last executing test programs: 6.193395211s ago: executing program 4 (id=9991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) socket(0x40000000015, 0xa, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x20008084) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000710002000000400004803c0001800b00010065787468647200002c0002800800034000000100080001400000000d0500020011000000080006400000000208000000002fd4c24342cdc3c430000000000900020073797a32"], 0x94}}, 0x4008000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r10) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) 6.01034269s ago: executing program 4 (id=9992): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xd6, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x10000000}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0xf, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084) 5.993855486s ago: executing program 4 (id=9993): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16, 0xfffffff0}}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000700)=0x8) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000100)=0xffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='macvtap0\x00', 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000380), 0x0) 5.468373403s ago: executing program 1 (id=9999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x80000000, 0x9, 0x80000000, 0x2, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x1, 0x1, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r2}, 0x48) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001a00010000000000fbdb5f250a808000000000000000000008001900", @ANYRES32=0x0, @ANYBLOB="d6ef106554f2547161adda5b42b743da65874c0663fe2d86c29780f2cb9ef332d5b502d13d4652b735341c731bcb9a67d0aac2b7f942475889aa9c9892f089a16365a9eaa2bed46da1370ac5fdb2f8f34bcd46186321965ea5e5442277631074f2c4c00800e50764e458401ab803c34145543dbc131578df6449653ad8324cdd3a4b3542bca9a702a1057fe4c2c337dfcbfc38921136f551e327a462ff6138e886f754699daece7ff85940b068314e7a3631812b1606ec4f6c89a5acb4ae82a88ba242b783e0d66a7cb4d349f9e33c49ea954deab63b6b60c5eb5d2700"/236, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES64=r0], 0x24}}, 0x20000004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x59d85aefed11ec1b}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000140)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000008201", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 5.10738687s ago: executing program 1 (id=10003): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e000000200"/195], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x88, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2}, 0x20008b88) 3.655670629s ago: executing program 1 (id=10008): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2, 0x5, 0x3, 0x401, 0x1, 0x51, 0x3, 0xa, 0x9, 0x85, 0x0, 0xff, 0x1df4, 0x4, 0x5, 0x8, [0x5, 0x9]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.261654904s ago: executing program 0 (id=10025): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c000280050001000000000006000340000000000800074000000000040006"], 0x70}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000020ff000001020001000800060000000000050016001d000000"], 0x2c}}, 0x0) listen(r0, 0x8) writev(0xffffffffffffffff, &(0x7f0000003340)=[{&(0x7f0000000100)="cfae17a547bb496d782bf3bf1c2ce0a2953621a98be44c25f63b57297403e262550494172dffc85be7cfb6c9e3326fe71221928b5ea1f8a6753001eb95820d73b6505724026ef1a7b682103b05dc9541465c3941f98fea569b0065cba7b87827dea3de18c41dc1734f18118faea949f9fe800943f11831f0ea7751a7e0f1c5aa4a572bac234d3839960c81775418588364687613284dc700db997342cb43482b3edb49dfdb567bfea927057c7beed1efe2afe7159a739daa8dd72e", 0xbb}, {&(0x7f0000000580)="815dd5a88cb6c842febcbe649b5b4109559a9137156a540bfffb2e294c523fd27040e8657b6316cccf4c7ca670891a1babb45279eefd5dd872c4d904442b657f14dcc5c511a15c98fa6f055c5ae9a02f3445203cb6897520b6eea6bf4595420dc32175ab845157db7d73acba82517b725b8db52be36accf263d545b7e2fca6377b336e75020d95bbd6a15d4fccadb48cc36d2bbb6bfe134898679923929e7f5de4f50d74e816fb317c53e7ecc6de3ca49d06b7f77ca3c694d486bc73e491851f543741ec58b35cf74cbd6f4d6837efe0dbb0a7204bc6ac964d598cc34b7a", 0xde}, {&(0x7f0000000680)="99e11cd717312c6c5c0b36ccfe1f078ad130523d93de7a58a1851c88f65a25b1fc4b7189d20052bc27573f252839faee24ad05919ee7d31a134bc4d3c93a834e19e6328269bfed003d78b634677bc7258c404d0234b78df406", 0x59}, {&(0x7f0000000700)="82f952f55e745fd565f25b6b7ecb70f6e66644e40af2f89de77df427354e7ed24d91817c64683ac1ba0f75b219d0de621f3e6fb10d853e142838f0a78a277a95d7c4985c5db497d25ed122285007369affd23cb536cef322a60a8fbbc3b8e7a3982a313a4d46d09293e0d2a50de90d1a901c1aff5da00b8ffb95d898d4f5b79bde7372c546929c44a19a02ecdcfbbf5547e689b36c6440b4b49b2cae16a0a1bc504a1172670f4819f13bc13338ee0fd0be308b147d9ce6f96c597889a69d04c5b655bb08f09dd70ab6babc1e36", 0xcd}, {&(0x7f0000000800)="4a69a93ec38cf91ad3cbffd2c56b48575619237240cc8ef75648312b46c06f110503d190cf913a4bdaed24567651a104fc67566199ce0c904b60", 0x3a}, {&(0x7f0000000840)="e5ecfd4880a27afadbef4e6274024b3c27c08706c4e7a1b9b37faf66297bb0e59aeada1356e71b0e9b7da516c60e70e0431d31a2f1aeb0997300a22af4", 0x3d}, {&(0x7f0000000880)="319703aff2704daed6a395303644e701554c61ff7ee6187bfcdf947f3e04fec02012d1", 0x23}, {&(0x7f00000008c0)="775b89fc5a07b397c04ccd2ea35c9de03c7508255de7d7124c448e77091750ce007b7276061194fdd73193debcfb7f62bc22e1674e496f71ce0b666d4f70dc0d7e9e227b462c39d328cc5b81ad501c158122f284fdf49ed5cb719264e301", 0x5e}, {&(0x7f00000022c0)="c0e71a7ad14b8e43daaa9edcbf69bde17fafe5ad77cb18bc4113d3804736f5d419601754a4ed958bb7090bea4bc35c6a72ec68527d075a8061ac1d9f2303f22891ec0c9f6ec5b898ef5a6de2576e329fc56b65c14eb5302aa37b4ce9c001b30c4fbf441d963a448ffca96db41497a50001411de76504c64ce9977784ad6a173bf0e675355ab7e80e31cafe19fc02e8cec20eac08878ba2c3b2724b32c84463f10b739ac61173663a4d3ef25f0974c2680b22bee4037c65b0902a2f4de1cc4feec2b31c4d95d87e9d73bf234eceafac2cb51345d4d834bc4edf682ddd8e3734988a15040e58d92a3586f30a0679a2165ac56fb40e26ffdfe112d97511ca6b1b72212e828093cd36aac0282d42567420395484cda26bd3376b3f9affe6c2481d2a46bf649948a3792edf07929d5ce3cf23ca58a95d", 0xfffffffffffffe64}], 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) close(0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000fc0)="9ba26e3cb3", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001080)='5B', 0x2}], 0x1}}], 0x2, 0x4400c800) sendto$inet6(r6, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.166280689s ago: executing program 0 (id=10026): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x2000000, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 2.164655349s ago: executing program 2 (id=10027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r4, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0x6, 0x1, 0x4144, r9, 0x6, '\x00', r7, r5, 0x1, 0x3, 0x3, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000550000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.031953975s ago: executing program 3 (id=10029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 1.999294736s ago: executing program 2 (id=10030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009f080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$kcm(0x29, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x802, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) close(r8) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.713754625s ago: executing program 3 (id=10031): r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x20000000000000e3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000002240)=""/4137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.635174715s ago: executing program 0 (id=10032): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @multicast1}], 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/88, 0xffffff45}, {&(0x7f0000000780)=""/83, 0x53}], 0x2, 0x0, 0xf00}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 1.567004856s ago: executing program 2 (id=10033): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r1, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 1.442240446s ago: executing program 2 (id=10034): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000034c0)=0x9, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newqdisc={0x70, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x68bf, 0xfffffff8, 0x1, 0x7fff, 0xfffffffc, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}, {{0x1c, 0x1, {0xf, 0x9, 0x61, 0x9, 0x1, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x17]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, 0x0, 0x0) write(r12, &(0x7f0000000040)="07000000010001", 0x7) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$ppp(r13, &(0x7f00000008c0), 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) 1.105198638s ago: executing program 3 (id=10035): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {0x0}, {&(0x7f0000000780)}], 0x4}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="080800004000db92020028001280090001007665746800000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB="20ac01000404000004001a80"], 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x7e, 0x8, "dcf482a437981760b41b15d9aa6437d49beb8e2f278bdcd9b6427d8f5393d4593c2b3667927d230cfe9a968fa0e9230513c578a9ee444ddffa5ec156a33ecde9614c2b0f1cf73daede055c1f0833be15191b5664df9abdde1885c451297a204c10e034283c8996b6233fda90d70740836f29fb79525b9b618d73"}]}, @NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x11, 0x6, "caa827f5345c98c89c2610f761"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "f26c231d1754d4a72ae880a0032781e3bcb2c43ce686ee542f03e274b8f02991f78849a57acae29b44214ca81397ee05289b295f9ef36deecf525e6db3d029c8d282b856ed5cf322d26c9f80014b5eb076572e88c464fa5800d5030b70461fb4d1065f34d8c12ad68aa1a301ace9b50d82b09ff3971f44976e8dae0c18d6aa33fb40a6903df6bf5ec2ea164a624de520c7bf0e667323afc23539ef1f1c012db87b70e487c2d245402dccd94dcf7892405ae3d78264f68f65bef42707a48894ee4e6371e2ddd06ea8eef21df43617b6c723608e6744551491"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x29c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) close(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 903.169459ms ago: executing program 3 (id=10036): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 817.417364ms ago: executing program 2 (id=10037): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x5215, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00\x00', 0x2}, {&(0x7f0000000200)="d77a20ccf604", 0x6}], 0x2, 0x0, 0x0, 0x900}, 0x60) 816.524668ms ago: executing program 1 (id=10038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r2, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) recvmmsg(r2, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) (async) 730.984418ms ago: executing program 4 (id=10039): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000080)="15be381e485e45e897206c3d74dfcecb03cbff2f975128d92a077bf67ec1ad7b486927b48fe4087d", 0x28}, {&(0x7f00000003c0)="d48449e081b658de9e078f7c160b9ced403e9103444a5beb3a965bdbbe3a59ec49d1e51b8d1de3319dcd727aa654d9badb1f90933051e41ef330a73d0ac8519c5fe95e2d32cbe7e555f1677fb3224e", 0x4f}, {&(0x7f0000000440)="6a80de8641cda84d1971100003fefc66a3817a1ff09ab991fca5b0f96191728ca523ffc19368c6afaef73588a2332ece0cefd4417621816def66711fcb07040be2346a72127c4ae7932588b4f515479a72085a4fd6df7dd69ef698300d04be54ab41a06feb7c161e54ccd430f72bb38c733d47cf71252215f759b45491cb9105c5fe6304bda8300de72192e49e194d23fbf619fad9ea14f035168ca7b76263ba081155512a6a46b3a3e2adc3fd0ca6a495d3eb9608f2fd833de1cf5d9d1bde070dd6e5650bf81582ee3311875cd01382c8c89c6655756b66ebbdaaf15f", 0xdd}, {&(0x7f0000000540)="6f413c63448e5d4f3c486552b94adf2376f17fcb494ab2f36085643d33feda17d03fde9506d0efe1ae983add7cf146a4add9aeca4462cee2fb78100ba11ca2644bb5ff31a91403acbefc5b945a6d3a280272", 0x52}, {0x0}, {&(0x7f0000001b80)="cf4af566425ba56804d807abc08e2f175c7312f77c8425e77daafced9987977373fbbd497c8a13252987ff5c7b3f933332ac5170c2ade2bbef7832d3134ab2c64ac54c4c56f23117bd8765df6a0ebcb54463a8292ef14ae3e466e5ca528e50f3d7c3ea9711d8d1b43df51f5ef366569ce963c082c5fb0d7b220484a59f133c28f8eb0cbe5146ec4a66094283c8b637267891db3f7e2b20d7e529209ca8bd7c884d5343a494b4c16de541b401c4153e0cc4914c8e94e0be404b3ac67d60a6a01d914fa518d13ae6d1e6", 0xc9}], 0x6}}], 0x1, 0x20008000) 681.610871ms ago: executing program 0 (id=10040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)={0x2c, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @pid}, @nested={0xc, 0x125, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@typed={0x4, 0x92, 0x0, 0x0, @binary}]}]}, @generic="f7"]}, 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) (fail_nth: 6) 680.628367ms ago: executing program 3 (id=10041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 614.512989ms ago: executing program 2 (id=10042): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)}], 0x4}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x24, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x808, 0x20040}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 593.264391ms ago: executing program 4 (id=10043): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x3, 0x22, 0x81, 0xfffff031}, {0x6, 0x0, 0x3, 0xffffffff}, {0x20, 0x0, 0x0, 0xfffff010}, {0x98c, 0x7, 0x12, 0x7}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r2, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) 328.335849ms ago: executing program 0 (id=10044): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r1, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 262.414832ms ago: executing program 1 (id=10045): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f", 0x43}, {&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad48a15c9f8154792ef05a035d7af9f0bd9cf0e981190cb6a7c891047fc565132540b72605bdbf33d60f8942c5b2cf5c76913037a07ee4f74a9be51303e26691c2972d54ccb61e2e2e20d4e08f680ec11042005b2e9fa76336839e84e2", 0x95}], 0x2}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="40010400"], 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x81}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4049}, 0x4000040) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x6c}}, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16], 0x14) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 256.576241ms ago: executing program 3 (id=10046): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x8, @private2}, 0xa, &(0x7f0000001b80), 0x1}}], 0x1, 0x200488c4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x2004000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x14) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 126.421836ms ago: executing program 0 (id=10047): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003d68c5e007688a2003308020200ecff3f0200000300000a000000009afc1e75264ca593dba67e06018000f4fffff00607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac3901000000000000ea000000001000000009ffff02dfcccef6ba00084027467f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000000000000000000000000000000000000000000000abd8bd2e1624", 0xb8) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x50, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@deltclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x7, 0x10}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x516}]}}]}, 0x3c}}, 0x20004055) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg(r3, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x4, 0x81}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={r4, 0x3}, &(0x7f00000004c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r5 = accept4(r2, &(0x7f0000000580)=@caif, &(0x7f0000000600)=0x80, 0x800) connect$pppoe(r5, &(0x7f0000000640)={0x18, 0x0, {0x2, @remote, 'dummy0\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r7, @ANYRES32=r6], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000180)=@ethernet={0x306, @random="6fc4ce43cdd4"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)="85dc26ab0439c51c5c7f8d39269c67e178a36152ceb2ebf19c06aa4cf80413788c75c649c0a4ac2200f2d09a6e28fbe244a57ba12b71ccdbc9585146ec241874c2ce33f4b5015471f560808f0f015dc8d91aecfc408a8198da614d5a2b4a6bb9d9a0af65eec9e41221a5ff9f1895fbcff62074e1de1b068cbae1b444faa6038b6a2ef85423feffc210", 0x89}, {&(0x7f0000000800)="7f514d783b6cb579", 0x8}, {&(0x7f0000000840)="c2366d1644569e3a99d650", 0xb}], 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x200}}, {{&(0x7f0000000ac0)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)="3f21041b080b1728aabfa58d01ac061422af15f7742f8395a45ab636787e", 0x1e}], 0x1, &(0x7f0000000bc0)}}], 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 123.063668ms ago: executing program 4 (id=10048): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000640), 0x8) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) unshare(0x8040480) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0xcb, 0x0, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\t\x00\x00\x00\x00\x00\x00'], 0x14) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket(0x40000000015, 0x805, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r6], 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[], 0x14) 0s ago: executing program 1 (id=10049): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x8}, {0xfffc, 0x9}, {0xffff, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000400000091117a000000000095000000006b0b86"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$rfkill(r5, &(0x7f0000000240)={0x1, 0x8, 0x3, 0x1}, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRESHEX, @ANYBLOB="08000ac1619c1c079f6a3100", @ANYRES32=r2], 0x4c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000000)={'wg1\x00'}) kernel console output (not intermixed with test programs): +0x10/0x10 [ 934.133148][ T1598] ? nfnl_pernet+0x23/0x240 [ 934.133170][ T1598] ? nfnl_pernet+0x23/0x240 [ 934.133202][ T1598] ? __nla_parse+0x40/0x60 [ 934.133234][ T1598] nfnetlink_rcv+0x123e/0x27b0 [ 934.133290][ T1598] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 934.133329][ T1598] ? ref_tracker_free+0x693/0x840 [ 934.133378][ T1598] ? __netlink_deliver_tap+0x807/0x850 [ 934.133405][ T1598] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.133420][ T1598] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.133442][ T1598] netlink_unicast+0x75c/0x8e0 [ 934.133475][ T1598] netlink_sendmsg+0x813/0xb40 [ 934.133501][ T1598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.133522][ T1598] ? aa_sock_msg_perm+0xf1/0x1b0 [ 934.133545][ T1598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 934.133568][ T1598] ____sys_sendmsg+0x972/0x9f0 [ 934.133584][ T1598] ? __might_fault+0xaf/0x130 [ 934.133612][ T1598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.133637][ T1598] ? import_iovec+0x73/0xa0 [ 934.133662][ T1598] ___sys_sendmsg+0x2a5/0x360 [ 934.133677][ T1598] ? __lock_acquire+0x6b5/0x2cf0 [ 934.133698][ T1598] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.133750][ T1598] ? __fget_files+0x2a/0x420 [ 934.133767][ T1598] ? __fget_files+0x3a0/0x420 [ 934.133796][ T1598] __x64_sys_sendmsg+0x1bd/0x2a0 [ 934.133815][ T1598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.133841][ T1598] ? __pfx_ksys_write+0x10/0x10 [ 934.133871][ T1598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.133889][ T1598] do_syscall_64+0x15f/0xf80 [ 934.133910][ T1598] ? trace_irq_disable+0x3b/0x140 [ 934.133932][ T1598] ? clear_bhb_loop+0x40/0x90 [ 934.133952][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.133968][ T1598] RIP: 0033:0x7fc5d7f9ce59 [ 934.133984][ T1598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.133997][ T1598] RSP: 002b:00007fc5d8e92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.134014][ T1598] RAX: ffffffffffffffda RBX: 00007fc5d8215fa0 RCX: 00007fc5d7f9ce59 [ 934.134026][ T1598] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 934.134036][ T1598] RBP: 00007fc5d8e92090 R08: 0000000000000000 R09: 0000000000000000 [ 934.134046][ T1598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.134056][ T1598] R13: 00007fc5d8216038 R14: 00007fc5d8215fa0 R15: 00007ffc385d52c8 [ 934.134084][ T1598] [ 934.134417][ T1598] cannot load conntrack support for proto=2 [ 934.279428][ T1603] pimreg: entered allmulticast mode [ 934.422032][ T1607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9320'. [ 934.560871][ T1379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.608104][ T1606] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.687865][ T1379] veth0_vlan: entered promiscuous mode [ 934.731721][ T5643] Bluetooth: hci2: command tx timeout [ 934.746189][ T1615] xt_hashlimit: size too large, truncated to 1048576 [ 934.753438][ T1379] veth1_vlan: entered promiscuous mode [ 934.875354][ T1379] veth0_macvtap: entered promiscuous mode [ 934.930552][ T1379] veth1_macvtap: entered promiscuous mode [ 934.991275][ T1626] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9326'. [ 934.994478][ T1379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.020696][ T1627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9327'. [ 935.026937][ T1379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.088917][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.122719][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.275387][ T1631] bond5: entered promiscuous mode [ 935.280764][ T1631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 935.287829][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.325728][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.503420][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.524065][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.736146][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.760193][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.995089][ T1670] netlink: 'syz.2.9264': attribute type 1 has an invalid length. [ 936.357379][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.364657][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.746963][ T1692] openvswitch: netlink: Message has 4 unknown bytes. [ 936.762409][ T1692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.858269][ T1680] bond3: left promiscuous mode [ 936.900451][ T1680] bond4: left promiscuous mode [ 936.921912][ T1680] bond5: left promiscuous mode [ 936.986891][ T1684] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.039050][ T1684] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.249997][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.257254][ T1688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.286244][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.293499][ T1688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.397172][ T1718] netlink: 'syz.4.9355': attribute type 1 has an invalid length. [ 937.474770][ T1718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 937.490880][ T1716] syzkaller1: entered promiscuous mode [ 937.496888][ T1716] syzkaller1: entered allmulticast mode [ 937.555808][ T1721] bond3: (slave gretap1): making interface the new active one [ 937.566013][ T1721] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 937.787959][ T1729] __nla_validate_parse: 2 callbacks suppressed [ 937.787976][ T1729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9358'. [ 938.074644][T19922] hid-generic 0005:10CF:7FFF.0006: item fetching failed at offset 0/1 [ 938.083569][T19922] hid-generic 0005:10CF:7FFF.0006: probe with driver hid-generic failed with error -22 [ 938.150206][ T1739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9362'. [ 938.198485][ T1749] FAULT_INJECTION: forcing a failure. [ 938.198485][ T1749] name failslab, interval 1, probability 0, space 0, times 0 [ 938.214498][ T1739] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.243715][ T1749] CPU: 1 UID: 0 PID: 1749 Comm: syz.3.9365 Not tainted syzkaller #0 PREEMPT(full) [ 938.243736][ T1749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 938.243746][ T1749] Call Trace: [ 938.243753][ T1749] [ 938.243761][ T1749] dump_stack_lvl+0xe8/0x150 [ 938.243786][ T1749] should_fail_ex+0x412/0x560 [ 938.243813][ T1749] should_failslab+0xa8/0x100 [ 938.243837][ T1749] __kmalloc_noprof+0xe8/0x760 [ 938.243859][ T1749] ? ethnl_default_set_doit+0x16a/0xad0 [ 938.243970][ T1749] ethnl_default_set_doit+0x16a/0xad0 [ 938.243989][ T1749] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 938.244009][ T1749] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 938.244037][ T1749] genl_family_rcv_msg_doit+0x22a/0x330 [ 938.244057][ T1749] ? __asan_memcpy+0x40/0x70 [ 938.244077][ T1749] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 938.244109][ T1749] ? bpf_lsm_capable+0x9/0x20 [ 938.244124][ T1749] ? security_capable+0x7e/0x2c0 [ 938.244151][ T1749] genl_rcv_msg+0x61c/0x7a0 [ 938.244177][ T1749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 938.244196][ T1749] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 938.244216][ T1749] ? __pfx_ref_tracker_free+0x10/0x10 [ 938.244248][ T1749] netlink_rcv_skb+0x232/0x4b0 [ 938.244266][ T1749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 938.244287][ T1749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 938.244320][ T1749] ? down_read+0x270/0x2e0 [ 938.244336][ T1749] ? genl_rcv+0xd/0x40 [ 938.244357][ T1749] genl_rcv+0x28/0x40 [ 938.244375][ T1749] netlink_unicast+0x75c/0x8e0 [ 938.244419][ T1749] netlink_sendmsg+0x813/0xb40 [ 938.244445][ T1749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.244465][ T1749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 938.244488][ T1749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 938.244512][ T1749] ____sys_sendmsg+0x972/0x9f0 [ 938.244528][ T1749] ? __might_fault+0xaf/0x130 [ 938.244555][ T1749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.244581][ T1749] ? import_iovec+0x73/0xa0 [ 938.244607][ T1749] ___sys_sendmsg+0x2a5/0x360 [ 938.244622][ T1749] ? __lock_acquire+0x6b5/0x2cf0 [ 938.244644][ T1749] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.244696][ T1749] ? __fget_files+0x2a/0x420 [ 938.244714][ T1749] ? __fget_files+0x3a0/0x420 [ 938.244743][ T1749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 938.244762][ T1749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.244788][ T1749] ? __pfx_ksys_write+0x10/0x10 [ 938.244819][ T1749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.244838][ T1749] do_syscall_64+0x15f/0xf80 [ 938.244859][ T1749] ? trace_irq_disable+0x3b/0x140 [ 938.244882][ T1749] ? clear_bhb_loop+0x40/0x90 [ 938.244901][ T1749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.244917][ T1749] RIP: 0033:0x7ff0c779ce59 [ 938.244934][ T1749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.244947][ T1749] RSP: 002b:00007ff0c8663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.244964][ T1749] RAX: ffffffffffffffda RBX: 00007ff0c7a15fa0 RCX: 00007ff0c779ce59 [ 938.244975][ T1749] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 938.244985][ T1749] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 938.244995][ T1749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.245005][ T1749] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 938.245034][ T1749] [ 938.250328][ T1739] bridge_slave_0 (unregistering): left allmulticast mode [ 938.649373][ T1739] bridge_slave_0 (unregistering): left promiscuous mode [ 938.664392][ T1739] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.899060][ T1766] netlink: 'syz.2.9370': attribute type 1 has an invalid length. [ 939.342336][ T1781] syzkaller0: entered promiscuous mode [ 939.348395][ T1781] syzkaller0: entered allmulticast mode [ 939.798072][ T1802] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 939.814739][ T1803] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 939.844108][ T1802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9379'. [ 939.904209][ T1803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9379'. [ 940.043103][ T1813] rdma_rxe: rxe_newlink: failed to add lo [ 940.563118][ T1824] netlink: 'syz.1.9388': attribute type 1 has an invalid length. [ 940.613229][ T1824] 8021q: adding VLAN 0 to HW filter on device bond19 [ 941.077798][ T1838] xt_connbytes: Forcing CT accounting to be enabled [ 941.099016][ T1838] x_tables: ip_tables: esp match: only valid for protocol 50 [ 941.136045][ T5734] IPVS: starting estimator thread 0... [ 941.196171][ T1843] netlink: 'syz.2.9394': attribute type 39 has an invalid length. [ 941.283392][ T1841] IPVS: using max 28 ests per chain, 67200 per kthread [ 941.329799][ T1846] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9395'. [ 942.554441][ T1880] netlink: 'syz.1.9400': attribute type 1 has an invalid length. [ 942.694854][ T1880] 8021q: adding VLAN 0 to HW filter on device bond20 [ 945.305862][ T1913] syzkaller0: entered promiscuous mode [ 945.311817][ T1913] syzkaller0: entered allmulticast mode [ 945.837714][ T1887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.987103][ T1916] syzkaller0: entered promiscuous mode [ 945.996719][ T1916] syzkaller0: entered allmulticast mode [ 946.198774][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 946.206028][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 946.223177][ T1922] bridge0: port 3(erspan0) entered blocking state [ 946.229702][ T1922] bridge0: port 3(erspan0) entered disabled state [ 946.236330][ T1922] erspan0: entered allmulticast mode [ 946.243530][ T1922] erspan0: entered promiscuous mode [ 946.249426][ T1922] bridge0: port 3(erspan0) entered blocking state [ 946.256367][ T1922] bridge0: port 3(erspan0) entered forwarding state [ 946.278787][ T1922] erspan0: left allmulticast mode [ 946.283863][ T1922] erspan0: left promiscuous mode [ 946.290783][ T1922] bridge0: port 3(erspan0) entered disabled state [ 946.384118][T20194] hid-generic 0005:10CF:7FFF.0007: item fetching failed at offset 0/1 [ 946.437069][T20194] hid-generic 0005:10CF:7FFF.0007: probe with driver hid-generic failed with error -22 [ 946.568185][ T1945] FAULT_INJECTION: forcing a failure. [ 946.568185][ T1945] name failslab, interval 1, probability 0, space 0, times 0 [ 946.583702][ T1945] CPU: 0 UID: 0 PID: 1945 Comm: syz.0.9416 Not tainted syzkaller #0 PREEMPT(full) [ 946.583724][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 946.583734][ T1945] Call Trace: [ 946.583741][ T1945] [ 946.583748][ T1945] dump_stack_lvl+0xe8/0x150 [ 946.583772][ T1945] should_fail_ex+0x412/0x560 [ 946.583798][ T1945] should_failslab+0xa8/0x100 [ 946.583824][ T1945] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 946.583845][ T1945] ? __alloc_skb+0x186/0x7d0 [ 946.583866][ T1945] ? __alloc_skb+0x1d0/0x7d0 [ 946.583885][ T1945] ? __local_bh_enable_ip+0xd0/0x130 [ 946.583907][ T1945] __alloc_skb+0x1d0/0x7d0 [ 946.583928][ T1945] ? kernel_text_address+0xa5/0xe0 [ 946.583951][ T1945] alloc_skb_with_frags+0xc8/0x760 [ 946.583972][ T1945] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 946.583995][ T1945] ? arch_stack_walk+0xfb/0x150 [ 946.584027][ T1945] sock_alloc_send_pskb+0x878/0x990 [ 946.584063][ T1945] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 946.584078][ T1945] ? __kasan_kmalloc+0x93/0xb0 [ 946.584096][ T1945] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 946.584116][ T1945] ? kmemdup_noprof+0x2b/0x70 [ 946.584131][ T1945] ? ip6_setup_cork+0x7fe/0xf30 [ 946.584148][ T1945] ? ip6_make_skb+0x1c8/0x320 [ 946.584164][ T1945] ? udpv6_sendmsg+0x1db8/0x25c0 [ 946.584179][ T1945] ? ____sys_sendmsg+0x5c7/0x9f0 [ 946.584192][ T1945] ? ___sys_sendmsg+0x2a5/0x360 [ 946.584206][ T1945] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 946.584220][ T1945] ? do_syscall_64+0x15f/0xf80 [ 946.584241][ T1945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.584272][ T1945] __ip6_append_data+0x2c6c/0x3f60 [ 946.584291][ T1945] ? __lock_acquire+0x6b5/0x2cf0 [ 946.584325][ T1945] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 946.584348][ T1945] ? ip6_mtu+0x7d/0x490 [ 946.584374][ T1945] ? ip6_mtu+0x7d/0x490 [ 946.584394][ T1945] ? __pfx___ip6_append_data+0x10/0x10 [ 946.584411][ T1945] ? __pfx_ip6_mtu+0x10/0x10 [ 946.584433][ T1945] ip6_make_skb+0x2af/0x320 [ 946.584454][ T1945] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 946.584477][ T1945] ? __pfx_ip6_make_skb+0x10/0x10 [ 946.584494][ T1945] ? sk_dst_check+0x25/0x480 [ 946.584524][ T1945] ? udpv6_sendmsg+0x1864/0x25c0 [ 946.584544][ T1945] udpv6_sendmsg+0x1db8/0x25c0 [ 946.584578][ T1945] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 946.584592][ T1945] ? udp_lib_get_port+0x177a/0x1c60 [ 946.584621][ T1945] ? ip6_datagram_release_cb+0x7c/0x550 [ 946.584654][ T1945] ? inet_send_prepare+0x1b9/0x270 [ 946.584674][ T1945] ? inet_send_prepare+0x1b9/0x270 [ 946.584695][ T1945] ? inet_send_prepare+0x1b9/0x270 [ 946.584721][ T1945] ? __local_bh_enable_ip+0xd0/0x130 [ 946.584737][ T1945] ? inet_send_prepare+0x1b9/0x270 [ 946.584758][ T1945] ? inet6_sendmsg+0xe4/0x120 [ 946.584781][ T1945] ____sys_sendmsg+0x5c7/0x9f0 [ 946.584805][ T1945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 946.584826][ T1945] ? import_iovec+0x73/0xa0 [ 946.584851][ T1945] ___sys_sendmsg+0x2a5/0x360 [ 946.584865][ T1945] ? __lock_acquire+0x6b5/0x2cf0 [ 946.584886][ T1945] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.584932][ T1945] ? __fget_files+0x2a/0x420 [ 946.584949][ T1945] ? __fget_files+0x3a0/0x420 [ 946.584977][ T1945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 946.585004][ T1945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 946.585028][ T1945] ? __pfx_ksys_write+0x10/0x10 [ 946.585057][ T1945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.585075][ T1945] do_syscall_64+0x15f/0xf80 [ 946.585096][ T1945] ? trace_irq_disable+0x3b/0x140 [ 946.585118][ T1945] ? clear_bhb_loop+0x40/0x90 [ 946.585138][ T1945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.585154][ T1945] RIP: 0033:0x7f3e9a79ce59 [ 946.585171][ T1945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.585183][ T1945] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.585200][ T1945] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 946.585212][ T1945] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000004 [ 946.585223][ T1945] RBP: 00007f3e9b6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 946.585233][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.585242][ T1945] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 946.585274][ T1945] [ 947.052920][ T1949] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 947.937765][ T1978] syzkaller0: entered promiscuous mode [ 947.946690][ T1978] syzkaller0: entered allmulticast mode [ 948.285733][ T1991] FAULT_INJECTION: forcing a failure. [ 948.285733][ T1991] name failslab, interval 1, probability 0, space 0, times 0 [ 948.292862][ T1989] netlink: 'syz.4.9429': attribute type 9 has an invalid length. [ 948.306177][ T1989] netlink: 'syz.4.9429': attribute type 6 has an invalid length. [ 948.324816][ T1991] CPU: 0 UID: 0 PID: 1991 Comm: syz.1.9430 Not tainted syzkaller #0 PREEMPT(full) [ 948.324839][ T1991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 948.324849][ T1991] Call Trace: [ 948.324856][ T1991] [ 948.324863][ T1991] dump_stack_lvl+0xe8/0x150 [ 948.324889][ T1991] should_fail_ex+0x412/0x560 [ 948.324916][ T1991] should_failslab+0xa8/0x100 [ 948.324939][ T1991] ? skb_clone+0x212/0x3a0 [ 948.324957][ T1991] kmem_cache_alloc_noprof+0x87/0x650 [ 948.324988][ T1991] skb_clone+0x212/0x3a0 [ 948.325008][ T1991] __netlink_deliver_tap+0x404/0x850 [ 948.325039][ T1991] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.325057][ T1991] netlink_deliver_tap+0x19c/0x1b0 [ 948.325075][ T1991] netlink_sendskb+0x68/0x140 [ 948.325101][ T1991] netlink_rcv_skb+0x2b6/0x4b0 [ 948.325119][ T1991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 948.325141][ T1991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 948.325174][ T1991] ? down_read+0x270/0x2e0 [ 948.325189][ T1991] ? genl_rcv+0xd/0x40 [ 948.325210][ T1991] genl_rcv+0x28/0x40 [ 948.325227][ T1991] netlink_unicast+0x75c/0x8e0 [ 948.325261][ T1991] netlink_sendmsg+0x813/0xb40 [ 948.325288][ T1991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.325309][ T1991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 948.325332][ T1991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 948.325357][ T1991] ____sys_sendmsg+0x972/0x9f0 [ 948.325373][ T1991] ? __might_fault+0xaf/0x130 [ 948.325401][ T1991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.325428][ T1991] ? import_iovec+0x73/0xa0 [ 948.325454][ T1991] ___sys_sendmsg+0x2a5/0x360 [ 948.325470][ T1991] ? __lock_acquire+0x6b5/0x2cf0 [ 948.325493][ T1991] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.325547][ T1991] ? __fget_files+0x2a/0x420 [ 948.325565][ T1991] ? __fget_files+0x3a0/0x420 [ 948.325594][ T1991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 948.325614][ T1991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.325641][ T1991] ? __pfx_ksys_write+0x10/0x10 [ 948.325679][ T1991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.325697][ T1991] do_syscall_64+0x15f/0xf80 [ 948.325719][ T1991] ? trace_irq_disable+0x3b/0x140 [ 948.325742][ T1991] ? clear_bhb_loop+0x40/0x90 [ 948.325763][ T1991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.325779][ T1991] RIP: 0033:0x7fc5d7f9ce59 [ 948.325796][ T1991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.325813][ T1991] RSP: 002b:00007fc5d8e92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.325831][ T1991] RAX: ffffffffffffffda RBX: 00007fc5d8215fa0 RCX: 00007fc5d7f9ce59 [ 948.325842][ T1991] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 948.325853][ T1991] RBP: 00007fc5d8e92090 R08: 0000000000000000 R09: 0000000000000000 [ 948.325863][ T1991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.325873][ T1991] R13: 00007fc5d8216038 R14: 00007fc5d8215fa0 R15: 00007ffc385d52c8 [ 948.325902][ T1991] [ 948.645029][ T1995] netlink: 'syz.0.9431': attribute type 1 has an invalid length. [ 948.676406][ T1995] 8021q: adding VLAN 0 to HW filter on device bond6 [ 949.179430][ T2015] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.357292][ T2022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 949.417985][ T2026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9444'. [ 949.536404][ T2029] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 949.695040][ T2048] netlink: 'syz.4.9454': attribute type 10 has an invalid length. [ 949.702899][ T2048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9454'. [ 949.769427][ T2048] FAULT_INJECTION: forcing a failure. [ 949.769427][ T2048] name failslab, interval 1, probability 0, space 0, times 0 [ 949.782764][ T2048] CPU: 0 UID: 0 PID: 2048 Comm: syz.4.9454 Not tainted syzkaller #0 PREEMPT(full) [ 949.782786][ T2048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 949.782796][ T2048] Call Trace: [ 949.782803][ T2048] [ 949.782811][ T2048] dump_stack_lvl+0xe8/0x150 [ 949.782835][ T2048] should_fail_ex+0x412/0x560 [ 949.782861][ T2048] should_failslab+0xa8/0x100 [ 949.782886][ T2048] __kmalloc_cache_noprof+0x88/0x660 [ 949.782906][ T2048] ? flow_offload_netdev_event+0x51/0x70 [ 949.782928][ T2048] ? nf_nat_masq_schedule+0x31f/0x6e0 [ 949.782951][ T2048] nf_nat_masq_schedule+0x31f/0x6e0 [ 949.782973][ T2048] ? __pfx_device_cmp+0x10/0x10 [ 949.782990][ T2048] ? __pfx_nf_nat_masq_schedule+0x10/0x10 [ 949.783017][ T2048] masq_device_event+0xa2/0xe0 [ 949.783033][ T2048] notifier_call_chain+0x1ad/0x3d0 [ 949.783060][ T2048] __dev_notify_flags+0x16d/0x310 [ 949.783088][ T2048] ? __pfx___dev_notify_flags+0x10/0x10 [ 949.783109][ T2048] ? __dev_change_flags+0x5a0/0x7e0 [ 949.783137][ T2048] ? __pfx___dev_change_flags+0x10/0x10 [ 949.783171][ T2048] netif_change_flags+0xe8/0x1a0 [ 949.783200][ T2048] do_setlink+0xfa5/0x45a0 [ 949.783232][ T2048] ? __pfx_do_setlink+0x10/0x10 [ 949.783265][ T2048] ? do_raw_spin_lock+0x12b/0x2f0 [ 949.783305][ T2048] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 949.783326][ T2048] ? lockdep_hardirqs_on+0x7a/0x110 [ 949.783350][ T2048] ? __mutex_lock+0xef8/0x1550 [ 949.783372][ T2048] ? __pfx___nla_validate_parse+0x10/0x10 [ 949.783398][ T2048] ? __mutex_lock+0x608/0x1550 [ 949.783417][ T2048] ? rtnl_setlink+0x55e/0x940 [ 949.783439][ T2048] ? __pfx___mutex_lock+0x10/0x10 [ 949.783466][ T2048] ? get_net+0x13d/0x1f0 [ 949.783486][ T2048] rtnl_setlink+0x635/0x940 [ 949.783512][ T2048] ? __pfx_rtnl_setlink+0x10/0x10 [ 949.783606][ T2048] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 949.783646][ T2048] ? __pfx_rtnl_setlink+0x10/0x10 [ 949.783668][ T2048] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 949.783693][ T2048] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 949.783714][ T2048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.783733][ T2048] ? ref_tracker_free+0x693/0x840 [ 949.783757][ T2048] ? __pfx_ref_tracker_free+0x10/0x10 [ 949.783788][ T2048] netlink_rcv_skb+0x232/0x4b0 [ 949.783807][ T2048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.783829][ T2048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.783858][ T2048] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.783875][ T2048] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.783896][ T2048] netlink_unicast+0x75c/0x8e0 [ 949.783930][ T2048] netlink_sendmsg+0x813/0xb40 [ 949.783956][ T2048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.783977][ T2048] ? aa_sock_msg_perm+0xf1/0x1b0 [ 949.784000][ T2048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.784025][ T2048] ____sys_sendmsg+0x972/0x9f0 [ 949.784041][ T2048] ? __might_fault+0xaf/0x130 [ 949.784066][ T2048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.784089][ T2048] ? import_iovec+0x73/0xa0 [ 949.784114][ T2048] ___sys_sendmsg+0x2a5/0x360 [ 949.784129][ T2048] ? __lock_acquire+0x6b5/0x2cf0 [ 949.784149][ T2048] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.784198][ T2048] ? __fget_files+0x2a/0x420 [ 949.784216][ T2048] ? __fget_files+0x3a0/0x420 [ 949.784244][ T2048] __x64_sys_sendmsg+0x1bd/0x2a0 [ 949.784263][ T2048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.784288][ T2048] ? __pfx_ksys_write+0x10/0x10 [ 949.784318][ T2048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.784335][ T2048] do_syscall_64+0x15f/0xf80 [ 949.784362][ T2048] ? trace_irq_disable+0x3b/0x140 [ 949.784383][ T2048] ? clear_bhb_loop+0x40/0x90 [ 949.784402][ T2048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.784418][ T2048] RIP: 0033:0x7f5eb979ce59 [ 949.784435][ T2048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.784447][ T2048] RSP: 002b:00007f5eba576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.784464][ T2048] RAX: ffffffffffffffda RBX: 00007f5eb9a15fa0 RCX: 00007f5eb979ce59 [ 949.784476][ T2048] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 949.784487][ T2048] RBP: 00007f5eba576090 R08: 0000000000000000 R09: 0000000000000000 [ 949.784497][ T2048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.784506][ T2048] R13: 00007f5eb9a16038 R14: 00007f5eb9a15fa0 R15: 00007ffe6cae6ea8 [ 949.784534][ T2048] [ 949.795313][ T2048] team0: Port device geneve1 added [ 950.574861][ T2070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9458'. [ 951.295860][ T2110] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9474'. [ 951.691109][ T2125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9481'. [ 951.718295][ T2125] veth1_macvtap: left promiscuous mode [ 951.759266][ T2127] syzkaller0: entered promiscuous mode [ 951.771043][ T2127] syzkaller0: entered allmulticast mode [ 951.802647][ T2127] netlink: 'syz.2.9480': attribute type 83 has an invalid length. [ 952.025990][ T2136] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9484'. [ 952.065071][ T2139] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.394451][ T2157] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9493'. [ 952.618462][ T2174] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9498'. [ 952.879522][ T2186] FAULT_INJECTION: forcing a failure. [ 952.879522][ T2186] name failslab, interval 1, probability 0, space 0, times 0 [ 952.892875][ T2186] CPU: 0 UID: 0 PID: 2186 Comm: syz.0.9503 Not tainted syzkaller #0 PREEMPT(full) [ 952.892898][ T2186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 952.892908][ T2186] Call Trace: [ 952.892915][ T2186] [ 952.892922][ T2186] dump_stack_lvl+0xe8/0x150 [ 952.892947][ T2186] should_fail_ex+0x412/0x560 [ 952.892973][ T2186] should_failslab+0xa8/0x100 [ 952.892999][ T2186] __kmalloc_noprof+0xe8/0x760 [ 952.893031][ T2186] ? ethnl_default_notify+0x1f5/0xbf0 [ 952.893049][ T2186] ? __kmalloc_noprof+0x1b8/0x760 [ 952.893073][ T2186] ethnl_default_notify+0x1f5/0xbf0 [ 952.893104][ T2186] ? __pfx_ethnl_default_notify+0x10/0x10 [ 952.893135][ T2186] ? mutex_is_locked+0x17/0x50 [ 952.893153][ T2186] ? rtnl_is_locked+0x15/0x20 [ 952.893172][ T2186] ethnl_netdev_event+0xe2/0x160 [ 952.893193][ T2186] notifier_call_chain+0x1ad/0x3d0 [ 952.893220][ T2186] netdev_features_change+0x8d/0xd0 [ 952.893242][ T2186] ? __pfx_netdev_features_change+0x10/0x10 [ 952.893262][ T2186] ? security_capable+0x7e/0x2c0 [ 952.893289][ T2186] dev_ethtool+0x162c/0x1ae0 [ 952.893321][ T2186] ? __pfx_dev_ethtool+0x10/0x10 [ 952.893339][ T2186] ? dev_load+0x21/0x1f0 [ 952.893374][ T2186] ? dev_load+0x21/0x1f0 [ 952.893397][ T2186] dev_ioctl+0x392/0x1150 [ 952.893422][ T2186] sock_do_ioctl+0x23e/0x320 [ 952.893445][ T2186] ? __pfx_sock_do_ioctl+0x10/0x10 [ 952.893461][ T2186] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 952.893502][ T2186] sock_ioctl+0x5c6/0x7f0 [ 952.893522][ T2186] ? __pfx_sock_ioctl+0x10/0x10 [ 952.893542][ T2186] ? __fget_files+0x2a/0x420 [ 952.893560][ T2186] ? __fget_files+0x3a0/0x420 [ 952.893577][ T2186] ? __fget_files+0x2a/0x420 [ 952.893599][ T2186] ? bpf_lsm_file_ioctl+0x9/0x20 [ 952.893622][ T2186] ? __pfx_sock_ioctl+0x10/0x10 [ 952.893641][ T2186] __se_sys_ioctl+0xfc/0x170 [ 952.893662][ T2186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.893680][ T2186] do_syscall_64+0x15f/0xf80 [ 952.893701][ T2186] ? trace_irq_disable+0x3b/0x140 [ 952.893724][ T2186] ? clear_bhb_loop+0x40/0x90 [ 952.893743][ T2186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.893759][ T2186] RIP: 0033:0x7f3e9a79ce59 [ 952.893775][ T2186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.893788][ T2186] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 952.893806][ T2186] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 952.893818][ T2186] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 952.893828][ T2186] RBP: 00007f3e9b6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 952.893837][ T2186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.893846][ T2186] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 952.893875][ T2186] [ 952.898796][ T2185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9504'. [ 952.995479][ T2187] netlink: 'syz.4.9502': attribute type 1 has an invalid length. [ 953.268800][ T2187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 953.318003][ T2189] macvlan2: entered promiscuous mode [ 953.323460][ T2189] macvlan2: entered allmulticast mode [ 953.330611][ T2189] bond4: entered promiscuous mode [ 953.338507][ T2189] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 953.351257][ T2189] bond4: left promiscuous mode [ 953.463582][ T2208] netlink: 276 bytes leftover after parsing attributes in process `syz.1.9510'. [ 953.697151][ T2217] pim6reg: entered allmulticast mode [ 953.766622][ T2226] FAULT_INJECTION: forcing a failure. [ 953.766622][ T2226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.783092][ T2226] CPU: 0 UID: 0 PID: 2226 Comm: syz.3.9516 Not tainted syzkaller #0 PREEMPT(full) [ 953.783115][ T2226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 953.783125][ T2226] Call Trace: [ 953.783133][ T2226] [ 953.783140][ T2226] dump_stack_lvl+0xe8/0x150 [ 953.783166][ T2226] should_fail_ex+0x412/0x560 [ 953.783193][ T2226] _copy_from_iter+0x1d3/0x1670 [ 953.783224][ T2226] ? __pfx__copy_from_iter+0x10/0x10 [ 953.783240][ T2226] ? sock_alloc_send_pskb+0x896/0x990 [ 953.783258][ T2226] ? __pfx__copy_from_iter+0x10/0x10 [ 953.783279][ T2226] copy_page_from_iter+0x220/0x2d0 [ 953.783297][ T2226] skb_copy_datagram_from_iter+0x306/0x710 [ 953.783319][ T2226] tun_get_user+0xc5e/0x43e0 [ 953.783347][ T2226] ? aa_file_perm+0x192/0x15e0 [ 953.783367][ T2226] ? aa_file_perm+0x50e/0x15e0 [ 953.783383][ T2226] ? __pfx_tun_get_user+0x10/0x10 [ 953.783401][ T2226] ? __lock_acquire+0x6b5/0x2cf0 [ 953.783417][ T2226] ? kstrtoull+0x12f/0x1d0 [ 953.783436][ T2226] ? ref_tracker_alloc+0x35c/0x4c0 [ 953.783454][ T2226] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 953.783471][ T2226] ? tun_get+0x1c/0x2f0 [ 953.783486][ T2226] ? tun_get+0x1c/0x2f0 [ 953.783504][ T2226] ? tun_get+0x1c/0x2f0 [ 953.783519][ T2226] ? tun_get+0x1c/0x2f0 [ 953.783537][ T2226] tun_chr_write_iter+0x113/0x200 [ 953.783554][ T2226] vfs_write+0x61d/0xb90 [ 953.783577][ T2226] ? __pfx_vfs_write+0x10/0x10 [ 953.783600][ T2226] ? __fget_files+0x2a/0x420 [ 953.783620][ T2226] ksys_write+0x150/0x270 [ 953.783638][ T2226] ? __pfx_ksys_write+0x10/0x10 [ 953.783659][ T2226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.783673][ T2226] do_syscall_64+0x15f/0xf80 [ 953.783690][ T2226] ? trace_irq_disable+0x3b/0x140 [ 953.783708][ T2226] ? clear_bhb_loop+0x40/0x90 [ 953.783724][ T2226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.783736][ T2226] RIP: 0033:0x7ff0c775d68e [ 953.783750][ T2226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 953.783761][ T2226] RSP: 002b:00007ff0c8662fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.783775][ T2226] RAX: ffffffffffffffda RBX: 00007ff0c86636c0 RCX: 00007ff0c775d68e [ 953.783784][ T2226] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 00000000000000c8 [ 953.783792][ T2226] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 953.783800][ T2226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 953.783808][ T2226] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 953.783828][ T2226] [ 953.873212][ T2232] FAULT_INJECTION: forcing a failure. [ 953.873212][ T2232] name failslab, interval 1, probability 0, space 0, times 0 [ 954.115197][ T2232] CPU: 1 UID: 0 PID: 2232 Comm: syz.4.9519 Not tainted syzkaller #0 PREEMPT(full) [ 954.115219][ T2232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.115228][ T2232] Call Trace: [ 954.115236][ T2232] [ 954.115244][ T2232] dump_stack_lvl+0xe8/0x150 [ 954.115276][ T2232] should_fail_ex+0x412/0x560 [ 954.115304][ T2232] should_failslab+0xa8/0x100 [ 954.115330][ T2232] __kvmalloc_node_noprof+0x178/0x8a0 [ 954.115353][ T2232] ? nla_strcmp+0x106/0x140 [ 954.115374][ T2232] ? nf_tables_newset+0x1354/0x2580 [ 954.115399][ T2232] ? nft_set_lookup+0x128/0x150 [ 954.115421][ T2232] ? nft_rhash_estimate+0x3f/0xa0 [ 954.115529][ T2232] nf_tables_newset+0x1354/0x2580 [ 954.115564][ T2232] ? __pfx_nf_tables_newset+0x10/0x10 [ 954.115606][ T2232] ? __nla_parse+0x40/0x60 [ 954.115633][ T2232] nfnetlink_rcv+0x123e/0x27b0 [ 954.115693][ T2232] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 954.115732][ T2232] ? ref_tracker_free+0x693/0x840 [ 954.115783][ T2232] ? __netlink_deliver_tap+0x807/0x850 [ 954.115810][ T2232] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.115826][ T2232] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.115848][ T2232] netlink_unicast+0x75c/0x8e0 [ 954.115883][ T2232] netlink_sendmsg+0x813/0xb40 [ 954.115909][ T2232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.115930][ T2232] ? aa_sock_msg_perm+0xf1/0x1b0 [ 954.115953][ T2232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 954.115978][ T2232] ____sys_sendmsg+0x972/0x9f0 [ 954.115994][ T2232] ? __might_fault+0xaf/0x130 [ 954.116020][ T2232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.116046][ T2232] ? import_iovec+0x73/0xa0 [ 954.116072][ T2232] ___sys_sendmsg+0x2a5/0x360 [ 954.116088][ T2232] ? __lock_acquire+0x6b5/0x2cf0 [ 954.116110][ T2232] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.116163][ T2232] ? __fget_files+0x2a/0x420 [ 954.116182][ T2232] ? __fget_files+0x3a0/0x420 [ 954.116211][ T2232] __x64_sys_sendmsg+0x1bd/0x2a0 [ 954.116230][ T2232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.116257][ T2232] ? __pfx_ksys_write+0x10/0x10 [ 954.116288][ T2232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.116306][ T2232] do_syscall_64+0x15f/0xf80 [ 954.116328][ T2232] ? trace_irq_disable+0x3b/0x140 [ 954.116350][ T2232] ? clear_bhb_loop+0x40/0x90 [ 954.116371][ T2232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.116387][ T2232] RIP: 0033:0x7f5eb979ce59 [ 954.116404][ T2232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.116418][ T2232] RSP: 002b:00007f5eba576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.116435][ T2232] RAX: ffffffffffffffda RBX: 00007f5eb9a15fa0 RCX: 00007f5eb979ce59 [ 954.116447][ T2232] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000003 [ 954.116458][ T2232] RBP: 00007f5eba576090 R08: 0000000000000000 R09: 0000000000000000 [ 954.116468][ T2232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.116478][ T2232] R13: 00007f5eb9a16038 R14: 00007f5eb9a15fa0 R15: 00007ffe6cae6ea8 [ 954.116514][ T2232] [ 954.501261][ T2243] __nla_validate_parse: 2 callbacks suppressed [ 954.501278][ T2243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9523'. [ 954.631411][ T2249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9526'. [ 954.637118][ T2245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9524'. [ 954.729052][ T2245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9524'. [ 954.764604][ T2255] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 954.893469][ T2264] pim6reg: entered allmulticast mode [ 955.227889][ T2278] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.235261][ T2287] netlink: 'syz.2.9543': attribute type 83 has an invalid length. [ 955.250987][ T2289] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9541'. [ 955.316986][ T2278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.525865][ T2291] FAULT_INJECTION: forcing a failure. [ 955.525865][ T2291] name failslab, interval 1, probability 0, space 0, times 0 [ 955.526370][ T136] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.548310][ T2291] CPU: 1 UID: 0 PID: 2291 Comm: syz.2.9544 Not tainted syzkaller #0 PREEMPT(full) [ 955.548333][ T2291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 955.548343][ T2291] Call Trace: [ 955.548350][ T2291] [ 955.548358][ T2291] dump_stack_lvl+0xe8/0x150 [ 955.548382][ T2291] should_fail_ex+0x412/0x560 [ 955.548409][ T2291] should_failslab+0xa8/0x100 [ 955.548435][ T2291] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 955.548458][ T2291] ? __alloc_skb+0x1d0/0x7d0 [ 955.548478][ T2291] ? __local_bh_enable_ip+0xd0/0x130 [ 955.548500][ T2291] __alloc_skb+0x1d0/0x7d0 [ 955.548521][ T2291] ? netlink_ack_tlv_len+0x6c/0x210 [ 955.548539][ T2291] netlink_ack+0x146/0xa50 [ 955.548553][ T2291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 955.548571][ T2291] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 955.548708][ T2291] ? __pfx_nl802154_post_doit+0x10/0x10 [ 955.548739][ T2291] netlink_rcv_skb+0x2b6/0x4b0 [ 955.548757][ T2291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 955.548778][ T2291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 955.548809][ T2291] ? down_read+0x270/0x2e0 [ 955.548824][ T2291] ? genl_rcv+0xd/0x40 [ 955.548844][ T2291] genl_rcv+0x28/0x40 [ 955.548861][ T2291] netlink_unicast+0x75c/0x8e0 [ 955.548894][ T2291] netlink_sendmsg+0x813/0xb40 [ 955.548919][ T2291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.548939][ T2291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 955.548962][ T2291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.548987][ T2291] ____sys_sendmsg+0x972/0x9f0 [ 955.549003][ T2291] ? __might_fault+0xaf/0x130 [ 955.549029][ T2291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.549054][ T2291] ? import_iovec+0x73/0xa0 [ 955.549080][ T2291] ___sys_sendmsg+0x2a5/0x360 [ 955.549094][ T2291] ? __lock_acquire+0x6b5/0x2cf0 [ 955.549116][ T2291] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.549168][ T2291] ? __fget_files+0x2a/0x420 [ 955.549186][ T2291] ? __fget_files+0x3a0/0x420 [ 955.549211][ T2291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 955.549229][ T2291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.549252][ T2291] ? __pfx_ksys_write+0x10/0x10 [ 955.549278][ T2291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.549294][ T2291] do_syscall_64+0x15f/0xf80 [ 955.549314][ T2291] ? trace_irq_disable+0x3b/0x140 [ 955.549335][ T2291] ? clear_bhb_loop+0x40/0x90 [ 955.549355][ T2291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.549370][ T2291] RIP: 0033:0x7f9b2eb9ce59 [ 955.549386][ T2291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.549399][ T2291] RSP: 002b:00007f9b2fa76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.549415][ T2291] RAX: ffffffffffffffda RBX: 00007f9b2ee15fa0 RCX: 00007f9b2eb9ce59 [ 955.549425][ T2291] RDX: 0000000004044084 RSI: 00002000000017c0 RDI: 0000000000000004 [ 955.549435][ T2291] RBP: 00007f9b2fa76090 R08: 0000000000000000 R09: 0000000000000000 [ 955.549443][ T2291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.549453][ T2291] R13: 00007f9b2ee16038 R14: 00007f9b2ee15fa0 R15: 00007ffd446939d8 [ 955.549481][ T2291] [ 955.598499][ T136] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.972532][ T136] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.982120][ T136] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.994519][ T136] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.003600][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9548'. [ 956.021649][ T136] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.030631][ T2300] bridge0: entered allmulticast mode [ 956.040823][ T136] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.050130][ T136] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.218698][ T2320] erspan1: entered allmulticast mode [ 956.229755][ T2326] FAULT_INJECTION: forcing a failure. [ 956.229755][ T2326] name failslab, interval 1, probability 0, space 0, times 0 [ 956.275467][ T2326] CPU: 0 UID: 0 PID: 2326 Comm: syz.0.9549 Not tainted syzkaller #0 PREEMPT(full) [ 956.275492][ T2326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 956.275502][ T2326] Call Trace: [ 956.275509][ T2326] [ 956.275517][ T2326] dump_stack_lvl+0xe8/0x150 [ 956.275542][ T2326] should_fail_ex+0x412/0x560 [ 956.275568][ T2326] should_failslab+0xa8/0x100 [ 956.275593][ T2326] __kmalloc_cache_noprof+0x88/0x660 [ 956.275614][ T2326] ? __kasan_kmalloc+0x93/0xb0 [ 956.275636][ T2326] ? ovs_nla_get_identifier+0x72/0xd0 [ 956.275783][ T2326] ovs_nla_get_identifier+0x72/0xd0 [ 956.275808][ T2326] ovs_flow_cmd_new+0x505/0xe80 [ 956.275838][ T2326] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 956.275909][ T2326] ? __nla_parse+0x40/0x60 [ 956.275934][ T2326] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 956.275956][ T2326] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 956.275985][ T2326] genl_family_rcv_msg_doit+0x22a/0x330 [ 956.276012][ T2326] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 956.276041][ T2326] ? bpf_lsm_capable+0x9/0x20 [ 956.276057][ T2326] ? security_capable+0x7e/0x2c0 [ 956.276084][ T2326] genl_rcv_msg+0x61c/0x7a0 [ 956.276109][ T2326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.276128][ T2326] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 956.276149][ T2326] ? __pfx_ref_tracker_free+0x10/0x10 [ 956.276180][ T2326] netlink_rcv_skb+0x232/0x4b0 [ 956.276198][ T2326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.276220][ T2326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 956.276251][ T2326] ? down_read+0x270/0x2e0 [ 956.276266][ T2326] ? genl_rcv+0xd/0x40 [ 956.276287][ T2326] genl_rcv+0x28/0x40 [ 956.276304][ T2326] netlink_unicast+0x75c/0x8e0 [ 956.276338][ T2326] netlink_sendmsg+0x813/0xb40 [ 956.276365][ T2326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.276384][ T2326] ? aa_sock_msg_perm+0xf1/0x1b0 [ 956.276403][ T2326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 956.276426][ T2326] ____sys_sendmsg+0x972/0x9f0 [ 956.276441][ T2326] ? __might_fault+0xaf/0x130 [ 956.276466][ T2326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.276491][ T2326] ? import_iovec+0x73/0xa0 [ 956.276516][ T2326] ___sys_sendmsg+0x2a5/0x360 [ 956.276535][ T2326] ? __lock_acquire+0x6b5/0x2cf0 [ 956.276558][ T2326] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.276608][ T2326] ? __fget_files+0x2a/0x420 [ 956.276626][ T2326] ? __fget_files+0x3a0/0x420 [ 956.276654][ T2326] __x64_sys_sendmsg+0x1bd/0x2a0 [ 956.276673][ T2326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 956.276707][ T2326] ? __pfx_ksys_write+0x10/0x10 [ 956.276739][ T2326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.276756][ T2326] do_syscall_64+0x15f/0xf80 [ 956.276777][ T2326] ? trace_irq_disable+0x3b/0x140 [ 956.276800][ T2326] ? clear_bhb_loop+0x40/0x90 [ 956.276820][ T2326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.276836][ T2326] RIP: 0033:0x7f3e9a79ce59 [ 956.276852][ T2326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.276865][ T2326] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.276883][ T2326] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 956.276894][ T2326] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 956.276905][ T2326] RBP: 00007f3e9b6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 956.276915][ T2326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 956.276925][ T2326] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 956.276954][ T2326] [ 956.894942][ T2341] ipip0: entered promiscuous mode [ 957.154756][ T2338] openvswitch: netlink: Missing valid actions attribute. [ 957.166984][ T2338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.247684][ T2354] netlink: 'syz.4.9559': attribute type 1 has an invalid length. [ 957.453282][ T2354] bond5: entered promiscuous mode [ 957.458540][ T2366] netlink: 276 bytes leftover after parsing attributes in process `syz.2.9561'. [ 957.491784][ T2354] 8021q: adding VLAN 0 to HW filter on device bond5 [ 957.897993][ T2382] netlink: 'syz.3.9566': attribute type 7 has an invalid length. [ 958.474474][ T2414] netlink: 276 bytes leftover after parsing attributes in process `syz.4.9574'. [ 959.182794][ T2454] netlink: 'syz.3.9581': attribute type 7 has an invalid length. [ 959.198652][ T2454] : entered promiscuous mode [ 959.825788][ T2479] netlink: 'syz.3.9586': attribute type 1 has an invalid length. [ 959.863671][ T2479] bond1: entered promiscuous mode [ 959.868824][ T2479] bond1: entered allmulticast mode [ 959.874759][ T2479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.885953][ T2479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9586'. [ 961.449418][ T2414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.821047][ T2497] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9592'. [ 961.838125][ T2501] syzkaller0: entered promiscuous mode [ 961.843631][ T2501] syzkaller0: entered allmulticast mode [ 961.871126][ T2503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9594'. [ 961.902535][ T2503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9594'. [ 961.920178][ T2503] tipc: Invalid UDP bearer configuration [ 961.920231][ T2503] tipc: Enabling of bearer rejected, failed to enable media [ 961.945147][ T2509] netlink: 'syz.2.9594': attribute type 1 has an invalid length. [ 962.058825][ T2509] bond2: entered promiscuous mode [ 962.064057][ T2509] bond2: entered allmulticast mode [ 962.069587][ T2509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.087473][ T2522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9601'. [ 962.096723][ T2522] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9601'. [ 962.118744][ T2522] tipc: Invalid UDP bearer configuration [ 962.118797][ T2522] tipc: Enabling of bearer rejected, failed to enable media [ 962.130696][ T2527] netlink: 'syz.0.9601': attribute type 1 has an invalid length. [ 962.134380][ T2503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9594'. [ 962.179563][ T2526] netlink: 'syz.1.9599': attribute type 1 has an invalid length. [ 962.183905][ T2527] bond7: entered promiscuous mode [ 962.192567][ T2527] bond7: entered allmulticast mode [ 962.198094][ T2527] 8021q: adding VLAN 0 to HW filter on device bond7 [ 962.225259][ T2522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9601'. [ 962.246720][ T2526] 8021q: adding VLAN 0 to HW filter on device bond21 [ 962.337488][ T2537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9603'. [ 962.919336][T20194] IPVS: starting estimator thread 0... [ 963.038138][ T2581] syzkaller0: entered promiscuous mode [ 963.060673][ T2581] syzkaller0: entered allmulticast mode [ 963.092645][ T2572] IPVS: using max 29 ests per chain, 69600 per kthread [ 963.231204][ T2591] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9620'. [ 963.380858][ T2599] tipc: Invalid UDP bearer configuration [ 963.380911][ T2599] tipc: Enabling of bearer rejected, failed to enable media [ 963.408472][ T2599] netlink: 'syz.1.9621': attribute type 1 has an invalid length. [ 963.441444][ T2599] bond22: entered promiscuous mode [ 963.446881][ T2599] bond22: entered allmulticast mode [ 963.453324][ T2599] 8021q: adding VLAN 0 to HW filter on device bond22 [ 963.549517][ T2607] FAULT_INJECTION: forcing a failure. [ 963.549517][ T2607] name failslab, interval 1, probability 0, space 0, times 0 [ 963.572926][ T2607] CPU: 0 UID: 0 PID: 2607 Comm: syz.3.9625 Not tainted syzkaller #0 PREEMPT(full) [ 963.572951][ T2607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 963.572961][ T2607] Call Trace: [ 963.572968][ T2607] [ 963.572976][ T2607] dump_stack_lvl+0xe8/0x150 [ 963.573001][ T2607] should_fail_ex+0x412/0x560 [ 963.573028][ T2607] should_failslab+0xa8/0x100 [ 963.573050][ T2607] ? skb_clone+0x212/0x3a0 [ 963.573068][ T2607] kmem_cache_alloc_noprof+0x87/0x650 [ 963.573090][ T2607] ? __netlink_lookup+0xc6/0x8b0 [ 963.573113][ T2607] skb_clone+0x212/0x3a0 [ 963.573137][ T2607] __netlink_deliver_tap+0x404/0x850 [ 963.573166][ T2607] ? netlink_deliver_tap+0x2e/0x1b0 [ 963.573184][ T2607] netlink_deliver_tap+0x19c/0x1b0 [ 963.573202][ T2607] netlink_unicast+0x730/0x8e0 [ 963.573236][ T2607] netlink_sendmsg+0x813/0xb40 [ 963.573263][ T2607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.573284][ T2607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 963.573306][ T2607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 963.573331][ T2607] ____sys_sendmsg+0x972/0x9f0 [ 963.573347][ T2607] ? __might_fault+0xaf/0x130 [ 963.573373][ T2607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 963.573398][ T2607] ? import_iovec+0x73/0xa0 [ 963.573424][ T2607] ___sys_sendmsg+0x2a5/0x360 [ 963.573439][ T2607] ? __lock_acquire+0x6b5/0x2cf0 [ 963.573461][ T2607] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.573510][ T2607] ? __fget_files+0x2a/0x420 [ 963.573527][ T2607] ? __fget_files+0x3a0/0x420 [ 963.573557][ T2607] __x64_sys_sendmsg+0x1bd/0x2a0 [ 963.573576][ T2607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 963.573602][ T2607] ? __pfx_ksys_write+0x10/0x10 [ 963.573632][ T2607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.573650][ T2607] do_syscall_64+0x15f/0xf80 [ 963.573672][ T2607] ? trace_irq_disable+0x3b/0x140 [ 963.573695][ T2607] ? clear_bhb_loop+0x40/0x90 [ 963.573715][ T2607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.573731][ T2607] RIP: 0033:0x7ff0c779ce59 [ 963.573747][ T2607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.573761][ T2607] RSP: 002b:00007ff0c8663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.573779][ T2607] RAX: ffffffffffffffda RBX: 00007ff0c7a15fa0 RCX: 00007ff0c779ce59 [ 963.573791][ T2607] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 963.573801][ T2607] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 963.573817][ T2607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.573827][ T2607] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 963.573855][ T2607] [ 964.227275][ T2629] FAULT_INJECTION: forcing a failure. [ 964.227275][ T2629] name failslab, interval 1, probability 0, space 0, times 0 [ 964.239914][ T2629] CPU: 1 UID: 0 PID: 2629 Comm: syz.3.9630 Not tainted syzkaller #0 PREEMPT(full) [ 964.239937][ T2629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 964.239946][ T2629] Call Trace: [ 964.239953][ T2629] [ 964.239960][ T2629] dump_stack_lvl+0xe8/0x150 [ 964.239986][ T2629] should_fail_ex+0x412/0x560 [ 964.240013][ T2629] should_failslab+0xa8/0x100 [ 964.240036][ T2629] ? skb_clone+0x212/0x3a0 [ 964.240053][ T2629] kmem_cache_alloc_noprof+0x87/0x650 [ 964.240075][ T2629] ? __netlink_lookup+0xc6/0x8b0 [ 964.240099][ T2629] skb_clone+0x212/0x3a0 [ 964.240120][ T2629] __netlink_deliver_tap+0x404/0x850 [ 964.240148][ T2629] ? netlink_deliver_tap+0x2e/0x1b0 [ 964.240167][ T2629] netlink_deliver_tap+0x19c/0x1b0 [ 964.240185][ T2629] netlink_unicast+0x730/0x8e0 [ 964.240220][ T2629] netlink_sendmsg+0x813/0xb40 [ 964.240246][ T2629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.240266][ T2629] ? aa_sock_msg_perm+0xf1/0x1b0 [ 964.240289][ T2629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 964.240314][ T2629] ____sys_sendmsg+0x972/0x9f0 [ 964.240330][ T2629] ? __might_fault+0xaf/0x130 [ 964.240358][ T2629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 964.240384][ T2629] ? import_iovec+0x73/0xa0 [ 964.240410][ T2629] ___sys_sendmsg+0x2a5/0x360 [ 964.240426][ T2629] ? __lock_acquire+0x6b5/0x2cf0 [ 964.240448][ T2629] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.240501][ T2629] ? __fget_files+0x2a/0x420 [ 964.240520][ T2629] ? __fget_files+0x3a0/0x420 [ 964.240549][ T2629] __x64_sys_sendmsg+0x1bd/0x2a0 [ 964.240569][ T2629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 964.240595][ T2629] ? __pfx_ksys_write+0x10/0x10 [ 964.240627][ T2629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.240645][ T2629] do_syscall_64+0x15f/0xf80 [ 964.240668][ T2629] ? trace_irq_disable+0x3b/0x140 [ 964.240691][ T2629] ? clear_bhb_loop+0x40/0x90 [ 964.240711][ T2629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.240727][ T2629] RIP: 0033:0x7ff0c779ce59 [ 964.240742][ T2629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.240756][ T2629] RSP: 002b:00007ff0c8663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.240779][ T2629] RAX: ffffffffffffffda RBX: 00007ff0c7a15fa0 RCX: 00007ff0c779ce59 [ 964.240791][ T2629] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 964.240802][ T2629] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 964.240813][ T2629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.240823][ T2629] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 964.240852][ T2629] [ 964.240933][ T2629] netlink: 'syz.3.9630': attribute type 2 has an invalid length. [ 964.630762][ T2637] syzkaller0: entered promiscuous mode [ 964.636633][ T2637] syzkaller0: entered allmulticast mode [ 964.668045][ T2639] netlink: 'syz.2.9634': attribute type 1 has an invalid length. [ 964.669473][ T2649] netlink: 'syz.3.9636': attribute type 58 has an invalid length. [ 964.732967][ T2639] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 964.744040][ T2639] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 964.842453][ T2655] netlink: 'syz.4.9638': attribute type 1 has an invalid length. [ 964.858447][ T2646] bond3: (slave gretap1): making interface the new active one [ 964.867490][ T2646] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 964.936713][ T2655] 8021q: adding VLAN 0 to HW filter on device bond6 [ 964.958555][ T2646] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 964.967090][ T2646] syzkaller1: Refused to change device type [ 965.207096][ T2679] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.341315][ T2679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.360333][ T2679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.834037][ T2684] __nla_validate_parse: 9 callbacks suppressed [ 965.834055][ T2684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9643'. [ 965.879686][ T1044] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.952759][ T1044] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.962318][ T1044] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.977225][ T1044] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.541250][ T2727] syzkaller0: entered promiscuous mode [ 966.571663][ T2727] syzkaller0: entered allmulticast mode [ 966.826104][ T2729] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.833390][ T2729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.910298][ T2752] xt_hashlimit: size too large, truncated to 1048576 [ 967.277020][ T2765] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.9662'. [ 968.090928][ T2798] syzkaller0: entered promiscuous mode [ 968.112331][ T2798] syzkaller0: entered