][T13836]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  317.893853][T13836]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  317.893880][T13836]  unix_dgram_sendmsg+0x4da/0x17b0
[  317.893928][T13836]  ? __lock_acquire+0x683/0x2cf0
[  317.893958][T13836]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  317.894000][T13836]  ? aa_sock_msg_perm+0xda/0x1b0
[  317.894025][T13836]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  317.894047][T13836]  sock_sendmsg_nosec+0x13a/0x180
[  317.894076][T13836]  ____sys_sendmsg+0x54e/0x850
[  317.894103][T13836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.894132][T13836]  ? import_iovec+0x73/0xa0
[  317.894164][T13836]  ___sys_sendmsg+0x2a5/0x360
[  317.894184][T13836]  ? __lock_acquire+0x683/0x2cf0
[  317.894214][T13836]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.894266][T13836]  ? __fget_files+0x2a/0x420
[  317.894290][T13836]  ? __fget_files+0x3a2/0x420
[  317.894325][T13836]  __x64_sys_sendmsg+0x1b1/0x290
[  317.894349][T13836]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  317.894386][T13836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.894407][T13836]  do_syscall_64+0x174/0x580
[  317.894429][T13836]  ? trace_irq_disable+0x3b/0x140
[  317.894452][T13836]  ? clear_bhb_loop+0x40/0x90
[  317.894475][T13836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.894493][T13836] RIP: 0033:0x7fa1f699de99
[  317.894528][T13836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.894545][T13836] RSP: 002b:00007fa1f77c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.894568][T13836] RAX: ffffffffffffffda RBX: 00007fa1f6c25fa0 RCX: 00007fa1f699de99
[  317.894583][T13836] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[  317.894595][T13836] RBP: 00007fa1f77c6090 R08: 0000000000000000 R09: 0000000000000000
[  317.894606][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.894617][T13836] R13: 00007fa1f6c26038 R14: 00007fa1f6c25fa0 R15: 00007ffdf36fb528
[  317.894648][T13836]  </TASK>
[  318.400094][T13661] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  318.424565][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  318.435944][T13661] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  318.448143][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  318.456374][T13841] netlink: 'syz.2.2978': attribute type 25 has an invalid length.
[  318.464297][T13841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2978'.
[  318.487913][T13661] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  318.508672][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  318.533157][T13661] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  318.554794][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  318.591798][T13850] tipc: Failed to remove unknown binding: 66,0,0/0:62589416/62589418
[  318.601495][T13850] tipc: Failed to remove unknown binding: 66,0,0/0:62589416/62589417
[  318.617568][T13850] tipc: Failed to remove unknown binding: 66,0,0/0:62589416/62589418
[  318.627318][T13850] tipc: Failed to remove unknown binding: 66,0,0/0:62589416/62589417
[  318.849573][ T5637] Bluetooth: hci3: command tx timeout
[  318.879133][T13869] FAULT_INJECTION: forcing a failure.
[  318.879133][T13869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  318.915219][T13869] CPU: 0 UID: 0 PID: 13869 Comm: syz.1.2986 Not tainted syzkaller #0 PREEMPT(full) 
[  318.915248][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  318.915261][T13869] Call Trace:
[  318.915269][T13869]  <TASK>
[  318.915278][T13869]  dump_stack_lvl+0xe8/0x150
[  318.915315][T13869]  should_fail_ex+0x40c/0x560
[  318.915352][T13869]  _copy_from_user+0x2d/0xb0
[  318.915375][T13869]  kstrtouint_from_user+0xd6/0x180
[  318.915408][T13869]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  318.915456][T13869]  proc_fail_nth_write+0x8e/0x210
[  318.915488][T13869]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  318.915527][T13869]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  318.915558][T13869]  vfs_write+0x296/0xba0
[  318.915589][T13869]  ? __pfx_vfs_write+0x10/0x10
[  318.915613][T13869]  ? __fget_files+0x2a/0x420
[  318.915647][T13869]  ? __fget_files+0x3a2/0x420
[  318.915676][T13869]  ? __fget_files+0x2a/0x420
