last executing test programs: 6.882393018s ago: executing program 4 (id=9066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000005d93000000000000b503020020000000850000000c000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.711510328s ago: executing program 4 (id=9067): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.043690176s ago: executing program 4 (id=9073): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a49", 0xc4}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45c", 0x1c}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.837114238s ago: executing program 4 (id=9077): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.644324888s ago: executing program 4 (id=9079): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.527890485s ago: executing program 1 (id=9081): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x0, r4, 0x42, r5}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b00)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x20000000, 0x33}, @in=@rand_addr=0x64010100, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x24, 0x80000000}]}, 0x100}}, 0x0) 5.433829785s ago: executing program 4 (id=9082): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}], 0x1, 0x8040) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf9, 0xa8, @random="ffe756761f1a5c2043340b8bbb57ba1490bfa5256e5b1a573ed9e8d40cd0dc3f58c594fb9257e90157bc3870fb9388ee3bc40e19b7238d83b4ec50445fa15c3723df96c67f60d60d9769a0d7cb8797ae7950d272529f6d66fb98a64283023b2d2cfbd2c7747f41073aaddf932952921937e2d15e50869c698cd834452b025862b97de46437b19f53de09a1e3d200cb31ad80c541e298532e2911b60616e323588a08d62c65e867bb15ea60299effc0812677dc12c2cb5ab8910b667329e454b729af5c3cb35834c38a93065e2e5734e07c82ac1c9511e331b82c0bdf7f67f74af75faf526acfb616738584450a796facc5853089e8"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x180}, 0x1, 0x0, 0x0, 0x4081}, 0x4008010) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x3c, r8, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x38, r0, 0x10ada85e65c25349, 0x70bd2a, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x27}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}]}, 0x38}}, 0x6048004) 5.095855982s ago: executing program 1 (id=9089): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 4.971061177s ago: executing program 1 (id=9090): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c7b1, 0x0, 0x4, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x100, 0x7fff, 0xfd9, 0x6, 0x2, 0xe}}]}}]}, 0x154}}, 0x4008014) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@private0, 0x5, r10}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 3.948604183s ago: executing program 0 (id=9098): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.683413299s ago: executing program 1 (id=9100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r2, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x9}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4040810) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd70000000000014000000", @ANYRES32=0x0, @ANYBLOB="8123010000000000140003006e657464657673696d3000000000000008000d0006000008"], 0x3c}}, 0x4040000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r3, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket(0x25, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x40000000, 0x400, 0xffffffff, 0x3, 0xfffffffd}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) socket$netlink(0x10, 0x3, 0xa) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r2, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x9}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4040810) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd70000000000014000000", @ANYRES32=0x0, @ANYBLOB="8123010000000000140003006e657464657673696d3000000000000008000d0006000008"], 0x3c}}, 0x4040000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r3}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket(0x25, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x40000000, 0x400, 0xffffffff, 0x3, 0xfffffffd}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) (async) 3.491070689s ago: executing program 0 (id=9102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xdffffffa, 0x25dedbfc, {0x0, 0x0, 0x0, 0x0, 0x1501, 0x18001}, [@IFLA_MAP={0x24, 0xe, {0x9c3, 0x6, 0x7, 0x4, 0x0, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x8040) 3.292089301s ago: executing program 1 (id=9105): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0xcc, 0x24, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xd, 0x6}, {0xe, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xfd, 0x1}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfa, 0x7fff, 0x4, 0x0, 0x24e62881, 0x1, 0x2}}, {0x8, 0x2, [0x4, 0x6]}}, {{0x1c, 0x1, {0x6, 0x3, 0x81, 0x3, 0x2, 0xa, 0x1, 0x3}}, {0xa, 0x2, [0x3, 0x9, 0x4]}}, {{0x1c, 0x1, {0x2, 0x6b, 0x855, 0xf591, 0x2, 0x4, 0x60, 0x3}}, {0xa, 0x2, [0x6, 0x100, 0x0]}}, {{0x1c, 0x1, {0x8, 0x3, 0x1, 0x2, 0x1, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x5, 0x5, 0x4, 0x6]}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/cgroup\x00') syz_open_procfs$namespace(r4, &(0x7f0000000040)) syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/user\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000001100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000da868500000083000000bf09000000000000550901000000000095000000000000008500000011000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.995190577s ago: executing program 2 (id=9107): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000d53ec22e915cd3c35c2bc4023db9d0708fd5d9abd437af03c5d22058df6f5eab26bdd27b52cfae94ad24ac3431660eabd7dc18eb5533e5", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000700a800006f0200"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = accept(r1, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000340), r4) (async) syz_genetlink_get_family_id$team(&(0x7f0000000340), r4) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000004c0)="62c99e05d9", 0x5}], 0x2}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000003c0)={@val={0x8, 0x800}, @void, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x72, 0x68, 0x0, 0x41, 0x11, 0x0, @rand_addr=0x64010101, @multicast1, {[@end]}}, {0x4e20, 0x4e21, 0x5a, 0x0, @opaque="fdc3441b9525a41200a8f387b5eb5e609fb5b49b41357df803a1d882e3b21ac9acd61d8c0647277b5fd22139bd9f69928eb40a98efbc58f6dfbc1e93d46414e5bbce5cb71325510491f82b1d195e86b4d7ed"}}}, 0x76) (async) write$tun(r3, &(0x7f00000003c0)={@val={0x8, 0x800}, @void, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x72, 0x68, 0x0, 0x41, 0x11, 0x0, @rand_addr=0x64010101, @multicast1, {[@end]}}, {0x4e20, 0x4e21, 0x5a, 0x0, @opaque="fdc3441b9525a41200a8f387b5eb5e609fb5b49b41357df803a1d882e3b21ac9acd61d8c0647277b5fd22139bd9f69928eb40a98efbc58f6dfbc1e93d46414e5bbce5cb71325510491f82b1d195e86b4d7ed"}}}, 0x76) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xcab41, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x124, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x14, 0x17, [0x7, 0x6, 0x1, 0x2]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc211}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3e}]}, @CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x124, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x14, 0x17, [0x7, 0x6, 0x1, 0x2]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc211}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3e}]}, @CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000003800)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00', 0x4}}, 0x9, 0x9, 0x4, 0xc, 0x21, 0x1}, &(0x7f00000038c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000003800)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00', 0x4}}, 0x9, 0x9, 0x4, 0xc, 0x21, 0x1}, &(0x7f00000038c0)=0x9c) sendmmsg$inet_sctp(r14, &(0x7f0000003a00)=[{&(0x7f00000002c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003780)=[{&(0x7f0000000300)="5c4fc83a690cc4fdfec32ffb23dedf79e9b22f65d4dd757541f5aa2dcdfdae3c24b3929644ebf3edbad27b35c3f10a2189e8673a3cf46721d7520c", 0x3b}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="5ae023a50387d0aa50f671c2306095f4c35faa19da89a7113755bf4c5d814ba83df29790153842d89dec7157a1dd42993a9e173bd5775f5837f647d326c1e93875fa0232c94fc8eb0272e1a324ea4e7a09419dc3dbc8bd31d6337bad5be38775e996596a3333e2454f3deff3abbb57b381925e644239c5915f231b58de533d05d3a39b4396bef621b517fa84d881009b5e36dc0b453d", 0x96}, {&(0x7f0000003580)="d9dc0d298f506e8147447335e798f874ca22d2a3265773d68586999ea271f4fdaf1cef09e942d54d6ad78dcc9de74fc6b8625c368af13f05fa7b7507657e82c9891eaa440e354602e88010c9fcbdafe35d124f8fcc3cf17ed3dc5ee70211b69c1cd345968c1dc05225be30678a5ddc944f3561195051b37f16a146d532881fd5c7c0a1fb185ca32eeb9d9310a4bd832bbf0e2594fe17dbcce53ef5e7cbdbb621fb12ff28a472820c3a76067ca8e437076b8324349a5b4c052bc8b949535cc95083343365ef6a428a887fe940b9c343a2f33d53c0f1acb087dfb6ab392b413429e0b35931dc604de6cbd484f39278118ba30557bbb2edf8b6", 0xf8}, {&(0x7f0000003680)="2c015297ec6fa9627287fca3dd0ba3bf4162f40d9671f1777262cc221909a1969999f1914600544dba37614c448f21a2edf84b41a87d4f9f976b86aa1887636e5b53b5bf4a1ced06fcfdec54c09d1313908e81caba4c4b3fe21789ddc0f677186c76928be2aa670b18d8e4a66081b16e63aa60c3cf717f7718ebc74f62ad7626cf06850605845a4190dd9295ec041e8ff1fab7ea626dc1fc93c124e7e3d099da00f8d8ed210f8c80f38a39345156cf887d371d4b65c9e1265c7ec3749c528fb3e0387c7c2d2109c50ce631b62c28d0cb4119fdacbfc2466493fbe32ea235a25973e7cbfb99623f9ad40c99eaa21e6fcce47c04de209a38", 0xf7}], 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000840000000500000022000000000400001800000000000000840000000600000000010000000000001800000000000000bed7f68400000007000000ac1e00010000000018000000000000008400000007000000000000000000000018000000000000008400000007000000ac1414aa0000000018000000000000008400000005000000200000000900000020000000000000008400000002000000ff0f04000200000009000000", @ANYRES32=r15, @ANYBLOB="18000000000000008400000005000000000000000000208a1800000000000000840000000500000000000000d80a0000"], 0xe0, 0x4000080}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='B\x00\x00R', @ANYRES16=r12, @ANYBLOB="010029bd7000fcdbdf256b00000008000300", @ANYRES32=r13, @ANYBLOB="0a001a0008021100000000000a001a00ffffffffffff00000a001a000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) (async) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='B\x00\x00R', @ANYRES16=r12, @ANYBLOB="010029bd7000fcdbdf256b00000008000300", @ANYRES32=r13, @ANYBLOB="0a001a0008021100000000000a001a00ffffffffffff00000a001a000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080006000900000014000000451a00142c9c6f"], 0xfce) (async) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080006000900000014000000451a00142c9c6f"], 0xfce) 2.347446997s ago: executing program 3 (id=9108): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="d8000000190081054e81f7c2db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c10e006f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6", 0xbd}], 0x1}, 0x14) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.231770635s ago: executing program 1 (id=9109): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000f4000000400000002"], 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}}], 0x1, 0xc8040) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) sendto$inet6(r1, &(0x7f00000003c0)="1fd3cd769319b31fc20d6646fac13f48b2f7ec15b6b63ef5cd38233423fb13dd9615ec85a5e34358348584e6b016340cea509829b4bb2639b54dd265e7258b7c954a6fe7", 0x44, 0x24044001, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) writev(r4, &(0x7f0000000680), 0x1000000000000294) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000000000080004000b000000", 0x24) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.230594642s ago: executing program 3 (id=9110): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000005090000000400000003000093010000000700000001000000ffffffff010000000200010005090000050000000e000000001c008000615f302e5f5f61"], 0x0, 0x51, 0x0, 0x9}, 0x28) 2.131790836s ago: executing program 3 (id=9111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x54, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @local, @mcast2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2f}, @hao={0xc9, 0x10, @mcast1}]}], "2b58959e"}}}}}}}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000680)={@mcast1, 0x4, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000005d93000000000000b503020000000000850000000c000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000005d93000000000000b503020000000000850000000c000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) 2.058765053s ago: executing program 3 (id=9112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x62, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8, 0x80000000, 0xfffffff7, 0x5, 0x8, 0x9, 0x8}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x5, 0xe3b) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, r4, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0x7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000300)={@remote, @random="91d50a4ae1d0", @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x4, 0x6, "203812", 0x164, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, @loopback, {[@hopopts={0x0, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0xed}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}, @routing={0x32, 0x2, 0x2, 0xfa, 0x0, [@loopback]}, @fragment={0x87, 0x0, 0x0, 0x1, 0x0, 0x6, 0x68}, @fragment={0x3c, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x68}, @routing={0x62, 0xe, 0x0, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @empty]}], {{0x4e24, 0x4e22, r3, r4, 0x0, 0x0, 0x13, 0x10, 0x3, 0x0, 0x8, {[@exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "ab0a110e926aceb194410d4ff9bf574b"}, @sack={0x5, 0xe, [0x0, 0x2, 0x10]}, @mptcp=@ack={0x1e, 0x12, 0x8, 0x4, "ca1efdfdd54c6de0dc44232af7cd"}, @nop]}}, {"89217d867a1b6f8b33e8a09f822c878de695b6b21e3d4084151636e62ac9b5caa03df1146eac4d47afef91560fdb5cbec45eb956bddb7aaaaa7865aa2604c5f1af172ed3dfb5b0df72f2205042ae7140"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000d0a0103faffffff00000000010000050900010073797a3000000000f0998be3e2c3b502b0e7300e7f65353800b112cdf4cd601d3dc40b73991dc5d21809cb56eee760928b305f06c8d8735c104e088601e4f4f03529da5fcd0a9f6e909ac0d616040d1fa2389b1a3c9a9f80736da6d3551ecaf7b57ed2b14a83eac01b45700cf436e8412e9e0230e7de311ec33006d0c0bcfeecf9620b55ba3cf5d3dd"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.813800579s ago: executing program 2 (id=9113): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f00000000c0)={@random="449f337afb7f", @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0xf, 0x100}, "fa0fa592ec90"}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) syz_emit_ethernet(0x4f, &(0x7f0000000340)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x19, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x39, 0x0, "bf5c1c"}]}}}}}}, 0x0) 1.69974916s ago: executing program 0 (id=9114): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd80", 0x6d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f88", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1668e5b309efda177b827c14e1e59e57a59774d9a207d394f8b262cb974444d941c9401556676af700fd38224908adba4b8aee34bca25112816982b78c0be11782e21f26b871d", 0x49}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e161", 0x6a}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53433dfe15559c287c995119", 0xca}, {&(0x7f0000000800)}, {&(0x7f0000000880)="44ab02fab25b1b7f3f4a103ba1c39320e6986a2a25394e55fd4639fb211c09dcd6fe54cccfc592fda3", 0x29}, {&(0x7f00000008c0)="54586baeba0fbf8b", 0x8}], 0x5}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$isdn(0x22, 0x3, 0x6) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 1.670280717s ago: executing program 2 (id=9115): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2", 0x77}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d", 0x39}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0", 0x8}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.635673557s ago: executing program 3 (id=9116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 6) 911.30556ms ago: executing program 3 (id=9117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, &(0x7f0000001340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001080)="1be0e9ba511c699ec63bf208fd7d0db45ac7c835aea1fbd336c6ed18a4a079517ae483bdf0d9ee047c015fc8735fb651654ea721c2a883bf9e378d2b3ef61fa66034dc1a47337d51ba6a3a4047509ef8f5539aa1d1e2217d763138003480f540dcc28ff0267f8316762f9c7740bd1afa631e450ece81740dbbf2965642b72a9937374978baef528bc7e10dcb53732b09cccbf5bf2016f26acddacc09ae42eba47ae38c4d6f60f871ebce3ff8ba02", 0xae) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, r1, 0x3, 0x1, 0x1}, 0x50) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000001000)) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) 880.173655ms ago: executing program 2 (id=9118): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x1900}, 0x0) 717.257623ms ago: executing program 0 (id=9119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000000400000004", @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000001000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000ff00100000000000000002000000010000800000000000000000ff0f00000000000073b4ffffffffffff00ffffffffffffff0000000000000000000000001000000000000000000000200200000000000000ffffffffffffffffffffffff"], 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000020000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x198, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x4, [0x33, 0x1f, 0xc, 0x2, 0x40, 0x30, 0x14, 0x34, 0x2a, 0x2b, 0x2c, 0x29, 0x40, 0x6, 0x1f, 0x30], 0x2, 0x4, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, 0xff0000ff, 0xff, 'team0\x00', 'vlan0\x00', {}, {}, 0x1, 0x3, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x7}, {0x0, 0x3, 0x2}}}}, {{@ip={@remote, @loopback, 0xff, 0xffffffff, 'ipvlan1\x00', 'hsr0\x00', {}, {0xff}, 0x21, 