last executing test programs: 5.102893717s ago: executing program 0 (id=6718): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) 4.870021399s ago: executing program 2 (id=6720): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x19, r1, 0x1, 0xfe, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c800) r2 = socket(0x200000000000011, 0x2, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000e8008000b0006000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x3, 0x4) bind$packet(r2, &(0x7f0000000300)={0x11, 0xd, r1}, 0x14) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', '\x00', "00000200", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000340)=0xe, 0x4) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) close(0x4) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x61d8, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000540)) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000ebbbbbbbb080045f800780000000200119078ac1e0101000000004e22fffc00649078020000000200000002000000e5020e86db87a41f716be8e1fa0fe2fb143899778cc5c15c13374006d7b0321a752a7eb609eb8d2d9d1128cb0500000084"], 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 4.869745094s ago: executing program 0 (id=6721): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x37, 0xc, 0x2, {{0x8, 0x4, 0x3, 0x8, 0x20, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x7, 0x64, [@multicast2]}, @ra={0x94, 0x4}]}}}}}) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x70}, 0x19}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32=r7, @ANYRESDEC=r6], 0x3c}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="8705000000000000c20400000004071800000002040505000f000000000000000400000000000000c2040000b378c204000000ff00000000c65299745e44b5457a44f787a6e061b90c7917f67d3e3bd66e3dd4ef319e2d83c234abde95574d457aa8a27bb46f7c00234dff57f897b6b86232"], 0x38) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 4.017318417s ago: executing program 2 (id=6728): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x2c, 0x2, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x80, 0xc6d, 0x8}}) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@ipv4_newaddr={0x60, 0x14, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x38, 0x4, 0x0, r5}, [@IFA_LABEL={0x14, 0x3, 'bridge_slave_0\x00'}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x2}, @IFA_FLAGS={0x8, 0x8, 0x25}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0x8c3d, 0x6f}}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x0) 3.247010151s ago: executing program 4 (id=6733): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268c989e142088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.109155479s ago: executing program 4 (id=6735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd70047835c43181d}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8414}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) 3.088349569s ago: executing program 2 (id=6737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2d, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001840)=""/187, 0xbb}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f0000000500)=""/4122, 0x101a}, {&(0x7f00000002c0)=""/114, 0x72}], 0x5, 0x0, 0xfe6e}, 0x0) 2.958886036s ago: executing program 4 (id=6738): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x0) 2.892407103s ago: executing program 4 (id=6740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000df0000000000190000000000000000000000fffe00000000261517e4c2c1151017df8f918a4c52441b96d888fac8149f44c10d01f88d60e06dc5aced73b22de95a57139b9fd0feff0e5df3c6d3246c74da5dc1062d48c004da78fb3421a6ecbcf0ba9e7dd12951fb085de03bd5704424"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) recvmsg(r5, &(0x7f00000005c0)={0x0, 0xffffff96, 0x0}, 0x40000100) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ff", 0x7) bind$ax25(r4, &(0x7f0000000540)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x8013, 0x1b223}}, 0x20}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000340)={r7, 0x1, 0x6, @remote}, 0x10) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80000) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000001c0)={0x3}, 0x4) r11 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r11, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000018000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000034000000080a010100000000000000000200000608000940000000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x88}, 0x1, 0x0, 0x0, 0x24004800}, 0x28000040) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r9, 0x4, 0xe, 0x2, 0x8a, 0xdcc33e12a361b579, @empty, @mcast1, 0x741, 0x8000, 0x4, 0xffffffff}}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000d40)={0x0, 0x1000, "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"}, &(0x7f0000001d80)=0x1008) 2.839040722s ago: executing program 1 (id=6741): r0 = epoll_create1(0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x4e22, 0x9, 0x4e22, 0x1000, 0x2, 0x20, 0x0, 0x88}, {0x80, 0x0, 0x9a11, 0x7, 0x4, 0x2, 0x7, 0x5}, {0x1000, 0xff, 0x1000, 0x353bac47}, 0x200, 0x6e6bb4, 0x3, 0x0, 0x3, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x51}, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3504, 0x0, 0x0, 0x5a, 0x9, 0xb4f5, 0xffffffff}}, 0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002510010325bd7000317c7b0201000000"], 0x14}, 0x1, 0x0, 0x0, 0x44048}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg(r5, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/239, 0xef}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/48, 0x30}, {&(0x7f0000001dc0)=""/157, 0x9d}, {&(0x7f0000001e80)}], 0x9}, 0x2}, {{&(0x7f0000001f80)=@generic, 0x80, &(0x7f0000002040)=[{&(0x7f0000002000)=""/22, 0x16}], 0x1, &(0x7f0000000500)=""/150, 0xffffffffffffffbb}, 0xfffffffd}, {{&(0x7f0000002140)=@alg, 0x80, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/252, 0xfc}], 0x1, &(0x7f0000002300)=""/72, 0x4b}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002380)=""/49, 0x31}], 0x1, &(0x7f0000002400)=""/236, 0xec}, 0xf}, {{&(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002580)=""/115, 0x73}, {&(0x7f0000002600)=""/121, 0x79}, {&(0x7f0000002680)=""/123, 0x7b}, {&(0x7f0000002700)=""/100, 0x64}, {&(0x7f0000002780)=""/74, 0x4a}], 0x5}, 0x8001}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002880)=""/62, 0x3e}, {&(0x7f00000028c0)=""/85, 0x55}, {&(0x7f0000000300)=""/133, 0x85}], 0x3}, 0x6}], 0x6, 0x63, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000000)=0xf, 0x4) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000280)=0xfffffffe, 0x4) r7 = epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xff5b) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x0, {0xa}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f00000000c0)={0x50000000}) 2.832262391s ago: executing program 2 (id=6742): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 2.698786673s ago: executing program 2 (id=6743): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="654671ca4b48f31b5f810e5e09c898e9f6351887", 0x14}], 0x1, 0x0, 0x0, 0xd0}, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x0, @val=0x80}}}}}}}, 0x0) 2.672511342s ago: executing program 2 (id=6744): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect(r0, &(0x7f00000001c0)=@l2={0x1f, 0x4, @none, 0x8, 0x1}, 0x80) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000800000000000b7080000000000007b8af8ff00000000bfa200000000000007020000edffffffb703002208000000b70400000000008500004003000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001540)={'gretap0\x00', &(0x7f0000001580)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x4, 0x1, {{0x1f, 0x4, 0x3, 0x0, 0x7c, 0x66, 0x0, 0xf9, 0x4, 0x0, @remote, @remote, {[@cipso={0x86, 0x47, 0xffffffffffffffff, [{0x6, 0xa, "8abbec589830234f"}, {0x5, 0x9, "14886038b8579c"}, {0x7, 0x7, "23795cd28d"}, {0x5, 0x11, "c2271b3b9979b688826b7360291aa9"}, {0x1, 0x7, "5eb98238fa"}, {0x0, 0xf, "4010568b5d3c21ab1764de8e3e"}]}, @rr={0x7, 0x1f, 0xbe, [@empty, @local, @rand_addr=0x64010101, @multicast1, @loopback, @multicast1, @rand_addr=0x64010102]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x7ffffffb, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x101, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}], 0x40000000000016e, 0x40000102, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000040)={@private1}, &(0x7f00000000c0)=0xfffffffffffffeec) 2.158567355s ago: executing program 3 (id=6746): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000280012800b00010065727370616e00001800028004001200080005"], 0x48}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x9, @mcast2={0xff, 0x3}, 0x80}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85, 0x49060}}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) syz_emit_ethernet(0x107, &(0x7f0000000340)={@random="df983ffcd4bd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x18, 0x4, 0x0, 0x0, 0xf9, 0x65, 0x0, 0x7, 0x2, 0x0, @local, @multicast1, {[@end, @noop, @timestamp_prespec={0x44, 0x14, 0xaf, 0x3, 0x9, [{@broadcast, 0x800}, {@loopback}]}, @timestamp_prespec={0x44, 0x34, 0x37, 0x3, 0x0, [{@rand_addr=0x64010101, 0x15b1}, {@remote, 0x7ff}, {@local, 0x9}, {@private=0xa010100}, {@remote, 0x1}, {@multicast2, 0x5}]}]}}, {0x11, 0x4, 0x0, @empty, "5fb58a4b49b79f3ec5a3d81de135922b64f303ed2dd59bcb5c538eb0f0ea977720d660b1862af73d34807f03fb0a548c2fa4bf137ad0939ed9b9b426a5174cea37fb79e0c1d4fef22fdc396a37200b1e6ca3a7369545c319655fae662f38531f677a4387f3ed0202df7686dd285c7a24018e885b99fbf57739b5f6e1c89def8d864cd7d7e0a071bfe900ea7a23bc95a6b5"}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000040)="82ff0000", 0x49, 0x0, 0x0, 0xf) 2.092457655s ago: executing program 3 (id=6747): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x2c, 0x2, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x80, 0xc6d, 0x8}}) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@ipv4_newaddr={0x60, 0x14, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x38, 0x4, 0x0, r5}, [@IFA_LABEL={0x14, 0x3, 'bridge_slave_0\x00'}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x2}, @IFA_FLAGS={0x8, 0x8, 0x25}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0x8c3d, 0x6f}}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x0) 1.98057387s ago: executing program 4 (id=6748): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000440)=0x8, 0x42) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x4}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) 1.866654398s ago: executing program 1 (id=6749): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0x5ad}], 0x1, 0x0, 0x12}}], 0x1, 0x404c444) 1.858067325s ago: executing program 1 (id=6750): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x2c) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) 1.768901165s ago: executing program 0 (id=6751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (fail_nth: 21) 1.268795271s ago: executing program 1 (id=6752): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x810}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4f}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c0}, 0x200040c0) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4f}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c0}, 0x200040c0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, r3, 0xffffffffffffffff, 0x4, 0x7, 0xc, "bbde9b07635f8b98d432bb8267f4c96643000ec24b98d95dd3934d027e02c4139f106e71825ef1e77f2b8c0eb07b78e1be880b48bc7870f20a3d3745323fbe", 0x2f}, 0x60) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000400)={'veth1_macvtap\x00', @ifru_addrs=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'sit0\x00', r5, 0x20, 0x8, 0x1, 0x7fffffff, {{0x24, 0x4, 0x3, 0x1c, 0x90, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ssrr={0x89, 0x1b, 0x64, [@rand_addr=0x64010102, @private=0xa010100, @loopback, @rand_addr=0x64010102, @multicast2, @empty]}, @generic={0x82, 0x4, "c1a2"}, @noop, @timestamp={0x44, 0xc, 0xc0, 0x0, 0xf, [0x7, 0x400]}, @ssrr={0x89, 0x1f, 0x3b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @empty, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0x99, 0x3, 0x0, [{@remote, 0x10}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x1b, 0x7a, [@loopback, @multicast1, @loopback, @multicast2, @multicast1, @empty]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'sit0\x00', r5, 0x20, 0x8, 0x1, 0x7fffffff, {{0x24, 0x4, 0x3, 0x1c, 0x90, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ssrr={0x89, 0x1b, 0x64, [@rand_addr=0x64010102, @private=0xa010100, @loopback, @rand_addr=0x64010102, @multicast2, @empty]}, @generic={0x82, 0x4, "c1a2"}, @noop, @timestamp={0x44, 0xc, 0xc0, 0x0, 0xf, [0x7, 0x400]}, @ssrr={0x89, 0x1f, 0x3b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @empty, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0x99, 0x3, 0x0, [{@remote, 0x10}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x1b, 0x7a, [@loopback, @multicast1, @loopback, @multicast2, @multicast1, @empty]}]}}}}}) nanosleep(&(0x7f0000000600), &(0x7f0000000640)) nanosleep(&(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000700)={@mcast1, r6}, 0x14) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r4) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x104, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4810}, 0x40800) clock_gettime(0x7, &(0x7f0000000980)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xbd, 0x6c, &(0x7f00000009c0)="a41cce8cc9de01860bf313455993d1b72e4bbb93e458e836fc9ec8efbaa95f1f879b657604f634dc9f77211210ad47b0452ec128be73d9c41f7e1edaadb389d36384e5332692fb84b415458ac4407f7ba33c8981fa13bd17b374f65ba7419044e0f60bb9c91fb013d6239e55548efcd512913b2fecb6ab89a71a618c0d8882f8cfff626b58ed0e3d6c2094cca5606e380b0f6d07526f595f557037430e2a120ec657e49165be06b61ff66bd95193db16e53b462f1c7eb90b1d3172438a", &(0x7f0000000a80)=""/108, 0xf, 0x0, 0x77, 0x9d, &(0x7f0000000b00)="255d959dafd8109647b08d429081535341d602d3c74dee057f7be92ad406780015c27b8724071335f5a857dfd96da41193afe8de850290bdf865cfaa5636c3d9ea2f2531036dc9514dc555915a725cf06ed61945a0a3ad132bc60d7af581ea1e2bad7131ac599c66f5b6916c068707904fdf69855ff4ef", &(0x7f0000000b80)="8c055e622341a7af959c497955aa6bc89ca699ce94fb3aab3d5a08207d34f54af2a89f80ca6c88cccae79089949c70a11fcebd905b1b7e5855d682a480e53287b14ddf279ea8e058cd5dde90654237ee37e460a8ad6bbd170f047e0f5035ba82a31d78677f5fb7b66822977003520a0668f0ecdd1a007ce5edd94ded63d3fc77c35f297762c5fd0360a342dd7a1a213bceafb4435e9f180fe5b3ac8821", 0x3, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xbd, 0x6c, &(0x7f00000009c0)="a41cce8cc9de01860bf313455993d1b72e4bbb93e458e836fc9ec8efbaa95f1f879b657604f634dc9f77211210ad47b0452ec128be73d9c41f7e1edaadb389d36384e5332692fb84b415458ac4407f7ba33c8981fa13bd17b374f65ba7419044e0f60bb9c91fb013d6239e55548efcd512913b2fecb6ab89a71a618c0d8882f8cfff626b58ed0e3d6c2094cca5606e380b0f6d07526f595f557037430e2a120ec657e49165be06b61ff66bd95193db16e53b462f1c7eb90b1d3172438a", &(0x7f0000000a80)=""/108, 0xf, 0x0, 0x77, 0x9d, &(0x7f0000000b00)="255d959dafd8109647b08d429081535341d602d3c74dee057f7be92ad406780015c27b8724071335f5a857dfd96da41193afe8de850290bdf865cfaa5636c3d9ea2f2531036dc9514dc555915a725cf06ed61945a0a3ad132bc60d7af581ea1e2bad7131ac599c66f5b6916c068707904fdf69855ff4ef", &(0x7f0000000b80)="8c055e622341a7af959c497955aa6bc89ca699ce94fb3aab3d5a08207d34f54af2a89f80ca6c88cccae79089949c70a11fcebd905b1b7e5855d682a480e53287b14ddf279ea8e058cd5dde90654237ee37e460a8ad6bbd170f047e0f5035ba82a31d78677f5fb7b66822977003520a0668f0ecdd1a007ce5edd94ded63d3fc77c35f297762c5fd0360a342dd7a1a213bceafb4435e9f180fe5b3ac8821", 0x3, 0x0, 0x9}, 0x50) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4854}, 0x894) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4854}, 0x894) recvmsg(r2, &(0x7f0000001240)={&(0x7f0000000e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000ec0)=""/48, 0x30}, {&(0x7f0000000f00)=""/165, 0xa5}, {&(0x7f0000000fc0)=""/153, 0x99}, {&(0x7f0000001080)=""/60, 0x3c}, {&(0x7f00000010c0)=""/2, 0x2}], 0x5, &(0x7f0000001180)=""/174, 0xae}, 0xc0011040) r8 = accept4$ax25(r4, &(0x7f0000001280)={{0x3, @rose}, [@default, @rose, @default, @bcast, @bcast, @remote, @remote, @null]}, &(0x7f0000001300)=0x48, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000001340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast]}) (async) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000001340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast]}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x60, r9, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x60, r9, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) accept4$netrom(r4, &(0x7f0000001540)={{0x3, @null}, [@netrom, @netrom, @remote, @null, @null, @remote, @netrom, @null]}, &(0x7f00000015c0)=0x48, 0x80000) (async) accept4$netrom(r4, &(0x7f0000001540)={{0x3, @null}, [@netrom, @netrom, @remote, @null, @null, @remote, @netrom, @null]}, &(0x7f00000015c0)=0x48, 0x80000) r10 = getuid() ioctl$SIOCAX25DELUID(r8, 0x89e2, &(0x7f0000001600)={0x3, @default, r10}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000001640)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001680), 0x101001, 0x0) 1.159055892s ago: executing program 0 (id=6753): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008000) 1.158324176s ago: executing program 3 (id=6754): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="654671ca4b48f31b5f810e5e09c898e9f6351887", 0x14}], 0x1, 0x0, 0x0, 0xd0}, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x0, @val=0x80}}}}}}}, 0x0) 1.014244917s ago: executing program 1 (id=6755): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r1, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0xa, 0x7f, 0x0, 0x24, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3c}, 0x60, 0x40, 0x0, 0x6}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="c8f68a3d", @ANYRES16=0x0, @ANYBLOB="240029bd7000ffdbdf250b0000000800020004000000050005000300000024000680080006000800000008000300ac14141c060001000200000008000700", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x850) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x20000000000, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@rand_addr=0x64010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x3501, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000200000001000000001b000014000000000000001001000002"], 0x30}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 1.010968378s ago: executing program 0 (id=6756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x41020000}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xffffff41, 