allmulticast mode [ 968.464281][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.477249][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.486631][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.498340][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.506037][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 969.179010][ T2823] FAULT_INJECTION: forcing a failure. [ 969.179010][ T2823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.239064][ T2823] CPU: 0 UID: 0 PID: 2823 Comm: syz.3.9677 Not tainted syzkaller #0 PREEMPT(full) [ 969.239088][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 969.239099][ T2823] Call Trace: [ 969.239106][ T2823] [ 969.239114][ T2823] dump_stack_lvl+0xe8/0x150 [ 969.239140][ T2823] should_fail_ex+0x412/0x560 [ 969.239174][ T2823] _copy_to_user+0x31/0xb0 [ 969.239200][ T2823] simple_read_from_buffer+0xe1/0x170 [ 969.239225][ T2823] proc_fail_nth_read+0x1bb/0x230 [ 969.239249][ T2823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 969.239271][ T2823] ? rw_verify_area+0x2a6/0x4d0 [ 969.239292][ T2823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 969.239312][ T2823] vfs_read+0x20c/0xa70 [ 969.239338][ T2823] ? __pfx___mutex_lock+0x10/0x10 [ 969.239355][ T2823] ? __pfx_vfs_read+0x10/0x10 [ 969.239376][ T2823] ? __fget_files+0x2a/0x420 [ 969.239399][ T2823] ? __fget_files+0x3a0/0x420 [ 969.239416][ T2823] ? __fget_files+0x2a/0x420 [ 969.239443][ T2823] ksys_read+0x150/0x270 [ 969.239468][ T2823] ? __pfx_ksys_read+0x10/0x10 [ 969.239497][ T2823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.239515][ T2823] do_syscall_64+0x15f/0xf80 [ 969.239537][ T2823] ? trace_irq_disable+0x3b/0x140 [ 969.239560][ T2823] ? clear_bhb_loop+0x40/0x90 [ 969.239580][ T2823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.239596][ T2823] RIP: 0033:0x7ff0c775d68e [ 969.239614][ T2823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 969.239628][ T2823] RSP: 002b:00007ff0c8662fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 969.239646][ T2823] RAX: ffffffffffffffda RBX: 00007ff0c86636c0 RCX: 00007ff0c775d68e [ 969.239657][ T2823] RDX: 000000000000000f RSI: 00007ff0c86630a0 RDI: 0000000000000007 [ 969.239667][ T2823] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 969.239677][ T2823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.239687][ T2823] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 969.239716][ T2823] [ 969.946141][ T2846] syzkaller0: entered promiscuous mode [ 969.964120][ T2846] syzkaller0: entered allmulticast mode [ 970.140816][ T2857] syzkaller0: entered promiscuous mode [ 970.146323][ T2857] syzkaller0: entered allmulticast mode [ 970.237976][ T2862] FAULT_INJECTION: forcing a failure. [ 970.237976][ T2862] name failslab, interval 1, probability 0, space 0, times 0 [ 970.250883][ T2862] CPU: 0 UID: 0 PID: 2862 Comm: syz.0.9685 Not tainted syzkaller #0 PREEMPT(full) [ 970.250906][ T2862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.250915][ T2862] Call Trace: [ 970.250923][ T2862] [ 970.250931][ T2862] dump_stack_lvl+0xe8/0x150 [ 970.250956][ T2862] should_fail_ex+0x412/0x560 [ 970.250982][ T2862] should_failslab+0xa8/0x100 [ 970.251017][ T2862] __kmalloc_cache_noprof+0x88/0x660 [ 970.251038][ T2862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 970.251063][ T2862] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 970.251086][ T2862] __xdp_reg_mem_model+0x1e3/0x5d0 [ 970.251109][ T2862] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 970.251124][ T2862] ? page_pool_list+0x20f/0x250 [ 970.251148][ T2862] ? page_pool_create_percpu+0x87b/0xc80 [ 970.251171][ T2862] xdp_reg_mem_model+0x22/0x40 [ 970.251188][ T2862] bpf_test_run_xdp_live+0x295/0x1cf0 [ 970.251212][ T2862] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 970.251253][ T2862] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 970.251291][ T2862] ? 0xffffffffa02036d8 [ 970.251306][ T2862] ? 0xffffffffa0207050 [ 970.251344][ T2862] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 970.251372][ T2862] ? _copy_from_user+0x94/0xb0 [ 970.251394][ T2862] ? bpf_test_init+0x113/0x150 [ 970.251409][ T2862] ? xdp_convert_md_to_buff+0x5b/0x330 [ 970.251428][ T2862] bpf_prog_test_run_xdp+0x81c/0x1160 [ 970.251460][ T2862] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 970.251483][ T2862] ? __fget_files+0x2a/0x420 [ 970.251506][ T2862] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 970.251524][ T2862] bpf_prog_test_run+0x2c7/0x340 [ 970.251544][ T2862] __sys_bpf+0x643/0x950 [ 970.251569][ T2862] ? __pfx___sys_bpf+0x10/0x10 [ 970.251607][ T2862] ? ksys_write+0x242/0x270 [ 970.251631][ T2862] ? __pfx_ksys_write+0x10/0x10 [ 970.251657][ T2862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.251675][ T2862] __x64_sys_bpf+0x7c/0x90 [ 970.251697][ T2862] do_syscall_64+0x15f/0xf80 [ 970.251719][ T2862] ? trace_irq_disable+0x3b/0x140 [ 970.251741][ T2862] ? clear_bhb_loop+0x40/0x90 [ 970.251761][ T2862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.251777][ T2862] RIP: 0033:0x7f3e9a79ce59 [ 970.251793][ T2862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.251806][ T2862] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 970.251823][ T2862] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 970.251835][ T2862] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 970.251845][ T2862] RBP: 00007f3e9b6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 970.251854][ T2862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.251864][ T2862] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 970.251891][ T2862] [ 970.698455][ T5643] Bluetooth: hci1: command tx timeout [ 970.731736][ T2878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9686'. [ 971.023728][ T2802] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.031226][ T2802] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.038867][ T2802] bridge_slave_0: entered allmulticast mode [ 971.047746][ T2802] bridge_slave_0: entered promiscuous mode [ 971.058938][ T2802] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.067820][ T2802] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.075364][ T2802] bridge_slave_1: entered allmulticast mode [ 971.083554][ T2802] bridge_slave_1: entered promiscuous mode [ 971.123929][ T2802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.138428][ T2802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.197448][ T2802] team0: Port device team_slave_0 added [ 971.215153][ T2802] team0: Port device team_slave_1 added [ 971.293654][ T2802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.302700][ T2802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.329971][ T2902] FAULT_INJECTION: forcing a failure. [ 971.329971][ T2902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.350777][ T2902] CPU: 1 UID: 0 PID: 2902 Comm: syz.2.9692 Not tainted syzkaller #0 PREEMPT(full) [ 971.350800][ T2902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 971.350809][ T2902] Call Trace: [ 971.350817][ T2902] [ 971.350824][ T2902] dump_stack_lvl+0xe8/0x150 [ 971.350849][ T2902] should_fail_ex+0x412/0x560 [ 971.350875][ T2902] _copy_from_user+0x2d/0xb0 [ 971.350908][ T2902] bpf_prog_test_run_xdp+0xde3/0x1160 [ 971.350938][ T2902] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 971.350959][ T2902] ? __fget_files+0x2a/0x420 [ 971.350982][ T2902] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 971.350999][ T2902] bpf_prog_test_run+0x2c7/0x340 [ 971.351019][ T2902] __sys_bpf+0x643/0x950 [ 971.351042][ T2902] ? __pfx___sys_bpf+0x10/0x10 [ 971.351078][ T2902] ? ksys_write+0x242/0x270 [ 971.351102][ T2902] ? __pfx_ksys_write+0x10/0x10 [ 971.351126][ T2902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.351143][ T2902] __x64_sys_bpf+0x7c/0x90 [ 971.351163][ T2902] do_syscall_64+0x15f/0xf80 [ 971.351185][ T2902] ? trace_irq_disable+0x3b/0x140 [ 971.351205][ T2902] ? clear_bhb_loop+0x40/0x90 [ 971.351223][ T2902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.351238][ T2902] RIP: 0033:0x7f9b2eb9ce59 [ 971.351253][ T2902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.351267][ T2902] RSP: 002b:00007f9b2fa76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 971.351283][ T2902] RAX: ffffffffffffffda RBX: 00007f9b2ee15fa0 RCX: 00007f9b2eb9ce59 [ 971.351294][ T2902] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 971.351304][ T2902] RBP: 00007f9b2fa76090 R08: 0000000000000000 R09: 0000000000000000 [ 971.351314][ T2902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.351324][ T2902] R13: 00007f9b2ee16038 R14: 00007f9b2ee15fa0 R15: 00007ffd446939d8 [ 971.351351][ T2902] [ 971.367720][ T2802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.418878][ T2904] netlink: 'syz.3.9693': attribute type 21 has an invalid length. [ 971.437941][ T2802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.590774][ T2802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.651392][ T2802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.663598][ T2904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9693'. [ 971.722014][ T2802] hsr_slave_0: entered promiscuous mode [ 971.741017][ T2802] hsr_slave_1: entered promiscuous mode [ 971.748099][ T2802] debugfs: 'hsr0' already exists in 'hsr' [ 971.753845][ T2802] Cannot create hsr debugfs directory [ 971.791239][ T2917] netlink: 'syz.2.9695': attribute type 3 has an invalid length. [ 971.935191][ T2922] erspan1: entered allmulticast mode [ 972.025435][ T2923] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9697'. [ 972.071083][ T30] audit: type=1804 audit(1778969737.963:6): pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9699" name="/newroot/169/memory.events" dev="tmpfs" ino=868 res=1 errno=0 [ 972.105611][ T30] audit: type=1800 audit(1778969737.963:7): pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9699" name="memory.events" dev="tmpfs" ino=868 res=0 errno=0 [ 972.146388][ T2930] syzkaller0: entered promiscuous mode [ 972.151917][ T2930] syzkaller0: entered allmulticast mode [ 972.259947][ T2941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9703'. [ 972.487567][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9704'. [ 972.602435][ T2947] netlink: 'syz.0.9706': attribute type 21 has an invalid length. [ 972.622484][ T2947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9706'. [ 972.731046][ T5643] Bluetooth: hci1: command tx timeout [ 972.784496][ T2954] : entered promiscuous mode [ 972.804603][ T2952] IPVS: Scheduler module ip_vs_sip not found [ 972.829305][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9708'. [ 972.899047][ T2958] syz_tun: entered allmulticast mode [ 972.910707][ T2957] syz_tun: left allmulticast mode [ 972.936822][ T2960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9709'. [ 972.967112][ T2960] FAULT_INJECTION: forcing a failure. [ 972.967112][ T2960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.980176][ T2960] CPU: 1 UID: 0 PID: 2960 Comm: syz.3.9709 Not tainted syzkaller #0 PREEMPT(full) [ 972.980200][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.980211][ T2960] Call Trace: [ 972.980219][ T2960] [ 972.980227][ T2960] dump_stack_lvl+0xe8/0x150 [ 972.980251][ T2960] should_fail_ex+0x412/0x560 [ 972.980277][ T2960] _copy_to_user+0x31/0xb0 [ 972.980301][ T2960] simple_read_from_buffer+0xe1/0x170 [ 972.980327][ T2960] proc_fail_nth_read+0x1bb/0x230 [ 972.980351][ T2960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.980375][ T2960] ? rw_verify_area+0x2a6/0x4d0 [ 972.980396][ T2960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.980418][ T2960] vfs_read+0x20c/0xa70 [ 972.980444][ T2960] ? __pfx___mutex_lock+0x10/0x10 [ 972.980461][ T2960] ? __pfx_vfs_read+0x10/0x10 [ 972.980484][ T2960] ? __fget_files+0x2a/0x420 [ 972.980507][ T2960] ? __fget_files+0x3a0/0x420 [ 972.980525][ T2960] ? __fget_files+0x2a/0x420 [ 972.980552][ T2960] ksys_read+0x150/0x270 [ 972.980577][ T2960] ? __pfx_ksys_read+0x10/0x10 [ 972.980606][ T2960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.980625][ T2960] do_syscall_64+0x15f/0xf80 [ 972.980646][ T2960] ? trace_irq_disable+0x3b/0x140 [ 972.980669][ T2960] ? clear_bhb_loop+0x40/0x90 [ 972.980688][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.980705][ T2960] RIP: 0033:0x7ff0c775d68e [ 972.980721][ T2960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.980734][ T2960] RSP: 002b:00007ff0c8662fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.980751][ T2960] RAX: ffffffffffffffda RBX: 00007ff0c86636c0 RCX: 00007ff0c775d68e [ 972.980762][ T2960] RDX: 000000000000000f RSI: 00007ff0c86630a0 RDI: 0000000000000004 [ 972.980772][ T2960] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 972.980781][ T2960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.980798][ T2960] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 972.980827][ T2960] [ 973.276543][ T2962] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9711'. [ 973.506240][ T2973] FAULT_INJECTION: forcing a failure. [ 973.506240][ T2973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.558576][ T2973] CPU: 1 UID: 0 PID: 2973 Comm: syz.3.9714 Not tainted syzkaller #0 PREEMPT(full) [ 973.558602][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 973.558613][ T2973] Call Trace: [ 973.558620][ T2973] [ 973.558627][ T2973] dump_stack_lvl+0xe8/0x150 [ 973.558654][ T2973] should_fail_ex+0x412/0x560 [ 973.558680][ T2973] _copy_from_user+0x2d/0xb0 [ 973.558704][ T2973] __sys_connect+0x156/0x450 [ 973.558729][ T2973] ? __pfx___sys_connect+0x10/0x10 [ 973.558763][ T2973] ? __pfx_ksys_write+0x10/0x10 [ 973.558789][ T2973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.558806][ T2973] __x64_sys_connect+0x7a/0x90 [ 973.558827][ T2973] do_syscall_64+0x15f/0xf80 [ 973.558848][ T2973] ? trace_irq_disable+0x3b/0x140 [ 973.558871][ T2973] ? clear_bhb_loop+0x40/0x90 [ 973.558889][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.558905][ T2973] RIP: 0033:0x7ff0c779ce59 [ 973.558921][ T2973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.558934][ T2973] RSP: 002b:00007ff0c8663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 973.558950][ T2973] RAX: ffffffffffffffda RBX: 00007ff0c7a15fa0 RCX: 00007ff0c779ce59 [ 973.558962][ T2973] RDX: 000000000000000e RSI: 0000200000000680 RDI: 0000000000000004 [ 973.558972][ T2973] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 973.558982][ T2973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.558991][ T2973] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 973.559017][ T2973] [ 973.580736][ T2977] netlink: 'syz.0.9716': attribute type 21 has an invalid length. [ 973.766163][ T5988] bridge_slave_1: left allmulticast mode [ 973.771826][ T5988] bridge_slave_1: left promiscuous mode [ 973.783087][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.214905][ T5988] bond3 (unregistering): (slave gretap1): Releasing active interface [ 974.359548][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9723'. [ 974.482091][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 974.671510][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.689844][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.704737][ T5988] bond0 (unregistering): Released all slaves [ 974.719601][ T5988] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 974.729960][ T5988] bond1 (unregistering): Released all slaves [ 974.752956][ T5988] bond2 (unregistering): Released all slaves [ 974.765560][ T5636] Bluetooth: hci1: command tx timeout [ 974.790135][ T5988] bond3 (unregistering): Released all slaves [ 974.817965][ T5988] bond4 (unregistering): Released all slaves [ 974.840030][ T5988] bond5 (unregistering): Released all slaves [ 974.862845][ T5988] bond6 (unregistering): Released all slaves [ 974.885727][ T5988] bond7 (unregistering): Released all slaves [ 974.911401][ T5988] bond8 (unregistering): Released all slaves [ 974.945323][ T5988] bond9 (unregistering): Released all slaves [ 974.966360][ T5988] bond10 (unregistering): Released all slaves [ 974.994439][ T5988] bond11 (unregistering): Released all slaves [ 975.014021][ T5988] bond12 (unregistering): Released all slaves [ 975.038387][ T5988] bond13 (unregistering): Released all slaves [ 975.066477][ T5988] bond14 (unregistering): Released all slaves [ 975.089192][ T5988] bond15 (unregistering): Released all slaves [ 975.108224][ T5988] bond16 (unregistering): Released all slaves [ 975.140770][ T5988] bond17 (unregistering): Released all slaves [ 975.164278][ T5988] bond18 (unregistering): Released all slaves [ 975.183310][ T5988] bond19 (unregistering): Released all slaves [ 975.203099][ T5988] bond20 (unregistering): Released all slaves [ 975.238629][ T5988] bond21 (unregistering): Released all slaves [ 975.260170][ T5988] bond22 (unregistering): Released all slaves [ 975.280895][ T2977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9716'. [ 975.463593][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.471227][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.577789][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.599554][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.827129][ T5988] hmó3)ó: left promiscuous mode [ 975.845585][ T1044] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.854595][ T1044] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.867303][ T1044] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.876213][ T1044] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.904313][ T3026] syzkaller0: entered promiscuous mode [ 975.922269][ T3026] syzkaller0: entered allmulticast mode [ 975.937230][ T2802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 975.947826][ T2802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 975.962648][ T2802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 975.975429][ T2802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 975.982767][ T5988] : left promiscuous mode [ 976.027423][ T2802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 976.042783][ T2802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.062219][ T2802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 976.073977][ T2802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.229675][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.236925][ C1] bridge0: topology change detected, propagating [ 976.243581][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.250820][ C1] bridge0: topology change detected, propagating [ 976.268223][ T2802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.292933][ T2802] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.305249][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.312447][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.328611][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.335808][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.363840][ T3055] netlink: 'syz.2.9733': attribute type 21 has an invalid length. [ 976.482341][ T5988] tipc: Left network mode [ 976.590962][ T5988] IPVS: stopping backup sync thread 30241 ... [ 976.825376][ T3072] syzkaller0: entered promiscuous mode [ 976.840950][ T3072] syzkaller0: entered allmulticast mode [ 976.864512][ T5636] Bluetooth: hci1: command tx timeout [ 977.141931][ T3090] xt_hashlimit: size too large, truncated to 1048576 [ 977.170085][ T2802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.229311][ T3093] netlink: 'syz.0.9742': attribute type 3 has an invalid length. [ 977.256228][ T2802] veth0_vlan: entered promiscuous mode [ 977.268826][ T2802] veth1_vlan: entered promiscuous mode [ 977.318343][ T2802] veth0_macvtap: entered promiscuous mode [ 977.336383][ T2802] veth1_macvtap: entered promiscuous mode [ 977.357599][ T3096] netlink: 'syz.3.9743': attribute type 21 has an invalid length. [ 977.362632][ T2802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.375084][ T3096] __nla_validate_parse: 2 callbacks suppressed [ 977.375099][ T3096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9743'. [ 977.395739][ T2802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.445213][T24654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.455656][T24654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.466696][T24654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.478005][T24654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.569918][ T3104] FAULT_INJECTION: forcing a failure. [ 977.569918][ T3104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.583334][ T3104] CPU: 0 UID: 0 PID: 3104 Comm: syz.3.9745 Not tainted syzkaller #0 PREEMPT(full) [ 977.583356][ T3104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 977.583366][ T3104] Call Trace: [ 977.583375][ T3104] [ 977.583383][ T3104] dump_stack_lvl+0xe8/0x150 [ 977.583404][ T3104] should_fail_ex+0x412/0x560 [ 977.583425][ T3104] _copy_from_iter+0x1d3/0x1670 [ 977.583445][ T3104] ? rcu_is_watching+0x15/0xb0 [ 977.583467][ T3104] ? __pfx__copy_from_iter+0x10/0x10 [ 977.583491][ T3104] ? netlink_sendmsg+0x650/0xb40 [ 977.583504][ T3104] ? skb_put+0x11b/0x210 [ 977.583526][ T3104] netlink_sendmsg+0x6c0/0xb40 [ 977.583545][ T3104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.583560][ T3104] ? aa_sock_msg_perm+0xf1/0x1b0 [ 977.583578][ T3104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 977.583596][ T3104] ____sys_sendmsg+0x972/0x9f0 [ 977.583609][ T3104] ? __might_fault+0xaf/0x130 [ 977.583630][ T3104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.583649][ T3104] ? import_iovec+0x73/0xa0 [ 977.583668][ T3104] ___sys_sendmsg+0x2a5/0x360 [ 977.583679][ T3104] ? __lock_acquire+0x6b5/0x2cf0 [ 977.583697][ T3104] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.583735][ T3104] ? __fget_files+0x2a/0x420 [ 977.583749][ T3104] ? __fget_files+0x3a0/0x420 [ 977.583770][ T3104] __x64_sys_sendmsg+0x1bd/0x2a0 [ 977.583785][ T3104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 977.583804][ T3104] ? __pfx_ksys_write+0x10/0x10 [ 977.583827][ T3104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.583841][ T3104] do_syscall_64+0x15f/0xf80 [ 977.583859][ T3104] ? trace_irq_disable+0x3b/0x140 [ 977.583877][ T3104] ? clear_bhb_loop+0x40/0x90 [ 977.583893][ T3104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.583906][ T3104] RIP: 0033:0x7ff0c779ce59 [ 977.583919][ T3104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.583931][ T3104] RSP: 002b:00007ff0c8663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.583945][ T3104] RAX: ffffffffffffffda RBX: 00007ff0c7a15fa0 RCX: 00007ff0c779ce59 [ 977.583955][ T3104] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000a [ 977.583963][ T3104] RBP: 00007ff0c8663090 R08: 0000000000000000 R09: 0000000000000000 [ 977.583971][ T3104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.583978][ T3104] R13: 00007ff0c7a16038 R14: 00007ff0c7a15fa0 R15: 00007fffd05bd718 [ 977.584000][ T3104] [ 977.978471][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.986318][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.054165][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.078349][ T3114] FAULT_INJECTION: forcing a failure. [ 978.078349][ T3114] name failslab, interval 1, probability 0, space 0, times 0 [ 978.094867][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.105593][ T3114] CPU: 0 UID: 0 PID: 3114 Comm: syz.4.9749 Not tainted syzkaller #0 PREEMPT(full) [ 978.105615][ T3114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 978.105625][ T3114] Call Trace: [ 978.105631][ T3114] [ 978.105639][ T3114] dump_stack_lvl+0xe8/0x150 [ 978.105664][ T3114] should_fail_ex+0x412/0x560 [ 978.105691][ T3114] should_failslab+0xa8/0x100 [ 978.105714][ T3114] ? security_file_alloc+0x34/0x310 [ 978.105731][ T3114] kmem_cache_alloc_noprof+0x87/0x650 [ 978.105751][ T3114] ? rcu_is_watching+0x15/0xb0 [ 978.105772][ T3114] ? trace_kmem_cache_alloc+0x29/0xe0 [ 978.105795][ T3114] security_file_alloc+0x34/0x310 [ 978.105814][ T3114] init_file+0x90/0x2b0 [ 978.105835][ T3114] alloc_empty_file+0x74/0x1d0 [ 978.105854][ T3114] alloc_file_pseudo+0x155/0x240 [ 978.105872][ T3114] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 978.105894][ T3114] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 978.105911][ T3114] ? evm_inode_alloc_security+0x40/0xb0 [ 978.106005][ T3114] ? security_inode_alloc+0xd5/0x310 [ 978.106037][ T3114] sock_alloc_file+0xb8/0x2e0 [ 978.106060][ T3114] do_accept+0x3a0/0x760 [ 978.106086][ T3114] ? __pfx_do_accept+0x10/0x10 [ 978.106135][ T3114] __sys_accept4+0x139/0x230 [ 978.106158][ T3114] ? __pfx___sys_accept4+0x10/0x10 [ 978.106180][ T3114] ? __pfx_ksys_write+0x10/0x10 [ 978.106207][ T3114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.106224][ T3114] __x64_sys_accept+0x7d/0x90 [ 978.106247][ T3114] do_syscall_64+0x15f/0xf80 [ 978.106270][ T3114] ? trace_irq_disable+0x3b/0x140 [ 978.106293][ T3114] ? clear_bhb_loop+0x40/0x90 [ 978.106313][ T3114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.106329][ T3114] RIP: 0033:0x7f5eb979ce59 [ 978.106345][ T3114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.106360][ T3114] RSP: 002b:00007f5eba576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 978.106376][ T3114] RAX: ffffffffffffffda RBX: 00007f5eb9a15fa0 RCX: 00007f5eb979ce59 [ 978.106388][ T3114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 978.106397][ T3114] RBP: 00007f5eba576090 R08: 0000000000000000 R09: 0000000000000000 [ 978.106407][ T3114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.106417][ T3114] R13: 00007f5eb9a16038 R14: 00007f5eb9a15fa0 R15: 00007ffe6cae6ea8 [ 978.106445][ T3114] [ 978.457520][ T3119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9751'. [ 978.794096][ T3130] netlink: 'syz.4.9754': attribute type 21 has an invalid length. [ 979.306063][ T3125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9751'. [ 979.315163][ T3130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9754'. [ 979.414537][ T3138] FAULT_INJECTION: forcing a failure. [ 979.414537][ T3138] name failslab, interval 1, probability 0, space 0, times 0 [ 979.473253][ T3138] CPU: 1 UID: 0 PID: 3138 Comm: syz.0.9756 Not tainted syzkaller #0 PREEMPT(full) [ 979.473277][ T3138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 979.473287][ T3138] Call Trace: [ 979.473295][ T3138] [ 979.473302][ T3138] dump_stack_lvl+0xe8/0x150 [ 979.473327][ T3138] should_fail_ex+0x412/0x560 [ 979.473354][ T3138] should_failslab+0xa8/0x100 [ 979.473379][ T3138] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 979.473403][ T3138] ? __alloc_skb+0x1d0/0x7d0 [ 979.473424][ T3138] ? __local_bh_enable_ip+0xd0/0x130 [ 979.473447][ T3138] __alloc_skb+0x1d0/0x7d0 [ 979.473473][ T3138] xfrm_alloc_compat+0x1a6/0x16f0 [ 979.473496][ T3138] ? xfrm_get_translator+0x1b/0x240 [ 979.473521][ T3138] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 979.473539][ T3138] xfrm_nlmsg_multicast+0xda/0x1f0 [ 979.473564][ T3138] xfrm_send_policy_notify+0xb54/0x1c10 [ 979.473596][ T3138] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 979.473617][ T3138] ? km_policy_notify+0x28/0x200 [ 979.473640][ T3138] ? km_policy_notify+0x28/0x200 [ 979.473662][ T3138] ? __local_bh_enable_ip+0xd0/0x130 [ 979.473679][ T3138] ? lockdep_hardirqs_on+0x7a/0x110 [ 979.473701][ T3138] ? __local_bh_enable_ip+0xd0/0x130 [ 979.473717][ T3138] ? km_policy_notify+0x28/0x200 [ 979.473739][ T3138] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 979.473761][ T3138] km_policy_notify+0x121/0x200 [ 979.473781][ T3138] ? km_policy_notify+0x28/0x200 [ 979.473805][ T3138] xfrm_add_policy+0x4ef/0x820 [ 979.473833][ T3138] ? __pfx_xfrm_add_policy+0x10/0x10 [ 979.473854][ T3138] ? apparmor_capable+0x126/0x170 [ 979.473876][ T3138] ? __nla_parse+0x40/0x60 [ 979.473902][ T3138] xfrm_user_rcv_msg+0x7ae/0xc40 [ 979.473931][ T3138] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 979.473997][ T3138] ? __pfx___mutex_trylock_common+0x10/0x10 [ 979.474022][ T3138] ? rcu_is_watching+0x15/0xb0 [ 979.474043][ T3138] ? trace_contention_end+0x3d/0x140 [ 979.474065][ T3138] ? __mutex_lock+0x319/0x1550 [ 979.474086][ T3138] netlink_rcv_skb+0x232/0x4b0 [ 979.474106][ T3138] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 979.474130][ T3138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 979.474164][ T3138] ? netlink_deliver_tap+0x2e/0x1b0 [ 979.474181][ T3138] ? netlink_deliver_tap+0x2e/0x1b0 [ 979.474200][ T3138] xfrm_netlink_rcv+0x79/0x90 [ 979.474223][ T3138] netlink_unicast+0x75c/0x8e0 [ 979.474259][ T3138] netlink_sendmsg+0x813/0xb40 [ 979.474286][ T3138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.474307][ T3138] ? aa_sock_msg_perm+0xf1/0x1b0 [ 979.474329][ T3138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 979.474355][ T3138] ____sys_sendmsg+0x972/0x9f0 [ 979.474372][ T3138] ? __might_fault+0xaf/0x130 [ 979.474399][ T3138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 979.474426][ T3138] ? import_iovec+0x73/0xa0 [ 979.474452][ T3138] ___sys_sendmsg+0x2a5/0x360 [ 979.474468][ T3138] ? __lock_acquire+0x6b5/0x2cf0 [ 979.474491][ T3138] ? __pfx____sys_sendmsg+0x10/0x10 [ 979.474542][ T3138] ? __fget_files+0x2a/0x420 [ 979.474561][ T3138] ? __fget_files+0x3a0/0x420 [ 979.474590][ T3138] __x64_sys_sendmsg+0x1bd/0x2a0 [ 979.474610][ T3138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 979.474637][ T3138] ? __pfx_ksys_write+0x10/0x10 [ 979.474668][ T3138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.474687][ T3138] do_syscall_64+0x15f/0xf80 [ 979.474708][ T3138] ? trace_irq_disable+0x3b/0x140 [ 979.474731][ T3138] ? clear_bhb_loop+0x40/0x90 [ 979.474752][ T3138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.474768][ T3138] RIP: 0033:0x7f3e9a79ce59 [ 979.474785][ T3138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.474799][ T3138] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.474817][ T3138] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 979.474829][ T3138] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 979.474839][ T3138] RBP: 00007f3e9b6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 979.474849][ T3138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 979.474860][ T3138] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 979.474890][ T3138] [ 980.076756][ T3148] ip6_vti0: mtu less than device minimum [ 980.085115][ T3142] xt_addrtype: ipv6 does not support BROADCAST matching [ 980.092441][ T3142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9758'. [ 980.154874][ T3142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9758'. [ 980.164634][ T3142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9758'. [ 980.580766][ T3167] syzkaller0: entered promiscuous mode [ 980.586284][ T3167] syzkaller0: entered allmulticast mode [ 980.814481][T19763] hid-generic 0005:10CF:7FFF.0008: item fetching failed at offset 0/1 [ 980.861093][T19763] hid-generic 0005:10CF:7FFF.0008: probe with driver hid-generic failed with error -22 [ 980.981830][ T3182] syzkaller0: entered promiscuous mode [ 980.991521][ T3182] syzkaller0: entered allmulticast mode [ 981.078206][ T3191] tipc: Enabled bearer , priority 0 [ 981.097792][ T3191] syzkaller0: entered promiscuous mode [ 981.103689][ T3191] syzkaller0: entered allmulticast mode [ 981.212145][ T3191] syzkaller0: mtu greater than device maximum [ 981.238923][ T3190] tipc: Resetting bearer [ 981.294504][ T3190] tipc: Disabling bearer [ 981.325061][ T3201] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9776'. [ 981.488756][ T5988] hsr_slave_0: left promiscuous mode [ 981.494913][ T5988] hsr_slave_1: left promiscuous mode [ 981.501394][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.512539][ T5988] pim6reg (unregistering): left allmulticast mode [ 981.707537][ T3215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9778'. [ 982.417726][ T3248] Cannot find add_set index 1 as target [ 982.599014][ T3254] IPv6: Can't replace route, no match found [ 982.630311][ T3254] IPv6: Can't replace route, no match found [ 982.752762][ T3262] tipc: Failed to obtain node identity [ 982.758291][ T3262] tipc: Enabling of bearer rejected, failed to enable media [ 982.833431][ T3262] FAULT_INJECTION: forcing a failure. [ 982.833431][ T3262] name failslab, interval 1, probability 0, space 0, times 0 [ 982.863280][ T3262] CPU: 0 UID: 0 PID: 3262 Comm: syz.1.9787 Not tainted syzkaller #0 PREEMPT(full) [ 982.863304][ T3262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 982.863315][ T3262] Call Trace: [ 982.863322][ T3262] [ 982.863330][ T3262] dump_stack_lvl+0xe8/0x150 [ 982.863357][ T3262] should_fail_ex+0x412/0x560 [ 982.863384][ T3262] should_failslab+0xa8/0x100 [ 982.863407][ T3262] ? skb_clone+0x212/0x3a0 [ 982.863424][ T3262] kmem_cache_alloc_noprof+0x87/0x650 [ 982.863454][ T3262] skb_clone+0x212/0x3a0 [ 982.863475][ T3262] __netlink_deliver_tap+0x404/0x850 [ 982.863505][ T3262] ? netlink_deliver_tap+0x2e/0x1b0 [ 982.863523][ T3262] netlink_deliver_tap+0x19c/0x1b0 [ 982.863542][ T3262] netlink_sendskb+0x68/0x140 [ 982.863568][ T3262] netlink_rcv_skb+0x2b6/0x4b0 [ 982.863586][ T3262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 982.863615][ T3262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 982.863648][ T3262] ? down_read+0x270/0x2e0 [ 982.863664][ T3262] ? genl_rcv+0xd/0x40 [ 982.863684][ T3262] genl_rcv+0x28/0x40 [ 982.863702][ T3262] netlink_unicast+0x75c/0x8e0 [ 982.863734][ T3262] netlink_sendmsg+0x813/0xb40 [ 982.863760][ T3262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 982.863781][ T3262] ? aa_sock_msg_perm+0xf1/0x1b0 [ 982.863804][ T3262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 982.863829][ T3262] ____sys_sendmsg+0x972/0x9f0 [ 982.863847][ T3262] ? __might_fault+0xaf/0x130 [ 982.863873][ T3262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 982.863899][ T3262] ? import_iovec+0x73/0xa0 [ 982.863925][ T3262] ___sys_sendmsg+0x2a5/0x360 [ 982.863941][ T3262] ? __lock_acquire+0x6b5/0x2cf0 [ 982.863963][ T3262] ? __pfx____sys_sendmsg+0x10/0x10 [ 982.864017][ T3262] ? __fget_files+0x2a/0x420 [ 982.864035][ T3262] ? __fget_files+0x3a0/0x420 [ 982.864065][ T3262] __x64_sys_sendmsg+0x1bd/0x2a0 [ 982.864084][ T3262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 982.864110][ T3262] ? __pfx_ksys_write+0x10/0x10 [ 982.864141][ T3262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.864159][ T3262] do_syscall_64+0x15f/0xf80 [ 982.864180][ T3262] ? trace_irq_disable+0x3b/0x140 [ 982.864203][ T3262] ? clear_bhb_loop+0x40/0x90 [ 982.864223][ T3262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.864239][ T3262] RIP: 0033:0x7f6b92f9ce59 [ 982.864255][ T3262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.864269][ T3262] RSP: 002b:00007f6b93dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.864286][ T3262] RAX: ffffffffffffffda RBX: 00007f6b93215fa0 RCX: 00007f6b92f9ce59 [ 982.864298][ T3262] RDX: 0000000000040810 RSI: 0000200000000100 RDI: 0000000000000004 [ 982.864307][ T3262] RBP: 00007f6b93dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 982.864317][ T3262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 982.864327][ T3262] R13: 00007f6b93216038 R14: 00007f6b93215fa0 R15: 00007ffea6f81228 [ 982.864356][ T3262] [ 982.898152][ T3266] netlink: 'syz.4.9789': attribute type 21 has an invalid length. [ 983.204943][ T3266] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9789'. [ 983.507160][ T3280] batadv_slave_1: entered promiscuous mode [ 983.557443][ T3287] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9791'. [ 983.573735][ T3280] macsec1: entered promiscuous mode [ 983.579420][ T3287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9791'. [ 983.615647][ T3280] macsec1: entered allmulticast mode [ 983.620977][ T3280] batadv_slave_1: entered allmulticast mode [ 983.636446][ T3280] batadv_slave_1: left allmulticast mode [ 983.643820][ T3280] batadv_slave_1: left promiscuous mode [ 984.391597][ T3322] syzkaller0: entered promiscuous mode [ 984.397516][ T3322] syzkaller0: entered allmulticast mode [ 984.945723][ T5988] IPVS: stop unused estimator thread 0... [ 984.991177][ T3342] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 985.133319][ T3349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9806'. [ 985.148688][ T3349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9806'. [ 985.187258][ T3349] tipc: Failed to obtain node identity [ 985.211947][ T3349] tipc: Enabling of bearer rejected, failed to enable media [ 985.226817][ T30] audit: type=1804 