last executing test programs: 2.05221405s ago: executing program 2 (id=16074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8800000000000000000000000000000000000885dc9d9839dc1336", 0x2e}, {&(0x7f0000002380)="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", 0x2f1}], 0x2}, 0x4005) 1.954342171s ago: executing program 1 (id=16077): pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_addrs=@rc={0x1f, @none, 0x7}}) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0) r3 = accept(r0, &(0x7f00000011c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001140)=0x80) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000001380)=0x3ff, 0x4) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x61}, 0x4040004) 1.728606661s ago: executing program 4 (id=16081): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000008dff000100"], 0xfdef) 1.692137121s ago: executing program 2 (id=16083): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f00000003c0)={0xa, 0xe21, 0x0, @private0}, 0x1c, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000440)=0xfffffcf8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000a0601010000000d00000000010000000504010007000000140008801c0007800900120073797a32000000000900020073797a55000000000800094000000000872ee51d975a6f5ef34fd8989e126c12c9966dc6e5e74faf80d1b557e8"], 0x44}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000550007010300000000000000017c00f800040042800c00018006000600843b0000100002800c0008000010"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r2, &(0x7f00000020c0), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) listen(r0, 0xfff) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) 1.468614805s ago: executing program 4 (id=16086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0xffffffffffffff88) r4 = socket$kcm(0x10, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x4020400) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000040)=0x214, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0xf2, 0xe826, 0x2, 0xfffffffa, 0x5}, 0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0xffffffffffffff88) (async) socket$kcm(0x10, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x4020400) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000040)=0x214, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0xf2, 0xe826, 0x2, 0xfffffffa, 0x5}, 0x14) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 1.464322421s ago: executing program 0 (id=16087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x41, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.366824215s ago: executing program 2 (id=16088): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.328146143s ago: executing program 0 (id=16089): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) close(0x3) 1.261316172s ago: executing program 3 (id=16090): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x74bb}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r3, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000050000000000000205f3fab3e7fd0bd8a3", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e657665000028000280140007000000000000000000000000000000000108000b4000010001060005004e200000"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x25dfdc02, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x40000) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084) r9 = socket$netlink(0x10, 0x3, 0x2) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r11, @ANYRESDEC=r10], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x748}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xda}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xf4, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1.203216906s ago: executing program 2 (id=16091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8800000000000000000000000000000000000285dc9d9839dc1336", 0x2e}, {&(0x7f0000002380)="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", 0x2f1}], 0x2}, 0x4005) 1.177894944s ago: executing program 4 (id=16092): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (fail_nth: 2) 1.045653182s ago: executing program 1 (id=16093): socket$inet6(0xa, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100004001c000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400003800000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00000000c0a01030000000000000000070000010900020073797a31000000000900010073797a3000000000b4000380b00000800800034000000002a4000b802c0001800a0001006c696d69740000001c0002800c000240000000000000ae5d0c0001400000000000000003600001800e000100636f6e6e6c696d69740000004c000280080001"], 0x164}}, 0x0) 1.043648235s ago: executing program 0 (id=16094): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304002000"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 776.766355ms ago: executing program 4 (id=16095): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f00000003c0)={0xa, 0xe21, 0x0, @private0}, 0x1c, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x701, 0x70bd2b, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000440)=0xf8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a3200000000050004000000000005000100070000000d7e67ea79280b000273657400000000df25830e069680ee949f26938d1263ae5288f386c57794a4d726e52284c1ad62b6577ac62f80a2102bbca4dff24056fb662e9da7a0082607ba99a17175e73f7056665f44ed18e3c2e89c6126fd37249153e71dca8d96d48a08548211a9b4b39214b542914b9847066fc06b53a7ec1ba8f1035be000158c2e6bb1ab91d6642cfca08399a2"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x44}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000550007010300000000000000017c00f800040042800c00018006000600843b0000100002800c0008000010"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000000000000060000004a020100", @ANYRES32, @ANYBLOB="000000000000000000f541d667b4d0ffe2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) listen(r0, 0xfff) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) 775.55486ms ago: executing program 3 (id=16096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x5, [@union={0x6, 0x5, 0x0, 0x5, 0x0, 0x101, [{0x7, 0x4, 0x2}, {0x6, 0x2, 0x3}, {0x7, 0x1, 0x7fffffff}, {0xa, 0x4, 0x3}, {0x10, 0x1, 0xffffffff}]}, @func={0x6, 0x0, 0x0, 0xc, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @union={0x1, 0x7, 0x0, 0x5, 0x1, 0x4, [{0xf, 0x0, 0xf535}, {0x6, 0x1, 0x400}, {0x5, 0x1, 0x3}, {0x10, 0x5, 0x100}, {0x7, 0x5, 0x3}, {0xe, 0x4, 0x2}, {0x4, 0x2, 0x80000001}]}, @var={0xe, 0x0, 0x0, 0xe, 0x2}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @fwd={0x3}, @float={0xa, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000000)=""/54, 0x115, 0x36, 0x1, 0xffffffff}, 0x28) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6bd4d288a80000000000"}}}}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080)=0x4, 0x4) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000140)={0x0, 0x43}, 0x8) (async, rerun: 64) r5 = socket(0x200000000000011, 0x2, 0xd) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$packet(r4, &(0x7f0000000240)={0x11, 0x1, r6, 0x1, 0xf}, 0x14) (async) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 763.654569ms ago: executing program 1 (id=16097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000100000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 693.78165ms ago: executing program 0 (id=16098): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x6, 0x3, 0x4, 0x2, "070040000580cc0d"}, 0x11}}, 0x8001) (async) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x6, 0x3, 0x4, 0x2, "070040000580cc0d"}, 0x11}}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB="0600000000000000000000000000000000546740", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB="0600000000000000000000000000000000546740", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004690000080000cdf53df5000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f000000a640)={0x0, 0x0, &(0x7f000000a600)={&(0x7f000000a580)=ANY=[@ANYBLOB="440000000406050000000000000000000000000a0900020073797a1700000000050001000700000005000100070000000900020073797a3000000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x2, &(0x7f0000000200)="63e2ed8e46dc370adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x2, &(0x7f0000000200)="63e2ed8e46dc370adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000580)={r4, &(0x7f0000000300)='GPL\x00', 0x20000, &(0x7f0000000340)={@align=0x3ff, {0x8, 0xffff, 0x7fff, 0x5}}, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=0x3}) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f00000005c0)={0x3, 0x3}, 0x4) 613.35217ms ago: executing program 3 (id=16099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x203}}}}}}}, 0x0) 599.778557ms ago: executing program 1 (id=16100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x173, 0x4) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [@call={0x85, 0x0, 0x0, 0x6c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xa, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 550.652633ms ago: executing program 0 (id=16101): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (fail_nth: 3) 535.931521ms ago: executing program 2 (id=16102): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000100000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 503.021075ms ago: executing program 3 (id=16103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20) r1 = socket$isdn(0x22, 0x3, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000069107600000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000100)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="56e9c2a414f27ce62e0e8626f77ede975fcf7f26b20b310ff919a2a8631626d4"}) 492.993944ms ago: executing program 4 (id=16104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000400fffffff4000000000000000a20000000000a05000000000000000800070000000900010073797a300000000048000000090a010400000000000000000700000008000a400000000009f5020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 201.118515ms ago: executing program 1 (id=16105): r0 = socket(0x840000000002, 0x3, 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(r2, 0x5450) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r5 = socket(0x2, 0x3, 0xff) getpeername$packet(r5, 0x0, &(0x7f0000000780)) r6 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x208000}, 0xa, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="3ea939300f1f50345cdbb19b45e38086caa6b178a1a6c3efb7fcb86ffb3b9c7f1d3f63ed5aad557c6884dd3e34119bb5932d4a1bf8f4af35cd823fe9a2c8fade97df5971fe92bfd4a43d65c8f57d9569bbabd5a0befc0f144381806cd429f295c71090e46fb496118f03fa58f9268c54b9b68c602ece102a3d905b0a1c9af4bf49a89ec4d0d6b79d9678f84dc18e25a2c7ca1e6b459f208d0555985b810ed414df4cfec575e0c135b43dac4b8dec825ccb7fabd5778f8b0106e18cdc71991239605cf3c689be5bc890e76c0550f37074ac82351d4041d16abc", 0xd9}, {&(0x7f0000000200)="63dbba2b541fb8fd51615fa4a0c1b71237aa67d6cfb314ad6d5d0ea2b12083cab622e27fb12184b3ca5e8e76f91a65cd7225ed0f898e", 0x36}, {&(0x7f0000000dc0)="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", 0xff0}, {&(0x7f0000000400)="3e92b1f504f62f62738dd3ddcab6", 0xe}, {&(0x7f0000000440)="8c29e2992df220a1b9d44bf3fbff269d4e6399ba78a7a292f772e2b400f10b8fb459edcd906064dfb108c084a721d1a5ec378e1f722ed22e33a6ea39043ca030fb583e3128f8d568cb16376022d33824fe824526c69da48ac411fc97072b7ba03fc06e11ca024b5a6b9bcc7f354a830e3f1cc9e60d2d8b4d3f00f793f7c1f8", 0x7f}, {&(0x7f0000000540)="e147bb27bbb833981f2924ab371e9733d3e6032460b3022f412b3b86afbfa98275747e6dda7dd211cc6027b06eafcc531aba6cbc89ceb8c9987f5a02534d972ecc9897ca13062c3e78ac65396b202bfec8", 0x51}], 0x6, &(0x7f00000007c0)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x1c, 0x1, 0x5, [{@multicast1, 0x3ff}]}, @timestamp={0x44, 0x20, 0x52, 0x0, 0x1, [0x9, 0x9, 0x7ff, 0x1, 0xa73, 0x3ff, 0xb0]}, @generic={0x94, 0x9, "bd4755693f10c7"}, @lsrr={0x83, 0x17, 0x96, [@dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @rand_addr=0x64010102, @empty, @private=0xa010102]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x1, [{@local, 0x81}]}, @generic={0x7, 0xd, "9b0ccff00fc3bfd1652219"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}], 0xc0}}], 0x3, 0x4800) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000280)='Qg', 0x2, 0x48810, &(0x7f00000005c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf256b00000008000300ec498d7547c6ba298d70994eaab2e9381ee8a8ec9ee85fa95133a57cbf106f7551a792fad8df5cab5ed641b0628916782b4446aa6762aa32d907fc1fe644c746cd2a107d6839", @ANYRES32=0x0, @ANYBLOB="0000990035d300007e00000000001a00ffffffffffff00000a00060008021100000100000a001a00ffffffffffff00000a00060008021100000000000a001a0008021100000100000a001a00ffffffffffff0000"], 0x9f}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000000701030000000000000000010000010900010073797a300000000008000540000000020c0006400000000000000008375ae84d1d50873d78b026f4416a4209deafacc3261509dab9d9e47482126bef88e9650ca8ff53a4560f22206fac3bb7e76cf89d678ef3b0ec1cc104e8c938d81d2b080fa9203b94"], 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x14) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r4, @ANYBLOB="06003400c5f3000008004a"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) unshare(0x22020400) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) read(r9, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0xa0, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "633c5c005031254a001a0000000000eb9700"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xe86a301670200e0b}, 0x40080) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x80, 0x28, 0x8, 0x164, {{0x27, 0x4, 0x2, 0x7, 0x9c, 0x68, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@lsrr={0x83, 0x7, 0x29, [@local]}, @timestamp_prespec={0x44, 0x2c, 0xb9, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x2}, {@remote, 0x4}, {@rand_addr=0x64010100}, {@local, 0x1}, {@local, 0x3a55425b}]}, @lsrr={0x83, 0xb, 0xdd, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_addr={0x44, 0x24, 0xae, 0x1, 0xb, [{@remote, 0x7}, {@private=0xa010100, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0xd}]}, @timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0xa, [{@empty, 0xc}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1ff}]}, @ssrr={0x89, 0x7, 0xf3, [@dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0xb) 169.644212ms ago: executing program 2 (id=16106): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x4, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100]}}, 0x5c) pselect6(0x40, &(0x7f0000000200)={0xd, 0xeca, 0x4, 0x4, 0x800, 0x5, 0x7, 0x1}, &(0x7f0000000240)={0x3, 0x8, 0x3bb0, 0xf62, 0x4722, 0x2, 0x4, 0x57}, &(0x7f0000000380)={0x4, 0x0, 0x9, 0x5, 0x7a2, 0x5a9, 0x3, 0x919d}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={&(0x7f0000000400)={[0x8]}, 0x8}) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0xfffffffc, @mcast2}, 0x1, {[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff]}}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'gact\x00'}}, {0xffffff5e, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000100}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000000c0)='batadv_slave_0\x00') (async) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000000c0)='batadv_slave_0\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 120.724436ms ago: executing program 4 (id=16107): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000080)=""/78, 0x4e}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ffffffa400000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x8002, @multicast2}}}, 0x108) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) 58.748872ms ago: executing program 3 (id=16108): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (fail_nth: 3) 1.248982ms ago: executing program 0 (id=16109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="13000eb6bbe313a58e4d127d0d8ccd73c42735320026c2a3c96679af8ed84c1a3d9245f9d950ea6cd8501c40509f61c9859d54190e5846ade5ec8ab5d908352ff000fb994e42dec609f8ee6fb920eef0d79433c3a9466cdfbc7a3961966ee3396f11359a671b0ea8656cf608d6b125963e65fa2e39fe1533588f977299265993f9fe10afec8454eefac17e94231239237795a1d31c712db506bb6c3f30ace7eee44ed429b4bfc0097dd5f966362be3bfcfe17c3b481ee6c03503d34463b27478b9639d7041ef25002e8dca379a596323e27539ee108581a1fd034aa3cb1ae58c1ad1fa105c332dfc2659967af7e5544a6f", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001002000000000001600000085000000a900000095"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x48d6}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[], 0x1c4}, 0x1, 0x0, 0x0, 0x41001}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/7, 0x7}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x7, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff0a, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffc1, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {r2, 0x4}], 0x2, 0x0, 0x0, 0x0) 425.553µs ago: executing program 1 (id=16110): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x3f}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 0s ago: executing program 3 (id=16111): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b33, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x100800) setsockopt$packet_int(r3, 0x107, 