0x1, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r11, &(0x7f0000000600)=[{&(0x7f00000004c0)="0bdbad5ce4d24553a1f209d181add8", 0xf}, {0x0}], 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r12}, 0xc) 603.757912ms ago: executing program 2 (id=9120): socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 324.493473ms ago: executing program 0 (id=9121): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d", 0x7f}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 212.360344ms ago: executing program 2 (id=9122): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0e10840dc34286dd60081f0900103afffe800000000000000000000000000020ff02000000000077b31eac3b0000000000000000018600907800f00600010000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x64}}, 0x4008000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000030c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040840) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x40) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e2d, 0x3, @mcast2, 0x89}, 0x1c) socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 0 (id=9123): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="61050603020102ab097f0900096c000000"], 0x11) kernel console output (not intermixed with test programs): 105.039760][ T1405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1105.039793][ T1405] ? __pfx_ksys_write+0x10/0x10 [ 1105.039827][ T1405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.039850][ T1405] do_syscall_64+0x15f/0xf80 [ 1105.039877][ T1405] ? trace_irq_disable+0x3b/0x140 [ 1105.039904][ T1405] ? clear_bhb_loop+0x40/0x90 [ 1105.039928][ T1405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.039949][ T1405] RIP: 0033:0x7f236919cdd9 [ 1105.039971][ T1405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.039989][ T1405] RSP: 002b:00007f236a08e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.040013][ T1405] RAX: ffffffffffffffda RBX: 00007f2369415fa0 RCX: 00007f236919cdd9 [ 1105.040027][ T1405] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1105.040041][ T1405] RBP: 00007f236a08e090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.040054][ T1405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.040067][ T1405] R13: 00007f2369416038 R14: 00007f2369415fa0 R15: 00007ffdd0c3c658 [ 1105.040109][ T1405] [ 1105.469292][ T1417] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1105.653682][ T1428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8064'. [ 1106.158409][ T1444] lo speed is unknown, defaulting to 1000 [ 1106.166496][ T1444] gre0 speed is unknown, defaulting to 1000 [ 1106.452305][ T1444] wg1 speed is unknown, defaulting to 1000 [ 1106.698410][ T1434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1106.989305][ T1464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8078'. [ 1107.502987][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1107.588864][ T1489] netlink: 'syz.3.8086': attribute type 1 has an invalid length. [ 1107.613047][ T1489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8086'. [ 1107.641594][ T1489] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8086'. [ 1107.679584][ T1492] netlink: 'syz.3.8086': attribute type 1 has an invalid length. [ 1107.726295][ T1492] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8086'. [ 1107.796642][ T1492] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8086'. [ 1107.913546][ T1491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.921498][ T1491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.133286][ T1491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.345672][ T1491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.523342][ T1496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1108.929044][ T1530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8092'. [ 1108.939036][ T1530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8092'. [ 1109.070899][ T1491] vlan2: left promiscuous mode [ 1109.078860][ T1491] batadv0: left allmulticast mode [ 1109.087854][ T1491] macvtap1: left promiscuous mode [ 1109.093869][ T1491] macvtap1: left allmulticast mode [ 1109.110918][ T1491] macsec1: left promiscuous mode [ 1109.145963][T16559] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.174917][T16559] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.213141][T16559] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.236400][T16559] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.425997][ T1557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1110.737579][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1111.038489][ T1586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 1111.405881][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8116'. [ 1111.424935][ T1601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8116'. [ 1111.993453][ T1623] FAULT_INJECTION: forcing a failure. [ 1111.993453][ T1623] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.007423][ T1623] CPU: 0 UID: 0 PID: 1623 Comm: syz.0.8120 Not tainted syzkaller #0 PREEMPT(full) [ 1112.007455][ T1623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1112.007468][ T1623] Call Trace: [ 1112.007477][ T1623] [ 1112.007486][ T1623] dump_stack_lvl+0xe8/0x150 [ 1112.007526][ T1623] should_fail_ex+0x412/0x560 [ 1112.007566][ T1623] should_failslab+0xa8/0x100 [ 1112.007594][ T1623] ? skb_clone+0x212/0x3a0 [ 1112.007618][ T1623] kmem_cache_alloc_noprof+0x87/0x650 [ 1112.007654][ T1623] skb_clone+0x212/0x3a0 [ 1112.007682][ T1623] __netlink_deliver_tap+0x404/0x850 [ 1112.007720][ T1623] ? netlink_deliver_tap+0x2e/0x1b0 [ 1112.007745][ T1623] netlink_deliver_tap+0x19c/0x1b0 [ 1112.007769][ T1623] netlink_sendskb+0x68/0x140 [ 1112.007803][ T1623] netlink_rcv_skb+0x2b6/0x4b0 [ 1112.007827][ T1623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1112.007857][ T1623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1112.007900][ T1623] ? down_read+0x270/0x2e0 [ 1112.007934][ T1623] ? genl_rcv+0xd/0x40 [ 1112.007962][ T1623] genl_rcv+0x28/0x40 [ 1112.007986][ T1623] netlink_unicast+0x75c/0x8e0 [ 1112.008039][ T1623] netlink_sendmsg+0x813/0xb40 [ 1112.008074][ T1623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.008101][ T1623] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1112.008125][ T1623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1112.008155][ T1623] ____sys_sendmsg+0x972/0x9f0 [ 1112.008179][ T1623] ? __might_fault+0xaf/0x130 [ 1112.008210][ T1623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1112.008246][ T1623] ? import_iovec+0x73/0xa0 [ 1112.008274][ T1623] ___sys_sendmsg+0x2a5/0x360 [ 1112.008297][ T1623] ? __lock_acquire+0x6b5/0x2cf0 [ 1112.008334][ T1623] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.008402][ T1623] ? __fget_files+0x2a/0x420 [ 1112.008424][ T1623] ? __fget_files+0x3a0/0x420 [ 1112.008457][ T1623] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1112.008485][ T1623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1112.008522][ T1623] ? __pfx_ksys_write+0x10/0x10 [ 1112.008560][ T1623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.008584][ T1623] do_syscall_64+0x15f/0xf80 [ 1112.008611][ T1623] ? trace_irq_disable+0x3b/0x140 [ 1112.008639][ T1623] ? clear_bhb_loop+0x40/0x90 [ 1112.008666][ T1623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.008688][ T1623] RIP: 0033:0x7fc16ff9cdd9 [ 1112.008709][ T1623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.008728][ T1623] RSP: 002b:00007fc170e61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1112.008751][ T1623] RAX: ffffffffffffffda RBX: 00007fc170216090 RCX: 00007fc16ff9cdd9 [ 1112.008768][ T1623] RDX: 0000000004004090 RSI: 0000200000000400 RDI: 0000000000000004 [ 1112.008783][ T1623] RBP: 00007fc170e61090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.008796][ T1623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.008809][ T1623] R13: 00007fc170216128 R14: 00007fc170216090 R15: 00007ffd4ed08278 [ 1112.008846][ T1623] [ 1112.401454][ T1605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.580817][ T1633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8123'. [ 1113.104593][ T1654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8129'. [ 1113.130561][ T1654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8129'. [ 1113.724013][ T1678] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1113.996825][ T1700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8138'. [ 1114.524382][ T1727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8144'. [ 1114.563530][ T1727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8144'. [ 1114.608172][ T1685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1114.623361][ T1731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 1114.699071][ T1731] netlink: 'syz.2.8145': attribute type 13 has an invalid length. [ 1114.904055][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8146'. [ 1114.962365][ T1740] FAULT_INJECTION: forcing a failure. [ 1114.962365][ T1740] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.975483][ T1740] CPU: 0 UID: 0 PID: 1740 Comm: syz.1.8147 Not tainted syzkaller #0 PREEMPT(full) [ 1114.975516][ T1740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1114.975528][ T1740] Call Trace: [ 1114.975536][ T1740] [ 1114.975546][ T1740] dump_stack_lvl+0xe8/0x150 [ 1114.975585][ T1740] should_fail_ex+0x412/0x560 [ 1114.975625][ T1740] should_failslab+0xa8/0x100 [ 1114.975657][ T1740] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1114.975684][ T1740] ? __alloc_skb+0x1d0/0x7d0 [ 1114.975701][ T1740] ? __local_bh_enable_ip+0xd0/0x130 [ 1114.975737][ T1740] __alloc_skb+0x1d0/0x7d0 [ 1114.975761][ T1740] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1114.975797][ T1740] rtmsg_ifinfo+0x8c/0x1a0 [ 1114.975831][ T1740] netif_open+0xec/0x190 [ 1114.975859][ T1740] ? __pfx_netif_open+0x10/0x10 [ 1114.975886][ T1740] ? trace_kmalloc+0x2a/0xf0 [ 1114.975917][ T1740] dev_open+0x125/0x260 [ 1114.975941][ T1740] team_add_slave+0x6a6/0x2820 [ 1114.976001][ T1740] ? __pfx_team_add_slave+0x10/0x10 [ 1114.976018][ T1740] ? __dev_notify_flags+0x1f3/0x310 [ 1114.976042][ T1740] ? __pfx___dev_notify_flags+0x10/0x10 [ 1114.976060][ T1740] ? __dev_change_flags+0x5a0/0x7e0 [ 1114.976078][ T1740] ? rcu_is_watching+0x15/0xb0 [ 1114.976104][ T1740] ? __pfx___dev_change_flags+0x10/0x10 [ 1114.976129][ T1740] ? mutex_is_locked+0x17/0x50 [ 1114.976155][ T1740] do_set_master+0x533/0x6d0 [ 1114.976187][ T1740] do_setlink+0x103d/0x45a0 [ 1114.976226][ T1740] ? __pfx_do_setlink+0x10/0x10 [ 1114.976251][ T1740] ? __pfx_stack_trace_save+0x10/0x10 [ 1114.976290][ T1740] ? do_raw_spin_lock+0x12b/0x2f0 [ 1114.976335][ T1740] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1114.976361][ T1740] ? lockdep_hardirqs_on+0x7a/0x110 [ 1114.976390][ T1740] ? __mutex_lock+0xef6/0x1550 [ 1114.976421][ T1740] ? __pfx___nla_validate_parse+0x10/0x10 [ 1114.976451][ T1740] ? __mutex_lock+0x606/0x1550 [ 1114.976481][ T1740] ? rtnl_newlink+0x883/0x1bb0 [ 1114.976501][ T1740] ? __pfx___mutex_lock+0x10/0x10 [ 1114.976538][ T1740] ? full_name_hash+0x92/0xe0 [ 1114.976567][ T1740] rtnl_newlink+0x15ad/0x1bb0 [ 1114.976598][ T1740] ? __pfx_rtnl_newlink+0x10/0x10 [ 1114.976629][ T1740] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.976668][ T1740] ? unwind_next_frame+0xa6/0x2550 [ 1114.976697][ T1740] ? unwind_next_frame+0xa6/0x2550 [ 1114.976721][ T1740] ? is_bpf_text_address+0x26/0x2b0 [ 1114.976762][ T1740] ? is_bpf_text_address+0x26/0x2b0 [ 1114.976795][ T1740] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.976828][ T1740] ? kernel_text_address+0xa5/0xe0 [ 1114.976853][ T1740] ? __kernel_text_address+0xd/0x30 [ 1114.976876][ T1740] ? unwind_get_return_address+0x4d/0x90 [ 1114.976896][ T1740] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1114.976921][ T1740] ? arch_stack_walk+0xfb/0x150 [ 1114.976954][ T1740] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1114.977008][ T1740] ? __pfx_rtnl_newlink+0x10/0x10 [ 1114.977026][ T1740] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1114.977053][ T1740] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1114.977075][ T1740] ? netlink_sendmsg+0x5d4/0xb40 [ 1114.977097][ T1740] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1114.977126][ T1740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1114.977157][ T1740] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.977200][ T1740] netlink_rcv_skb+0x232/0x4b0 [ 1114.977220][ T1740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1114.977252][ T1740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1114.977287][ T1740] ? netlink_deliver_tap+0x2e/0x1b0 [ 1114.977308][ T1740] ? netlink_deliver_tap+0x2e/0x1b0 [ 1114.977335][ T1740] netlink_unicast+0x75c/0x8e0 [ 1114.977377][ T1740] netlink_sendmsg+0x813/0xb40 [ 1114.977410][ T1740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.977436][ T1740] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1114.977459][ T1740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1114.977487][ T1740] ____sys_sendmsg+0x972/0x9f0 [ 1114.977508][ T1740] ? __might_fault+0xaf/0x130 [ 1114.977537][ T1740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1114.977569][ T1740] ? import_iovec+0x73/0xa0 [ 1114.977596][ T1740] ___sys_sendmsg+0x2a5/0x360 [ 1114.977616][ T1740] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.977650][ T1740] ? __pfx____sys_sendmsg+0x10/0x10 [ 1114.977710][ T1740] ? __fget_files+0x2a/0x420 [ 1114.977729][ T1740] ? __fget_files+0x3a0/0x420 [ 1114.977760][ T1740] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1114.977786][ T1740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1114.977818][ T1740] ? __pfx_ksys_write+0x10/0x10 [ 1114.977852][ T1740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.977875][ T1740] do_syscall_64+0x15f/0xf80 [ 1114.977902][ T1740] ? trace_irq_disable+0x3b/0x140 [ 1114.977928][ T1740] ? clear_bhb_loop+0x40/0x90 [ 1114.977952][ T1740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.977972][ T1740] RIP: 0033:0x7f828d59cdd9 [ 1114.978000][ T1740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.978017][ T1740] RSP: 002b:00007f828e39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.978040][ T1740] RAX: ffffffffffffffda RBX: 00007f828d815fa0 RCX: 00007f828d59cdd9 [ 1114.978054][ T1740] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1114.978067][ T1740] RBP: 00007f828e39f090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.978079][ T1740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.978091][ T1740] R13: 00007f828d816038 R14: 00007f828d815fa0 R15: 00007ffd74247b88 [ 1114.978124][ T1740] [ 1115.498643][ T1740] syz_tun: entered promiscuous mode [ 1115.505320][ T1740] team0: Port device syz_tun added [ 1115.778326][ T1753] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8151'. [ 1116.039151][T31259] wlan1: Trigger new scan to find an IBSS to join [ 1116.048849][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.058676][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.069586][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1116.264743][ T1788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8161'. [ 1116.275228][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8161'. [ 1117.118608][ T1797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8166'. [ 1118.938619][ T1770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1118.992246][T31254] wlan1: Trigger new scan to find an IBSS to join [ 1119.141696][ T1802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8168'. [ 1119.410836][ T1822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8177'. [ 1119.701919][ T1830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8180'. [ 1119.727644][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8180'. [ 1119.756702][ T1832] bond0: entered promiscuous mode [ 1119.762449][ T1832] bond_slave_0: entered promiscuous mode [ 1119.768492][ T1832] bond_slave_1: entered promiscuous mode [ 1119.778786][ T1832] bond0: left promiscuous mode [ 1119.784393][ T1832] bond_slave_0: left promiscuous mode [ 1119.790813][ T1832] bond_slave_1: left promiscuous mode [ 1120.112973][ T1847] syz_tun: entered allmulticast mode [ 1120.163531][ T1849] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8190'. [ 1120.183996][ T1849] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8190'. [ 1120.344018][ T1859] team0: Device syz_tun failed to register rx_handler [ 1120.406903][ T1846] syz_tun: left allmulticast mode [ 1120.760405][ T1882] bond0: entered promiscuous mode [ 1120.768448][ T1882] bond0: left promiscuous mode [ 1120.930567][ T1889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8204'. [ 1121.079733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1121.087955][ C0] lec:lec_tx_timeout: lec0 [ 1121.293407][ T1896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8206'. [ 1121.383897][ T1898] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8206'. [ 1121.416670][ T1898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1121.466387][ T1901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8207'. [ 1121.848358][ T1916] netlink: 'syz.0.8213': attribute type 1 has an invalid length. [ 1122.030633][T16560] wlan1: Trigger new scan to find an IBSS to join [ 1122.079457][ T1925] netlink: 'syz.1.8217': attribute type 10 has an invalid length. [ 1122.528326][ T1936] veth5: entered allmulticast mode [ 1122.944946][T31255] wlan1: Creating new IBSS network, BSSID c2:2d:0f:68:77:08 [ 1123.165348][ T1960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.456123][ T1965] lo speed is unknown, defaulting to 1000 [ 1123.482636][ T1965] gre0 speed is unknown, defaulting to 1000 [ 1123.745844][ T1979] netlink: 'syz.1.8234': attribute type 10 has an invalid length. [ 1124.290705][ T1965] wg1 speed is unknown, defaulting to 1000 [ 1124.497061][ T2002] syzkaller0: entered promiscuous mode [ 1124.509430][ T2002] syzkaller0: entered allmulticast mode [ 1124.657982][ T2008] __nla_validate_parse: 4 callbacks suppressed [ 1124.658003][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8244'. [ 