[  318.915715][T13869]  ksys_write+0x150/0x270
[  318.915741][T13869]  ? __pfx_ksys_write+0x10/0x10
[  318.915772][T13869]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.915796][T13869]  do_syscall_64+0x174/0x580
[  318.915822][T13869]  ? trace_irq_disable+0x3b/0x140
[  318.915851][T13869]  ? clear_bhb_loop+0x40/0x90
[  318.915879][T13869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.915902][T13869] RIP: 0033:0x7ff32c55e6ce
[  318.915922][T13869] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  318.915940][T13869] RSP: 002b:00007ff32a7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  318.915963][T13869] RAX: ffffffffffffffda RBX: 00007ff32a7f66c0 RCX: 00007ff32c55e6ce
[  318.915978][T13869] RDX: 0000000000000001 RSI: 00007ff32a7f60a0 RDI: 0000000000000005
[  318.915991][T13869] RBP: 00007ff32a7f6090 R08: 0000000000000000 R09: 0000000000000000
[  318.916005][T13869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.916018][T13869] R13: 00007ff32c826128 R14: 00007ff32c826090 R15: 00007ffe1b1ce778
[  318.916054][T13869]  </TASK>
[  319.241103][T13661] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.352095][T13661] 8021q: adding VLAN 0 to HW filter on device team0
[  319.374472][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.381736][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.437332][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.444571][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.516057][T13889] ------------[ cut here ]------------
[  319.522407][T13889] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 1 MHz (8)
[  319.534257][T13889] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2839 at mac80211_hwsim_sta_rc_update+0x6d8/0x8c0, CPU#1: syz.1.2991/13889
[  319.550874][T13889] Modules linked in:
[  319.555027][T13889] CPU: 1 UID: 0 PID: 13889 Comm: syz.1.2991 Not tainted syzkaller #0 PREEMPT(full) 
[  319.565490][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  319.576179][T13889] RIP: 0010:mac80211_hwsim_sta_rc_update+0x736/0x8c0
[  319.583571][T13889] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 c4 99 fe ff 48 8b 7c 24 20 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 d7 de 96 fa 90 0f 0b
[  319.603388][T13889] RSP: 0018:ffffc90003186ee8 EFLAGS: 00010283
[  319.610328][T13889] RAX: 0000000000000001 RBX: 0000000000000014 RCX: ffff888032e00ed0
[  319.618455][T13889] RDX: 0000000000000000 RSI: ffff88805720f4c2 RDI: ffffffff9064f0b0
[  319.626536][T13889] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000
[  319.634775][T13889] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000
[  319.643772][T13889] R13: dffffc0000000000 R14: 0000000000000008 R15: 0000000000000000
[  319.652515][T13889] FS:  00007ff32d3866c0(0000) GS:ffff888125054000(0000) knlGS:0000000000000000
[  319.661598][T13889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.668217][T13889] CR2: 0000200000001080 CR3: 000000003437e000 CR4: 00000000003526f0
[  319.676328][T13889] Call Trace:
[  319.680764][T13889]  <TASK>
[  319.683745][T13889]  ? mac80211_hwsim_sta_rc_update+0xb5/0x8c0
[  319.689813][T13889]  mac80211_hwsim_sta_add+0xc4/0x370
[  319.695145][T13889]  drv_sta_state+0x885/0x17a0
[  319.700055][T13889]  sta_info_insert_rcu+0x171f/0x2780
[  319.705510][T13889]  ? sta_info_insert_rcu+0x842/0x2780
[  319.711198][T13889]  ? rate_control_rate_init+0x117/0x630
[  319.716843][T13889]  sta_info_insert+0x16/0xc0
[  319.721764][T13889]  ieee80211_add_station+0x4bf/0x700
[  319.727107][T13889]  rdev_add_station+0xfc/0x290
[  319.733338][T13889]  nl80211_new_station+0x1b4e/0x1fd0
[  319.738676][T13889]  ? trace_contention_end+0x3d/0x140
[  319.744927][T13889]  ? __pfx_nl80211_new_station+0x10/0x10
[  319.751179][T13889]  ? __rtnl_unlock+0xc8/0xf0
[  319.755867][T13889]  ? nl80211_pre_doit+0x53d/0x890
[  319.761031][T13889]  genl_family_rcv_msg_doit+0x233/0x340
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  319.766645][T13889]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  319.772940][T13889]  ? bpf_lsm_capable+0x9/0x20
[  319.777666][T13889]  ? security_capable+0x7e/0x2c0
[  319.782722][T13889]  genl_rcv_msg+0x614/0x7a0