0x2b, &(0x7f00000001c0)=0x7ff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x113f, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f00000000c0)={0x8, 'syz1\x00'}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) close(0x3) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000100000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x4, 0x2, 0x0, 0x3, 0x7f, 0xa8, 0x9, 0x6, 0x8, 0x7, 0xa5, 0x3, 0xfa}, 0xe) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 6': attribute type 5 has an invalid length. [ 1672.356290][T19272] bond2 (unregistering): (slave bridge7): Releasing backup interface [ 1672.364746][T19272] bridge7 (unregistering): left promiscuous mode [ 1672.445393][T12925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.476232][T19272] bond3 (unregistering): (slave bridge10): Releasing active interface [ 1672.662704][T19272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.673850][T19272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.684719][T19272] bond0 (unregistering): Released all slaves [ 1672.700402][T19272] bond1 (unregistering): Released all slaves [ 1672.718721][T19272] bond2 (unregistering): Released all slaves [ 1672.733174][T19272] bond3 (unregistering): Released all slaves [ 1672.751164][T22858] chnl_net:caif_netlink_parms(): no params data found [ 1672.778717][T22950] lo speed is unknown, defaulting to 1000 [ 1672.901767][T19272] tipc: Left network mode [ 1672.940500][T19272] IPVS: stopping master sync thread 20548 ... [ 1673.011880][ T3839] Bluetooth: hci2: command tx timeout [ 1673.295659][T23012] __nla_validate_parse: 2 callbacks suppressed [ 1673.295685][T23012] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15105'. [ 1673.453132][T23017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.482287][T12925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.489592][T23017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15106'. [ 1673.535703][T22858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.552420][T22858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.559944][T22858] bridge_slave_0: entered allmulticast mode [ 1673.567721][T23025] netlink: 'syz.3.15107': attribute type 5 has an invalid length. [ 1673.581674][T23025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15107'. [ 1673.593566][T22858] bridge_slave_0: entered promiscuous mode [ 1673.612784][T22858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.628116][T22858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.639300][T22858] bridge_slave_1: entered allmulticast mode [ 1673.673051][T22858] bridge_slave_1: entered promiscuous mode [ 1674.008962][T22858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.060010][T22858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.089628][T23034] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1674.125864][T19273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.134291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.362495][T19272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.374760][T19272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.456842][T19272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.492399][T19272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.522481][T26680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.643848][T19272] veth1_macvtap: left promiscuous mode [ 1674.649405][T19272] veth0_macvtap: left promiscuous mode [ 1674.671686][T19272] veth1_vlan: left promiscuous mode [ 1674.677041][T19272] veth0_vlan: left promiscuous mode [ 1674.790549][T23067] FAULT_INJECTION: forcing a failure. [ 1674.790549][T23067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.805927][T23067] CPU: 1 UID: 0 PID: 23067 Comm: syz.1.15116 Not tainted syzkaller #0 PREEMPT(full) [ 1674.805957][T23067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1674.805969][T23067] Call Trace: [ 1674.805978][T23067] [ 1674.805987][T23067] dump_stack_lvl+0xe8/0x150 [ 1674.806019][T23067] should_fail_ex+0x412/0x560 [ 1674.806051][T23067] _copy_to_user+0x31/0xb0 [ 1674.806076][T23067] simple_read_from_buffer+0xe1/0x170 [ 1674.806131][T23067] proc_fail_nth_read+0x1bb/0x230 [ 1674.806162][T23067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.806191][T23067] ? rw_verify_area+0x2a6/0x4d0 [ 1674.806214][T23067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.806251][T23067] vfs_read+0x20c/0xa70 [ 1674.806281][T23067] ? fdget_pos+0x246/0x320 [ 1674.806307][T23067] ? __pfx___mutex_lock+0x10/0x10 [ 1674.806334][T23067] ? __pfx_vfs_read+0x10/0x10 [ 1674.806368][T23067] ? __fget_files+0x2a/0x420 [ 1674.806393][T23067] ? __fget_files+0x3a0/0x420 [ 1674.806411][T23067] ? __fget_files+0x2a/0x420 [ 1674.806441][T23067] ksys_read+0x150/0x270 [ 1674.806467][T23067] ? __pfx_ksys_read+0x10/0x10 [ 1674.806504][T23067] do_syscall_64+0x14d/0xf80 [ 1674.806529][T23067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.806547][T23067] ? trace_irq_disable+0x37/0x100 [ 1674.806568][T23067] ? clear_bhb_loop+0x40/0x90 [ 1674.806591][T23067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.806610][T23067] RIP: 0033:0x7faba055c84e [ 1674.806629][T23067] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1674.806647][T23067] RSP: 002b:00007faba14e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1674.806670][T23067] RAX: ffffffffffffffda RBX: 00007faba14e36c0 RCX: 00007faba055c84e [ 1674.806685][T23067] RDX: 000000000000000f RSI: 00007faba14e30a0 RDI: 0000000000000010 [ 1674.806698][T23067] RBP: 00007faba14e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.806711][T23067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.806723][T23067] R13: 00007faba0816038 R14: 00007faba0815fa0 R15: 00007ffedbe8db38 [ 1674.806759][T23067] [ 1675.059928][T19272] pimreg (unregistering): left allmulticast mode [ 1675.088958][ T3839] Bluetooth: hci2: command tx timeout [ 1675.323629][T19272] team0 (unregistering): Port device team_slave_1 removed [ 1675.349386][T19272] team0 (unregistering): Port device team_slave_0 removed [ 1675.406134][ T8892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.414545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.507045][T22858] team0: Port device team_slave_0 added [ 1675.519181][T23014] lo speed is unknown, defaulting to 1000 [ 1675.561817][T12925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.628745][T22858] team0: Port device team_slave_1 added [ 1675.728928][T23080] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15118'. [ 1675.762974][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15119'. [ 1675.799345][T22858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.808456][T22858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.836273][T22858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.907018][T22858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.914388][T22858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.944295][T22858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.128488][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15121'. [ 1676.198700][T19272] IPVS: stop unused estimator thread 0... [ 1676.265332][T22858] hsr_slave_0: entered promiscuous mode [ 1676.297457][T22858] hsr_slave_1: entered promiscuous mode [ 1676.328597][T22858] debugfs: 'hsr0' already exists in 'hsr' [ 1676.358287][T22858] Cannot create hsr debugfs directory [ 1676.429309][T23100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15124'. [ 1676.569338][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15122'. [ 1677.162033][ T3839] Bluetooth: hci2: command tx timeout [ 1677.634484][T23135] FAULT_INJECTION: forcing a failure. [ 1677.634484][T23135] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.665127][T23135] CPU: 1 UID: 0 PID: 23135 Comm: syz.1.15129 Not tainted syzkaller #0 PREEMPT(full) [ 1677.665156][T23135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1677.665168][T23135] Call Trace: [ 1677.665177][T23135] [ 1677.665186][T23135] dump_stack_lvl+0xe8/0x150 [ 1677.665218][T23135] should_fail_ex+0x412/0x560 [ 1677.665251][T23135] should_failslab+0xa8/0x100 [ 1677.665280][T23135] __kmalloc_cache_noprof+0x88/0x660 [ 1677.665303][T23135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1677.665330][T23135] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 1677.665362][T23135] __xdp_reg_mem_model+0x1e3/0x5d0 [ 1677.665393][T23135] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 1677.665421][T23135] ? page_pool_create_percpu+0x7f9/0xb80 [ 1677.665454][T23135] xdp_reg_mem_model+0x22/0x40 [ 1677.665479][T23135] bpf_test_run_xdp_live+0x295/0x1cf0 [ 1677.665509][T23135] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1677.665543][T23135] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1677.665577][T23135] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1677.665622][T23135] ? 0xffffffffa0201a08 [ 1677.665639][T23135] ? 0xffffffffa0201a58 [ 1677.665684][T23135] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1677.665718][T23135] ? _copy_from_user+0x94/0xb0 [ 1677.665739][T23135] ? bpf_test_init+0x113/0x150 [ 1677.665756][T23135] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1677.665780][T23135] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1677.665818][T23135] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1677.665845][T23135] ? __fget_files+0x2a/0x420 [ 1677.665880][T23135] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1677.665902][T23135] bpf_prog_test_run+0x2c7/0x340 [ 1677.665932][T23135] __sys_bpf+0x643/0x950 [ 1677.665959][T23135] ? __pfx___sys_bpf+0x10/0x10 [ 1677.666000][T23135] ? ksys_write+0x242/0x270 [ 1677.666027][T23135] ? __pfx_ksys_write+0x10/0x10 [ 1677.666057][T23135] __x64_sys_bpf+0x7c/0x90 [ 1677.666079][T23135] do_syscall_64+0x14d/0xf80 [ 1677.666104][T23135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.666121][T23135] ? trace_irq_disable+0x37/0x100 [ 1677.666143][T23135] ? clear_bhb_loop+0x40/0x90 [ 1677.666167][T23135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.666186][T23135] RIP: 0033:0x7faba059bf79 [ 1677.666204][T23135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.666220][T23135] RSP: 002b:00007faba14e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1677.666242][T23135] RAX: ffffffffffffffda RBX: 00007faba0815fa0 RCX: 00007faba059bf79 [ 1677.666256][T23135] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1677.666269][T23135] RBP: 00007faba14e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.666282][T23135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.666294][T23135] R13: 00007faba0816038 R14: 00007faba0815fa0 R15: 00007ffedbe8db38 [ 1677.666327][T23135] [ 1678.300354][T23120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1678.777782][T22858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1678.848505][T22858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1678.950016][T22858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1678.975544][T22858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1679.387019][T23175] netlink: 'syz.3.15135': attribute type 8 has an invalid length. [ 1679.398623][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15135'. [ 1679.445001][T23175] veth0_virt_wifi: entered promiscuous mode [ 1679.463648][T23175] gretap0: entered promiscuous mode [ 1679.486336][T23175] veth0_virt_wifi: left promiscuous mode [ 1679.509333][T23175] gretap0: left promiscuous mode [ 1679.609856][T23183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15134'. [ 1679.638415][T22858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.765368][T23187] netlink: 'syz.3.15137': attribute type 8 has an invalid length. [ 1679.775824][T23187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15137'. [ 1679.801001][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15134'. [ 1679.829721][T22858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.874766][T23187] veth0_virt_wifi: entered promiscuous mode [ 1679.897553][T23187] gretap0: entered promiscuous mode [ 1679.919656][T23187] veth0_virt_wifi: left promiscuous mode [ 1679.929950][T23187] gretap0: left promiscuous mode [ 1679.947951][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.955193][ T8892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.058628][T19273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.065869][T19273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.161144][T23202] netlink: 'syz.3.15138': attribute type 1 has an invalid length. [ 1680.436169][T23205] bond6: entered promiscuous mode [ 1680.451648][T23205] bond6: entered allmulticast mode [ 1680.468583][T23205] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1680.609242][T23200] bridge7: entered promiscuous mode [ 1680.644254][T23200] bridge7: entered allmulticast mode [ 1680.662801][ T8892] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1680.675163][T23200] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 1680.697109][T23219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15141'. [ 1680.777080][T23202] bridge8: entered promiscuous mode [ 1680.790779][T23202] bridge8: entered allmulticast mode [ 1680.803092][T19273] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1680.813032][T23202] bond6: (slave bridge8): Enslaving as a backup interface with a down link [ 1680.879882][T23229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15143'. [ 1681.069356][T22858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.166891][T23242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15146'. [ 1681.210893][T22858] veth0_vlan: entered promiscuous mode [ 1681.255393][T22858] veth1_vlan: entered promiscuous mode [ 1681.373679][T22858] veth0_macvtap: entered promiscuous mode [ 1681.408684][T22858] veth1_macvtap: entered promiscuous mode [ 1681.497639][T22858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.552098][T22858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.624237][ T6787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.633435][ T6787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.659476][ T6787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.684446][ T6787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.727186][T23262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15153'. [ 1682.054193][ T6787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.089673][ T6787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.199004][ T8892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.231947][ T8892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.413341][T23290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15159'. [ 1682.439524][T23292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15058'. [ 1682.483202][T23292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1682.518501][T23292] netlink: 'syz.2.15058': attribute type 3 has an invalid length. [ 1682.781111][T23304] 8021q: VLANs not supported on ip_vti0 [ 1683.716907][T23335] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1684.721802][T23368] netlink: 'syz.1.15186': attribute type 5 has an invalid length. [ 1684.734436][T23369] __nla_validate_parse: 7 callbacks suppressed [ 1684.734457][T23369] netlink: 5 bytes leftover after parsing attributes in process `syz.0.15185'. [ 1684.750621][T23368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15186'. [ 1684.879958][T23369] syzkaller1: entered promiscuous mode [ 1684.912000][T23369] syzkaller1: entered allmulticast mode [ 1684.941072][T23374] netlink: 'syz.4.15187': attribute type 5 has an invalid length. [ 1684.992900][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15185'. [ 1685.011721][T23374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15187'. [ 1685.013602][T23376] netlink: 'syz.1.15188': attribute type 8 has an invalid length. [ 1685.029055][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15188'. [ 1685.129274][T23376] veth0_virt_wifi: entered promiscuous mode [ 1685.137222][T23376] gretap0: entered promiscuous mode [ 1685.181592][T23376] veth0_virt_wifi: left promiscuous mode [ 1685.224575][T23376] gretap0: left promiscuous mode [ 1685.633073][T23395] FAULT_INJECTION: forcing a failure. [ 1685.633073][T23395] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.680226][T23395] CPU: 0 UID: 0 PID: 23395 Comm: syz.1.15192 Not tainted syzkaller #0 PREEMPT(full) [ 1685.680257][T23395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.680269][T23395] Call Trace: [ 1685.680278][T23395] [ 1685.680288][T23395] dump_stack_lvl+0xe8/0x150 [ 1685.680320][T23395] should_fail_ex+0x412/0x560 [ 1685.680354][T23395] should_failslab+0xa8/0x100 [ 1685.680385][T23395] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1685.680409][T23395] ? __alloc_skb+0x186/0x7d0 [ 1685.680431][T23395] ? __alloc_skb+0x1d0/0x7d0 [ 1685.680449][T23395] ? __local_bh_enable_ip+0xd0/0x130 [ 1685.680478][T23395] __alloc_skb+0x1d0/0x7d0 [ 1685.680505][T23395] netlink_sendmsg+0x5d4/0xb40 [ 1685.680537][T23395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1685.680561][T23395] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1685.680590][T23395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1685.680619][T23395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1685.680638][T23395] ____sys_sendmsg+0xa68/0xad0 [ 1685.680663][T23395] ? __might_fault+0xaf/0x130 [ 1685.680694][T23395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1685.680729][T23395] ? import_iovec+0x73/0xa0 [ 1685.680752][T23395] ___sys_sendmsg+0x2a5/0x360 [ 1685.680775][T23395] ? __lock_acquire+0x6b5/0x2cf0 [ 1685.680802][T23395] ? __pfx____sys_sendmsg+0x10/0x10 [ 1685.680866][T23395] ? __fget_files+0x2a/0x420 [ 1685.680885][T23395] ? __fget_files+0x3a0/0x420 [ 1685.680915][T23395] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1685.680944][T23395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1685.680981][T23395] ? __pfx_ksys_write+0x10/0x10 [ 1685.681027][T23395] do_syscall_64+0x14d/0xf80 [ 1685.681053][T23395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.681071][T23395] ? trace_irq_disable+0x37/0x100 [ 1685.681093][T23395] ? clear_bhb_loop+0x40/0x90 [ 1685.681117][T23395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.681135][T23395] RIP: 0033:0x7faba059bf79 [ 1685.681153][T23395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.681170][T23395] RSP: 002b:00007faba14e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1685.681192][T23395] RAX: ffffffffffffffda RBX: 00007faba0815fa0 RCX: 00007faba059bf79 [ 1685.681206][T23395] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1685.681219][T23395] RBP: 00007faba14e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1685.681231][T23395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1685.681243][T23395] R13: 00007faba0816038 R14: 00007faba0815fa0 R15: 00007ffedbe8db38 [ 1685.681276][T23395] [ 1686.643655][T23415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15197'. [ 1686.672618][T23415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15197'. [ 1686.818307][T23422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15200'. [ 1686.862017][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15200'. [ 1687.263820][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15201'. [ 1688.377254][T23442] netlink: 'syz.0.15205': attribute type 5 has an invalid length. [ 1688.792471][T23454] FAULT_INJECTION: forcing a failure. [ 1688.792471][T23454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.833012][T23454] CPU: 1 UID: 0 PID: 23454 Comm: syz.1.15207 Not tainted syzkaller #0 PREEMPT(full) [ 1688.833048][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1688.833060][T23454] Call Trace: [ 1688.833068][T23454] [ 1688.833078][T23454] dump_stack_lvl+0xe8/0x150 [ 1688.833110][T23454] should_fail_ex+0x412/0x560 [ 1688.833144][T23454] _copy_from_iter+0x1d3/0x1670 [ 1688.833183][T23454] ? rcu_is_watching+0x15/0xb0 [ 1688.833208][T23454] ? __pfx__copy_from_iter+0x10/0x10 [ 1688.833246][T23454] ? netlink_sendmsg+0x650/0xb40 [ 1688.833265][T23454] ? skb_put+0x11b/0x210 [ 1688.833292][T23454] netlink_sendmsg+0x6c0/0xb40 [ 1688.833323][T23454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.833347][T23454] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1688.833377][T23454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1688.833405][T23454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.833424][T23454] ____sys_sendmsg+0xa68/0xad0 [ 1688.833449][T23454] ? __might_fault+0xaf/0x130 [ 1688.833491][T23454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1688.833526][T23454] ? import_iovec+0x73/0xa0 [ 1688.833550][T23454] ___sys_sendmsg+0x2a5/0x360 [ 1688.833574][T23454] ? __lock_acquire+0x6b5/0x2cf0 [ 1688.833600][T23454] ? __pfx____sys_sendmsg+0x10/0x10 [ 1688.833678][T23454] ? __fget_files+0x2a/0x420 [ 1688.833697][T23454] ? __fget_files+0x3a0/0x420 [ 1688.833729][T23454] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1688.833757][T23454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1688.833792][T23454] ? __pfx_ksys_write+0x10/0x10 [ 1688.833829][T23454] do_syscall_64+0x14d/0xf80 [ 1688.833854][T23454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.833873][T23454] ? trace_irq_disable+0x37/0x100 [ 1688.833895][T23454] ? clear_bhb_loop+0x40/0x90 [ 1688.833918][T23454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.833936][T23454] RIP: 0033:0x7faba059bf79 [ 1688.833956][T23454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.833973][T23454] RSP: 002b:00007faba14e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.833995][T23454] RAX: ffffffffffffffda RBX: 00007faba0815fa0 RCX: 00007faba059bf79 [ 1688.834010][T23454] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1688.834022][T23454] RBP: 00007faba14e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.834035][T23454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.834047][T23454] R13: 00007faba0816038 R14: 00007faba0815fa0 R15: 00007ffedbe8db38 [ 1688.834080][T23454] [ 1688.888760][T23456] xt_connbytes: Forcing CT accounting to be enabled [ 1689.228375][T23456] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1689.374513][T23468] netlink: 'syz.1.15212': attribute type 8 has an invalid length. [ 1689.425856][T23468] veth0_virt_wifi: entered promiscuous mode [ 1689.469818][T23468] gretap0: entered promiscuous mode [ 1689.497003][ T29] audit: type=1800 audit(1771309159.014:13): pid=23470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15213" name="blkio.bfq.time_recursive" dev="tmpfs" ino=232 res=0 errno=0 [ 1689.540708][T23468] veth0_virt_wifi: left promiscuous mode [ 1689.550107][T23468] gretap0: left promiscuous mode [ 1689.649836][T23476] netlink: 'syz.0.15216': attribute type 11 has an invalid length. [ 1689.727322][T23480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1689.740516][T23480] netlink: 'syz.2.15215': attribute type 3 has an invalid length. [ 1689.749159][T23480] __nla_validate_parse: 7 callbacks suppressed [ 1689.749176][T23480] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15215'. [ 1689.769870][T23480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15215'. [ 1689.928267][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15218'. [ 1690.347212][T23320] Set syz1 is full, maxelem 65536 reached [ 1690.497318][T23497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15223'. [ 1690.506706][T23497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15223'. [ 1690.537669][T23501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15222'. [ 1690.549764][T23501] nbd: must specify at least one socket [ 1691.102446][T23523] FAULT_INJECTION: forcing a failure. [ 1691.102446][T23523] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.141788][T23523] CPU: 0 UID: 0 PID: 23523 Comm: syz.4.15230 Not tainted syzkaller #0 PREEMPT(full) [ 1691.141817][T23523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1691.141829][T23523] Call Trace: [ 1691.141838][T23523] [ 1691.141846][T23523] dump_stack_lvl+0xe8/0x150 [ 1691.141877][T23523] should_fail_ex+0x412/0x560 [ 1691.141910][T23523] should_failslab+0xa8/0x100 [ 1691.141938][T23523] ? skb_clone+0x212/0x3a0 [ 1691.141974][T23523] kmem_cache_alloc_noprof+0x87/0x650 [ 1691.141998][T23523] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1691.142030][T23523] skb_clone+0x212/0x3a0 [ 1691.142053][T23523] ? can_send+0x655/0xd20 [ 1691.142076][T23523] can_send+0x673/0xd20 [ 1691.142106][T23523] ? __pfx_can_send+0x10/0x10 [ 1691.142130][T23523] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1691.142158][T23523] isotp_sendmsg+0xd6d/0x1530 [ 1691.142203][T23523] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1691.142237][T23523] ? __pfx_aa_sk_perm+0x10/0x10 [ 1691.142261][T23523] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1691.142298][T23523] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1691.142327][T23523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1691.142356][T23523] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1691.142382][T23523] ____sys_sendmsg+0xa68/0xad0 [ 1691.142407][T23523] ? __might_fault+0xaf/0x130 [ 1691.142437][T23523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1691.142473][T23523] ? import_iovec+0x73/0xa0 [ 1691.142498][T23523] ___sys_sendmsg+0x2a5/0x360 [ 1691.142522][T23523] ? __lock_acquire+0x6b5/0x2cf0 [ 1691.142549][T23523] ? __pfx____sys_sendmsg+0x10/0x10 [ 1691.142580][T23523] ? kstrtouint+0x6e/0xe0 [ 1691.142635][T23523] ? __fget_files+0x2a/0x420 [ 1691.142654][T23523] ? __fget_files+0x3a0/0x420 [ 1691.142686][T23523] __sys_sendmmsg+0x27c/0x4e0 [ 1691.142715][T23523] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1691.142736][T23523] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1691.142790][T23523] ? ksys_write+0x242/0x270 [ 1691.142817][T23523] ? __pfx_ksys_write+0x10/0x10 [ 1691.142847][T23523] __x64_sys_sendmmsg+0xa0/0xc0 [ 1691.142873][T23523] do_syscall_64+0x14d/0xf80 [ 1691.142897][T23523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.142916][T23523] ? trace_irq_disable+0x37/0x100 [ 1691.142938][T23523] ? clear_bhb_loop+0x40/0x90 [ 1691.142972][T23523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.142991][T23523] RIP: 0033:0x7f8934d9bf79 [ 1691.143010][T23523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.143028][T23523] RSP: 002b:00007f8935c43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1691.143049][T23523] RAX: ffffffffffffffda RBX: 00007f8935015fa0 RCX: 00007f8934d9bf79 [ 1691.143063][T23523] RDX: 0000000000000001 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1691.143075][T23523] RBP: 00007f8935c43090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.143086][T23523] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 1691.143099][T23523] R13: 00007f8935016038 R14: 00007f8935015fa0 R15: 00007ffe91103878 [ 1691.143132][T23523] [ 1691.143199][T23523] can-isotp: isotp_sendmsg: can_send_ret -ENOMEM [ 1691.163451][T23524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15231'. [ 1691.650721][T23530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15232'. [ 1691.709398][T23532] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15233'. [ 1691.825311][T23534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1691.859205][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15232'. [ 1692.050767][T23535] netlink: 'syz.4.15232': attribute type 3 has an invalid length. [ 1692.383344][T23547] netlink: 'syz.0.15239': attribute type 5 has an invalid length. [ 1694.092533][T23580] netlink: 'syz.0.15250': attribute type 5 has an invalid length. [ 1694.644583][T23598] syzkaller0: entered promiscuous mode [ 1694.650418][T23598] syzkaller0: entered allmulticast mode [ 1694.979131][T23608] __nla_validate_parse: 6 callbacks suppressed [ 1694.979154][T23608] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15256'. [ 1695.342410][T23624] netlink: 'syz.2.15261': attribute type 5 has an invalid length. [ 1695.370876][T23624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15261'. [ 1695.585644][T23633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15263'. [ 1695.688291][T23638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15266'. [ 1695.713529][T23640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1695.723766][T23640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15263'. [ 1695.899895][T23642] netlink: 'syz.3.15263': attribute type 3 has an invalid length. [ 1695.926483][T23642] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15263'. [ 1696.083025][T23646] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15269'. [ 1696.331264][T23655] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1697.002325][T23516] Set syz1 is full, maxelem 65536 reached [ 1697.116957][T23651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1697.130377][T23669] FAULT_INJECTION: forcing a failure. [ 1697.130377][T23669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1697.146464][T23669] CPU: 1 UID: 0 PID: 23669 Comm: syz.1.15275 Not tainted syzkaller #0 PREEMPT(full) [ 1697.146490][T23669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1697.146501][T23669] Call Trace: [ 1697.146510][T23669] [ 1697.146519][T23669] dump_stack_lvl+0xe8/0x150 [ 1697.146551][T23669] should_fail_ex+0x412/0x560 [ 1697.146581][T23669] _copy_from_user+0x2d/0xb0 [ 1697.146603][T23669] ___sys_sendmsg+0x1c6/0x360 [ 1697.146624][T23669] ? __lock_acquire+0x6b5/0x2cf0 [ 1697.146650][T23669] ? __pfx____sys_sendmsg+0x10/0x10 [ 1697.146718][T23669] ? __fget_files+0x2a/0x420 [ 1697.146738][T23669] ? __fget_files+0x3a0/0x420 [ 1697.146767][T23669] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1697.146795][T23669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1697.146830][T23669] ? __pfx_ksys_write+0x10/0x10 [ 1697.146868][T23669] do_syscall_64+0x14d/0xf80 [ 1697.146893][T23669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.146910][T23669] ? trace_irq_disable+0x37/0x100 [ 1697.146930][T23669] ? clear_bhb_loop+0x40/0x90 [ 1697.146954][T23669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.146972][T23669] RIP: 0033:0x7faba059bf79 [ 1697.146990][T23669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1697.147007][T23669] RSP: 002b:00007faba14e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1697.147028][T23669] RAX: ffffffffffffffda RBX: 00007faba0815fa0 RCX: 00007faba059bf79 [ 1697.147043][T23669] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 1697.147056][T23669] RBP: 00007faba14e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.147067][T23669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.147079][T23669] R13: 00007faba0816038 R14: 00007faba0815fa0 R15: 00007ffedbe8db38 [ 1697.147112][T23669] [ 1697.355430][T23668] netlink: 'syz.3.15274': attribute type 5 has an invalid length. [ 1697.364861][T23668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15274'. [ 1698.131982][T23683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1698.221804][T23698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15283'. [ 1698.287981][T23701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15284'. [ 1698.333895][T23701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1698.388101][T23701] netlink: 'syz.2.15284': attribute type 3 has an invalid length. [ 1698.573422][T23710] netlink: 'syz.2.15288': attribute type 1 has an invalid length. [ 1698.592646][T23710] netlink: 'syz.2.15288': attribute type 4 has an invalid length. [ 1698.975298][T23717] FAULT_INJECTION: forcing a failure. [ 1698.975298][T23717] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.988225][T23717] CPU: 1 UID: 0 PID: 23717 Comm: syz.2.15291 Not tainted syzkaller #0 PREEMPT(full) [ 1698.988252][T23717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1698.988265][T23717] Call Trace: [ 1698.988274][T23717] [ 1698.988283][T23717] dump_stack_lvl+0xe8/0x150 [ 1698.988314][T23717] should_fail_ex+0x412/0x560 [ 1698.988347][T23717] should_failslab+0xa8/0x100 [ 1698.988376][T23717] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1698.988400][T23717] ? __alloc_skb+0x186/0x7d0 [ 1698.988420][T23717] ? __alloc_skb+0x1d0/0x7d0 [ 1698.988437][T23717] ? __local_bh_enable_ip+0xd0/0x130 [ 1698.988465][T23717] __alloc_skb+0x1d0/0x7d0 [ 1698.988492][T23717] netlink_sendmsg+0x5d4/0xb40 [ 1698.988522][T23717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1698.988545][T23717] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1698.988574][T23717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1698.988600][T23717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1698.988619][T23717] ____sys_sendmsg+0xa68/0xad0 [ 1698.988643][T23717] ? __might_fault+0xaf/0x130 [ 1698.988672][T23717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1698.988706][T23717] ? import_iovec+0x73/0xa0 [ 1698.988730][T23717] ___sys_sendmsg+0x2a5/0x360 [ 1698.988752][T23717] ? __lock_acquire+0x6b5/0x2cf0 [ 1698.988777][T23717] ? __pfx____sys_sendmsg+0x10/0x10 [ 1698.988847][T23717] ? __fget_files+0x2a/0x420 [ 1698.988865][T23717] ? __fget_files+0x3a0/0x420 [ 1698.988894][T23717] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1698.988922][T23717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1698.988956][T23717] ? __pfx_ksys_write+0x10/0x10 [ 1698.988992][T23717] do_syscall_64+0x14d/0xf80 [ 1698.989017][T23717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.989034][T23717] ? trace_irq_disable+0x37/0x100 [ 1698.989056][T23717] ? clear_bhb_loop+0x40/0x90 [ 1698.989079][T23717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.989097][T23717] RIP: 0033:0x7f396b79bf79 [ 1698.989115][T23717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.989131][T23717] RSP: 002b:00007f396c6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1698.989154][T23717] RAX: ffffffffffffffda RBX: 00007f396ba15fa0 RCX: 00007f396b79bf79 [ 1698.989167][T23717] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 1698.989180][T23717] RBP: 00007f396c6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.989192][T23717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.989203][T23717] R13: 00007f396ba16038 R14: 00007f396ba15fa0 R15: 00007fff0031a2b8 [ 1698.989235][T23717] [ 1700.209952][T23745] 8021q: VLANs not supported on vxcan0 [ 1701.406145][T23794] __nla_validate_parse: 3 callbacks suppressed [ 1701.406171][T23794] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15314'. [ 1701.776323][T23799] syzkaller0: entered promiscuous mode [ 1701.793320][T23799] syzkaller0: entered allmulticast mode [ 1702.406455][T23817] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15320'. [ 1702.549131][T23819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15321'. [ 1702.602286][T23819] 8021q: VLANs not supported on caif0 [ 1702.830283][T23822] tipc: Started in network mode [ 1702.835791][T23822] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1702.851531][T23822] tipc: Enabling of bearer rejected, failed to enable media [ 1703.122677][T23837] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15327'. [ 1703.161534][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 1703.161631][ T3839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1703.296435][T23839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15328'. [ 1703.447252][T23849] »»»»»»: renamed from vlan1 (while UP) [ 1703.583482][T23851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15334'. [ 1703.630828][T23851] 8021q: VLANs not supported on caif0 [ 1703.751329][T23865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15339'. [ 1703.791929][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15339'. [ 1704.076724][T23878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15343'. [ 1704.096791][T23884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15344'. [ 1704.203519][T23888] FAULT_INJECTION: forcing a failure. [ 1704.203519][T23888] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.236919][T23888] CPU: 1 UID: 0 PID: 23888 Comm: syz.2.15345 Not tainted syzkaller #0 PREEMPT(full) [ 1704.236949][T23888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1704.236962][T23888] Call Trace: [ 1704.236970][T23888] [ 1704.236979][T23888] dump_stack_lvl+0xe8/0x150 [ 1704.237014][T23888] should_fail_ex+0x412/0x560 [ 1704.237048][T23888] should_failslab+0xa8/0x100 [ 1704.237077][T23888] ? skb_clone+0x212/0x3a0 [ 1704.237104][T23888] kmem_cache_alloc_noprof+0x87/0x650 [ 1704.237128][T23888] ? __netlink_lookup+0xc6/0x8b0 [ 1704.237160][T23888] skb_clone+0x212/0x3a0 [ 1704.237190][T23888] __netlink_deliver_tap+0x404/0x850 [ 1704.237226][T23888] ? netlink_deliver_tap+0x2e/0x1b0 [ 1704.237247][T23888] netlink_deliver_tap+0x19c/0x1b0 [ 1704.237269][T23888] netlink_unicast+0x7e3/0x9b0 [ 1704.237305][T23888] ? __pfx_netlink_unicast+0x10/0x10 [ 1704.237359][T23888] ? netlink_sendmsg+0x650/0xb40 [ 1704.237387][T23888] ? skb_put+0x11b/0x210 [ 1704.237422][T23888] netlink_sendmsg+0x813/0xb40 [ 1704.237469][T23888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.237495][T23888] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1704.237523][T23888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1704.237560][T23888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.237580][T23888] ____sys_sendmsg+0xa68/0xad0 [ 1704.237604][T23888] ? __might_fault+0xaf/0x130 [ 1704.237641][T23888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.237677][T23888] ? import_iovec+0x73/0xa0 [ 1704.237702][T23888] ___sys_sendmsg+0x2a5/0x360 [ 1704.237725][T23888] ? __lock_acquire+0x6b5/0x2cf0 [ 1704.237752][T23888] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.237822][T23888] ? __fget_files+0x2a/0x420 [ 1704.237842][T23888] ? __fget_files+0x3a0/0x420 [ 1704.237874][T23888] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1704.237902][T23888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1704.237938][T23888] ? __pfx_ksys_write+0x10/0x10 [ 1704.237976][T23888] do_syscall_64+0x14d/0xf80 [ 1704.238000][T23888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.238019][T23888] ? trace_irq_disable+0x37/0x100 [ 1704.238039][T23888] ? clear_bhb_loop+0x40/0x90 [ 1704.238063][T23888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.238082][T23888] RIP: 0033:0x7f396b79bf79 [ 1704.238101][T23888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.238118][T23888] RSP: 002b:00007f396c6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.238142][T23888] RAX: ffffffffffffffda RBX: 00007f396ba15fa0 RCX: 00007f396b79bf79 [ 1704.238157][T23888] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 1704.238169][T23888] RBP: 00007f396c6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.238182][T23888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.238194][T23888] R13: 00007f396ba16038 R14: 00007f396ba15fa0 R15: 00007fff0031a2b8 [ 1704.238228][T23888] [ 1704.339004][T23888] batadv0: entered promiscuous mode [ 1704.587421][T23888] vlan2: entered promiscuous mode [ 1704.641378][T23895] netlink: 'syz.1.15347': attribute type 39 has an invalid length. [ 1704.772029][T23901] syzkaller0: entered promiscuous mode [ 1704.790335][T23901] syzkaller0: entered allmulticast mode [ 1705.277930][T23935] 8021q: VLANs not supported on caif0 [ 1706.079708][T23943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1706.550168][T23961] __nla_validate_parse: 1 callbacks suppressed [ 1706.550190][T23961] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15371'. [ 1707.759187][T23972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15374'. [ 1707.782947][T23972] 8021q: VLANs not supported on caif0 [ 1707.801973][ T3839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1707.808574][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1707.910814][T23976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15376'. [ 1708.114236][T23982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15379'. [ 1708.260675][T23988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15381'. [ 1708.992615][T24012] lo: Caught tx_queue_len zero misconfig [ 1709.248006][T24016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15391'. [ 1709.421330][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1709.431985][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1709.441028][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1709.452154][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1709.468636][T24016] nbd: socks must be embedded in a SOCK_ITEM attr [ 1709.475628][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1709.793259][T24009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1709.886985][T24021] udevd[24021]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1709.944915][T23577] udevd[23577]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1709.989144][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15392'. [ 1710.350737][T24036] batadv_slave_1: entered promiscuous mode [ 1710.447306][T24032] batadv_slave_1: left promiscuous mode [ 1710.477388][ T8892] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.509561][ T8892] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1710.535093][ T8892] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1710.547606][ T8892] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1710.600642][T24041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15395'. [ 1710.695420][ T8892] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.707651][ T8892] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1710.718793][ T8892] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1710.729129][ T8892] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1710.885326][ T8892] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.901637][ T8892] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1710.915121][ T8892] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1710.926096][ T8892] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1711.030093][ T8892] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.125621][ T8892] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1711.136272][ T8892] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1711.146442][ T8892] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1711.260624][T24052] netlink: 'syz.0.15400': attribute type 13 has an invalid length. [ 1711.271049][T24052] netlink: 'syz.0.15400': attribute type 17 has an invalid length. [ 1711.396879][T24058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15402'. [ 1711.419982][T24052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.485876][T24057] 8021q: VLANs not supported on vxcan1 [ 1711.562499][ T3839] Bluetooth: hci4: command tx timeout [ 1711.697153][T24019] chnl_net:caif_netlink_parms(): no params data found [ 1711.839323][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15407'. [ 1711.908695][T24066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15404'. [ 1711.923557][T24073] 8021q: VLANs not supported on caif0 [ 1711.946940][ T8892] bridge_slave_1: left allmulticast mode [ 1711.971767][ T8892] bridge_slave_1: left promiscuous mode [ 1711.977733][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.999437][ T8892] bridge_slave_0: left allmulticast mode [ 1712.027773][ T8892] bridge_slave_0: left promiscuous mode [ 1712.052154][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.114246][T24081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15411'. [ 1712.199854][T24083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1712.210079][T24083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15411'. [ 1712.295626][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15411'. [ 1712.317809][T24085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15410'. [ 1712.384596][ T8892] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 1712.392979][ T8892] gretap1 (unregistering): left promiscuous mode [ 1712.418895][ T8892] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1712.681766][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1712.682411][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1712.736432][ T8892] bond6 (unregistering): (slave bridge7): Removing an active aggregator [ 1712.746860][ T8892] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 1712.755217][ T8892] bond6 (unregistering): (slave bridge7): the permanent HWaddr of slave - ba:e1:53:73:66:6f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1712.778707][ T8892] bridge7 (unregistering): left promiscuous mode [ 1712.785340][ T8892] bridge7 (unregistering): left allmulticast mode [ 1712.835494][ T8892] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 1712.845914][ T8892] bridge8 (unregistering): left promiscuous mode [ 1712.852848][ T8892] bridge8 (unregistering): left allmulticast mode [ 1712.916837][ T8892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.929370][ T8892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.942714][ T8892] bond0 (unregistering): Released all slaves [ 1712.952968][ T8892] bond1 (unregistering): Released all slaves [ 1712.966935][ T8892] bond2 (unregistering): Released all slaves [ 1712.980080][ T8892] bond3 (unregistering): Released all slaves [ 1712.993548][ T8892] bond4 (unregistering): Released all slaves [ 1713.009746][ T8892] bond5 (unregistering): Released all slaves [ 1713.034682][ T8892] bond6 (unregistering): Released all slaves [ 1713.067194][T24083] netlink: 'syz.2.15411': attribute type 3 has an invalid length. [ 1713.076476][T24083] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15411'. [ 1713.314847][T24019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.314857][ T8892] tipc: Left network mode [ 1713.314952][T24019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.350989][T24019] bridge_slave_0: entered allmulticast mode [ 1713.373673][T24019] bridge_slave_0: entered promiscuous mode [ 1713.382896][ T8892] IPVS: stopping backup sync thread 17653 ... [ 1713.387031][T24019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.445455][T24019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.466159][T24019] bridge_slave_1: entered allmulticast mode [ 1713.493970][T24019] bridge_slave_1: entered promiscuous mode [ 1713.530535][T24101] netlink: 'syz.1.15415': attribute type 11 has an invalid length. [ 1713.625817][T24019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.642512][ T5824] Bluetooth: hci4: command tx timeout [ 1713.663104][T24019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1713.815551][T24019] team0: Port device team_slave_0 added [ 1713.864458][T24019] team0: Port device team_slave_1 added [ 1713.968749][T24114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15418'. [ 1714.114877][T24019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.171573][T24019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.184074][T24122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15421'. [ 1714.291485][T24019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.321181][T24019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.351041][T24019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.361273][T24132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1714.421595][T24019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.433941][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15421'. [ 1714.496709][ T8892] hsr_slave_0: left promiscuous mode [ 1714.508506][ T8892] hsr_slave_1: left promiscuous mode [ 1714.522311][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.529958][ T8892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.547061][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.556182][ T8892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.607357][ T8892] veth1_macvtap: left promiscuous mode [ 1714.615894][ T8892] veth0_macvtap: left promiscuous mode [ 1714.623223][ T8892] veth1_vlan: left promiscuous mode [ 1714.635832][ T8892] veth0_vlan: left promiscuous mode [ 1714.790132][ T8892] pimreg (unregistering): left allmulticast mode [ 1714.905338][ T8892] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 1714.960600][ T8892] team0 (unregistering): Port device team_slave_1 removed [ 1714.980103][ T8892] team0 (unregistering): Port device team_slave_0 removed [ 1715.142240][T24132] netlink: 'syz.1.15421': attribute type 3 has an invalid length. [ 1715.336911][T24019] hsr_slave_0: entered promiscuous mode [ 1715.363065][T24019] hsr_slave_1: entered promiscuous mode [ 1715.373190][T24019] debugfs: 'hsr0' already exists in 'hsr' [ 1715.389260][T24019] Cannot create hsr debugfs directory [ 1715.472202][T24149] 8021q: VLANs not supported on caif0 [ 1715.722370][ T3839] Bluetooth: hci4: command tx timeout [ 1716.151172][ T8892] IPVS: stop unused estimator thread 0... [ 1716.242700][T24193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1716.547234][T24199] netlink: 'syz.1.15439': attribute type 3 has an invalid length. [ 1716.766029][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1716.771785][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1716.798836][T24207] 8021q: VLANs not supported on caif0 [ 1716.943517][T24212] __nla_validate_parse: 10 callbacks suppressed [ 1716.943540][T24212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15442'. [ 1717.051286][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15443'. [ 1717.088476][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15443'. [ 1717.264491][T24198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1717.554622][T24019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1717.715407][T24223] bond1: ARP target 9.0.0.0 is already present [ 1717.767287][T24223] bond1: option arp_ip_target: invalid value (9) [ 1717.798608][T24223] bond1 (unregistering): Released all slaves [ 1717.805208][ T5824] Bluetooth: hci4: command tx timeout [ 1717.903614][T24019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1717.947952][T24019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1717.980192][T24237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15447'. [ 1718.015493][T24241] netlink: 'syz.2.15448': attribute type 1 has an invalid length. [ 1718.045605][T24241] netlink: 'syz.2.15448': attribute type 3 has an invalid length. [ 1718.055709][T24019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1718.089343][T24241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15448'. [ 1718.277811][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15451'. [ 1718.302923][T24260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1718.313522][T24260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15451'. [ 1718.372787][T24260] netlink: 'syz.2.15451': attribute type 3 has an invalid length. [ 1718.381019][T24260] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15451'. [ 1718.390855][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15452'. [ 1718.412757][T24260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15451'. [ 1718.470011][T24262] 8021q: VLANs not supported on caif0 [ 1718.518679][T24268] team0: left allmulticast mode [ 1718.536482][T24268] team_slave_0: left allmulticast mode [ 1718.577955][T24268] team_slave_1: left allmulticast mode [ 1718.651644][T24268] team0: left promiscuous mode [ 1718.656490][T24268] team_slave_0: left promiscuous mode [ 1718.674018][T24268] team_slave_1: left promiscuous mode [ 1718.680072][T24268] bridge0: port 3(team0) entered disabled state [ 1718.744823][T24268] bridge_slave_0: left allmulticast mode [ 1718.750541][T24268] bridge_slave_0: left promiscuous mode [ 1718.784217][T24268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.805977][T24268] bridge_slave_1: left allmulticast mode [ 1718.814577][T24268] bridge_slave_1: left promiscuous mode [ 