0x734, 0x0, 0xfffffffffffffecb) 988.638903ms ago: executing program 3 (id=6757): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000100)=""/192, 0xc0}], 0x2}, 0xfffffffc}, {{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)=""/138, 0x8a}], 0x2}, 0xfffffec9}, {{&(0x7f00000015c0)=@tipc=@name, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/121, 0x79}], 0x1, &(0x7f0000001700)=""/102, 0x66}, 0x5}, {{&(0x7f0000001780)=@ll, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/162, 0xa2}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002a00)=""/15, 0xf}}, {{&(0x7f0000002a40)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0xa}, {{&(0x7f0000002c80)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000002e00)=""/59, 0x3b}, 0x7}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000003f40)=""/41, 0x29}, {&(0x7f0000003f80)=""/139, 0x8b}, {&(0x7f0000004040)=""/200, 0xc8}], 0x5, &(0x7f00000041c0)=""/84, 0x54}, 0x7fff}, {{&(0x7f0000004240)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004400)=[{0x0}], 0x1}, 0xb784}], 0x8, 0x12, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r2, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="880000a01fc000", @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000022fe0b0008000000000001006e657464657673696d000000000002006e657464657673696d30000008000b00e60200000e0001006e657464657673696d000000140002006e657464657673696d30000008000b00f8090000"], 0x88}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0x4080) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f7368613338"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="030032d2dbd6280ac9a89b20750000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000a36400000000000000008500000053000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x18, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0019000000000d00b70500000800000085000000730000001801000020646c25000000000062f2d80baf6b41e0d3065f180b5029292020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000000c0)=0x7, 0x4) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d67c61e225b44d7e4499e6b6774860201df5e19dc3c6de735504d6aee1a14c7f0000000000000036ee8a245fe4cd7d216ba80b0b70d3fbe79387daca2c537090d2a7f1222177148d303b2f9e3f8922b48caf638b75ba2077ab7f2d19bc559c57b59f22f659c883beb58bd9ab3896", @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) 794.598941ms ago: executing program 0 (id=6758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000df0000000000190000000000000000000000fffe00000000261517e4c2c1151017df8f918a4c52441b96d888fac8149f44c10d01f88d60e06dc5aced73b22de95a57139b9fd0feff0e5df3c6d3246c74da5dc1062d48c004da78fb3421a6ecbcf0ba9e7dd12951fb085de03bd5704424"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) recvmsg(r5, &(0x7f00000005c0)={0x0, 0xffffff96, 0x0}, 0x40000100) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bind$ax25(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x8013, 0x1b223}}, 0x20}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000340)={r7, 0x1, 0x6, @remote}, 0x10) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80000) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000001c0)={0x3}, 0x4) r11 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r11, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000018000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000034000000080a010100000000000000000200000608000940000000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x88}, 0x1, 0x0, 0x0, 0x24004800}, 0x28000040) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r9, 0x4, 0xe, 0x2, 0x8a, 0xdcc33e12a361b579, @empty, @mcast1, 0x741, 0x8000, 0x4, 0xffffffff}}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000d40)={0x0, 0x1000, "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"}, &(0x7f0000001d80)=0x1008) 343.967716ms ago: executing program 3 (id=6759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f0000000380)=ANY=[]) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b330000000000000000050000000c0099004d000000fdffffff10005d800c"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x30, 0x2e, 0x7f]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0002008097ecc4be87e86f4344000000000000000043b0f9a15b5ade277cab257dc9611adf4275904c0a761aa8df165a575c9b04a64da6db3892553c564d9ee98320b505ac954b05431af765bdbdfec57484fc3c01aec5ec63a0c4403472c20a412c9b06ac571ae9bec649961e0e4b6d9d4778f351dc6f5532b398bcbe95ce667fd6a7453498486782dcf679364fda07f2924bc31e30044e8cb011afbd147e309596dd967568f6bb97840f76bd7b8a49d7c3c6ef807b6727e04aeffa29e8427cb80a950b7a79b673fb044011f5e16d52130729e242dde9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYBLOB="f6556b8b1a632b8dc24528207f6aa2227d9de9eaae97f5da2704115f5fed8efbaf49b26fbd5dcb9cf6d11ff41044f19bd5cd79950012752f259ccd39f74aa7c8798c29bec0", @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100048000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001cc0)=""/4071, 0x40f00, 0x69}, 0x94) sendmsg$inet(r9, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="0316cbc95b", 0x5}, {0x0}], 0x2}, 0x40040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r12 = socket(0x10, 0x803, 0x0) sendmsg$qrtr(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='s`^G', 0x4}], 0x1, 0x0, 0x0, 0x8094}, 0x38) sendmsg$AUDIT_MAKE_EQUIV(r12, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x800, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 113.823012ms ago: executing program 3 (id=6760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x30000080}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x49091}, 0x2000c8c1) r2 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r2) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x2, 0xfffffffd) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1}, 0x9}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44001}, 0x400c0) recvmsg(r0, &(0x7f0000001840)={&(0x7f0000000340)=@generic, 0x80, &(0x7f0000001800)=[{&(0x7f0000000680)=""/163, 0xa3}, {&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x4}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x7c}, 0x1, 0x0, 0x0, 0x20044000}, 0x24000840) 79.823397ms ago: executing program 4 (id=6761): sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c894) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r1], 0xb8}}, 0x4000080) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="f56407e9ea000000000000000046cd437436da60d1a45391e088f5a94662686d5e09c638fea20f73059e9014d418feb03d754fb388ebbd95103a29f59d54301699731a48b6962ff43507acd2f03b3602b24842c887f77f0ebe3b2d80e880133a092949db6ca6bf2dd9fc1027e5afbce76a1ec386304de37316455d7c7442cee006b40f4c6de1b484fa39f7be55ea4b0f1b412a0a27db578523dea429a9d7a136548e6c4ed099bc92c264acf11515ff8aba57953a15b6cf0b3411d26274c6bdab711d30aff4ed65da800816bf035c13e26175a32b994f61b124a43860432559", @ANYRESHEX=r2, @ANYRESOCT=0x0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="efff000000000000b705000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r3], &(0x7f00000003c0)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e810cf782db44fd5617ec403ce69b0d12", 0x19}], 0x1}, 0x8008) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="04004000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf255c00000008000300", @ANYBLOB="a6110837ec9ed678a4e6957725956f7eb61af5657ee214513df0be0dafa0d81978a0b5b1d0172ef86208a08930824388cca10f5254f850cd31e6ac7573a05089d520ba25f251e42c57a32f450e6d10ff624b5dbc04cf056836ff7fcc3bdb6543e2d5c6a7b0f8945deea4ad5d35eabc00348531530abe7c96195f10e5c028638438e05d5f6081bc3796b53163194230e987e39e4eba0fd453128ca55f81b1f7cec35fe353a6f46083d45a332010a6a249849da0ab8c90530c8d825febd00885a6b6eefb06e96090dc2ef7aba767cb1e2c69119bb258b7b8ccd3f7fa3989c8a61763d8d7bdd7", @ANYBLOB="08006b003c0000ce0e"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r4}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf25fc000000000000000000000000000001fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000100000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000006000000000000400001020000000000bc6ae014d91cf41c408d"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="8000000001040000055ff1e76b87790365b0bd56db154c436235ffd013caa54e93b76fa01234480418f48ec5e28399a6df7eb818869f6e409a4106ed66c5db385f1218", @ANYRES16=r7, @ANYBLOB='\x00'/20, @ANYRES8=r5, @ANYRES32, @ANYBLOB="0100000000000000050000000f00"/28], 0x48) r10 = socket$inet(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) 0s ago: executing program 1 (id=6762): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @fwd={0x5}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x1}}]}, {0x0, [0x41, 0x2e, 0x3e, 0x5f]}}, &(0x7f0000000240)=""/46, 0x66, 0x2e, 0x1, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): m+0xf1/0x1b0 [ 595.095868][T25202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.095891][T25202] ____sys_sendmsg+0x972/0x9f0 [ 595.095924][T25202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.095956][T25202] ? import_iovec+0x73/0xa0 [ 595.095980][T25202] ___sys_sendmsg+0x2a5/0x360 [ 595.096010][T25202] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.096067][T25202] ? __fget_files+0x2a/0x420 [ 595.096082][T25202] ? __fget_files+0x3a0/0x420 [ 595.096109][T25202] __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.096136][T25202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.096169][T25202] ? __pfx_ksys_write+0x10/0x10 [ 595.096200][T25202] do_syscall_64+0x14d/0xf80 [ 595.096219][T25202] ? trace_irq_disable+0x3b/0x150 [ 595.096235][T25202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.096252][T25202] ? clear_bhb_loop+0x40/0x90 [ 595.096273][T25202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.096290][T25202] RIP: 0033:0x7fedd719c819 [ 595.096309][T25202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.096325][T25202] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.096345][T25202] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 595.096358][T25202] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 595.096369][T25202] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 595.096380][T25202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.096391][T25202] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 595.096420][T25202] [ 595.413191][T25209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6105'. [ 595.440483][T25076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.547009][T25076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.569076][T25179] lo speed is unknown, defaulting to 1000 [ 595.683467][T25214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6106'. [ 595.683511][T25215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6107'. [ 595.873251][T25076] hsr_slave_0: entered promiscuous mode [ 595.887902][T25076] hsr_slave_1: entered promiscuous mode [ 595.899740][T25076] debugfs: 'hsr0' already exists in 'hsr' [ 595.916129][T25076] Cannot create hsr debugfs directory [ 595.962058][ T5835] Bluetooth: hci2: command tx timeout [ 596.118759][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6111'. [ 596.176624][T25076] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.208525][T25076] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.230544][T25076] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 596.369062][T25076] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.379407][T25076] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.392235][T25076] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 596.454085][T25076] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.486206][T25244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6117'. [ 596.521953][T25076] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.581628][T25076] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 596.775963][T25076] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.802920][T25076] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.848357][T25076] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 597.190792][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6124'. [ 597.604304][T25076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 597.633577][T25076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 597.666247][T25076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 597.693003][T25076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 597.706031][T25276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 597.720214][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6128'. [ 597.907803][T25076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.957397][T25076] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.962249][T25294] FAULT_INJECTION: forcing a failure. [ 597.962249][T25294] name failslab, interval 1, probability 0, space 0, times 0 [ 598.005334][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.012693][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.041901][ T5835] Bluetooth: hci2: command tx timeout [ 598.047476][T25294] CPU: 1 UID: 0 PID: 25294 Comm: syz.2.6130 Not tainted syzkaller #0 PREEMPT(full) [ 598.047499][T25294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 598.047510][T25294] Call Trace: [ 598.047517][T25294] [ 598.047524][T25294] dump_stack_lvl+0xe8/0x150 [ 598.047553][T25294] should_fail_ex+0x412/0x560 [ 598.047582][T25294] should_failslab+0xa8/0x100 [ 598.047607][T25294] __kmalloc_cache_noprof+0x88/0x660 [ 598.047626][T25294] ? __pfx_stack_trace_save+0x10/0x10 [ 598.047642][T25294] ? rtnl_newlink+0x136/0x1bb0 [ 598.047664][T25294] rtnl_newlink+0x136/0x1bb0 [ 598.047682][T25294] ? kasan_save_track+0x3e/0x80 [ 598.047696][T25294] ? kasan_save_free_info+0x46/0x50 [ 598.047715][T25294] ? __kasan_slab_free+0x5c/0x80 [ 598.047730][T25294] ? dev_hard_start_xmit+0x2d8/0x870 [ 598.047750][T25294] ? __dev_queue_xmit+0x14d9/0x3980 [ 598.047779][T25294] ? __netlink_deliver_tap+0x5ad/0x850 [ 598.047797][T25294] ? netlink_deliver_tap+0x19c/0x1b0 [ 598.047814][T25294] ? netlink_unicast+0x730/0x8e0 [ 598.047828][T25294] ? netlink_sendmsg+0x813/0xb40 [ 598.047846][T25294] ? __pfx_rtnl_newlink+0x10/0x10 [ 598.047862][T25294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.047900][T25294] ? kasan_quarantine_put+0xbb/0x1f0 [ 598.047914][T25294] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.047933][T25294] ? kmem_cache_free+0x187/0x630 [ 598.047948][T25294] ? nlmon_xmit+0xb0/0x100 [ 598.047975][T25294] ? __lock_acquire+0x6b5/0x2cf0 [ 598.047997][T25294] ? __local_bh_enable_ip+0xd0/0x130 [ 598.048015][T25294] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.048029][T25294] ? __dev_queue_xmit+0x2b6/0x3980 [ 598.048041][T25294] ? __local_bh_enable_ip+0xd0/0x130 [ 598.048057][T25294] ? __dev_queue_xmit+0x2b6/0x3980 [ 598.048086][T25294] ? __pfx_rtnl_newlink+0x10/0x10 [ 598.048102][T25294] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 598.048121][T25294] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 598.048137][T25294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.048152][T25294] ? ref_tracker_free+0x693/0x840 [ 598.048168][T25294] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.048189][T25294] netlink_rcv_skb+0x232/0x4b0 [ 598.048207][T25294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.048225][T25294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.048251][T25294] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.048268][T25294] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.048291][T25294] netlink_unicast+0x75c/0x8e0 [ 598.048314][T25294] netlink_sendmsg+0x813/0xb40 [ 598.048338][T25294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.048359][T25294] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.048373][T25294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.048392][T25294] ____sys_sendmsg+0x972/0x9f0 [ 598.048418][T25294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.048444][T25294] ? import_iovec+0x73/0xa0 [ 598.048466][T25294] ___sys_sendmsg+0x2a5/0x360 [ 598.048491][T25294] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.048534][T25294] ? __fget_files+0x2a/0x420 [ 598.048547][T25294] ? __fget_files+0x3a0/0x420 [ 598.048566][T25294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.048590][T25294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.048617][T25294] ? __pfx_ksys_write+0x10/0x10 [ 598.048641][T25294] do_syscall_64+0x14d/0xf80 [ 598.048656][T25294] ? trace_irq_disable+0x3b/0x150 [ 598.048668][T25294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.048681][T25294] ? clear_bhb_loop+0x40/0x90 [ 598.048698][T25294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.048711][T25294] RIP: 0033:0x7f1f2a99c819 [ 598.048725][T25294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.048738][T25294] RSP: 002b:00007f1f28bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.048755][T25294] RAX: ffffffffffffffda RBX: 00007f1f2ac15fa0 RCX: 00007f1f2a99c819 [ 598.048765][T25294] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 598.048781][T25294] RBP: 00007f1f28bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 598.048790][T25294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.048798][T25294] R13: 00007f1f2ac16038 R14: 00007f1f2ac15fa0 R15: 00007ffc3f193ff8 [ 598.048820][T25294] [ 598.454205][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.461664][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.604931][T25274] lo speed is unknown, defaulting to 1000 [ 598.689955][T25300] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 598.919241][T25076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.987361][T25274] lo speed is unknown, defaulting to 1000 [ 598.993812][T25076] veth0_vlan: entered promiscuous mode [ 599.034828][T25076] veth1_vlan: entered promiscuous mode [ 599.093789][ T5897] IPVS: starting estimator thread 0... [ 599.115398][T25076] veth0_macvtap: entered promiscuous mode [ 599.130223][T25076] veth1_macvtap: entered promiscuous mode [ 599.211849][T25314] IPVS: using max 33 ests per chain, 79200 per kthread [ 599.239179][T25076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.343510][T25076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.369604][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.386608][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.399224][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.418490][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.747549][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.768726][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.949091][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.957900][T25337] __nla_validate_parse: 