audit(1778969751.113:8): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9808" name="/newroot/140/memory.events" dev="tmpfs" ino=732 res=1 errno=0 [ 985.251752][ T30] audit: type=1800 audit(1778969751.133:9): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9808" name="memory.events" dev="tmpfs" ino=732 res=0 errno=0 [ 985.377894][ T3360] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 985.405780][ T3360] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 985.444958][ T3360] veth0_virt_wifi: entered allmulticast mode [ 985.475181][ T3365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9811'. [ 985.488022][ T3360] veth0_virt_wifi: entered promiscuous mode [ 985.511845][ T3365] netlink: 'syz.2.9811': attribute type 8 has an invalid length. [ 985.528961][ T3360] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 985.536220][ T3360] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 985.554958][ T3368] netlink: 'syz.3.9812': attribute type 21 has an invalid length. [ 985.593212][ T3365] geneve2: entered promiscuous mode [ 985.612283][ T3365] geneve2: entered allmulticast mode [ 985.620945][ T3368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9812'. [ 985.692848][T24654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.701623][T24654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.710419][T24654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.719116][T24654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.992623][ T3389] syzkaller0: entered promiscuous mode [ 986.026065][ T3389] syzkaller0: entered allmulticast mode [ 986.320396][ T3399] xt_hashlimit: size too large, truncated to 1048576 [ 986.615655][ T3410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9823'. [ 986.907268][ T3420] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9825'. [ 987.400165][ T30] audit: type=1800 audit(1778969753.273:10): pid=3430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9829" name=CB dev="tmpfs" ino=488 res=0 errno=0 [ 988.070309][ T3442] xt_hashlimit: size too large, truncated to 1048576 [ 988.518194][ T3456] netlink: 'syz.4.9840': attribute type 1 has an invalid length. [ 988.629191][ T3456] 8021q: adding VLAN 0 to HW filter on device bond7 [ 989.013163][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9842'. [ 989.221121][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9849'. [ 989.247301][ T3479] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 989.270265][ T3479] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 989.385316][ T3492] netlink: 'syz.1.9854': attribute type 1 has an invalid length. [ 989.411057][ T3489] syzkaller0: entered promiscuous mode [ 989.416566][ T3489] syzkaller0: entered allmulticast mode [ 989.625771][ T3497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9855'. [ 989.769798][ T3498] netlink: 'syz.3.9855': attribute type 11 has an invalid length. [ 990.108543][ T3507] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.9858'. [ 990.119505][ T3507] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 990.356796][ T3510] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9859'. [ 990.365716][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9859'. [ 990.374595][ T3510] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9859'. [ 990.395592][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9859'. [ 990.404487][ T3510] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9859'. [ 992.353436][ T3519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.406879][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9865'. [ 992.421908][ T3534] netlink: 'syz.0.9866': attribute type 1 has an invalid length. [ 992.434963][ T3529] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 992.442350][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.450002][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.589966][ T3534] bond8: entered promiscuous mode [ 992.652959][ T3534] 8021q: adding VLAN 0 to HW filter on device bond8 [ 992.664116][ T3539] bond8: entered allmulticast mode [ 992.766094][ T3519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.863628][ T3539] bond8: (slave bridge1): making interface the new active one [ 992.881968][ T3539] bridge1: entered promiscuous mode [ 992.909055][ T3539] bridge1: entered allmulticast mode [ 992.933420][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.980437][ T3539] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 993.050335][ T3519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.254109][ T3519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.641917][ T5908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.752712][T24658] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.805340][ T3561] FAULT_INJECTION: forcing a failure. [ 993.805340][ T3561] name failslab, interval 1, probability 0, space 0, times 0 [ 993.833047][ T3561] CPU: 0 UID: 0 PID: 3561 Comm: syz.1.9873 Not tainted syzkaller #0 PREEMPT(full) [ 993.833069][ T3561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 993.833079][ T3561] Call Trace: [ 993.833087][ T3561] [ 993.833095][ T3561] dump_stack_lvl+0xe8/0x150 [ 993.833120][ T3561] should_fail_ex+0x412/0x560 [ 993.833147][ T3561] should_failslab+0xa8/0x100 [ 993.833170][ T3561] ? skb_clone+0x212/0x3a0 [ 993.833186][ T3561] kmem_cache_alloc_noprof+0x87/0x650 [ 993.833207][ T3561] ? __netlink_lookup+0xc6/0x8b0 [ 993.833230][ T3561] skb_clone+0x212/0x3a0 [ 993.833251][ T3561] __netlink_deliver_tap+0x404/0x850 [ 993.833278][ T3561] ? netlink_deliver_tap+0x2e/0x1b0 [ 993.833297][ T3561] netlink_deliver_tap+0x19c/0x1b0 [ 993.833324][ T3561] netlink_unicast+0x730/0x8e0 [ 993.833358][ T3561] netlink_sendmsg+0x813/0xb40 [ 993.833383][ T3561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 993.833403][ T3561] ? aa_sock_msg_perm+0xf1/0x1b0 [ 993.833426][ T3561] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 993.833452][ T3561] ____sys_sendmsg+0x972/0x9f0 [ 993.833469][ T3561] ? __might_fault+0xaf/0x130 [ 993.833496][ T3561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 993.833537][ T3561] ? import_iovec+0x73/0xa0 [ 993.833564][ T3561] ___sys_sendmsg+0x2a5/0x360 [ 993.833580][ T3561] ? __lock_acquire+0x6b5/0x2cf0 [ 993.833603][ T3561] ? __pfx____sys_sendmsg+0x10/0x10 [ 993.833655][ T3561] ? __fget_files+0x2a/0x420 [ 993.833674][ T3561] ? __fget_files+0x3a0/0x420 [ 993.833703][ T3561] __x64_sys_sendmsg+0x1bd/0x2a0 [ 993.833723][ T3561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 993.833749][ T3561] ? __pfx_ksys_write+0x10/0x10 [ 993.833781][ T3561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.833802][ T3561] do_syscall_64+0x15f/0xf80 [ 993.833828][ T3561] ? clear_bhb_loop+0x40/0x90 [ 993.833850][ T3561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.833867][ T3561] RIP: 0033:0x7f6b92f9ce59 [ 993.833884][ T3561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.833899][ T3561] RSP: 002b:00007f6b93dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.833916][ T3561] RAX: ffffffffffffffda RBX: 00007f6b93215fa0 RCX: 00007f6b92f9ce59 [ 993.833929][ T3561] RDX: 0000000000004040 RSI: 0000200000000080 RDI: 0000000000000004 [ 993.833940][ T3561] RBP: 00007f6b93dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 993.833951][ T3561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.833961][ T3561] R13: 00007f6b93216038 R14: 00007f6b93215fa0 R15: 00007ffea6f81228 [ 993.833991][ T3561] [ 993.837254][ T5908] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.281981][T24658] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.399828][ T3571] __nla_validate_parse: 2 callbacks suppressed [ 994.399845][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9876'. [ 994.444042][ T57] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.452401][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9876'. [ 994.463546][ T57] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.477444][ T57] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.503759][ T57] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 995.402362][ T3588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9881'. [ 995.424729][ T3588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9881'. [ 995.433694][ T3588] tipc: Invalid UDP bearer configuration [ 995.433742][ T3588] tipc: Enabling of bearer rejected, failed to enable media [ 995.462094][ T3588] netlink: 'syz.0.9881': attribute type 1 has an invalid length. [ 995.545697][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9881'. [ 995.562491][ T3588] bond9: entered promiscuous mode [ 995.567596][ T3588] bond9: entered allmulticast mode [ 995.574203][ T3588] 8021q: adding VLAN 0 to HW filter on device bond9 [ 995.738723][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9884'. [ 995.788516][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9884'. [ 996.680839][ T5734] hid-generic 0005:10CF:7FFF.0009: item fetching failed at offset 0/1 [ 996.730119][ T5734] hid-generic 0005:10CF:7FFF.0009: probe with driver hid-generic failed with error -22 [ 996.818725][ T3627] netlink: 'syz.1.9894': attribute type 13 has an invalid length. [ 996.858970][ T3627] netlink: 'syz.1.9894': attribute type 17 has an invalid length. [ 997.265164][ T3627] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 997.272492][ T3627] bridge0: port 3(veth0_virt_wifi) entered listening state [ 997.279994][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.287201][ T3627] bridge0: port 2(bridge_slave_1) entered listening state [ 997.294603][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.301759][ T3627] bridge0: port 1(bridge_slave_0) entered listening state [ 997.350107][ T3639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9897'. [ 997.374101][ T3643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9899'. [ 997.537183][ T3627] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 997.551687][ T3627] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 997.725306][ T3643] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9899'. [ 998.169698][ T3661] FAULT_INJECTION: forcing a failure. [ 998.169698][ T3661] name failslab, interval 1, probability 0, space 0, times 0 [ 998.195421][ T3661] CPU: 0 UID: 0 PID: 3661 Comm: syz.4.9906 Not tainted syzkaller #0 PREEMPT(full) [ 998.195444][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 998.195454][ T3661] Call Trace: [ 998.195461][ T3661] [ 998.195470][ T3661] dump_stack_lvl+0xe8/0x150 [ 998.195495][ T3661] should_fail_ex+0x412/0x560 [ 998.195521][ T3661] ? sock_alloc_inode+0x2c/0x190 [ 998.195542][ T3661] should_failslab+0xa8/0x100 [ 998.195568][ T3661] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 998.195596][ T3661] ? __pfx_sock_alloc_inode+0x10/0x10 [ 998.195615][ T3661] sock_alloc_inode+0x2c/0x190 [ 998.195634][ T3661] ? __pfx_sock_alloc_inode+0x10/0x10 [ 998.195651][ T3661] alloc_inode+0x6a/0x1b0 [ 998.195671][ T3661] __sock_create+0x12d/0x9d0 [ 998.195701][ T3661] rfcomm_dlc_open+0x364/0x1210 [ 998.195810][ T3661] ? reacquire_held_locks+0x104/0x190 [ 998.195831][ T3661] ? release_sock+0x2f/0x260 [ 998.195860][ T3661] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 998.195889][ T3661] ? __local_bh_enable_ip+0xd0/0x130 [ 998.195912][ T3661] rfcomm_sock_connect+0x2f7/0x640 [ 998.195939][ T3661] __sys_connect+0x312/0x450 [ 998.195964][ T3661] ? __pfx___sys_connect+0x10/0x10 [ 998.195999][ T3661] ? __pfx_ksys_write+0x10/0x10 [ 998.196027][ T3661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.196045][ T3661] __x64_sys_connect+0x7a/0x90 [ 998.196068][ T3661] do_syscall_64+0x15f/0xf80 [ 998.196091][ T3661] ? trace_irq_disable+0x3b/0x140 [ 998.196114][ T3661] ? clear_bhb_loop+0x40/0x90 [ 998.196135][ T3661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.196151][ T3661] RIP: 0033:0x7f5eb979ce59 [ 998.196167][ T3661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.196182][ T3661] RSP: 002b:00007f5eba576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 998.196200][ T3661] RAX: ffffffffffffffda RBX: 00007f5eb9a15fa0 RCX: 00007f5eb979ce59 [ 998.196212][ T3661] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000004 [ 998.196223][ T3661] RBP: 00007f5eba576090 R08: 0000000000000000 R09: 0000000000000000 [ 998.196233][ T3661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.196243][ T3661] R13: 00007f5eb9a16038 R14: 00007f5eb9a15fa0 R15: 00007ffe6cae6ea8 [ 998.196272][ T3661] [ 998.196291][ T3661] socket: no more sockets [ 998.397755][ T3665] netlink: 'syz.0.9904': attribute type 21 has an invalid length. [ 998.463539][ T3672] netlink: 'syz.3.9908': attribute type 2 has an invalid length. [ 999.083563][ T3709] syz_tun: entered allmulticast mode [ 999.649963][ T3728] FAULT_INJECTION: forcing a failure. [ 999.649963][ T3728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.663032][ T3728] CPU: 1 UID: 0 PID: 3728 Comm: syz.2.9916 Not tainted syzkaller #0 PREEMPT(full) [ 999.663055][ T3728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.663065][ T3728] Call Trace: [ 999.663073][ T3728] [ 999.663081][ T3728] dump_stack_lvl+0xe8/0x150 [ 999.663105][ T3728] should_fail_ex+0x412/0x560 [ 999.663132][ T3728] _copy_to_user+0x31/0xb0 [ 999.663157][ T3728] simple_read_from_buffer+0xe1/0x170 [ 999.663182][ T3728] proc_fail_nth_read+0x1bb/0x230 [ 999.663205][ T3728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 999.663228][ T3728] ? rw_verify_area+0x2a6/0x4d0 [ 999.663247][ T3728] ? tun_chr_write_iter+0xe0/0x200 [ 999.663266][ T3728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 999.663287][ T3728] vfs_read+0x20c/0xa70 [ 999.663313][ T3728] ? __pfx___mutex_lock+0x10/0x10 [ 999.663331][ T3728] ? __pfx_vfs_read+0x10/0x10 [ 999.663355][ T3728] ? __fget_files+0x2a/0x420 [ 999.663379][ T3728] ? __fget_files+0x3a0/0x420 [ 999.663397][ T3728] ? __fget_files+0x2a/0x420 [ 999.663425][ T3728] ksys_read+0x150/0x270 [ 999.663449][ T3728] ? __pfx_ksys_read+0x10/0x10 [ 999.663480][ T3728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.663498][ T3728] do_syscall_64+0x15f/0xf80 [ 999.663520][ T3728] ? trace_irq_disable+0x3b/0x140 [ 999.663542][ T3728] ? clear_bhb_loop+0x40/0x90 [ 999.663560][ T3728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.663576][ T3728] RIP: 0033:0x7f9b2eb5d68e [ 999.663591][ T3728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 999.663613][ T3728] RSP: 002b:00007f9b2fa54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 999.663631][ T3728] RAX: ffffffffffffffda RBX: 00007f9b2fa556c0 RCX: 00007f9b2eb5d68e [ 999.663643][ T3728] RDX: 000000000000000f RSI: 00007f9b2fa550a0 RDI: 0000000000000006 [ 999.663653][ T3728] RBP: 00007f9b2fa55090 R08: 0000000000000000 R09: 0000000000000000 [ 999.663662][ T3728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.663671][ T3728] R13: 00007f9b2ee16128 R14: 00007f9b2ee16090 R15: 00007ffd446939d8 [ 999.663701][ T3728] [ 999.841057][ T3703] syz_tun: left allmulticast mode [ 1000.121950][ T3738] __nla_validate_parse: 3 callbacks suppressed [ 1000.121968][ T3738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9920'. [ 1000.234940][ T3738] syzkaller0: entered promiscuous mode [ 1000.246025][ T3738] syzkaller0: entered allmulticast mode [ 1000.309011][ T3745] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9922'. [ 1000.556112][ T3746] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1000.565106][ T3746] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1000.574554][ T3746] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1001.109673][ T3778] bond8: entered promiscuous mode [ 1001.134855][ T3783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9930'. [ 1001.144162][ T3778] bond8: entered allmulticast mode [ 1001.155132][ T3778] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1001.285570][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9930'. [ 1001.299353][ T3781] veth1_to_bond: entered allmulticast mode [ 1001.374985][ T3791] veth1_to_bond (unregistering): left allmulticast mode [ 1001.445100][ T3791] bond0: (slave bond_slave_1): Releasing backup interface [ 1001.475155][ T3790] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9930'. [ 1002.605835][ T3823] tipc: Enabled bearer , priority 0 [ 1002.719983][ T3823] syzkaller0: entered promiscuous mode [ 1002.732471][ T3823] syzkaller0: entered allmulticast mode [ 1002.743383][ T3823] tipc: Resetting bearer [ 1002.788276][ T3821] tipc: Resetting bearer [ 1003.353011][ T3838] netlink: 'syz.3.9941': attribute type 1 has an invalid length. [ 1005.387113][ T3821] tipc: Disabling bearer [ 1005.429658][ T3838] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1005.504749][T19919] tipc: Node number set to 2034393561 [ 1005.602377][ T3845] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1006.324043][ T3874] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1006.331946][ T3874] syzkaller1: linktype set to 825 [ 1006.338625][ T3876] netlink: 'syz.0.9955': attribute type 1 has an invalid length. [ 1006.341404][ T3874] syzkaller1: tun_chr_ioctl cmd 62744 [ 1006.383298][ T3876] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1006.569706][ T3881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9954'. [ 1006.647514][ T3881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9954'. [ 1006.960512][ T3885] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1006.986976][ T3887] tipc: Enabled bearer , priority 0 [ 1007.004907][ T3887] syzkaller0: entered promiscuous mode [ 1007.029316][ T3887] syzkaller0: entered allmulticast mode [ 1007.147549][ T3890] tipc: Resetting bearer [ 1007.233567][ T3887] tipc: Resetting bearer [ 1007.236094][ T3897] netlink: 'syz.0.9963': attribute type 1 has an invalid length. [ 1007.261802][ T3887] tipc: Disabling bearer [ 1007.270230][ T3898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9964'. [ 1007.308380][ T3897] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1007.356674][ T3903] netlink: 'syz.2.9966': attribute type 1 has an invalid length. [ 1007.420011][ T3903] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1007.494504][ T3907] bond4: (slave gretap2): making interface the new active one [ 1007.507604][ T3907] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1007.590744][ T3913] netlink: 'syz.1.9969': attribute type 1 