1718.820593][T24268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.849122][T24268] bond0: (slave bond_slave_0): Releasing backup interface [ 1718.857467][T24268] bond_slave_0: left promiscuous mode [ 1718.882718][T24268] bond0: (slave bond_slave_1): Releasing backup interface [ 1718.900309][T24268] bond_slave_1: left promiscuous mode [ 1718.951162][T24268] team0: Port device team_slave_0 removed [ 1718.973562][T24268] team0: Port device team_slave_1 removed [ 1718.980535][T24268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.001502][T24268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.031055][T24268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.046343][T24268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.094279][T24268] bond2: (slave geneve2): Releasing active interface [ 1719.127128][T24268] bond3: (slave bridge4): Removing an active aggregator [ 1719.146358][T24268] bond3: (slave bridge4): Releasing backup interface [ 1719.167236][T24268] bridge4: left promiscuous mode [ 1719.181732][T24268] bridge4: left allmulticast mode [ 1719.218523][T24268] team0: Port device bridge11 removed [ 1719.288691][T24280] tipc: Enabling of bearer rejected, failed to enable media [ 1719.349283][ T35] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1719.367805][ T35] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1719.388490][ T35] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1719.405288][ T35] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1719.605672][T24019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.671161][T24019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.711999][T24305] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1719.734330][T19272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.750771][T19272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.807441][T19271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.814674][T19271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.405678][T24338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.440848][T24338] netlink: 'syz.4.15463': attribute type 3 has an invalid length. [ 1720.518799][T24343] syzkaller0: entered promiscuous mode [ 1720.526500][T24343] syzkaller0: entered allmulticast mode [ 1720.622575][T24019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1720.758811][T24019] veth0_vlan: entered promiscuous mode [ 1720.809868][T24019] veth1_vlan: entered promiscuous mode [ 1720.960029][T24019] veth0_macvtap: entered promiscuous mode [ 1720.995854][T24019] veth1_macvtap: entered promiscuous mode [ 1721.035020][T24019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.076242][T24019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.111946][T19273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.193736][T19273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.208910][T19273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.469449][T19273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.529935][T24371] vlan0: entered promiscuous mode [ 1721.537088][T24371] bridge0: entered promiscuous mode [ 1721.558060][T24373] batadv0: entered promiscuous mode [ 1721.564415][T24373] vlan1: entered promiscuous mode [ 1721.766150][T19272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.775464][T24382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1721.795987][T19272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.817700][T24383] FAULT_INJECTION: forcing a failure. [ 1721.817700][T24383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.846510][T24382] netlink: 'syz.0.15475': attribute type 3 has an invalid length. [ 1721.875232][T24383] CPU: 1 UID: 0 PID: 24383 Comm: syz.2.15476 Not tainted syzkaller #0 PREEMPT(full) [ 1721.875262][T24383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1721.875273][T24383] Call Trace: [ 1721.875282][T24383] [ 1721.875290][T24383] dump_stack_lvl+0xe8/0x150 [ 1721.875320][T24383] should_fail_ex+0x412/0x560 [ 1721.875359][T24383] _copy_from_iter+0x1d3/0x1670 [ 1721.875386][T24383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1721.875417][T24383] ? __pfx_policy_nodemask+0x10/0x10 [ 1721.875447][T24383] ? __pfx__copy_from_iter+0x10/0x10 [ 1721.875480][T24383] ? set_page_refcounted+0xa0/0x1e0 [ 1721.875505][T24383] ? page_copy_sane+0x4e/0x270 [ 1721.875533][T24383] copy_page_from_iter+0xdd/0x170 [ 1721.875563][T24383] tun_get_user+0x1d4b/0x3dd0 [ 1721.875588][T24383] ? tun_get_user+0x6ff/0x3dd0 [ 1721.875631][T24383] ? aa_file_perm+0x440/0x1630 [ 1721.875655][T24383] ? __pfx_tun_get_user+0x10/0x10 [ 1721.875682][T24383] ? __lock_acquire+0x6b5/0x2cf0 [ 1721.875717][T24383] ? ref_tracker_alloc+0x363/0x4d0 [ 1721.875745][T24383] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1721.875772][T24383] ? tun_get+0x1c/0x2f0 [ 1721.875795][T24383] ? tun_get+0x1c/0x2f0 [ 1721.875824][T24383] ? tun_get+0x1c/0x2f0 [ 1721.875848][T24383] ? tun_get+0x1c/0x2f0 [ 1721.875875][T24383] tun_chr_write_iter+0x113/0x200 [ 1721.875903][T24383] vfs_write+0x61d/0xb90 [ 1721.875934][T24383] ? __pfx_vfs_write+0x10/0x10 [ 1721.875967][T24383] ? __fget_files+0x2a/0x420 [ 1721.875995][T24383] ksys_write+0x150/0x270 [ 1721.876018][T24383] ? __pfx_ksys_write+0x10/0x10 [ 1721.876051][T24383] do_syscall_64+0x14d/0xf80 [ 1721.876074][T24383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.876091][T24383] ? trace_irq_disable+0x37/0x100 [ 1721.876111][T24383] ? clear_bhb_loop+0x40/0x90 [ 1721.876135][T24383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.876153][T24383] RIP: 0033:0x7f396b75c84e [ 1721.876170][T24383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1721.876186][T24383] RSP: 002b:00007f396c6e5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1721.876208][T24383] RAX: ffffffffffffffda RBX: 00007f396c6e66c0 RCX: 00007f396b75c84e [ 1721.876222][T24383] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 1721.876234][T24383] RBP: 00007f396c6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.876246][T24383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.876263][T24383] R13: 00007f396ba16038 R14: 00007f396ba15fa0 R15: 00007fff0031a2b8 [ 1721.876295][T24383] [ 1722.255747][ T6773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1722.278400][ T6773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.326504][T24388] __nla_validate_parse: 16 callbacks suppressed [ 1722.326528][T24388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15478'. [ 1722.493254][T24388] nbd: socks must be embedded in a SOCK_ITEM attr [ 1722.574746][T24395] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15480'. [ 1722.832735][T23577] udevd[23577]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1722.845810][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15482'. [ 1723.055283][T24407] syzkaller0: entered promiscuous mode [ 1723.071086][T24407] syzkaller0: entered allmulticast mode [ 1723.486545][ T3839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1723.498211][ T3839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1723.511891][ T3839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1723.529557][ T3839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1723.540103][ T3839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1723.696084][T24431] netlink: 'syz.2.15492': attribute type 5 has an invalid length. [ 1723.731870][T24431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15492'. [ 1723.874736][T24434] FAULT_INJECTION: forcing a failure. [ 1723.874736][T24434] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.928462][T24434] CPU: 1 UID: 0 PID: 24434 Comm: syz.0.15493 Not tainted syzkaller #0 PREEMPT(full) [ 1723.928492][T24434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1723.928504][T24434] Call Trace: [ 1723.928514][T24434] [ 1723.928523][T24434] dump_stack_lvl+0xe8/0x150 [ 1723.928556][T24434] should_fail_ex+0x412/0x560 [ 1723.928589][T24434] should_failslab+0xa8/0x100 [ 1723.928616][T24434] ? skb_clone+0x212/0x3a0 [ 1723.928652][T24434] kmem_cache_alloc_noprof+0x87/0x650 [ 1723.928676][T24434] ? __netlink_lookup+0xc6/0x8b0 [ 1723.928705][T24434] skb_clone+0x212/0x3a0 [ 1723.928742][T24434] __netlink_deliver_tap+0x404/0x850 [ 1723.928775][T24434] ? netlink_deliver_tap+0x2e/0x1b0 [ 1723.928798][T24434] netlink_deliver_tap+0x19c/0x1b0 [ 1723.928820][T24434] netlink_unicast+0x7e3/0x9b0 [ 1723.928860][T24434] ? __pfx_netlink_unicast+0x10/0x10 [ 1723.928891][T24434] ? netlink_sendmsg+0x650/0xb40 [ 1723.928909][T24434] ? skb_put+0x11b/0x210 [ 1723.928935][T24434] netlink_sendmsg+0x813/0xb40 [ 1723.928966][T24434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1723.928990][T24434] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1723.929020][T24434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1723.929050][T24434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1723.929069][T24434] ____sys_sendmsg+0xa68/0xad0 [ 1723.929094][T24434] ? __might_fault+0xaf/0x130 [ 1723.929124][T24434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1723.929160][T24434] ? import_iovec+0x73/0xa0 [ 1723.929186][T24434] ___sys_sendmsg+0x2a5/0x360 [ 1723.929226][T24434] ? __lock_acquire+0x6b5/0x2cf0 [ 1723.929253][T24434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1723.929326][T24434] ? __fget_files+0x2a/0x420 [ 1723.929346][T24434] ? __fget_files+0x3a0/0x420 [ 1723.929375][T24434] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1723.929404][T24434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1723.929439][T24434] ? __pfx_ksys_write+0x10/0x10 [ 1723.929477][T24434] do_syscall_64+0x14d/0xf80 [ 1723.929503][T24434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.929522][T24434] ? trace_irq_disable+0x37/0x100 [ 1723.929543][T24434] ? clear_bhb_loop+0x40/0x90 [ 1723.929568][T24434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.929587][T24434] RIP: 0033:0x7f615ad9bf79 [ 1723.929606][T24434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.929632][T24434] RSP: 002b:00007f615bbfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1723.929654][T24434] RAX: ffffffffffffffda RBX: 00007f615b015fa0 RCX: 00007f615ad9bf79 [ 1723.929669][T24434] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1723.929681][T24434] RBP: 00007f615bbfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.929693][T24434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.929705][T24434] R13: 00007f615b016038 R14: 00007f615b015fa0 R15: 00007ffc8c283b98 [ 1723.929739][T24434] [ 1724.001791][T24434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15493'. [ 1724.077971][T24437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15494'. [ 1724.256353][T24441] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15495'. [ 1724.459377][ T8892] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1724.700409][ T8892] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1724.727636][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15499'. [ 1724.758625][T24449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15499'. [ 1724.820886][ T8892] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1724.925761][ T8892] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1725.645123][ T5824] Bluetooth: hci5: command tx timeout [ 1725.725445][T12925] page_pool_release_retry() stalled pool shutdown: id 437, 1 inflight 605 sec [ 1725.784927][T24469] xt_CT: No such helper "pptp" [ 1725.914039][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15508'. [ 1726.715530][T24485] netlink: 'syz.3.15511': attribute type 8 has an invalid length. [ 1726.830948][ T8892] bond0 (unregistering): Released all slaves [ 1726.844100][ T8892] bond1 (unregistering): Released all slaves [ 1726.858703][ T8892] bond2 (unregistering): Released all slaves [ 1726.876956][ T8892] bond3 (unregistering): Released all slaves [ 1726.894692][ T8892] bond4 (unregistering): Released all slaves [ 1726.947118][T24485] veth0_virt_wifi: entered promiscuous mode [ 1726.965802][T24485] gretap0: entered promiscuous mode [ 1726.986831][T24485] veth0_virt_wifi: left promiscuous mode [ 1727.015423][T24485] gretap0: left promiscuous mode [ 1727.087507][ T8892] tipc: Left network mode [ 1727.103476][T24424] chnl_net:caif_netlink_parms(): no params data found [ 1727.126719][ T8892] IPVS: stopping backup sync thread 17247 ... [ 1727.216255][T24492] netlink: 'syz.2.15514': attribute type 1 has an invalid length. [ 1727.385289][T24508] __nla_validate_parse: 5 callbacks suppressed [ 1727.385311][T24508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15519'. [ 1727.448194][T24508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1727.472292][T24508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15519'. [ 1727.506642][T24492] bond1: entered promiscuous mode [ 1727.516386][T24492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1727.524849][T24500] bond1: entered allmulticast mode [ 1727.659338][T24508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15519'. [ 1727.721862][ T5824] Bluetooth: hci5: command tx timeout [ 1727.911634][T24513] netlink: 'syz.4.15519': attribute type 3 has an invalid length. [ 1727.920022][T24513] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15519'. [ 1728.128680][T24424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.140308][T24532] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15523'. [ 1728.160003][T24424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.179074][T24424] bridge_slave_0: entered allmulticast mode [ 1728.213951][T24424] bridge_slave_0: entered promiscuous mode [ 1728.260176][T24538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15524'. [ 1728.336195][T24424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.363408][T24424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.379128][T24424] bridge_slave_1: entered allmulticast mode [ 1728.416910][T24424] bridge_slave_1: entered promiscuous mode [ 1728.520697][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15527'. [ 1728.645957][T24544] 8021q: VLANs not supported on caif0 [ 1728.658933][T24424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.706189][T24424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.717268][T24559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15532'. [ 1728.850083][T24424] team0: Port device team_slave_0 added [ 1728.858903][T24559] nbd: socks must be embedded in a SOCK_ITEM attr [ 1728.895833][T24424] team0: Port device team_slave_1 added [ 1728.941519][T23722] block nbd64: NBD_DISCONNECT [ 1729.136179][T24565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15534'. [ 1729.205725][T24576] netlink: 'syz.4.15537': attribute type 8 has an invalid length. [ 1729.223739][T24576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15537'. [ 1729.284578][T24424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.313803][T24424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.341258][T23577] udevd[23577]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1729.357452][T24424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.392464][T24576] veth0_virt_wifi: entered promiscuous mode [ 1729.409683][T24576] gretap0: entered promiscuous mode [ 1729.444023][T24576] veth0_virt_wifi: left promiscuous mode [ 1729.459512][T24576] gretap0: left promiscuous mode [ 1729.508453][ T8892] veth1_macvtap: left promiscuous mode [ 1729.521231][ T8892] veth0_macvtap: left promiscuous mode [ 1729.534591][ T8892] veth1_vlan: left promiscuous mode [ 1729.550383][ T8892] veth0_vlan: left promiscuous mode [ 1729.683050][T24592] netlink: 'syz.4.15544': attribute type 1 has an invalid length. [ 1729.805542][ T5824] Bluetooth: hci5: command tx timeout [ 1729.833660][ T8892] pimreg (unregistering): left allmulticast mode [ 1730.707753][T24619] netlink: 'syz.2.15548': attribute type 11 has an invalid length. [ 1730.717096][T24424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.728571][T24424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.760287][T24424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.779806][T24589] 8021q: VLANs not supported on caif0 [ 1730.792051][T24592] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1730.803664][T24599] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1730.892058][T24599] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1730.904268][T24599] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1731.006637][T24594] syzkaller0: entered promiscuous mode [ 1731.012846][T24594] syzkaller0: entered allmulticast mode [ 1731.893066][ T5824] Bluetooth: hci5: command tx timeout [ 1733.641231][T24424] hsr_slave_0: entered promiscuous mode [ 1733.678001][T24641] __nla_validate_parse: 5 callbacks suppressed [ 1733.678022][T24641] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15553'. [ 1733.692762][T24424] hsr_slave_1: entered promiscuous mode [ 1733.699965][T24424] debugfs: 'hsr0' already exists in 'hsr' [ 1733.752015][T24424] Cannot create hsr debugfs directory [ 1733.826619][T24645] veth0_vlan: left promiscuous mode [ 1733.943137][T24655] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15557'. [ 1734.075250][T24657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15558'. [ 1734.112755][T24657] 8021q: VLANs not supported on caif0 [ 