2 callbacks suppressed [ 599.957916][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6143'. [ 599.982358][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.056777][T25337] syzkaller1: entered promiscuous mode [ 600.063179][T25337] syzkaller1: entered allmulticast mode [ 600.099321][T25337] syzkaller1: left promiscuous mode [ 600.110632][T25337] syzkaller1: left allmulticast mode [ 600.119461][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6143'. [ 600.128512][ T5835] Bluetooth: hci2: command tx timeout [ 600.328931][T25351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6148'. [ 600.414985][T25350] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 600.484348][T25354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6151'. [ 600.510116][T25354] nbd: illegal input index -1113835520 [ 600.862828][T25375] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6158'. [ 600.919241][T25379] xt_CT: No such helper "syz1" [ 601.213629][T25394] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6163'. [ 601.264950][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6164'. [ 601.292882][T25396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6164'. [ 601.342233][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6166'. [ 601.355692][T25400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6165'. [ 601.478944][T25413] FAULT_INJECTION: forcing a failure. [ 601.478944][T25413] name failslab, interval 1, probability 0, space 0, times 0 [ 601.492494][T25413] CPU: 0 UID: 0 PID: 25413 Comm: syz.4.6170 Not tainted syzkaller #0 PREEMPT(full) [ 601.492518][T25413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 601.492528][T25413] Call Trace: [ 601.492536][T25413] [ 601.492543][T25413] dump_stack_lvl+0xe8/0x150 [ 601.492569][T25413] should_fail_ex+0x412/0x560 [ 601.492596][T25413] should_failslab+0xa8/0x100 [ 601.492618][T25413] __kmalloc_noprof+0xe8/0x760 [ 601.492635][T25413] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 601.492657][T25413] tomoyo_realpath_from_path+0xe3/0x5d0 [ 601.492681][T25413] ? tomoyo_path_number_perm+0x219/0x630 [ 601.492702][T25413] tomoyo_path_number_perm+0x246/0x630 [ 601.492723][T25413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 601.492752][T25413] ? __lock_acquire+0x6b5/0x2cf0 [ 601.492781][T25413] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 601.492816][T25413] ? __fget_files+0x2a/0x420 [ 601.492832][T25413] ? __fget_files+0x2a/0x420 [ 601.492844][T25413] ? __fget_files+0x3a0/0x420 [ 601.492856][T25413] ? __fget_files+0x2a/0x420 [ 601.492873][T25413] security_file_ioctl+0xc3/0x2a0 [ 601.492895][T25413] __se_sys_ioctl+0x47/0x170 [ 601.492917][T25413] do_syscall_64+0x14d/0xf80 [ 601.492933][T25413] ? trace_irq_disable+0x3b/0x150 [ 601.492946][T25413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.492961][T25413] ? clear_bhb_loop+0x40/0x90 [ 601.492979][T25413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.492994][T25413] RIP: 0033:0x7f710019c819 [ 601.493009][T25413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.493022][T25413] RSP: 002b:00007f7100fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.493045][T25413] RAX: ffffffffffffffda RBX: 00007f7100415fa0 RCX: 00007f710019c819 [ 601.493056][T25413] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 601.493066][T25413] RBP: 00007f7100fef090 R08: 0000000000000000 R09: 0000000000000000 [ 601.493074][T25413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.493083][T25413] R13: 00007f7100416038 R14: 00007f7100415fa0 R15: 00007ffc3240e538 [ 601.493108][T25413] [ 601.493116][T25413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 602.554261][T25432] lo speed is unknown, defaulting to 1000 [ 602.908923][T25464] 8021q: VLANs not supported on wg1 [ 602.979126][T25468] dummy0: entered promiscuous mode [ 602.987493][T25468] bond0: entered promiscuous mode [ 602.993327][T25468] bond_slave_0: entered promiscuous mode [ 602.999603][T25468] bond_slave_1: entered promiscuous mode [ 603.009942][T25468] debugfs: 'hsr1' already exists in 'hsr' [ 603.016439][T25468] Cannot create hsr debugfs directory [ 603.023955][T25468] hsr1: entered allmulticast mode [ 603.029263][T25468] dummy0: entered allmulticast mode [ 603.036223][T25468] bond0: entered allmulticast mode [ 603.067772][T25468] bond_slave_0: entered allmulticast mode [ 603.084686][T25468] bond_slave_1: entered allmulticast mode [ 603.116071][T25432] lo speed is unknown, defaulting to 1000 [ 603.537556][T25484] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 603.756563][T25481] lo speed is unknown, defaulting to 1000 [ 604.755976][T15503] bond0 (unregistering): Released all slaves [ 604.768600][T15503] bond1 (unregistering): (slave veth3): Releasing backup interface [ 604.777933][T15503] bond1 (unregistering): Released all slaves [ 604.790942][T15503] bond2 (unregistering): Released all slaves [ 604.806006][T15503] bond3 (unregistering): Released all slaves [ 604.820702][T15503] bond4 (unregistering): Released all slaves [ 604.836543][T15503] bond5 (unregistering): Released all slaves [ 604.859101][T15503] bond6 (unregistering): Released all slaves [ 604.873668][T15503] bond7 (unregistering): Released all slaves [ 604.886345][T15503] bond8 (unregistering): Released all slaves [ 604.900998][T15503] bond9 (unregistering): Released all slaves [ 604.917310][T15503] bond10 (unregistering): Released all slaves [ 604.939364][T15503] bond11 (unregistering): Released all slaves [ 604.952195][T15503] bond12 (unregistering): Released all slaves [ 604.966296][T15503] bond13 (unregistering): Released all slaves [ 604.984489][T15503] bond14 (unregistering): Released all slaves [ 604.998570][T25481] lo speed is unknown, defaulting to 1000 [ 605.037936][T25497] macvtap0: entered promiscuous mode [ 605.045271][T25497] virtio_net virtio1 eth0: entered promiscuous mode [ 605.063536][T25497] macvtap0: entered allmulticast mode [ 605.069358][T25497] virtio_net virtio1 eth0: entered allmulticast mode [ 605.268466][T25500] virtio_net virtio1 eth0: left allmulticast mode [ 605.292449][T25500] virtio_net virtio1 eth0: left promiscuous mode [ 605.403662][T25516] __nla_validate_parse: 9 callbacks suppressed [ 605.403682][T25516] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6203'. [ 605.436102][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6203'. [ 605.447803][T25516] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6203'. [ 605.467836][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6203'. [ 605.482392][T15503] tipc: Disabling bearer [ 605.498639][T25516] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6203'. [ 605.800028][T15503] tipc: Disabling bearer [ 605.810425][T15503] tipc: Left network mode [ 605.838735][T25527] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6205'. [ 605.848590][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6205'. [ 605.857831][T25527] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6205'. [ 605.867355][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6205'. [ 605.880105][T25527] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6205'. [ 605.938143][T25529] netlink: 'syz.0.6206': attribute type 1 has an invalid length. [ 605.974636][T25529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.595548][T25549] netlink: 'syz.0.6208': attribute type 3 has an invalid length. [ 606.637294][ T5490] virtio_net virtio1 eth0: entered allmulticast mode [ 606.645992][ T5490] virtio_net virtio1 eth0: entered promiscuous mode [ 606.656873][T25549] FAULT_INJECTION: forcing a failure. [ 606.656873][T25549] name failslab, interval 1, probability 0, space 0, times 0 [ 606.690935][T25549] CPU: 1 UID: 0 PID: 25549 Comm: syz.0.6208 Not tainted syzkaller #0 PREEMPT(full) [ 606.690962][T25549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 606.690974][T25549] Call Trace: [ 606.690981][T25549] [ 606.690990][T25549] dump_stack_lvl+0xe8/0x150 [ 606.691023][T25549] should_fail_ex+0x412/0x560 [ 606.691063][T25549] should_failslab+0xa8/0x100 [ 606.691090][T25549] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 606.691111][T25549] ? __alloc_skb+0x186/0x7d0 [ 606.691138][T25549] ? __alloc_skb+0x1d0/0x7d0 [ 606.691156][T25549] ? __local_bh_enable_ip+0xd0/0x130 [ 606.691181][T25549] __alloc_skb+0x1d0/0x7d0 [ 606.691201][T25549] ? netlink_ack_tlv_len+0x6c/0x210 [ 606.691227][T25549] netlink_ack+0x146/0xa50 [ 606.691245][T25549] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.691265][T25549] ? ref_tracker_free+0x693/0x840 [ 606.691286][T25549] ? __pfx_ref_tracker_free+0x10/0x10 [ 606.691312][T25549] netlink_rcv_skb+0x2b6/0x4b0 [ 606.691333][T25549] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.691355][T25549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.691387][T25549] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.691408][T25549] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.691435][T25549] netlink_unicast+0x75c/0x8e0 [ 606.691465][T25549] netlink_sendmsg+0x813/0xb40 [ 606.691496][T25549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.691522][T25549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 606.691542][T25549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.691565][T25549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.691587][T25549] sock_write_iter+0x49b/0x4f0 [ 606.691607][T25549] ? __pfx_sock_write_iter+0x10/0x10 [ 606.691635][T25549] ? bpf_lsm_file_permission+0x9/0x20 [ 606.691656][T25549] ? security_file_permission+0x75/0x260 [ 606.691686][T25549] vfs_write+0x61d/0xb90 [ 606.691718][T25549] ? __pfx_vfs_write+0x10/0x10 [ 606.691745][T25549] ? __fget_files+0x2a/0x420 [ 606.691770][T25549] ksys_write+0x150/0x270 [ 606.691792][T25549] ? __pfx_ksys_write+0x10/0x10 [ 606.691822][T25549] do_syscall_64+0x14d/0xf80 [ 606.691843][T25549] ? trace_irq_disable+0x3b/0x150 [ 606.691860][T25549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.691879][T25549] ? clear_bhb_loop+0x40/0x90 [ 606.691900][T25549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.691917][T25549] RIP: 0033:0x7fedd719c819 [ 606.691935][T25549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.691950][T25549] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.691971][T25549] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 606.691984][T25549] RDX: 000000000000033a RSI: 0000200000000040 RDI: 0000000000000003 [ 606.691996][T25549] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 606.692007][T25549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.692016][T25549] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 606.692050][T25549] [ 607.973375][T25577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.300090][T25588] xt_socket: unknown flags 0x50 [ 608.568065][T25597] sctp: [Deprecated]: syz.2.6220 (pid 25597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.568065][T25597] Use struct sctp_sack_info instead [ 608.682978][T25597] sctp: [Deprecated]: syz.2.6220 (pid 25597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.682978][T25597] Use struct sctp_sack_info instead [ 608.746898][T25597] sctp: [Deprecated]: syz.2.6220 (pid 25597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.746898][T25597] Use struct sctp_sack_info instead [ 608.975404][T15503] hsr_slave_0: left promiscuous mode [ 608.986821][T15503] hsr_slave_1: left promiscuous mode [ 609.536425][T15503] team0 (unregistering): Port device dummy0 removed [ 609.682437][T25607] lo speed is unknown, defaulting to 1000 [ 610.095133][T25607] lo speed is unknown, defaulting to 1000 [ 610.346825][T25658] netlink: 'syz.2.6233': attribute type 1 has an invalid length. [ 610.367503][T25658] netlink: 'syz.2.6233': attribute type 8 has an invalid length. [ 610.396379][T25661] macvlan2: entered promiscuous mode [ 610.411744][T25661] macvlan2: entered allmulticast mode [ 610.425459][T25661] veth1_to_batadv: entered allmulticast mode [ 611.149629][T25686] IPv6: Can't replace route, no match found [ 611.179791][T25686] IPv6: Can't replace route, no match found [ 611.292878][T25672] vlan2: entered allmulticast mode [ 611.298222][T25672] macvtap0: entered allmulticast mode [ 611.350542][T25672] veth0_macvtap: entered allmulticast mode [ 611.453656][T15503] IPVS: stop unused estimator thread 0... [ 611.467718][T25703] __nla_validate_parse: 19 callbacks suppressed [ 611.467738][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6241'. [ 612.142719][T25712] netlink: 'syz.0.6244': attribute type 10 has an invalid length. [ 613.015079][T25717] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6245'. [ 613.025576][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6245'. [ 613.041868][T25717] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6245'. [ 613.081063][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6245'. [ 613.110429][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6246'. [ 613.128210][T25717] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6245'. [ 613.156776][T25721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.157258][T25723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6248'. [ 613.236362][T25721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.250988][T25721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.282341][T25721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6247'. [ 613.325374][T25727] bridge1: entered promiscuous mode [ 613.338956][T25727] bridge1: entered allmulticast mode [ 613.363401][T25727] team0: Port device bridge1 added [ 613.394022][T25727] bridge0: port 3(team0) entered blocking state [ 613.404626][T25727] bridge0: port 3(team0) entered disabled state [ 613.411750][T25727] team0: entered allmulticast mode [ 613.417398][T25727] team_slave_0: entered allmulticast mode [ 613.425716][T25727] team_slave_1: entered allmulticast mode [ 613.438006][T25727] team0: entered promiscuous mode [ 613.445900][T25727] team_slave_0: entered promiscuous mode [ 613.452518][T25727] team_slave_1: entered promiscuous mode [ 613.464868][T25727] bridge0: port 3(team0) entered blocking state [ 613.471314][T25727] bridge0: port 3(team0) entered forwarding state [ 613.522220][T25736] FAULT_INJECTION: forcing a failure. [ 613.522220][T25736] name failslab, interval 1, probability 0, space 0, times 0 [ 613.568892][T25736] CPU: 0 UID: 0 PID: 25736 Comm: syz.1.6253 Not tainted syzkaller #0 PREEMPT(full) [ 613.568917][T25736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.568928][T25736] Call Trace: [ 613.568936][T25736] [ 613.568944][T25736] dump_stack_lvl+0xe8/0x150 [ 613.568974][T25736] should_fail_ex+0x412/0x560 [ 613.569003][T25736] should_failslab+0xa8/0x100 [ 613.569027][T25736] __kvmalloc_node_noprof+0x178/0x8a0 [ 613.569048][T25736] ? page_pool_create_percpu+0x2dd/0xb80 [ 613.569069][T25736] ? page_pool_create_percpu+0xaf/0xb80 [ 613.569091][T25736] page_pool_create_percpu+0x2dd/0xb80 [ 613.569110][T25736] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 613.569136][T25736] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 613.569165][T25736] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 613.569192][T25736] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 613.569221][T25736] ? __pfx_autoremove_wake_function+0x10/0x10 [ 613.569244][T25736] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 613.569286][T25736] ? 0xffffffffa020180c [ 613.569302][T25736] ? 0xffffffffa0201848 [ 613.569317][T25736] ? 0xffffffffa02019d8 [ 613.569331][T25736] ? 0xffffffffa0201a0c [ 613.569344][T25736] ? 0xffffffffa02033cc [ 613.569359][T25736] ? 0xffffffffa020340c [ 613.569373][T25736] ? 0xffffffffa0205048 [ 613.569408][T25736] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 613.569441][T25736] ? _copy_from_user+0x94/0xb0 [ 613.569462][T25736] ? bpf_test_init+0x113/0x150 [ 613.569483][T25736] ? xdp_convert_md_to_buff+0x5b/0x330 [ 613.569515][T25736] bpf_prog_test_run_xdp+0x81c/0x1160 [ 613.569552][T25736] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 613.569579][T25736] ? __fget_files+0x2a/0x420 [ 613.569601][T25736] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 613.569625][T25736] bpf_prog_test_run+0x2c7/0x340 [ 613.569648][T25736] __sys_bpf+0x643/0x950 [ 613.569667][T25736] ? __pfx___sys_bpf+0x10/0x10 [ 613.569698][T25736] ? ksys_write+0x242/0x270 [ 613.569721][T25736] ? __pfx_ksys_write+0x10/0x10 [ 613.569747][T25736] __x64_sys_bpf+0x7c/0x90 [ 613.569772][T25736] do_syscall_64+0x14d/0xf80 [ 613.569792][T25736] ? trace_irq_disable+0x3b/0x150 [ 613.569808][T25736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.569824][T25736] ? clear_bhb_loop+0x40/0x90 [ 613.569842][T25736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.569858][T25736] RIP: 0033:0x7fe6ccd9c819 [ 613.569874][T25736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.569888][T25736] RSP: 002b:00007fe6cdc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 613.569907][T25736] RAX: ffffffffffffffda RBX: 00007fe6cd015fa0 RCX: 00007fe6ccd9c819 [ 613.569918][T25736] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 613.569929][T25736] RBP: 00007fe6cdc01090 R08: 0000000000000000 R09: 0000000000000000 [ 613.569939][T25736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.569949][T25736] R13: 00007fe6cd016038 R14: 00007fe6cd015fa0 R15: 00007ffec7bf6008 [ 613.569977][T25736] [ 613.569983][T25736] page_pool_create_percpu() gave up with errno -12 [ 613.716532][T25742] FAULT_INJECTION: forcing a failure. [ 613.716532][T25742] name failslab, interval 1, probability 0, space 0, times 0 [ 613.921908][T25742] CPU: 1 UID: 0 PID: 25742 Comm: syz.4.6254 Not tainted syzkaller #0 PREEMPT(full) [ 613.921935][T25742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.921945][T25742] Call Trace: [ 613.921952][T25742] [ 613.921960][T25742] dump_stack_lvl+0xe8/0x150 [ 613.921989][T25742] should_fail_ex+0x412/0x560 [ 613.922019][T25742] should_failslab+0xa8/0x100 [ 613.922042][T25742] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 613.922062][T25742] ? __alloc_skb+0x1d0/0x7d0 [ 613.922082][T25742] ? __local_bh_enable_ip+0xd0/0x130 [ 613.922108][T25742] __alloc_skb+0x1d0/0x7d0 [ 613.922134][T25742] netlink_dump+0x1d8/0xe10 [ 613.922158][T25742] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 613.922184][T25742] ? __pfx_netlink_dump+0x10/0x10 [ 613.922215][T25742] ? genl_start+0x581/0x6c0 [ 613.922237][T25742] __netlink_dump_start+0x5cb/0x7e0 [ 613.922265][T25742] genl_family_rcv_msg_dumpit+0x213/0x310 [ 613.922284][T25742] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 