1129.378342][ T2029] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8250'. [ 1131.161659][ T2076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1131.174623][ T2077] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.8261'. [ 1131.198148][ T2076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1131.259084][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8264'. [ 1131.704607][ T2094] syzkaller0: entered promiscuous mode [ 1131.711679][ T2094] syzkaller0: entered allmulticast mode [ 1132.628274][ T2135] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.8276'. [ 1133.025899][ T6463] lec:lec_start_xmit: lec0:No lecd attached [ 1133.709867][ T2149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8278'. [ 1136.524150][ T2100] syzkaller0: entered promiscuous mode [ 1136.530194][ T2100] syzkaller0: entered allmulticast mode [ 1136.995332][ T2163] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8283'. [ 1137.146384][ T2172] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.8287'. [ 1137.383940][ T2184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8292'. [ 1137.418601][ T2181] syzkaller0: entered promiscuous mode [ 1137.424513][ T2181] syzkaller0: entered allmulticast mode [ 1138.052522][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1138.060659][ C0] lec:lec_tx_timeout: lec0 [ 1142.535053][ T2233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8306'. [ 1143.227115][ T2256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8317'. [ 1143.268453][ T2261] netlink: 'syz.0.8319': attribute type 83 has an invalid length. [ 1144.023847][ T2299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8335'. [ 1144.044352][ T2300] ip6erspan0: entered promiscuous mode [ 1144.694830][ T2321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1145.331795][ T2357] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 1145.339276][ T2357] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1145.347445][ T2357] veth1_virt_wifi: entered allmulticast mode [ 1145.355764][ T2357] veth1_virt_wifi: left allmulticast mode [ 1145.366922][ T2357] x_tables: duplicate underflow at hook 1 [ 1145.474472][ T2361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1145.483774][ T2361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1145.493149][ T2361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1145.842756][ T2368] sctp: [Deprecated]: syz.0.8364 (pid 2368) Use of int in max_burst socket option deprecated. [ 1145.842756][ T2368] Use struct sctp_assoc_value instead [ 1146.343103][ T2382] syzkaller0: entered promiscuous mode [ 1146.371074][ T2382] syzkaller0: entered allmulticast mode [ 1146.450443][ T2388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8371'. [ 1146.553449][ T2393] xt_hashlimit: size too large, truncated to 1048576 [ 1146.691463][ T2397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1146.759447][ T2397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1146.881896][ T2397] netlink: 'syz.3.8374': attribute type 10 has an invalid length. [ 1146.896949][ T2397] netlink: 'syz.3.8374': attribute type 3 has an invalid length. [ 1147.597774][ T2424] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1147.652741][ T2429] syzkaller0: entered promiscuous mode [ 1147.664778][ T2429] syzkaller0: entered allmulticast mode [ 1148.297796][ T2467] netlink: 'syz.3.8398': attribute type 10 has an invalid length. [ 1148.392766][ T2472] __nla_validate_parse: 1 callbacks suppressed [ 1148.392790][ T2472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8396'. [ 1148.452534][ T2472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8396'. [ 1148.479762][ T2472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8396'. [ 1148.501472][ T2472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8396'. [ 1148.950586][ T2492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1149.007921][ T2497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8407'. [ 1149.093404][ T2501] FAULT_INJECTION: forcing a failure. [ 1149.093404][ T2501] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.109519][ T2501] CPU: 0 UID: 0 PID: 2501 Comm: syz.2.8409 Not tainted syzkaller #0 PREEMPT(full) [ 1149.109550][ T2501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1149.109563][ T2501] Call Trace: [ 1149.109572][ T2501] [ 1149.109582][ T2501] dump_stack_lvl+0xe8/0x150 [ 1149.109620][ T2501] should_fail_ex+0x412/0x560 [ 1149.109665][ T2501] should_failslab+0xa8/0x100 [ 1149.109692][ T2501] ? security_inode_alloc+0x39/0x310 [ 1149.109715][ T2501] kmem_cache_alloc_noprof+0x87/0x650 [ 1149.109748][ T2501] security_inode_alloc+0x39/0x310 [ 1149.109787][ T2501] inode_init_always_gfp+0x9c8/0xda0 [ 1149.109824][ T2501] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1149.109852][ T2501] alloc_inode+0x82/0x1b0 [ 1149.109884][ T2501] __sock_create+0x12d/0x9d0 [ 1149.109923][ T2501] __sys_socket+0xd6/0x1b0 [ 1149.109953][ T2501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.109976][ T2501] __x64_sys_socket+0x7a/0x90 [ 1149.110006][ T2501] do_syscall_64+0x15f/0xf80 [ 1149.110034][ T2501] ? trace_irq_disable+0x3b/0x140 [ 1149.110061][ T2501] ? clear_bhb_loop+0x40/0x90 [ 1149.110087][ T2501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.110108][ T2501] RIP: 0033:0x7f236919cdd9 [ 1149.110129][ T2501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.110155][ T2501] RSP: 002b:00007f236a08e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1149.110178][ T2501] RAX: ffffffffffffffda RBX: 00007f2369415fa0 RCX: 00007f236919cdd9 [ 1149.110194][ T2501] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 1149.110207][ T2501] RBP: 00007f236a08e090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.110220][ T2501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.110233][ T2501] R13: 00007f2369416038 R14: 00007f2369415fa0 R15: 00007ffdd0c3c658 [ 1149.110267][ T2501] [ 1149.311186][ T2501] socket: no more sockets [ 1149.683006][ T2525] netlink: 'syz.0.8416': attribute type 10 has an invalid length. [ 1149.709991][ T2525] team0: Port device veth1 added [ 1149.806679][ T2534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8419'. [ 1149.935920][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8415'. [ 1149.971820][ T2538] netlink: 'syz.3.8415': attribute type 5 has an invalid length. [ 1149.991700][ T2538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8415'. [ 1150.046355][ T2538] geneve2: entered promiscuous mode [ 1150.052816][ T2538] geneve2: entered allmulticast mode [ 1150.092400][T31254] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 35511 - 0 [ 1150.121439][T31254] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 35511 - 0 [ 1150.139902][T31254] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 35511 - 0 [ 1150.154273][T31254] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 35511 - 0 [ 1150.240365][ T2553] netlink: 'syz.0.8426': attribute type 8 has an invalid length. [ 1150.649490][ T2572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8433'. [ 1151.728253][ T2621] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1151.738932][ T2621] bridge2: entered allmulticast mode [ 1151.963121][T31254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.027241][ T2643] netlink: 'syz.1.8455': attribute type 10 has an invalid length. [ 1152.035697][ T2632] syzkaller1: entered promiscuous mode [ 1152.049902][ T2632] syzkaller1: entered allmulticast mode [ 1152.679575][ T2674] tipc: Enabled bearer , priority 0 [ 1152.888218][ T2685] netlink: 'syz.4.8468': attribute type 10 has an invalid length. [ 1153.281960][ T2710] xt_hashlimit: size too large, truncated to 1048576 [ 1153.790403][ T5898] tipc: Node number set to 1105605718 [ 1153.916320][ T2740] __nla_validate_parse: 2 callbacks suppressed [ 1153.916345][ T2740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1153.938772][ T2741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8476'. [ 1154.083222][ T2744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1154.109064][ T2744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1154.135184][ T2744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1154.357635][ T2760] netlink: 'syz.3.8482': attribute type 1 has an invalid length. [ 1154.409516][ T2763] netlink: 'syz.4.8483': attribute type 10 has an invalid length. [ 1154.428787][ T2760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1154.462824][ T2764] bond1: (slave geneve3): making interface the new active one [ 1154.474135][ T2764] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1154.483640][T31261] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1154.499571][T31261] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1154.522419][T31261] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1154.540951][T31261] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1154.708691][ T2778] xt_hashlimit: size too large, truncated to 1048576 [ 1155.100842][ T2793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8491'. [ 1155.140610][ T2793] FAULT_INJECTION: forcing a failure. [ 1155.140610][ T2793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.194317][ T2793] CPU: 0 UID: 0 PID: 2793 Comm: syz.1.8491 Not tainted syzkaller #0 PREEMPT(full) [ 1155.194349][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1155.194362][ T2793] Call Trace: [ 1155.194372][ T2793] [ 1155.194381][ T2793] dump_stack_lvl+0xe8/0x150 [ 1155.194422][ T2793] should_fail_ex+0x412/0x560 [ 1155.194463][ T2793] _copy_from_user+0x2d/0xb0 [ 1155.194489][ T2793] kstrtouint_from_user+0xd6/0x180 [ 1155.194524][ T2793] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1155.194576][ T2793] proc_fail_nth_write+0x8e/0x210 [ 1155.194601][ T2793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1155.194631][ T2793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1155.194657][ T2793] vfs_write+0x29a/0xb90 [ 1155.194694][ T2793] ? __pfx_vfs_write+0x10/0x10 [ 1155.194723][ T2793] ? __fget_files+0x2a/0x420 [ 1155.194751][ T2793] ? __fget_files+0x3a0/0x420 [ 1155.194772][ T2793] ? __fget_files+0x2a/0x420 [ 1155.194803][ T2793] ksys_write+0x150/0x270 [ 1155.194832][ T2793] ? __pfx_ksys_write+0x10/0x10 [ 1155.194869][ T2793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.194893][ T2793] do_syscall_64+0x15f/0xf80 [ 1155.194922][ T2793] ? trace_irq_disable+0x3b/0x140 [ 1155.194949][ T2793] ? clear_bhb_loop+0x40/0x90 [ 1155.194983][ T2793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.195005][ T2793] RIP: 0033:0x7f828d55d60e [ 1155.195026][ T2793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1155.195044][ T2793] RSP: 002b:00007f828e39efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1155.195068][ T2793] RAX: ffffffffffffffda RBX: 00007f828e39f6c0 RCX: 00007f828d55d60e [ 1155.195084][ T2793] RDX: 0000000000000001 RSI: 00007f828e39f0a0 RDI: 0000000000000006 [ 1155.195097][ T2793] RBP: 00007f828e39f090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.195110][ T2793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.195122][ T2793] R13: 00007f828d816038 R14: 00007f828d815fa0 R15: 00007ffd74247b88 [ 1155.195158][ T2793] [ 1155.486513][ T2799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1155.935965][ T2832] FAULT_INJECTION: forcing a failure. [ 1155.935965][ T2832] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.952543][ T2832] CPU: 1 UID: 0 PID: 2832 Comm: syz.3.8502 Not tainted syzkaller #0 PREEMPT(full) [ 1155.952575][ T2832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1155.952587][ T2832] Call Trace: [ 1155.952595][ T2832] [ 1155.952604][ T2832] dump_stack_lvl+0xe8/0x150 [ 1155.952642][ T2832] should_fail_ex+0x412/0x560 [ 1155.952675][ T2832] ? __d_alloc+0x37/0x6f0 [ 1155.952699][ T2832] should_failslab+0xa8/0x100 [ 1155.952727][ T2832] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1155.952752][ T2832] ? xsk_create+0x27b/0x6a0 [ 1155.952780][ T2832] __d_alloc+0x37/0x6f0 [ 1155.952810][ T2832] d_alloc_pseudo+0x21/0xc0 [ 1155.952834][ T2832] alloc_file_pseudo+0xdd/0x240 [ 1155.952858][ T2832] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1155.952876][ T2832] ? do_raw_spin_unlock+0xf5/0x210 [ 1155.952904][ T2832] ? _raw_spin_unlock+0x28/0x50 [ 1155.952935][ T2832] sock_alloc_file+0xb8/0x2e0 [ 1155.952959][ T2832] ? __sys_socket+0x12b/0x1b0 [ 1155.952989][ T2832] __sys_socket+0x13c/0x1b0 [ 1155.953018][ T2832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.953040][ T2832] __x64_sys_socket+0x7a/0x90 [ 1155.953068][ T2832] do_syscall_64+0x15f/0xf80 [ 1155.953095][ T2832] ? trace_irq_disable+0x3b/0x140 [ 1155.953122][ T2832] ? clear_bhb_loop+0x40/0x90 [ 1155.953154][ T2832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.953173][ T2832] RIP: 0033:0x7f589079cdd9 [ 1155.953195][ T2832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.953213][ T2832] RSP: 002b:00007f589160e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1155.953235][ T2832] RAX: ffffffffffffffda RBX: 00007f5890a15fa0 RCX: 00007f589079cdd9 [ 1155.953249][ T2832] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 1155.953261][ T2832] RBP: 00007f589160e090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.953273][ T2832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.953284][ T2832] R13: 00007f5890a16038 R14: 00007f5890a15fa0 R15: 00007ffdd2dbd7c8 [ 1155.953317][ T2832] [ 1156.513734][ T2845] netlink: 'syz.2.8506': attribute type 10 has an invalid length. [ 1156.538698][ T2845] team0: Port device veth1 added [ 1156.787924][ T2853] syzkaller0: entered promiscuous mode [ 1156.807922][ T2853] syzkaller0: entered allmulticast mode [ 1157.137216][ T2873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8513'. [ 1157.186120][ T2879] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8515'. [ 1157.548393][ T2896] FAULT_INJECTION: forcing a failure. [ 1157.548393][ T2896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.604913][ T2896] CPU: 1 UID: 0 PID: 2896 Comm: syz.2.8520 Not tainted syzkaller #0 PREEMPT(full) [ 1157.604944][ T2896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1157.604957][ T2896] Call Trace: [ 1157.604966][ T2896] [ 1157.604975][ T2896] dump_stack_lvl+0xe8/0x150 [ 1157.605014][ T2896] should_fail_ex+0x412/0x560 [ 1157.605053][ T2896] _copy_from_user+0x2d/0xb0 [ 1157.605079][ T2896] generic_map_update_batch+0x69a/0x990 [ 1157.605113][ T2896] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1157.605135][ T2896] ? __fget_files+0x2a/0x420 [ 1157.605168][ T2896] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1157.605189][ T2896] bpf_map_do_batch+0x39b/0x630 [ 1157.605232][ T2896] __sys_bpf+0x7c1/0x950 [ 1157.605261][ T2896] ? __pfx___sys_bpf+0x10/0x10 [ 1157.605303][ T2896] ? ksys_write+0x242/0x270 [ 1157.605331][ T2896] ? __pfx_ksys_write+0x10/0x10 [ 1157.605360][ T2896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.605383][ T2896] __x64_sys_bpf+0x7c/0x90 [ 1157.605405][ T2896] do_syscall_64+0x15f/0xf80 [ 1157.605423][ T2896] ? trace_irq_disable+0x3b/0x140 [ 1157.605439][ T2896] ? clear_bhb_loop+0x40/0x90 [ 1157.605455][ T2896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.605468][ T2896] RIP: 0033:0x7f236919cdd9 [ 1157.605482][ T2896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.605494][ T2896] RSP: 002b:00007f236a06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1157.605509][ T2896] RAX: ffffffffffffffda RBX: 00007f2369416090 RCX: 00007f236919cdd9 [ 1157.605519][ T2896] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1157.605527][ T2896] RBP: 00007f236a06d090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.605535][ T2896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.605543][ T2896] R13: 00007f2369416128 R14: 00007f2369416090 R15: 00007ffdd0c3c658 [ 1157.605563][ T2896] [ 1157.953757][ T2915] FAULT_INJECTION: forcing a failure. [ 1157.953757][ T2915] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.966850][ T2915] CPU: 1 UID: 0 PID: 2915 Comm: syz.2.8525 Not tainted syzkaller #0 PREEMPT(full) [ 1157.966879][ T2915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1157.966891][ T2915] Call Trace: [ 1157.966900][ T2915] [ 1157.966909][ T2915] dump_stack_lvl+0xe8/0x150 [ 1157.966947][ T2915] should_fail_ex+0x412/0x560 [ 1157.966985][ T2915] should_failslab+0xa8/0x100 [ 1157.967014][ T2915] ? alloc_empty_file+0x5b/0x1d0 [ 1157.967034][ T2915] kmem_cache_alloc_noprof+0x87/0x650 [ 1157.967064][ T2915] alloc_empty_file+0x5b/0x1d0 [ 1157.967086][ T2915] alloc_file_pseudo+0x155/0x240 [ 1157.967111][ T2915] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1157.967129][ T2915] ? do_raw_spin_unlock+0xf5/0x210 [ 1157.967156][ T2915] ? _raw_spin_unlock+0x28/0x50 [ 1157.967201][ T2915] sock_alloc_file+0xb8/0x2e0 [ 1157.967227][ T2915] ? __sys_socket+0x12b/0x1b0 [ 1157.967256][ T2915] __sys_socket+0x13c/0x1b0 [ 1157.967285][ T2915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.967306][ T2915] __x64_sys_socket+0x7a/0x90 [ 1157.967335][ T2915] do_syscall_64+0x15f/0xf80 [ 1157.967360][ T2915] ? trace_irq_disable+0x3b/0x140 [ 1157.967388][ T2915] ? clear_bhb_loop+0x40/0x90 [ 1157.967415][ T2915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.967436][ T2915] RIP: 0033:0x7f236919cdd9 [ 1157.967458][ T2915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.967478][ T2915] RSP: 002b:00007f236a08e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1157.967501][ T2915] RAX: ffffffffffffffda RBX: 00007f2369415fa0 RCX: 00007f236919cdd9 [ 1157.967516][ T2915] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 1157.967529][ T2915] RBP: 00007f236a08e090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.967542][ T2915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.967554][ T2915] R13: 00007f2369416038 R14: 00007f2369415fa0 R15: 00007ffdd0c3c658 [ 1157.967585][ T2915] [ 1158.445111][ T2921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8528'. [ 1158.957476][ T2944] netlink: 'syz.1.8535': attribute type 210 has an invalid length. [ 1159.140885][ T2956] FAULT_INJECTION: forcing a failure. [ 