1734.534649][T24678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15564'. [ 1734.736479][T24678] nbd: socks must be embedded in a SOCK_ITEM attr [ 1734.798114][T23722] block nbd64: NBD_DISCONNECT [ 1735.204151][T24701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.460894][T24674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1735.800459][T24424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1735.909728][T24424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1735.962617][T24728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15575'. [ 1735.972688][T24424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1736.019148][T24728] 8021q: VLANs not supported on caif0 [ 1736.040580][T24424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1736.638928][T24757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15578'. [ 1736.666098][T24424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.786493][T24424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.816963][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.824325][ T6787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.867713][T24757] nbd: socks must be embedded in a SOCK_ITEM attr [ 1736.899201][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.906464][ T8909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1737.123490][T24770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15580'. [ 1737.287759][T23722] udevd[23722]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1737.375081][T23577] udevd[23577]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1737.855723][T24424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.270793][T24424] veth0_vlan: entered promiscuous mode [ 1738.303308][T24424] veth1_vlan: entered promiscuous mode [ 1738.428932][T24424] veth0_macvtap: entered promiscuous mode [ 1738.466456][T24424] veth1_macvtap: entered promiscuous mode [ 1738.549846][T24424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1738.648178][T24424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1738.784120][T19273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.806305][T19273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.854508][T24807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15585'. [ 1738.947776][T24807] 8021q: VLANs not supported on caif0 [ 1739.039089][T19273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.125879][T19273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.325926][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15590'. [ 1739.383835][T24826] netlink: 'syz.0.15591': attribute type 22 has an invalid length. [ 1739.578829][T19272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.616196][T19272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.699646][T24842] netlink: 176 bytes leftover after parsing attributes in process `syz.3.15593'. [ 1739.750634][T24836] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15592'. [ 1739.789437][ T8909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.799340][ T8909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.806548][T24844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15595'. [ 1739.951662][T24854] netlink: 'syz.2.15592': attribute type 5 has an invalid length. [ 1739.959556][T24854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15592'. [ 1739.982470][T24855] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15595'. [ 1740.053698][T24855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15595'. [ 1740.329162][T24866] netlink: 'syz.1.15489': attribute type 11 has an invalid length. [ 1740.363329][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1740.367540][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1740.648845][T24880] pimreg: entered allmulticast mode [ 1741.519150][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15607'. [ 1741.568011][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15607'. [ 1742.522944][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1742.524941][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1742.670641][T24920] openvswitch: netlink: Flow key attr not present in new flow. [ 1742.737043][T24921] netlink: 'syz.2.15612': attribute type 10 has an invalid length. [ 1742.929822][T24921] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1742.942993][T24921] team0: Failed to send options change via netlink (err -105) [ 1742.984070][T24921] team0: Port device netdevsim0 added [ 1743.415546][T25989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.424674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.853180][T24972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.864341][T24972] __nla_validate_parse: 10 callbacks suppressed [ 1743.864361][T24972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15630'. [ 1744.074889][T24986] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15634'. [ 1744.132143][T24987] tipc: Started in network mode [ 1744.137342][T24987] tipc: Node identity 5e0bb4988f41, cluster identity 4711 [ 1744.148939][T24987] tipc: Enabled bearer , priority 0 [ 1744.184510][T24987] syzkaller0: entered promiscuous mode [ 1744.190130][T24987] syzkaller0: entered allmulticast mode [ 1744.212767][ T8892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.228960][T25989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.253193][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.269142][T24990] syzkaller0: entered promiscuous mode [ 1744.278965][T24990] syzkaller0: entered allmulticast mode [ 1744.452307][T24982] tipc: Resetting bearer [ 1744.484722][T24982] tipc: Disabling bearer [ 1744.522134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.604975][T24997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15637'. [ 1744.762669][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 1744.771279][ T3839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1745.014118][T25013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15641'. [ 1745.109265][T25022] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15642'. [ 1745.194556][T25023] tipc: Enabled bearer , priority 0 [ 1745.229930][T25024] tipc: Enabling of bearer rejected, already enabled [ 1745.274603][T25029] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.15644'. [ 1745.321811][T29636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.428547][T25029] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15644'. [ 1745.448954][T25036] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15646'. [ 1745.510833][T25024] tipc: Disabling bearer [ 1745.674242][T25043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15649'. [ 1745.695001][T25046] netlink: 'syz.4.15649': attribute type 2 has an invalid length. [ 1745.750276][T25052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15652'. [ 1745.765718][T25043] bond0: entered promiscuous mode [ 1745.771985][T25043] bond_slave_0: entered promiscuous mode [ 1745.791960][T25043] bond_slave_1: entered promiscuous mode [ 1745.825158][T25043] batadv0: entered promiscuous mode [ 1745.836699][T25043] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1745.915298][T12925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.473168][T25068] netlink: 'syz.0.15657': attribute type 8 has an invalid length. [ 1746.638041][T25068] veth0_virt_wifi: entered promiscuous mode [ 1746.655177][T25068] gretap0: entered promiscuous mode [ 1746.662112][T25068] veth0_vlan: entered promiscuous mode [ 1746.690394][T25072] nbd: socks must be embedded in a SOCK_ITEM attr [ 1746.744652][T23577] block nbd64: NBD_DISCONNECT [ 1746.763700][T25068] veth0_vlan: left promiscuous mode [ 1746.792696][T25068] veth0_virt_wifi: left promiscuous mode [ 1746.843467][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1746.850530][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1746.888298][T25068] gretap0: left promiscuous mode [ 1747.066704][T23577] udevd[23577]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1747.773459][T25089] net_ratelimit: 3 callbacks suppressed [ 1747.773471][T25089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1747.902352][T25107] netlink: 'syz.0.15672': attribute type 2 has an invalid length. [ 1747.957586][T25106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.975498][T25110] netlink: 'syz.4.15674': attribute type 10 has an invalid length. [ 1747.984232][T25106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.002883][T25106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.117144][T25105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.147394][T25105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.244662][T25115] netlink: 'syz.0.15675': attribute type 10 has an invalid length. [ 1748.342193][T25115] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1748.356440][T25115] team0: Failed to send options change via netlink (err -105) [ 1748.376207][T25115] team0: Port device netdevsim0 added [ 1748.442043][T29636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.591268][T25123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.592926][T25127] netlink: 'syz.1.15679': attribute type 16 has an invalid length. [ 1748.618115][T25127] netlink: 'syz.1.15679': attribute type 17 has an invalid length. [ 1748.629237][T25123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.760825][T25135] netlink: 'syz.4.15681': attribute type 13 has an invalid length. [ 1748.769398][T25127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1748.769924][T25135] netlink: 'syz.4.15681': attribute type 17 has an invalid length. [ 1748.903830][T25135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1748.930284][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 1748.937691][T25989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.694211][T25155] __nla_validate_parse: 4 callbacks suppressed [ 1749.694236][T25155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15691'. [ 1750.195398][T25171] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1750.196541][T25172] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1750.388177][T25179] netlink: 'syz.0.15699': attribute type 8 has an invalid length. [ 1750.406268][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15699'. [ 1750.427794][T25179] veth0_virt_wifi: entered promiscuous mode [ 1750.436065][T25179] gretap0: entered promiscuous mode [ 1750.444077][T25179] veth0_vlan: entered promiscuous mode [ 1750.451101][T25179] veth0_vlan: left promiscuous mode [ 1750.474042][T25179] veth0_virt_wifi: left promiscuous mode [ 1750.491638][T25179] gretap0: left promiscuous mode [ 1750.508813][T25184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15698'. [ 1750.728711][T25190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15703'. [ 1750.746610][T25191] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1750.758735][T25191] team0: Failed to send options change via netlink (err -105) [ 1750.768229][T25191] team0: Port device netdevsim0 added [ 1751.454714][T25224] syzkaller0: entered promiscuous mode [ 1751.542700][T25224] syzkaller0: entered allmulticast mode [ 1752.041830][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1752.048037][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1752.103795][T25230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15715'. [ 1752.123648][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15715'. [ 1752.200276][T25233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15716'. [ 1752.643610][T25237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15717'. [ 1752.708649][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15717'. [ 1752.720523][T25238] validate_nla: 1 callbacks suppressed [ 1752.720537][T25238] netlink: 'syz.4.15717': attribute type 3 has an invalid length. [ 1752.734578][T25238] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15717'. [ 1752.852712][T29624] net_ratelimit: 12 callbacks suppressed [ 1752.852735][T29624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.111142][T25241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1753.126761][T25241] netlink: 'syz.2.15718': attribute type 3 has an invalid length. [ 1753.323070][T25989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.331722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.482466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.892272][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.013214][T25204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1754.122424][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 1754.360971][T25245] syzkaller0: refused to change device tx_queue_len [ 1754.752307][T25276] __nla_validate_parse: 10 callbacks suppressed [ 1754.752329][T25276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15731'. [ 1754.771084][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.780269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.818977][T25276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1754.845769][T25276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15731'. [ 1754.874215][T25276] netlink: 'syz.1.15731': attribute type 3 has an invalid length. [ 1754.882222][T25276] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15731'. [ 1754.894119][T25276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15731'. [ 1754.923230][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.045112][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15732'. [ 1755.061722][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15732'. [ 1755.541936][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15736'. [ 1755.627597][T25294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1755.758370][T25297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15738'. [ 1755.805037][T25302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15739'. [ 1755.933806][T25300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15740'. [ 1756.144665][T25313] netlink: 'syz.1.15742': attribute type 3 has an invalid length. [ 1756.305073][T25316] unsupported nlmsg_type 40 [ 1756.841939][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1756.843205][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1756.938471][T25338] netlink: 'syz.3.15752': attribute type 10 has an invalid length. [ 1757.024010][T25338] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1757.033464][T25338] team0: Failed to send options change via netlink (err -105) [ 1757.043613][T25338] team0: Port device netdevsim0 added [ 1757.080757][ T6773] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1757.176198][T25346] netlink: 'syz.2.15755': attribute type 3 has an invalid length. [ 1757.415606][T25353] netlink: 'syz.4.15759': attribute type 8 has an invalid length. [ 1757.450715][T25353] veth0_virt_wifi: entered promiscuous mode [ 1757.471006][T25353] gretap0: entered promiscuous mode [ 1757.508009][T25353] veth0_virt_wifi: left promiscuous mode [ 1757.517217][T25360] netlink: 'syz.2.15762': attribute type 11 has an invalid length. [ 1757.531508][T25353] gretap0: left promiscuous mode [ 1757.925403][T25379] net_ratelimit: 7 callbacks suppressed [ 1757.925427][T25379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1757.994902][T25379] netlink: 'syz.3.15768': attribute type 3 has an invalid length. [ 1758.046970][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.603106][ T8892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.612049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.666224][T25397] netlink: 'syz.1.15775': attribute type 10 has an invalid length. [ 1758.939408][T25412] netlink: 'syz.1.15780': attribute type 4 has an invalid length. [ 1758.968123][T25412] netlink: 'syz.1.15780': attribute type 4 has an invalid length. [ 1758.996289][T25412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1759.085759][T29636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.477758][T25435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.553815][T25444] netlink: 'syz.3.15791': attribute type 10 has an invalid length. [ 1759.691748][T29636] syzkaller1: tun_net_xmit 90 [ 1759.726320][T25454] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1759.741738][T25454] syzkaller1: Linktype set failed because interface is up [ 1759.784501][T25456] __nla_validate_parse: 27 callbacks suppressed [ 1759.784524][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15798'. [ 1759.794234][T25459] netlink: 'syz.1.15799': attribute type 8 has an invalid length. [ 1759.820777][T25459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15799'. [ 1759.823083][T25456] 8021q: VLANs not supported on caif0 [ 1759.834028][T25452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15797'. [ 1759.882562][T19271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.890912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.948831][T25459] veth0_virt_wifi: entered promiscuous mode [ 1759.967164][T25459] gretap0: entered promiscuous mode [ 1759.993124][T25459] veth0_virt_wifi: left promiscuous mode [ 1760.010842][T25459] gretap0: left promiscuous mode [ 1760.022391][T25452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15797'. [ 1760.070081][T19273] syzkaller1: tun_net_xmit 86 [ 1760.078809][T25460] netlink: 211784 bytes leftover after parsing