last executing test programs: 3.729867671s ago: executing program 0 (id=13580): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000011140100000000000000000008004a000100000008010300010000000807b39b079c92e37ddb935d004a000100000008004b001300000008004f0003000000080001000000000008003e0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100000000000a00000005"], 0x1c}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x40, r7, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x7, 0x4e, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x20, 0x8, 0x6}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.729734135s ago: executing program 2 (id=13581): r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f00000007c0)="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", 0xfc) (fail_nth: 12) 3.659654185s ago: executing program 3 (id=13583): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote, 0xff}}, [0x8, 0x4, 0x7fffffff, 0x0, 0x9, 0x4, 0x8, 0x60000, 0x4, 0x4, 0x7, 0x0, 0x1, 0x3, 0x30]}, &(0x7f0000000600)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={r1}, &(0x7f0000000680)=0x8) r2 = socket(0x1e, 0x80000, 0x1) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x11, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x2}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r5}, &(0x7f0000000180)=0x8) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_IFALIASn={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x30}}, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f701"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000480)={{r9, &(0x7f00000000c0)='\x97&\x00', 0x82000, &(0x7f0000000280)={@_ha_fsid={[0x4, 0x100]}, {0xfffc, 0x200, 0x200, 0x3}}, 0x81, &(0x7f00000002c0), &(0x7f0000000300)=0x2}, 0x1, &(0x7f0000000440)=[{0x1, 0xdf6, &(0x7f0000000340)='^\x00', &(0x7f0000000380)="68ad27a6e1d46cd12e88887c6fdb3292c2bbc0ed619c94825b008df95064e8aab87179535b2ef8b61051f49ec6d36f20910715ecb9d8ea4f84fb0e57adeea744b8fca056ac65fae4b75976618a18516c05898ce07efa9f3f6b5106741f5ad4f6e24a19d370bf2cd9c8ef2473e733bfa03ed155bb74d42f9a5ddd91282b0cd3119ac25bc73096f207dcb65e484406976aa0d7c15ea1", 0x95, 0x12}]}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4a004}, 0x20000080) r10 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r10, &(0x7f00000007c0)=""/269, 0x10d, 0x0, 0x0, 0x0) close(0x4) 3.585515724s ago: executing program 1 (id=13585): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2000c800) socket$inet6_tcp(0xa, 0x1, 0x0) 3.223893686s ago: executing program 2 (id=13586): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="8faaaa95aaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, &(0x7f0000000740)={@val={0x0, 0xf9}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32) write$tun(r1, &(0x7f0000000040)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @random="a8294b8ec005", @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x1, 0x0, "c9e7", "4671c9b72c96f7e8f51ef3ba74732c2656d2e0160f6e4a2a96221aeb0c266b186279eaf6108ae94615fd1f20e7444be297684d2731b462663aa8925f2ee59b9dfd5abcff5525a378b537c5a4aea1f6ea5aab4757dd94452316ee092370563519cdf4397ff2806f9bf7d66e37a4d26499abea072feaa78fab139b51aa47cebbb0783488d8c3164a853b09bcb70a43503d037c1eb24d65302b8ba3476bec3e3d907df58c750a56d23fd9cc114337bffb1bcca2a1c3765bc24a488c868a12551e2a6578696bca1d2ca226174dd9e6"}}}}}}, 0xe7) 3.195399884s ago: executing program 0 (id=13588): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060001000064bc24eab556a705251e618294ff0051f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.190810608s ago: executing program 1 (id=13589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 3.059269382s ago: executing program 1 (id=13591): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) write$tun(r1, &(0x7f0000000600)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x18, 0x11, 0x1, @private0, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x100000000}}}}}}}}, 0x52) 3.041991325s ago: executing program 0 (id=13592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000060001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.980553149s ago: executing program 3 (id=13593): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000001824", 0x6}], 0x2}, 0x240088d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x101c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1008, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}]}, 0x101c}}, 0x840) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.814910522s ago: executing program 3 (id=13594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) (async) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f00000002c0)) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d4e"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x19, 0x0, 0x0) (async) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) 2.813246597s ago: executing program 4 (id=13595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@dev, @dev, 0x0}, &(0x7f0000000280)=0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) sendfile(r3, r4, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8d54}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, @alu={0x4, 0x1, 0x5, 0x4, 0x8, 0xffffffffffffff50, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x3251, 0xb7, &(0x7f00000000c0)=""/183, 0x41100, 0x10, '\x00', r2, @fallback=0x10, r3, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xe, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[r0], &(0x7f0000000380)=[{0x1, 0x2, 0x6, 0x7}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 2.79510587s ago: executing program 0 (id=13596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYBLOB="8b04040000"], 0x90}}, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x884) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r15, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="00022abd7000ffdbdf25080000000800030005000000084f8afed06308d70002000700000030000180050002001f00000008000000000000000500020007000000140000fe88000101"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) pipe(&(0x7f0000000200)) 2.740598663s ago: executing program 2 (id=13597): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) (async) shutdown(r0, 0x1) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}]}]}, 0x4c}}, 0x8000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.616419156s ago: executing program 4 (id=13598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="8faaaa95aaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) (fail_nth: 3) 2.588547355s ago: executing program 2 (id=13599): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2000c800) socket$inet6_tcp(0xa, 0x1, 0x0) 2.528054424s ago: executing program 4 (id=13600): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x170, 0x210, 0xb8, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010100, 0xff, 0xffffffff, 'dummy0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x2, 0x11}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x1}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xff000000, 'syzkaller0\x00', 'geneve0\x00', {}, {0xff}, 0xc, 0x2, 0x22}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'syzkaller1\x00', {0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffff, 0xffffff00, 'macvlan0\x00', 'veth1_to_team\x00', {}, {}, 0xc, 0x2, 0x5}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0x2, 0x4, 0x2}, 0x4, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 2.489424205s ago: executing program 1 (id=13601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 2.485200183s ago: executing program 3 (id=13602): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060001000064bc24eab556a705251e618294ff0051f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.476968247s ago: executing program 2 (id=13603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/102, 0x66) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x0, 0xffed}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465"], 0xd4}}, 0x4000010) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000000fd52831afcea68000099110a00000000008510000002000000850000000000000095000810000000009500a5050004000097b264857aef564f28eb891d291742aee183c6513c437b5cf1421c90cab1ca398ab86c191a45ca51c20ddbb8fb384ded34d6ff7889716a3b301f9ea77358de6cc836d9a57ea98e7c2053f79a9528e318778c9fecc534d534d968efe36babd0c221de34e20b8b86e73fdf4b4aef27b8d929900607a7a1e05670e175b038170481c35f3addd45a19973412481a1bfc6fec591dcc4173481c874ac2f92d59a3d3ffdefe627b54399ddf1c9f920da75ed4bdc60d3a0a9d1622e3f5d97f399e636d2e0c962d052c4f7f0d4ee6c2c90f3d779d0a966ac6f6114c4380c771f6921ce6f8931bdf19cab292d434545b87739f0909000000a56de36f9a7ece90ee0fdcf0954a08048542a738c1d2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 2.283905698s ago: executing program 4 (id=13604): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newnexthop={0x18, 0x68, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d80000001c0081064e81f782db44b9040a7408041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab9df17933cc431d85bdaba4dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d64120c4f1e9d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93a9", 0xffffff43}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={r2, &(0x7f0000000480)='\xfc\a\x1a&\x02\x00\xf0c=\xd3+\x81q\x06y\xe6\xf8q\a\x00\x00\x00r|P\x97Fl', 0x38100, &(0x7f00000000c0)={@align=0x1, {0x4, 0x5, 0x2, 0x3ba}}, 0x8001, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000300)=0x7}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000380)={'macvtap0\x00', @remote}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) write$nci(r3, &(0x7f00000003c0)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0xe, 0x1}, 0x4) 2.278349233s ago: executing program 0 (id=13605): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05042fbd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) 2.230401897s ago: executing program 1 (id=13606): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.211608516s ago: executing program 3 (id=13607): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x9, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x120, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) getsockopt$inet6_int(r0, 0x29, 0xe5d7d784d0785277, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x31}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r6, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x188, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0xaed}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x52ad}, {0x8, 0x13, 0xfffffffe}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x69}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8804}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="94d6153077595050ed0af5230fbe1261b58be2c7a20bfbe961b31e7da030049681865f0e14d33af449c8d9ac531fe32a9000624871116dfc4f0b2fb1240dc773b833a50b813538bf5a0e2dd90fabd5daad175c857c7a538c292fed2e1768d8c220e7537218863d81e1adc5536839d9ce1fc0bb1418421ccb8fbfe9b9942e2f628c6c3d459d13bcead3578bb0a76f202e87ad40344029fa23d62af672f2a3b220", @ANYRES8=r2], 0x0) 2.092236958s ago: executing program 4 (id=13608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x58}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}}, 0x11971c792e25edd2) 90.983941ms ago: executing program 0 (id=13609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (fail_nth: 34) 60.277145ms ago: executing program 3 (id=13610): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000080)={'macvtap0\x00', 0x2000}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000080)='%,,\x00', 0x80000, &(0x7f0000000140)={@_ha_fsid={[0xf1, 0x54e]}, {0x8, 0x6ab2, 0x4, 0x2}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xb, 0x4) 12.266916ms ago: executing program 1 (id=13611): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) write$tun(r1, &(0x7f0000000600)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x18, 0x11, 0x1, @private0, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x100000000}}}}}}}}, 0x52) 11.933612ms ago: executing program 4 (id=13612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x300, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 0s ago: executing program 2 (id=13613): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2000c800) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): genl_rcv+0xd/0x40 [ 1154.017042][T11693] genl_rcv+0x28/0x40 [ 1154.017068][T11693] netlink_unicast+0x80f/0x9b0 [ 1154.017107][T11693] ? __pfx_netlink_unicast+0x10/0x10 [ 1154.017133][T11693] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1154.017163][T11693] ? netlink_sendmsg+0x650/0xb40 [ 1154.017191][T11693] ? skb_put+0x11b/0x210 [ 1154.017231][T11693] netlink_sendmsg+0x813/0xb40 [ 1154.017273][T11693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1154.017309][T11693] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1154.017341][T11693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1154.017371][T11693] ____sys_sendmsg+0x972/0x9f0 [ 1154.017391][T11693] ? futex_unqueue+0x211/0x240 [ 1154.017427][T11693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1154.017462][T11693] ? import_iovec+0x73/0xa0 [ 1154.017500][T11693] ___sys_sendmsg+0x2a5/0x360 [ 1154.017530][T11693] ? __pfx____sys_sendmsg+0x10/0x10 [ 1154.017560][T11693] ? futex_wait+0x29a/0x380 [ 1154.017626][T11693] ? __fget_files+0x2a/0x420 [ 1154.017659][T11693] ? __fget_files+0x3a0/0x420 [ 1154.017704][T11693] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1154.017731][T11693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1154.017764][T11693] ? rcu_is_watching+0x15/0xb0 [ 1154.017812][T11693] do_syscall_64+0x14d/0xf80 [ 1154.017832][T11693] ? trace_irq_disable+0x3b/0x150 [ 1154.017864][T11693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.017888][T11693] ? clear_bhb_loop+0x40/0x90 [ 1154.017916][T11693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.017938][T11693] RIP: 0033:0x7faed4f9c799 [ 1154.017959][T11693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.017979][T11693] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.018003][T11693] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1154.018020][T11693] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1154.018035][T11693] RBP: 00007faed5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1154.018050][T11693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.018070][T11693] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1154.018108][T11693] [ 1154.802120][T11706] netlink: 'syz.0.12656': attribute type 33 has an invalid length. [ 1154.928840][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12659'. [ 1155.237266][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12660'. [ 1155.520885][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12664'. [ 1155.561343][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12664'. [ 1155.570388][T11732] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12664'. [ 1155.654405][T11734] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1155.713503][T11734] CPU: 1 UID: 0 PID: 11734 Comm: syz.2.12666 Not tainted syzkaller #0 PREEMPT(full) [ 1155.713537][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1155.713553][T11734] Call Trace: [ 1155.713563][T11734] [ 1155.713573][T11734] dump_stack_lvl+0xe8/0x150 [ 1155.713615][T11734] sysfs_warn_dup+0x8e/0xa0 [ 1155.713649][T11734] sysfs_do_create_link_sd+0xc0/0x110 [ 1155.713685][T11734] device_add_class_symlinks+0x1cf/0x240 [ 1155.713717][T11734] device_add+0x475/0xb70 [ 1155.713745][T11734] wiphy_register+0x1d73/0x2d50 [ 1155.713795][T11734] ? __pfx_wiphy_register+0x10/0x10 [ 1155.713824][T11734] ? __pfx_netdev_run_todo+0x10/0x10 [ 1155.713848][T11734] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1155.713881][T11734] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1155.713924][T11734] ieee80211_register_hw+0x3562/0x4200 [ 1155.713965][T11734] ? ieee80211_register_hw+0x1481/0x4200 [ 1155.714001][T11734] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1155.714045][T11734] ? __hrtimer_setup+0x181/0x200 [ 1155.714076][T11734] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1155.714108][T11734] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1155.714166][T11734] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1155.714190][T11734] ? kstrndup+0xbf/0x160 [ 1155.714231][T11734] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1155.714283][T11734] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1155.714320][T11734] ? rcu_is_watching+0x15/0xb0 [ 1155.714351][T11734] ? trace_kmalloc+0x2a/0x110 [ 1155.714384][T11734] ? __nla_parse+0x40/0x60 [ 1155.714431][T11734] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1155.714466][T11734] genl_family_rcv_msg_doit+0x22a/0x330 [ 1155.714499][T11734] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1155.714538][T11734] ? bpf_lsm_capable+0x9/0x20 [ 1155.714569][T11734] ? security_capable+0x7e/0x2c0 [ 1155.714605][T11734] genl_rcv_msg+0x61c/0x7a0 [ 1155.714635][T11734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1155.714657][T11734] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1155.714682][T11734] ? __lock_acquire+0x6b5/0x2cf0 [ 1155.714724][T11734] netlink_rcv_skb+0x232/0x4b0 [ 1155.714756][T11734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1155.714780][T11734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1155.714832][T11734] ? down_read+0x272/0x2e0 [ 1155.714854][T11734] ? genl_rcv+0xd/0x40 [ 1155.714878][T11734] genl_rcv+0x28/0x40 [ 1155.714898][T11734] netlink_unicast+0x80f/0x9b0 [ 1155.714936][T11734] ? __pfx_netlink_unicast+0x10/0x10 [ 1155.714961][T11734] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1155.714990][T11734] ? netlink_sendmsg+0x650/0xb40 [ 1155.715018][T11734] ? skb_put+0x11b/0x210 [ 1155.715056][T11734] netlink_sendmsg+0x813/0xb40 [ 1155.715098][T11734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.715133][T11734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1155.715165][T11734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1155.715194][T11734] ____sys_sendmsg+0x972/0x9f0 [ 1155.715215][T11734] ? futex_unqueue+0x211/0x240 [ 1155.715251][T11734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.715286][T11734] ? import_iovec+0x73/0xa0 [ 1155.715325][T11734] ___sys_sendmsg+0x2a5/0x360 [ 1155.715356][T11734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.715387][T11734] ? futex_wait+0x29a/0x380 [ 1155.715461][T11734] ? __fget_files+0x2a/0x420 [ 1155.715494][T11734] ? __fget_files+0x3a0/0x420 [ 1155.715558][T11734] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1155.715586][T11734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1155.715626][T11734] ? rcu_is_watching+0x15/0xb0 [ 1155.715675][T11734] do_syscall_64+0x14d/0xf80 [ 1155.715697][T11734] ? trace_irq_disable+0x3b/0x150 [ 1155.715730][T11734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.715754][T11734] ? clear_bhb_loop+0x40/0x90 [ 1155.715784][T11734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.715807][T11734] RIP: 0033:0x7fccac39c799 [ 1155.715830][T11734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.715850][T11734] RSP: 002b:00007fccad331028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1155.715875][T11734] RAX: ffffffffffffffda RBX: 00007fccac615fa0 RCX: 00007fccac39c799 [ 1155.715893][T11734] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1155.715909][T11734] RBP: 00007fccac432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1155.715923][T11734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.715937][T11734] R13: 00007fccac616038 R14: 00007fccac615fa0 R15: 00007ffc73396748 [ 1155.715976][T11734] [ 1156.486668][T11745] xt_SECMARK: invalid mode: 9 [ 1157.239444][T11771] macvlan2: entered promiscuous mode [ 1157.262486][T11779] netlink: 'syz.1.12680': attribute type 1 has an invalid length. [ 1157.302080][T11771] macvlan2: entered allmulticast mode [ 1157.308811][T11771] bond4: (slave macvlan2): Opening slave failed [ 1157.911819][T11799] xt_SECMARK: invalid mode: 9 [ 1158.065589][T11803] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1158.202264][T11810] __nla_validate_parse: 8 callbacks suppressed [ 1158.202285][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1158.274269][T11812] netlink: 'syz.0.12692': attribute type 1 has an invalid length. [ 1158.292572][T11817] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12693'. [ 1158.640763][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12699'. [ 1159.038197][T11846] netlink: 'syz.1.12706': attribute type 1 has an invalid length. [ 1159.279851][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12709'. [ 1159.408263][T11868] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1159.634160][T11873] netlink: 'syz.4.12715': attribute type 1 has an invalid length. [ 1159.745617][T11873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1159.902416][T11874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1159.911830][T11874] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1159.937415][T11874] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1160.060974][T11897] netlink: 'syz.0.12720': attribute type 1 has an invalid length. [ 1160.280361][T11911] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 1160.336137][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12724'. [ 1160.549398][T11922] : entered promiscuous mode [ 1160.632111][T11925] bridge0: port 3(gretap0) entered blocking state [ 1160.638709][T11925] bridge0: port 3(gretap0) entered disabled state [ 1160.646156][T11925] gretap0: entered allmulticast mode [ 1160.657210][T11925] gretap0: entered promiscuous mode [ 1160.763182][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12734'. [ 1160.863099][T11939] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 1160.882012][T11944] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1160.918577][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12736'. [ 1161.230762][T11958] netlink: 'syz.4.12743': attribute type 83 has an invalid length. [ 1161.247991][T11953] syzkaller0: entered promiscuous mode [ 1161.259518][T11953] syzkaller0: entered allmulticast mode [ 1161.309448][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12744'. [ 1161.342626][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12743'. [ 1161.405155][T11968] FAULT_INJECTION: forcing a failure. [ 1161.405155][T11968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.435769][T11968] CPU: 1 UID: 0 PID: 11968 Comm: syz.2.12744 Not tainted syzkaller #0 PREEMPT(full) [ 1161.435801][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1161.435815][T11968] Call Trace: [ 1161.435825][T11968] [ 1161.435835][T11968] dump_stack_lvl+0xe8/0x150 [ 1161.435881][T11968] should_fail_ex+0x412/0x560 [ 1161.435917][T11968] _copy_to_user+0x31/0xb0 [ 1161.435955][T11968] simple_read_from_buffer+0xe1/0x170 [ 1161.435993][T11968] proc_fail_nth_read+0x1bb/0x230 [ 1161.436029][T11968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1161.436066][T11968] ? rw_verify_area+0x2a6/0x4d0 [ 1161.436089][T11968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1161.436123][T11968] vfs_read+0x20c/0xa70 [ 1161.436144][T11968] ? fdget_pos+0x246/0x320 [ 1161.436182][T11968] ? __pfx___mutex_lock+0x10/0x10 [ 1161.436206][T11968] ? __pfx_vfs_read+0x10/0x10 [ 1161.436237][T11968] ? __fget_files+0x2a/0x420 [ 1161.436274][T11968] ? __fget_files+0x3a0/0x420 [ 1161.436305][T11968] ? __fget_files+0x2a/0x420 [ 1161.436348][T11968] ksys_read+0x150/0x270 [ 1161.436376][T11968] ? __pfx_ksys_read+0x10/0x10 [ 1161.436414][T11968] do_syscall_64+0x14d/0xf80 [ 1161.436433][T11968] ? trace_irq_disable+0x3b/0x150 [ 1161.436466][T11968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.436489][T11968] ? clear_bhb_loop+0x40/0x90 [ 1161.436517][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.436539][T11968] RIP: 0033:0x7fccac35cfce [ 1161.436561][T11968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1161.436581][T11968] RSP: 002b:00007fccad30ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1161.436605][T11968] RAX: ffffffffffffffda RBX: 00007fccad3106c0 RCX: 00007fccac35cfce [ 1161.436622][T11968] RDX: 000000000000000f RSI: 00007fccad3100a0 RDI: 0000000000000005 [ 1161.436636][T11968] RBP: 00007fccad310090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.436651][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.436665][T11968] R13: 00007fccac616128 R14: 00007fccac616090 R15: 00007ffc73396748 [ 1161.436702][T11968] [ 1163.511353][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12742'. [ 1163.527553][T11958] ip6gre2: entered promiscuous mode [ 1163.542946][T11963] ip6gre4: entered promiscuous mode [ 1163.573521][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12745'. [ 1163.705167][T11976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12746'. [ 1163.914059][T11986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1163.993562][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12752'. [ 1164.045545][T11988] ip6gre4: entered promiscuous mode [ 1164.097628][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12754'. [ 1164.405587][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12757'. [ 1164.576614][T12015] FAULT_INJECTION: forcing a failure. [ 1164.576614][T12015] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.647191][T12015] CPU: 0 UID: 0 PID: 12015 Comm: syz.1.12759 Not tainted syzkaller #0 PREEMPT(full) [ 1164.647220][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1164.647233][T12015] Call Trace: [ 1164.647242][T12015] [ 1164.647251][T12015] dump_stack_lvl+0xe8/0x150 [ 1164.647287][T12015] should_fail_ex+0x412/0x560 [ 1164.647318][T12015] should_failslab+0xa8/0x100 [ 1164.647346][T12015] __kmalloc_noprof+0xe8/0x760 [ 1164.647368][T12015] ? nf_tables_newrule+0x152c/0x28b0 [ 1164.647389][T12015] ? nla_strcmp+0x106/0x140 [ 1164.647421][T12015] nf_tables_newrule+0x152c/0x28b0 [ 1164.647456][T12015] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1164.647477][T12015] ? nfnl_pernet+0x23/0x240 [ 1164.647512][T12015] ? __nla_parse+0x40/0x60 [ 1164.647547][T12015] nfnetlink_rcv+0x1240/0x27b0 [ 1164.647609][T12015] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1164.647653][T12015] ? ref_tracker_free+0x693/0x840 [ 1164.647713][T12015] ? __netlink_deliver_tap+0x807/0x850 [ 1164.647742][T12015] ? netlink_deliver_tap+0x2e/0x1b0 [ 1164.647790][T12015] netlink_unicast+0x80f/0x9b0 [ 1164.647824][T12015] ? __pfx_netlink_unicast+0x10/0x10 [ 1164.647853][T12015] ? netlink_sendmsg+0x650/0xb40 [ 1164.647879][T12015] ? skb_put+0x11b/0x210 [ 1164.647915][T12015] netlink_sendmsg+0x813/0xb40 [ 1164.647964][T12015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1164.648001][T12015] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1164.648033][T12015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1164.648063][T12015] ____sys_sendmsg+0x972/0x9f0 [ 1164.648095][T12015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1164.648134][T12015] ? import_iovec+0x73/0xa0 [ 1164.648171][T12015] ___sys_sendmsg+0x2a5/0x360 [ 1164.648199][T12015] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.648261][T12015] ? __fget_files+0x2a/0x420 [ 1164.648293][T12015] ? __fget_files+0x3a0/0x420 [ 1164.648336][T12015] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1164.648362][T12015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1164.648395][T12015] ? __pfx_ksys_write+0x10/0x10 [ 1164.648432][T12015] do_syscall_64+0x14d/0xf80 [ 1164.648452][T12015] ? trace_irq_disable+0x3b/0x150 [ 1164.648483][T12015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.648506][T12015] ? clear_bhb_loop+0x40/0x90 [ 1164.648532][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.648554][T12015] RIP: 0033:0x7f5ad339c799 [ 1164.648574][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.648595][T12015] RSP: 002b:00007f5ad41d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.648618][T12015] RAX: ffffffffffffffda RBX: 00007f5ad3615fa0 RCX: 00007f5ad339c799 [ 1164.648635][T12015] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1164.648649][T12015] RBP: 00007f5ad41d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.648663][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.648677][T12015] R13: 00007f5ad3616038 R14: 00007f5ad3615fa0 R15: 00007ffe1f34d1d8 [ 1164.648712][T12015] [ 1165.527782][T12033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12764'. [ 1165.545273][T12033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12764'. [ 1165.597227][T12030] netlink: 'syz.4.12765': attribute type 29 has an invalid length. [ 1165.606438][T12030] netlink: 'syz.4.12765': attribute type 29 has an invalid length. [ 1165.615561][T12030] netlink: 'syz.4.12765': attribute type 29 has an invalid length. [ 1165.624179][T12030] netlink: 'syz.4.12765': attribute type 29 has an invalid length. [ 1165.651746][T12030] netlink: 'syz.4.12765': attribute type 29 has an invalid length. [ 1165.680267][T12030] netlink: 'syz.4.12765': attribute type 29 has an invalid length. [ 1165.742132][T12030] netlink: 'syz.4.12765': attribute type 29 has an invalid length. [ 1165.845435][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12770'. [ 1165.956557][T12053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1166.486495][T12076] netem: change failed [ 1166.563189][T12080] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12783'. [ 1167.018583][T12097] syzkaller0: entered promiscuous mode [ 1167.037498][T12097] syzkaller0: entered allmulticast mode [ 1167.154185][T12100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.450070][T12120] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1167.473155][T12118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1167.511336][T12120] CPU: 0 UID: 0 PID: 12120 Comm: syz.4.12800 Not tainted syzkaller #0 PREEMPT(full) [ 1167.511376][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1167.511390][T12120] Call Trace: [ 1167.511400][T12120] [ 1167.511410][T12120] dump_stack_lvl+0xe8/0x150 [ 1167.511449][T12120] sysfs_warn_dup+0x8e/0xa0 [ 1167.511482][T12120] sysfs_do_create_link_sd+0xc0/0x110 [ 1167.511517][T12120] device_add_class_symlinks+0x1cf/0x240 [ 1167.511546][T12120] device_add+0x475/0xb70 [ 1167.511574][T12120] wiphy_register+0x1d73/0x2d50 [ 1167.511624][T12120] ? __pfx_wiphy_register+0x10/0x10 [ 1167.511653][T12120] ? __pfx_netdev_run_todo+0x10/0x10 [ 1167.511677][T12120] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1167.511720][T12120] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1167.511757][T12120] ieee80211_register_hw+0x3562/0x4200 [ 1167.511794][T12120] ? ieee80211_register_hw+0x1481/0x4200 [ 1167.511828][T12120] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1167.511869][T12120] ? __hrtimer_setup+0x181/0x200 [ 1167.511899][T12120] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1167.511929][T12120] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1167.511981][T12120] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1167.512002][T12120] ? kstrndup+0xbf/0x160 [ 1167.512039][T12120] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1167.512085][T12120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1167.512118][T12120] ? rcu_is_watching+0x15/0xb0 [ 1167.512147][T12120] ? trace_kmalloc+0x2a/0x110 [ 1167.512179][T12120] ? __nla_parse+0x40/0x60 [ 1167.512216][T12120] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1167.512249][T12120] genl_family_rcv_msg_doit+0x22a/0x330 [ 1167.512279][T12120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1167.512317][T12120] ? bpf_lsm_capable+0x9/0x20 [ 1167.512345][T12120] ? security_capable+0x7e/0x2c0 [ 1167.512387][T12120] genl_rcv_msg+0x61c/0x7a0 [ 1167.512416][T12120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.512437][T12120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1167.512461][T12120] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.512502][T12120] netlink_rcv_skb+0x232/0x4b0 [ 1167.512531][T12120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.512555][T12120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1167.512603][T12120] ? down_read+0x272/0x2e0 [ 1167.512624][T12120] ? genl_rcv+0xd/0x40 [ 1167.512646][T12120] genl_rcv+0x28/0x40 [ 1167.512664][T12120] netlink_unicast+0x80f/0x9b0 [ 1167.512699][T12120] ? __pfx_netlink_unicast+0x10/0x10 [ 1167.512722][T12120] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1167.512749][T12120] ? netlink_sendmsg+0x650/0xb40 [ 1167.512775][T12120] ? skb_put+0x11b/0x210 [ 1167.512810][T12120] netlink_sendmsg+0x813/0xb40 [ 1167.512850][T12120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.512882][T12120] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1167.512912][T12120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1167.512956][T12120] ____sys_sendmsg+0x972/0x9f0 [ 1167.512977][T12120] ? futex_unqueue+0x211/0x240 [ 1167.513013][T12120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.513047][T12120] ? import_iovec+0x73/0xa0 [ 1167.513087][T12120] ___sys_sendmsg+0x2a5/0x360 [ 1167.513116][T12120] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.513147][T12120] ? futex_wait+0x29a/0x380 [ 1167.513211][T12120] ? __fget_files+0x2a/0x420 [ 1167.513244][T12120] ? __fget_files+0x3a0/0x420 [ 1167.513289][T12120] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1167.513315][T12120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1167.513349][T12120] ? rcu_is_watching+0x15/0xb0 [ 1167.513403][T12120] do_syscall_64+0x14d/0xf80 [ 1167.513422][T12120] ? trace_irq_disable+0x3b/0x150 [ 1167.513454][T12120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.513479][T12120] ? clear_bhb_loop+0x40/0x90 [ 1167.513507][T12120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.513530][T12120] RIP: 0033:0x7f0acdd9c799 [ 1167.513553][T12120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.513573][T12120] RSP: 002b:00007f0acebfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.513598][T12120] RAX: ffffffffffffffda RBX: 00007f0ace015fa0 RCX: 00007f0acdd9c799 [ 1167.513614][T12120] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1167.513630][T12120] RBP: 00007f0acde32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1167.513644][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.513657][T12120] R13: 00007f0ace016038 R14: 00007f0ace015fa0 R15: 00007fffc6293608 [ 1167.513696][T12120] [ 1168.157727][T12129] xt_hashlimit: size too large, truncated to 1048576 [ 1168.895841][T12155] syzkaller0: entered promiscuous mode [ 1168.910832][T12155] syzkaller0: entered allmulticast mode [ 1169.237001][T12175] FAULT_INJECTION: forcing a failure. [ 1169.237001][T12175] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.271994][T12175] CPU: 1 UID: 0 PID: 12175 Comm: syz.1.12813 Not tainted syzkaller #0 PREEMPT(full) [ 1169.272027][T12175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1169.272042][T12175] Call Trace: [ 1169.272052][T12175] [ 1169.272061][T12175] dump_stack_lvl+0xe8/0x150 [ 1169.272100][T12175] should_fail_ex+0x412/0x560 [ 1169.272143][T12175] should_failslab+0xa8/0x100 [ 1169.272175][T12175] __kmalloc_noprof+0xe8/0x760 [ 1169.272201][T12175] ? tomoyo_encode+0x28b/0x550 [ 1169.272239][T12175] tomoyo_encode+0x28b/0x550 [ 1169.272276][T12175] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1169.272320][T12175] ? tomoyo_path_number_perm+0x219/0x630 [ 1169.272347][T12175] tomoyo_path_number_perm+0x246/0x630 [ 1169.272376][T12175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1169.272405][T12175] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.272447][T12175] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1169.272494][T12175] ? __fget_files+0x2a/0x420 [ 1169.272531][T12175] ? __fget_files+0x2a/0x420 [ 1169.272563][T12175] ? __fget_files+0x3a0/0x420 [ 1169.272594][T12175] ? __fget_files+0x2a/0x420 [ 1169.272631][T12175] security_file_ioctl+0xc3/0x2a0 [ 