1159.140885][ T2956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.176610][ T2956] CPU: 0 UID: 0 PID: 2956 Comm: syz.4.8539 Not tainted syzkaller #0 PREEMPT(full) [ 1159.176641][ T2956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1159.176653][ T2956] Call Trace: [ 1159.176661][ T2956] [ 1159.176670][ T2956] dump_stack_lvl+0xe8/0x150 [ 1159.176708][ T2956] should_fail_ex+0x412/0x560 [ 1159.176745][ T2956] _copy_from_user+0x2d/0xb0 [ 1159.176769][ T2956] generic_map_update_batch+0x648/0x990 [ 1159.176801][ T2956] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1159.176822][ T2956] ? __fget_files+0x2a/0x420 [ 1159.176849][ T2956] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1159.176870][ T2956] bpf_map_do_batch+0x39b/0x630 [ 1159.176904][ T2956] __sys_bpf+0x7c1/0x950 [ 1159.176932][ T2956] ? __pfx___sys_bpf+0x10/0x10 [ 1159.176974][ T2956] ? ksys_write+0x242/0x270 [ 1159.177001][ T2956] ? __pfx_ksys_write+0x10/0x10 [ 1159.177030][ T2956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.177051][ T2956] __x64_sys_bpf+0x7c/0x90 [ 1159.177081][ T2956] do_syscall_64+0x15f/0xf80 [ 1159.177107][ T2956] ? trace_irq_disable+0x3b/0x140 [ 1159.177133][ T2956] ? clear_bhb_loop+0x40/0x90 [ 1159.177157][ T2956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.177184][ T2956] RIP: 0033:0x7f07e099cdd9 [ 1159.177203][ T2956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.177221][ T2956] RSP: 002b:00007f07e18e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1159.177243][ T2956] RAX: ffffffffffffffda RBX: 00007f07e0c16090 RCX: 00007f07e099cdd9 [ 1159.177258][ T2956] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1159.177270][ T2956] RBP: 00007f07e18e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.177282][ T2956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.177294][ T2956] R13: 00007f07e0c16128 R14: 00007f07e0c16090 R15: 00007ffc8c20f078 [ 1159.177326][ T2956] [ 1160.004966][ T2973] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8543'. [ 1160.147568][ T2977] FAULT_INJECTION: forcing a failure. [ 1160.147568][ T2977] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.175463][ T2977] CPU: 1 UID: 0 PID: 2977 Comm: syz.0.8546 Not tainted syzkaller #0 PREEMPT(full) [ 1160.175494][ T2977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1160.175507][ T2977] Call Trace: [ 1160.175515][ T2977] [ 1160.175525][ T2977] dump_stack_lvl+0xe8/0x150 [ 1160.175562][ T2977] should_fail_ex+0x412/0x560 [ 1160.175601][ T2977] should_failslab+0xa8/0x100 [ 1160.175627][ T2977] ? skb_clone+0x212/0x3a0 [ 1160.175649][ T2977] kmem_cache_alloc_noprof+0x87/0x650 [ 1160.175674][ T2977] ? __netlink_lookup+0xc6/0x8b0 [ 1160.175701][ T2977] skb_clone+0x212/0x3a0 [ 1160.175727][ T2977] __netlink_deliver_tap+0x404/0x850 [ 1160.175761][ T2977] ? netlink_deliver_tap+0x2e/0x1b0 [ 1160.175783][ T2977] netlink_deliver_tap+0x19c/0x1b0 [ 1160.175805][ T2977] netlink_unicast+0x730/0x8e0 [ 1160.175846][ T2977] netlink_sendmsg+0x813/0xb40 [ 1160.175876][ T2977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.175901][ T2977] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1160.175923][ T2977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1160.175950][ T2977] ____sys_sendmsg+0x972/0x9f0 [ 1160.175971][ T2977] ? __might_fault+0xaf/0x130 [ 1160.176000][ T2977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1160.176032][ T2977] ? import_iovec+0x73/0xa0 [ 1160.176058][ T2977] ___sys_sendmsg+0x2a5/0x360 [ 1160.176078][ T2977] ? __lock_acquire+0x6b5/0x2cf0 [ 1160.176113][ T2977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.176174][ T2977] ? __fget_files+0x2a/0x420 [ 1160.176193][ T2977] ? __fget_files+0x3a0/0x420 [ 1160.176230][ T2977] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1160.176257][ T2977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1160.176288][ T2977] ? __pfx_ksys_write+0x10/0x10 [ 1160.176325][ T2977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.176346][ T2977] do_syscall_64+0x15f/0xf80 [ 1160.176371][ T2977] ? trace_irq_disable+0x3b/0x140 [ 1160.176396][ T2977] ? clear_bhb_loop+0x40/0x90 [ 1160.176421][ T2977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.176440][ T2977] RIP: 0033:0x7fc16ff9cdd9 [ 1160.176459][ T2977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.176476][ T2977] RSP: 002b:00007fc170e82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.176498][ T2977] RAX: ffffffffffffffda RBX: 00007fc170215fa0 RCX: 00007fc16ff9cdd9 [ 1160.176512][ T2977] RDX: 0000000000040800 RSI: 0000200000000740 RDI: 0000000000000003 [ 1160.176525][ T2977] RBP: 00007fc170e82090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.176537][ T2977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.176549][ T2977] R13: 00007fc170216038 R14: 00007fc170215fa0 R15: 00007ffd4ed08278 [ 1160.176584][ T2977] [ 1161.255858][ T3000] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1161.373567][ T3006] vlan2: entered promiscuous mode [ 1161.390101][ T3006] bridge0: entered promiscuous mode [ 1161.809425][ T3020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8558'. [ 1161.852844][ T3020] netlink: 51 bytes leftover after parsing attributes in process `syz.2.8558'. [ 1161.884132][ T3020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8558'. [ 1162.411697][ T3040] FAULT_INJECTION: forcing a failure. [ 1162.411697][ T3040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.456480][ T3040] CPU: 1 UID: 0 PID: 3040 Comm: syz.0.8565 Not tainted syzkaller #0 PREEMPT(full) [ 1162.456512][ T3040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1162.456526][ T3040] Call Trace: [ 1162.456535][ T3040] [ 1162.456545][ T3040] dump_stack_lvl+0xe8/0x150 [ 1162.456585][ T3040] should_fail_ex+0x412/0x560 [ 1162.456625][ T3040] _copy_from_user+0x2d/0xb0 [ 1162.456651][ T3040] generic_map_update_batch+0x648/0x990 [ 1162.456687][ T3040] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1162.456710][ T3040] ? __fget_files+0x2a/0x420 [ 1162.456740][ T3040] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1162.456763][ T3040] bpf_map_do_batch+0x39b/0x630 [ 1162.456800][ T3040] __sys_bpf+0x7c1/0x950 [ 1162.456830][ T3040] ? __pfx___sys_bpf+0x10/0x10 [ 1162.456875][ T3040] ? ksys_write+0x242/0x270 [ 1162.456904][ T3040] ? __pfx_ksys_write+0x10/0x10 [ 1162.456935][ T3040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.456966][ T3040] __x64_sys_bpf+0x7c/0x90 [ 1162.456992][ T3040] do_syscall_64+0x15f/0xf80 [ 1162.457020][ T3040] ? trace_irq_disable+0x3b/0x140 [ 1162.457048][ T3040] ? clear_bhb_loop+0x40/0x90 [ 1162.457075][ T3040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.457096][ T3040] RIP: 0033:0x7fc16ff9cdd9 [ 1162.457117][ T3040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.457136][ T3040] RSP: 002b:00007fc170e61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1162.457159][ T3040] RAX: ffffffffffffffda RBX: 00007fc170216090 RCX: 00007fc16ff9cdd9 [ 1162.457175][ T3040] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1162.457188][ T3040] RBP: 00007fc170e61090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.457201][ T3040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.457214][ T3040] R13: 00007fc170216128 R14: 00007fc170216090 R15: 00007ffd4ed08278 [ 1162.457248][ T3040] [ 1163.007258][ T3046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8567'. [ 1163.040779][ T3046] macvtap3: entered promiscuous mode [ 1163.056680][ T3046] macvtap3: entered allmulticast mode [ 1163.073279][ T3046] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1163.232964][ T3049] netlink: 'syz.4.8568': attribute type 10 has an invalid length. [ 1163.286405][ T3049] team0: Port device veth1 added [ 1163.693122][ T3065] netlink: 'syz.0.8575': attribute type 10 has an invalid length. [ 1163.985618][ T3074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1164.007246][ T3074] macvtap4: entered promiscuous mode [ 1164.013142][ T3074] macvtap4: entered allmulticast mode [ 1164.020754][ T3074] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1164.268106][ T3082] bond0: entered promiscuous mode [ 1164.284262][ T3082] bond_slave_0: entered promiscuous mode [ 1164.304899][ T3082] bond_slave_1: entered promiscuous mode [ 1164.430471][ T3082] bond0: left promiscuous mode [ 1164.435468][ T3082] bond_slave_0: left promiscuous mode [ 1164.444537][ T3082] bond_slave_1: left promiscuous mode [ 1164.650458][ T3096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8590'. [ 1164.661101][ T3097] FAULT_INJECTION: forcing a failure. [ 1164.661101][ T3097] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.692692][ T3097] CPU: 0 UID: 0 PID: 3097 Comm: syz.0.8589 Not tainted syzkaller #0 PREEMPT(full) [ 1164.692721][ T3097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1164.692734][ T3097] Call Trace: [ 1164.692743][ T3097] [ 1164.692752][ T3097] dump_stack_lvl+0xe8/0x150 [ 1164.692791][ T3097] should_fail_ex+0x412/0x560 [ 1164.692832][ T3097] should_failslab+0xa8/0x100 [ 1164.692862][ T3097] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1164.692891][ T3097] ? __alloc_skb+0x1d0/0x7d0 [ 1164.692909][ T3097] ? __local_bh_enable_ip+0xd0/0x130 [ 1164.692946][ T3097] __alloc_skb+0x1d0/0x7d0 [ 1164.692966][ T3097] ? netlink_ack_tlv_len+0x6c/0x210 [ 1164.692990][ T3097] netlink_ack+0x146/0xa50 [ 1164.693008][ T3097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1164.693032][ T3097] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1164.693053][ T3097] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1164.693078][ T3097] ? __pfx_ref_tracker_free+0x10/0x10 [ 1164.693113][ T3097] netlink_rcv_skb+0x2b6/0x4b0 [ 1164.693137][ T3097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1164.693167][ T3097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1164.693207][ T3097] ? down_read+0x270/0x2e0 [ 1164.693246][ T3097] ? genl_rcv+0xd/0x40 [ 1164.693273][ T3097] genl_rcv+0x28/0x40 [ 1164.693298][ T3097] netlink_unicast+0x75c/0x8e0 [ 1164.693342][ T3097] netlink_sendmsg+0x813/0xb40 [ 1164.693376][ T3097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1164.693402][ T3097] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1164.693428][ T3097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1164.693457][ T3097] ____sys_sendmsg+0x972/0x9f0 [ 1164.693480][ T3097] ? __might_fault+0xaf/0x130 [ 1164.693512][ T3097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1164.693546][ T3097] ? import_iovec+0x73/0xa0 [ 1164.693576][ T3097] ___sys_sendmsg+0x2a5/0x360 [ 1164.693597][ T3097] ? __lock_acquire+0x6b5/0x2cf0 [ 1164.693634][ T3097] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.693699][ T3097] ? __fget_files+0x2a/0x420 [ 1164.693720][ T3097] ? __fget_files+0x3a0/0x420 [ 1164.693754][ T3097] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1164.693781][ T3097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1164.693816][ T3097] ? __pfx_ksys_write+0x10/0x10 [ 1164.693854][ T3097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.693882][ T3097] do_syscall_64+0x15f/0xf80 [ 1164.693909][ T3097] ? trace_irq_disable+0x3b/0x140 [ 1164.693935][ T3097] ? clear_bhb_loop+0x40/0x90 [ 1164.693961][ T3097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.693980][ T3097] RIP: 0033:0x7fc16ff9cdd9 [ 1164.694000][ T3097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.694017][ T3097] RSP: 002b:00007fc170e82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.694040][ T3097] RAX: ffffffffffffffda RBX: 00007fc170215fa0 RCX: 00007fc16ff9cdd9 [ 1164.694055][ T3097] RDX: 0000000000040800 RSI: 0000200000000740 RDI: 0000000000000003 [ 1164.694068][ T3097] RBP: 00007fc170e82090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.694081][ T3097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.694093][ T3097] R13: 00007fc170216038 R14: 00007fc170215fa0 R15: 00007ffd4ed08278 [ 1164.694127][ T3097] [ 1165.055111][ T3096] macvtap2: entered promiscuous mode [ 1165.081062][ T3096] macvtap2: entered allmulticast mode [ 1165.125283][ T3096] batadv0: entered allmulticast mode [ 1165.170582][ T3096] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1166.204293][ T3147] FAULT_INJECTION: forcing a failure. [ 1166.204293][ T3147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.220655][ T3147] CPU: 1 UID: 0 PID: 3147 Comm: syz.0.8610 Not tainted syzkaller #0 PREEMPT(full) [ 1166.220686][ T3147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1166.220699][ T3147] Call Trace: [ 1166.220707][ T3147] [ 1166.220717][ T3147] dump_stack_lvl+0xe8/0x150 [ 1166.220757][ T3147] should_fail_ex+0x412/0x560 [ 1166.220794][ T3147] _copy_from_user+0x2d/0xb0 [ 1166.220821][ T3147] ___sys_sendmsg+0x1c6/0x360 [ 1166.220844][ T3147] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.220881][ T3147] ? __pfx____sys_sendmsg+0x10/0x10 [ 1166.220951][ T3147] ? __fget_files+0x2a/0x420 [ 1166.220974][ T3147] ? __fget_files+0x3a0/0x420 [ 1166.221008][ T3147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1166.221035][ T3147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1166.221069][ T3147] ? __pfx_ksys_write+0x10/0x10 [ 1166.221105][ T3147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.221128][ T3147] do_syscall_64+0x15f/0xf80 [ 1166.221154][ T3147] ? trace_irq_disable+0x3b/0x140 [ 1166.221181][ T3147] ? clear_bhb_loop+0x40/0x90 [ 1166.221207][ T3147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.221228][ T3147] RIP: 0033:0x7fc16ff9cdd9 [ 1166.221250][ T3147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.221267][ T3147] RSP: 002b:00007fc170e82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.221291][ T3147] RAX: ffffffffffffffda RBX: 00007fc170215fa0 RCX: 00007fc16ff9cdd9 [ 1166.221312][ T3147] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1166.221326][ T3147] RBP: 00007fc170e82090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.221339][ T3147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.221352][ T3147] R13: 00007fc170216038 R14: 00007fc170215fa0 R15: 00007ffd4ed08278 [ 1166.221386][ T3147] [ 1166.641389][ T3157] syzkaller1: entered promiscuous mode [ 1166.665491][ T3157] syzkaller1: entered allmulticast mode [ 1166.903449][ T3174] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8620'. [ 1167.331617][ T3194] vlan0: mtu greater than device maximum [ 1168.711689][ T3259] netlink: 'syz.2.8648': attribute type 10 has an invalid length. [ 1169.479946][ T3291] FAULT_INJECTION: forcing a failure. [ 1169.479946][ T3291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.540287][ T3291] CPU: 1 UID: 0 PID: 3291 Comm: syz.4.8659 Not tainted syzkaller #0 PREEMPT(full) [ 1169.540319][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.540332][ T3291] Call Trace: [ 1169.540341][ T3291] [ 1169.540350][ T3291] dump_stack_lvl+0xe8/0x150 [ 1169.540389][ T3291] should_fail_ex+0x412/0x560 [ 1169.540428][ T3291] _copy_from_iter+0x1d3/0x1670 [ 1169.540455][ T3291] ? rcu_is_watching+0x15/0xb0 [ 1169.540484][ T3291] ? __pfx__copy_from_iter+0x10/0x10 [ 1169.540514][ T3291] ? netlink_sendmsg+0x650/0xb40 [ 1169.540535][ T3291] ? skb_put+0x11b/0x210 [ 1169.540560][ T3291] netlink_sendmsg+0x6c0/0xb40 [ 1169.540593][ T3291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.540619][ T3291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1169.540643][ T3291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1169.540671][ T3291] ____sys_sendmsg+0x972/0x9f0 [ 1169.540695][ T3291] ? __might_fault+0xaf/0x130 [ 1169.540726][ T3291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1169.540760][ T3291] ? import_iovec+0x73/0xa0 [ 1169.540789][ T3291] ___sys_sendmsg+0x2a5/0x360 [ 1169.540811][ T3291] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.540847][ T3291] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.540917][ T3291] ? __fget_files+0x2a/0x420 [ 1169.540940][ T3291] ? __fget_files+0x3a0/0x420 [ 1169.540972][ T3291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1169.540999][ T3291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1169.541031][ T3291] ? __pfx_ksys_write+0x10/0x10 [ 1169.541068][ T3291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.541092][ T3291] do_syscall_64+0x15f/0xf80 [ 1169.541120][ T3291] ? trace_irq_disable+0x3b/0x140 [ 1169.541146][ T3291] ? clear_bhb_loop+0x40/0x90 [ 1169.541172][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.541193][ T3291] RIP: 0033:0x7f07e099cdd9 [ 1169.541213][ T3291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.541231][ T3291] RSP: 002b:00007f07e1901028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.541255][ T3291] RAX: ffffffffffffffda RBX: 00007f07e0c15fa0 RCX: 00007f07e099cdd9 [ 1169.541271][ T3291] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1169.541285][ T3291] RBP: 00007f07e1901090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.541298][ T3291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.541311][ T3291] R13: 00007f07e0c16038 R14: 00007f07e0c15fa0 R15: 00007ffc8c20f078 [ 1169.541343][ T3291] [ 1170.118285][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8664'. [ 1170.133539][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8664'. [ 1170.177692][ T3307] netlink: 'syz.4.8664': attribute type 11 has an invalid length. [ 1170.520900][ T3325] xt_hashlimit: size too large, truncated to 1048576 [ 1171.247314][ T3351] geneve2: entered promiscuous mode [ 1171.326539][ T3357] netlink: 'syz.2.8680': attribute type 1 has an invalid length. [ 1171.490833][ T3364] netlink: 712 bytes leftover after parsing attributes in process `syz.1.8683'. [ 1171.528257][ T3364] netlink: 5504 bytes leftover after parsing attributes in process `syz.1.8683'. [ 1171.537685][ T3364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8683'. [ 1171.565967][ T3370] FAULT_INJECTION: forcing a failure. [ 1171.565967][ T3370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.598062][ T3370] CPU: 1 UID: 0 PID: 3370 Comm: syz.0.8684 Not tainted syzkaller #0 PREEMPT(full) [ 1171.598093][ T3370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.598106][ T3370] Call Trace: [ 1171.598116][ T3370] [ 1171.598125][ T3370] dump_stack_lvl+0xe8/0x150 [ 1171.598163][ T3370] should_fail_ex+0x412/0x560 [ 1171.598210][ T3370] _copy_from_iter+0x1d3/0x1670 [ 1171.598236][ T3370] ? rcu_is_watching+0x15/0xb0 [ 1171.598263][ T3370] ? __pfx__copy_from_iter+0x10/0x10 [ 1171.598289][ T3370] ? netlink_sendmsg+0x650/0xb40 [ 1171.598311][ T3370] ? skb_put+0x11b/0x210 [ 1171.598335][ T3370] netlink_sendmsg+0x6c0/0xb40 [ 1171.598365][ T3370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1171.598397][ T3370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1171.598420][ T3370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1171.598448][ T3370] ____sys_sendmsg+0x972/0x9f0 [ 1171.598471][ T3370] ? __might_fault+0xaf/0x130 [ 1171.598502][ T3370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1171.598535][ T3370] ? import_iovec+0x73/0xa0 [ 1171.598563][ T3370] ___sys_sendmsg+0x2a5/0x360 [ 1171.598585][ T3370] ? __lock_acquire+0x6b5/0x2cf0 [ 1171.598620][ T3370] ? __pfx____sys_sendmsg+0x10/0x10 [ 1171.598681][ T3370] ? __fget_files+0x2a/0x420 [ 1171.598702][ T3370] ? __fget_files+0x3a0/0x420 [ 1171.598733][ T3370] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1171.598761][ T3370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1171.598794][ T3370] ? __pfx_ksys_write+0x10/0x10 [ 1171.598830][ T3370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.598854][ T3370] do_syscall_64+0x15f/0xf80 [ 1171.598881][ T3370] ? trace_irq_disable+0x3b/0x140 [ 1171.598908][ T3370] ? clear_bhb_loop+0x40/0x90 [ 1171.598933][ T3370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.598953][ T3370] RIP: 0033:0x7fc16ff9cdd9 [ 1171.598974][ T3370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.598991][ T3370] RSP: 002b:00007fc170e82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.599015][ T3370] RAX: ffffffffffffffda RBX: 00007fc170215fa0 RCX: 00007fc16ff9cdd9 [ 1171.599031][ T3370] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1171.599045][ T3370] RBP: 00007fc170e82090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.599058][ T3370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.599072][ T3370] R13: 00007fc170216038 R14: 00007fc170215fa0 R15: 00007ffd4ed08278 [ 1171.599105][ T3370] [ 1171.850188][ T3372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8686'. [ 1172.119577][ T3386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1172.134803][ T3386] netlink: 'syz.0.8691': attribute type 1 has an invalid length. [ 1172.149363][ T3386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1172.190406][ T3386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1172.636410][ T3393] FAULT_INJECTION: forcing a failure. [ 1172.636410][ T3393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.655099][ T3393] CPU: 0 UID: 0 PID: 3393 Comm: syz.3.8694 Not tainted syzkaller #0 PREEMPT(full) [ 1172.655128][ T3393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1172.655141][ T3393] Call Trace: [ 1172.655149][ T3393] [ 1172.655158][ T3393] dump_stack_lvl+0xe8/0x150 [ 1172.655195][ T3393] should_fail_ex+0x412/0x560 [ 1172.655233][ T3393] _copy_to_user+0x31/0xb0 [ 1172.655261][ T3393] simple_read_from_buffer+0xe1/0x170 [ 1172.655288][ T3393] proc_fail_nth_read+0x1bb/0x230 [ 1172.655316][ T3393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1172.655343][ T3393] ? rw_verify_area+0x2a6/0x4d0 [ 1172.655366][ T3393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1172.655390][ T3393] vfs_read+0x20c/0xa70 [ 1172.655420][ T3393] ? __pfx___mutex_lock+0x10/0x10 [ 1172.655450][ T3393] ? __pfx_vfs_read+0x10/0x10 [ 1172.655476][ T3393] ? __fget_files+0x2a/0x420 [ 1172.655508][ T3393] ? __fget_files+0x3a0/0x420 [ 1172.655527][ T3393] ? __fget_files+0x2a/0x420 [ 1172.655558][ T3393] ksys_read+0x150/0x270 [ 1172.655586][ T3393] ? __pfx_ksys_read+0x10/0x10 [ 1172.655620][ T3393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.655643][ T3393] do_syscall_64+0x15f/0xf80 [ 1172.655669][ T3393] ? trace_irq_disable+0x3b/0x140 [ 1172.655696][ T3393] ? clear_bhb_loop+0x40/0x90 [ 1172.655721][ T3393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.655740][ T3393] RIP: 0033:0x7f589075d60e [ 1172.655761][ T3393] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1172.655778][ T3393] RSP: 002b:00007f589160dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1172.655800][ T3393] RAX: ffffffffffffffda RBX: 00007f589160e6c0 RCX: 00007f589075d60e [ 1172.655815][ T3393] RDX: 000000000000000f RSI: 00007f589160e0a0 RDI: 0000000000000004 [ 1172.655828][ T3393] RBP: 00007f589160e090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.655841][ T3393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.655854][ T3393] R13: 00007f5890a16038 R14: 00007f5890a15fa0 R15: 00007ffdd2dbd7c8 [ 1172.655890][ T3393] [ 1173.225892][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8698'. [ 1173.235092][T25793] Bluetooth: hci4: command tx timeout [ 1173.587778][ T3439] xt_hashlimit: size too large, truncated to 1048576 [ 1174.472347][ T3466] lo speed is unknown, defaulting to 1000 [ 1174.493866][ T3466] gre0 speed is unknown, defaulting to 1000 [ 1175.311004][ T3466] wg1 speed is unknown, defaulting to 1000 [ 1175.318707][ T3489] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1175.333841][ T3489] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1175.351730][ T3490] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8719'. [ 1175.751195][ T3502] syzkaller0: entered promiscuous mode [ 1175.760822][ T3502] syzkaller0: entered allmulticast mode [ 1176.115784][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1176.878633][ T3536] netlink: 'syz.1.8739': attribute type 89 has an invalid length. [ 1176.951489][ T3542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1177.172837][ T3553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8745'. [ 1177.420453][ T3570] netlink: 'syz.3.8750': attribute type 10 has an invalid length. [ 1177.428700][ T3570] team0: Device veth1 is up. Set it down before adding it as a team port [ 1177.438812][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8747'. [ 1177.488477][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.497606][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.507007][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1177.563304][T16560] bridge_slave_1: left allmulticast mode [ 1177.581428][T16560] bridge_slave_1: left promiscuous mode [ 1177.599512][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.634123][T16560] bridge_slave_0: left allmulticast mode [ 1177.646250][T16560] bridge_slave_0: left promiscuous mode [ 1177.652914][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.696501][T16560] pimreg: left allmulticast mode [ 1177.871133][T16560] gretap0 (unregistering): left promiscuous mode [ 1178.115755][T16560] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1178.124123][T16560] bridge4 (unregistering): left promiscuous mode [ 1178.130628][T16560] bridge4 (unregistering): left allmulticast mode [ 1178.188027][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.201061][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.211708][T16560] bond0 (unregistering): Released all slaves [ 1178.223393][T16560] bond1 (unregistering): Released all slaves [ 1178.239212][T16560] bond2 (unregistering): Released all slaves [ 1178.254288][T16560] bond3 (unregistering): Released all slaves [ 1178.269407][T16560] bond4 (unregistering): Released all slaves [ 1178.287932][T16560] bond5 (unregistering): Released all slaves [ 1178.329807][T16560] bond6 (unregistering): Released all slaves [ 1178.526663][T16560] tipc: Left network mode [ 1179.135592][ T3601] syzkaller0: entered promiscuous mode [ 1179.142781][ T3601] syzkaller0: entered allmulticast mode [ 1179.154068][ T3606] netlink: 'syz.4.8763': attribute type 13 has an invalid length. [ 1179.325817][ T3611] netlink: 'syz.3.8764': attribute type 10 has an invalid length. [ 1183.079498][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 1183.087571][ C0] lec:lec_tx_timeout: lec0 [ 1183.537757][ T3611] team0: Device veth1 is up. Set it down before adding it as a team port [ 1183.553196][ T3632] tipc: Enabled bearer , priority 5 [ 1184.111290][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1184.125114][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1184.135488][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1184.143940][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1184.152246][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1184.474380][ T3647] lo speed is unknown, defaulting to 1000 [ 1184.483123][ T3647] gre0 speed is unknown, defaulting to 1000 [ 1184.670772][ T9] tipc: Node number set to 4174374588 [ 1185.168079][ T3664] syzkaller0: entered promiscuous mode [ 1185.182141][ T3664] syzkaller0: entered allmulticast mode [ 1185.254230][ T3647] wg1 speed is unknown, defaulting to 1000 [ 1186.190267][T25793] Bluetooth: hci5: command tx timeout [ 1188.281882][T25793] Bluetooth: hci5: command tx timeout [ 1189.494075][T16560] veth1_to_team: left promiscuous mode [ 1189.513104][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.521280][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.563944][T16560] batadv0: left allmulticast mode [ 1189.565249][ T3688] FAULT_INJECTION: forcing a failure. [ 1189.565249][ T3688] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.581458][T16560] batadv0: left promiscuous mode [ 1189.610334][ T3688] CPU: 1 UID: 0 PID: 3688 Comm: syz.1.8789 Not tainted syzkaller #0 PREEMPT(full) [ 1189.610364][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1189.610377][ T3688] Call Trace: [ 1189.610386][ T3688] [ 1189.610395][ T3688] dump_stack_lvl+0xe8/0x150 [ 1189.610436][ T3688] should_fail_ex+0x412/0x560 [ 1189.610474][ T3688] should_failslab+0xa8/0x100 [ 1189.610505][ T3688] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1189.610531][ T3688] ? __alloc_skb+0x186/0x7d0 [ 1189.610550][ T3688] ? __alloc_skb+0x1d0/0x7d0 [ 1189.610566][ T3688] ? __local_bh_enable_ip+0xd0/0x130 [ 1189.610602][ T3688] __alloc_skb+0x1d0/0x7d0 [ 1189.610628][ T3688] netlink_sendmsg+0x5d4/0xb40 [ 1189.610661][ T3688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.610687][ T3688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1189.610710][ T3688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1189.610739][ T3688] ____sys_sendmsg+0x972/0x9f0 [ 1189.610763][ T3688] ? __might_fault+0xaf/0x130 [ 1189.610793][ T3688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1189.610827][ T3688] ? import_iovec+0x73/0xa0 [ 1189.610856][ T3688] ___sys_sendmsg+0x2a5/0x360 [ 1189.610878][ T3688] ? __lock_acquire+0x6b5/0x2cf0 [ 1189.610913][ T3688] ? __pfx____sys_sendmsg+0x10/0x10 [ 1189.610974][ T3688] ? __fget_files+0x2a/0x420 [ 1189.610994][ T3688] ? __fget_files+0x3a0/0x420 [ 1189.611027][ T3688] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1189.611053][ T3688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1189.611092][ T3688] ? __pfx_ksys_write+0x10/0x10 [ 1189.611136][ T3688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.611160][ T3688] do_syscall_64+0x15f/0xf80 [ 1189.611188][ T3688] ? trace_irq_disable+0x3b/0x140 [ 1189.611216][ T3688] ? clear_bhb_loop+0x40/0x90 [ 1189.611241][ T3688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.611260][ T3688] RIP: 0033:0x7f828d59cdd9 [ 1189.611279][ T3688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.611297][ T3688] RSP: 002b:00007f828e39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.611320][ T3688] RAX: ffffffffffffffda RBX: 00007f828d815fa0 RCX: 00007f828d59cdd9 [ 1189.611334][ T3688] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1189.611345][ T3688] RBP: 00007f828e39f090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.611356][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.611367][ T3688] R13: 00007f828d816038 R14: 00007f828d815fa0 R15: 00007ffd74247b88 [ 1189.611394][ T3688] [ 1189.925703][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8790'. [ 1190.353297][T25793] Bluetooth: hci5: command tx timeout [ 1190.678998][T16560] team_slave_1 (unregistering): left allmulticast mode [ 1190.687171][T16560] team0 (unregistering): Port device team_slave_1 removed [ 1190.704916][T16560] team_slave_0 (unregistering): left allmulticast mode [ 1190.713265][T16560] team0 (unregistering): Port device team_slave_0 removed [ 1190.819054][T16560] – (unregistering): left allmulticast mode [ 1190.825928][T16560] team0 (unregistering): Port device – removed [ 1190.983837][ T3697] bridge0: left promiscuous mode [ 1190.996231][ T3697] bridge0: left allmulticast mode [ 1191.015299][ T3697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.032792][ T3697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1191.090620][ T1502] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1191.333487][T19538] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1191.532860][ T3730] bond2: invalid ARP target 0.0.0.0 specified for addition [ 1191.554063][ T3730] bond2: option arp_ip_target: invalid value (0) [ 1191.565827][ T3730] bond2 (unregistering): Released all slaves [ 1191.614723][ T3647] chnl_net:caif_netlink_parms(): no params data found [ 1191.717478][ T3744] syzkaller0: entered promiscuous mode [ 1191.723343][ T3744] syzkaller0: entered allmulticast mode [ 1191.735076][T31260] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1192.431229][T25793] Bluetooth: hci5: command tx timeout [ 1196.332407][ T3752] batadv_slave_0: entered promiscuous mode [ 1196.380864][ T6463] lec:lec_start_xmit: lec0:No lecd attached [ 1196.425301][T16560] IPVS: stop unused estimator thread 0... [ 1196.481994][T31260] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1196.500514][T31260] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1196.605788][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.613251][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.624661][ T3647] bridge_slave_0: entered allmulticast mode [ 1196.636394][ T3647] bridge_slave_0: entered promiscuous mode [ 1196.653696][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.670260][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.677641][ T3647] bridge_slave_1: entered allmulticast mode [ 1196.679587][ T3818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1196.687988][ T3647] bridge_slave_1: entered promiscuous mode [ 1196.798648][ T3754] batadv_slave_0: left promiscuous mode [ 1196.825277][ T3647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.835406][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1196.874532][ T3813] "syz.4.8802" (3813) uses obsolete ecb(arc4) skcipher [ 1196.875221][ T3647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.935066][T16560] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.946969][T16560] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.959532][T16560] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35511 - 0 [ 1196.978095][T16560] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1197.042326][ T3825] bond0: entered promiscuous mode [ 1197.050686][ T3825] bond0: left promiscuous mode [ 1197.075361][ T3647] team0: Port device team_slave_0 added [ 1197.096279][ T3647] team0: Port device team_slave_1 added [ 1197.108502][T16560] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.118678][T16560] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.140713][T16560] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35511 - 0 [ 1197.161289][T16560] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1197.229392][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.237222][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.240213][ T9804] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1197.263467][ T3647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.287386][T16560] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.298086][T16560] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.309056][T16560] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35511 - 0 [ 1197.325288][T16560] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1197.362885][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.370746][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.397462][ T3647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.453973][T16560] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.467012][T16560] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.480399][T16560] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35511 - 0 [ 1197.491405][T16560] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1197.644033][ T3647] hsr_slave_0: entered promiscuous mode [ 1197.656828][ T3647] hsr_slave_1: entered promiscuous mode [ 1197.852727][ T3843] syzkaller0: entered promiscuous mode [ 1197.858935][ T3843] syzkaller0: entered allmulticast mode [ 1198.072919][ T3846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8812'. [ 1198.164798][ T3850] netlink: 'syz.4.8813': attribute type 10 has an invalid length. [ 1198.188861][ T3850] team0: Port device veth1 removed [ 1198.646732][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8817'. [ 1198.805447][T16560] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1198.943198][T16560] bond0 (unregistering): Released all slaves [ 1198.954799][T16560] bond1 (unregistering): Released all slaves [ 1198.990481][ T3866] macvtap3: entered promiscuous mode [ 1198.996495][ T3866] macvtap3: entered allmulticast mode [ 1199.006376][ T3866] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1199.016880][ T3870] FAULT_INJECTION: forcing a failure. [ 1199.016880][ T3870] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.031113][ T3870] CPU: 1 UID: 0 PID: 3870 Comm: syz.4.8817 Not tainted syzkaller #0 PREEMPT(full) [ 1199.031143][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1199.031155][ T3870] Call Trace: [ 1199.031164][ T3870] [ 1199.031174][ T3870] dump_stack_lvl+0xe8/0x150 [ 1199.031214][ T3870] should_fail_ex+0x412/0x560 [ 1199.031251][ T3870] ? __d_alloc+0x37/0x6f0 [ 1199.031276][ T3870] should_failslab+0xa8/0x100 [ 1199.031306][ T3870] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1199.031342][ T3870] __d_alloc+0x37/0x6f0 [ 1199.031373][ T3870] d_alloc+0x4b/0x190 [ 1199.031395][ T3870] ? lookup_one_qstr_excl+0xc4/0x360 [ 1199.031424][ T3870] lookup_one_qstr_excl+0xd8/0x360 [ 1199.031449][ T3870] ? lookup_noperm_common+0x245/0x430 [ 1199.031476][ T3870] start_dirop+0x5c/0x90 [ 1199.031499][ T3870] simple_start_creating+0xcc/0x110 [ 1199.031525][ T3870] ? __pfx_simple_start_creating+0x10/0x10 [ 1199.031551][ T3870] ? do_raw_spin_unlock+0xf5/0x210 [ 1199.031578][ T3870] ? mntput+0x65/0xc0 [ 1199.031614][ T3870] debugfs_start_creating+0xdb/0x1a0 [ 1199.031646][ T3870] __debugfs_create_file+0x6f/0x400 [ 1199.031680][ T3870] debugfs_create_file_full+0x3f/0x60 [ 1199.031713][ T3870] ref_tracker_dir_debugfs+0x197/0x360 [ 1199.031738][ T3870] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1199.031794][ T3870] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1199.031821][ T3870] ? alloc_netdev_mqs+0xa8/0x1210 [ 1199.031851][ T3870] ? __raw_spin_lock_init+0x45/0x100 [ 1199.031887][ T3870] alloc_netdev_mqs+0x274/0x1210 [ 1199.031920][ T3870] ? __pfx_br_dev_setup+0x10/0x10 [ 1199.031955][ T3870] br_add_bridge+0x39/0xf0 [ 1199.031981][ T3870] br_ioctl_stub+0x588/0xd60 [ 1199.032011][ T3870] ? do_vfs_ioctl+0x1166/0x1530 [ 1199.032038][ T3870] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1199.032064][ T3870] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1199.032097][ T3870] ? sock_ioctl+0x4fa/0x7f0 [ 1199.032132][ T3870] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1199.032180][ T3870] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1199.032204][ T3870] sock_ioctl+0x523/0x7f0 [ 1199.032234][ T3870] ? __pfx_sock_ioctl+0x10/0x10 [ 1199.032262][ T3870] ? __fget_files+0x2a/0x420 [ 1199.032282][ T3870] ? __fget_files+0x3a0/0x420 [ 1199.032303][ T3870] ? __fget_files+0x2a/0x420 [ 1199.032329][ T3870] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1199.032358][ T3870] ? __pfx_sock_ioctl+0x10/0x10 [ 1199.032385][ T3870] __se_sys_ioctl+0xfc/0x170 [ 1199.032412][ T3870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.032436][ T3870] do_syscall_64+0x15f/0xf80 [ 1199.032464][ T3870] ? trace_irq_disable+0x3b/0x140 [ 1199.032492][ T3870] ? clear_bhb_loop+0x40/0x90 [ 1199.032519][ T3870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.032540][ T3870] RIP: 0033:0x7f07e099cdd9 [ 1199.032561][ T3870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.032580][ T3870] RSP: 002b:00007f07e18e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.032604][ T3870] RAX: ffffffffffffffda RBX: 00007f07e0c16090 RCX: 00007f07e099cdd9 [ 1199.032620][ T3870] RDX: 0000200000000000 RSI: 00000000000089a0 RDI: 0000000000000016 [ 1199.032634][ T3870] RBP: 00007f07e18e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.032647][ T3870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.032660][ T3870] R13: 00007f07e0c16128 R14: 00007f07e0c16090 R15: 00007ffc8c20f078 [ 1199.032698][ T3870] [ 1199.433446][T16560] tipc: Disabling bearer [ 1199.476331][T16560] tipc: Left network mode [ 1200.134155][ T3891] syzkaller0: entered promiscuous mode [ 1200.143923][ T3891] syzkaller0: entered allmulticast mode [ 1200.274514][ T3912] netlink: 'syz.4.8825': attribute type 13 has an invalid length. [ 1200.559975][ T3917] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1200.567115][ T9] IPVS: starting estimator thread 0... [ 1200.669916][ T3919] IPVS: using max 26 ests per chain, 62400 per kthread [ 1200.916978][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1201.306531][ T3926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1202.036202][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 1202.044308][ C0] lec:lec_tx_timeout: lec0 [ 1204.821512][T19538] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1204.915051][ T3931] Unsupported ieee802154 address type: 0 [ 1204.961507][ T9804] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1205.332638][ T3952] ip6tnl0: Caught tx_queue_len zero misconfig [ 1205.644903][ T3647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1205.673617][ T3647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1205.682731][ T3647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1205.722958][ T3647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1205.738152][ T3647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1205.762193][ T3647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1205.774543][ T3647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1205.803359][ T3647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1206.036372][ T3975] syzkaller0: entered promiscuous mode [ 1206.053547][ T3975] syzkaller0: entered allmulticast mode [ 1206.342908][ T3989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.353504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.383682][T16560] hsr_slave_0: left promiscuous mode [ 1206.391851][T16560] hsr_slave_1: left promiscuous mode [ 1206.432234][T16560] batadv0: left allmulticast mode [ 1206.437542][T16560] batadv0: left promiscuous mode [ 1206.445066][T16560] veth1_macvtap: left promiscuous mode [ 1206.455233][T16560] veth0_macvtap: left promiscuous mode [ 1207.038607][ T3982] lo speed is unknown, defaulting to 1000 [ 1207.071601][ T3982] gre0 speed is unknown, defaulting to 1000 [ 1207.154511][ T3647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.242142][ T3647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.308407][T31259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.315710][T31259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.346928][T31259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.354250][T31259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.368962][ T4009] xt_hashlimit: size too large, truncated to 1048576 [ 1207.890637][ T3982] wg1 speed is unknown, defaulting to 1000 [ 1208.074057][T16560] vlan2: left allmulticast mode [ 1208.095312][T16560] vlan2: left promiscuous mode [ 1208.105793][T16560] bridge0: port 3(vlan2) entered disabled state [ 1208.306018][T16560] bridge_slave_1: left allmulticast mode [ 1208.313769][T16560] bridge_slave_1: left promiscuous mode [ 1208.320551][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.333586][T16560] bridge_slave_0: left allmulticast mode [ 1208.339510][T16560] bridge_slave_0: left promiscuous mode [ 1208.346027][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.645987][T16560] batman_adv: batadv0: Removing interface: vlan5 [ 1209.144624][T16560] bond1 (unregistering): Released all slaves [ 1209.166507][T16560] bond0 (unregistering): Released all slaves [ 1209.183634][T16560] bond2 (unregistering): Released all slaves [ 1209.198542][T16560] bond3 (unregistering): Released all slaves [ 1209.225430][T16560] bond4 (unregistering): Released all slaves [ 1209.241846][T16560] bond5 (unregistering): Released all slaves [ 1209.257477][T16560] bond6 (unregistering): (slave veth19): Releasing active interface [ 1209.275780][T16560] bond6 (unregistering): (slave veth21): Releasing active interface [ 1209.284765][T16560] bond6 (unregistering): Released all slaves [ 1209.299269][T16560] bond7 (unregistering): Released all slaves [ 1209.376000][ T3647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.470950][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1209.488785][T16560] tipc: Disabling bearer [ 1209.501584][T16560] tipc: Left network mode [ 1209.629901][ T3647] veth0_vlan: entered promiscuous mode [ 1209.657536][ T4046] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.8856'. [ 1209.678909][ T4046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8856'. [ 1209.701793][ T3647] veth1_vlan: entered promiscuous mode [ 1209.719290][ T4046] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1209.779902][ T4046] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1209.868548][ T3647] veth0_macvtap: entered promiscuous mode [ 1209.978390][ T3647] veth1_macvtap: entered promiscuous mode [ 1210.106464][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.162865][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.293191][T31255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.294953][ T4061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8860'. [ 1210.337826][ T4061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8860'. [ 1210.393485][T31255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.423414][T31255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.514320][T31255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.997644][T31260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.023725][T31260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.042379][ T4074] syzkaller0: entered promiscuous mode [ 1211.055556][ T4074] syzkaller0: entered allmulticast mode [ 1211.448303][T16559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.463260][T16559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.767172][T16560] hsr_slave_0: left promiscuous mode [ 1211.800391][T16560] hsr_slave_1: left promiscuous mode [ 1211.812770][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.830734][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.861659][ T4095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8872'. [ 1211.901543][ T4095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8872'. [ 1212.286142][T16560] team0 (unregistering): Port device team_slave_1 removed [ 1212.304447][T16560] team0 (unregistering): Port device team_slave_0 removed [ 1212.678854][ T4111] syzkaller0: entered promiscuous mode [ 1212.695864][ T4111] syzkaller0: entered allmulticast mode [ 1212.972733][ T4118] netlink: 540 bytes leftover after parsing attributes in process `syz.3.8881'. [ 1212.997558][T16560] IPVS: stop unused estimator thread 0... [ 1213.140898][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1213.152230][ T4127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1213.161710][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1213.174987][ T4127] ip6t_REJECT: ECHOREPLY is not supported [ 1213.537769][ T4144] xt_hashlimit: size too large, truncated to 1048576 [ 1213.623830][ T4148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1213.974698][ T4158] netlink: 'syz.0.8898': attribute type 3 has an invalid length. [ 1214.448365][ T4182] xt_hashlimit: size too large, truncated to 1048576 [ 1214.491649][ T4183] macvtap3: entered promiscuous mode [ 1214.504240][ T4183] macvtap3: entered allmulticast mode [ 1214.530169][ T4183] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1214.585222][ T4188] FAULT_INJECTION: forcing a failure. [ 1214.585222][ T4188] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.617208][ T4188] CPU: 1 UID: 0 PID: 4188 Comm: syz.2.8911 Not tainted syzkaller #0 PREEMPT(full) [ 1214.617243][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1214.617257][ T4188] Call Trace: [ 1214.617266][ T4188] [ 1214.617276][ T4188] dump_stack_lvl+0xe8/0x150 [ 1214.617318][ T4188] should_fail_ex+0x412/0x560 [ 1214.617357][ T4188] should_failslab+0xa8/0x100 [ 1214.617389][ T4188] __kmalloc_cache_noprof+0x88/0x660 [ 1214.617415][ T4188] ? __asan_memset+0x22/0x50 [ 1214.617436][ T4188] ? alloc_netdev_mqs+0xc51/0x1210 [ 1214.617462][ T4188] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1214.617493][ T4188] alloc_netdev_mqs+0xc51/0x1210 [ 1214.617528][ T4188] br_add_bridge+0x39/0xf0 [ 1214.617555][ T4188] br_ioctl_stub+0x588/0xd60 [ 1214.617586][ T4188] ? do_vfs_ioctl+0x1166/0x1530 [ 1214.617614][ T4188] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1214.617640][ T4188] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1214.617673][ T4188] ? sock_ioctl+0x4fa/0x7f0 [ 1214.617707][ T4188] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1214.617755][ T4188] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1214.617780][ T4188] sock_ioctl+0x523/0x7f0 [ 1214.617809][ T4188] ? __pfx_sock_ioctl+0x10/0x10 [ 1214.617835][ T4188] ? __fget_files+0x2a/0x420 [ 1214.617866][ T4188] ? __fget_files+0x3a0/0x420 [ 1214.617886][ T4188] ? __fget_files+0x2a/0x420 [ 1214.617911][ T4188] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1214.617939][ T4188] ? __pfx_sock_ioctl+0x10/0x10 [ 1214.617964][ T4188] __se_sys_ioctl+0xfc/0x170 [ 1214.617990][ T4188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.618014][ T4188] do_syscall_64+0x15f/0xf80 [ 1214.618042][ T4188] ? trace_irq_disable+0x3b/0x140 [ 1214.618068][ T4188] ? clear_bhb_loop+0x40/0x90 [ 1214.618094][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.618115][ T4188] RIP: 0033:0x7f236919cdd9 [ 1214.618136][ T4188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.618155][ T4188] RSP: 002b:00007f236a06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1214.618180][ T4188] RAX: ffffffffffffffda RBX: 00007f2369416090 RCX: 00007f236919cdd9 [ 1214.618201][ T4188] RDX: 0000200000000000 RSI: 00000000000089a0 RDI: 0000000000000016 [ 1214.618215][ T4188] RBP: 00007f236a06d090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.618228][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.618241][ T4188] R13: 00007f2369416128 R14: 00007f2369416090 R15: 00007ffdd0c3c658 [ 1214.618278][ T4188] [ 1215.270207][ T4204] __nla_validate_parse: 6 callbacks suppressed [ 1215.270230][ T4204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8916'. [ 1215.311298][ T4204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8916'. [ 1215.519998][ T4210] syzkaller0: entered promiscuous mode [ 1215.525907][ T4210] syzkaller0: entered allmulticast mode [ 1215.551778][ T4219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1215.562283][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1215.571392][ T4219] netlink: 580 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1215.612711][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1215.622698][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8923'. [ 1215.643186][ T4223] batadv0: entered promiscuous mode [ 1215.648903][ T4223] macvtap1: entered promiscuous mode [ 1215.657157][ T4223] macvtap1: entered allmulticast mode [ 1215.664188][ T4223] batadv0: entered allmulticast mode [ 1215.672056][ T4223] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1215.685343][ T4223] FAULT_INJECTION: forcing a failure. [ 1215.685343][ T4223] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.720551][ T4223] CPU: 1 UID: 0 PID: 4223 Comm: syz.3.8923 Not tainted syzkaller #0 PREEMPT(full) [ 1215.720582][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1215.720595][ T4223] Call Trace: [ 1215.720603][ T4223] [ 1215.720613][ T4223] dump_stack_lvl+0xe8/0x150 [ 1215.720653][ T4223] should_fail_ex+0x412/0x560 [ 1215.720687][ T4223] should_failslab+0xa8/0x100 [ 1215.720706][ T4223] __kmalloc_cache_noprof+0x88/0x660 [ 1215.720722][ T4223] ? __asan_memset+0x22/0x50 [ 1215.720735][ T4223] ? alloc_netdev_mqs+0xc51/0x1210 [ 1215.720751][ T4223] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1215.720768][ T4223] alloc_netdev_mqs+0xc51/0x1210 [ 1215.720788][ T4223] br_add_bridge+0x39/0xf0 [ 1215.720804][ T4223] br_ioctl_stub+0x588/0xd60 [ 1215.720821][ T4223] ? do_vfs_ioctl+0x1166/0x1530 [ 1215.720840][ T4223] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1215.720855][ T4223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1215.720875][ T4223] ? sock_ioctl+0x4fa/0x7f0 [ 1215.720894][ T4223] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1215.720921][ T4223] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1215.720935][ T4223] sock_ioctl+0x523/0x7f0 [ 1215.720952][ T4223] ? __pfx_sock_ioctl+0x10/0x10 [ 1215.720968][ T4223] ? __fget_files+0x2a/0x420 [ 1215.720980][ T4223] ? __fget_files+0x3a0/0x420 [ 1215.720993][ T4223] ? __fget_files+0x2a/0x420 [ 1215.721007][ T4223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1215.721024][ T4223] ? __pfx_sock_ioctl+0x10/0x10 [ 1215.721039][ T4223] __se_sys_ioctl+0xfc/0x170 [ 1215.721055][ T4223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.721070][ T4223] do_syscall_64+0x15f/0xf80 [ 1215.721094][ T4223] ? trace_irq_disable+0x3b/0x140 [ 1215.721115][ T4223] ? clear_bhb_loop+0x40/0x90 [ 1215.721140][ T4223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.721160][ T4223] RIP: 0033:0x7fe6a039cdd9 [ 1215.721182][ T4223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.721195][ T4223] RSP: 002b:00007fe6a1323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1215.721210][ T4223] RAX: ffffffffffffffda RBX: 00007fe6a0615fa0 RCX: 00007fe6a039cdd9 [ 1215.721219][ T4223] RDX: 0000200000000000 RSI: 00000000000089a0 RDI: 0000000000000016 [ 1215.721227][ T4223] RBP: 00007fe6a1323090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.721235][ T4223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1215.721243][ T4223] R13: 00007fe6a0616038 R14: 00007fe6a0615fa0 R15: 00007ffe5e9d2b48 [ 1215.721269][ T4223] [ 1220.567024][ T4231] bond0: entered promiscuous mode [ 1220.580010][ T4231] bond_slave_0: entered promiscuous mode [ 1220.587469][ T4231] bond_slave_1: entered promiscuous mode [ 1220.602435][ T4231] bond0: left promiscuous mode [ 1220.607315][ T4231] bond_slave_0: left promiscuous mode [ 1220.617304][ T4231] bond_slave_1: left promiscuous mode [ 1220.743063][ T4243] xt_hashlimit: size too large, truncated to 1048576 [ 1220.835346][ T4249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8930'. [ 1220.881745][ T4250] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1220.899014][ T4250] bond1 (unregistering): Released all slaves [ 1220.925143][ T4255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8930'. [ 1221.264027][ T4247] netlink: zone id is out of range [ 1221.289789][ T4247] netlink: zone id is out of range [ 1221.306554][ T4247] netlink: zone id is out of range [ 1221.312774][ T4247] netlink: zone id is out of range [ 1221.331276][ T4247] netlink: zone id is out of range [ 1221.353221][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8938'. [ 1221.357019][ T4247] netlink: zone id is out of range [ 1221.399566][ T4247] netlink: zone id is out of range [ 1221.410369][ T4267] macvtap4: entered promiscuous mode [ 1221.417469][ T4247] netlink: zone id is out of range [ 1221.426918][ T4267] macvtap4: entered allmulticast mode [ 1221.438711][ T4247] netlink: zone id is out of range [ 1221.442842][ T4267] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1221.463533][ T4268] FAULT_INJECTION: forcing a failure. [ 1221.463533][ T4268] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.464772][ T4247] netlink: zone id is out of range [ 1221.482733][ T4268] CPU: 1 UID: 0 PID: 4268 Comm: syz.4.8938 Not tainted syzkaller #0 PREEMPT(full) [ 1221.482763][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.482776][ T4268] Call Trace: [ 1221.482786][ T4268] [ 1221.482795][ T4268] dump_stack_lvl+0xe8/0x150 [ 1221.482836][ T4268] should_fail_ex+0x412/0x560 [ 1221.482887][ T4268] should_failslab+0xa8/0x100 [ 1221.482919][ T4268] __kvmalloc_node_noprof+0x178/0x8a0 [ 1221.482948][ T4268] ? alloc_netdev_mqs+0xce1/0x1210 [ 1221.482981][ T4268] ? alloc_netdev_mqs+0xc51/0x1210 [ 1221.483014][ T4268] alloc_netdev_mqs+0xce1/0x1210 [ 1221.483049][ T4268] br_add_bridge+0x39/0xf0 [ 1221.483076][ T4268] br_ioctl_stub+0x588/0xd60 [ 1221.483106][ T4268] ? do_vfs_ioctl+0x1166/0x1530 [ 1221.483133][ T4268] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1221.483159][ T4268] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1221.483190][ T4268] ? sock_ioctl+0x4fa/0x7f0 [ 1221.483224][ T4268] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1221.483271][ T4268] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1221.483293][ T4268] sock_ioctl+0x523/0x7f0 [ 1221.483322][ T4268] ? __pfx_sock_ioctl+0x10/0x10 [ 1221.483347][ T4268] ? __fget_files+0x2a/0x420 [ 1221.483368][ T4268] ? __fget_files+0x3a0/0x420 [ 1221.483389][ T4268] ? __fget_files+0x2a/0x420 [ 1221.483414][ T4268] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1221.483442][ T4268] ? __pfx_sock_ioctl+0x10/0x10 [ 1221.483469][ T4268] __se_sys_ioctl+0xfc/0x170 [ 1221.483496][ T4268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.483519][ T4268] do_syscall_64+0x15f/0xf80 [ 1221.483546][ T4268] ? trace_irq_disable+0x3b/0x140 [ 1221.483574][ T4268] ? clear_bhb_loop+0x40/0x90 [ 1221.483600][ T4268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.483621][ T4268] RIP: 0033:0x7f07e099cdd9 [ 1221.483642][ T4268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.483661][ T4268] RSP: 002b:00007f07e18e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.483686][ T4268] RAX: ffffffffffffffda RBX: 00007f07e0c16090 RCX: 00007f07e099cdd9 [ 1221.483702][ T4268] RDX: 0000200000000000 RSI: 00000000000089a0 RDI: 0000000000000016 [ 1221.483716][ T4268] RBP: 00007f07e18e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.483730][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.483742][ T4268] R13: 00007f07e0c16128 R14: 00007f07e0c16090 R15: 00007ffc8c20f078 [ 1221.483780][ T4268] [ 1221.825693][ T4282] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8942'. [ 1222.047933][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8946'. [ 1222.072656][ T4295] macvtap4: entered promiscuous mode [ 1222.078125][ T4295] syz_tun: entered promiscuous mode [ 1222.085759][ T4295] macvtap4: entered allmulticast mode [ 1222.092523][ T4295] syz_tun: entered allmulticast mode [ 1222.103867][ T4298] xt_hashlimit: size too large, truncated to 1048576 [ 1222.111881][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8946'. [ 1222.268367][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8949'. [ 1222.299080][ T4304] macvlan2: entered allmulticast mode [ 1222.304867][ T4304] hsr0: entered allmulticast mode [ 1222.310612][ T4304] hsr_slave_0: entered allmulticast mode [ 1222.316520][ T4304] hsr_slave_1: entered allmulticast mode [ 1222.478485][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8952'. [ 1222.495192][ T4315] FAULT_INJECTION: forcing a failure. [ 1222.495192][ T4315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.508565][ T4315] CPU: 0 UID: 0 PID: 4315 Comm: syz.2.8952 Not tainted syzkaller #0 PREEMPT(full) [ 1222.508594][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.508606][ T4315] Call Trace: [ 1222.508614][ T4315] [ 1222.508623][ T4315] dump_stack_lvl+0xe8/0x150 [ 1222.508664][ T4315] should_fail_ex+0x412/0x560 [ 1222.508703][ T4315] _copy_from_user+0x2d/0xb0 [ 1222.508730][ T4315] kstrtouint_from_user+0xd6/0x180 [ 1222.508773][ T4315] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1222.508823][ T4315] proc_fail_nth_write+0x8e/0x210 [ 1222.508848][ T4315] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1222.508878][ T4315] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1222.508904][ T4315] vfs_write+0x29a/0xb90 [ 1222.508942][ T4315] ? __pfx_vfs_write+0x10/0x10 [ 1222.508971][ T4315] ? __fget_files+0x2a/0x420 [ 1222.508998][ T4315] ? __fget_files+0x3a0/0x420 [ 1222.509019][ T4315] ? __fget_files+0x2a/0x420 [ 1222.509049][ T4315] ksys_write+0x150/0x270 [ 1222.509079][ T4315] ? __pfx_ksys_write+0x10/0x10 [ 1222.509114][ T4315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.509139][ T4315] do_syscall_64+0x15f/0xf80 [ 1222.509166][ T4315] ? trace_irq_disable+0x3b/0x140 [ 1222.509194][ T4315] ? clear_bhb_loop+0x40/0x90 [ 1222.509221][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.509239][ T4315] RIP: 0033:0x7f236915d60e [ 1222.509259][ T4315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1222.509278][ T4315] RSP: 002b:00007f236a06cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1222.509301][ T4315] RAX: ffffffffffffffda RBX: 00007f236a06d6c0 RCX: 00007f236915d60e [ 1222.509316][ T4315] RDX: 0000000000000001 RSI: 00007f236a06d0a0 RDI: 0000000000000016 [ 1222.509329][ T4315] RBP: 00007f236a06d090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.509342][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1222.509354][ T4315] R13: 00007f2369416128 R14: 00007f2369416090 R15: 00007ffdd0c3c658 [ 1222.509390][ T4315] [ 1224.907045][ T4286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1225.104364][ T4325] xt_hashlimit: size too large, truncated to 1048576 [ 1225.383279][ T4340] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8962'. [ 1225.450176][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8963'. [ 1225.480131][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1226.017523][ T4371] __nla_validate_parse: 1 callbacks suppressed [ 1226.017545][ T4371] netlink: 1012 bytes leftover after parsing attributes in process `syz.0.8971'. [ 1226.277114][ T4375] syzkaller0: entered promiscuous mode [ 1226.292118][ T4375] syzkaller0: entered allmulticast mode [ 1226.957920][ T4396] ip6erspan0: entered allmulticast mode [ 1226.999593][ T4393] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input28 [ 1227.093748][ T4290] udevd[4290]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1227.424494][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8990'. [ 1227.444648][ T4416] FAULT_INJECTION: forcing a failure. [ 1227.444648][ T4416] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.477872][ T4416] CPU: 0 UID: 0 PID: 4416 Comm: syz.3.8990 Not tainted syzkaller #0 PREEMPT(full) [ 1227.477903][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1227.477917][ T4416] Call Trace: [ 1227.477926][ T4416] [ 1227.477936][ T4416] dump_stack_lvl+0xe8/0x150 [ 1227.477976][ T4416] should_fail_ex+0x412/0x560 [ 1227.478017][ T4416] should_failslab+0xa8/0x100 [ 1227.478045][ T4416] ? __kernfs_new_node+0xea/0x970 [ 1227.478070][ T4416] kmem_cache_alloc_noprof+0x87/0x650 [ 1227.478106][ T4416] __kernfs_new_node+0xea/0x970 [ 1227.478130][ T4416] ? __lock_acquire+0x6b5/0x2cf0 [ 1227.478167][ T4416] ? __pfx___kernfs_new_node+0x10/0x10 [ 1227.478198][ T4416] ? kernfs_root+0x1c/0x230 [ 1227.478229][ T4416] ? kernfs_root+0x1c/0x230 [ 1227.478252][ T4416] ? kernfs_root+0x1c/0x230 [ 1227.478271][ T4416] ? kernfs_root+0x1c/0x230 [ 1227.478300][ T4416] kernfs_new_node+0x102/0x210 [ 1227.478331][ T4416] kernfs_create_dir_ns+0x44/0x130 [ 1227.478361][ T4416] sysfs_create_dir_ns+0x12f/0x2a0 [ 1227.478388][ T4416] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1227.478412][ T4416] ? do_raw_spin_unlock+0xf5/0x210 [ 1227.478443][ T4416] kobject_add_internal+0x62b/0xd00 [ 1227.478475][ T4416] kobject_add+0x163/0x240 [ 1227.478513][ T4416] ? __pfx_kobject_add+0x10/0x10 [ 1227.478552][ T4416] ? get_device_parent+0x366/0x3a0 [ 1227.478587][ T4416] device_add+0x408/0xbb0 [ 1227.478616][ T4416] ? device_initialize+0x26a/0x460 [ 1227.478648][ T4416] netdev_register_kobject+0x178/0x310 [ 1227.478683][ T4416] register_netdevice+0x1456/0x1ec0 [ 1227.478728][ T4416] ? __pfx_register_netdevice+0x10/0x10 [ 1227.478753][ T4416] ? __hw_addr_insert+0x205/0x230 [ 1227.478775][ T4416] ? dev_addr_mod+0x174/0x350 [ 1227.478813][ T4416] ? dev_addr_mod+0x1ba/0x350 [ 1227.478842][ T4416] macvlan_common_newlink+0x127c/0x19e0 [ 1227.478874][ T4416] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1227.478914][ T4416] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1227.478951][ T4416] ? __pfx_macvlan_newlink+0x10/0x10 [ 1227.478974][ T4416] rtnl_newlink_create+0x329/0xb70 [ 1227.478999][ T4416] ? __pfx___nla_validate_parse+0x10/0x10 [ 1227.479035][ T4416] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1227.479062][ T4416] ? __pfx___mutex_lock+0x10/0x10 [ 1227.479106][ T4416] ? ns_capable+0x89/0xe0 [ 1227.479141][ T4416] rtnl_newlink+0x166a/0x1bb0 [ 1227.479180][ T4416] ? __pfx_rtnl_newlink+0x10/0x10 [ 1227.479198][ T4416] ? do_syscall_64+0x15f/0xf80 [ 1227.479225][ T4416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.479290][ T4416] ? kasan_quarantine_put+0xbb/0x1f0 [ 1227.479314][ T4416] ? lockdep_hardirqs_on+0x7a/0x110 [ 1227.479346][ T4416] ? nlmon_xmit+0xb0/0x100 [ 1227.479374][ T4416] ? kmem_cache_free+0x182/0x650 [ 1227.479414][ T4416] ? __lock_acquire+0x6b5/0x2cf0 [ 1227.479450][ T4416] ? __dev_queue_xmit+0x2b6/0x3950 [ 1227.479479][ T4416] ? __local_bh_enable_ip+0xd0/0x130 [ 1227.479509][ T4416] ? lockdep_hardirqs_on+0x7a/0x110 [ 1227.479535][ T4416] ? __dev_queue_xmit+0x2b6/0x3950 [ 1227.479557][ T4416] ? __local_bh_enable_ip+0xd0/0x130 [ 1227.479585][ T4416] ? __dev_queue_xmit+0x2b6/0x3950 [ 1227.479618][ T4416] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1227.479663][ T4416] ? __pfx_rtnl_newlink+0x10/0x10 [ 1227.479682][ T4416] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1227.479717][ T4416] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1227.479748][ T4416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1227.479777][ T4416] ? ref_tracker_free+0x693/0x840 [ 1227.479812][ T4416] ? __pfx_ref_tracker_free+0x10/0x10 [ 1227.479848][ T4416] netlink_rcv_skb+0x232/0x4b0 [ 1227.479873][ T4416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1227.479907][ T4416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1227.479945][ T4416] ? netlink_deliver_tap+0x2e/0x1b0 [ 1227.479967][ T4416] ? netlink_deliver_tap+0x2e/0x1b0 [ 1227.479996][ T4416] netlink_unicast+0x75c/0x8e0 [ 1227.480041][ T4416] netlink_sendmsg+0x813/0xb40 [ 1227.480074][ T4416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.480102][ T4416] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1227.480125][ T4416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1227.480154][ T4416] ____sys_sendmsg+0x972/0x9f0 [ 1227.480178][ T4416] ? __might_fault+0xaf/0x130 [ 1227.480209][ T4416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.480244][ T4416] ? import_iovec+0x73/0xa0 [ 1227.480274][ T4416] ___sys_sendmsg+0x2a5/0x360 [ 1227.480296][ T4416] ? __lock_acquire+0x6b5/0x2cf0 [ 1227.480331][ T4416] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.480362][ T4416] ? kstrtouint+0x6e/0xe0 [ 1227.480423][ T4416] ? __fget_files+0x2a/0x420 [ 1227.480445][ T4416] ? __fget_files+0x3a0/0x420 [ 1227.480479][ T4416] __sys_sendmmsg+0x27c/0x4e0 [ 1227.480510][ T4416] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1227.480532][ T4416] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1227.480592][ T4416] ? ksys_write+0x242/0x270 [ 1227.480621][ T4416] ? __pfx_ksys_write+0x10/0x10 [ 1227.480654][ T4416] __x64_sys_sendmmsg+0xa0/0xc0 [ 1227.480679][ T4416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.480702][ T4416] do_syscall_64+0x15f/0xf80 [ 1227.480728][ T4416] ? trace_irq_disable+0x3b/0x140 [ 1227.480757][ T4416] ? clear_bhb_loop+0x40/0x90 [ 1227.480783][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.480813][ T4416] RIP: 0033:0x7fe6a039cdd9 [ 1227.480835][ T4416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.480854][ T4416] RSP: 002b:00007fe6a1323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1227.480878][ T4416] RAX: ffffffffffffffda RBX: 00007fe6a0615fa0 RCX: 00007fe6a039cdd9 [ 1227.480895][ T4416] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000c [ 1227.480909][ T4416] RBP: 00007fe6a1323090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.480923][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.480937][ T4416] R13: 00007fe6a0616038 R14: 00007fe6a0615fa0 R15: 00007ffe5e9d2b48 [ 1227.480975][ T4416] [ 1228.080162][ T4416] kobject: kobject_add_internal failed for macvlan2 (error: -12 parent: net) [ 1228.284692][ T4431] net_ratelimit: 7 callbacks suppressed [ 1228.284714][ T4431] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1228.612388][ T4456] xt_hashlimit: size too large, truncated to 1048576 [ 1229.469900][T25793] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1229.478306][ T3648] Bluetooth: hci0: command 0x0406 tx timeout [ 1229.573727][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9005'. [ 1229.584301][ T4472] FAULT_INJECTION: forcing a failure. [ 1229.584301][ T4472] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.598027][ T4472] CPU: 1 UID: 0 PID: 4472 Comm: syz.3.9005 Not tainted syzkaller #0 PREEMPT(full) [ 1229.598057][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1229.598069][ T4472] Call Trace: [ 1229.598078][ T4472] [ 1229.598087][ T4472] dump_stack_lvl+0xe8/0x150 [ 1229.598126][ T4472] should_fail_ex+0x412/0x560 [ 1229.598165][ T4472] should_failslab+0xa8/0x100 [ 1229.598196][ T4472] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1229.598226][ T4472] ? __kernfs_new_node+0xaa/0x970 [ 1229.598256][ T4472] kstrdup+0x42/0x100 [ 1229.598288][ T4472] __kernfs_new_node+0xaa/0x970 [ 1229.598311][ T4472] ? __lock_acquire+0x6b5/0x2cf0 [ 1229.598347][ T4472] ? __pfx___kernfs_new_node+0x10/0x10 [ 1229.598373][ T4472] ? kernfs_root+0x1c/0x230 [ 1229.598404][ T4472] ? kernfs_root+0x1c/0x230 [ 1229.598427][ T4472] ? kernfs_root+0x1c/0x230 [ 1229.598447][ T4472] ? kernfs_root+0x1c/0x230 [ 1229.598481][ T4472] kernfs_new_node+0x102/0x210 [ 1229.598512][ T4472] kernfs_create_dir_ns+0x44/0x130 [ 1229.598543][ T4472] sysfs_create_dir_ns+0x12f/0x2a0 [ 1229.598570][ T4472] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1229.598594][ T4472] ? do_raw_spin_unlock+0xf5/0x210 [ 1229.598626][ T4472] kobject_add_internal+0x62b/0xd00 [ 1229.598658][ T4472] kobject_add+0x163/0x240 [ 1229.598696][ T4472] ? __pfx_kobject_add+0x10/0x10 [ 1229.598735][ T4472] ? get_device_parent+0x366/0x3a0 [ 1229.598770][ T4472] device_add+0x408/0xbb0 [ 1229.598806][ T4472] ? device_initialize+0x26a/0x460 [ 1229.598837][ T4472] netdev_register_kobject+0x178/0x310 [ 1229.598872][ T4472] register_netdevice+0x1456/0x1ec0 [ 1229.598916][ T4472] ? __pfx_register_netdevice+0x10/0x10 [ 1229.598941][ T4472] ? __hw_addr_insert+0x205/0x230 [ 1229.598963][ T4472] ? dev_addr_mod+0x174/0x350 [ 1229.598992][ T4472] ? dev_addr_mod+0x1ba/0x350 [ 1229.599022][ T4472] macvlan_common_newlink+0x127c/0x19e0 [ 1229.599051][ T4472] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1229.599091][ T4472] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1229.599127][ T4472] ? __pfx_macvlan_newlink+0x10/0x10 [ 1229.599151][ T4472] rtnl_newlink_create+0x329/0xb70 [ 1229.599175][ T4472] ? __pfx___nla_validate_parse+0x10/0x10 [ 1229.599212][ T4472] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1229.599239][ T4472] ? __pfx___mutex_lock+0x10/0x10 [ 1229.599282][ T4472] ? ns_capable+0x89/0xe0 [ 1229.599317][ T4472] rtnl_newlink+0x166a/0x1bb0 [ 1229.599356][ T4472] ? __pfx_rtnl_newlink+0x10/0x10 [ 1229.599374][ T4472] ? do_syscall_64+0x15f/0xf80 [ 1229.599400][ T4472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.599463][ T4472] ? kasan_quarantine_put+0xbb/0x1f0 [ 1229.599487][ T4472] ? lockdep_hardirqs_on+0x7a/0x110 [ 1229.599520][ T4472] ? nlmon_xmit+0xb0/0x100 [ 1229.599548][ T4472] ? kmem_cache_free+0x182/0x650 [ 1229.599587][ T4472] ? __lock_acquire+0x6b5/0x2cf0 [ 1229.599623][ T4472] ? __dev_queue_xmit+0x2b6/0x3950 [ 1229.599649][ T4472] ? __local_bh_enable_ip+0xd0/0x130 [ 1229.599680][ T4472] ? lockdep_hardirqs_on+0x7a/0x110 [ 1229.599705][ T4472] ? __dev_queue_xmit+0x2b6/0x3950 [ 1229.599726][ T4472] ? __local_bh_enable_ip+0xd0/0x130 [ 1229.599753][ T4472] ? __dev_queue_xmit+0x2b6/0x3950 [ 1229.599790][ T4472] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1229.599838][ T4472] ? __pfx_rtnl_newlink+0x10/0x10 [ 1229.599858][ T4472] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1229.599893][ T4472] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1229.599922][ T4472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1229.599951][ T4472] ? ref_tracker_free+0x693/0x840 [ 1229.599978][ T4472] ? __pfx_ref_tracker_free+0x10/0x10 [ 1229.600013][ T4472] netlink_rcv_skb+0x232/0x4b0 [ 1229.600037][ T4472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1229.600070][ T4472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1229.600107][ T4472] ? netlink_deliver_tap+0x2e/0x1b0 [ 1229.600128][ T4472] ? netlink_deliver_tap+0x2e/0x1b0 [ 1229.600157][ T4472] netlink_unicast+0x75c/0x8e0 [ 1229.600202][ T4472] netlink_sendmsg+0x813/0xb40 [ 1229.600235][ T4472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1229.600261][ T4472] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1229.600286][ T4472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1229.600315][ T4472] ____sys_sendmsg+0x972/0x9f0 [ 1229.600339][ T4472] ? __might_fault+0xaf/0x130 [ 1229.600370][ T4472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1229.600404][ T4472] ? import_iovec+0x73/0xa0 [ 1229.600433][ T4472] ___sys_sendmsg+0x2a5/0x360 [ 1229.600455][ T4472] ? __lock_acquire+0x6b5/0x2cf0 [ 1229.600489][ T4472] ? __pfx____sys_sendmsg+0x10/0x10 [ 1229.600518][ T4472] ? kstrtouint+0x6e/0xe0 [ 1229.600577][ T4472] ? __fget_files+0x2a/0x420 [ 1229.600598][ T4472] ? __fget_files+0x3a0/0x420 [ 1229.600632][ T4472] __sys_sendmmsg+0x27c/0x4e0 [ 1229.600663][ T4472] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1229.600684][ T4472] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1229.600743][ T4472] ? ksys_write+0x242/0x270 [ 1229.600772][ T4472] ? __pfx_ksys_write+0x10/0x10 [ 1229.600814][ T4472] __x64_sys_sendmmsg+0xa0/0xc0 [ 1229.600838][ T4472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.600861][ T4472] do_syscall_64+0x15f/0xf80 [ 1229.600887][ T4472] ? trace_irq_disable+0x3b/0x140 [ 1229.600915][ T4472] ? clear_bhb_loop+0x40/0x90 [ 1229.600941][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.600963][ T4472] RIP: 0033:0x7fe6a039cdd9 [ 1229.600983][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.601001][ T4472] RSP: 002b:00007fe6a1323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1229.601024][ T4472] RAX: ffffffffffffffda RBX: 00007fe6a0615fa0 RCX: 00007fe6a039cdd9 [ 1229.601039][ T4472] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000c [ 1229.601053][ T4472] RBP: 00007fe6a1323090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.601066][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1229.601079][ T4472] R13: 00007fe6a0616038 R14: 00007fe6a0615fa0 R15: 00007ffe5e9d2b48 [ 1229.601115][ T4472] [ 1230.176856][ T4472] kobject: kobject_add_internal failed for macvlan2 (error: -12 parent: net) [ 1231.569299][ T4453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1232.006112][ T4501] netlink: 'syz.4.9014': attribute type 10 has an invalid length. [ 1232.067000][ T4501] team0: Port device veth1 added [ 1232.305818][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9017'. [ 1232.310269][ T4505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1232.353137][ T4505] team0: Failed to send port change of device bond1 via netlink (err -105) [ 1232.379937][ T4505] team0: Failed to send options change via netlink (err -105) [ 1232.401171][ T4505] team0: Port device bond1 added [ 1232.421197][ T4498] lo speed is unknown, defaulting to 1000 [ 1232.434196][T16559] team0: Failed to send port change of device bond1 via netlink (err -105) [ 1232.457563][ T4498] gre0 speed is unknown, defaulting to 1000 [ 1233.133550][ T4498] wg1 speed is unknown, defaulting to 1000 [ 1233.192074][ T4547] netlink: 'syz.2.9027': attribute type 10 has an invalid length. [ 1233.297102][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1233.380678][ T4549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1233.431823][ T4553] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 1233.446639][T31261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.484006][T31261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.524096][T31261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.553487][T31261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.983974][ T4572] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9037'. [ 1234.060087][ T4570] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1234.137165][ T4580] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1234.856162][ T4591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9040'. [ 1237.035630][ T4575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1237.396209][ T4625] lo speed is unknown, defaulting to 1000 [ 1237.419295][ T4625] gre0 speed is unknown, defaulting to 1000 [ 1237.473289][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9052'. [ 1237.568638][ T4639] lo speed is unknown, defaulting to 1000 [ 1237.621523][ T4642] netlink: 'syz.3.9054': attribute type 2 has an invalid length. [ 1237.629524][ T4642] netlink: 'syz.3.9054': attribute type 8 has an invalid length. [ 1237.647932][ T4642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9054'. [ 1237.772471][ T4639] gre0 speed is unknown, defaulting to 1000 [ 1237.772523][ T4625] wg1 speed is unknown, defaulting to 1000 [ 1237.904741][ T4649] syzkaller1: tun_chr_ioctl cmd 35108 [ 1238.150323][ T4639] wg1 speed is unknown, defaulting to 1000 [ 1238.307366][ T4656] xt_hashlimit: size too large, truncated to 1048576 [ 1238.467615][ T4660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9059'. [ 1238.926763][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.935697][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.944643][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1239.212593][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9065'. [ 1239.270272][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9065'. [ 1239.395919][ T4681] xt_hashlimit: size too large, truncated to 1048576 [ 1239.801522][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9070'. [ 1240.115528][ T4705] xt_hashlimit: size too large, truncated to 1048576 [ 1240.276814][ T4712] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9077'. [ 1240.580309][ T4724] netlink: 'syz.1.9081': attribute type 1 has an invalid length. [ 1240.694430][ T4724] bond2: entered promiscuous mode [ 1240.700269][ T4724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1240.737897][ T4724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1240.745237][ T4724] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 1240.755637][ T4724] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1240.770543][ T4724] bond2: (slave vcan0): making interface the new active one [ 1240.778597][ T4724] vcan0: entered promiscuous mode [ 1240.786309][ T4724] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 1241.051617][ T4742] Cannot find set identified by id 0 to match [ 1241.111951][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9088'. [ 1241.311417][T25793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1241.327655][T25793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1241.339426][T25793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1241.355075][T25793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1241.363456][T25793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.425098][ T4758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.484744][ T4760] xt_hashlimit: size too large, truncated to 1048576 [ 1241.494509][ T4750] lo speed is unknown, defaulting to 1000 [ 1241.526338][ T4750] gre0 speed is unknown, defaulting to 1000 [ 1241.722666][ T4766] FAULT_INJECTION: forcing a failure. [ 1241.722666][ T4766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.762561][ T4766] CPU: 1 UID: 0 PID: 4766 Comm: syz.0.9095 Not tainted syzkaller #0 PREEMPT(full) [ 1241.762591][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1241.762604][ T4766] Call Trace: [ 1241.762612][ T4766] [ 1241.762620][ T4766] dump_stack_lvl+0xe8/0x150 [ 1241.762655][ T4766] should_fail_ex+0x412/0x560 [ 1241.762694][ T4766] _copy_from_iter+0x1d3/0x1670 [ 1241.762721][ T4766] ? rcu_is_watching+0x15/0xb0 [ 1241.762750][ T4766] ? __pfx__copy_from_iter+0x10/0x10 [ 1241.762778][ T4766] ? netlink_sendmsg+0x650/0xb40 [ 1241.762800][ T4766] ? skb_put+0x11b/0x210 [ 1241.762824][ T4766] netlink_sendmsg+0x6c0/0xb40 [ 1241.762856][ T4766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1241.762882][ T4766] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1241.762906][ T4766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1241.762935][ T4766] ____sys_sendmsg+0x972/0x9f0 [ 1241.762959][ T4766] ? __might_fault+0xaf/0x130 [ 1241.762989][ T4766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1241.763031][ T4766] ? import_iovec+0x73/0xa0 [ 1241.763058][ T4766] ___sys_sendmsg+0x2a5/0x360 [ 1241.763079][ T4766] ? __lock_acquire+0x6b5/0x2cf0 [ 1241.763114][ T4766] ? __pfx____sys_sendmsg+0x10/0x10 [ 1241.763141][ T4766] ? kstrtouint+0x6e/0xe0 [ 1241.763197][ T4766] ? __fget_files+0x2a/0x420 [ 1241.763219][ T4766] ? __fget_files+0x3a0/0x420 [ 1241.763251][ T4766] __sys_sendmmsg+0x27c/0x4e0 [ 1241.763281][ T4766] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1241.763303][ T4766] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1241.763360][ T4766] ? ksys_write+0x242/0x270 [ 1241.763390][ T4766] ? __pfx_ksys_write+0x10/0x10 [ 1241.763423][ T4766] __x64_sys_sendmmsg+0xa0/0xc0 [ 1241.763447][ T4766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.763469][ T4766] do_syscall_64+0x15f/0xf80 [ 1241.763496][ T4766] ? trace_irq_disable+0x3b/0x140 [ 1241.763524][ T4766] ? clear_bhb_loop+0x40/0x90 [ 1241.763550][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.763571][ T4766] RIP: 0033:0x7fc16ff9cdd9 [ 1241.763592][ T4766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.763610][ T4766] RSP: 002b:00007fc170e82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1241.763634][ T4766] RAX: ffffffffffffffda RBX: 00007fc170215fa0 RCX: 00007fc16ff9cdd9 [ 1241.763655][ T4766] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1241.763669][ T4766] RBP: 00007fc170e82090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.763682][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.763694][ T4766] R13: 00007fc170216038 R14: 00007fc170215fa0 R15: 00007ffd4ed08278 [ 1241.763727][ T4766] [ 1242.436028][ T4750] wg1 speed is unknown, defaulting to 1000 [ 1242.593562][ T4776] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1242.609821][ T4776] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1242.650292][ T4776] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 1242.650400][ T4784] netlink: 'syz.0.9102': attribute type 3 has an invalid length. [ 1242.844625][ T4795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9104'. [ 1243.393608][T25793] Bluetooth: hci2: command tx timeout [ 1243.789247][ T4804] syzkaller1: entered promiscuous mode [ 1243.810190][ T4804] syzkaller1: entered allmulticast mode [ 1244.020563][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9112'. [ 1244.032776][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 1244.040885][ C0] lec:lec_tx_timeout: lec0 [ 1244.382299][T31262] bridge_slave_1: left promiscuous mode [ 1244.407494][T31262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.444091][T31262] bridge_slave_0: left allmulticast mode [ 1244.460768][T31262] bridge_slave_0: left promiscuous mode [ 1244.468218][T31262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.746191][T31262] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1244.995588][T31262] bond1 (unregistering): Released all slaves [ 1245.015846][T31262] bond0 (unregistering): Released all slaves [ 1245.049112][ T5504] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1245.216663][ T4750] chnl_net:caif_netlink_parms(): no params data found [ 1245.293396][T31262] tipc: Disabling bearer [ 1245.324853][T31262] tipc: Left network mode [ 1245.480177][T25793] Bluetooth: hci2: command tx timeout [ 1245.857216][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.866240][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.875615][ T4750] bridge_slave_0: entered allmulticast mode [ 1245.893588][ T4750] bridge_slave_0: entered promiscuous mode [ 1245.945799][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.971760][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.991367][ T4750] bridge_slave_1: entered allmulticast mode [ 1246.011532][ T4750] bridge_slave_1: entered promiscuous mode [ 1246.113748][T31262] ------------[ cut here ]------------ [ 1246.120207][T31262] err [ 1246.120222][T31262] WARNING: net/wireless/core.c:207 at cfg80211_switch_netns+0x574/0x5a0, CPU#1: kworker/u8:46/31262 [ 1246.134164][T31262] Modules linked in: [ 1246.140436][T31262] CPU: 1 UID: 0 PID: 31262 Comm: kworker/u8:46 Not tainted syzkaller #0 PREEMPT(full) [ 1246.150265][T31262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1246.160896][T31262] Workqueue: netns cleanup_net [ 1246.167548][T31262] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 1246.173789][T31262] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 a8 ec 31 f7 eb 82 e8 01 b2 c6 f6 e9 63 fe ff ff e8 f7 b1 c6 f6 e9 59 fe ff ff e8 ed b1 c6 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 1246.194097][T31262] RSP: 0018:ffffc90004cbf8a0 EFLAGS: 00010293 [ 1246.200637][T31262] RAX: ffffffff8aff1f03 RBX: ffff8880679a0df0 RCX: ffff88802cd9bd80 [ 1246.208684][T31262] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 1246.216988][T31262] RBP: 00000000ffffffef R08: ffffffff903386f7 R09: 1ffffffff20670de [ 1246.225417][T31262] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff8880679a0720 [ 1246.233663][T31262] R13: ffff88809de32aa0 R14: dffffc0000000000 R15: ffff8880679a0908 [ 1246.241747][T31262] FS: 0000000000000000(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 1246.251098][T31262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1246.257722][T31262] CR2: 00002000000030c0 CR3: 000000008b294000 CR4: 00000000003526f0 [ 1246.265813][T31262] Call Trace: [ 1246.269134][T31262] [ 1246.272376][T31262] cfg80211_pernet_exit+0x92/0x120 [ 1246.277544][T31262] ops_undo_list+0x49f/0x940 [ 1246.282469][T31262] ? __pfx_ops_undo_list+0x10/0x10 [ 1246.287630][T31262] ? idr_destroy+0x218/0x290 [ 1246.292356][T31262] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.297741][T31262] cleanup_net+0x56b/0x800 [ 1246.302487][T31262] ? __pfx_cleanup_net+0x10/0x10 [ 1246.307484][T31262] ? process_scheduled_works+0xa70/0x1860 [ 1246.313548][T31262] ? process_scheduled_works+0xa70/0x1860 [ 1246.319327][T31262] process_scheduled_works+0xb5d/0x1860 [ 1246.325044][T31262] ? __pfx_process_scheduled_works+0x10/0x10 [ 1246.331137][T31262] ? assign_work+0x3d5/0x5e0 [ 1246.335834][T31262] worker_thread+0xa53/0xfc0 [ 1246.340873][T31262] kthread+0x388/0x470 [ 1246.344999][T31262] ? __pfx_worker_thread+0x10/0x10 [ 1246.350308][T31262] ? __pfx_kthread+0x10/0x10 [ 1246.354954][T31262] ret_from_fork+0x514/0xb70 [ 1246.359699][T31262] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.364873][T31262] ? __switch_to+0xc79/0x1410 [ 1246.369930][T31262] ? __pfx_kthread+0x10/0x10 [ 1246.374569][T31262] ret_from_fork_asm+0x1a/0x30 [ 1246.379403][T31262] [ 1246.382558][T31262] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1246.389877][T31262] CPU: 1 UID: 0 PID: 31262 Comm: kworker/u8:46 Not tainted syzkaller #0 PREEMPT(full) [ 1246.399550][T31262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1246.409643][T31262] Workqueue: netns cleanup_net [ 1246.414449][T31262] Call Trace: [ 1246.417739][T31262] [ 1246.420676][T31262] vpanic+0x56c/0xa60 [ 1246.424673][T31262] ? __pfx__printk+0x10/0x10 [ 1246.429305][T31262] ? __pfx_vpanic+0x10/0x10 [ 1246.433815][T31262] ? is_bpf_text_address+0x292/0x2b0 [ 1246.439126][T31262] ? is_bpf_text_address+0x26/0x2b0 [ 1246.444345][T31262] panic+0xc5/0xd0 [ 1246.448072][T31262] ? __pfx_panic+0x10/0x10 [ 1246.452502][T31262] ? ret_from_fork_asm+0x1a/0x30 [ 1246.457453][T31262] __warn+0x315/0x4c0 [ 1246.461456][T31262] ? cfg80211_switch_netns+0x574/0x5a0 [ 1246.466933][T31262] ? cfg80211_switch_netns+0x574/0x5a0 [ 1246.472404][T31262] __report_bug+0x29a/0x540 [ 1246.476922][T31262] ? cfg80211_switch_netns+0x574/0x5a0 [ 1246.482394][T31262] ? __pfx___report_bug+0x10/0x10 [ 1246.487443][T31262] ? cfg80211_switch_netns+0x574/0x5a0 [ 1246.492914][T31262] report_bug+0x16a/0x220 [ 1246.497259][T31262] ? cfg80211_switch_netns+0x574/0x5a0 [ 1246.502732][T31262] ? cfg80211_switch_netns+0x576/0x5a0 [ 1246.508207][T31262] handle_bug+0x9c/0x200 [ 1246.512461][T31262] exc_invalid_op+0x1a/0x50 [ 1246.516972][T31262] asm_exc_invalid_op+0x1a/0x20 [ 1246.521827][T31262] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 1246.527908][T31262] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 a8 ec 31 f7 eb 82 e8 01 b2 c6 f6 e9 63 fe ff ff e8 f7 b1 c6 f6 e9 59 fe ff ff e8 ed b1 c6 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 1246.547524][T31262] RSP: 0018:ffffc90004cbf8a0 EFLAGS: 00010293 [ 1246.553602][T31262] RAX: ffffffff8aff1f03 RBX: ffff8880679a0df0 RCX: ffff88802cd9bd80 [ 1246.561584][T31262] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 1246.569564][T31262] RBP: 00000000ffffffef R08: ffffffff903386f7 R09: 1ffffffff20670de [ 1246.577557][T31262] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff8880679a0720 [ 1246.585534][T31262] R13: ffff88809de32aa0 R14: dffffc0000000000 R15: ffff8880679a0908 [ 1246.593523][T31262] ? cfg80211_switch_netns+0x573/0x5a0 [ 1246.599008][T31262] cfg80211_pernet_exit+0x92/0x120 [ 1246.604150][T31262] ops_undo_list+0x49f/0x940 [ 1246.608756][T31262] ? __pfx_ops_undo_list+0x10/0x10 [ 1246.613882][T31262] ? idr_destroy+0x218/0x290 [ 1246.618485][T31262] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.623613][T31262] cleanup_net+0x56b/0x800 [ 1246.628041][T31262] ? __pfx_cleanup_net+0x10/0x10 [ 1246.632989][T31262] ? process_scheduled_works+0xa70/0x1860 [ 1246.638723][T31262] ? process_scheduled_works+0xa70/0x1860 [ 1246.644460][T31262] process_scheduled_works+0xb5d/0x1860 [ 1246.650054][T31262] ? __pfx_process_scheduled_works+0x10/0x10 [ 1246.656056][T31262] ? assign_work+0x3d5/0x5e0 [ 1246.660664][T31262] worker_thread+0xa53/0xfc0 [ 1246.665294][T31262] kthread+0x388/0x470 [ 1246.669369][T31262] ? __pfx_worker_thread+0x10/0x10 [ 1246.674498][T31262] ? __pfx_kthread+0x10/0x10 [ 1246.679103][T31262] ret_from_fork+0x514/0xb70 [ 1246.683714][T31262] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.688839][T31262] ? __switch_to+0xc79/0x1410 [ 1246.693530][T31262] ? __pfx_kthread+0x10/0x10 [ 1246.698128][T31262] ret_from_fork_asm+0x1a/0x30 [ 1246.702913][T31262] [ 1246.706555][T31262] Kernel Offset: disabled [ 1246.710881][T31262] Rebooting in 86400 seconds..