attributes in process `syz.0.15797'. [ 1760.125654][T29636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.472048][T25477] lo speed is unknown, defaulting to 1000 [ 1760.490057][T25477] lo speed is unknown, defaulting to 1000 [ 1760.641847][T25488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15807'. [ 1760.651729][T25477] lo speed is unknown, defaulting to 1000 [ 1760.720715][T25492] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 1760.810111][T25494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15810'. [ 1760.836568][T25494] 8021q: VLANs not supported on caif0 [ 1761.034140][T25505] netlink: 'syz.4.15813': attribute type 8 has an invalid length. [ 1761.053283][T25505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15813'. [ 1761.114529][T25505] veth0_virt_wifi: entered promiscuous mode [ 1761.154426][T25505] gretap0: entered promiscuous mode [ 1761.186978][T25505] veth0_virt_wifi: left promiscuous mode [ 1761.213438][T25505] gretap0: left promiscuous mode [ 1761.217507][T25477] infiniband syz0: set active [ 1761.228728][T25477] infiniband syz0: added lo [ 1761.237781][T25477] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1761.240285][T25477] infiniband syz0: Couldn't open port 1 [ 1761.260597][T12925] lo speed is unknown, defaulting to 1000 [ 1761.279800][T25508] macvlan2: entered allmulticast mode [ 1761.335569][T25477] RDS/IB: syz0: added [ 1761.340047][T25477] smc: adding ib device syz0 with port count 1 [ 1761.348594][T25477] smc: ib device syz0 port 1 has no pnetid [ 1761.434501][T25519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15818'. [ 1761.454239][T12925] lo speed is unknown, defaulting to 1000 [ 1761.462948][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15818'. [ 1761.476447][T25477] lo speed is unknown, defaulting to 1000 [ 1761.839405][T25527] netlink: 'syz.3.15822': attribute type 10 has an invalid length. [ 1762.105052][T25477] lo speed is unknown, defaulting to 1000 [ 1762.453776][T25546] netlink: 'syz.3.15828': attribute type 8 has an invalid length. [ 1762.494042][T25546] veth0_virt_wifi: entered promiscuous mode [ 1762.526498][T25546] gretap0: entered promiscuous mode [ 1762.555482][T25546] veth0_virt_wifi: left promiscuous mode [ 1762.582749][T25546] gretap0: left promiscuous mode [ 1762.696800][T25477] lo speed is unknown, defaulting to 1000 [ 1763.246249][T25477] lo speed is unknown, defaulting to 1000 [ 1763.258812][T29634] net_ratelimit: 5 callbacks suppressed [ 1763.258834][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.722446][T19272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.731208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.938470][T25477] lo speed is unknown, defaulting to 1000 [ 1764.284382][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.546869][T25604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1764.570770][T25477] lo speed is unknown, defaulting to 1000 [ 1765.003298][ T8892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.012087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.276927][T25477] lo speed is unknown, defaulting to 1000 [ 1765.322330][T29636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.659478][T25989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.668198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.816411][T25477] lo speed is unknown, defaulting to 1000 [ 1766.014288][T25634] netlink: 'syz.4.15854': attribute type 10 has an invalid length. [ 1766.327355][T25621] lo speed is unknown, defaulting to 1000 [ 1766.389731][T25638] __nla_validate_parse: 6 callbacks suppressed [ 1766.389748][T25638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15856'. [ 1766.407228][T25638] 8021q: VLANs not supported on caif0 [ 1766.617012][T25644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15859'. [ 1766.715643][T25618] lo speed is unknown, defaulting to 1000 [ 1767.040469][T25477] lo speed is unknown, defaulting to 1000 [ 1767.233737][T25653] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1767.246104][T25653] bond2 (unregistering): Released all slaves [ 1767.346619][T25477] lo speed is unknown, defaulting to 1000 [ 1767.450523][T25659] netlink: 'syz.4.15865': attribute type 10 has an invalid length. [ 1767.563408][ T3839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1767.569940][ T3839] Bluetooth: hci0: command 0x0c1a tx timeout [ 1767.596094][T25661] vlan1: entered promiscuous mode [ 1767.617562][T25477] lo speed is unknown, defaulting to 1000 [ 1767.861198][T25666] team0: Device gtp0 is of different type [ 1768.002424][T25670] netlink: 'syz.4.15870': attribute type 8 has an invalid length. [ 1768.010506][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15870'. [ 1768.049815][T25670] veth0_virt_wifi: entered promiscuous mode [ 1768.095074][T25670] gretap0: entered promiscuous mode [ 1768.156745][T25670] veth0_virt_wifi: left promiscuous mode [ 1768.177450][T25670] gretap0: left promiscuous mode [ 1768.451686][T29636] net_ratelimit: 3 callbacks suppressed [ 1768.451709][T29636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.682203][T25989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.690595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.846337][T19271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.854891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.450071][T25691] netlink: 'syz.4.15876': attribute type 10 has an invalid length. [ 1769.486448][T26680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.494841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.512382][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.629816][T25692] FAULT_INJECTION: forcing a failure. [ 1769.629816][T25692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.677830][T25692] CPU: 1 UID: 0 PID: 25692 Comm: syz.2.15877 Not tainted syzkaller #0 PREEMPT(full) [ 1769.677861][T25692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1769.677873][T25692] Call Trace: [ 1769.677882][T25692] [ 1769.677891][T25692] dump_stack_lvl+0xe8/0x150 [ 1769.677924][T25692] should_fail_ex+0x412/0x560 [ 1769.677957][T25692] _copy_from_user+0x2d/0xb0 [ 1769.677980][T25692] ___sys_sendmsg+0x1c6/0x360 [ 1769.678005][T25692] ? __lock_acquire+0x6b5/0x2cf0 [ 1769.678081][T25692] ? __pfx____sys_sendmsg+0x10/0x10 [ 1769.678147][T25692] ? __fget_files+0x2a/0x420 [ 1769.678167][T25692] ? __fget_files+0x3a0/0x420 [ 1769.678198][T25692] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1769.678227][T25692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1769.678262][T25692] ? __pfx_ksys_write+0x10/0x10 [ 1769.678300][T25692] do_syscall_64+0x14d/0xf80 [ 1769.678325][T25692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.678344][T25692] ? trace_irq_disable+0x37/0x100 [ 1769.678366][T25692] ? clear_bhb_loop+0x40/0x90 [ 1769.678390][T25692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.678410][T25692] RIP: 0033:0x7f396b79bf79 [ 1769.678429][T25692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.678446][T25692] RSP: 002b:00007f396c6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1769.678469][T25692] RAX: ffffffffffffffda RBX: 00007f396ba15fa0 RCX: 00007f396b79bf79 [ 1769.678484][T25692] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000a [ 1769.678497][T25692] RBP: 00007f396c6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.678510][T25692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1769.678523][T25692] R13: 00007f396ba16038 R14: 00007f396ba15fa0 R15: 00007fff0031a2b8 [ 1769.678557][T25692] [ 1769.733858][T25692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15877'. [ 1769.980942][T25699] syzkaller0: entered promiscuous mode [ 1770.009040][T25699] syzkaller0: entered allmulticast mode [ 1770.267140][T25713] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15884'. [ 1770.309528][T25717] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15885'. [ 1770.523236][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.546402][T25730] netlink: 'syz.1.15890': attribute type 8 has an invalid length. [ 1770.570617][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15890'. [ 1770.624305][T25730] veth0_virt_wifi: entered promiscuous mode [ 1770.633810][T25730] gretap0: entered promiscuous mode [ 1770.658945][T25730] veth0_virt_wifi: left promiscuous mode [ 1770.676391][T25730] gretap0: left promiscuous mode [ 1770.761885][ T8892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.089523][T25721] lo speed is unknown, defaulting to 1000 [ 1771.255220][T25763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15900'. [ 1771.352438][T25767] netlink: 'syz.3.15902': attribute type 10 has an invalid length. [ 1771.425016][T25769] netlink: 'syz.2.15903': attribute type 1 has an invalid length. [ 1771.579843][T25769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1771.698941][T25783] netlink: 'syz.2.15907': attribute type 8 has an invalid length. [ 1771.711754][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15907'. [ 1771.771372][T25783] veth0_virt_wifi: entered promiscuous mode [ 1771.783206][T25783] gretap0: entered promiscuous mode [ 1771.796049][T25783] veth0_virt_wifi: left promiscuous mode [ 1771.808800][T25783] gretap0: left promiscuous mode [ 1771.989914][T25792] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15911'. [ 1772.238987][T25798] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15914'. [ 1772.267607][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15916'. [ 1772.304034][T25801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15916'. [ 1772.500474][T25804] netlink: 'syz.1.15917': attribute type 10 has an invalid length. [ 1772.827929][T25810] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1772.864523][T25810] team0 (unregistering): Port device team_slave_0 removed [ 1772.917691][T25810] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1772.974798][T25810] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1773.032722][T25810] team0 (unregistering): Port device team_slave_1 removed [ 1773.067629][T25810] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1773.082574][T25810] team0 (unregistering): Failed to send port change of device netdevsim0 via netlink (err -105) [ 1773.132803][T25810] team0 (unregistering): Port device netdevsim0 removed [ 1773.245272][T25817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.335834][T25827] syzkaller0: entered promiscuous mode [ 1773.343049][T25827] syzkaller0: entered allmulticast mode [ 1773.482961][T25817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.485019][T25832] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15926'. [ 1773.600641][T25836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1773.603051][T25834] netlink: 'syz.2.15927': attribute type 10 has an invalid length. [ 1773.607965][T25836] IPv6: NLM_F_CREATE should be set when creating new route [ 1773.642651][T29634] net_ratelimit: 17 callbacks suppressed [ 1773.642674][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.648528][T25836] netlink: 'syz.3.15928': attribute type 10 has an invalid length. [ 1773.700688][T25837] netlink: 'syz.3.15928': attribute type 10 has an invalid length. [ 1773.715324][T25817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.785862][T25843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15929'. [ 1773.799301][T25836] team0: Port device dummy0 added [ 1773.807192][T12925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.815603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.833790][T25837] team0: Port device dummy0 removed [ 1773.844337][T25837] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1773.879659][T25817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.939112][T25841] netlink: 'syz.0.15930': attribute type 4 has an invalid length. [ 1774.030799][T25851] sit1: entered promiscuous mode [ 1774.149951][T19272] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.169951][T19272] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.202000][T25855] vlan0: entered promiscuous mode [ 1774.258823][ T6787] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.301866][ T6787] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.379493][T25864] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15939'. [ 1774.513540][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.534099][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.543472][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.576178][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.593384][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.605682][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.614095][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.655856][T25878] netlink: 'syz.2.15942': attribute type 10 has an invalid length. [ 1775.320307][T25912] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15953'. [ 1775.357779][T25900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.365410][T25900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.700411][T25900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1775.738733][T25915] netlink: 'syz.2.15955': attribute type 10 has an invalid length. [ 1775.744305][T25900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1776.152688][ T8892] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.181469][ T8892] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.277853][ T8892] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.287091][ T8892] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.324330][ T8892] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.344331][ T8892] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.371871][ T8892] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.386495][ T8892] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.554538][T25930] xt_ecn: cannot match TCP bits for non-tcp packets [ 1776.565150][T25928] syzkaller0: entered promiscuous mode [ 1776.570677][T25928] syzkaller0: entered allmulticast mode [ 1778.602881][T24429] Bluetooth: hci1: command 0x0406 tx timeout [ 1778.764922][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 1778.771751][ T3839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1778.858497][T29628] net_ratelimit: 18 callbacks suppressed [ 1778.858513][T29628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.916546][T25952] tipc: Enabling of bearer rejected, failed to enable media [ 1778.954807][T25951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1778.992349][T26680] lo speed is unknown, defaulting to 1000 [ 1779.089610][T25970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15970'. [ 1779.113168][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15970'. [ 1779.116315][T25973] validate_nla: 1 callbacks suppressed [ 1779.116332][T25973] netlink: 'syz.4.15971': attribute type 4 has an invalid length. [ 1779.194534][T25976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15972'. [ 1779.554989][T25984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15974'. [ 1779.575548][ T9075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.583961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.622828][T25949] lo speed is unknown, defaulting to 1000 [ 1779.801873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.811005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.881997][T29634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.095033][T26006] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15981'. [ 1780.364965][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.373544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.425620][T26018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15985'. [ 1780.440189][T26020] IPv6: sit2: Disabled Multicast RS [ 1780.621347][T26028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15991'. [ 1780.664278][T26028] x_tables: duplicate underflow at hook 2 [ 1780.677912][T26028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1780.722598][T26028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15991'. [ 1780.768240][T26028] netlink: 'syz.2.15991': attribute type 3 has an invalid length. [ 1780.787076][T26028] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15991'. [ 1780.847184][T26037] netlink: 'syz.4.15994': attribute type 4 has an invalid length. [ 1781.007601][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15996'. [ 1781.031757][T26039] netlink: 'syz.0.15995': attribute type 4 has an invalid length. [ 1781.729131][T26064] netlink: 'syz.0.16006': attribute type 4 has an invalid length. [ 1781.892605][T26072] netlink: 'syz.1.16009': attribute type 3 has an invalid length. [ 1781.907262][T26071] netlink: 'syz.0.16008': attribute type 10 has an invalid length. [ 1782.065198][T26076] vlan2: entered promiscuous mode [ 1782.426139][T26100] netlink: 'syz.1.16021': attribute type 8 has an invalid length. [ 1782.472137][T26100] veth0_virt_wifi: entered promiscuous mode [ 1782.529421][T26100] gretap0: entered promiscuous mode [ 1782.571907][T26100] veth0_virt_wifi: left promiscuous mode [ 1782.590246][T26100] gretap0: left promiscuous mode [ 1783.136438][T26138] netlink: 'syz.2.16034': attribute type 58 has an invalid length. [ 1783.477805][T26152] netlink: 