1169.272658][T12175] __se_sys_ioctl+0x47/0x170 [ 1169.272689][T12175] do_syscall_64+0x14d/0xf80 [ 1169.272709][T12175] ? trace_irq_disable+0x3b/0x150 [ 1169.272741][T12175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.272765][T12175] ? clear_bhb_loop+0x40/0x90 [ 1169.272794][T12175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.272816][T12175] RIP: 0033:0x7f5ad339c799 [ 1169.272837][T12175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.272857][T12175] RSP: 002b:00007f5ad41b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.272881][T12175] RAX: ffffffffffffffda RBX: 00007f5ad3616090 RCX: 00007f5ad339c799 [ 1169.272899][T12175] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 1169.272914][T12175] RBP: 00007f5ad41b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.272928][T12175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.272941][T12175] R13: 00007f5ad3616128 R14: 00007f5ad3616090 R15: 00007ffe1f34d1d8 [ 1169.272979][T12175] [ 1169.273002][T12175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1169.525218][T12178] xt_SECMARK: invalid mode: 9 [ 1169.534992][T12182] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1169.586079][T12182] CPU: 1 UID: 0 PID: 12182 Comm: syz.2.12814 Not tainted syzkaller #0 PREEMPT(full) [ 1169.586113][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1169.586130][T12182] Call Trace: [ 1169.586140][T12182] [ 1169.586150][T12182] dump_stack_lvl+0xe8/0x150 [ 1169.586191][T12182] sysfs_warn_dup+0x8e/0xa0 [ 1169.586226][T12182] sysfs_do_create_link_sd+0xc0/0x110 [ 1169.586262][T12182] device_add_class_symlinks+0x1cf/0x240 [ 1169.586293][T12182] device_add+0x475/0xb70 [ 1169.586323][T12182] wiphy_register+0x1d73/0x2d50 [ 1169.586374][T12182] ? __pfx_wiphy_register+0x10/0x10 [ 1169.586405][T12182] ? __pfx_netdev_run_todo+0x10/0x10 [ 1169.586432][T12182] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1169.586467][T12182] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1169.586510][T12182] ieee80211_register_hw+0x3562/0x4200 [ 1169.586552][T12182] ? ieee80211_register_hw+0x1481/0x4200 [ 1169.586589][T12182] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1169.586634][T12182] ? __hrtimer_setup+0x181/0x200 [ 1169.586666][T12182] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1169.586700][T12182] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1169.586762][T12182] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1169.586786][T12182] ? kstrndup+0xbf/0x160 [ 1169.586840][T12182] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1169.586900][T12182] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1169.586934][T12182] ? rcu_is_watching+0x15/0xb0 [ 1169.586964][T12182] ? trace_kmalloc+0x2a/0x110 [ 1169.586994][T12182] ? __nla_parse+0x40/0x60 [ 1169.587028][T12182] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1169.587068][T12182] genl_family_rcv_msg_doit+0x22a/0x330 [ 1169.587099][T12182] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1169.587136][T12182] ? bpf_lsm_capable+0x9/0x20 [ 1169.587165][T12182] ? security_capable+0x7e/0x2c0 [ 1169.587198][T12182] genl_rcv_msg+0x61c/0x7a0 [ 1169.587227][T12182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.587247][T12182] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1169.587270][T12182] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.587309][T12182] netlink_rcv_skb+0x232/0x4b0 [ 1169.587338][T12182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.587361][T12182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1169.587408][T12182] ? down_read+0x272/0x2e0 [ 1169.587428][T12182] ? genl_rcv+0xd/0x40 [ 1169.587450][T12182] genl_rcv+0x28/0x40 [ 1169.587468][T12182] netlink_unicast+0x80f/0x9b0 [ 1169.587503][T12182] ? __pfx_netlink_unicast+0x10/0x10 [ 1169.587525][T12182] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1169.587553][T12182] ? netlink_sendmsg+0x650/0xb40 [ 1169.587579][T12182] ? skb_put+0x11b/0x210 [ 1169.587615][T12182] netlink_sendmsg+0x813/0xb40 [ 1169.587654][T12182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.587686][T12182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1169.587716][T12182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1169.587744][T12182] ____sys_sendmsg+0x972/0x9f0 [ 1169.587763][T12182] ? futex_unqueue+0x211/0x240 [ 1169.587796][T12182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1169.587827][T12182] ? import_iovec+0x73/0xa0 [ 1169.587862][T12182] ___sys_sendmsg+0x2a5/0x360 [ 1169.587890][T12182] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.587919][T12182] ? futex_wait+0x29a/0x380 [ 1169.587979][T12182] ? __fget_files+0x2a/0x420 [ 1169.588008][T12182] ? __fget_files+0x3a0/0x420 [ 1169.588051][T12182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1169.588081][T12182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1169.588113][T12182] ? rcu_is_watching+0x15/0xb0 [ 1169.588157][T12182] do_syscall_64+0x14d/0xf80 [ 1169.588176][T12182] ? trace_irq_disable+0x3b/0x150 [ 1169.588206][T12182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.588227][T12182] ? clear_bhb_loop+0x40/0x90 [ 1169.588254][T12182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.588275][T12182] RIP: 0033:0x7fccac39c799 [ 1169.588295][T12182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.588314][T12182] RSP: 002b:00007fccad331028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.588337][T12182] RAX: ffffffffffffffda RBX: 00007fccac615fa0 RCX: 00007fccac39c799 [ 1169.588353][T12182] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1169.588367][T12182] RBP: 00007fccac432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1169.588380][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.588393][T12182] R13: 00007fccac616038 R14: 00007fccac615fa0 R15: 00007ffc73396748 [ 1169.588429][T12182] [ 1170.195811][T12193] __nla_validate_parse: 6 callbacks suppressed [ 1170.195833][T12193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12821'. [ 1170.245409][T12193] netlink: 'syz.1.12821': attribute type 7 has an invalid length. [ 1170.254136][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12821'. [ 1170.402457][T12206] xt_SECMARK: invalid mode: 9 [ 1170.668013][T12225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1170.718161][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12831'. [ 1170.748046][T12221] netlink: 'syz.0.12824': attribute type 1 has an invalid length. [ 1170.756886][T12227] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1170.792338][T12222] syzkaller0: entered promiscuous mode [ 1170.814627][T12222] syzkaller0: entered allmulticast mode [ 1171.036496][T12237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12833'. [ 1171.337227][T12249] xt_SECMARK: invalid mode: 9 [ 1171.557566][T12257] bridge1: entered promiscuous mode [ 1171.576951][T12257] bridge1: entered allmulticast mode [ 1171.705603][T12264] netlink: 'syz.1.12844': attribute type 29 has an invalid length. [ 1171.721515][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12844'. [ 1171.750097][T12264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.773943][T12264] netlink: 'syz.1.12844': attribute type 29 has an invalid length. [ 1171.797744][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12844'. [ 1171.999297][T12277] xt_SECMARK: invalid mode: 9 [ 1172.112366][T12282] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12853'. [ 1172.150409][T12282] sctp: [Deprecated]: syz.0.12853 (pid 12282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1172.150409][T12282] Use struct sctp_sack_info instead [ 1172.435506][T12303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1172.544883][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12858'. [ 1172.739191][T12295] syzkaller0: entered promiscuous mode [ 1172.767884][T12295] syzkaller0: entered allmulticast mode [ 1172.891981][T12325] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12864'. [ 1172.993110][T12332] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1173.171011][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12869'. [ 1175.191053][T12339] ip6gre3: entered promiscuous mode [ 1175.208371][T12346] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1175.222824][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.230556][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.259865][T12346] bridge0: entered allmulticast mode [ 1175.526503][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12879'. [ 1175.558480][T12370] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1175.630559][T12375] xt_SECMARK: invalid mode: 9 [ 1175.734520][T12366] syzkaller0: entered promiscuous mode [ 1175.761940][T12366] syzkaller0: entered allmulticast mode [ 1175.817584][T12382] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1175.836061][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.0.12884 Not tainted syzkaller #0 PREEMPT(full) [ 1175.836092][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1175.836108][T12382] Call Trace: [ 1175.836118][T12382] [ 1175.836129][T12382] dump_stack_lvl+0xe8/0x150 [ 1175.836167][T12382] sysfs_warn_dup+0x8e/0xa0 [ 1175.836201][T12382] sysfs_do_create_link_sd+0xc0/0x110 [ 1175.836235][T12382] device_add_class_symlinks+0x1cf/0x240 [ 1175.836266][T12382] device_add+0x475/0xb70 [ 1175.836295][T12382] wiphy_register+0x1d73/0x2d50 [ 1175.836344][T12382] ? __pfx_wiphy_register+0x10/0x10 [ 1175.836373][T12382] ? __pfx_netdev_run_todo+0x10/0x10 [ 1175.836398][T12382] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1175.836431][T12382] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1175.836473][T12382] ieee80211_register_hw+0x3562/0x4200 [ 1175.836513][T12382] ? ieee80211_register_hw+0x1481/0x4200 [ 1175.836548][T12382] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1175.836593][T12382] ? __hrtimer_setup+0x181/0x200 [ 1175.836624][T12382] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1175.836656][T12382] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1175.836715][T12382] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1175.836739][T12382] ? kstrndup+0xbf/0x160 [ 1175.836779][T12382] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1175.836831][T12382] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1175.836879][T12382] ? rcu_is_watching+0x15/0xb0 [ 1175.836921][T12382] ? trace_kmalloc+0x2a/0x110 [ 1175.836950][T12382] ? __nla_parse+0x40/0x60 [ 1175.836993][T12382] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1175.837024][T12382] genl_family_rcv_msg_doit+0x22a/0x330 [ 1175.837053][T12382] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1175.837087][T12382] ? bpf_lsm_capable+0x9/0x20 [ 1175.837113][T12382] ? security_capable+0x7e/0x2c0 [ 1175.837147][T12382] genl_rcv_msg+0x61c/0x7a0 [ 1175.837174][T12382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1175.837193][T12382] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1175.837215][T12382] ? __lock_acquire+0x6b5/0x2cf0 [ 1175.837253][T12382] netlink_rcv_skb+0x232/0x4b0 [ 1175.837281][T12382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1175.837303][T12382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1175.837347][T12382] ? down_read+0x272/0x2e0 [ 1175.837367][T12382] ? genl_rcv+0xd/0x40 [ 1175.837388][T12382] genl_rcv+0x28/0x40 [ 1175.837406][T12382] netlink_unicast+0x80f/0x9b0 [ 1175.837439][T12382] ? __pfx_netlink_unicast+0x10/0x10 [ 1175.837461][T12382] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1175.837487][T12382] ? netlink_sendmsg+0x650/0xb40 [ 1175.837511][T12382] ? skb_put+0x11b/0x210 [ 1175.837545][T12382] netlink_sendmsg+0x813/0xb40 [ 1175.837582][T12382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.837613][T12382] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1175.837641][T12382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1175.837667][T12382] ____sys_sendmsg+0x972/0x9f0 [ 1175.837697][T12382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.837726][T12382] ? import_iovec+0x73/0xa0 [ 1175.837762][T12382] ___sys_sendmsg+0x2a5/0x360 [ 1175.837788][T12382] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.837815][T12382] ? futex_wake+0x4ac/0x580 [ 1175.837872][T12382] ? __fget_files+0x2a/0x420 [ 1175.837900][T12382] ? __fget_files+0x3a0/0x420 [ 1175.837942][T12382] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1175.837971][T12382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1175.838002][T12382] ? rcu_is_watching+0x15/0xb0 [ 1175.838044][T12382] do_syscall_64+0x14d/0xf80 [ 1175.838062][T12382] ? trace_irq_disable+0x3b/0x150 [ 1175.838091][T12382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.838112][T12382] ? clear_bhb_loop+0x40/0x90 [ 1175.838137][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.838157][T12382] RIP: 0033:0x7faed4f9c799 [ 1175.838177][T12382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.838194][T12382] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.838215][T12382] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1175.838230][T12382] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1175.838243][T12382] RBP: 00007faed5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1175.838255][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.838267][T12382] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1175.838301][T12382] [ 1176.342440][T12388] netlink: 'syz.1.12885': attribute type 1 has an invalid length. [ 1176.455881][T12388] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12885'. [ 1177.260588][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1177.266998][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1177.634431][T12436] sctp: [Deprecated]: syz.2.12892 (pid 12436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1177.634431][T12436] Use struct sctp_sack_info instead [ 1177.652521][T12436] sctp: [Deprecated]: syz.2.12892 (pid 12436) Use of int in max_burst socket option deprecated. [ 1177.652521][T12436] Use struct sctp_assoc_value instead [ 1178.733789][T12392] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1178.966719][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12895'. [ 1178.994745][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12894'. [ 1179.012184][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12896'. [ 1179.052479][T12451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12897'. [ 1179.103904][T12445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12896'. [ 1179.273516][T12452] syzkaller0: entered promiscuous mode [ 1179.279082][T12452] syzkaller0: entered allmulticast mode [ 1179.344646][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12899'. [ 1180.154860][T12481] FAULT_INJECTION: forcing a failure. [ 1180.154860][T12481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.180342][T12481] CPU: 1 UID: 0 PID: 12481 Comm: syz.0.12904 Not tainted syzkaller #0 PREEMPT(full) [ 1180.180371][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1180.180383][T12481] Call Trace: [ 1180.180392][T12481] [ 1180.180400][T12481] dump_stack_lvl+0xe8/0x150 [ 1180.180433][T12481] should_fail_ex+0x412/0x560 [ 1180.180463][T12481] _copy_from_user+0x2d/0xb0 [ 1180.180495][T12481] ___sys_sendmsg+0x1c6/0x360 [ 1180.180521][T12481] ? __pfx____sys_sendmsg+0x10/0x10 [ 1180.180581][T12481] ? __fget_files+0x2a/0x420 [ 1180.180609][T12481] ? __fget_files+0x3a0/0x420 [ 1180.180647][T12481] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1180.180669][T12481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1180.180698][T12481] ? __pfx_ksys_write+0x10/0x10 [ 1180.180730][T12481] do_syscall_64+0x14d/0xf80 [ 1180.180747][T12481] ? trace_irq_disable+0x3b/0x150 [ 1180.180775][T12481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.180795][T12481] ? clear_bhb_loop+0x40/0x90 [ 1180.180819][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.180839][T12481] RIP: 0033:0x7faed4f9c799 [ 1180.180857][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.180873][T12481] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.180894][T12481] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1180.180908][T12481] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1180.180919][T12481] RBP: 00007faed5ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.180931][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.180943][T12481] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1180.180974][T12481] [ 1180.440486][T12483] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1182.239205][T12506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12911'. [ 1182.285612][T12509] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12910'. [ 1182.736927][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12917'. [ 1182.758019][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12918'. [ 1182.782109][T12529] netlink: 'syz.1.12917': attribute type 30 has an invalid length. [ 1182.809982][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12917'. [ 1182.851998][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 1182.860210][ C0] lec:lec_tx_timeout: lec0 [ 1182.865551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1183.223690][T12546] netlink: 'syz.2.12922': attribute type 4 has an invalid length. [ 1183.314101][T12549] syzkaller0: entered promiscuous mode [ 1183.319718][T12549] syzkaller0: entered allmulticast mode [ 1183.472674][T12553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12924'. [ 1183.493209][T12557] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1183.542766][T12565] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12928'. [ 1183.729865][T12576] : renamed from hsr0 (while UP) [ 1183.851379][T12583] netlink: 'syz.4.12934': attribute type 1 has an invalid length. [ 1183.880460][T12587] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1183.898458][T12587] CPU: 0 UID: 0 PID: 12587 Comm: syz.0.12936 Not tainted syzkaller #0 PREEMPT(full) [ 1183.898488][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1183.898501][T12587] Call Trace: [ 