613.922298][T25742] ? genl_get_cmd+0x6cb/0x960 [ 613.922319][T25742] ? __pfx_genl_start+0x10/0x10 [ 613.922332][T25742] ? __pfx_genl_dumpit+0x10/0x10 [ 613.922346][T25742] ? __pfx_genl_done+0x10/0x10 [ 613.922375][T25742] genl_rcv_msg+0x5e8/0x7a0 [ 613.922398][T25742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.922413][T25742] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 613.922432][T25742] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 613.922452][T25742] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 613.922484][T25742] netlink_rcv_skb+0x232/0x4b0 [ 613.922504][T25742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.922524][T25742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.922558][T25742] ? down_read+0x272/0x2e0 [ 613.922576][T25742] ? genl_rcv+0xd/0x40 [ 613.922593][T25742] genl_rcv+0x28/0x40 [ 613.922610][T25742] netlink_unicast+0x75c/0x8e0 [ 613.922641][T25742] netlink_sendmsg+0x813/0xb40 [ 613.922670][T25742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.922695][T25742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.922713][T25742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.922732][T25742] ____sys_sendmsg+0x972/0x9f0 [ 613.922759][T25742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.922785][T25742] ? import_iovec+0x73/0xa0 [ 613.922806][T25742] ___sys_sendmsg+0x2a5/0x360 [ 613.922829][T25742] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.922875][T25742] ? __fget_files+0x2a/0x420 [ 613.922895][T25742] ? __fget_files+0x3a0/0x420 [ 613.922915][T25742] __x64_sys_sendmsg+0x1bd/0x2a0 [ 613.922942][T25742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.922968][T25742] ? __pfx_ksys_write+0x10/0x10 [ 613.922993][T25742] do_syscall_64+0x14d/0xf80 [ 613.923007][T25742] ? trace_irq_disable+0x3b/0x150 [ 613.923019][T25742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.923033][T25742] ? clear_bhb_loop+0x40/0x90 [ 613.923050][T25742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.923065][T25742] RIP: 0033:0x7f710019c819 [ 613.923082][T25742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.923094][T25742] RSP: 002b:00007f7100fef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.923111][T25742] RAX: ffffffffffffffda RBX: 00007f7100415fa0 RCX: 00007f710019c819 [ 613.923122][T25742] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 613.923131][T25742] RBP: 00007f7100fef090 R08: 0000000000000000 R09: 0000000000000000 [ 613.923139][T25742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.923148][T25742] R13: 00007f7100416038 R14: 00007f7100415fa0 R15: 00007ffc3240e538 [ 613.923170][T25742] [ 614.432928][T25756] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 614.440821][T25754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6261'. [ 614.454076][T25754] netem: incorrect gi model size [ 614.459053][T25754] netem: change failed [ 615.432321][T25807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.864307][T25799] lo speed is unknown, defaulting to 1000 [ 615.894464][T25837] syz_tun: entered allmulticast mode [ 615.904651][T25836] syz_tun: left allmulticast mode [ 616.281036][T25850] netlink: 'syz.0.6287': attribute type 10 has an invalid length. [ 616.675272][T25799] lo speed is unknown, defaulting to 1000 [ 617.585607][T25874] FAULT_INJECTION: forcing a failure. [ 617.585607][T25874] name failslab, interval 1, probability 0, space 0, times 0 [ 617.614784][T25874] CPU: 0 UID: 0 PID: 25874 Comm: syz.0.6293 Not tainted syzkaller #0 PREEMPT(full) [ 617.614810][T25874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 617.614821][T25874] Call Trace: [ 617.614829][T25874] [ 617.614838][T25874] dump_stack_lvl+0xe8/0x150 [ 617.614869][T25874] should_fail_ex+0x412/0x560 [ 617.614901][T25874] should_failslab+0xa8/0x100 [ 617.614927][T25874] __kmalloc_cache_noprof+0x88/0x660 [ 617.614947][T25874] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 617.614967][T25874] ? sctp_v6_cmp_addr+0x15/0xd0 [ 617.614985][T25874] ? sctp_add_bind_addr+0x8c/0x370 [ 617.615009][T25874] sctp_add_bind_addr+0x8c/0x370 [ 617.615033][T25874] sctp_copy_local_addr_list+0x314/0x4f0 [ 617.615056][T25874] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 617.615076][T25874] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 617.615097][T25874] ? sctp_v6_is_any+0x64/0x80 [ 617.615117][T25874] ? sctp_copy_one_addr+0x93/0x360 [ 617.615138][T25874] sctp_bind_addr_copy+0xb3/0x3c0 [ 617.615158][T25874] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 617.615195][T25874] sctp_connect_new_asoc+0x2ff/0x6b0 [ 617.615220][T25874] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 617.615249][T25874] ? __local_bh_enable_ip+0xd0/0x130 [ 617.615285][T25874] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 617.615307][T25874] ? security_sctp_bind_connect+0x7e/0x2c0 [ 617.615334][T25874] sctp_sendmsg+0x1528/0x2c10 [ 617.615371][T25874] ? __pfx_sctp_sendmsg+0x10/0x10 [ 617.615396][T25874] ? aa_sk_perm+0x6d5/0x900 [ 617.615430][T25874] ? __pfx_aa_sk_perm+0x10/0x10 [ 617.615458][T25874] ? sock_rps_record_flow+0x19/0x350 [ 617.615483][T25874] ? __pfx_inet_sendmsg+0x10/0x10 [ 617.615509][T25874] ? inet_sendmsg+0x2f4/0x370 [ 617.615533][T25874] ? __pfx_inet_sendmsg+0x10/0x10 [ 617.615558][T25874] __sys_sendto+0x5de/0x710 [ 617.615584][T25874] ? __pfx___sys_sendto+0x10/0x10 [ 617.615605][T25874] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 617.615640][T25874] ? __fget_files+0x3a0/0x420 [ 617.615668][T25874] ? ksys_write+0x242/0x270 [ 617.615690][T25874] ? __pfx_ksys_write+0x10/0x10 [ 617.615716][T25874] __x64_sys_sendto+0xde/0x100 [ 617.615743][T25874] do_syscall_64+0x14d/0xf80 [ 617.615762][T25874] ? trace_irq_disable+0x3b/0x150 [ 617.615778][T25874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.615797][T25874] ? clear_bhb_loop+0x40/0x90 [ 617.615819][T25874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.615837][T25874] RIP: 0033:0x7fedd719c819 [ 617.615855][T25874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.615871][T25874] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 617.615893][T25874] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 617.615907][T25874] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 617.615919][T25874] RBP: 00007fedd80e7090 R08: 0000200000000140 R09: 000000000000001c [ 617.615931][T25874] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 617.615942][T25874] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 617.615972][T25874] [ 624.648092][T25933] __nla_validate_parse: 16 callbacks suppressed [ 624.648114][T25933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6296'. [ 624.702374][T25931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.818520][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6300'. [ 624.923115][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6303'. [ 624.951347][T25948] bridge_slave_0: left allmulticast mode [ 624.958068][T25948] bridge_slave_0: left promiscuous mode [ 624.987562][T25948] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.010644][T25948] bridge_slave_1: left allmulticast mode [ 625.018703][T25948] bridge_slave_1: left promiscuous mode [ 625.024938][T25948] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.036493][T25955] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6306'. [ 625.047387][T25948] bond0: (slave bond_slave_0): Releasing backup interface [ 625.064814][T25948] bond0: (slave bond_slave_1): Releasing backup interface [ 625.088996][T25948] team0: Port device team_slave_0 removed [ 625.104019][T25959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6305'. [ 625.105924][T25960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6307'. [ 625.122242][T25948] team0: Port device team_slave_1 removed [ 625.130839][T25948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.138952][T25948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.148305][T25948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.157284][T25948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.166225][T25948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 625.208833][T25962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 625.404308][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6310'. [ 625.445737][T25972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6310'. [ 625.475384][T25972] netlink: 'syz.2.6310': attribute type 20 has an invalid length. [ 625.754324][T25973] lo speed is unknown, defaulting to 1000 [ 625.889175][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6315'. [ 625.962795][T25997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6317'. [ 626.197401][T25973] lo speed is unknown, defaulting to 1000 [ 626.649810][T26009] netlink: 'syz.0.6323': attribute type 10 has an invalid length. [ 627.005048][T26032] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 627.024814][T26034] x_tables: duplicate underflow at hook 1 [ 627.047879][T26035] FAULT_INJECTION: forcing a failure. [ 627.047879][T26035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.079759][T26035] CPU: 1 UID: 0 PID: 26035 Comm: syz.0.6333 Not tainted syzkaller #0 PREEMPT(full) [ 627.079785][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 627.079797][T26035] Call Trace: [ 627.079804][T26035] [ 627.079813][T26035] dump_stack_lvl+0xe8/0x150 [ 627.079843][T26035] should_fail_ex+0x412/0x560 [ 627.079876][T26035] _copy_to_user+0x31/0xb0 [ 627.079900][T26035] bpf_test_finish+0x1db/0x6b0 [ 627.079930][T26035] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 627.079955][T26035] ? __pfx_bpf_test_finish+0x10/0x10 [ 627.079981][T26035] ? _copy_from_user+0x94/0xb0 [ 627.080001][T26035] ? bpf_test_init+0x113/0x150 [ 627.080024][T26035] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 627.080062][T26035] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 627.080087][T26035] ? __fget_files+0x2a/0x420 [ 627.080109][T26035] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 627.080133][T26035] bpf_prog_test_run+0x2c7/0x340 [ 627.080185][T26035] __sys_bpf+0x643/0x950 [ 627.080203][T26035] ? __pfx___sys_bpf+0x10/0x10 [ 627.080234][T26035] ? ksys_write+0x242/0x270 [ 627.080256][T26035] ? __pfx_ksys_write+0x10/0x10 [ 627.080289][T26035] __x64_sys_bpf+0x7c/0x90 [ 627.080311][T26035] do_syscall_64+0x14d/0xf80 [ 627.080331][T26035] ? trace_irq_disable+0x3b/0x150 [ 627.080347][T26035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.080364][T26035] ? clear_bhb_loop+0x40/0x90 [ 627.080384][T26035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.080400][T26035] RIP: 0033:0x7fedd719c819 [ 627.080417][T26035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.080437][T26035] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 627.080457][T26035] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 627.080470][T26035] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 627.080481][T26035] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 627.080492][T26035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.080509][T26035] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 627.080535][T26035] [ 627.440203][T26045] netlink: 'syz.0.6336': attribute type 1 has an invalid length. [ 627.487090][T26046] netlink: 'syz.3.6337': attribute type 1 has an invalid length. [ 627.520013][T26042] netlink: 'syz.0.6336': attribute type 4 has an invalid length. [ 627.669425][T26046] bond3: entered promiscuous mode [ 627.676316][T26046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 627.699844][T26049] vlan4: entered allmulticast mode [ 627.724284][T26049] bond3: entered allmulticast mode [ 627.799179][T26051] bond3: (slave bridge5): making interface the new active one [ 627.818960][T26051] bridge5: entered promiscuous mode [ 627.826296][T26051] bridge5: entered allmulticast mode [ 627.834641][T26051] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 627.906987][T26059] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 627.928313][T26059] 0ªî{X¹¦: entered allmulticast mode [ 627.934824][T26059] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 628.252513][T26080] FAULT_INJECTION: forcing a failure. [ 628.252513][T26080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.268679][T26080] CPU: 1 UID: 0 PID: 26080 Comm: syz.4.6347 Not tainted syzkaller #0 PREEMPT(full) [ 628.268707][T26080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.268719][T26080] Call Trace: [ 628.268726][T26080] [ 628.268735][T26080] dump_stack_lvl+0xe8/0x150 [ 628.268765][T26080] should_fail_ex+0x412/0x560 [ 628.268796][T26080] _copy_from_user+0x2d/0xb0 [ 628.268819][T26080] vmemdup_user+0x5e/0xd0 [ 628.268844][T26080] map_get_next_key+0x1c3/0x620 [ 628.268865][T26080] ? bpf_lsm_bpf+0x9/0x20 [ 628.268888][T26080] ? security_bpf+0x7e/0x2d0 [ 628.268915][T26080] __sys_bpf+0x768/0x950 [ 628.268934][T26080] ? __pfx___sys_bpf+0x10/0x10 [ 628.268967][T26080] ? ksys_write+0x242/0x270 [ 628.268989][T26080] ? __pfx_ksys_write+0x10/0x10 [ 628.269016][T26080] __x64_sys_bpf+0x7c/0x90 [ 628.269041][T26080] do_syscall_64+0x14d/0xf80 [ 628.269061][T26080] ? trace_irq_disable+0x3b/0x150 [ 628.269077][T26080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.269094][T26080] ? clear_bhb_loop+0x40/0x90 [ 628.269115][T26080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.269131][T26080] RIP: 0033:0x7f710019c819 [ 628.269149][T26080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.269175][T26080] RSP: 002b:00007f7100fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 628.269196][T26080] RAX: ffffffffffffffda RBX: 00007f7100415fa0 RCX: 00007f710019c819 [ 628.269210][T26080] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 628.269222][T26080] RBP: 00007f7100fef090 R08: 0000000000000000 R09: 0000000000000000 [ 628.269232][T26080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.269251][T26080] R13: 00007f7100416038 R14: 00007f7100415fa0 R15: 00007ffc3240e538 [ 628.269280][T26080] [ 628.515029][T26083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.642867][T26090] FAULT_INJECTION: forcing a failure. [ 628.642867][T26090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.657635][T26090] CPU: 1 UID: 0 PID: 26090 Comm: syz.2.6354 Not tainted syzkaller #0 PREEMPT(full) [ 628.657659][T26090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.657670][T26090] Call Trace: [ 628.657678][T26090] [ 628.657686][T26090] dump_stack_lvl+0xe8/0x150 [ 628.657715][T26090] should_fail_ex+0x412/0x560 [ 628.657746][T26090] _copy_from_user+0x2d/0xb0 [ 628.657767][T26090] bpf_test_init+0xd8/0x150 [ 628.657793][T26090] bpf_prog_test_run_xdp+0x529/0x1160 [ 628.657830][T26090] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 628.657858][T26090] ? __fget_files+0x2a/0x420 [ 628.657888][T26090] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 628.657912][T26090] bpf_prog_test_run+0x2c7/0x340 [ 628.657935][T26090] __sys_bpf+0x643/0x950 [ 628.657954][T26090] ? __pfx___sys_bpf+0x10/0x10 [ 628.657986][T26090] ? ksys_write+0x242/0x270 [ 628.658007][T26090] ? __pfx_ksys_write+0x10/0x10 [ 628.658034][T26090] __x64_sys_bpf+0x7c/0x90 [ 628.658059][T26090] do_syscall_64+0x14d/0xf80 [ 628.658080][T26090] ? trace_irq_disable+0x3b/0x150 [ 628.658096][T26090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.658114][T26090] ? clear_bhb_loop+0x40/0x90 [ 628.658134][T26090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.658150][T26090] RIP: 0033:0x7f1f2a99c819 [ 628.658168][T26090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.658182][T26090] RSP: 002b:00007f1f28bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 628.658203][T26090] RAX: ffffffffffffffda RBX: 00007f1f2ac15fa0 RCX: 00007f1f2a99c819 [ 628.658216][T26090] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 628.658229][T26090] RBP: 00007f1f28bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 628.658241][T26090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.658252][T26090] R13: 00007f1f2ac16038 R14: 00007f1f2ac15fa0 R15: 00007ffc3f193ff8 [ 628.658281][T26090] [ 629.050238][T26106] tls_set_device_offload_rx: netdev not found [ 629.229619][T26117] macsec1: entered promiscuous mode [ 629.394739][T26126] x_tables: duplicate entry at hook 2 [ 629.652131][T26140] __nla_validate_parse: 82 callbacks suppressed [ 629.652149][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6372'. [ 629.740578][T26145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6373'. [ 629.804880][T26137] syzkaller0: entered promiscuous mode [ 629.810411][T26137] syzkaller0: entered allmulticast mode [ 629.828998][T15497] bridge_slave_1: left allmulticast mode [ 629.838373][T26144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.856423][T15497] bridge_slave_1: left promiscuous mode [ 629.875319][T15497] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.890248][T15497] bridge_slave_0: left allmulticast mode [ 629.907543][T15497] bridge_slave_0: left promiscuous mode [ 629.914222][T15497] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.087951][T26161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6376'. [ 630.107220][T26161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6376'. [ 630.398512][T26167] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6379'. [ 630.437885][T15497] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 630.447121][T15497] bridge6 (unregistering): left promiscuous mode [ 630.486660][T15497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.498147][T15497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.508723][T15497] bond0 (unregistering): Released all slaves [ 630.523415][T15497] bond1 (unregistering): Released all slaves [ 630.540304][T15497] bond2 (unregistering): Released all slaves [ 630.558278][T15497] bond3 (unregistering): Released all slaves [ 630.576106][T15497] bond4 (unregistering): Released all slaves [ 630.595006][T15497] bond5 (unregistering): Released all slaves [ 630.614637][T15497] bond6 (unregistering): Released all slaves [ 630.656661][T26176] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6380'. [ 630.666886][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 630.676304][T26176] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6380'. [ 630.685646][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 630.694879][T26176] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6380'. [ 630.695154][T15497] bond7 (unregistering): Released all slaves [ 633.152159][T15497] tipc: Disabling bearer [ 633.162475][T15497] tipc: Left network mode [ 634.822834][T26219] __nla_validate_parse: 7 callbacks suppressed [ 