has an invalid length. [ 1007.625838][ T3913] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9969'. [ 1007.668393][ T3918] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1007.769000][ T5734] hid-generic 0005:10CF:7FFF.000A: item fetching failed at offset 0/1 [ 1007.803025][ T5734] hid-generic 0005:10CF:7FFF.000A: probe with driver hid-generic failed with error -22 [ 1007.900259][ T3931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1007.922334][ T3931] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1007.946376][ T3931] tipc: Invalid UDP bearer configuration [ 1007.946427][ T3931] tipc: Enabling of bearer rejected, failed to enable media [ 1007.966272][ T3937] netlink: 'syz.4.9977': attribute type 1 has an invalid length. [ 1008.019892][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1008.124565][ T3937] bond9: entered promiscuous mode [ 1008.139494][ T3937] bond9: entered allmulticast mode [ 1008.165554][ T3937] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1008.291931][ T3945] netlink: 'syz.3.9979': attribute type 12 has an invalid length. [ 1008.655351][ T3955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9980'. [ 1008.664334][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9980'. [ 1008.990393][ T3958] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1009.240301][ T3960] tipc: Started in network mode [ 1009.245292][ T3960] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 1009.254271][ T3960] tipc: Enabling of bearer rejected, failed to enable media [ 1009.318645][ T3974] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1009.340009][ T3958] bond1: option ad_select: invalid value (34) [ 1009.353464][ T3958] bond1 (unregistering): Released all slaves [ 1009.545890][ T3985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9991'. [ 1011.156377][ T4043] netlink: 'syz.0.10005': attribute type 16 has an invalid length. [ 1011.171354][ T4046] netlink: 'syz.3.10006': attribute type 1 has an invalid length. [ 1011.205748][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.215432][ T4043] netlink: 'syz.0.10005': attribute type 17 has an invalid length. [ 1011.477304][ T4041] tipc: Invalid UDP bearer configuration [ 1011.477422][ T4041] tipc: Enabling of bearer rejected, failed to enable media [ 1011.783393][ T4046] bond2: entered promiscuous mode [ 1011.788520][ T4046] bond2: entered allmulticast mode [ 1011.794006][ T4046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1011.833218][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.840386][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.932183][ T4043] ipvlan0: left allmulticast mode [ 1011.937382][ T4043] veth0_vlan: left allmulticast mode [ 1011.956415][ T4043] bond3: left allmulticast mode [ 1011.962403][ T4043] bond4: left allmulticast mode [ 1011.972814][ T4043] bond7: left promiscuous mode [ 1011.977606][ T4043] bond7: left allmulticast mode [ 1012.001020][ T4043] bond8: left promiscuous mode [ 1012.006061][ T4043] bridge1: left promiscuous mode [ 1012.011707][ T4043] bond8: left allmulticast mode [ 1012.016571][ T4043] bridge1: left allmulticast mode [ 1012.024563][ T4043] bond9: left promiscuous mode [ 1012.029348][ T4043] bond9: left allmulticast mode [ 1012.085418][ T4067] syzkaller0: entered promiscuous mode [ 1012.150577][ T4067] syzkaller0: entered allmulticast mode [ 1012.333873][ T4085] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1012.902574][ T4100] __nla_validate_parse: 7 callbacks suppressed [ 1012.902590][ T4100] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10018'. [ 1013.095647][ T4107] netlink: 'syz.0.10021': attribute type 1 has an invalid length. [ 1013.308085][ T4107] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1013.335491][ T4116] netlink: 136 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1013.344803][ T4116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1013.384634][ T4116] netlink: 'syz.3.10023': attribute type 3 has an invalid length. [ 1013.413863][ T4116] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1013.465631][ T4121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10025'. [ 1013.568784][ T4123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.708715][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.715950][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.336832][ T4143] netlink: 'syz.2.10034': attribute type 13 has an invalid length. [ 1015.064214][ T4160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10040'. [ 1015.075392][ T4160] FAULT_INJECTION: forcing a failure. [ 1015.075392][ T4160] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.114131][ T4160] CPU: 1 UID: 0 PID: 4160 Comm: syz.0.10040 Not tainted syzkaller #0 PREEMPT(full) [ 1015.114157][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.114167][ T4160] Call Trace: [ 1015.114175][ T4160] [ 1015.114183][ T4160] dump_stack_lvl+0xe8/0x150 [ 1015.114210][ T4160] should_fail_ex+0x412/0x560 [ 1015.114239][ T4160] should_failslab+0xa8/0x100 [ 1015.114264][ T4160] ? skb_clone+0x212/0x3a0 [ 1015.114283][ T4160] kmem_cache_alloc_noprof+0x87/0x650 [ 1015.114313][ T4160] skb_clone+0x212/0x3a0 [ 1015.114340][ T4160] __netlink_deliver_tap+0x404/0x850 [ 1015.114371][ T4160] ? netlink_deliver_tap+0x2e/0x1b0 [ 1015.114389][ T4160] netlink_deliver_tap+0x19c/0x1b0 [ 1015.114407][ T4160] netlink_sendskb+0x68/0x140 [ 1015.114432][ T4160] netlink_rcv_skb+0x2b6/0x4b0 [ 1015.114450][ T4160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1015.114475][ T4160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1015.114505][ T4160] ? netlink_deliver_tap+0x2e/0x1b0 [ 1015.114521][ T4160] ? netlink_deliver_tap+0x2e/0x1b0 [ 1015.114543][ T4160] netlink_unicast+0x75c/0x8e0 [ 1015.114577][ T4160] netlink_sendmsg+0x813/0xb40 [ 1015.114603][ T4160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.114622][ T4160] ? trace_irq_disable+0x3b/0x140 [ 1015.114646][ T4160] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1015.114670][ T4160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1015.114695][ T4160] ____sys_sendmsg+0x972/0x9f0 [ 1015.114711][ T4160] ? __might_fault+0xaf/0x130 [ 1015.114739][ T4160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1015.114764][ T4160] ? import_iovec+0x73/0xa0 [ 1015.114790][ T4160] ___sys_sendmsg+0x2a5/0x360 [ 1015.114805][ T4160] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.114828][ T4160] ? __pfx____sys_sendmsg+0x10/0x10 [ 1015.114876][ T4160] ? __fget_files+0x2a/0x420 [ 1015.114896][ T4160] ? __fget_files+0x3a0/0x420 [ 1015.114924][ T4160] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1015.114943][ T4160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1015.114969][ T4160] ? __pfx_ksys_write+0x10/0x10 [ 1015.115000][ T4160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.115018][ T4160] do_syscall_64+0x15f/0xf80 [ 1015.115041][ T4160] ? trace_irq_disable+0x3b/0x140 [ 1015.115062][ T4160] ? clear_bhb_loop+0x40/0x90 [ 1015.115083][ T4160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.115098][ T4160] RIP: 0033:0x7f3e9a79ce59 [ 1015.115114][ T4160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.115128][ T4160] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.115146][ T4160] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 1015.115157][ T4160] RDX: 0000000000008880 RSI: 0000200000002a80 RDI: 0000000000000003 [ 1015.115168][ T4160] RBP: 00007f3e9b6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.115178][ T4160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.115188][ T4160] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 1015.115216][ T4160] [ 1015.163090][ T4166] IPVS: Scheduler module ip_vs_ not found [ 1015.480891][ T4181] netlink: 'syz.1.10045': attribute type 21 has an invalid length. [ 1015.488886][ T4181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10045'. [ 1015.656924][ T4188] ------------[ cut here ]------------ [ 1015.662434][ T4188] diff > ((u16)~0U) [ 1015.662456][ T4188] WARNING: ./include/net/netlink.h:2265 at br_fill_linkxstats+0x9e7/0xae0, CPU#1: syz.0.10047/4188 [ 1015.677023][ T4188] Modules linked in: [ 1015.681223][ T4188] CPU: 1 UID: 0 PID: 4188 Comm: syz.0.10047 Not tainted syzkaller #0 PREEMPT(full) [ 1015.690598][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.700664][ T4188] RIP: 0010:br_fill_linkxstats+0x9e7/0xae0 [ 1015.706494][ T4188] Code: b6 bd 08 48 3b 84 24 60 01 00 00 75 33 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 8f 30 01 cc e8 0a 1b 49 f7 90 <0f> 0b 90 e9 bc fe ff ff e8 fc 1a 49 f7 90 0f 0b 90 e9 53 ff ff ff [ 1015.737812][ T4188] RSP: 0018:ffffc900055d7160 EFLAGS: 00010287 [ 1015.744263][ T4188] RAX: ffffffff8a7ca956 RBX: 0000000000013550 RCX: 0000000000080000 [ 1015.752616][ T4188] RDX: ffffc900179b0000 RSI: 0000000000006580 RDI: 0000000000006581 [ 1015.760952][ T4188] RBP: ffffc900055d7310 R08: 0000000000000000 R09: 0000000000000000 [ 1015.769312][ T4188] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 1015.777301][ T4188] R13: 1ffff92000abae40 R14: 0000000000000000 R15: dffffc0000000000 [ 1015.785284][ T4188] FS: 00007f3e9b6e56c0(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 1015.794309][ T4188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.800903][ T4188] CR2: 0000001b2e211ff8 CR3: 000000003f720000 CR4: 00000000003526f0 [ 1015.808891][ T4188] Call Trace: [ 1015.812182][ T4188] [ 1015.815146][ T4188] ? __pfx_br_fill_linkxstats+0x10/0x10 [ 1015.816375][ T4199] netlink: 'syz.1.10049': attribute type 1 has an invalid length. [ 1015.820717][ T4188] ? nla_put+0xd0/0x150 [ 1015.820753][ T4188] ? __asan_memcpy+0x40/0x70 [ 1015.820779][ T4188] ? nla_put+0xd0/0x150 [ 1015.820799][ T4188] rtnl_fill_statsinfo+0x541/0x26f0 [ 1015.854463][ T4188] ? __pfx_rtnl_fill_statsinfo+0x10/0x10 [ 1015.860916][ T4188] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1015.867863][ T4188] ? __alloc_skb+0x4e5/0x7d0 [ 1015.872456][ T4188] rtnl_stats_get+0x4b6/0x6d0 [ 1015.877129][ T4188] ? __pfx_rtnl_stats_get+0x10/0x10 [ 1015.882322][ T4188] ? __pfx_rtnl_stats_get+0x10/0x10 [ 1015.887513][ T4188] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1015.892442][ T4188] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1015.897541][ T4188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1015.902994][ T4188] ? ref_tracker_free+0x693/0x840 [ 1015.908033][ T4188] ? __pfx_ref_tracker_free+0x10/0x10 [ 1015.913401][ T4188] netlink_rcv_skb+0x232/0x4b0 [ 1015.918165][ T4188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1015.923641][ T4188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1015.928951][ T4188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1015.934156][ T4188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1015.939348][ T4188] netlink_unicast+0x75c/0x8e0 [ 1015.957273][ T4188] netlink_sendmsg+0x813/0xb40 [ 1015.965566][ T4188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.972772][ T4188] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1015.980930][ T4188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1015.991249][ T4188] ____sys_sendmsg+0x972/0x9f0 [ 1015.997643][ T4188] ? __might_fault+0xaf/0x130 [ 1016.004058][ T4188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1016.009696][ T4188] ? import_iovec+0x73/0xa0 [ 1016.015112][ T4188] ___sys_sendmsg+0x2a5/0x360 [ 1016.020048][ T4188] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.025835][ T4188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.031493][ T4188] ? futex_wake+0x4ac/0x580 [ 1016.037165][ T4188] ? __fget_files+0x2a/0x420 [ 1016.042039][ T4188] ? __fget_files+0x3a0/0x420 [ 1016.047609][ T4188] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1016.053559][ T4188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1016.059020][ T4188] ? rcu_is_watching+0x15/0xb0 [ 1016.063784][ T4188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.069845][ T4188] do_syscall_64+0x15f/0xf80 [ 1016.074425][ T4188] ? trace_irq_disable+0x3b/0x140 [ 1016.079447][ T4188] ? clear_bhb_loop+0x40/0x90 [ 1016.084145][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.090037][ T4188] RIP: 0033:0x7f3e9a79ce59 [ 1016.094466][ T4188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.114339][ T4188] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.122770][ T4188] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 1016.130758][ T4188] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1016.138764][ T4188] RBP: 00007f3e9a832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1016.146739][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.163221][ T4188] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 1016.171224][ T4188] [ 1016.174247][ T4188] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1016.181519][ T4188] CPU: 1 UID: 0 PID: 4188 Comm: syz.0.10047 Not tainted syzkaller #0 PREEMPT(full) [ 1016.190865][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.200905][ T4188] Call Trace: [ 1016.204186][ T4188] [ 1016.207105][ T4188] vpanic+0x56c/0xa60 [ 1016.211110][ T4188] ? __pfx__printk+0x10/0x10 [ 1016.215713][ T4188] ? __pfx_vpanic+0x10/0x10 [ 1016.220223][ T4188] ? is_bpf_text_address+0x292/0x2b0 [ 1016.225504][ T4188] ? is_bpf_text_address+0x26/0x2b0 [ 1016.230709][ T4188] panic+0xc5/0xd0 [ 1016.234442][ T4188] ? __pfx_panic+0x10/0x10 [ 1016.238884][ T4188] __warn+0x315/0x4c0 [ 1016.242862][ T4188] ? br_fill_linkxstats+0x9e7/0xae0 [ 1016.248054][ T4188] ? br_fill_linkxstats+0x9e7/0xae0 [ 1016.253257][ T4188] __report_bug+0x29a/0x540 [ 1016.257851][ T4188] ? br_fill_linkxstats+0x9e7/0xae0 [ 1016.263064][ T4188] ? __pfx___report_bug+0x10/0x10 [ 1016.268102][ T4188] ? prep_compound_page+0x352/0x560 [ 1016.273319][ T4188] ? br_fill_linkxstats+0x9e7/0xae0 [ 1016.278512][ T4188] report_bug+0x16a/0x220 [ 1016.282835][ T4188] ? br_fill_linkxstats+0x9e7/0xae0 [ 1016.288021][ T4188] ? br_fill_linkxstats+0x9e9/0xae0 [ 1016.293204][ T4188] handle_bug+0x9c/0x200 [ 1016.297439][ T4188] exc_invalid_op+0x1a/0x50 [ 1016.301935][ T4188] asm_exc_invalid_op+0x1a/0x20 [ 1016.306773][ T4188] RIP: 0010:br_fill_linkxstats+0x9e7/0xae0 [ 1016.312573][ T4188] Code: b6 bd 08 48 3b 84 24 60 01 00 00 75 33 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 8f 30 01 cc e8 0a 1b 49 f7 90 <0f> 0b 90 e9 bc fe ff ff e8 fc 1a 49 f7 90 0f 0b 90 e9 53 ff ff ff [ 1016.332168][ T4188] RSP: 0018:ffffc900055d7160 EFLAGS: 00010287 [ 1016.338236][ T4188] RAX: ffffffff8a7ca956 RBX: 0000000000013550 RCX: 0000000000080000 [ 1016.346193][ T4188] RDX: ffffc900179b0000 RSI: 0000000000006580 RDI: 0000000000006581 [ 1016.354155][ T4188] RBP: ffffc900055d7310 R08: 0000000000000000 R09: 0000000000000000 [ 1016.362111][ T4188] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 1016.370065][ T4188] R13: 1ffff92000abae40 R14: 0000000000000000 R15: dffffc0000000000 [ 1016.378030][ T4188] ? br_fill_linkxstats+0x9e6/0xae0 [ 1016.383245][ T4188] ? __pfx_br_fill_linkxstats+0x10/0x10 [ 1016.388781][ T4188] ? nla_put+0xd0/0x150 [ 1016.392921][ T4188] ? __asan_memcpy+0x40/0x70 [ 1016.397501][ T4188] ? nla_put+0xd0/0x150 [ 1016.401640][ T4188] rtnl_fill_statsinfo+0x541/0x26f0 [ 1016.406837][ T4188] ? __pfx_rtnl_fill_statsinfo+0x10/0x10 [ 1016.412463][ T4188] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1016.419068][ T4188] ? __alloc_skb+0x4e5/0x7d0 [ 1016.423661][ T4188] rtnl_stats_get+0x4b6/0x6d0 [ 1016.428343][ T4188] ? __pfx_rtnl_stats_get+0x10/0x10 [ 1016.433545][ T4188] ? __pfx_rtnl_stats_get+0x10/0x10 [ 1016.438734][ T4188] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1016.443667][ T4188] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1016.448769][ T4188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1016.454215][ T4188] ? ref_tracker_free+0x693/0x840 [ 1016.459232][ T4188] ? __pfx_ref_tracker_free+0x10/0x10 [ 1016.464603][ T4188] netlink_rcv_skb+0x232/0x4b0 [ 1016.469356][ T4188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1016.474808][ T4188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1016.480089][ T4188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1016.485271][ T4188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1016.490457][ T4188] netlink_unicast+0x75c/0x8e0 [ 1016.495219][ T4188] netlink_sendmsg+0x813/0xb40 [ 1016.499976][ T4188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1016.505254][ T4188] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1016.510180][ T4188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1016.515459][ T4188] ____sys_sendmsg+0x972/0x9f0 [ 1016.520209][ T4188] ? __might_fault+0xaf/0x130 [ 1016.524876][ T4188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1016.530156][ T4188] ? import_iovec+0x73/0xa0 [ 1016.534658][ T4188] ___sys_sendmsg+0x2a5/0x360 [ 1016.539338][ T4188] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.544278][ T4188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.549475][ T4188] ? futex_wake+0x4ac/0x580 [ 1016.553993][ T4188] ? __fget_files+0x2a/0x420 [ 1016.558580][ T4188] ? __fget_files+0x3a0/0x420 [ 1016.563258][ T4188] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1016.568189][ T4188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1016.573641][ T4188] ? rcu_is_watching+0x15/0xb0 [ 1016.578409][ T4188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.584467][ T4188] do_syscall_64+0x15f/0xf80 [ 1016.589051][ T4188] ? trace_irq_disable+0x3b/0x140 [ 1016.594064][ T4188] ? clear_bhb_loop+0x40/0x90 [ 1016.598727][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.604604][ T4188] RIP: 0033:0x7f3e9a79ce59 [ 1016.609014][ T4188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.628607][ T4188] RSP: 002b:00007f3e9b6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.637098][ T4188] RAX: ffffffffffffffda RBX: 00007f3e9aa15fa0 RCX: 00007f3e9a79ce59 [ 1016.645056][ T4188] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1016.653011][ T4188] RBP: 00007f3e9a832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1016.660968][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.668935][ T4188] R13: 00007f3e9aa16038 R14: 00007f3e9aa15fa0 R15: 00007ffccc8cc958 [ 1016.676918][ T4188] [ 1016.680450][ T4188] Kernel Offset: disabled [ 1016.684763][ T4188] Rebooting in 86400 seconds..