1183.898511][T12587] [ 1183.898521][T12587] dump_stack_lvl+0xe8/0x150 [ 1183.898558][T12587] sysfs_warn_dup+0x8e/0xa0 [ 1183.898590][T12587] sysfs_do_create_link_sd+0xc0/0x110 [ 1183.898623][T12587] device_add_class_symlinks+0x1cf/0x240 [ 1183.898653][T12587] device_add+0x475/0xb70 [ 1183.898680][T12587] wiphy_register+0x1d73/0x2d50 [ 1183.898736][T12587] ? __pfx_wiphy_register+0x10/0x10 [ 1183.898765][T12587] ? __pfx_netdev_run_todo+0x10/0x10 [ 1183.898789][T12587] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1183.898821][T12587] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1183.898860][T12587] ieee80211_register_hw+0x3562/0x4200 [ 1183.898899][T12587] ? ieee80211_register_hw+0x1481/0x4200 [ 1183.898933][T12587] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1183.898975][T12587] ? __hrtimer_setup+0x181/0x200 [ 1183.899004][T12587] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1183.899034][T12587] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1183.899089][T12587] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1183.899110][T12587] ? kstrndup+0xbf/0x160 [ 1183.899150][T12587] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1183.899198][T12587] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1183.899231][T12587] ? rcu_is_watching+0x15/0xb0 [ 1183.899264][T12587] ? trace_kmalloc+0x2a/0x110 [ 1183.899293][T12587] ? __nla_parse+0x40/0x60 [ 1183.899328][T12587] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1183.899360][T12587] genl_family_rcv_msg_doit+0x22a/0x330 [ 1183.899390][T12587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1183.899427][T12587] ? bpf_lsm_capable+0x9/0x20 [ 1183.899454][T12587] ? security_capable+0x7e/0x2c0 [ 1183.899487][T12587] genl_rcv_msg+0x61c/0x7a0 [ 1183.899514][T12587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1183.899535][T12587] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1183.899558][T12587] ? __lock_acquire+0x6b5/0x2cf0 [ 1183.899594][T12587] netlink_rcv_skb+0x232/0x4b0 [ 1183.899622][T12587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1183.899645][T12587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1183.899693][T12587] ? down_read+0x272/0x2e0 [ 1183.899712][T12587] ? genl_rcv+0xd/0x40 [ 1183.899743][T12587] genl_rcv+0x28/0x40 [ 1183.899761][T12587] netlink_unicast+0x80f/0x9b0 [ 1183.899796][T12587] ? __pfx_netlink_unicast+0x10/0x10 [ 1183.899820][T12587] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1183.899848][T12587] ? netlink_sendmsg+0x650/0xb40 [ 1183.899872][T12587] ? skb_put+0x11b/0x210 [ 1183.899908][T12587] netlink_sendmsg+0x813/0xb40 [ 1183.899948][T12587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.899980][T12587] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1183.900009][T12587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1183.900036][T12587] ____sys_sendmsg+0x972/0x9f0 [ 1183.900054][T12587] ? futex_unqueue+0x211/0x240 [ 1183.900087][T12587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1183.900119][T12587] ? import_iovec+0x73/0xa0 [ 1183.900156][T12587] ___sys_sendmsg+0x2a5/0x360 [ 1183.900183][T12587] ? __pfx____sys_sendmsg+0x10/0x10 [ 1183.900213][T12587] ? futex_wait+0x29a/0x380 [ 1183.900273][T12587] ? __fget_files+0x2a/0x420 [ 1183.900303][T12587] ? __fget_files+0x3a0/0x420 [ 1183.900345][T12587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1183.900369][T12587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1183.900400][T12587] ? rcu_is_watching+0x15/0xb0 [ 1183.900453][T12587] do_syscall_64+0x14d/0xf80 [ 1183.900471][T12587] ? trace_irq_disable+0x3b/0x150 [ 1183.900500][T12587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.900521][T12587] ? clear_bhb_loop+0x40/0x90 [ 1183.900546][T12587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.900565][T12587] RIP: 0033:0x7faed4f9c799 [ 1183.900584][T12587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.900601][T12587] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.900622][T12587] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1183.900637][T12587] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1183.900650][T12587] RBP: 00007faed5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1183.900662][T12587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.900674][T12587] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1183.900706][T12587] [ 1184.382109][T12583] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1184.686773][T12597] xt_SECMARK: invalid mode: 9 [ 1184.768287][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12940'. [ 1184.830656][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12941'. [ 1184.875265][T12603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12942'. [ 1187.692872][T12654] __nla_validate_parse: 5 callbacks suppressed [ 1187.692913][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12961'. [ 1187.881118][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1187.889299][ C0] lec:lec_tx_timeout: lec0 [ 1188.075638][T12674] netlink: 'syz.0.12970': attribute type 2 has an invalid length. [ 1188.120468][T12674] netlink: 'syz.0.12970': attribute type 1 has an invalid length. [ 1188.192948][T12679] delete_channel: no stack [ 1188.309082][T12687] netlink: 'syz.0.12976': attribute type 1 has an invalid length. [ 1188.357276][T12692] netlink: zone id is out of range [ 1188.367522][T12692] netlink: zone id is out of range [ 1188.391946][T12692] netlink: zone id is out of range [ 1188.397203][T12692] netlink: zone id is out of range [ 1188.410031][T12692] netlink: zone id is out of range [ 1188.423060][T12687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1188.430031][T12692] netlink: zone id is out of range [ 1188.435567][T12692] netlink: zone id is out of range [ 1188.467296][T12692] netlink: zone id is out of range [ 1188.474519][T12695] bond5: entered allmulticast mode [ 1188.479855][T12692] netlink: zone id is out of range [ 1188.487562][T12692] netlink: zone id is out of range [ 1188.626892][T12687] bond5: (slave ip6gretap1): making interface the new active one [ 1188.641332][T12687] ip6gretap1: entered allmulticast mode [ 1188.653412][T12687] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1188.802381][T12702] netlink: 'syz.3.12981': attribute type 2 has an invalid length. [ 1189.038056][T12716] netlink: 2292 bytes leftover after parsing attributes in process `syz.0.12987'. [ 1189.048129][T12716] netlink: 2292 bytes leftover after parsing attributes in process `syz.0.12987'. [ 1189.935262][T12737] xt_hashlimit: size too large, truncated to 1048576 [ 1191.392940][T12709] pimreg1: tun_chr_ioctl cmd 2147767507 [ 1191.399438][T12724] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12991'. [ 1191.718656][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13004'. [ 1191.916696][T12770] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13009'. [ 1192.118923][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.141291][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.166517][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.233468][T12780] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1192.289951][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.315776][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.344308][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.372118][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.402126][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.423552][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.453590][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.468002][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.481852][T12789] xt_SECMARK: invalid mode: 9 [ 1192.493073][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.520217][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.537275][T12780] wg1 speed is unknown, defaulting to 1000 [ 1192.806427][T12799] netlink: 'syz.1.13020': attribute type 29 has an invalid length. [ 1192.882160][T12803] netlink: 'syz.4.13021': attribute type 1 has an invalid length. [ 1192.891461][T12803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.920549][T12801] netlink: 'syz.1.13020': attribute type 29 has an invalid length. [ 1192.999562][T12799] netlink: 500 bytes leftover after parsing attributes in process `syz.1.13020'. [ 1193.662307][T12841] netlink: 'syz.2.13035': attribute type 1 has an invalid length. [ 1193.715544][T12834] netlink: 84 bytes leftover after parsing attributes in process `syz.2.13035'. [ 1194.054969][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13042'. [ 1194.317313][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13050'. [ 1194.517770][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13053'. [ 1194.683076][T12903] FAULT_INJECTION: forcing a failure. [ 1194.683076][T12903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.707244][T12897] bond5: Unable to set down delay as MII monitoring is disabled [ 1194.709443][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13060'. [ 1194.731040][T12903] CPU: 1 UID: 0 PID: 12903 Comm: syz.0.13061 Not tainted syzkaller #0 PREEMPT(full) [ 1194.731064][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1194.731077][T12903] Call Trace: [ 1194.731088][T12903] [ 1194.731097][T12903] dump_stack_lvl+0xe8/0x150 [ 1194.731128][T12903] should_fail_ex+0x412/0x560 [ 1194.731158][T12903] _copy_from_user+0x2d/0xb0 [ 1194.731189][T12903] ___sys_sendmsg+0x1c6/0x360 [ 1194.731214][T12903] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.731266][T12903] ? __fget_files+0x2a/0x420 [ 1194.731294][T12903] ? __fget_files+0x3a0/0x420 [ 1194.731332][T12903] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1194.731354][T12903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1194.731382][T12903] ? __pfx_ksys_write+0x10/0x10 [ 1194.731415][T12903] do_syscall_64+0x14d/0xf80 [ 1194.731433][T12903] ? trace_irq_disable+0x3b/0x150 [ 1194.731460][T12903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.731479][T12903] ? clear_bhb_loop+0x40/0x90 [ 1194.731502][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.731522][T12903] RIP: 0033:0x7faed4f9c799 [ 1194.731541][T12903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.731558][T12903] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.731578][T12903] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1194.731593][T12903] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1194.731605][T12903] RBP: 00007faed5ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.731618][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.731630][T12903] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1194.731660][T12903] [ 1194.911089][T12897] bond5 (unregistering): Released all slaves [ 1194.917377][T12909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13060'. [ 1195.018079][T12900] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1195.066137][T12906] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 1195.123745][T12914] syzkaller0: entered promiscuous mode [ 1195.129458][T12914] syzkaller0: entered allmulticast mode [ 1195.144045][T12914] netlink: 'syz.1.13064': attribute type 1 has an invalid length. [ 1195.152284][T12913] netlink: 'syz.1.13064': attribute type 1 has an invalid length. [ 1196.605370][T12984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13088'. [ 1197.111065][T12996] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1197.135894][T13001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13095'. [ 1197.148248][T12996] syzkaller0: entered promiscuous mode [ 1197.163226][T12996] syzkaller0: entered allmulticast mode [ 1197.343131][T13008] syzkaller0: entered promiscuous mode [ 1197.370411][T13008] syzkaller0: entered allmulticast mode [ 1197.715633][T13023] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.13101'. [ 1201.543230][T13071] syzkaller0: entered promiscuous mode [ 1201.581894][T13071] syzkaller0: entered allmulticast mode [ 1201.878603][T13095] FAULT_INJECTION: forcing a failure. [ 1201.878603][T13095] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.891419][T13095] CPU: 0 UID: 0 PID: 13095 Comm: syz.3.13127 Not tainted syzkaller #0 PREEMPT(full) [ 1201.891442][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1201.891453][T13095] Call Trace: [ 1201.891461][T13095] [ 1201.891469][T13095] dump_stack_lvl+0xe8/0x150 [ 1201.891497][T13095] should_fail_ex+0x412/0x560 [ 1201.891525][T13095] should_failslab+0xa8/0x100 [ 1201.891547][T13095] ? skb_clone+0x212/0x3a0 [ 1201.891565][T13095] kmem_cache_alloc_noprof+0x87/0x650 [ 1201.891590][T13095] skb_clone+0x212/0x3a0 [ 1201.891610][T13095] bpf_clone_redirect+0x16a/0x4b0 [ 1201.891641][T13095] ? bpf_test_run+0x1d1/0x830 [ 1201.891664][T13095] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 1201.891683][T13095] ? __lock_acquire+0x6b5/0x2cf0 [ 1201.891724][T13095] ? ktime_get+0x45/0x200 [ 1201.891742][T13095] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1201.891759][T13095] ? lockdep_hardirqs_on+0x7a/0x110 [ 1201.891785][T13095] ? ktime_get+0x45/0x200 [ 1201.891798][T13095] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1201.891816][T13095] ? read_tsc+0x9/0x20 [ 1201.891835][T13095] ? ktime_get+0x1d2/0x200 [ 1201.891856][T13095] bpf_test_run+0x354/0x830 [ 1201.891896][T13095] ? __pfx_bpf_test_run+0x10/0x10 [ 1201.891926][T13095] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1201.891943][T13095] ? slab_build_skb+0x52/0x410 [ 1201.891967][T13095] ? __kasan_krealloc+0xeb/0x110 [ 1201.891987][T13095] ? eth_type_trans+0x35e/0x6d0 [ 1201.892019][T13095] ? convert___skb_to_skb+0x3d/0x5b0 [ 1201.892043][T13095] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1201.892076][T13095] ? __fget_files+0x2a/0x420 [ 1201.892100][T13095] ? __fget_files+0x3a0/0x420 [ 1201.892135][T13095] ? __fget_files+0x2a/0x420 [ 1201.892164][T13095] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1201.892187][T13095] bpf_prog_test_run+0x2c7/0x340 [ 1201.892208][T13095] __sys_bpf+0x643/0x950 [ 1201.892236][T13095] ? __pfx___sys_bpf+0x10/0x10 [ 1201.892276][T13095] ? ksys_write+0x242/0x270 [ 1201.892297][T13095] ? __pfx_ksys_write+0x10/0x10 [ 1201.892322][T13095] __x64_sys_bpf+0x7c/0x90 [ 1201.892346][T13095] do_syscall_64+0x14d/0xf80 [ 1201.892362][T13095] ? trace_irq_disable+0x3b/0x150 [ 1201.892387][T13095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.892405][T13095] ? clear_bhb_loop+0x40/0x90 [ 1201.892427][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.892445][T13095] RIP: 0033:0x7f61bab9c799 [ 1201.892461][T13095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.892476][T13095] RSP: 002b:00007f61bb9a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1201.892495][T13095] RAX: ffffffffffffffda RBX: 00007f61bae15fa0 RCX: 00007f61bab9c799 [ 1201.892508][T13095] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1201.892518][T13095] RBP: 00007f61bb9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.892529][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.892539][T13095] R13: 00007f61bae16038 R14: 00007f61bae15fa0 R15: 00007ffe392ba778 [ 1201.892567][T13095] [ 1204.420768][T13093] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13125'. [ 1204.423679][T13089] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1204.442219][T13089] bridge0: entered allmulticast mode [ 1204.575639][T13117] netlink: 'syz.4.13132': attribute type 1 has an invalid length. [ 1204.601495][T13116] netlink: 'syz.4.13132': attribute type 1 has an invalid length. [ 1204.802764][T13125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13135'. [ 1204.841324][T13125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13135'. [ 1204.871196][T13125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13135'. [ 1204.913054][T13131] netlink: 'syz.2.13139': attribute type 1 has an invalid length. [ 1205.082748][T13131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1205.107752][T13142] FAULT_INJECTION: forcing a failure. [ 1205.107752][T13142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.168445][T13142] CPU: 0 UID: 0 PID: 13142 Comm: syz.0.13142 Not tainted syzkaller #0 PREEMPT(full) [ 1205.168473][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1205.168486][T13142] Call Trace: [ 1205.168495][T13142] [ 1205.168504][T13142] dump_stack_lvl+0xe8/0x150 [ 1205.168537][T13142] should_fail_ex+0x412/0x560 [ 1205.168569][T13142] _copy_to_user+0x31/0xb0 [ 1205.168603][T13142] simple_read_from_buffer+0xe1/0x170 [ 1205.168636][T13142] proc_fail_nth_read+0x1bb/0x230 [ 1205.168669][T13142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1205.168710][T13142] ? rw_verify_area+0x2a6/0x4d0 [ 1205.168730][T13142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1205.168760][T13142] vfs_read+0x20c/0xa70 [ 1205.168779][T13142] ? fdget_pos+0x246/0x320 [ 1205.168814][T13142] ? __pfx___mutex_lock+0x10/0x10 [ 1205.168835][T13142] ? __pfx_vfs_read+0x10/0x10 [ 1205.168858][T13142] ? __fget_files+0x2a/0x420 [ 1205.168891][T13142] ? __fget_files+0x3a0/0x420 [ 1205.168918][T13142] ? __fget_files+0x2a/0x420 [ 1205.168966][T13142] ksys_read+0x150/0x270 [ 1205.168988][T13142] ? __pfx_ksys_read+0x10/0x10 [ 1205.169020][T13142] do_syscall_64+0x14d/0xf80 [ 1205.169036][T13142] ? trace_irq_disable+0x3b/0x150 [ 1205.169064][T13142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.169082][T13142] ? clear_bhb_loop+0x40/0x90 [ 1205.169106][T13142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.169125][T13142] RIP: 0033:0x7faed4f5cfce [ 1205.169143][T13142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1205.169160][T13142] RSP: 002b:00007faed5ee8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1205.169181][T13142] RAX: ffffffffffffffda RBX: 00007faed5ee96c0 RCX: 00007faed4f5cfce [ 1205.169195][T13142] RDX: 000000000000000f RSI: 00007faed5ee90a0 RDI: 0000000000000003 [ 1205.169208][T13142] RBP: 00007faed5ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.169219][T13142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.169231][T13142] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1205.169262][T13142] [ 