634.822852][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6389'. [ 634.852428][T26213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.199604][T15497] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 635.568512][T26194] lo speed is unknown, defaulting to 1000 [ 635.930160][T26194] lo speed is unknown, defaulting to 1000 [ 635.974289][T26245] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6394'. [ 636.025499][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6394'. [ 636.063700][T26245] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6394'. [ 636.103836][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6394'. [ 636.134111][T26245] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6394'. [ 636.178753][T26249] netlink: set zone limit has 8 unknown bytes [ 636.316763][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.327582][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.337644][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 636.346837][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 636.365479][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 637.178359][T26251] lo speed is unknown, defaulting to 1000 [ 637.621622][T15497] team0 (unregistering): Port device team_slave_1 removed [ 637.654468][T15497] team0 (unregistering): Port device team_slave_0 removed [ 637.746879][T15497] team0 (unregistering): Port device dummy0 removed [ 637.774831][T26251] lo speed is unknown, defaulting to 1000 [ 637.939762][ T525] smc: removing ib device sqz0 [ 637.945428][T15499] smc: removing ib device !yz! [ 638.396716][T26251] chnl_net:caif_netlink_parms(): no params data found [ 638.441944][ T5833] Bluetooth: hci3: command tx timeout [ 638.825796][T26251] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.867861][T26251] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.881594][T26251] bridge_slave_0: entered allmulticast mode [ 638.911751][T26251] bridge_slave_0: entered promiscuous mode [ 638.920592][T26251] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.929132][T26251] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.942639][T26251] bridge_slave_1: entered allmulticast mode [ 638.990575][T26251] bridge_slave_1: entered promiscuous mode [ 639.134282][T26251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.174797][T26251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.386317][T26251] team0: Port device team_slave_0 added [ 639.395832][T26251] team0: Port device team_slave_1 added [ 639.486604][T26251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.493872][T26251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.521450][T26251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.535417][T26251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.544586][T26251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.571797][T26251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.722448][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.770996][T26251] hsr_slave_0: entered promiscuous mode [ 639.779549][T26251] hsr_slave_1: entered promiscuous mode [ 640.532075][ T5835] Bluetooth: hci3: command tx timeout [ 640.616370][T26251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.630750][T26251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.853082][T26251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.864504][T26251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.990186][T26251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.006501][T26251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.124807][T26251] team0: Port device netdevsim0 removed [ 641.167210][T26251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.197684][T26251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.784704][T26251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 641.832194][T26251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 641.876890][T26251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 641.926169][T26251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 642.225875][T26290] bridge0: port 4(erspan0) entered blocking state [ 642.233149][T26290] bridge0: port 4(erspan0) entered disabled state [ 642.240097][T26290] erspan0: entered allmulticast mode [ 642.274109][T26290] erspan0: entered promiscuous mode [ 642.289811][T26290] bridge0: port 4(erspan0) entered blocking state [ 642.296709][T26290] bridge0: port 4(erspan0) entered forwarding state [ 642.304589][T26294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6401'. [ 642.372315][T26293] erspan0: left allmulticast mode [ 642.391216][T26293] erspan0: left promiscuous mode [ 642.407296][T26293] bridge0: port 4(erspan0) entered disabled state [ 642.550647][T15497] IPVS: stop unused estimator thread 0... [ 642.603005][ T5835] Bluetooth: hci3: command tx timeout [ 642.637950][T26251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.822943][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6402'. [ 642.872155][T26302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6403'. [ 642.889327][T26302] vlan2: entered promiscuous mode [ 642.895561][T26302] veth1: entered promiscuous mode [ 642.999176][T26251] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.046072][T15503] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.053316][T15503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.082299][T15503] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.089455][T15503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.116800][T26304] netlink: 'syz.0.6404': attribute type 1 has an invalid length. [ 643.422259][T26316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6407'. [ 643.460799][T26316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6407'. [ 643.988118][T26316] vlan2: entered allmulticast mode [ 644.014848][T26316] bridge_slave_0: entered allmulticast mode [ 644.023662][T26316] bridge0: port 1(vlan2) entered blocking state [ 644.030329][T26316] bridge0: port 1(vlan2) entered disabled state [ 644.046311][T26341] netlink: 'syz.0.6412': attribute type 3 has an invalid length. [ 644.055477][T26316] vlan2: entered promiscuous mode [ 644.062492][T26316] bridge_slave_0: entered promiscuous mode [ 644.134027][ T1170] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.159320][ T1170] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.223784][ T1170] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.236761][ T1170] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.264828][T26333] lo speed is unknown, defaulting to 1000 [ 644.266272][T26343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6413'. [ 644.288355][T26251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.507639][T26251] veth0_vlan: entered promiscuous mode [ 644.551888][T26251] veth1_vlan: entered promiscuous mode [ 644.661013][T26251] veth0_macvtap: entered promiscuous mode [ 644.683399][ T5835] Bluetooth: hci3: command tx timeout [ 644.704721][T26251] veth1_macvtap: entered promiscuous mode [ 644.787229][T26251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.821965][T26251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.849339][T15503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.873578][T15503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.907928][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.928234][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.035796][T26358] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 645.083918][T26352] lo speed is unknown, defaulting to 1000 [ 645.258558][T26365] FAULT_INJECTION: forcing a failure. [ 645.258558][T26365] name failslab, interval 1, probability 0, space 0, times 0 [ 645.305201][T26365] CPU: 1 UID: 0 PID: 26365 Comm: syz.2.6422 Not tainted syzkaller #0 PREEMPT(full) [ 645.305229][T26365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.305240][T26365] Call Trace: [ 645.305248][T26365] [ 645.305256][T26365] dump_stack_lvl+0xe8/0x150 [ 645.305287][T26365] should_fail_ex+0x412/0x560 [ 645.305319][T26365] should_failslab+0xa8/0x100 [ 645.305343][T26365] ? mas_alloc_nodes+0x291/0x350 [ 645.305362][T26365] kmem_cache_alloc_noprof+0x87/0x650 [ 645.305390][T26365] mas_alloc_nodes+0x291/0x350 [ 645.305412][T26365] mas_preallocate+0x2d6/0x640 [ 645.305459][T26365] ? rcu_is_watching+0x15/0xb0 [ 645.305483][T26365] ? __pfx_mas_preallocate+0x10/0x10 [ 645.305535][T26365] ? __mas_set_range+0x12f/0x3c0 [ 645.305577][T26365] __split_vma+0x318/0xa40 [ 645.305717][T26365] ? __pfx___split_vma+0x10/0x10 [ 645.305753][T26365] ? __pfx___up_read+0x10/0x10 [ 645.305793][T26365] vms_gather_munmap_vmas+0x32d/0x1370 [ 645.305816][T26365] ? __mt_destroy+0x1c9/0x280 [ 645.305852][T26365] ? vms_complete_munmap_vmas+0xa0b/0xc60 [ 645.305898][T26365] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 645.306000][T26365] do_vmi_align_munmap+0x2b4/0x4b0 [ 645.306044][T26365] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 645.306101][T26365] do_vmi_munmap+0x252/0x2d0 [ 645.306142][T26365] __vm_munmap+0x22c/0x3d0 [ 645.306170][T26365] ? __pfx___vm_munmap+0x10/0x10 [ 645.306194][T26365] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 645.306232][T26365] ? rcu_is_watching+0x15/0xb0 [ 645.306265][T26365] __x64_sys_munmap+0x60/0x70 [ 645.306286][T26365] do_syscall_64+0x14d/0xf80 [ 645.306307][T26365] ? trace_irq_disable+0x3b/0x150 [ 645.306323][T26365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.306343][T26365] ? clear_bhb_loop+0x40/0x90 [ 645.306366][T26365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.306386][T26365] RIP: 0033:0x7f1f2a99c647 [ 645.306405][T26365] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.306421][T26365] RSP: 002b:00007f1f28bf4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 645.306443][T26365] RAX: ffffffffffffffda RBX: 00007f1f24000000 RCX: 00007f1f2a99c647 [ 645.306457][T26365] RDX: 0000000000000000 RSI: 0000000000a00000 RDI: 00007f1f28000000 [ 645.306470][T26365] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 645.306482][T26365] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 645.306495][T26365] R13: 0000000000001000 R14: 00007f1f28000000 R15: 0000000003600000 [ 645.306526][T26365] [ 645.656689][T26369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6423'. [ 645.818751][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.894810][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.979021][T15499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.008192][T15499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.078117][T26380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6425'. [ 646.520137][T26392] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6428'. [ 646.530118][T26392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6428'. [ 647.119463][T26404] sctp: [Deprecated]: syz.0.6435 (pid 26404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.119463][T26404] Use struct sctp_sack_info instead [ 647.220979][T26412] caif0: entered allmulticast mode [ 647.227621][T26412] netlink: 'syz.0.6438': attribute type 6 has an invalid length. [ 647.690675][T26427] FAULT_INJECTION: forcing a failure. [ 647.690675][T26427] name failslab, interval 1, probability 0, space 0, times 0 [ 647.740602][T26427] CPU: 1 UID: 0 PID: 26427 Comm: syz.3.6442 Not tainted syzkaller #0 PREEMPT(full) [ 647.740631][T26427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.740643][T26427] Call Trace: [ 647.740650][T26427] [ 647.740658][T26427] dump_stack_lvl+0xe8/0x150 [ 647.740686][T26427] should_fail_ex+0x412/0x560 [ 647.740715][T26427] should_failslab+0xa8/0x100 [ 647.740738][T26427] __kmalloc_noprof+0xe8/0x760 [ 647.740759][T26427] ? security_sk_alloc+0x52/0x360 [ 647.740785][T26427] security_sk_alloc+0x52/0x360 [ 647.740806][T26427] sk_prot_alloc+0x101/0x210 [ 647.740830][T26427] ? sk_alloc+0x27/0x390 [ 647.740850][T26427] sk_alloc+0x3a/0x390 [ 647.740871][T26427] bpf_prog_test_run_skb+0x409/0x21f0 [ 647.740906][T26427] ? __fget_files+0x2a/0x420 [ 647.740921][T26427] ? __fget_files+0x3a0/0x420 [ 647.740933][T26427] ? __fget_files+0x2a/0x420 [ 647.740952][T26427] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 647.740972][T26427] bpf_prog_test_run+0x2c7/0x340 [ 647.740995][T26427] __sys_bpf+0x643/0x950 [ 647.741011][T26427] ? __pfx___sys_bpf+0x10/0x10 [ 647.741040][T26427] ? ksys_write+0x242/0x270 [ 647.741061][T26427] ? __pfx_ksys_write+0x10/0x10 [ 647.741086][T26427] __x64_sys_bpf+0x7c/0x90 [ 647.741111][T26427] do_syscall_64+0x14d/0xf80 [ 647.741130][T26427] ? trace_irq_disable+0x3b/0x150 [ 647.741144][T26427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.741160][T26427] ? clear_bhb_loop+0x40/0x90 [ 647.741182][T26427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.741199][T26427] RIP: 0033:0x7f18ba59c819 [ 647.741217][T26427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.741233][T26427] RSP: 002b:00007f18bb493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.741254][T26427] RAX: ffffffffffffffda RBX: 00007f18ba815fa0 RCX: 00007f18ba59c819 [ 647.741267][T26427] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 647.741279][T26427] RBP: 00007f18bb493090 R08: 0000000000000000 R09: 0000000000000000 [ 647.741290][T26427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.741301][T26427] R13: 00007f18ba816038 R14: 00007f18ba815fa0 R15: 00007ffd7cd74468 [ 647.741330][T26427] [ 648.154651][T26439] __nla_validate_parse: 5 callbacks suppressed [ 648.154674][T26439] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6449'. [ 648.268410][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6451'. [ 648.309328][T26444] netlink: 'syz.3.6452': attribute type 1 has an invalid length. [ 648.407890][T26455] syzkaller0: entered promiscuous mode [ 648.422658][T26455] syzkaller0: entered allmulticast mode [ 648.505872][T26457] FAULT_INJECTION: forcing a failure. [ 648.505872][T26457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.508916][T26460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6456'. [ 648.542106][T26457] CPU: 1 UID: 0 PID: 26457 Comm: syz.0.6455 Not tainted syzkaller #0 PREEMPT(full) [ 648.542142][T26457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.542153][T26457] Call Trace: [ 648.542160][T26457] [ 648.542169][T26457] dump_stack_lvl+0xe8/0x150 [ 648.542206][T26457] should_fail_ex+0x412/0x560 [ 648.542237][T26457] _copy_to_user+0x31/0xb0 [ 648.542262][T26457] simple_read_from_buffer+0xe1/0x170 [ 648.542291][T26457] proc_fail_nth_read+0x1bb/0x230 [ 648.542320][T26457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.542348][T26457] ? rw_verify_area+0x2a6/0x4d0 [ 648.542366][T26457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.542393][T26457] vfs_read+0x20c/0xa70 [ 648.542411][T26457] ? fdget_pos+0x246/0x320 [ 648.542432][T26457] ? __pfx___mutex_lock+0x10/0x10 [ 648.542454][T26457] ? __pfx_vfs_read+0x10/0x10 [ 648.542476][T26457] ? __fget_files+0x2a/0x420 [ 648.542496][T26457] ? __fget_files+0x3a0/0x420 [ 648.542511][T26457] ? __fget_files+0x2a/0x420 [ 648.542537][T26457] ksys_read+0x150/0x270 [ 648.542559][T26457] ? __pfx_ksys_read+0x10/0x10 [ 648.542589][T26457] do_syscall_64+0x14d/0xf80 [ 648.542608][T26457] ? trace_irq_disable+0x3b/0x150 [ 648.542624][T26457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.542642][T26457] ? clear_bhb_loop+0x40/0x90 [ 648.542664][T26457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.542682][T26457] RIP: 0033:0x7fedd715d04e [ 648.542699][T26457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 648.542714][T26457] RSP: 002b:00007fedd80c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.542734][T26457] RAX: ffffffffffffffda RBX: 00007fedd80c66c0 RCX: 00007fedd715d04e [ 648.542747][T26457] RDX: 000000000000000f RSI: 00007fedd80c60a0 RDI: 0000000000000004 [ 648.542758][T26457] RBP: 00007fedd80c6090 R08: 0000000000000000 R09: 0000000000000000 [ 648.542769][T26457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.542779][T26457] R13: 00007fedd7416128 R14: 00007fedd7416090 R15: 00007ffca2dd6ce8 [ 648.542807][T26457] [ 649.264796][T26477] FAULT_INJECTION: forcing a failure. [ 649.264796][T26477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.307827][T26477] CPU: 0 UID: 0 PID: 26477 Comm: syz.1.6462 Not tainted syzkaller #0 PREEMPT(full) [ 649.307852][T26477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.307863][T26477] Call Trace: [ 649.307871][T26477] [ 649.307879][T26477] dump_stack_lvl+0xe8/0x150 [ 649.307909][T26477] should_fail_ex+0x412/0x560 [ 649.307940][T26477] _copy_from_iter+0x1d3/0x1670 [ 649.307964][T26477] ? rcu_is_watching+0x15/0xb0 [ 649.307994][T26477] ? __pfx__copy_from_iter+0x10/0x10 [ 649.308018][T26477] ? netlink_sendmsg+0x650/0xb40 [ 649.308041][T26477] ? skb_put+0x11b/0x210 [ 649.308066][T26477] netlink_sendmsg+0x6c0/0xb40 [ 649.308098][T26477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.308124][T26477] ? aa_sock_msg_perm+0xf1/0x1b0 [ 649.308144][T26477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.308168][T26477] ____sys_sendmsg+0x972/0x9f0 [ 649.308201][T26477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.308234][T26477] ? import_iovec+0x73/0xa0 [ 649.308258][T26477] ___sys_sendmsg+0x2a5/0x360 [ 649.308288][T26477] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.308344][T26477] ? __fget_files+0x2a/0x420 [ 649.308361][T26477] ? __fget_files+0x3a0/0x420 [ 649.308388][T26477] __x64_sys_sendmsg+0x1bd/0x2a0 [ 649.308416][T26477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.308449][T26477] ? __pfx_ksys_write+0x10/0x10 [ 649.308480][T26477] do_syscall_64+0x14d/0xf80 [ 649.308500][T26477] ? trace_irq_disable+0x3b/0x150 [ 649.308515][T26477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.308532][T26477] ? clear_bhb_loop+0x40/0x90 [ 649.308554][T26477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.308571][T26477] RIP: 0033:0x7fe6ccd9c819 [ 649.308589][T26477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.308605][T26477] RSP: 002b:00007fe6cdc01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.308625][T26477] RAX: ffffffffffffffda RBX: 00007fe6cd015fa0 RCX: 00007fe6ccd9c819 [ 649.308639][T26477] RDX: 0000000004000052 RSI: 0000200000000100 RDI: 0000000000000009 [ 649.308651][T26477] RBP: 00007fe6cdc01090 R08: 0000000000000000 R09: 0000000000000000 [ 649.308663][T26477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.308674][T26477] R13: 00007fe6cd016038 R14: 00007fe6cd015fa0 R15: 00007ffec7bf6008 [ 649.308703][T26477] [ 649.626390][T26477] 8021q: VLANs not supported on vxcan1 [ 649.904881][T26499] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6468'. [ 