[  319.788924][T13889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.794164][T13889]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  319.799691][T13889]  ? __pfx_nl80211_new_station+0x10/0x10
[  319.805404][T13889]  ? __pfx_nl80211_post_doit+0x10/0x10
[  319.811632][T13889]  ? __pfx_ref_tracker_free+0x10/0x10
[  319.817060][T13889]  ? __asan_memcpy+0x40/0x70
[  319.821791][T13889]  ? __skb_clone+0x5c/0x6c0
[  319.826350][T13889]  netlink_rcv_skb+0x226/0x4a0
[  319.831719][T13889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.836865][T13889]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  319.842316][T13889]  ? down_read+0x2be/0x330
[  319.847643][T13889]  genl_rcv+0x28/0x40
[  319.852259][T13889]  netlink_unicast+0x7bb/0x940
[  319.857088][T13889]  netlink_sendmsg+0x813/0xb40
[  319.861965][T13889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.867306][T13889]  ? aa_sock_msg_perm+0xf1/0x1b0
[  319.872360][T13889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.877697][T13889]  sock_sendmsg_nosec+0x13a/0x180
[  319.882869][T13889]  ____sys_sendmsg+0x54e/0x850
[  319.887696][T13889]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.893099][T13889]  ? import_iovec+0x73/0xa0
[  319.897659][T13889]  ___sys_sendmsg+0x2a5/0x360
[  319.902458][T13889]  ? __lock_acquire+0x683/0x2cf0
[  319.907463][T13889]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.912794][T13889]  ? futex_wait+0x2a2/0x390
[  319.917401][T13889]  ? __fget_files+0x2a/0x420
[  319.922095][T13889]  ? __fget_files+0x3a2/0x420
[  319.926837][T13889]  __x64_sys_sendmsg+0x1b1/0x290
[  319.931893][T13889]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  319.937420][T13889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.943676][T13889]  do_syscall_64+0x174/0x580
[  319.949198][T13889]  ? trace_irq_disable+0x3b/0x140
[  319.954849][T13889]  ? clear_bhb_loop+0x40/0x90
[  319.959734][T13889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.965670][T13889] RIP: 0033:0x7ff32c59de99
[  319.970259][T13889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.989995][T13889] RSP: 002b:00007ff32d386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.998450][T13889] RAX: ffffffffffffffda RBX: 00007ff32c825fa0 RCX: 00007ff32c59de99
[  320.006538][T13889] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006
[  320.014596][T13889] RBP: 00007ff32c633eaf R08: 0000000000000000 R09: 0000000000000000
[  320.022668][T13889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.030749][T13889] R13: 00007ff32c826038 R14: 00007ff32c825fa0 R15: 00007ffe1b1ce778
[  320.038785][T13889]  </TASK>
[  320.041904][T13889] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  320.049245][T13889] CPU: 1 UID: 0 PID: 13889 Comm: syz.1.2991 Not tainted syzkaller #0 PREEMPT(full) 
[  320.058644][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  320.068736][T13889] Call Trace:
[  320.072050][T13889]  <TASK>
[  320.075007][T13889]  vpanic+0x56c/0xa60
[  320.079037][T13889]  ? __pfx__printk+0x10/0x10
[  320.083670][T13889]  ? __pfx_vpanic+0x10/0x10
[  320.088219][T13889]  ? is_bpf_text_address+0x292/0x2b0
[  320.093551][T13889]  ? is_bpf_text_address+0x26/0x2b0
[  320.098808][T13889]  panic+0xc5/0xd0
[  320.102587][T13889]  ? __pfx_panic+0x10/0x10
[  320.107074][T13889]  __warn+0x315/0x4c0
[  320.111087][T13889]  ? mac80211_hwsim_sta_rc_update+0x6d8/0x8c0
[  320.117196][T13889]  ? mac80211_hwsim_sta_rc_update+0x6d8/0x8c0
[  320.123308][T13889]  __report_bug+0x276/0x570
[  320.127864][T13889]  ? mac80211_hwsim_sta_rc_update+0x6d8/0x8c0
[  320.133980][T13889]  ? __pfx___report_bug+0x10/0x10
[  320.139067][T13889]  ? mac80211_hwsim_sta_rc_update+0x6d8/0x8c0
[  320.145179][T13889]  report_bug_entry+0x19a/0x290
[  320.150087][T13889]  ? mac80211_hwsim_sta_rc_update+0x736/0x8c0
[  320.156197][T13889]  ? mac80211_hwsim_sta_rc_update+0x73b/0x8c0
[  320.162301][T13889]  handle_bug+0xce/0x200
[  320.166604][T13889]  exc_invalid_op+0x1a/0x50
[  320.171150][T13889]  asm_exc_invalid_op+0x1a/0x20
[  320.176057][T13889] RIP: 0010:mac80211_hwsim_sta_rc_update+0x736/0x8c0
[  320.182780][T13889] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 c4 99 fe ff 48 8b 7c 24 20 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 d7 de 96 fa 90 0f 0b
[  320.202420][T13889] RSP: 0018:ffffc90003186ee8 EFLAGS: 00010283