1205.381848][T13145] xt_hashlimit: size too large, truncated to 1048576 [ 1205.596297][T13147] : renamed from vxcan1 (while UP) [ 1206.024619][T13169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13149'. [ 1207.070289][T13186] netlink: 'syz.0.13155': attribute type 8 has an invalid length. [ 1207.079143][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13155'. [ 1207.129385][T13186] bond0: entered promiscuous mode [ 1207.157694][T13192] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13158'. [ 1207.168552][T13186] bond_slave_0: entered promiscuous mode [ 1207.175902][T13186] bond_slave_1: entered promiscuous mode [ 1207.184087][T13192] netlink: 'syz.3.13158': attribute type 1 has an invalid length. [ 1207.194508][T13186] bond0: left promiscuous mode [ 1207.199374][T13192] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13158'. [ 1207.209179][T13186] bond_slave_0: left promiscuous mode [ 1207.215017][T13186] bond_slave_1: left promiscuous mode [ 1207.250408][T13194] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13157'. [ 1207.425183][T13198] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1207.455034][T13198] bond4 (unregistering): Released all slaves [ 1207.659467][T13201] FAULT_INJECTION: forcing a failure. [ 1207.659467][T13201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.678178][T13201] CPU: 0 UID: 0 PID: 13201 Comm: syz.3.13161 Not tainted syzkaller #0 PREEMPT(full) [ 1207.678207][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1207.678222][T13201] Call Trace: [ 1207.678231][T13201] [ 1207.678240][T13201] dump_stack_lvl+0xe8/0x150 [ 1207.678278][T13201] should_fail_ex+0x412/0x560 [ 1207.678312][T13201] _copy_to_user+0x31/0xb0 [ 1207.678349][T13201] bpf_test_finish+0x53c/0x6b0 [ 1207.678388][T13201] ? __pfx_bpf_test_finish+0x10/0x10 [ 1207.678428][T13201] ? _copy_from_user+0x94/0xb0 [ 1207.678461][T13201] ? bpf_test_init+0x113/0x150 [ 1207.678498][T13201] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1207.678559][T13201] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1207.678590][T13201] ? __fget_files+0x2a/0x420 [ 1207.678622][T13201] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1207.678649][T13201] bpf_prog_test_run+0x2c7/0x340 [ 1207.678672][T13201] __sys_bpf+0x643/0x950 [ 1207.678702][T13201] ? __pfx___sys_bpf+0x10/0x10 [ 1207.678744][T13201] ? ksys_write+0x242/0x270 [ 1207.678767][T13201] ? __pfx_ksys_write+0x10/0x10 [ 1207.678795][T13201] __x64_sys_bpf+0x7c/0x90 [ 1207.678821][T13201] do_syscall_64+0x14d/0xf80 [ 1207.678838][T13201] ? trace_irq_disable+0x3b/0x150 [ 1207.678866][T13201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.678885][T13201] ? clear_bhb_loop+0x40/0x90 [ 1207.678908][T13201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.678927][T13201] RIP: 0033:0x7f61bab9c799 [ 1207.678945][T13201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.678961][T13201] RSP: 002b:00007f61bb9a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1207.678981][T13201] RAX: ffffffffffffffda RBX: 00007f61bae15fa0 RCX: 00007f61bab9c799 [ 1207.678996][T13201] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1207.679008][T13201] RBP: 00007f61bb9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.679020][T13201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.679031][T13201] R13: 00007f61bae16038 R14: 00007f61bae15fa0 R15: 00007ffe392ba778 [ 1207.679061][T13201] [ 1208.087825][T13218] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1208.099776][T13218] CPU: 0 UID: 0 PID: 13218 Comm: syz.4.13168 Not tainted syzkaller #0 PREEMPT(full) [ 1208.099803][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1208.099817][T13218] Call Trace: [ 1208.099826][T13218] [ 1208.099836][T13218] dump_stack_lvl+0xe8/0x150 [ 1208.099872][T13218] sysfs_warn_dup+0x8e/0xa0 [ 1208.099902][T13218] sysfs_do_create_link_sd+0xc0/0x110 [ 1208.099933][T13218] device_add_class_symlinks+0x1cf/0x240 [ 1208.099961][T13218] device_add+0x475/0xb70 [ 1208.099983][T13218] wiphy_register+0x1d73/0x2d50 [ 1208.100020][T13218] ? __pfx_wiphy_register+0x10/0x10 [ 1208.100042][T13218] ? __pfx_netdev_run_todo+0x10/0x10 [ 1208.100061][T13218] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1208.100086][T13218] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1208.100116][T13218] ieee80211_register_hw+0x3562/0x4200 [ 1208.100145][T13218] ? ieee80211_register_hw+0x1481/0x4200 [ 1208.100171][T13218] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1208.100202][T13218] ? __hrtimer_setup+0x181/0x200 [ 1208.100225][T13218] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1208.100249][T13218] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1208.100291][T13218] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1208.100307][T13218] ? kstrndup+0xbf/0x160 [ 1208.100337][T13218] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1208.100373][T13218] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1208.100399][T13218] ? rcu_is_watching+0x15/0xb0 [ 1208.100422][T13218] ? trace_kmalloc+0x2a/0x110 [ 1208.100454][T13218] ? __nla_parse+0x40/0x60 [ 1208.100482][T13218] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1208.100509][T13218] genl_family_rcv_msg_doit+0x22a/0x330 [ 1208.100532][T13218] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1208.100561][T13218] ? bpf_lsm_capable+0x9/0x20 [ 1208.100595][T13218] ? security_capable+0x7e/0x2c0 [ 1208.100620][T13218] genl_rcv_msg+0x61c/0x7a0 [ 1208.100641][T13218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.100655][T13218] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1208.100672][T13218] ? __lock_acquire+0x6b5/0x2cf0 [ 1208.100702][T13218] netlink_rcv_skb+0x232/0x4b0 [ 1208.100723][T13218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.100739][T13218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1208.100774][T13218] ? down_read+0x272/0x2e0 [ 1208.100789][T13218] ? genl_rcv+0xd/0x40 [ 1208.100805][T13218] genl_rcv+0x28/0x40 [ 1208.100818][T13218] netlink_unicast+0x80f/0x9b0 [ 1208.100843][T13218] ? __pfx_netlink_unicast+0x10/0x10 [ 1208.100859][T13218] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1208.100879][T13218] ? netlink_sendmsg+0x650/0xb40 [ 1208.100898][T13218] ? skb_put+0x11b/0x210 [ 1208.100925][T13218] netlink_sendmsg+0x813/0xb40 [ 1208.100954][T13218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.100978][T13218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1208.101001][T13218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1208.101020][T13218] ____sys_sendmsg+0x972/0x9f0 [ 1208.101034][T13218] ? futex_unqueue+0x211/0x240 [ 1208.101058][T13218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.101083][T13218] ? import_iovec+0x73/0xa0 [ 1208.101121][T13218] ___sys_sendmsg+0x2a5/0x360 [ 1208.101147][T13218] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.101174][T13218] ? futex_wait+0x29a/0x380 [ 1208.101228][T13218] ? __fget_files+0x2a/0x420 [ 1208.101256][T13218] ? __fget_files+0x3a0/0x420 [ 1208.101295][T13218] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1208.101318][T13218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1208.101347][T13218] ? rcu_is_watching+0x15/0xb0 [ 1208.101388][T13218] do_syscall_64+0x14d/0xf80 [ 1208.101405][T13218] ? trace_irq_disable+0x3b/0x150 [ 1208.101433][T13218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.101460][T13218] ? clear_bhb_loop+0x40/0x90 [ 1208.101485][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.101505][T13218] RIP: 0033:0x7f0acdd9c799 [ 1208.101524][T13218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.101541][T13218] RSP: 002b:00007f0acebfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.101562][T13218] RAX: ffffffffffffffda RBX: 00007f0ace015fa0 RCX: 00007f0acdd9c799 [ 1208.101577][T13218] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1208.101590][T13218] RBP: 00007f0acde32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1208.101603][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.101615][T13218] R13: 00007f0ace016038 R14: 00007f0ace015fa0 R15: 00007fffc6293608 [ 1208.101649][T13218] [ 1208.283684][T13220] netlink: 'syz.3.13167': attribute type 1 has an invalid length. [ 1208.846353][T13243] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13173'. [ 1209.319063][T13257] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1209.397602][T13257] bond5 (unregistering): Released all slaves [ 1209.875908][T13279] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13184'. [ 1210.043312][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13189'. [ 1210.075327][T13295] netlink: 204 bytes leftover after parsing attributes in process `syz.1.13188'. [ 1210.207325][T13299] net_ratelimit: 6 callbacks suppressed [ 1210.207345][T13299] openvswitch: netlink: Message has 4 unknown bytes. [ 1210.247087][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13193'. [ 1210.269199][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13194'. [ 1210.307467][T13306] openvswitch: netlink: EtherType 0 is less than min 600 [ 1210.311006][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13193'. [ 1210.435458][T13308] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1210.502609][T13313] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13197'. [ 1210.767407][T13325] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13202'. [ 1210.880149][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13204'. [ 1210.955191][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13205'. [ 1211.167880][T13337] netlink: 'syz.1.13207': attribute type 1 has an invalid length. [ 1211.528413][T13360] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1211.630842][T13363] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1211.795622][T13379] syzkaller0: entered promiscuous mode [ 1211.813447][T13379] syzkaller0: entered allmulticast mode [ 1211.822585][T13381] xt_hashlimit: size too large, truncated to 1048576 [ 1211.837140][T13380] xt_hashlimit: size too large, truncated to 1048576 [ 1212.455262][T13402] tipc: Started in network mode [ 1212.469221][T13402] tipc: Node identity 06ce705eaa62, cluster identity 4711 [ 1212.485554][T13402] tipc: Enabled bearer , priority 0 [ 1212.526053][T13408] netlink: 'syz.4.13229': attribute type 32 has an invalid length. [ 1212.565159][T13412] netlink: 'syz.4.13229': attribute type 32 has an invalid length. [ 1212.592821][T13403] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1212.607859][T13413] netlink: 'syz.1.13228': attribute type 1 has an invalid length. [ 1212.617178][T13413] netlink: 'syz.1.13228': attribute type 3 has an invalid length. [ 1212.643807][T13403] bond6 (unregistering): Released all slaves [ 1212.721575][T13409] veth0_macvtap: entered allmulticast mode [ 1212.853732][T13422] netlink: 'syz.4.13231': attribute type 7 has an invalid length. [ 1212.935045][T13414] tipc: Disabling bearer [ 1213.104573][T13432] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1213.144032][T13432] CPU: 1 UID: 0 PID: 13432 Comm: syz.0.13235 Not tainted syzkaller #0 PREEMPT(full) [ 1213.144065][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1213.144081][T13432] Call Trace: [ 1213.144091][T13432] [ 1213.144101][T13432] dump_stack_lvl+0xe8/0x150 [ 1213.144142][T13432] sysfs_warn_dup+0x8e/0xa0 [ 1213.144177][T13432] sysfs_do_create_link_sd+0xc0/0x110 [ 1213.144214][T13432] device_add_class_symlinks+0x1cf/0x240 [ 1213.144245][T13432] device_add+0x475/0xb70 [ 1213.144275][T13432] wiphy_register+0x1d73/0x2d50 [ 1213.144328][T13432] ? __pfx_wiphy_register+0x10/0x10 [ 1213.144358][T13432] ? __pfx_netdev_run_todo+0x10/0x10 [ 1213.144384][T13432] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1213.144419][T13432] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1213.144474][T13432] ieee80211_register_hw+0x3562/0x4200 [ 1213.144513][T13432] ? ieee80211_register_hw+0x1481/0x4200 [ 1213.144549][T13432] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1213.144602][T13432] ? __hrtimer_setup+0x181/0x200 [ 1213.144630][T13432] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1213.144659][T13432] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1213.144713][T13432] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1213.144734][T13432] ? kstrndup+0xbf/0x160 [ 1213.144773][T13432] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1213.144820][T13432] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1213.144853][T13432] ? rcu_is_watching+0x15/0xb0 [ 1213.144883][T13432] ? trace_kmalloc+0x2a/0x110 [ 1213.144914][T13432] ? __nla_parse+0x40/0x60 [ 1213.144960][T13432] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1213.144992][T13432] genl_family_rcv_msg_doit+0x22a/0x330 [ 1213.145023][T13432] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1213.145059][T13432] ? bpf_lsm_capable+0x9/0x20 [ 1213.145088][T13432] ? security_capable+0x7e/0x2c0 [ 1213.145121][T13432] genl_rcv_msg+0x61c/0x7a0 [ 1213.145150][T13432] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.145170][T13432] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1213.145194][T13432] ? __lock_acquire+0x6b5/0x2cf0 [ 1213.145233][T13432] netlink_rcv_skb+0x232/0x4b0 [ 1213.145261][T13432] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.145283][T13432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1213.145328][T13432] ? down_read+0x272/0x2e0 [ 1213.145350][T13432] ? genl_rcv+0xd/0x40 [ 1213.145372][T13432] genl_rcv+0x28/0x40 [ 1213.145389][T13432] netlink_unicast+0x80f/0x9b0 [ 1213.145424][T13432] ? __pfx_netlink_unicast+0x10/0x10 [ 1213.145447][T13432] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1213.145475][T13432] ? netlink_sendmsg+0x650/0xb40 [ 1213.145502][T13432] ? skb_put+0x11b/0x210 [ 1213.145536][T13432] netlink_sendmsg+0x813/0xb40 [ 1213.145576][T13432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.145609][T13432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1213.145639][T13432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1213.145668][T13432] ____sys_sendmsg+0x972/0x9f0 [ 1213.145705][T13432] ? futex_unqueue+0x211/0x240 [ 1213.145741][T13432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.145775][T13432] ? import_iovec+0x73/0xa0 [ 1213.145815][T13432] ___sys_sendmsg+0x2a5/0x360 [ 1213.145844][T13432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.145875][T13432] ? futex_wait+0x29a/0x380 [ 1213.145949][T13432] ? __fget_files+0x2a/0x420 [ 1213.145983][T13432] ? __fget_files+0x3a0/0x420 [ 1213.146028][T13432] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1213.146055][T13432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1213.146087][T13432] ? rcu_is_watching+0x15/0xb0 [ 1213.146134][T13432] do_syscall_64+0x14d/0xf80 [ 1213.146153][T13432] ? trace_irq_disable+0x3b/0x150 [ 1213.146185][T13432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.146209][T13432] ? clear_bhb_loop+0x40/0x90 [ 1213.146236][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.146258][T13432] RIP: 0033:0x7faed4f9c799 [ 1213.146279][T13432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.146301][T13432] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.146325][T13432] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1213.146342][T13432] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1213.146358][T13432] RBP: 00007faed5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1213.146372][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.146386][T13432] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1213.146424][T13432] [ 1214.426636][T13479] x_tables: duplicate underflow at hook 3 [ 1214.954632][T13504] __nla_validate_parse: 14 callbacks suppressed [ 1214.954653][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13262'. [ 1215.035853][T13510] netlink: 404 bytes leftover after parsing attributes in process `syz.2.13264'. [ 1215.045378][T13508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13263'. [ 1215.163353][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13266'. [ 1215.491781][T13535] x_tables: duplicate underflow at hook 1 [ 1215.555987][T13544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13276'. [ 1215.577833][T13543] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1215.732033][T13542] netlink: 'syz.2.13275': attribute type 25 has an invalid length. [ 1215.752072][T13542] netlink: 'syz.2.13275': attribute type 9 has an invalid length. [ 1215.773240][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13280'. [ 1215.822094][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13280'. [ 1215.900815][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13280'. [ 1215.917157][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13280'. [ 1216.115886][T13567] ip6tnl3: entered allmulticast mode [ 1216.151952][T13567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13285'. [ 1216.305845][T13582] FAULT_INJECTION: forcing a failure. [ 1216.305845][T13582] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.362366][T13582] CPU: 0 UID: 0 PID: 13582 Comm: syz.0.13290 Not tainted syzkaller #0 PREEMPT(full) [ 1216.362396][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1216.362409][T13582] Call Trace: [ 1216.362418][T13582] [ 1216.362426][T13582] dump_stack_lvl+0xe8/0x150 [ 1216.362459][T13582] should_fail_ex+0x412/0x560 [ 1216.362490][T13582] should_failslab+0xa8/0x100 [ 1216.362519][T13582] __kmalloc_cache_noprof+0x88/0x660 [ 1216.362543][T13582] ? nfnetlink_rcv+0xfe1/0x27b0 [ 1216.362574][T13582] nfnetlink_rcv+0xfe1/0x27b0 [ 1216.362634][T13582] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1216.362686][T13582] ? ref_tracker_free+0x693/0x840 [ 1216.362739][T13582] ? __netlink_deliver_tap+0x807/0x850 [ 1216.362764][T13582] ? netlink_deliver_tap+0x2e/0x1b0 [ 1216.362816][T13582] netlink_unicast+0x80f/0x9b0 [ 1216.362847][T13582] ? __pfx_netlink_unicast+0x10/0x10 [ 