649.943688][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6471'. [ 649.956746][T26499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6468'. [ 649.998746][T26499] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6468'. [ 650.051831][T26499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6468'. [ 650.081787][T26499] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6468'. [ 650.134682][T26508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6472'. [ 650.409276][T26521] syzkaller0: entered promiscuous mode [ 650.425314][T26521] syzkaller0: entered allmulticast mode [ 650.450314][T26524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.501078][T26529] netlink: 'syz.2.6479': attribute type 10 has an invalid length. [ 650.609551][T26535] FAULT_INJECTION: forcing a failure. [ 650.609551][T26535] name failslab, interval 1, probability 0, space 0, times 0 [ 650.636825][T26535] CPU: 1 UID: 0 PID: 26535 Comm: syz.2.6479 Not tainted syzkaller #0 PREEMPT(full) [ 650.636852][T26535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 650.636865][T26535] Call Trace: [ 650.636872][T26535] [ 650.636882][T26535] dump_stack_lvl+0xe8/0x150 [ 650.636913][T26535] should_fail_ex+0x412/0x560 [ 650.636946][T26535] should_failslab+0xa8/0x100 [ 650.636972][T26535] __kmalloc_noprof+0xe8/0x760 [ 650.636994][T26535] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 650.637020][T26535] tomoyo_realpath_from_path+0xe3/0x5d0 [ 650.637048][T26535] ? tomoyo_path_number_perm+0x219/0x630 [ 650.637074][T26535] tomoyo_path_number_perm+0x246/0x630 [ 650.637101][T26535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 650.637128][T26535] ? __lock_acquire+0x6b5/0x2cf0 [ 650.637163][T26535] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 650.637205][T26535] ? __fget_files+0x2a/0x420 [ 650.637226][T26535] ? __fget_files+0x2a/0x420 [ 650.637242][T26535] ? __fget_files+0x3a0/0x420 [ 650.637257][T26535] ? __fget_files+0x2a/0x420 [ 650.637277][T26535] security_file_ioctl+0xc3/0x2a0 [ 650.637303][T26535] __se_sys_ioctl+0x47/0x170 [ 650.637328][T26535] do_syscall_64+0x14d/0xf80 [ 650.637347][T26535] ? trace_irq_disable+0x3b/0x150 [ 650.637363][T26535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.637381][T26535] ? clear_bhb_loop+0x40/0x90 [ 650.637403][T26535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.637422][T26535] RIP: 0033:0x7f1f2a99c819 [ 650.637440][T26535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.637455][T26535] RSP: 002b:00007f1f28bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.637477][T26535] RAX: ffffffffffffffda RBX: 00007f1f2ac16180 RCX: 00007f1f2a99c819 [ 650.637490][T26535] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 000000000000000a [ 650.637502][T26535] RBP: 00007f1f28bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 650.637514][T26535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.637524][T26535] R13: 00007f1f2ac16218 R14: 00007f1f2ac16180 R15: 00007ffc3f193ff8 [ 650.637561][T26535] [ 650.637570][T26535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 650.662639][T26529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 650.774792][T26533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.956968][T26541] netlink: 'syz.4.6481': attribute type 10 has an invalid length. [ 650.993389][T26518] syzkaller1: entered promiscuous mode [ 650.998936][T26518] syzkaller1: entered allmulticast mode [ 651.027593][T26541] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 652.110158][T26586] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 652.119408][T26586] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 652.136232][T26593] xt_bpf: check failed: parse error [ 652.208743][T26599] FAULT_INJECTION: forcing a failure. [ 652.208743][T26599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.316917][T26599] CPU: 1 UID: 0 PID: 26599 Comm: syz.0.6497 Not tainted syzkaller #0 PREEMPT(full) [ 652.316944][T26599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 652.316955][T26599] Call Trace: [ 652.316963][T26599] [ 652.316971][T26599] dump_stack_lvl+0xe8/0x150 [ 652.317002][T26599] should_fail_ex+0x412/0x560 [ 652.317041][T26599] _copy_from_iter+0x1d3/0x1670 [ 652.317062][T26599] ? rcu_is_watching+0x15/0xb0 [ 652.317089][T26599] ? __pfx__copy_from_iter+0x10/0x10 [ 652.317115][T26599] ? netlink_sendmsg+0x650/0xb40 [ 652.317137][T26599] ? skb_put+0x11b/0x210 [ 652.317164][T26599] netlink_sendmsg+0x6c0/0xb40 [ 652.317196][T26599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.317222][T26599] ? aa_sock_msg_perm+0xf1/0x1b0 [ 652.317242][T26599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 652.317266][T26599] ____sys_sendmsg+0x972/0x9f0 [ 652.317300][T26599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.317332][T26599] ? import_iovec+0x73/0xa0 [ 652.317357][T26599] ___sys_sendmsg+0x2a5/0x360 [ 652.317387][T26599] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.317439][T26599] ? __fget_files+0x2a/0x420 [ 652.317453][T26599] ? __fget_files+0x3a0/0x420 [ 652.317478][T26599] __x64_sys_sendmsg+0x1bd/0x2a0 [ 652.317504][T26599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.317535][T26599] ? __pfx_ksys_write+0x10/0x10 [ 652.317562][T26599] do_syscall_64+0x14d/0xf80 [ 652.317581][T26599] ? trace_irq_disable+0x3b/0x150 [ 652.317596][T26599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.317614][T26599] ? clear_bhb_loop+0x40/0x90 [ 652.317634][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.317651][T26599] RIP: 0033:0x7fedd719c819 [ 652.317668][T26599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.317684][T26599] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.317705][T26599] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 652.317717][T26599] RDX: 0000000020000084 RSI: 0000200000004340 RDI: 0000000000000003 [ 652.317729][T26599] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 652.317741][T26599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.317752][T26599] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 652.317782][T26599] [ 653.033576][T26626] netlink: 'syz.2.6504': attribute type 1 has an invalid length. [ 653.323638][T26641] __nla_validate_parse: 39 callbacks suppressed [ 653.323658][T26641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6511'. [ 653.380222][T26646] netlink: 'syz.0.6512': attribute type 2 has an invalid length. [ 653.431870][T26646] netlink: 'syz.0.6512': attribute type 11 has an invalid length. [ 653.456030][T26646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6512'. [ 653.899528][T26670] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 653.998785][T26676] netlink: 'syz.1.6522': attribute type 2 has an invalid length. [ 654.017431][T26676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6522'. [ 654.136498][T26682] FAULT_INJECTION: forcing a failure. [ 654.136498][T26682] name failslab, interval 1, probability 0, space 0, times 0 [ 654.185160][T26682] CPU: 1 UID: 0 PID: 26682 Comm: syz.0.6523 Not tainted syzkaller #0 PREEMPT(full) [ 654.185187][T26682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.185198][T26682] Call Trace: [ 654.185207][T26682] [ 654.185216][T26682] dump_stack_lvl+0xe8/0x150 [ 654.185246][T26682] should_fail_ex+0x412/0x560 [ 654.185278][T26682] should_failslab+0xa8/0x100 [ 654.185303][T26682] __kmalloc_noprof+0xe8/0x760 [ 654.185324][T26682] ? ___neigh_create+0x6d5/0x2280 [ 654.185351][T26682] ___neigh_create+0x6d5/0x2280 [ 654.185380][T26682] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 654.185416][T26682] ip6_finish_output2+0x729/0x13e0 [ 654.185449][T26682] ? ip6_output+0x126/0x550 [ 654.185469][T26682] ip6_output+0x340/0x550 [ 654.185490][T26682] ? ip6_send_skb+0x10f/0x390 [ 654.185520][T26682] ip6_send_skb+0x1d5/0x390 [ 654.185546][T26682] udp_v6_send_skb+0xaca/0x1350 [ 654.185586][T26682] udpv6_sendmsg+0x1dfc/0x25c0 [ 654.185622][T26682] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 654.185640][T26682] ? udp_lib_get_port+0x177a/0x1c60 [ 654.185694][T26682] ? inet_send_prepare+0x1b9/0x270 [ 654.185720][T26682] ? inet_send_prepare+0x1b9/0x270 [ 654.185748][T26682] ? inet_send_prepare+0x1b9/0x270 [ 654.185770][T26682] ? __local_bh_enable_ip+0xd0/0x130 [ 654.185793][T26682] ? inet_send_prepare+0x1b9/0x270 [ 654.185821][T26682] ? inet6_sendmsg+0xe4/0x120 [ 654.185846][T26682] ____sys_sendmsg+0x5c7/0x9f0 [ 654.185880][T26682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.185914][T26682] ? import_iovec+0x73/0xa0 [ 654.185939][T26682] ___sys_sendmsg+0x2a5/0x360 [ 654.185970][T26682] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.186000][T26682] ? kstrtouint+0x6e/0xe0 [ 654.186051][T26682] ? __fget_files+0x2a/0x420 [ 654.186067][T26682] ? __fget_files+0x3a0/0x420 [ 654.186095][T26682] __sys_sendmmsg+0x27c/0x4e0 [ 654.186126][T26682] ? __pfx___sys_sendmmsg+0x10/0x10 [ 654.186148][T26682] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 654.186199][T26682] ? ksys_write+0x242/0x270 [ 654.186221][T26682] ? __pfx_ksys_write+0x10/0x10 [ 654.186247][T26682] __x64_sys_sendmmsg+0xa0/0xc0 [ 654.186272][T26682] do_syscall_64+0x14d/0xf80 [ 654.186291][T26682] ? trace_irq_disable+0x3b/0x150 [ 654.186307][T26682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.186325][T26682] ? clear_bhb_loop+0x40/0x90 [ 654.186346][T26682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.186364][T26682] RIP: 0033:0x7fedd719c819 [ 654.186383][T26682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.186398][T26682] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 654.186419][T26682] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 654.186432][T26682] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003 [ 654.186444][T26682] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 654.186455][T26682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.186466][T26682] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 654.186502][T26682] [ 654.667227][T26691] FAULT_INJECTION: forcing a failure. [ 654.667227][T26691] name failslab, interval 1, probability 0, space 0, times 0 [ 654.730909][T26691] CPU: 0 UID: 0 PID: 26691 Comm: syz.3.6526 Not tainted syzkaller #0 PREEMPT(full) [ 654.730936][T26691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.730947][T26691] Call Trace: [ 654.730955][T26691] [ 654.730963][T26691] dump_stack_lvl+0xe8/0x150 [ 654.730993][T26691] should_fail_ex+0x412/0x560 [ 654.731024][T26691] should_failslab+0xa8/0x100 [ 654.731046][T26691] ? skb_clone+0x212/0x3a0 [ 654.731070][T26691] kmem_cache_alloc_noprof+0x87/0x650 [ 654.731091][T26691] ? __netlink_lookup+0xc6/0x8b0 [ 654.731121][T26691] skb_clone+0x212/0x3a0 [ 654.731147][T26691] __netlink_deliver_tap+0x404/0x850 [ 654.731180][T26691] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.731205][T26691] netlink_deliver_tap+0x19c/0x1b0 [ 654.731236][T26691] netlink_unicast+0x730/0x8e0 [ 654.731268][T26691] netlink_sendmsg+0x813/0xb40 [ 654.731301][T26691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.731327][T26691] ? aa_sock_msg_perm+0xf1/0x1b0 [ 654.731348][T26691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.731373][T26691] ____sys_sendmsg+0x972/0x9f0 [ 654.731407][T26691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.731441][T26691] ? import_iovec+0x73/0xa0 [ 654.731466][T26691] ___sys_sendmsg+0x2a5/0x360 [ 654.731496][T26691] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.731557][T26691] ? __fget_files+0x2a/0x420 [ 654.731573][T26691] ? __fget_files+0x3a0/0x420 [ 654.731600][T26691] __x64_sys_sendmsg+0x1bd/0x2a0 [ 654.731628][T26691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.731660][T26691] ? __pfx_ksys_write+0x10/0x10 [ 654.731688][T26691] do_syscall_64+0x14d/0xf80 [ 654.731708][T26691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.731723][T26691] ? clear_bhb_loop+0x40/0x90 [ 654.731743][T26691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.731760][T26691] RIP: 0033:0x7f18ba59c819 [ 654.731777][T26691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.731792][T26691] RSP: 002b:00007f18bb493028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.731813][T26691] RAX: ffffffffffffffda RBX: 00007f18ba815fa0 RCX: 00007f18ba59c819 [ 654.731826][T26691] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 654.731837][T26691] RBP: 00007f18bb493090 R08: 0000000000000000 R09: 0000000000000000 [ 654.731849][T26691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.731859][T26691] R13: 00007f18ba816038 R14: 00007f18ba815fa0 R15: 00007ffd7cd74468 [ 654.731889][T26691] [ 654.955892][T26695] syzkaller1: entered promiscuous mode [ 654.992686][T26695] syzkaller1: entered allmulticast mode [ 655.044846][T26691] netlink: 'syz.3.6526': attribute type 10 has an invalid length. [ 655.109492][T26691] team0: Port device veth0 added [ 668.009674][T26740] xt_hashlimit: size too large, truncated to 1048576 [ 668.044976][T26747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6531'. [ 668.055405][T26750] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6535'. [ 668.077335][ T29] audit: type=1804 audit(1776084133.263:4): pid=26748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6533" name="/newroot/118/cgroup.controllers" dev="tmpfs" ino=616 res=1 errno=0 [ 668.110725][T26745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6532'. [ 668.210788][ T29] audit: type=1800 audit(1776084133.263:5): pid=26748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6533" name="cgroup.controllers" dev="tmpfs" ino=616 res=0 errno=0 [ 668.297339][ T29] audit: type=1800 audit(1776084133.293:6): pid=26748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6533" name="cgroup.controllers" dev="tmpfs" ino=616 res=0 errno=0 [ 668.642219][T26774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6539'. [ 668.984525][T26795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6551'. [ 669.015654][T26795] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6551'. [ 669.016234][T26793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6550'. [ 669.054656][T26795] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 669.071858][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6550'. [ 669.270186][T26808] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6557'. [ 669.291840][T26814] FAULT_INJECTION: forcing a failure. [ 669.291840][T26814] name failslab, interval 1, probability 0, space 0, times 0 [ 669.340635][T26814] CPU: 0 UID: 0 PID: 26814 Comm: syz.4.6556 Not tainted syzkaller #0 PREEMPT(full) [ 669.340661][T26814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 669.340673][T26814] Call Trace: [ 669.340680][T26814] [ 669.340688][T26814] dump_stack_lvl+0xe8/0x150 [ 669.340718][T26814] should_fail_ex+0x412/0x560 [ 669.340751][T26814] should_failslab+0xa8/0x100 [ 669.340774][T26814] ? skb_clone+0x212/0x3a0 [ 669.340799][T26814] kmem_cache_alloc_noprof+0x87/0x650 [ 669.340820][T26814] ? __netlink_lookup+0xc6/0x8b0 [ 669.340850][T26814] skb_clone+0x212/0x3a0 [ 669.340877][T26814] __netlink_deliver_tap+0x404/0x850 [ 669.340912][T26814] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.340937][T26814] netlink_deliver_tap+0x19c/0x1b0 [ 669.340961][T26814] netlink_unicast+0x730/0x8e0 [ 669.340993][T26814] netlink_sendmsg+0x813/0xb40 [ 669.341025][T26814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.341051][T26814] ? aa_sock_msg_perm+0xf1/0x1b0 [ 669.341071][T26814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.341096][T26814] ____sys_sendmsg+0x972/0x9f0 [ 669.341129][T26814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.341162][T26814] ? import_iovec+0x73/0xa0 [ 669.341186][T26814] ___sys_sendmsg+0x2a5/0x360 [ 669.341216][T26814] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.341275][T26814] ? __fget_files+0x2a/0x420 [ 669.341290][T26814] ? __fget_files+0x3a0/0x420 [ 669.341317][T26814] __x64_sys_sendmsg+0x1bd/0x2a0 [ 669.341344][T26814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.341377][T26814] ? __pfx_ksys_write+0x10/0x10 [ 669.341408][T26814] do_syscall_64+0x14d/0xf80 [ 669.341429][T26814] ? trace_irq_disable+0x3b/0x150 [ 669.341444][T26814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.341462][T26814] ? clear_bhb_loop+0x40/0x90 [ 669.341484][T26814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.341501][T26814] RIP: 0033:0x7f710019c819 [ 669.341519][T26814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.341535][T26814] RSP: 002b:00007f7100fef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.341556][T26814] RAX: ffffffffffffffda RBX: 00007f7100415fa0 RCX: 00007f710019c819 [ 669.341569][T26814] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 669.341580][T26814] RBP: 00007f7100fef090 R08: 0000000000000000 R09: 0000000000000000 [ 669.341592][T26814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.341608][T26814] R13: 00007f7100416038 R14: 00007f7100415fa0 R15: 00007ffc3240e538 [ 669.341638][T26814] [ 669.833459][T26820] veth0: entered promiscuous mode [ 669.914474][T26819] veth0: left promiscuous mode [ 669.954378][T26831] lo speed is unknown, defaulting to 1000 [ 670.031409][T26821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.741980][T26853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.845864][T26867] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6570'. [ 676.814256][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6575'. [ 676.857864][T26904] netlink: 'syz.3.6578': attribute type 10 has an invalid length. [ 676.890678][T26904] team0: Port device netdevsim0 added [ 677.530665][T26939] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 677.546070][T26939] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 677.623307][T26946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6594'. [ 677.751060][T26951] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 677.767382][T26951] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 677.883345][T26958] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6596'. [ 677.909629][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6596'. [ 677.930298][T26958] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6596'. [ 677.953060][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6596'. [ 677.980183][T26958] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6596'. [ 678.036778][T26963] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 678.150024][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6600'. [ 678.192833][T26970] FAULT_INJECTION: forcing a failure. [ 678.192833][T26970] name failslab, interval 1, probability 0, space 0, times 0 [ 