[  320.208535][T13889] RAX: 0000000000000001 RBX: 0000000000000014 RCX: ffff888032e00ed0
[  320.216524][T13889] RDX: 0000000000000000 RSI: ffff88805720f4c2 RDI: ffffffff9064f0b0
[  320.224513][T13889] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000
[  320.232589][T13889] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000
[  320.240575][T13889] R13: dffffc0000000000 R14: 0000000000000008 R15: 0000000000000000
[  320.248576][T13889]  ? hwsim_get_chanwidth+0x17d/0x1a0
[  320.253900][T13889]  ? mac80211_hwsim_sta_rc_update+0xb5/0x8c0
[  320.259907][T13889]  mac80211_hwsim_sta_add+0xc4/0x370
[  320.265219][T13889]  drv_sta_state+0x885/0x17a0
[  320.270029][T13889]  sta_info_insert_rcu+0x171f/0x2780
[  320.275377][T13889]  ? sta_info_insert_rcu+0x842/0x2780
[  320.280775][T13889]  ? rate_control_rate_init+0x117/0x630
[  320.286344][T13889]  sta_info_insert+0x16/0xc0
[  320.290965][T13889]  ieee80211_add_station+0x4bf/0x700
[  320.296281][T13889]  rdev_add_station+0xfc/0x290
[  320.301079][T13889]  nl80211_new_station+0x1b4e/0x1fd0
[  320.306389][T13889]  ? trace_contention_end+0x3d/0x140
[  320.311701][T13889]  ? __pfx_nl80211_new_station+0x10/0x10
[  320.317350][T13889]  ? __rtnl_unlock+0xc8/0xf0
[  320.321994][T13889]  ? nl80211_pre_doit+0x53d/0x890
[  320.327048][T13889]  genl_family_rcv_msg_doit+0x233/0x340
[  320.332662][T13889]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  320.338766][T13889]  ? bpf_lsm_capable+0x9/0x20
[  320.343483][T13889]  ? security_capable+0x7e/0x2c0
[  320.348443][T13889]  genl_rcv_msg+0x614/0x7a0
[  320.352986][T13889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.358044][T13889]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  320.363447][T13889]  ? __pfx_nl80211_new_station+0x10/0x10
[  320.369101][T13889]  ? __pfx_nl80211_post_doit+0x10/0x10
[  320.374583][T13889]  ? __pfx_ref_tracker_free+0x10/0x10
[  320.379975][T13889]  ? __asan_memcpy+0x40/0x70
[  320.384580][T13889]  ? __skb_clone+0x5c/0x6c0
[  320.389114][T13889]  netlink_rcv_skb+0x226/0x4a0
[  320.393926][T13889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.398981][T13889]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.404305][T13889]  ? down_read+0x2be/0x330
[  320.408753][T13889]  genl_rcv+0x28/0x40
[  320.412771][T13889]  netlink_unicast+0x7bb/0x940
[  320.417584][T13889]  netlink_sendmsg+0x813/0xb40
[  320.422381][T13889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.427716][T13889]  ? aa_sock_msg_perm+0xf1/0x1b0
[  320.432677][T13889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.437981][T13889]  sock_sendmsg_nosec+0x13a/0x180
[  320.443033][T13889]  ____sys_sendmsg+0x54e/0x850
[  320.447825][T13889]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.453147][T13889]  ? import_iovec+0x73/0xa0
[  320.457682][T13889]  ___sys_sendmsg+0x2a5/0x360
[  320.462384][T13889]  ? __lock_acquire+0x683/0x2cf0
[  320.467371][T13889]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.472614][T13889]  ? futex_wait+0x2a2/0x390
[  320.477168][T13889]  ? __fget_files+0x2a/0x420
[  320.481790][T13889]  ? __fget_files+0x3a2/0x420
[  320.486527][T13889]  __x64_sys_sendmsg+0x1b1/0x290
[  320.491510][T13889]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.497004][T13889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.503183][T13889]  do_syscall_64+0x174/0x580
[  320.507826][T13889]  ? trace_irq_disable+0x3b/0x140
[  320.512885][T13889]  ? clear_bhb_loop+0x40/0x90
[  320.517583][T13889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.523527][T13889] RIP: 0033:0x7ff32c59de99
[  320.527950][T13889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.547565][T13889] RSP: 002b:00007ff32d386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.556008][T13889] RAX: ffffffffffffffda RBX: 00007ff32c825fa0 RCX: 00007ff32c59de99
[  320.564000][T13889] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006
[  320.571985][T13889] RBP: 00007ff32c633eaf R08: 0000000000000000 R09: 0000000000000000
[  320.579975][T13889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.587958][T13889] R13: 00007ff32c826038 R14: 00007ff32c825fa0 R15: 00007ffe1b1ce778
[  320.595963][T13889]  </TASK>
[  320.599623][T13889] Kernel Offset: disabled
[  320.603957][T13889] Rebooting in 86400 seconds..