1216.362872][T13582] ? netlink_sendmsg+0x650/0xb40 [ 1216.362896][T13582] ? skb_put+0x11b/0x210 [ 1216.362928][T13582] netlink_sendmsg+0x813/0xb40 [ 1216.362963][T13582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.362992][T13582] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1216.363019][T13582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1216.363044][T13582] ____sys_sendmsg+0x972/0x9f0 [ 1216.363073][T13582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1216.363105][T13582] ? import_iovec+0x73/0xa0 [ 1216.363137][T13582] ___sys_sendmsg+0x2a5/0x360 [ 1216.363162][T13582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1216.363234][T13582] ? __fget_files+0x2a/0x420 [ 1216.363262][T13582] ? __fget_files+0x3a0/0x420 [ 1216.363301][T13582] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1216.363324][T13582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1216.363355][T13582] ? __pfx_ksys_write+0x10/0x10 [ 1216.363388][T13582] do_syscall_64+0x14d/0xf80 [ 1216.363408][T13582] ? trace_irq_disable+0x3b/0x150 [ 1216.363436][T13582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.363457][T13582] ? clear_bhb_loop+0x40/0x90 [ 1216.363482][T13582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.363502][T13582] RIP: 0033:0x7faed4f9c799 [ 1216.363521][T13582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.363539][T13582] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1216.363560][T13582] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1216.363575][T13582] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1216.363588][T13582] RBP: 00007faed5ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.363600][T13582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.363612][T13582] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1216.363645][T13582] [ 1216.735205][T13590] netlink: 'syz.2.13294': attribute type 25 has an invalid length. [ 1216.743576][T13590] netlink: 'syz.2.13294': attribute type 9 has an invalid length. [ 1217.570158][T13629] netlink: 'syz.0.13308': attribute type 25 has an invalid length. [ 1217.604827][T13629] netlink: 'syz.0.13308': attribute type 9 has an invalid length. [ 1218.348467][T13669] syzkaller0: entered promiscuous mode [ 1218.381465][T13669] syzkaller0: entered allmulticast mode [ 1218.402630][T13669] 0: reclassify loop, rule prio 0, protocol 800 [ 1219.384511][T13725] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1219.554943][T13738] netlink: 'syz.1.13350': attribute type 8 has an invalid length. [ 1219.821478][T13751] netlink: 'syz.2.13355': attribute type 33 has an invalid length. [ 1220.073733][T13762] __nla_validate_parse: 17 callbacks suppressed [ 1220.073753][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13357'. [ 1220.097834][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13357'. [ 1220.277064][T13762] netlink: 'syz.0.13357': attribute type 11 has an invalid length. [ 1220.285432][T13762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13357'. [ 1220.562905][T13777] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13362'. [ 1221.375753][T13805] xt_SECMARK: invalid mode: 9 [ 1221.442295][T13808] netlink: 'syz.4.13378': attribute type 12 has an invalid length. [ 1222.005529][T13831] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1222.042105][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.073274][T13831] bridge0: entered allmulticast mode [ 1222.160469][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13390'. [ 1222.233973][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13390'. [ 1222.267260][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13391'. [ 1222.400393][T13848] lo speed is unknown, defaulting to 1000 [ 1222.462306][T13846] netlink: 'syz.1.13393': attribute type 3 has an invalid length. [ 1222.470195][T13846] netlink: 'syz.1.13393': attribute type 1 has an invalid length. [ 1222.509354][T13846] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.13393'. [ 1222.598121][T13856] netlink: 'syz.4.13396': attribute type 4 has an invalid length. [ 1222.614450][T13856] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13396'. [ 1222.741847][T13848] wg1 speed is unknown, defaulting to 1000 [ 1223.510644][T13898] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1223.552650][T13898] CPU: 1 UID: 0 PID: 13898 Comm: syz.3.13411 Not tainted syzkaller #0 PREEMPT(full) [ 1223.552679][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1223.552693][T13898] Call Trace: [ 1223.552701][T13898] [ 1223.552711][T13898] dump_stack_lvl+0xe8/0x150 [ 1223.552749][T13898] sysfs_warn_dup+0x8e/0xa0 [ 1223.552780][T13898] sysfs_do_create_link_sd+0xc0/0x110 [ 1223.552812][T13898] device_add_class_symlinks+0x1cf/0x240 [ 1223.552841][T13898] device_add+0x475/0xb70 [ 1223.552867][T13898] wiphy_register+0x1d73/0x2d50 [ 1223.552913][T13898] ? __pfx_wiphy_register+0x10/0x10 [ 1223.552939][T13898] ? __pfx_netdev_run_todo+0x10/0x10 [ 1223.552964][T13898] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1223.552995][T13898] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1223.553034][T13898] ieee80211_register_hw+0x3562/0x4200 [ 1223.553070][T13898] ? ieee80211_register_hw+0x1481/0x4200 [ 1223.553102][T13898] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1223.553141][T13898] ? __hrtimer_setup+0x181/0x200 [ 1223.553169][T13898] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1223.553198][T13898] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1223.553250][T13898] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1223.553271][T13898] ? kstrndup+0xbf/0x160 [ 1223.553307][T13898] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1223.553352][T13898] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1223.553384][T13898] ? rcu_is_watching+0x15/0xb0 [ 1223.553413][T13898] ? trace_kmalloc+0x2a/0x110 [ 1223.553448][T13898] ? __nla_parse+0x40/0x60 [ 1223.553483][T13898] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1223.553515][T13898] genl_family_rcv_msg_doit+0x22a/0x330 [ 1223.553544][T13898] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1223.553578][T13898] ? bpf_lsm_capable+0x9/0x20 [ 1223.553605][T13898] ? security_capable+0x7e/0x2c0 [ 1223.553638][T13898] genl_rcv_msg+0x61c/0x7a0 [ 1223.553666][T13898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1223.553686][T13898] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1223.553708][T13898] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.553746][T13898] netlink_rcv_skb+0x232/0x4b0 [ 1223.553775][T13898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1223.553797][T13898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1223.553842][T13898] ? down_read+0x272/0x2e0 [ 1223.553865][T13898] ? genl_rcv+0xd/0x40 [ 1223.553886][T13898] genl_rcv+0x28/0x40 [ 1223.553903][T13898] netlink_unicast+0x80f/0x9b0 [ 1223.553936][T13898] ? __pfx_netlink_unicast+0x10/0x10 [ 1223.553958][T13898] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1223.553984][T13898] ? netlink_sendmsg+0x650/0xb40 [ 1223.554009][T13898] ? skb_put+0x11b/0x210 [ 1223.554043][T13898] netlink_sendmsg+0x813/0xb40 [ 1223.554080][T13898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.554111][T13898] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1223.554139][T13898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1223.554165][T13898] ____sys_sendmsg+0x972/0x9f0 [ 1223.554184][T13898] ? futex_unqueue+0x211/0x240 [ 1223.554215][T13898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1223.554245][T13898] ? import_iovec+0x73/0xa0 [ 1223.554279][T13898] ___sys_sendmsg+0x2a5/0x360 [ 1223.554305][T13898] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.554332][T13898] ? futex_wait+0x29a/0x380 [ 1223.554389][T13898] ? __fget_files+0x2a/0x420 [ 1223.554418][T13898] ? __fget_files+0x3a0/0x420 [ 1223.554466][T13898] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1223.554489][T13898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1223.554519][T13898] ? rcu_is_watching+0x15/0xb0 [ 1223.554561][T13898] do_syscall_64+0x14d/0xf80 [ 1223.554579][T13898] ? trace_irq_disable+0x3b/0x150 [ 1223.554608][T13898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.554630][T13898] ? clear_bhb_loop+0x40/0x90 [ 1223.554655][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.554675][T13898] RIP: 0033:0x7f61bab9c799 [ 1223.554695][T13898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.554712][T13898] RSP: 002b:00007f61bb9a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.554734][T13898] RAX: ffffffffffffffda RBX: 00007f61bae15fa0 RCX: 00007f61bab9c799 [ 1223.554749][T13898] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1223.554762][T13898] RBP: 00007f61bac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1223.554774][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.554786][T13898] R13: 00007f61bae16038 R14: 00007f61bae15fa0 R15: 00007ffe392ba778 [ 1223.554821][T13898] [ 1223.556318][T13899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.739943][T13902] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1223.754555][T13899] batadv_slave_0: entered promiscuous mode [ 1224.659214][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13420'. [ 1224.738614][T13930] macvtap1: entered promiscuous mode [ 1224.756275][T13930] vlan0: entered promiscuous mode [ 1224.763645][T13930] macvtap1: entered allmulticast mode [ 1224.769295][T13930] vlan0: entered allmulticast mode [ 1224.794182][T13930] veth0_vlan: entered allmulticast mode [ 1225.070222][T13950] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1225.110545][T13950] CPU: 1 UID: 0 PID: 13950 Comm: syz.0.13425 Not tainted syzkaller #0 PREEMPT(full) [ 1225.110571][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1225.110585][T13950] Call Trace: [ 1225.110593][T13950] [ 1225.110603][T13950] dump_stack_lvl+0xe8/0x150 [ 1225.110639][T13950] sysfs_warn_dup+0x8e/0xa0 [ 1225.110668][T13950] sysfs_do_create_link_sd+0xc0/0x110 [ 1225.110699][T13950] device_add_class_symlinks+0x1cf/0x240 [ 1225.110726][T13950] device_add+0x475/0xb70 [ 1225.110751][T13950] wiphy_register+0x1d73/0x2d50 [ 1225.110807][T13950] ? __pfx_wiphy_register+0x10/0x10 [ 1225.110834][T13950] ? __pfx_netdev_run_todo+0x10/0x10 [ 1225.110857][T13950] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1225.110887][T13950] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1225.110923][T13950] ieee80211_register_hw+0x3562/0x4200 [ 1225.110959][T13950] ? ieee80211_register_hw+0x1481/0x4200 [ 1225.110991][T13950] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1225.111028][T13950] ? __hrtimer_setup+0x181/0x200 [ 1225.111054][T13950] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1225.111085][T13950] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1225.111138][T13950] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1225.111158][T13950] ? kstrndup+0xbf/0x160 [ 1225.111213][T13950] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1225.111260][T13950] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1225.111293][T13950] ? rcu_is_watching+0x15/0xb0 [ 1225.111323][T13950] ? trace_kmalloc+0x2a/0x110 [ 1225.111353][T13950] ? __nla_parse+0x40/0x60 [ 1225.111387][T13950] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1225.111419][T13950] genl_family_rcv_msg_doit+0x22a/0x330 [ 1225.111446][T13950] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1225.111481][T13950] ? bpf_lsm_capable+0x9/0x20 [ 1225.111509][T13950] ? security_capable+0x7e/0x2c0 [ 1225.111542][T13950] genl_rcv_msg+0x61c/0x7a0 [ 1225.111570][T13950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.111590][T13950] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1225.111613][T13950] ? __lock_acquire+0x6b5/0x2cf0 [ 1225.111653][T13950] netlink_rcv_skb+0x232/0x4b0 [ 1225.111681][T13950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.111704][T13950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1225.111760][T13950] ? down_read+0x272/0x2e0 [ 1225.111786][T13950] ? genl_rcv+0xd/0x40 [ 1225.111824][T13950] genl_rcv+0x28/0x40 [ 1225.111843][T13950] netlink_unicast+0x80f/0x9b0 [ 1225.111879][T13950] ? __pfx_netlink_unicast+0x10/0x10 [ 1225.111901][T13950] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1225.111928][T13950] ? netlink_sendmsg+0x650/0xb40 [ 1225.111964][T13950] ? skb_put+0x11b/0x210 [ 1225.111996][T13950] netlink_sendmsg+0x813/0xb40 [ 1225.112033][T13950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.112062][T13950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1225.112088][T13950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1225.112113][T13950] ____sys_sendmsg+0x972/0x9f0 [ 1225.112131][T13950] ? futex_unqueue+0x211/0x240 [ 1225.112162][T13950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.112192][T13950] ? import_iovec+0x73/0xa0 [ 1225.112226][T13950] ___sys_sendmsg+0x2a5/0x360 [ 1225.112253][T13950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.112279][T13950] ? futex_wait+0x29a/0x380 [ 1225.112336][T13950] ? __fget_files+0x2a/0x420 [ 1225.112364][T13950] ? __fget_files+0x3a0/0x420 [ 1225.112403][T13950] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1225.112425][T13950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1225.112455][T13950] ? rcu_is_watching+0x15/0xb0 [ 1225.112497][T13950] do_syscall_64+0x14d/0xf80 [ 1225.112514][T13950] ? trace_irq_disable+0x3b/0x150 [ 1225.112543][T13950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.112564][T13950] ? clear_bhb_loop+0x40/0x90 [ 1225.112589][T13950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.112609][T13950] RIP: 0033:0x7faed4f9c799 [ 1225.112629][T13950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.112646][T13950] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.112667][T13950] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1225.112682][T13950] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1225.112695][T13950] RBP: 00007faed5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1225.112707][T13950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.112719][T13950] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1225.112753][T13950] [ 1226.014970][T13966] __nla_validate_parse: 1 callbacks suppressed [ 1226.014990][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13430'. [ 1226.087952][T13966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13430'. [ 1226.329862][T13978] sock: sock_set_timeout: `syz.4.13435' (pid 13978) tries to set negative timeout [ 1226.404521][T13982] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1226.625361][T13991] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1226.676619][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13441'. [ 1226.761777][T13996] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13443'. [ 1227.228267][T14018] FAULT_INJECTION: forcing a failure. [ 1227.228267][T14018] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.271895][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13451'. [ 1227.275212][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz.3.13450 Not tainted syzkaller #0 PREEMPT(full) [ 1227.275279][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1227.275309][T14018] Call Trace: [ 1227.275336][T14018] [ 1227.275356][T14018] dump_stack_lvl+0xe8/0x150 [ 1227.275444][T14018] should_fail_ex+0x412/0x560 [ 1227.275528][T14018] should_failslab+0xa8/0x100 [ 1227.275602][T14018] ? skb_clone+0x212/0x3a0 [ 1227.275731][T14018] kmem_cache_alloc_noprof+0x87/0x650 [ 1227.275783][T14018] ? __netlink_lookup+0xc6/0x8b0 [ 1227.275876][T14018] skb_clone+0x212/0x3a0 [ 1227.275947][T14018] __netlink_deliver_tap+0x404/0x850 [ 1227.276063][T14018] ? netlink_deliver_tap+0x2e/0x1b0 [ 1227.276154][T14018] netlink_deliver_tap+0x19c/0x1b0 [ 1227.276248][T14018] netlink_unicast+0x7e3/0x9b0 [ 1227.276369][T14018] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.276441][T14018] ? netlink_sendmsg+0x650/0xb40 [ 1227.276510][T14018] ? skb_put+0x11b/0x210 [ 1227.276609][T14018] netlink_sendmsg+0x813/0xb40 [ 1227.276708][T14018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.276797][T14018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1227.276889][T14018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1227.276972][T14018] ____sys_sendmsg+0x972/0x9f0 [ 1227.277030][T14018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.277094][T14018] ? import_iovec+0x73/0xa0 [ 1227.277169][T14018] ___sys_sendmsg+0x2a5/0x360 [ 1227.277231][T14018] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.277363][T14018] ? __fget_files+0x2a/0x420 [ 1227.277432][T14018] ? __fget_files+0x3a0/0x420 [ 1227.277528][T14018] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1227.277643][T14018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1227.277747][T14018] ? __pfx_ksys_write+0x10/0x10 [ 1227.277834][T14018] do_syscall_64+0x14d/0xf80 [ 1227.277881][T14018] ? trace_irq_disable+0x3b/0x150 [ 1227.277956][T14018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.278011][T14018] ? clear_bhb_loop+0x40/0x90 [ 1227.278069][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.278117][T14018] RIP: 0033:0x7f61bab9c799 [ 1227.278165][T14018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.278212][T14018] RSP: 002b:00007f61bb9a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.278267][T14018] RAX: ffffffffffffffda RBX: 00007f61bae15fa0 RCX: 00007f61bab9c799 [ 1227.278306][T14018] RDX: 0000000000000004 RSI: 0000200000000740 RDI: 0000000000000003 [ 1227.278345][T14018] RBP: 00007f61bb9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.278376][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.278410][T14018] R13: 00007f61bae16038 R14: 00007f61bae15fa0 R15: 00007ffe392ba778 [ 1227.278494][T14018] [ 1227.634424][T14023] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1227.655190][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13452'. [ 1227.670996][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13452'. [ 