'syz.4.16040': attribute type 4 has an invalid length. [ 1783.551034][T26154] pimreg: entered allmulticast mode [ 1783.672140][T26160] veth0_virt_wifi: entered promiscuous mode [ 1783.680052][T26160] gretap0: entered promiscuous mode [ 1783.687212][T26160] veth0_vlan: entered promiscuous mode [ 1783.694826][T26160] veth0_vlan: left promiscuous mode [ 1783.720218][T26160] veth0_virt_wifi: left promiscuous mode [ 1783.789223][T26160] gretap0: left promiscuous mode [ 1784.052864][T29636] net_ratelimit: 7 callbacks suppressed [ 1784.052885][T29636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.098702][T26197] FAULT_INJECTION: forcing a failure. [ 1784.098702][T26197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.113777][T26197] CPU: 1 UID: 0 PID: 26197 Comm: syz.4.16056 Not tainted syzkaller #0 PREEMPT(full) [ 1784.113813][T26197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1784.113827][T26197] Call Trace: [ 1784.113836][T26197] [ 1784.113845][T26197] dump_stack_lvl+0xe8/0x150 [ 1784.113875][T26197] should_fail_ex+0x412/0x560 [ 1784.113908][T26197] _copy_from_user+0x2d/0xb0 [ 1784.113928][T26197] ___sys_sendmsg+0x1c6/0x360 [ 1784.113951][T26197] ? __lock_acquire+0x6b5/0x2cf0 [ 1784.113974][T26197] ? __pfx____sys_sendmsg+0x10/0x10 [ 1784.114024][T26197] ? kstrtouint+0x6e/0xe0 [ 1784.114087][T26197] ? __fget_files+0x2a/0x420 [ 1784.114106][T26197] ? __fget_files+0x3a0/0x420 [ 1784.114136][T26197] __sys_sendmmsg+0x27c/0x4e0 [ 1784.114173][T26197] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1784.114194][T26197] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1784.114244][T26197] ? ksys_write+0x242/0x270 [ 1784.114271][T26197] ? __pfx_ksys_write+0x10/0x10 [ 1784.114299][T26197] __x64_sys_sendmmsg+0xa0/0xc0 [ 1784.114324][T26197] do_syscall_64+0x14d/0xf80 [ 1784.114348][T26197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.114365][T26197] ? trace_irq_disable+0x37/0x100 [ 1784.114402][T26197] ? clear_bhb_loop+0x40/0x90 [ 1784.114429][T26197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.114447][T26197] RIP: 0033:0x7f8934d9bf79 [ 1784.114465][T26197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.114481][T26197] RSP: 002b:00007f8935c43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1784.114504][T26197] RAX: ffffffffffffffda RBX: 00007f8935015fa0 RCX: 00007f8934d9bf79 [ 1784.114518][T26197] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 1784.114530][T26197] RBP: 00007f8935c43090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.114543][T26197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.114555][T26197] R13: 00007f8935016038 R14: 00007f8935015fa0 R15: 00007ffe91103878 [ 1784.114589][T26197] [ 1784.126334][T26192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1784.338360][T26202] validate_nla: 2 callbacks suppressed [ 1784.338381][T26202] netlink: 'syz.1.16057': attribute type 4 has an invalid length. [ 1784.414817][T29636] lo speed is unknown, defaulting to 1000 [ 1784.420628][T29636] syz0: Port: 1 Link DOWN [ 1784.432073][T29628] lo speed is unknown, defaulting to 1000 [ 1784.564101][T26224] __nla_validate_parse: 13 callbacks suppressed [ 1784.564122][T26224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16063'. [ 1784.606308][T26224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1784.643940][T26224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16063'. [ 1784.704672][T26224] netlink: 'syz.0.16063': attribute type 3 has an invalid length. [ 1784.751647][T26224] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16063'. [ 1784.755806][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16066'. [ 1784.799871][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16065'. [ 1784.866703][T26234] vlan2: entered promiscuous mode [ 1784.905485][T26239] FAULT_INJECTION: forcing a failure. [ 1784.905485][T26239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.922615][T26239] CPU: 1 UID: 0 PID: 26239 Comm: syz.4.16069 Not tainted syzkaller #0 PREEMPT(full) [ 1784.922644][T26239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1784.922656][T26239] Call Trace: [ 1784.922664][T26239] [ 1784.922673][T26239] dump_stack_lvl+0xe8/0x150 [ 1784.922706][T26239] should_fail_ex+0x412/0x560 [ 1784.922739][T26239] _copy_from_user+0x2d/0xb0 [ 1784.922762][T26239] ___sys_sendmsg+0x1c6/0x360 [ 1784.922787][T26239] ? __lock_acquire+0x6b5/0x2cf0 [ 1784.922813][T26239] ? __pfx____sys_sendmsg+0x10/0x10 [ 1784.922845][T26239] ? kstrtouint+0x6e/0xe0 [ 1784.922909][T26239] ? __fget_files+0x2a/0x420 [ 1784.922928][T26239] ? __fget_files+0x3a0/0x420 [ 1784.922959][T26239] __sys_sendmmsg+0x27c/0x4e0 [ 1784.922990][T26239] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1784.923012][T26239] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1784.923066][T26239] ? ksys_write+0x242/0x270 [ 1784.923099][T26239] ? __pfx_ksys_write+0x10/0x10 [ 1784.923129][T26239] __x64_sys_sendmmsg+0xa0/0xc0 [ 1784.923155][T26239] do_syscall_64+0x14d/0xf80 [ 1784.923179][T26239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.923197][T26239] ? trace_irq_disable+0x37/0x100 [ 1784.923219][T26239] ? clear_bhb_loop+0x40/0x90 [ 1784.923242][T26239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.923260][T26239] RIP: 0033:0x7f8934d9bf79 [ 1784.923279][T26239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.923296][T26239] RSP: 002b:00007f8935c43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1784.923318][T26239] RAX: ffffffffffffffda RBX: 00007f8935015fa0 RCX: 00007f8934d9bf79 [ 1784.923333][T26239] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006 [ 1784.923345][T26239] RBP: 00007f8935c43090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.923357][T26239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.923369][T26239] R13: 00007f8935016038 R14: 00007f8935015fa0 R15: 00007ffe91103878 [ 1784.923401][T26239] [ 1785.265734][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16073'. [ 1785.369011][T26250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16075'. [ 1785.454362][T26257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16076'. [ 1785.478001][T26252] syzkaller0: entered promiscuous mode [ 1785.491128][T26252] syzkaller0: entered allmulticast mode [ 1785.495518][T26257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1785.517747][T26257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16076'. [ 1785.565152][T26257] netlink: 'syz.0.16076': attribute type 3 has an invalid length. [ 1785.573537][T26257] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16076'. [ 1785.976491][T26289] netlink: 'syz.3.16085': attribute type 3 has an invalid length. [ 1786.118200][T26298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1786.129484][T26680] page_pool_release_retry() stalled pool shutdown: id 437, 1 inflight 666 sec [ 1786.178740][T26299] netlink: 'syz.3.16090': attribute type 1 has an invalid length. [ 1786.249709][T26306] FAULT_INJECTION: forcing a failure. [ 1786.249709][T26306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.257588][T26304] syzkaller0: entered promiscuous mode [ 1786.271895][T26306] CPU: 1 UID: 0 PID: 26306 Comm: syz.4.16092 Not tainted syzkaller #0 PREEMPT(full) [ 1786.271925][T26306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1786.271938][T26306] Call Trace: [ 1786.271947][T26306] [ 1786.271956][T26306] dump_stack_lvl+0xe8/0x150 [ 1786.272001][T26306] should_fail_ex+0x412/0x560 [ 1786.272036][T26306] _copy_from_user+0x2d/0xb0 [ 1786.272059][T26306] __copy_msghdr+0x3c5/0x5b0 [ 1786.272089][T26306] ___sys_sendmsg+0x213/0x360 [ 1786.272113][T26306] ? __lock_acquire+0x6b5/0x2cf0 [ 1786.272140][T26306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1786.272172][T26306] ? kstrtouint+0x6e/0xe0 [ 1786.272228][T26306] ? __fget_files+0x2a/0x420 [ 1786.272248][T26306] ? __fget_files+0x3a0/0x420 [ 1786.272280][T26306] __sys_sendmmsg+0x27c/0x4e0 [ 1786.272312][T26306] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1786.272335][T26306] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1786.272392][T26306] ? ksys_write+0x242/0x270 [ 1786.272420][T26306] ? __pfx_ksys_write+0x10/0x10 [ 1786.272452][T26306] __x64_sys_sendmmsg+0xa0/0xc0 [ 1786.272480][T26306] do_syscall_64+0x14d/0xf80 [ 1786.272505][T26306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.272524][T26306] ? trace_irq_disable+0x37/0x100 [ 1786.272546][T26306] ? clear_bhb_loop+0x40/0x90 [ 1786.272570][T26306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.272589][T26306] RIP: 0033:0x7f8934d9bf79 [ 1786.272608][T26306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.272626][T26306] RSP: 002b:00007f8935c43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1786.272649][T26306] RAX: ffffffffffffffda RBX: 00007f8935015fa0 RCX: 00007f8934d9bf79 [ 1786.272664][T26306] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006 [ 1786.272677][T26306] RBP: 00007f8935c43090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.272690][T26306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.272702][T26306] R13: 00007f8935016038 R14: 00007f8935015fa0 R15: 00007ffe91103878 [ 1786.272737][T26306] [ 1786.281265][T26304] syzkaller0: entered allmulticast mode [ 1786.534217][T26312] vlan0: entered promiscuous mode [ 1786.672910][T26320] netlink: 'syz.1.16097': attribute type 11 has an invalid length. [ 1786.916629][T26341] FAULT_INJECTION: forcing a failure. [ 1786.916629][T26341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.938952][T26341] CPU: 0 UID: 0 PID: 26341 Comm: syz.0.16101 Not tainted syzkaller #0 PREEMPT(full) [ 1786.938983][T26341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1786.938996][T26341] Call Trace: [ 1786.939004][T26341] [ 1786.939014][T26341] dump_stack_lvl+0xe8/0x150 [ 1786.939047][T26341] should_fail_ex+0x412/0x560 [ 1786.939091][T26341] _copy_to_user+0x31/0xb0 [ 1786.939116][T26341] simple_read_from_buffer+0xe1/0x170 [ 1786.939152][T26341] proc_fail_nth_read+0x1bb/0x230 [ 1786.939183][T26341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1786.939214][T26341] ? rw_verify_area+0x2a6/0x4d0 [ 1786.939238][T26341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1786.939266][T26341] vfs_read+0x20c/0xa70 [ 1786.939288][T26341] ? fdget_pos+0x246/0x320 [ 1786.939314][T26341] ? __pfx___mutex_lock+0x10/0x10 [ 1786.939343][T26341] ? __pfx_vfs_read+0x10/0x10 [ 1786.939368][T26341] ? __fget_files+0x2a/0x420 [ 1786.939394][T26341] ? __fget_files+0x3a0/0x420 [ 1786.939412][T26341] ? __fget_files+0x2a/0x420 [ 1786.939443][T26341] ksys_read+0x150/0x270 [ 1786.939469][T26341] ? __pfx_ksys_read+0x10/0x10 [ 1786.939507][T26341] do_syscall_64+0x14d/0xf80 [ 1786.939532][T26341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.939551][T26341] ? trace_irq_disable+0x37/0x100 [ 1786.939573][T26341] ? clear_bhb_loop+0x40/0x90 [ 1786.939599][T26341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.939618][T26341] RIP: 0033:0x7f615ad5c84e [ 1786.939636][T26341] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1786.939653][T26341] RSP: 002b:00007f615bbfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1786.939676][T26341] RAX: ffffffffffffffda RBX: 00007f615bbfe6c0 RCX: 00007f615ad5c84e [ 1786.939691][T26341] RDX: 000000000000000f RSI: 00007f615bbfe0a0 RDI: 0000000000000007 [ 1786.939703][T26341] RBP: 00007f615bbfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.939716][T26341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.939728][T26341] R13: 00007f615b016038 R14: 00007f615b015fa0 R15: 00007ffc8c283b98 [ 1786.939764][T26341] [ 1787.223059][T26347] netlink: 'syz.2.16106': attribute type 2 has an invalid length. [ 1787.423641][T26362] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 1787.435602][T26362] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 1787.444052][T26362] CPU: 0 UID: 0 PID: 26362 Comm: syz.3.16111 Not tainted syzkaller #0 PREEMPT(full) [ 1787.453541][T26362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1787.463617][T26362] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 1787.470487][T26362] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 1787.490190][T26362] RSP: 0018:ffffc9000472f5e0 EFLAGS: 00010202 [ 1787.496274][T26362] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 1787.504347][T26362] RDX: ffffc9000cdf1000 RSI: 0000000000000c6b RDI: 0000000000000c6c [ 1787.512409][T26362] RBP: 0000000080000000 R08: ffff88803b133c80 R09: 0000000000000003 [ 1787.520384][T26362] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 1787.528446][T26362] R13: 0000000000000000 R14: ffff8880538e5458 R15: ffffffffffffffff [ 1787.536539][T26362] FS: 00007f001bee26c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1787.545657][T26362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1787.552296][T26362] CR2: 0000200000002000 CR3: 0000000040070000 CR4: 00000000003526f0 [ 1787.560367][T26362] Call Trace: [ 1787.563650][T26362] [ 1787.566597][T26362] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1787.572240][T26362] ip_route_output_key_hash+0x18d/0x2a0 [ 1787.577793][T26362] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1787.583869][T26362] ? crng_fast_key_erasure+0x196/0x270 [ 1787.589335][T26362] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1787.595154][T26362] ip_route_output_flow+0x2a/0x150 [ 1787.600272][T26362] sctp_v4_get_dst+0x3f8/0x12b0 [ 1787.605161][T26362] ? crng_make_state+0x2c5/0x600 [ 1787.610102][T26362] ? lockdep_hardirqs_on+0x7a/0x110 [ 1787.615312][T26362] ? crng_make_state+0x36a/0x600 [ 1787.620272][T26362] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 1787.625559][T26362] ? _get_random_bytes+0x1e7/0x260 [ 1787.630683][T26362] ? dst_release+0x72/0x1b0 [ 1787.635196][T26362] sctp_transport_route+0x118/0x2f0 [ 1787.640484][T26362] sctp_assoc_add_peer+0x650/0x13b0 [ 1787.645693][T26362] sctp_connect_new_asoc+0x329/0x6b0 [ 1787.650983][T26362] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1787.656795][T26362] ? sctp_get_af_specific+0x29/0x80 [ 1787.662083][T26362] ? sctp_inet6_send_verify+0x80/0x300 [ 1787.667549][T26362] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1787.673362][T26362] __sctp_connect+0x5cb/0xdc0 [ 1787.678052][T26362] ? __pfx___sctp_connect+0x10/0x10 [ 1787.683254][T26362] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1787.689077][T26362] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1787.694894][T26362] sctp_getsockopt_connectx3+0x227/0x360 [ 1787.700528][T26362] ? lock_sock_nested+0x6a/0x100 [ 1787.705469][T26362] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1787.711736][T26362] ? __local_bh_enable_ip+0xd0/0x130 [ 1787.717028][T26362] sctp_getsockopt+0x984/0xb90 [ 1787.721795][T26362] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1787.727953][T26362] do_sock_getsockopt+0x2d3/0x3f0 [ 1787.732983][T26362] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1787.738536][T26362] ? __fget_files+0x3a0/0x420 [ 1787.743221][T26362] ? __fget_files+0x2a/0x420 [ 1787.747817][T26362] __x64_sys_getsockopt+0x1a4/0x240 [ 1787.753031][T26362] do_syscall_64+0x14d/0xf80 [ 1787.757628][T26362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.763815][T26362] ? trace_irq_disable+0x37/0x100 [ 1787.768947][T26362] ? clear_bhb_loop+0x40/0x90 [ 1787.773725][T26362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.779620][T26362] RIP: 0033:0x7f001af9bf79 [ 1787.784043][T26362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.803744][T26362] RSP: 002b:00007f001bee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1787.812169][T26362] RAX: ffffffffffffffda RBX: 00007f001b215fa0 RCX: 00007f001af9bf79 [ 1787.820233][T26362] RDX: 000000000000006f RSI: 0000000000000084 RDI: 000000000000000b [ 1787.828202][T26362] RBP: 00007f001b0327e0 R08: 0000200000000140 R09: 0000000000000000 [ 1787.836181][T26362] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1787.844157][T26362] R13: 00007f001b216038 R14: 00007f001b215fa0 R15: 00007ffda9d71688 [ 1787.852142][T26362] [ 1787.855173][T26362] Modules linked in: [ 1787.860937][T26362] ---[ end trace 0000000000000000 ]--- [ 1787.878995][T26362] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 1787.888573][T26362] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 1787.909649][T26364] vlan2: entered promiscuous mode [ 1787.919832][T26362] RSP: 0018:ffffc9000472f5e0 EFLAGS: 00010202 [ 1787.926618][T26362] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 1787.935031][T26362] RDX: ffffc9000cdf1000 RSI: 0000000000000c6b RDI: 0000000000000c6c [ 1787.943254][T26362] RBP: 0000000080000000 R08: ffff88803b133c80 R09: 0000000000000003 [ 1787.951357][T26362] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 1787.959687][T26362] R13: 0000000000000000 R14: ffff8880538e5458 R15: ffffffffffffffff [ 1787.969588][T26362] FS: 00007f001bee26c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 1787.978708][T26362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1787.986346][T26362] CR2: 00007f615bbddd58 CR3: 0000000040070000 CR4: 00000000003526f0 [ 1787.994483][T26362] Kernel panic - not syncing: Fatal exception [ 1788.001051][T26362] Kernel Offset: disabled [ 1788.005407][T26362] Rebooting in 86400 seconds..