678.222429][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6600'. [ 678.227092][T26970] CPU: 0 UID: 0 PID: 26970 Comm: syz.0.6602 Not tainted syzkaller #0 PREEMPT(full) [ 678.227120][T26970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 678.227131][T26970] Call Trace: [ 678.227141][T26970] [ 678.227150][T26970] dump_stack_lvl+0xe8/0x150 [ 678.227181][T26970] should_fail_ex+0x412/0x560 [ 678.227213][T26970] should_failslab+0xa8/0x100 [ 678.227236][T26970] ? skb_clone+0x212/0x3a0 [ 678.227260][T26970] kmem_cache_alloc_noprof+0x87/0x650 [ 678.227281][T26970] ? __netlink_lookup+0xc6/0x8b0 [ 678.227310][T26970] skb_clone+0x212/0x3a0 [ 678.227338][T26970] __netlink_deliver_tap+0x404/0x850 [ 678.227371][T26970] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.227395][T26970] netlink_deliver_tap+0x19c/0x1b0 [ 678.227418][T26970] netlink_unicast+0x730/0x8e0 [ 678.227449][T26970] netlink_sendmsg+0x813/0xb40 [ 678.227480][T26970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.227506][T26970] ? aa_sock_msg_perm+0xf1/0x1b0 [ 678.227525][T26970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.227550][T26970] ____sys_sendmsg+0x972/0x9f0 [ 678.227582][T26970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.227615][T26970] ? import_iovec+0x73/0xa0 [ 678.227639][T26970] ___sys_sendmsg+0x2a5/0x360 [ 678.227668][T26970] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.227724][T26970] ? __fget_files+0x2a/0x420 [ 678.227740][T26970] ? __fget_files+0x3a0/0x420 [ 678.227765][T26970] __x64_sys_sendmsg+0x1bd/0x2a0 [ 678.227792][T26970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.227825][T26970] ? __pfx_ksys_write+0x10/0x10 [ 678.227855][T26970] do_syscall_64+0x14d/0xf80 [ 678.227874][T26970] ? trace_irq_disable+0x3b/0x150 [ 678.227889][T26970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.227907][T26970] ? clear_bhb_loop+0x40/0x90 [ 678.227928][T26970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.227945][T26970] RIP: 0033:0x7fedd719c819 [ 678.227968][T26970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.227983][T26970] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.228004][T26970] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 678.228017][T26970] RDX: 00000000000c4844 RSI: 0000200000000000 RDI: 0000000000000003 [ 678.228029][T26970] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 678.228039][T26970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.228050][T26970] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 678.228080][T26970] [ 678.522802][T26965] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.530540][T26965] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.675661][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6607'. [ 678.754486][T26994] netlink: 'syz.3.6607': attribute type 1 has an invalid length. [ 678.805936][T26965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.850545][T26965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.083782][T26971] vlan2: entered allmulticast mode [ 679.089470][T26971] bridge0: port 3(vlan2) entered blocking state [ 679.097902][T26971] bridge0: port 3(vlan2) entered disabled state [ 679.107664][T26971] vlan2: entered promiscuous mode [ 679.172354][T15503] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.191846][T15503] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.233569][T15503] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.266514][T15503] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.324222][T27010] 8021q: VLANs not supported on ip6tnl0 [ 679.459242][T27021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.731039][T27036] FAULT_INJECTION: forcing a failure. [ 679.731039][T27036] name failslab, interval 1, probability 0, space 0, times 0 [ 679.769532][T27033] lo speed is unknown, defaulting to 1000 [ 679.789386][T27036] CPU: 1 UID: 0 PID: 27036 Comm: syz.0.6622 Not tainted syzkaller #0 PREEMPT(full) [ 679.789413][T27036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 679.789424][T27036] Call Trace: [ 679.789432][T27036] [ 679.789440][T27036] dump_stack_lvl+0xe8/0x150 [ 679.789471][T27036] should_fail_ex+0x412/0x560 [ 679.789503][T27036] should_failslab+0xa8/0x100 [ 679.789526][T27036] ? skb_clone+0x212/0x3a0 [ 679.789551][T27036] kmem_cache_alloc_noprof+0x87/0x650 [ 679.789573][T27036] ? __netlink_lookup+0xc6/0x8b0 [ 679.789603][T27036] skb_clone+0x212/0x3a0 [ 679.789631][T27036] __netlink_deliver_tap+0x404/0x850 [ 679.789666][T27036] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.789690][T27036] netlink_deliver_tap+0x19c/0x1b0 [ 679.789715][T27036] netlink_unicast+0x730/0x8e0 [ 679.789747][T27036] netlink_sendmsg+0x813/0xb40 [ 679.789779][T27036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.789806][T27036] ? aa_sock_msg_perm+0xf1/0x1b0 [ 679.789826][T27036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.789851][T27036] ____sys_sendmsg+0x972/0x9f0 [ 679.789885][T27036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.789918][T27036] ? import_iovec+0x73/0xa0 [ 679.789943][T27036] ___sys_sendmsg+0x2a5/0x360 [ 679.789974][T27036] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.790032][T27036] ? __fget_files+0x2a/0x420 [ 679.790048][T27036] ? __fget_files+0x3a0/0x420 [ 679.790075][T27036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 679.790103][T27036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.790138][T27036] ? __pfx_ksys_write+0x10/0x10 [ 679.790169][T27036] do_syscall_64+0x14d/0xf80 [ 679.790189][T27036] ? trace_irq_disable+0x3b/0x150 [ 679.790205][T27036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.790224][T27036] ? clear_bhb_loop+0x40/0x90 [ 679.790246][T27036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.790264][T27036] RIP: 0033:0x7fedd719c819 [ 679.790286][T27036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.790307][T27036] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.790333][T27036] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 679.790346][T27036] RDX: 0000000004044014 RSI: 0000200000000880 RDI: 0000000000000003 [ 679.790358][T27036] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 679.790368][T27036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.790380][T27036] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 679.790409][T27036] [ 680.571380][T27054] vlan2: entered promiscuous mode [ 680.576642][T27054] bridge0: entered promiscuous mode [ 680.734506][T27060] FAULT_INJECTION: forcing a failure. [ 680.734506][T27060] name failslab, interval 1, probability 0, space 0, times 0 [ 680.765778][T27060] CPU: 0 UID: 0 PID: 27060 Comm: syz.1.6632 Not tainted syzkaller #0 PREEMPT(full) [ 680.765811][T27060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 680.765824][T27060] Call Trace: [ 680.765832][T27060] [ 680.765840][T27060] dump_stack_lvl+0xe8/0x150 [ 680.765870][T27060] should_fail_ex+0x412/0x560 [ 680.765902][T27060] should_failslab+0xa8/0x100 [ 680.765927][T27060] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 680.765947][T27060] ? tcp_fastopen_cache_get+0x2f/0x4c0 [ 680.765970][T27060] ? __alloc_skb+0x1d0/0x7d0 [ 680.765997][T27060] __alloc_skb+0x1d0/0x7d0 [ 680.766024][T27060] tcp_stream_alloc_skb+0x3f/0x580 [ 680.766106][T27060] ? skb_page_frag_refill+0x199/0x310 [ 680.766127][T27060] tcp_connect+0x24a0/0x5440 [ 680.766198][T27060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.766231][T27060] ? __pfx_tcp_connect+0x10/0x10 [ 680.766277][T27060] ? rcu_is_watching+0x15/0xb0 [ 680.766308][T27060] ? __kmalloc_cache_noprof+0x31c/0x660 [ 680.766330][T27060] ? __kmalloc_cache_noprof+0x15b/0x660 [ 680.766354][T27060] tcp_sendmsg_fastopen+0x2bd/0x5e0 [ 680.766380][T27060] mptcp_sendmsg_fastopen+0x17d/0x580 [ 680.766457][T27060] mptcp_sendmsg+0x1961/0x1bf0 [ 680.766493][T27060] ? aa_sk_perm+0x6d5/0x900 [ 680.766525][T27060] ? __pfx_aa_sk_perm+0x10/0x10 [ 680.766549][T27060] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 680.766572][T27060] ? __pfx_inet6_sendmsg+0x10/0x10 [ 680.766592][T27060] ? inet6_sendmsg+0x101/0x120 [ 680.766607][T27060] ? __pfx_inet6_sendmsg+0x10/0x10 [ 680.766626][T27060] __sys_sendto+0x4a3/0x710 [ 680.766651][T27060] ? __pfx___sys_sendto+0x10/0x10 [ 680.766671][T27060] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 680.766704][T27060] ? __fget_files+0x3a0/0x420 [ 680.766731][T27060] ? ksys_write+0x242/0x270 [ 680.766759][T27060] ? __pfx_ksys_write+0x10/0x10 [ 680.766781][T27060] __x64_sys_sendto+0xde/0x100 [ 680.766812][T27060] do_syscall_64+0x14d/0xf80 [ 680.766828][T27060] ? trace_irq_disable+0x3b/0x150 [ 680.766843][T27060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.766859][T27060] ? clear_bhb_loop+0x40/0x90 [ 680.766888][T27060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.766906][T27060] RIP: 0033:0x7fe6ccd9c819 [ 680.766929][T27060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.766944][T27060] RSP: 002b:00007fe6cdc01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 680.766964][T27060] RAX: ffffffffffffffda RBX: 00007fe6cd015fa0 RCX: 00007fe6ccd9c819 [ 680.766978][T27060] RDX: 0000000000001001 RSI: 0000200000000040 RDI: 0000000000000003 [ 680.766989][T27060] RBP: 00007fe6cdc01090 R08: 0000000000000000 R09: 0000000000004100 [ 680.767001][T27060] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 680.767011][T27060] R13: 00007fe6cd016038 R14: 00007fe6cd015fa0 R15: 00007ffec7bf6008 [ 680.767042][T27060] [ 681.225995][T27071] vlan3: entered promiscuous mode [ 681.242787][T27071] team0: entered promiscuous mode [ 681.250228][T27071] team_slave_0: entered promiscuous mode [ 681.260148][T27071] team_slave_1: entered promiscuous mode [ 681.672692][T27085] sctp: [Deprecated]: syz.1.6640 (pid 27085) Use of int in max_burst socket option deprecated. [ 681.672692][T27085] Use struct sctp_assoc_value instead [ 681.878853][T27097] __nla_validate_parse: 21 callbacks suppressed [ 681.878896][T27097] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6645'. [ 681.913091][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6645'. [ 681.939507][T27097] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6645'. [ 681.941541][T27107] dvmrp1: entered allmulticast mode [ 681.967299][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6645'. [ 681.986984][T27097] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6645'. [ 682.043483][T27098] lo speed is unknown, defaulting to 1000 [ 682.218299][T27105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6646'. [ 682.637553][T27128] netlink: 'syz.3.6652': attribute type 3 has an invalid length. [ 682.683802][T27128] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6652'. [ 683.168400][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6657'. [ 683.207218][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6657'. [ 683.312891][T27145] netlink: 26 bytes leftover after parsing attributes in process `syz.3.6658'. [ 688.929031][T27171] FAULT_INJECTION: forcing a failure. [ 688.929031][T27171] name failslab, interval 1, probability 0, space 0, times 0 [ 688.941789][T27171] CPU: 0 UID: 0 PID: 27171 Comm: syz.0.6659 Not tainted syzkaller #0 PREEMPT(full) [ 688.941811][T27171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 688.941822][T27171] Call Trace: [ 688.941830][T27171] [ 688.941839][T27171] dump_stack_lvl+0xe8/0x150 [ 688.941871][T27171] should_fail_ex+0x412/0x560 [ 688.941902][T27171] should_failslab+0xa8/0x100 [ 688.941928][T27171] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 688.941951][T27171] ? __alloc_skb+0x1d0/0x7d0 [ 688.941979][T27171] __alloc_skb+0x1d0/0x7d0 [ 688.942006][T27171] tipc_buf_acquire+0x2b/0xe0 [ 688.942121][T27171] tipc_named_withdraw+0x1db/0x760 [ 688.942146][T27171] tipc_nametbl_withdraw+0xcc/0x280 [ 688.942207][T27171] tipc_sk_withdraw+0x301/0x650 [ 688.942266][T27171] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 688.942294][T27171] ? __local_bh_enable_ip+0xd0/0x130 [ 688.942322][T27171] tipc_sk_bind+0x234/0x300 [ 688.942344][T27171] ? tipc_bind+0x6c/0x260 [ 688.942369][T27171] __sys_bind+0x2e3/0x410 [ 688.942391][T27171] ? __fget_files+0x3a0/0x420 [ 688.942410][T27171] ? __pfx___sys_bind+0x10/0x10 [ 688.942443][T27171] ? __pfx_ksys_write+0x10/0x10 [ 688.942472][T27171] __x64_sys_bind+0x7a/0x90 [ 688.942494][T27171] do_syscall_64+0x14d/0xf80 [ 688.942514][T27171] ? trace_irq_disable+0x3b/0x150 [ 688.942530][T27171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.942545][T27171] ? clear_bhb_loop+0x40/0x90 [ 688.942566][T27171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.942584][T27171] RIP: 0033:0x7fedd719c819 [ 688.942602][T27171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.942618][T27171] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 688.942639][T27171] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 688.942652][T27171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 688.942663][T27171] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 688.942674][T27171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.942685][T27171] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 688.942714][T27171] [ 688.942724][T27171] tipc: Withdrawal distribution failure [ 689.176531][T27187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.303253][T27191] netlink: 'syz.4.6666': attribute type 21 has an invalid length. [ 689.327972][T27191] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6666'. [ 689.358479][T27191] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6666'. [ 689.384054][T27195] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 689.537110][T27197] lo speed is unknown, defaulting to 1000 [ 689.569292][T27208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 689.611427][T27200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6669'. [ 689.613675][T27209] FAULT_INJECTION: forcing a failure. [ 689.613675][T27209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.679452][T27209] CPU: 1 UID: 0 PID: 27209 Comm: syz.4.6672 Not tainted syzkaller #0 PREEMPT(full) [ 689.679478][T27209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 689.679490][T27209] Call Trace: [ 689.679498][T27209] [ 689.679507][T27209] dump_stack_lvl+0xe8/0x150 [ 689.679538][T27209] should_fail_ex+0x412/0x560 [ 689.679570][T27209] _copy_from_user+0x2d/0xb0 [ 689.679593][T27209] kstrtouint_from_user+0xd6/0x180 [ 689.679623][T27209] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 689.679665][T27209] proc_fail_nth_write+0x8e/0x210 [ 689.679692][T27209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 689.679723][T27209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 689.679750][T27209] vfs_write+0x29a/0xb90 [ 689.679781][T27209] ? __pfx_vfs_write+0x10/0x10 [ 689.679803][T27209] ? __fget_files+0x2a/0x420 [ 689.679825][T27209] ? __fget_files+0x3a0/0x420 [ 689.679841][T27209] ? __fget_files+0x2a/0x420 [ 689.679878][T27209] ksys_write+0x150/0x270 [ 689.679908][T27209] ? __pfx_ksys_write+0x10/0x10 [ 689.679941][T27209] do_syscall_64+0x14d/0xf80 [ 689.679961][T27209] ? trace_irq_disable+0x3b/0x150 [ 689.679977][T27209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.679995][T27209] ? clear_bhb_loop+0x40/0x90 [ 689.680017][T27209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.680035][T27209] RIP: 0033:0x7f710015d04e [ 689.680053][T27209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 689.680069][T27209] RSP: 002b:00007f7100fcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 689.680090][T27209] RAX: ffffffffffffffda RBX: 00007f7100fce6c0 RCX: 00007f710015d04e [ 689.680102][T27209] RDX: 0000000000000001 RSI: 00007f7100fce0a0 RDI: 0000000000000005 [ 689.680113][T27209] RBP: 00007f7100fce090 R08: 0000000000000000 R09: 0000000000000000 [ 689.680123][T27209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.680134][T27209] R13: 00007f7100416128 R14: 00007f7100416090 R15: 00007ffc3240e538 [ 689.680165][T27209] [ 690.121293][T27219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.206850][T27219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.242232][T27219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.265761][T27219] netlink: 828 bytes leftover after parsing attributes in process `syz.3.6675'. [ 690.747282][T27246] FAULT_INJECTION: forcing a failure. [ 690.747282][T27246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.762062][T27246] CPU: 1 UID: 0 PID: 27246 Comm: syz.4.6685 Not tainted syzkaller #0 PREEMPT(full) [ 690.762086][T27246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 690.762098][T27246] Call Trace: [ 690.762107][T27246] [ 690.762115][T27246] dump_stack_lvl+0xe8/0x150 [ 690.762145][T27246] should_fail_ex+0x412/0x560 [ 690.762176][T27246] _copy_from_iter+0x1d3/0x1670 [ 690.762199][T27246] ? rcu_is_watching+0x15/0xb0 [ 690.762228][T27246] ? __pfx__copy_from_iter+0x10/0x10 [ 690.762253][T27246] ? netlink_sendmsg+0x650/0xb40 [ 690.762276][T27246] ? skb_put+0x11b/0x210 [ 690.762301][T27246] netlink_sendmsg+0x6c0/0xb40 [ 690.762333][T27246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.762360][T27246] ? aa_sock_msg_perm+0xf1/0x1b0 [ 690.762380][T27246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.762403][T27246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.762424][T27246] sock_write_iter+0x49b/0x4f0 [ 690.762445][T27246] ? __pfx_sock_write_iter+0x10/0x10 [ 690.762483][T27246] do_iter_readv_writev+0x619/0x8c0 [ 690.762512][T27246] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 690.762537][T27246] ? bpf_lsm_file_permission+0x9/0x20 [ 690.762558][T27246] ? security_file_permission+0x75/0x260 [ 690.762583][T27246] ? rw_verify_area+0x255/0x4d0 [ 690.762606][T27246] vfs_writev+0x33c/0x990 [ 690.762637][T27246] ? __pfx_vfs_writev+0x10/0x10 [ 690.762673][T27246] ? __fget_files+0x2a/0x420 [ 690.762693][T27246] ? __fget_files+0x3a0/0x420 [ 690.762708][T27246] ? __fget_files+0x2a/0x420 [ 690.762732][T27246] do_writev+0x154/0x2e0 [ 690.762757][T27246] ? __pfx_do_writev+0x10/0x10 [ 690.762790][T27246] do_syscall_64+0x14d/0xf80 [ 690.762810][T27246] ? trace_irq_disable+0x3b/0x150 [ 690.762825][T27246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.762843][T27246] ? clear_bhb_loop+0x40/0x90 [ 690.762864][T27246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.762881][T27246] RIP: 0033:0x7f710019c819 [ 690.762898][T27246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.762919][T27246] RSP: 002b:00007f7100fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 690.762940][T27246] RAX: ffffffffffffffda RBX: 00007f7100415fa0 RCX: 00007f710019c819 [ 690.762954][T27246] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 