1227.687511][T14015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13448'. [ 1227.733229][T14029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13452'. [ 1227.930412][T14038] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1227.952163][T14042] FAULT_INJECTION: forcing a failure. [ 1227.952163][T14042] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.965556][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.973327][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.982308][T14042] CPU: 0 UID: 0 PID: 14042 Comm: syz.4.13458 Not tainted syzkaller #0 PREEMPT(full) [ 1227.982332][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1227.982344][T14042] Call Trace: [ 1227.982368][T14042] [ 1227.982378][T14042] dump_stack_lvl+0xe8/0x150 [ 1227.982412][T14042] should_fail_ex+0x412/0x560 [ 1227.982445][T14042] should_failslab+0xa8/0x100 [ 1227.982474][T14042] __kmalloc_noprof+0xe8/0x760 [ 1227.982497][T14042] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1227.982527][T14042] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1227.982557][T14042] genl_family_rcv_msg_doit+0xd9/0x330 [ 1227.982586][T14042] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1227.982616][T14042] ? apparmor_capable+0x126/0x170 [ 1227.982650][T14042] ? bpf_lsm_capable+0x9/0x20 [ 1227.982678][T14042] ? security_capable+0x7e/0x2c0 [ 1227.982710][T14042] genl_rcv_msg+0x61c/0x7a0 [ 1227.982738][T14042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.982757][T14042] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1227.982871][T14042] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 1227.982922][T14042] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1227.982942][T14042] ? __lock_acquire+0x6b5/0x2cf0 [ 1227.982979][T14042] netlink_rcv_skb+0x232/0x4b0 [ 1227.983006][T14042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.983026][T14042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1227.983076][T14042] ? down_read+0x272/0x2e0 [ 1227.983096][T14042] ? genl_rcv+0xd/0x40 [ 1227.983116][T14042] genl_rcv+0x28/0x40 [ 1227.983132][T14042] netlink_unicast+0x80f/0x9b0 [ 1227.983164][T14042] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.983189][T14042] ? netlink_sendmsg+0x650/0xb40 [ 1227.983214][T14042] ? skb_put+0x11b/0x210 [ 1227.983245][T14042] netlink_sendmsg+0x813/0xb40 [ 1227.983280][T14042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.983310][T14042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1227.983337][T14042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1227.983362][T14042] ____sys_sendmsg+0x972/0x9f0 [ 1227.983390][T14042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.983418][T14042] ? import_iovec+0x73/0xa0 [ 1227.983451][T14042] ___sys_sendmsg+0x2a5/0x360 [ 1227.983476][T14042] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.983530][T14042] ? __fget_files+0x2a/0x420 [ 1227.983557][T14042] ? __fget_files+0x3a0/0x420 [ 1227.983596][T14042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1227.983618][T14042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1227.983647][T14042] ? __pfx_ksys_write+0x10/0x10 [ 1227.983680][T14042] do_syscall_64+0x14d/0xf80 [ 1227.983697][T14042] ? trace_irq_disable+0x3b/0x150 [ 1227.983724][T14042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.983745][T14042] ? clear_bhb_loop+0x40/0x90 [ 1227.983769][T14042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.983789][T14042] RIP: 0033:0x7f0acdd9c799 [ 1227.983807][T14042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.983824][T14042] RSP: 002b:00007f0acebfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.983844][T14042] RAX: ffffffffffffffda RBX: 00007f0ace015fa0 RCX: 00007f0acdd9c799 [ 1227.983859][T14042] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1227.983871][T14042] RBP: 00007f0acebfc090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.983883][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.983895][T14042] R13: 00007f0ace016038 R14: 00007f0ace015fa0 R15: 00007fffc6293608 [ 1227.983927][T14042] [ 1228.330185][T14038] bridge0: entered allmulticast mode [ 1228.708724][T14054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13461'. [ 1228.843424][T14053] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1229.018371][T14064] netlink: 'syz.0.13465': attribute type 12 has an invalid length. [ 1229.065155][T14064] FAULT_INJECTION: forcing a failure. [ 1229.065155][T14064] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.224158][T14064] CPU: 1 UID: 0 PID: 14064 Comm: syz.0.13465 Not tainted syzkaller #0 PREEMPT(full) [ 1229.224186][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1229.224199][T14064] Call Trace: [ 1229.224207][T14064] [ 1229.224216][T14064] dump_stack_lvl+0xe8/0x150 [ 1229.224248][T14064] should_fail_ex+0x412/0x560 [ 1229.224278][T14064] should_failslab+0xa8/0x100 [ 1229.224305][T14064] __kmalloc_cache_noprof+0x88/0x660 [ 1229.224327][T14064] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 1229.224443][T14064] __ipv6_dev_mc_inc+0x44f/0xa50 [ 1229.224480][T14064] pndisc_constructor+0xe0/0x150 [ 1229.224501][T14064] ? __pfx_pndisc_constructor+0x10/0x10 [ 1229.224523][T14064] ? pneigh_create+0x15b/0x4b0 [ 1229.224553][T14064] pneigh_create+0x246/0x4b0 [ 1229.224583][T14064] neigh_add+0x6ea/0xf70 [ 1229.224622][T14064] ? __pfx_neigh_add+0x10/0x10 [ 1229.224677][T14064] ? __pfx_neigh_add+0x10/0x10 [ 1229.224705][T14064] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1229.224735][T14064] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1229.224760][T14064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1229.224783][T14064] ? ref_tracker_free+0x693/0x840 [ 1229.224807][T14064] ? __copy_skb_header+0xa3/0x4a0 [ 1229.224828][T14064] ? __pfx_ref_tracker_free+0x10/0x10 [ 1229.224864][T14064] netlink_rcv_skb+0x232/0x4b0 [ 1229.224891][T14064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1229.224930][T14064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1229.224966][T14064] ? netlink_deliver_tap+0x2e/0x1b0 [ 1229.225000][T14064] netlink_unicast+0x80f/0x9b0 [ 1229.225031][T14064] ? __pfx_netlink_unicast+0x10/0x10 [ 1229.225056][T14064] ? netlink_sendmsg+0x650/0xb40 [ 1229.225080][T14064] ? skb_put+0x11b/0x210 [ 1229.225111][T14064] netlink_sendmsg+0x813/0xb40 [ 1229.225147][T14064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1229.225176][T14064] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1229.225203][T14064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1229.225227][T14064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1229.225251][T14064] sock_write_iter+0x49b/0x4f0 [ 1229.225276][T14064] ? __pfx_sock_write_iter+0x10/0x10 [ 1229.225309][T14064] ? bpf_lsm_file_permission+0x9/0x20 [ 1229.225333][T14064] ? security_file_permission+0x75/0x260 [ 1229.225362][T14064] vfs_write+0x61d/0xb90 [ 1229.225392][T14064] ? __pfx_vfs_write+0x10/0x10 [ 1229.225423][T14064] ? __fget_files+0x2a/0x420 [ 1229.225461][T14064] ksys_write+0x150/0x270 [ 1229.225484][T14064] ? __pfx_ksys_write+0x10/0x10 [ 1229.225516][T14064] do_syscall_64+0x14d/0xf80 [ 1229.225534][T14064] ? trace_irq_disable+0x3b/0x150 [ 1229.225561][T14064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.225581][T14064] ? clear_bhb_loop+0x40/0x90 [ 1229.225606][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.225625][T14064] RIP: 0033:0x7faed4f9c799 [ 1229.225643][T14064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.225659][T14064] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1229.225679][T14064] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1229.225693][T14064] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 0000000000000003 [ 1229.225705][T14064] RBP: 00007faed5ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.225718][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.225729][T14064] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1229.225781][T14064] [ 1229.240420][T14069] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 1229.770523][T14079] bond4: Unable to set down delay as MII monitoring is disabled [ 1229.820645][T14079] bond4 (unregistering): Released all slaves [ 1229.914903][T14095] xt_SECMARK: invalid mode: 9 [ 1229.983975][T14097] bond3: (slave lo): Releasing backup interface [ 1230.014623][T14097] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1230.037119][T14097] bridge_slave_0: left allmulticast mode [ 1230.078543][T14097] bridge_slave_0: left promiscuous mode [ 1230.098933][T14097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.144887][T14097] bridge_slave_1: left allmulticast mode [ 1230.150664][T14097] bridge_slave_1: left promiscuous mode [ 1230.167797][T14097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.195885][T14097] bond0: (slave bond_slave_0): Releasing backup interface [ 1230.229642][T14097] bond0: (slave bond_slave_1): Releasing backup interface [ 1230.268142][T14097] team0: Port device team_slave_0 removed [ 1230.297524][T14097] team0: Port device team_slave_1 removed [ 1230.314548][T14097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1230.366257][T14104] netlink: 'syz.3.13479': attribute type 12 has an invalid length. [ 1230.480637][T14113] netlink: 'syz.4.13482': attribute type 1 has an invalid length. [ 1230.488772][T14113] netlink: 'syz.4.13482': attribute type 1 has an invalid length. [ 1230.601031][T14119] syzkaller0: entered promiscuous mode [ 1230.621934][T14119] syzkaller0: entered allmulticast mode [ 1230.635307][T14117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1230.901475][T14134] IPVS: set_ctl: invalid protocol: 196 0.0.0.0:20000 [ 1231.010184][T14136] FAULT_INJECTION: forcing a failure. [ 1231.010184][T14136] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.022905][T14136] CPU: 1 UID: 0 PID: 14136 Comm: syz.3.13494 Not tainted syzkaller #0 PREEMPT(full) [ 1231.022929][T14136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1231.022942][T14136] Call Trace: [ 1231.022950][T14136] [ 1231.022958][T14136] dump_stack_lvl+0xe8/0x150 [ 1231.022990][T14136] should_fail_ex+0x412/0x560 [ 1231.023019][T14136] should_failslab+0xa8/0x100 [ 1231.023044][T14136] ? skb_clone+0x212/0x3a0 [ 1231.023065][T14136] kmem_cache_alloc_noprof+0x87/0x650 [ 1231.023085][T14136] ? __bpf_redirect+0x9b4/0x12a0 [ 1231.023114][T14136] skb_clone+0x212/0x3a0 [ 1231.023136][T14136] bpf_clone_redirect+0x16a/0x4b0 [ 1231.023169][T14136] ? bpf_test_run+0x1d1/0x830 [ 1231.023195][T14136] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 1231.023215][T14136] ? __lock_acquire+0x6b5/0x2cf0 [ 1231.023261][T14136] ? ktime_get+0x45/0x200 [ 1231.023282][T14136] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1231.023302][T14136] ? lockdep_hardirqs_on+0x7a/0x110 [ 1231.023330][T14136] ? ktime_get+0x45/0x200 [ 1231.023346][T14136] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1231.023365][T14136] ? bpf_test_run+0x1d1/0x830 [ 1231.023391][T14136] ? bpf_test_timer_continue+0x10c/0x320 [ 1231.023420][T14136] bpf_test_run+0x354/0x830 [ 1231.023464][T14136] ? __pfx_bpf_test_run+0x10/0x10 [ 1231.023497][T14136] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1231.023515][T14136] ? slab_build_skb+0x52/0x410 [ 1231.023542][T14136] ? __kasan_krealloc+0xeb/0x110 [ 1231.023564][T14136] ? eth_type_trans+0x35e/0x6d0 [ 1231.023600][T14136] ? convert___skb_to_skb+0x3d/0x5b0 [ 1231.023626][T14136] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1231.023662][T14136] ? __fget_files+0x2a/0x420 [ 1231.023690][T14136] ? __fget_files+0x3a0/0x420 [ 1231.023716][T14136] ? __fget_files+0x2a/0x420 [ 1231.023755][T14136] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1231.023780][T14136] bpf_prog_test_run+0x2c7/0x340 [ 1231.023803][T14136] __sys_bpf+0x643/0x950 [ 1231.023834][T14136] ? __pfx___sys_bpf+0x10/0x10 [ 1231.023877][T14136] ? ksys_write+0x242/0x270 [ 1231.023900][T14136] ? __pfx_ksys_write+0x10/0x10 [ 1231.023927][T14136] __x64_sys_bpf+0x7c/0x90 [ 1231.023954][T14136] do_syscall_64+0x14d/0xf80 [ 1231.023970][T14136] ? trace_irq_disable+0x3b/0x150 [ 1231.023996][T14136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.024016][T14136] ? clear_bhb_loop+0x40/0x90 [ 1231.024039][T14136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.024058][T14136] RIP: 0033:0x7f61bab9c799 [ 1231.024075][T14136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.024091][T14136] RSP: 002b:00007f61bb9a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1231.024111][T14136] RAX: ffffffffffffffda RBX: 00007f61bae15fa0 RCX: 00007f61bab9c799 [ 1231.024126][T14136] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1231.024138][T14136] RBP: 00007f61bb9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.024149][T14136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1231.024160][T14136] R13: 00007f61bae16038 R14: 00007f61bae15fa0 R15: 00007ffe392ba778 [ 1231.024191][T14136] [ 1231.054032][T14140] netlink: 'syz.1.13496': attribute type 12 has an invalid length. [ 1231.552921][T14146] netlink: 'syz.0.13501': attribute type 4 has an invalid length. [ 1231.565308][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.583886][T14146] __nla_validate_parse: 1 callbacks suppressed [ 1231.583903][T14146] netlink: 512 bytes leftover after parsing attributes in process `syz.0.13501'. [ 1231.669132][T14155] sctp: [Deprecated]: syz.4.13499 (pid 14155) Use of int in maxseg socket option. [ 1231.669132][T14155] Use struct sctp_assoc_value instead [ 1232.163705][T14182] netlink: 'syz.3.13509': attribute type 12 has an invalid length. [ 1232.179441][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13510'. [ 1232.224158][T14184] syz_tun: entered promiscuous mode [ 1232.231375][T14184] macvtap2: entered promiscuous mode [ 1232.359293][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13514'. [ 1232.563814][T14207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13519'. [ 1232.595265][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13519'. [ 1232.716602][T14213] xt_hashlimit: size too large, truncated to 1048576 [ 1232.782364][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13522'. [ 1233.018635][T14223] netlink: 'syz.0.13525': attribute type 12 has an invalid length. [ 1233.492511][T14247] netlink: 'syz.0.13534': attribute type 12 has an invalid length. [ 1233.521848][T14247] FAULT_INJECTION: forcing a failure. [ 1233.521848][T14247] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.582012][T14247] CPU: 1 UID: 0 PID: 14247 Comm: syz.0.13534 Not tainted syzkaller #0 PREEMPT(full) [ 1233.582038][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1233.582048][T14247] Call Trace: [ 1233.582056][T14247] [ 1233.582063][T14247] dump_stack_lvl+0xe8/0x150 [ 1233.582092][T14247] should_fail_ex+0x412/0x560 [ 1233.582118][T14247] should_failslab+0xa8/0x100 [ 1233.582140][T14247] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1233.582158][T14247] ? __alloc_skb+0x186/0x7d0 [ 1233.582181][T14247] ? __alloc_skb+0x1d0/0x7d0 [ 1233.582200][T14247] ? __local_bh_enable_ip+0xd0/0x130 [ 1233.582226][T14247] __alloc_skb+0x1d0/0x7d0 [ 1233.582248][T14247] ? netlink_ack_tlv_len+0x6c/0x210 [ 1233.582271][T14247] netlink_ack+0x146/0xa50 [ 1233.582290][T14247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1233.582311][T14247] ? ref_tracker_free+0x693/0x840 [ 1233.582331][T14247] ? __copy_skb_header+0xa3/0x4a0 [ 1233.582348][T14247] ? __pfx_ref_tracker_free+0x10/0x10 [ 1233.582377][T14247] netlink_rcv_skb+0x2b6/0x4b0 [ 1233.582398][T14247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1233.582422][T14247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1233.582452][T14247] ? netlink_deliver_tap+0x2e/0x1b0 [ 1233.582479][T14247] netlink_unicast+0x80f/0x9b0 [ 1233.582505][T14247] ? __pfx_netlink_unicast+0x10/0x10 [ 1233.582536][T14247] ? netlink_sendmsg+0x650/0xb40 [ 1233.582557][T14247] ? skb_put+0x11b/0x210 [ 1233.582583][T14247] netlink_sendmsg+0x813/0xb40 [ 1233.582613][T14247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.582638][T14247] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1233.582662][T14247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1233.582684][T14247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.582706][T14247] sock_write_iter+0x49b/0x4f0 [ 1233.582728][T14247] ? __pfx_sock_write_iter+0x10/0x10 [ 1233.582756][T14247] ? bpf_lsm_file_permission+0x9/0x20 [ 1233.582777][T14247] ? security_file_permission+0x75/0x260 [ 1233.582801][T14247] vfs_write+0x61d/0xb90 [ 1233.582826][T14247] ? __pfx_vfs_write+0x10/0x10 [ 1233.582851][T14247] ? __fget_files+0x2a/0x420 [ 1233.582882][T14247] ksys_write+0x150/0x270 [ 1233.582902][T14247] ? __pfx_ksys_write+0x10/0x10 [ 1233.582928][T14247] do_syscall_64+0x14d/0xf80 [ 1233.582943][T14247] ? trace_irq_disable+0x3b/0x150 [ 1233.582967][T14247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.582985][T14247] ? clear_bhb_loop+0x40/0x90 [ 1233.583006][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.583031][T14247] RIP: 0033:0x7faed4f9c799 [ 1233.583049][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.583067][T14247] RSP: 002b:00007faed5ee9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1233.583087][T14247] RAX: ffffffffffffffda RBX: 00007faed5215fa0 RCX: 00007faed4f9c799 [ 1233.583102][T14247] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 0000000000000003 [ 1233.583115][T14247] RBP: 00007faed5ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.583127][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.583139][T14247] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1233.583171][T14247] [ 1234.317522][T14254] netlink: 'syz.2.13537': attribute type 10 has an invalid length. [ 1234.472919][T14256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.528437][T14256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.765149][T14256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.810659][T14256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.910021][T14280] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13546'. [ 1234.984897][T14256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.031997][T14256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.189687][T14256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.219224][T14256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.295018][T14286] tap0: tun_chr_ioctl cmd 1074025672 [ 1235.314130][T14286] tap0: ignored: set checksum disabled [ 1235.500661][T14295] netlink: 'syz.4.13553': attribute type 29 has an invalid length. [ 1235.515367][ T756] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1235.531527][ T756] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.588799][ T9650] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1235.611208][ T9650] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.675583][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1235.694531][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.879515][ T756] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1235.893379][ T756] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.318191][T14324] netlink: 'syz.4.13561': attribute type 12 has an invalid length. [ 1236.350117][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13562'. [ 1236.585638][T14338] FAULT_INJECTION: forcing a failure. [ 1236.585638][T14338] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.635654][T14338] CPU: 1 UID: 0 PID: 14338 Comm: syz.0.13568 Not tainted syzkaller #0 PREEMPT(full) [ 1236.635681][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1236.635693][T14338] Call Trace: [ 1236.635719][T14338] [ 1236.635729][T14338] dump_stack_lvl+0xe8/0x150 [ 1236.635766][T14338] should_fail_ex+0x412/0x560 [ 1236.635800][T14338] should_failslab+0xa8/0x100 [ 1236.635829][T14338] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1236.635853][T14338] ? __alloc_skb+0x186/0x7d0 [ 1236.635882][T14338] ? __alloc_skb+0x1d0/0x7d0 [ 1236.635909][T14338] ? __local_bh_enable_ip+0xd0/0x130 [ 1236.635942][T14338] __alloc_skb+0x1d0/0x7d0 [ 1236.635977][T14338] alloc_skb_with_frags+0xca/0x890 [ 1236.636015][T14338] ? __lock_acquire+0x6b5/0x2cf0 [ 1236.636050][T14338] sock_alloc_send_pskb+0x878/0x990 [ 1236.636093][T14338] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1236.636133][T14338] tun_get_user+0x92d/0x3dd0 [ 1236.636180][T14338] ? aa_file_perm+0x192/0x15e0 [ 1236.636221][T14338] ? aa_file_perm+0x50e/0x15e0 [ 1236.636250][T14338] ? __pfx_tun_get_user+0x10/0x10 [ 1236.636278][T14338] ? aa_file_perm+0x192/0x15e0 [ 1236.636313][T14338] ? __lock_acquire+0x6b5/0x2cf0 [ 1236.636351][T14338] ? ref_tracker_alloc+0x35c/0x4c0 [ 1236.636402][T14338] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1236.636438][T14338] ? tun_get+0x1c/0x2f0 [ 1236.636475][T14338] ? tun_get+0x1c/0x2f0 [ 1236.636506][T14338] ? tun_get+0x1c/0x2f0 [ 1236.636541][T14338] tun_chr_write_iter+0x113/0x200 [ 1236.636575][T14338] vfs_write+0x61d/0xb90 [ 1236.636609][T14338] ? __pfx_vfs_write+0x10/0x10 [ 1236.636644][T14338] ? __fget_files+0x2a/0x420 [ 1236.636706][T14338] ksys_write+0x150/0x270 [ 1236.636733][T14338] ? __pfx_ksys_write+0x10/0x10 [ 1236.636770][T14338] do_syscall_64+0x14d/0xf80 [ 1236.636790][T14338] ? trace_irq_disable+0x3b/0x150 [ 1236.636822][T14338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.636845][T14338] ? clear_bhb_loop+0x40/0x90 [ 1236.636872][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.636905][T14338] RIP: 0033:0x7faed4f5cfce [ 1236.636925][T14338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1236.636944][T14338] RSP: 002b:00007faed5ee8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1236.636977][T14338] RAX: ffffffffffffffda RBX: 00007faed5ee96c0 RCX: 00007faed4f5cfce [ 1236.636992][T14338] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 1236.637004][T14338] RBP: 00007faed5ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.637017][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.637029][T14338] R13: 00007faed5216038 R14: 00007faed5215fa0 R15: 00007ffe16be07b8 [ 1236.637061][T14338] [ 1236.659444][T14340] netlink: 808 bytes leftover after parsing attributes in process `syz.3.13567'. [ 1237.056391][T14351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.109942][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13574'. [ 1237.153065][T14345] syzkaller0: entered promiscuous mode [ 1237.158886][T14345] syzkaller0: entered allmulticast mode [ 1237.211580][T14358] xt_SECMARK: invalid mode: 9 [ 1237.322419][T14364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13578'. [ 1237.602002][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13576'. [ 1238.702025][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1238.708153][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1239.529076][T14381] netlink: 'syz.2.13581': attribute type 12 has an invalid length. [ 1239.556372][T14383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13580'. [ 1239.572057][T14381] FAULT_INJECTION: forcing a failure. [ 1239.572057][T14381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.604469][T14381] CPU: 1 UID: 0 PID: 14381 Comm: syz.2.13581 Not tainted syzkaller #0 PREEMPT(full) [ 1239.604495][T14381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1239.604507][T14381] Call Trace: [ 1239.604516][T14381] [ 1239.604524][T14381] dump_stack_lvl+0xe8/0x150 [ 1239.604557][T14381] should_fail_ex+0x412/0x560 [ 1239.604588][T14381] _copy_to_user+0x31/0xb0 [ 1239.604620][T14381] simple_read_from_buffer+0xe1/0x170 [ 1239.604653][T14381] proc_fail_nth_read+0x1bb/0x230 [ 1239.604683][T14381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.604713][T14381] ? rw_verify_area+0x2a6/0x4d0 [ 1239.604733][T14381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.604761][T14381] vfs_read+0x20c/0xa70 [ 1239.604780][T14381] ? fdget_pos+0x246/0x320 [ 1239.604812][T14381] ? __pfx___mutex_lock+0x10/0x10 [ 1239.604833][T14381] ? __pfx_vfs_read+0x10/0x10 [ 1239.604855][T14381] ? __fget_files+0x2a/0x420 [ 1239.604887][T14381] ? __fget_files+0x3a0/0x420 [ 1239.604913][T14381] ? __fget_files+0x2a/0x420 [ 1239.604950][T14381] ksys_read+0x150/0x270 [ 1239.604972][T14381] ? __pfx_ksys_read+0x10/0x10 [ 1239.605004][T14381] do_syscall_64+0x14d/0xf80 [ 1239.605021][T14381] ? trace_irq_disable+0x3b/0x150 [ 1239.605048][T14381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.605068][T14381] ? clear_bhb_loop+0x40/0x90 [ 1239.605091][T14381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.605111][T14381] RIP: 0033:0x7fccac35cfce [ 1239.605128][T14381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1239.605145][T14381] RSP: 002b:00007fccad330fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1239.605166][T14381] RAX: ffffffffffffffda RBX: 00007fccad3316c0 RCX: 00007fccac35cfce [ 1239.605181][T14381] RDX: 000000000000000f RSI: 00007fccad3310a0 RDI: 0000000000000004 [ 1239.605193][T14381] RBP: 00007fccad331090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.605205][T14381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1239.605217][T14381] R13: 00007fccac616038 R14: 00007fccac615fa0 R15: 00007ffc73396748 [ 1239.605248][T14381] [ 1239.860634][T14388] syzkaller0: entered promiscuous mode [ 1239.866786][T14388] syzkaller0: entered allmulticast mode [ 1240.265047][T14408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13590'. [ 1240.465169][T14418] netlink: 'syz.3.13594': attribute type 9 has an invalid length. [ 1240.810451][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13596'. [ 1240.823377][T14415] bridge_slave_0: entered promiscuous mode [ 1240.923336][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13603'. [ 1240.946622][T14440] syzkaller0: entered promiscuous mode [ 1240.967662][T14440] syzkaller0: entered allmulticast mode [ 1241.009892][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13605'. [ 1243.172317][ T30] INFO: task kworker/u8:0:9649 blocked for more than 143 seconds. [ 1243.180729][ T30] Not tainted syzkaller #0 [ 1243.221363][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1243.242434][ T30] task:kworker/u8:0 state:D stack:24936 pid:9649 tgid:9649 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1243.281439][ T30] Workqueue: netns cleanup_net [ 1243.289447][ T30] Call Trace: [ 1243.296536][ T30] [ 1243.299546][ T30] __schedule+0x15dd/0x52d0 [ 1243.322567][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1243.341167][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1243.350406][ T30] ? __pfx___schedule+0x10/0x10 [ 1243.367525][ T30] ? schedule+0x90/0x360 [ 1243.380938][ T30] schedule+0x164/0x360 [ 1243.389825][ T30] rxrpc_destroy_all_calls+0x578/0x690 [ 1243.402899][ T30] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1243.413238][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 1243.418859][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1243.424343][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1243.430494][ T30] ? __timer_delete_sync+0x4a4/0x520 [ 1243.436742][ T30] rxrpc_exit_net+0x6f/0xc0 [ 1243.441583][ T30] ops_undo_list+0x49f/0x940 [ 1243.446362][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 1243.451781][ T30] ? idr_destroy+0x218/0x290 [ 1243.456523][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1243.462468][ T30] cleanup_net+0x56b/0x800 [ 1243.467087][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1243.473573][ T30] ? process_scheduled_works+0xa25/0x1830 [ 1243.479437][ T30] ? process_scheduled_works+0xa25/0x1830 [ 1243.487999][ T30] process_scheduled_works+0xb02/0x1830 [ 1243.493961][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1243.500081][ T30] ? assign_work+0x3d5/0x5e0 [ 1243.505116][ T30] worker_thread+0xa50/0xfc0 [ 1243.509877][ T30] kthread+0x388/0x470 [ 1243.514259][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1243.519520][ T30] ? __pfx_kthread+0x10/0x10 [ 1243.524808][ T30] ret_from_fork+0x51e/0xb90 [ 1243.529698][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.535514][ T30] ? __switch_to+0xc7d/0x1450 [ 1243.540366][ T30] ? __pfx_kthread+0x10/0x10 [ 1243.545327][ T30] ret_from_fork_asm+0x1a/0x30 [ 1243.550215][ T30] [ 1243.553694][ T30] [ 1243.553694][ T30] Showing all locks held in the system: [ 1243.566082][ T30] 1 lock held by khungtaskd/30: [ 1243.578079][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1243.604587][ T30] 4 locks held by kworker/u8:7/756: [ 1243.610579][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1243.620714][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1243.630097][ T30] #2: ffffc900060f77e0 (&x->wait#18){....}-{2:2}, at: complete+0x28/0x1b0 [ 1243.639013][ T30] #3: ffffffff8e82e628 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1243.650257][ T30] 2 locks held by getty/5583: [ 1243.655290][ T30] #0: ffff8880322250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1243.665940][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1243.676530][ T30] 3 locks held by kworker/u8:0/9649: [ 1243.682193][ T30] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1243.693452][ T30] #1: ffffc90010687c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1243.705478][ T30] #2: ffffffff8fbbf030 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1243.716912][ T30] 4 locks held by syz.1.13611/14468: [ 1243.722583][ T30] #0: ffff88804275b008 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1243.748430][ T30] #1: ffffffff8fc395b0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1243.760178][ T30] #2: ffff888024791cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 1243.771420][ T30] #3: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1243.809312][ T30] [ 1243.813126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1243.813151][ C0] lec:lec_tx_timeout: lec0 [ 1243.830645][ T30] ============================================= [ 1243.830645][ T30] [ 1243.844990][ T30] NMI backtrace for cpu 0 [ 1243.845006][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1243.845033][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1243.845044][ T30] Call Trace: [ 1243.845052][ T30] [ 1243.845061][ T30] dump_stack_lvl+0xe8/0x150 [ 1243.845091][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1243.845116][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1243.845143][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1243.845170][ T30] sys_info+0x135/0x170 [ 1243.845189][ T30] watchdog+0xfd9/0x1030 [ 1243.845248][ T30] ? watchdog+0x21a/0x1030 [ 1243.845284][ T30] kthread+0x388/0x470 [ 1243.845303][ T30] ? __pfx_watchdog+0x10/0x10 [ 1243.845329][ T30] ? __pfx_kthread+0x10/0x10 [ 1243.845348][ T30] ret_from_fork+0x51e/0xb90 [ 1243.845375][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.845399][ T30] ? __switch_to+0xc7d/0x1450 [ 1243.845423][ T30] ? __pfx_kthread+0x10/0x10 [ 1243.845443][ T30] ret_from_fork_asm+0x1a/0x30 [ 1243.845483][ T30] [ 1243.845491][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1243.956725][ C1] NMI backtrace for cpu 1 [ 1243.956744][ C1] CPU: 1 UID: 0 PID: 5766 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 1243.956765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1243.956777][ C1] Workqueue: events free_obj_work [ 1243.956922][ C1] RIP: 0010:check_preemption_disabled+0x1c/0xe0 [ 1243.956946][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 57 03 6e 07 65 8b 0d 4c 03 6e 07 f7 c1 ff ff ff 7f 74 0c <5b> 41 5e 41 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea [ 1243.956962][ C1] RSP: 0018:ffffc90002e67498 EFLAGS: 00000046 [ 1243.956977][ C1] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000000000046 [ 1243.956989][ C1] RDX: 0000000000000000 RSI: ffffffff8df0d27d RDI: ffffffff8c27b280 [ 1243.957002][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.957013][ C1] R10: ffffc90002e67658 R11: ffffffff81b0bb70 R12: 0000000000000002 [ 1243.957025][ C1] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 1243.957037][ C1] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 1243.957053][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1243.957065][ C1] CR2: 00007f5ad35e92f8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1243.957082][ C1] Call Trace: [ 1243.957089][ C1] [ 1243.957113][ C1] lock_acquire+0xb9/0x2e0 [ 1243.957136][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1243.957160][ C1] ? worker_thread+0xa50/0xfc0 [ 1243.957183][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1243.957206][ C1] unwind_next_frame+0xc2/0x23c0 [ 1243.957229][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1243.957257][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1243.957281][ C1] ? process_scheduled_works+0xb02/0x1830 [ 1243.957301][ C1] ? worker_thread+0xa50/0xfc0 [ 1243.957323][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1243.957341][ C1] arch_stack_walk+0x11b/0x150 [ 1243.957368][ C1] ? worker_thread+0xa50/0xfc0 [ 1243.957392][ C1] stack_trace_save+0xa9/0x100 [ 1243.957408][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1243.957427][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1243.957448][ C1] ? rcu_is_watching+0x15/0xb0 [ 1243.957472][ C1] kasan_save_track+0x3e/0x80 [ 1243.957489][ C1] ? kasan_save_track+0x3e/0x80 [ 1243.957513][ C1] ? kasan_save_free_info+0x46/0x50 [ 1243.957537][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1243.957554][ C1] ? kmem_cache_free+0x187/0x630 [ 1243.957571][ C1] ? free_obj_work+0x391/0x4c0 [ 1243.957590][ C1] ? process_scheduled_works+0xb02/0x1830 [ 1243.957610][ C1] ? worker_thread+0xa50/0xfc0 [ 1243.957653][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1243.957671][ C1] kasan_save_free_info+0x46/0x50 [ 1243.957694][ C1] __kasan_slab_free+0x5c/0x80 [ 1243.957712][ C1] kmem_cache_free+0x187/0x630 [ 1243.957730][ C1] ? free_obj_work+0x391/0x4c0 [ 1243.957749][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1243.957776][ C1] free_obj_work+0x391/0x4c0 [ 1243.957800][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 1243.957822][ C1] ? process_scheduled_works+0xa25/0x1830 [ 1243.957842][ C1] ? process_scheduled_works+0xa25/0x1830 [ 1243.957864][ C1] process_scheduled_works+0xb02/0x1830 [ 1243.957899][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1243.957923][ C1] ? assign_work+0x3d5/0x5e0 [ 1243.957947][ C1] worker_thread+0xa50/0xfc0 [ 1243.957982][ C1] kthread+0x388/0x470 [ 1243.957998][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1243.958033][ C1] ? __pfx_kthread+0x10/0x10 [ 1243.958047][ C1] ret_from_fork+0x51e/0xb90 [ 1243.958069][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.958087][ C1] ? __switch_to+0xc7d/0x1450 [ 1243.958106][ C1] ? __pfx_kthread+0x10/0x10 [ 1243.958121][ C1] ret_from_fork_asm+0x1a/0x30 [ 1243.958152][ C1] [ 1244.327737][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1244.334652][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1244.343814][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1244.353906][ T30] Call Trace: [ 1244.357229][ T30] [ 1244.360190][ T30] vpanic+0x56c/0xa60 [ 1244.364218][ T30] ? __pfx___schedule+0x10/0x10 [ 1244.369095][ T30] ? __pfx_vpanic+0x10/0x10 [ 1244.373616][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1244.378838][ T30] panic+0xc5/0xd0 [ 1244.382576][ T30] ? __pfx_panic+0x10/0x10 [ 1244.387013][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1244.392407][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1244.398583][ T30] watchdog+0x1023/0x1030 [ 1244.402974][ T30] ? watchdog+0x21a/0x1030 [ 1244.407413][ T30] kthread+0x388/0x470 [ 1244.411546][ T30] ? __pfx_watchdog+0x10/0x10 [ 1244.416250][ T30] ? __pfx_kthread+0x10/0x10 [ 1244.420856][ T30] ret_from_fork+0x51e/0xb90 [ 1244.425481][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.430611][ T30] ? __switch_to+0xc7d/0x1450 [ 1244.435306][ T30] ? __pfx_kthread+0x10/0x10 [ 1244.439930][ T30] ret_from_fork_asm+0x1a/0x30 [ 1244.444817][ T30] [ 1244.448007][ T30] Kernel Offset: disabled [ 1244.452338][ T30] Rebooting in 86400 seconds..