690.762965][T27246] RBP: 00007f7100fef090 R08: 0000000000000000 R09: 0000000000000000 [ 690.762974][T27246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.762985][T27246] R13: 00007f7100416038 R14: 00007f7100415fa0 R15: 00007ffc3240e538 [ 690.763012][T27246] [ 692.470477][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6688'. [ 692.516335][T27260] netlink: 'syz.0.6688': attribute type 1 has an invalid length. [ 692.599033][T27275] netlink: 'syz.3.6694': attribute type 1 has an invalid length. [ 692.630057][T27275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.817951][T27282] netlink: 'syz.4.6697': attribute type 29 has an invalid length. [ 692.980166][T27287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6698'. [ 693.161357][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 693.434953][T27301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6703'. [ 693.454832][T27301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6703'. [ 693.584150][T27305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6706'. [ 693.808774][T27311] netlink: 'syz.4.6709': attribute type 1 has an invalid length. [ 693.840597][T27312] netlink: 'syz.4.6709': attribute type 1 has an invalid length. [ 693.852409][T27311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.865339][T27312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.999756][T27316] FAULT_INJECTION: forcing a failure. [ 693.999756][T27316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.033605][T27316] CPU: 1 UID: 0 PID: 27316 Comm: syz.4.6711 Not tainted syzkaller #0 PREEMPT(full) [ 694.033633][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.033645][T27316] Call Trace: [ 694.033652][T27316] [ 694.033661][T27316] dump_stack_lvl+0xe8/0x150 [ 694.033691][T27316] should_fail_ex+0x412/0x560 [ 694.033725][T27316] _copy_from_iter+0x1d3/0x1670 [ 694.033746][T27316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 694.033773][T27316] ? __pfx_policy_nodemask+0x10/0x10 [ 694.033799][T27316] ? __pfx__copy_from_iter+0x10/0x10 [ 694.033824][T27316] ? set_page_refcounted+0xa0/0x1e0 [ 694.033847][T27316] ? page_copy_sane+0x4e/0x270 [ 694.033868][T27316] copy_page_from_iter+0xdd/0x170 [ 694.033891][T27316] tun_get_user+0x1db3/0x3ed0 [ 694.033913][T27316] ? tun_get_user+0x6ff/0x3ed0 [ 694.033950][T27316] ? aa_file_perm+0x50e/0x15e0 [ 694.033970][T27316] ? __pfx_tun_get_user+0x10/0x10 [ 694.033988][T27316] ? aa_file_perm+0x192/0x15e0 [ 694.034024][T27316] ? ref_tracker_alloc+0x35c/0x4c0 [ 694.034045][T27316] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 694.034068][T27316] ? tun_get+0x1c/0x2f0 [ 694.034093][T27316] ? tun_get+0x1c/0x2f0 [ 694.034113][T27316] ? tun_get+0x1c/0x2f0 [ 694.034138][T27316] tun_chr_write_iter+0x113/0x200 [ 694.034163][T27316] vfs_write+0x61d/0xb90 [ 694.034195][T27316] ? __pfx_vfs_write+0x10/0x10 [ 694.034224][T27316] ? __fget_files+0x2a/0x420 [ 694.034247][T27316] ksys_write+0x150/0x270 [ 694.034270][T27316] ? __pfx_ksys_write+0x10/0x10 [ 694.034301][T27316] do_syscall_64+0x14d/0xf80 [ 694.034321][T27316] ? trace_irq_disable+0x3b/0x150 [ 694.034337][T27316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.034355][T27316] ? clear_bhb_loop+0x40/0x90 [ 694.034377][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.034395][T27316] RIP: 0033:0x7f710015d04e [ 694.034413][T27316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 694.034427][T27316] RSP: 002b:00007f7100feefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 694.034450][T27316] RAX: ffffffffffffffda RBX: 00007f7100fef6c0 RCX: 00007f710015d04e [ 694.034463][T27316] RDX: 000000000000004e RSI: 0000200000000280 RDI: 00000000000000c8 [ 694.034476][T27316] RBP: 00007f7100fef090 R08: 0000000000000000 R09: 0000000000000000 [ 694.034487][T27316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.034498][T27316] R13: 00007f7100416038 R14: 00007f7100415fa0 R15: 00007ffc3240e538 [ 694.034528][T27316] [ 694.494170][T27322] __nla_validate_parse: 1 callbacks suppressed [ 694.494201][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6714'. [ 694.672779][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6714'. [ 694.712401][T27322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6714'. [ 694.905943][T27337] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 694.978735][T27341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6722'. [ 695.066942][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6721'. [ 695.076108][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6721'. [ 695.525294][T27337] dvmrp6: entered allmulticast mode [ 695.780418][T27361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 695.884985][T27363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6729'. [ 695.921806][T27359] syzkaller1: entered promiscuous mode [ 695.927321][T27359] syzkaller1: entered allmulticast mode [ 695.950306][T27365] netlink: 'syz.4.6729': attribute type 1 has an invalid length. [ 696.115502][T27365] mac80211_hwsim hwsim48 syzkaller0: Caught tx_queue_len zero misconfig [ 696.708039][T27381] netlink: 'syz.2.6737': attribute type 1 has an invalid length. [ 696.730842][T27381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.773621][T27383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6737'. [ 696.815217][T27381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6737'. [ 696.949405][T27392] ipt_ECN: cannot use operation on non-tcp rule [ 696.960783][T27394] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 697.590297][T27409] erspan1: entered promiscuous mode [ 697.602832][T27409] erspan1: entered allmulticast mode [ 698.092629][T27424] FAULT_INJECTION: forcing a failure. [ 698.092629][T27424] name failslab, interval 1, probability 0, space 0, times 0 [ 698.105719][T27424] CPU: 1 UID: 0 PID: 27424 Comm: syz.0.6751 Not tainted syzkaller #0 PREEMPT(full) [ 698.105745][T27424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.105757][T27424] Call Trace: [ 698.105765][T27424] [ 698.105779][T27424] dump_stack_lvl+0xe8/0x150 [ 698.105816][T27424] should_fail_ex+0x412/0x560 [ 698.105845][T27424] should_failslab+0xa8/0x100 [ 698.105868][T27424] ? skb_clone+0x212/0x3a0 [ 698.105895][T27424] kmem_cache_alloc_noprof+0x87/0x650 [ 698.105916][T27424] ? finish_task_switch+0x240/0x920 [ 698.105943][T27424] skb_clone+0x212/0x3a0 [ 698.105971][T27424] bpf_clone_redirect+0x16a/0x4b0 [ 698.106002][T27424] ? bpf_test_run+0x1d1/0x830 [ 698.106025][T27424] bpf_prog_6efe4abeb048657d+0x5f/0x68 [ 698.106064][T27424] ? __pfx___schedule+0x10/0x10 [ 698.106097][T27424] ? preempt_schedule_thunk+0x16/0x30 [ 698.106118][T27424] ? preempt_schedule_common+0x82/0xd0 [ 698.106135][T27424] ? bpf_test_run+0x1d1/0x830 [ 698.106160][T27424] ? bpf_test_timer_continue+0x10c/0x320 [ 698.106185][T27424] bpf_test_run+0x354/0x830 [ 698.106226][T27424] ? __pfx_bpf_test_run+0x10/0x10 [ 698.106266][T27424] ? eth_type_trans+0x348/0x7e0 [ 698.106299][T27424] ? convert___skb_to_skb+0x3d/0x5b0 [ 698.106322][T27424] bpf_prog_test_run_skb+0xd64/0x21f0 [ 698.106361][T27424] ? __fget_files+0x2a/0x420 [ 698.106378][T27424] ? __fget_files+0x3a0/0x420 [ 698.106393][T27424] ? __fget_files+0x2a/0x420 [ 698.106414][T27424] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 698.106438][T27424] bpf_prog_test_run+0x2c7/0x340 [ 698.106462][T27424] __sys_bpf+0x643/0x950 [ 698.106482][T27424] ? __pfx___sys_bpf+0x10/0x10 [ 698.106514][T27424] ? ksys_write+0x242/0x270 [ 698.106537][T27424] ? __pfx_ksys_write+0x10/0x10 [ 698.106564][T27424] __x64_sys_bpf+0x7c/0x90 [ 698.106589][T27424] do_syscall_64+0x14d/0xf80 [ 698.106609][T27424] ? trace_irq_disable+0x3b/0x150 [ 698.106625][T27424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.106643][T27424] ? clear_bhb_loop+0x40/0x90 [ 698.106666][T27424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.106683][T27424] RIP: 0033:0x7fedd719c819 [ 698.106701][T27424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.106717][T27424] RSP: 002b:00007fedd80e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.106739][T27424] RAX: ffffffffffffffda RBX: 00007fedd7415fa0 RCX: 00007fedd719c819 [ 698.106752][T27424] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 698.106765][T27424] RBP: 00007fedd80e7090 R08: 0000000000000000 R09: 0000000000000000 [ 698.106776][T27424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.106787][T27424] R13: 00007fedd7416038 R14: 00007fedd7415fa0 R15: 00007ffca2dd6ce8 [ 698.106824][T27424] [ 698.465474][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 698.862292][T27440] netlink: 'syz.3.6757': attribute type 10 has an invalid length. [ 699.071680][T27440] syz_tun: entered promiscuous mode [ 699.097716][T27440] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 699.498463][T27452] netlink: 'syz.3.6759': attribute type 93 has an invalid length. [ 699.535121][T27452] netlink: 'syz.3.6759': attribute type 1 has an invalid length. [ 699.776600][T27460] __nla_validate_parse: 2 callbacks suppressed [ 699.776622][T27460] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6762'. [ 699.807500][T27460] 0ªî{X¹¦: renamed from gretap0 [ 699.824036][T27460] 0ªî{X¹¦: entered allmulticast mode [ 699.844247][T27460] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 700.082935][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 700.323986][T27484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6763'. [ 700.702323][T27493] FAULT_INJECTION: forcing a failure. [ 700.702323][T27493] name failslab, interval 1, probability 0, space 0, times 0 [ 700.732224][T27493] CPU: 1 UID: 0 PID: 27493 Comm: syz.3.6768 Not tainted syzkaller #0 PREEMPT(full) [ 700.732251][T27493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 700.732263][T27493] Call Trace: [ 700.732270][T27493] [ 700.732279][T27493] dump_stack_lvl+0xe8/0x150 [ 700.732310][T27493] should_fail_ex+0x412/0x560 [ 700.732341][T27493] should_failslab+0xa8/0x100 [ 700.732367][T27493] __kvmalloc_node_noprof+0x178/0x8a0 [ 700.732390][T27493] ? map_get_next_key+0x234/0x620 [ 700.732411][T27493] ? _copy_from_user+0x94/0xb0 [ 700.732435][T27493] map_get_next_key+0x234/0x620 [ 700.732456][T27493] ? bpf_lsm_bpf+0x9/0x20 [ 700.732483][T27493] __sys_bpf+0x768/0x950 [ 700.732503][T27493] ? __pfx___sys_bpf+0x10/0x10 [ 700.732535][T27493] ? ksys_write+0x242/0x270 [ 700.732562][T27493] ? __pfx_ksys_write+0x10/0x10 [ 700.732590][T27493] __x64_sys_bpf+0x7c/0x90 [ 700.732616][T27493] do_syscall_64+0x14d/0xf80 [ 700.732636][T27493] ? trace_irq_disable+0x3b/0x150 [ 700.732652][T27493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.732671][T27493] ? clear_bhb_loop+0x40/0x90 [ 700.732697][T27493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.732721][T27493] RIP: 0033:0x7f18ba59c819 [ 700.732739][T27493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.732759][T27493] RSP: 002b:00007f18bb493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.732781][T27493] RAX: ffffffffffffffda RBX: 00007f18ba815fa0 RCX: 00007f18ba59c819 [ 700.732795][T27493] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 700.732807][T27493] RBP: 00007f18bb493090 R08: 0000000000000000 R09: 0000000000000000 [ 700.732819][T27493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.732830][T27493] R13: 00007f18ba816038 R14: 00007f18ba815fa0 R15: 00007ffd7cd74468 [ 700.732859][T27493] [ 701.068468][T27497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6769'. [ 701.196704][T27497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6769'. [ 701.329044][T27495] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.336805][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.444667][T27495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.463759][T27495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.602629][T27501] macsec1: entered promiscuous mode [ 701.609503][T27506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6771'. [ 701.638514][T27497] vlan2: entered allmulticast mode [ 701.688516][T15499] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.699168][T15499] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.714175][T15499] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.728682][T15499] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.613372][T15497] ------------[ cut here ]------------ [ 702.619128][T15497] conntrack cleanup blocked for 60s [ 702.619149][T15497] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#0: kworker/u8:0/15497 [ 702.637598][T15497] Modules linked in: [ 702.641928][T15497] CPU: 0 UID: 0 PID: 15497 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 702.651651][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 702.661832][T15497] Workqueue: netns cleanup_net [ 702.666853][T15497] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 702.673906][T15497] Code: 08 48 89 df e8 6d 38 63 f8 4c 8b 3b 49 39 df 74 69 e8 10 e6 f8 f7 45 31 e4 e9 8e fe ff ff e8 03 e6 f8 f7 48 8d 3d 5c 34 54 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 702.695826][T15497] RSP: 0018:ffffc9000d0378b0 EFLAGS: 00010293 [ 702.702048][T15497] RAX: ffffffff89ccc9ed RBX: ffffc9000d037a50 RCX: ffff888037649e80 [ 702.710131][T15497] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020fe50 [ 702.718225][T15497] RBP: 0000000000000001 R08: ffff88803175ac03 R09: 1ffff110062eb580 [ 702.726375][T15497] R10: dffffc0000000000 R11: ffffed10062eb581 R12: 0000000000000001 [ 702.734453][T15497] R13: dffffc0000000000 R14: 0000000100009c90 R15: 0000000100009c91 [ 702.742489][T15497] FS: 0000000000000000(0000) GS:ffff88812544a000(0000) knlGS:0000000000000000 [ 702.751553][T15497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.758146][T15497] CR2: 00007ff973bd8810 CR3: 0000000077d30000 CR4: 00000000003526f0 [ 702.766282][T15497] Call Trace: [ 702.769600][T15497] [ 702.772843][T15497] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 702.779390][T15497] ops_undo_list+0x52b/0x940 [ 702.784168][T15497] ? __pfx_ops_undo_list+0x10/0x10 [ 702.789314][T15497] ? idr_destroy+0x218/0x290 [ 702.793998][T15497] ? do_raw_spin_unlock+0xf5/0x210 [ 702.799126][T15497] cleanup_net+0x56b/0x800 [ 702.803635][T15497] ? __pfx_cleanup_net+0x10/0x10 [ 702.808597][T15497] ? process_scheduled_works+0xa8d/0x18c0 [ 702.814442][T15497] ? process_scheduled_works+0xa8d/0x18c0 [ 702.820184][T15497] process_scheduled_works+0xb6e/0x18c0 [ 702.825899][T15497] ? __pfx_process_scheduled_works+0x10/0x10 [ 702.831985][T15497] ? assign_work+0x3d5/0x5e0 [ 702.836619][T15497] worker_thread+0xa53/0xfc0 [ 702.841366][T15497] kthread+0x388/0x470 [ 702.845461][T15497] ? __pfx_worker_thread+0x10/0x10 [ 702.850952][T15497] ? __pfx_kthread+0x10/0x10 [ 702.855867][T15497] ret_from_fork+0x51e/0xb90 [ 702.860518][T15497] ? __pfx_ret_from_fork+0x10/0x10 [ 702.865730][T15497] ? __switch_to+0xc7d/0x1450 [ 702.870729][T15497] ? __pfx_kthread+0x10/0x10 [ 702.875536][T15497] ret_from_fork_asm+0x1a/0x30 [ 702.880437][T15497] [ 702.883553][T15497] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 702.890851][T15497] CPU: 0 UID: 0 PID: 15497 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 702.900398][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 702.910458][T15497] Workqueue: netns cleanup_net [ 702.915236][T15497] Call Trace: [ 702.918646][T15497] [ 702.921684][T15497] vpanic+0x56c/0xa60 [ 702.925806][T15497] ? __pfx__printk+0x10/0x10 [ 702.930398][T15497] ? __pfx_vpanic+0x10/0x10 [ 702.935090][T15497] ? is_bpf_text_address+0x292/0x2b0 [ 702.940382][T15497] ? is_bpf_text_address+0x26/0x2b0 [ 702.946081][T15497] panic+0xc5/0xd0 [ 702.949814][T15497] ? __pfx_panic+0x10/0x10 [ 702.954248][T15497] ? ret_from_fork_asm+0x1a/0x30 [ 702.959180][T15497] __warn+0x315/0x4f0 [ 702.963323][T15497] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 702.969644][T15497] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 702.975813][T15497] __report_bug+0x29a/0x540 [ 702.980569][T15497] ? __lock_acquire+0x6b5/0x2cf0 [ 702.985518][T15497] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 702.991708][T15497] ? __pfx___report_bug+0x10/0x10 [ 702.996763][T15497] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 703.002950][T15497] report_bug_entry+0x19a/0x290 [ 703.007802][T15497] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 703.014065][T15497] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 703.020219][T15497] handle_bug+0xce/0x200 [ 703.024459][T15497] exc_invalid_op+0x1a/0x50 [ 703.028956][T15497] asm_exc_invalid_op+0x1a/0x20 [ 703.033808][T15497] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 703.040568][T15497] Code: 08 48 89 df e8 6d 38 63 f8 4c 8b 3b 49 39 df 74 69 e8 10 e6 f8 f7 45 31 e4 e9 8e fe ff ff e8 03 e6 f8 f7 48 8d 3d 5c 34 54 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 703.060611][T15497] RSP: 0018:ffffc9000d0378b0 EFLAGS: 00010293 [ 703.066872][T15497] RAX: ffffffff89ccc9ed RBX: ffffc9000d037a50 RCX: ffff888037649e80 [ 703.074849][T15497] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020fe50 [ 703.082911][T15497] RBP: 0000000000000001 R08: ffff88803175ac03 R09: 1ffff110062eb580 [ 703.090905][T15497] R10: dffffc0000000000 R11: ffffed10062eb581 R12: 0000000000000001 [ 703.098981][T15497] R13: dffffc0000000000 R14: 0000000100009c90 R15: 0000000100009c91 [ 703.107087][T15497] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 703.113294][T15497] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 703.119618][T15497] ops_undo_list+0x52b/0x940 [ 703.124212][T15497] ? __pfx_ops_undo_list+0x10/0x10 [ 703.129339][T15497] ? idr_destroy+0x218/0x290 [ 703.134017][T15497] ? do_raw_spin_unlock+0xf5/0x210 [ 703.139125][T15497] cleanup_net+0x56b/0x800 [ 703.143577][T15497] ? __pfx_cleanup_net+0x10/0x10 [ 703.148535][T15497] ? process_scheduled_works+0xa8d/0x18c0 [ 703.154283][T15497] ? process_scheduled_works+0xa8d/0x18c0 [ 703.160001][T15497] process_scheduled_works+0xb6e/0x18c0 [ 703.165570][T15497] ? __pfx_process_scheduled_works+0x10/0x10 [ 703.171548][T15497] ? assign_work+0x3d5/0x5e0 [ 703.176168][T15497] worker_thread+0xa53/0xfc0 [ 703.180857][T15497] kthread+0x388/0x470 [ 703.184917][T15497] ? __pfx_worker_thread+0x10/0x10 [ 703.190021][T15497] ? __pfx_kthread+0x10/0x10 [ 703.194608][T15497] ret_from_fork+0x51e/0xb90 [ 703.199246][T15497] ? __pfx_ret_from_fork+0x10/0x10 [ 703.204359][T15497] ? __switch_to+0xc7d/0x1450 [ 703.209030][T15497] ? __pfx_kthread+0x10/0x10 [ 703.213661][T15497] ret_from_fork_asm+0x1a/0x30 [ 703.218578][T15497] [ 703.221908][T15497] Kernel Offset: disabled [ 703.226234][T15497] Rebooting in 86400 seconds..